We have an application that is found safe from Sophos Labs Team.
How would I exclude it in Central?
I have configured like this: $AppData\Local\Apps\2.0\CN5XLML3.Z9E but it does not works.
Mitigation DLLHijack
Policy DLLHijackGuard
Timestamp 2024-05-08T08:30:53
Platform 10.0.22631/x64 v3 06_97*
PID 8876
WoW x86
Enabled 08FD2EB040000004
Silent 0080000000000000
Application C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\GCL.Dictionary.CoreWin.Offline.exe
Created 2024-05-08T04:11:41
Modified 2024-05-08T04:11:39
Description GCL.Dictionary.CoreWin.Offline 1.0
OUTBREAK MODE
\??\C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\ucrtbase.dll blocked from loading, loading from \??\C:\Windows\system32\ instead
Loaded Modules (195)
-----------------------------------------------------------------------------
00E30000-00E70000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\GCL.Dictionary.CoreWin.Offline.exe (),
version:
087D0000-08C28000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\GCL.Dictionary.CoreWin.Offline.dll (),
version:
08C70000-08C7E000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Runtime.dll (),
version:
08C80000-09E36000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\DevExpress.Utils.v21.2.dll (),
version:
09E40000-0A350000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\DevExpress.Data.v21.2.dll (),
version:
0A360000-0A37C000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\netstandard.dll (),
version:
0A3A0000-0A3A8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Threading.Thread.dll (),
version:
0C6B0000-0C6FC000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\AutoMapper.dll (),
version:
0C710000-0C882000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\GCL.Dictionary.ClientAPI.dll (),
version:
0C940000-0CA7A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\AccountSystem.DictionaryAPI.Infrastructure.dll (),
version:
0CF60000-0CF68000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Reflection.Emit.dll (),
version:
0FB20000-0FBF0000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\NLog.dll (),
version:
0FC40000-0FC4A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Xml.ReaderWriter.dll (),
version:
0FC90000-0FC98000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Text.Encoding.Extensions.dll (),
version:
0FDC0000-0FDC8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Threading.Overlapped.dll (),
version:
107C0000-1086E000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Newtonsoft.Json.dll (),
version:
10880000-108A4000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\SSOLibStd.Win.dll (),
version:
108B0000-108CE000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\SSOLibStd.Services.dll (),
version:
10920000-10928000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Threading.ThreadPool.dll (),
version:
10CC0000-10CD6000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.DependencyInjection.dll (),
version:
10CE0000-10CF0000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.Options.dll (),
version:
10CF0000-10CFE000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.DependencyInjection.Abstractions.dll (),
version:
10D00000-10D0A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.Configuration.Abstractions.dll (),
version:
10D10000-10D1A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.Configuration.dll (),
version:
10D20000-10D2A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.Configuration.Json.dll (),
version:
10D30000-10D38000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.FileProviders.Abstractions.dll (),
version:
10D50000-10D5A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.Configuration.FileExtensions.dll (),
version:
10D60000-10D68000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Runtime.Extensions.dll (),
version:
10D70000-10D7A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.IO.FileSystem.dll (),
version:
10D80000-10D8C000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.FileProviders.Physical.dll (),
version:
10D90000-10D9E000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.Primitives.dll (),
version:
10DB0000-10DB8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Threading.Tasks.dll (),
version:
10DC0000-10DC8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Threading.Timer.dll (),
version:
10DD0000-10DDE000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.FileSystemGlobbing.dll (),
version:
10E00000-10E08000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Numerics.Vectors.dll (),
version:
10E20000-10E28000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.Options.ConfigurationExtensions.dll (),
version:
10E40000-10E4A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Extensions.Configuration.Binder.dll (),
version:
10E50000-10E58000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Diagnostics.Tracing.dll (),
version:
10EB0000-10EB8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Diagnostics.Debug.dll (),
version:
10EF0000-10EF8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Xml.XmlSerializer.dll (),
version:
10F00000-10FAE000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\DevExpress.Data.Desktop.v21.2.dll (),
version:
13410000-13418000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Accessibility.dll (),
version:
13450000-13458000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Reflection.Emit.Lightweight.dll (),
version:
13460000-13468000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Reflection.Emit.ILGeneration.dll (),
version:
13470000-13478000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Reflection.Primitives.dll (),
version:
15290000-15A04000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\DevExpress.XtraEditors.v21.2.dll (),
version:
15AC0000-15AC8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Resources.ResourceManager.dll (),
version:
15B40000-15B52000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\mscorlib.dll (),
version:
16D70000-16D78000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Drawing.dll (),
version:
16ED0000-16EF4000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\app.Common.v8a.dll (),
version:
16F70000-172F6000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\DevExpress.XtraGrid.v21.2.dll (),
version:
180B0000-180D0000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\app.StdCommon.Core.dll (),
version:
180D0000-180E2000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\app.StdCommon.TwoFishEncrypt.dll (),
version:
18320000-1898E000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\DevExpress.XtraBars.v21.2.dll (),
version:
189F0000-189FE000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\WCFServiceCompany.dll (),
version:
18BD0000-18BDA000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.ServiceModel.Primitives.dll (),
version:
18BF0000-18E2A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Private.ServiceModel.dll (),
version:
18E70000-18E82000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\app.StdCommon.Services.dll (),
version:
18EA0000-18EA8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.ServiceModel.Http.dll (),
version:
18EC0000-18EC8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Runtime.Serialization.Xml.dll (),
version:
6DC60000-6DCA7000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\UIAutomationTypes.dll (),
version:
6DCB0000-6DCD2000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.NetworkInformation.dll (),
version:
6DD70000-6DDB0000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.Quic.dll (),
version:
6DDB0000-6DE42000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Collections.Immutable.dll (),
version:
6DE50000-6DF55000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Reflection.Metadata.dll (),
version:
6E0E0000-6E0F6000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.NameResolution.dll (),
version:
6E170000-6E185000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Security.Claims.dll (),
version:
6E190000-6E1B2000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Security.Principal.Windows.dll (),
version:
6E1C0000-6E1CE000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.WebHeaderCollection.dll (),
version:
6E1D0000-6E224000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Diagnostics.DiagnosticSource.dll (),
version:
6E230000-6E23F000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Reflection.DispatchProxy.dll (),
version:
6E250000-6E258000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.WebProxy.dll (),
version:
6E260000-6E3EE000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.Http.dll (),
version:
6E3F0000-6E46A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Security.Cryptography.X509Certificates.dll (),
version:
6E470000-6E477000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Runtime.Serialization.Primitives.dll (),
version:
6E480000-6E653000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Private.DataContractSerialization.dll (),
version:
6E660000-6E6F6000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.Security.dll (),
version:
6E700000-6E709000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.ServicePoint.dll (),
version:
6E710000-6E76D000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\UIAutomationClient.dll (),
version:
6EC00000-6EC40000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Diagnostics.Process.dll (),
version:
6EEA0000-6EEBB000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Resources.Extensions.dll (),
version:
6F210000-6F223000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Win32.Registry.dll (),
version:
6F2F0000-6F32C000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.IO.Compression.dll (),
version:
6F330000-6F345000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Collections.NonGeneric.dll (),
version:
6F3F0000-6F403000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Win32.SystemEvents.dll (),
version:
6F7B0000-6F7D8000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Security.Permissions.dll (),
version:
6F7E0000-6F829000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Runtime.Serialization.Formatters.dll (),
version:
6F830000-6F854000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.WebClient.dll (),
version:
6F860000-6F93A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Configuration.ConfigurationManager.dll (),
version:
6F940000-6FA89000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Text.Json.dll (),
version:
6FA90000-6FAEA000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Private.Xml.Linq.dll (),
version:
6FAF0000-6FB97000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Security.Cryptography.Algorithms.dll (),
version:
6FBA0000-6FC45000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.ComponentModel.TypeConverter.dll (),
version:
6FC50000-6FCC0000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.Sockets.dll (),
version:
6FCC0000-6FF5C000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Data.Common.dll (),
version:
6FF60000-706DF000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Private.Xml.dll (),
version:
706E0000-70A36000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Linq.Expressions.dll (),
version:
70A40000-70C3E000 C:\Windows\SYSTEM32\icu.dll (The ICU Project),
version: 68, 2, 0, 10 (WinBuild.160101.0800)
70C40000-70D29000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Drawing.Common.dll (),
version:
70D30000-70DE4000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Windows.Forms.Primitives.dll (),
version:
70DF0000-719D9000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Windows.Forms.dll (),
version:
719E0000-72369000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Private.CoreLib.dll (),
version:
729E0000-72A58000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.Mail.dll (),
version:
72AD0000-72AE0000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Windows.Extensions.dll (),
version:
72AE0000-72AE9000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.ComponentModel.EventBasedAsync.dll (),
version:
72B60000-72B68000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Runtime.InteropServices.RuntimeInformation.dll (),
version:
72B70000-72B85000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Security.Cryptography.Encoding.dll (),
version:
72B90000-72BB9000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Security.Cryptography.Csp.dll (),
version:
72ED0000-72ED6000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Runtime.CompilerServices.Unsafe.dll (),
version:
72EE0000-72EFD000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Security.Cryptography.Primitives.dll (),
version:
72F00000-72F09000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Diagnostics.FileVersionInfo.dll (),
version:
72F10000-72F40000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Net.Primitives.dll (),
version:
73010000-73020000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.IO.FileSystem.Watcher.dll (),
version:
73020000-7303D000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Diagnostics.TraceSource.dll (),
version:
73040000-7307C000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Private.Uri.dll (),
version:
73170000-73175000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.ComponentModel.dll (),
version:
73180000-731FB000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Text.RegularExpressions.dll (),
version:
73860000-73869000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Diagnostics.StackTrace.dll (),
version:
73870000-73885000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.ObjectModel.dll (),
version:
73890000-73905000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Linq.dll (),
version:
74280000-742B6000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Collections.Concurrent.dll (),
version:
74340000-7436A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.ComponentModel.Annotations.dll (),
version:
74370000-74398000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Memory.dll (),
version:
743A0000-743B2000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Threading.dll (),
version:
743D0000-743D6000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\Microsoft.Win32.Primitives.dll (),
version:
743E0000-7441A000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Collections.dll (),
version:
74420000-74435000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Collections.Specialized.dll (),
version:
74440000-7445F000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Drawing.Primitives.dll (),
version:
74460000-74471000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.ComponentModel.Primitives.dll (),
version:
74640000-7464C000 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\System.Runtime.InteropServices.dll (),
version:
74A30000-74B31000 C:\Windows\SysWOW64\hmpalert.dll (Sophos Limited),
version: 3.9.3.774
75740000-759B4000 C:\Windows\SysWOW64\KernelBase.dll (Microsoft Corporation),
version: 10.0.22621.2861 (WinBuild.160101.0800)
76B10000-76C00000 C:\Windows\SysWOW64\kernel32.dll (Microsoft Corporation),
version: 10.0.22621.2506 (WinBuild.160101.0800)
76EC0000-77071000 C:\Windows\SysWOW64\ntdll.dll (Microsoft Corporation),
version: 10.0.22621.2506 (WinBuild.160101.0800)
- MS skipped (61) -
Process Trace
1 C:\Users\ThuyLTT\AppData\Local\Apps\2.0\CN5XLML3.Z9E\3PY61YT8.7L2\gcl...tion_106712a90be3a430_07e8.2789_6a47ec7408dc4805\GCL.Dictionary.CoreWin.Offline.exe [8876] *
2 C:\Windows\explorer.exe [1340] *
Dropped Files
Thumbprint
c4ee4bc7ca2a7c0a93629472255f7058d270baab88b27bab1c3735977941a341
Module based thumbprint (pfn-mod)
495d6a33150690e01e0cf63466d8bb2206de277624fe192e87d0129a9f2b0c57
Process based thumbprint (pfn)
0598c692afc902cb0e8bff66d5c2cbfe46a20020c6d9992c74e8429eb29cc52e
