Windows Analysis Report
SourceTreeSetup-3.4.19.exe

Overview

General Information

Sample name: SourceTreeSetup-3.4.19.exe
Analysis ID: 1523483
MD5: 4bd79bab4339cac6714cd1ff595ccff4
SHA1: eaeea52764e69b54672fd6dd358139f26310e5fd
SHA256: 8d6d66e4c5079bbd512269029a2d992f20a6696c5782dcb02397a823905f4505
Infos:

Detection

Score: 36
Range: 0 - 100
Whitelisted: false
Confidence: 20%

Compliance

Score: 36
Range: 0 - 100

Signatures

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)
Yara detected Generic Downloader
Allocates memory with a write watch (potentially for evading sandboxes)
Contains functionality for execution timing, often used to detect debuggers
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Detected potential crypto function
Dropped file seen in connection with other malware
Drops PE files
EXE planting / hijacking vulnerabilities found
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
Found inlined nop instructions (likely shell or obfuscated code)
HTTP GET or POST without a user agent
JA3 SSL client fingerprint seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
PE file contains executable resources (Code or Archives)
Queries the volume information (name, serial number etc) of a device
Sample file is different than original file name gathered from version info
Stores files to the Windows start menu directory
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)

Classification

EXE planting / hijacking vulnerabilities found
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\getopt.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\patch.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\puttygen.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\stree_gri.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\pageant.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\plink.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\7z.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\Update.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\SourceTree.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\Askpass.exe Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe EXE: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION SourceTree.exe Jump to behavior

Compliance
barindex
EXE planting / hijacking vulnerabilities found
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\getopt.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\patch.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\puttygen.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\stree_gri.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\pageant.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\plink.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\7z.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\Update.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\SourceTree.exe Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe EXE: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\Askpass.exe Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe EXE: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Jump to behavior
Uses 32bit PE files
Source: SourceTreeSetup-3.4.19.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SourceTree Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SquirrelTemp\SquirrelSetup.log Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\extras\licenses\EULA.pdf Jump to behavior
Source: SourceTreeSetup-3.4.19.exe Static PE information: certificate valid
Source: unknown HTTPS traffic detected: 3.161.73.137:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown HTTPS traffic detected: 3.161.73.137:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: SourceTreeSetup-3.4.19.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: Binary string: C:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.GutenbergTextView\GutenbergTextView\obj\Release\Atlassian.GutenbergTextView.pdb source: SourceTree.exe, 00000004.00000002.2440161177.000001D7F4A92000.00000002.00000001.01000000.0000002E.sdmp
Source: Binary string: /_/src/Logging/Logging.Configuration/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Configuration.pdb source: Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039E8000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: /_/src/Configuration/Config/src/obj/Release/netstandard2.0/Microsoft.Extensions.Configuration.pdb source: SourceTree.exe, 00000004.00000002.2433921178.000001D7F4302000.00000002.00000001.01000000.0000001D.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileList.TreeView.Wpf\obj\Debug\SourceTree.Ui.FileList.TreeView.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2447157957.000001D7F5192000.00000002.00000001.01000000.0000004F.sdmp
Source: Binary string: C:\Users\mpagani\Source\AppConsult\Windows-AppConsult-Tools-DesktopBridgeHelpers\DesktopBridge.Helpers\obj\Debug\net45\DesktopBridge.Helpers.pdb source: SourceTree.exe, 00000004.00000002.2439240279.000001D7F4992000.00000002.00000001.01000000.00000029.sdmp
Source: Binary string: E:\A\_work\339\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netstandard\System.Threading.Tasks.Extensions.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003969000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.CommitContainer.Wpf\obj\Debug\SourceTree.UI.CommitContainer.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2446851536.000001D7F5142000.00000002.00000001.01000000.0000004B.sdmp
Source: Binary string: !bin\;!bld\;!ClientBin\;!Debug\;!obj\;!AppPackages\;!Release\;!TestResults\;!*.*~!*.appx!*.appxrecipe;!*.cache!*.cer!*.dbmdl!*.dll!*.docstates!*.docstates.suo;!*.err!*.exe!*.ilk!*.ipch!*.lastbuildstate!*.lce!*.ldf!*.lib!*.log!*.mdf!*.msscci!*.ncb!*.obj!*.opensdf!*.pch!*.pdb!*.pri!*.res!*.resources!*.sdf!*.suo!*.swp!*.temp!*.tfOrig*!*.tlog!*.tmp!*.trx!*.user!*.unsuccessfulbuild!*.v11.suo!*.vcxproj.user!*.vsix!*.vsmdi!*.vspscc!*.vssettings!*.vssscc!*.wrn!*.xap;!.metadata\ source: Update.exe, 00000003.00000002.2337346163.000000000341D000.00000004.00000800.00020000.00000000.sdmp, Microsoft.TeamFoundation.VersionControl.Common.dll.3.dr
Source: Binary string: /_/src/Options/Options/src/obj/Release/netstandard2.0/Microsoft.Extensions.Options.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2423455096.000001D7DB5A2000.00000002.00000001.01000000.00000015.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.ExtendedClient\MS.TF.TestManagement.Client\Microsoft.TeamFoundation.TestManagement.Client.pdb source: Microsoft.TeamFoundation.TestManagement.Client.dll.3.dr
Source: Binary string: c:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.Utilities\Atlassian.Utilities\obj\Release\Atlassian.Utilities.pdb,*N* @*_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2440307772.000001D7F4AB2000.00000002.00000001.01000000.00000030.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Api.Account.Pat\obj\Debug\netstandard2.0\Sourcetree.Api.Account.Pat.pdbSHA256y source: SourceTree.exe, 00000004.00000002.2441216299.000001D7F4B72000.00000002.00000001.01000000.00000037.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.ExtendedClient\MS.TF.Lab.TestIntegration.Client\Microsoft.TeamFoundation.Lab.TestIntegration.Client.pdb source: Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll.3.dr
Source: Binary string: LIB/NET45/MONO.CECIL.PDB.DLL source: Update.exe, 00000003.00000002.2337346163.0000000003617000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\saha340\Projects\Git\WPF-Task-Dialog\TaskDialog\obj\Release\TaskDialog.pdb source: SourceTree.exe, 00000004.00000002.2434017295.000001D7F4312000.00000002.00000001.01000000.0000001E.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Host.GitLab\obj\Debug\netstandard2.0\Sourcetree.Host.GitLab.pdb source: SourceTree.exe, 00000004.00000002.2442391292.000001D7F4C82000.00000002.00000001.01000000.00000043.sdmp
Source: Binary string: C:\projects\Squirrel.Windows\build\obj\Squirrel\Release\net45\Squirrel.pdbSHA256/ source: SourceTree.exe, 00000004.00000002.2450551036.000001D7F55B2000.00000002.00000001.01000000.00000060.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\projects\libgit2sharp-nativebinaries\libgit2\build\RelWithDebInfo\git2-106a5f2.pdb source: git2-106a5f2.dll0.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Host.Identity\obj\Debug\SourceTree.Api.Host.Identity.pdb source: SourceTree.exe, 00000004.00000002.2441536704.000001D7F4BB2000.00000002.00000001.01000000.0000003B.sdmp, SourceTree.Api.Host.Identity.dll.3.dr
Source: Binary string: c:\Users\Matthew.Davey\Dropbox\Checkouts\WeeGems\WeeGems.Option\obj\Release\WeeGems.Option.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, WeeGems.Option.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Bitbucket.Server\obj\Debug\SourceTree.Host.Bitbucket.Server.pdb` source: SourceTree.exe, 00000004.00000002.2446605100.000001D7F50F2000.00000002.00000001.01000000.00000048.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Api.Account.Pat\obj\Debug\netstandard2.0\Sourcetree.Api.Account.Pat.pdb source: SourceTree.exe, 00000004.00000002.2441216299.000001D7F4B72000.00000002.00000001.01000000.00000037.sdmp
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dll@\]q$ source: Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Vssf.Client\MS.VS.Services.Common\Microsoft.VisualStudio.Services.Common.pdb source: SourceTree.exe, 00000004.00000002.2451809086.000001D7F5702000.00000002.00000001.01000000.00000062.sdmp, Microsoft.VisualStudio.Services.Common.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Bitbucket\obj\Debug\SourceTree.Host.Bitbucket.pdb source: SourceTree.exe, 00000004.00000002.2442579500.000001D7F4CA2000.00000002.00000001.01000000.00000045.sdmp
Source: Binary string: C:\agent1\_work\27\s\src\Microsoft.IdentityModel.Clients.ActiveDirectory.Platform\obj\Release\net45\Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.pdb source: Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll.3.dr
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dll@\]q source: Update.exe, 00000003.00000002.2337346163.00000000033B9000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Api.Framework\obj\Debug\Sourcetree.Api.Framework.pdbHmbm Tm_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441452133.000001D7F4BA2000.00000002.00000001.01000000.0000003A.sdmp
Source: Binary string: /_/src/Logging/Logging.Configuration/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Configuration.pdbSHA256" source: Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039E8000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003928000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2447827174.000001D7F5262000.00000002.00000001.01000000.00000053.sdmp
Source: Binary string: $]qFC:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.Pdb.dll source: Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\paulb\code\Squirrel\squirrel.windows\src\Setup\bin\Release\Setup.pdb source: SourceTreeSetup-3.4.19.exe
Source: Binary string: E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Collections.Immutable\netstandard\System.Collections.Immutable.pdb source: SourceTree.exe, 00000004.00000002.2447464343.000001D7F5212000.00000002.00000001.01000000.00000052.sdmp
Source: Binary string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb@w source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Hg\obj\Debug\SourceTree.Dvcs.Hg.pdbt! source: SourceTree.exe, 00000004.00000002.2442194647.000001D7F4C52000.00000002.00000001.01000000.00000042.sdmp, SourceTree.Dvcs.Hg.dll.3.dr
Source: Binary string: mscorlib.pdb source: SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Composition.AttributedModel\netstandard\System.Composition.AttributedModel.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2448554556.000001D7F5372000.00000002.00000001.01000000.00000058.sdmp
Source: Binary string: /_/src/DependencyInjection/DI.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdbSHA2562 source: Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: ReactiveUI.pdb source: SourceTree.exe, 00000004.00000002.2448615694.000001D7F5392000.00000002.00000001.01000000.00000059.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\SourceTree.Api.Analytics\obj\Debug\SourceTree.Api.Analytics.pdb source: SourceTree.exe, 00000004.00000002.2441296524.000001D7F4B82000.00000002.00000001.01000000.00000038.sdmp
Source: Binary string: $]q4http://defaultcontainer/lib/net45/Mono.Cecil.Pdb.dll`,]q4http://defaultcontainer/lib/net45/Mono.Cecil.Pdb.dlld source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.FileListContainer.NoStaging.Wpf\obj\Debug\SourceTree.UI.FileListContainer.NoStaging.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2447222210.000001D7F51A2000.00000002.00000001.01000000.00000050.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Accounts.Windows\obj\Debug\SourceTree.Accounts.Windows.pdb source: SourceTree.exe, 00000004.00000002.2440385499.000001D7F4AC2000.00000002.00000001.01000000.00000031.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\Sourcetree.Analytics.Emau\obj\Debug\netstandard2.0\Sourcetree.Analytics.Emau.pdb source: SourceTree.exe, 00000004.00000002.2440949154.000001D7F4B42000.00000002.00000001.01000000.00000034.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Hg\obj\Debug\SourceTree.Dvcs.Hg.pdb source: SourceTree.exe, 00000004.00000002.2442194647.000001D7F4C52000.00000002.00000001.01000000.00000042.sdmp, SourceTree.Dvcs.Hg.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Account\obj\Debug\SourceTree.Api.Account.pdb source: SourceTree.exe, 00000004.00000002.2439039596.000001D7F4962000.00000002.00000001.01000000.00000026.sdmp
Source: Binary string: /_/src/Logging/Logging.Console/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Console.pdb source: Update.exe, 00000003.00000002.2337346163.00000000039F4000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003A0D000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423340776.000001D7DB562000.00000002.00000001.01000000.00000013.sdmp, Microsoft.Extensions.Logging.Console.dll.3.dr
Source: Binary string: c:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.PathTrimmingTextBlock\Atlassian.PathTrimmingTextBlock\obj\Release\Atlassian.PathTrimmingTextBlock.pdb source: SourceTree.exe, 00000004.00000002.2440248560.000001D7F4AA2000.00000002.00000001.01000000.0000002F.sdmp
Source: Binary string: C:\Users\Administrator\code2\ae3e0d9d-8f1c-53dc-b46b-65dce19487a8\1677043917973\build\Bitbucket.Libraries\BitbucKitServer.Net\BitbucKitServer.Net.Api\obj\Release\BitbucKitServer.Net.Api.pdb source: SourceTree.exe, 00000004.00000002.2448490605.000001D7F5362000.00000002.00000001.01000000.00000057.sdmp, BitbucKitServer.Net.Api.dll.3.dr
Source: Binary string: C:\projects\Squirrel.Windows\vendor\nuget\src\Core\obj\Coverage\NuGet.Squirrel.pdb source: SourceTree.exe, 00000004.00000002.2456556762.000001D7F5D62000.00000002.00000001.01000000.00000067.sdmp
Source: Binary string: /_/src/Configuration/Config.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.Configuration.Abstractions.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2434178994.000001D7F4332000.00000002.00000001.01000000.0000001F.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Atlassianaccount\obj\Debug\SourceTree.Host.AtlassianAccount.pdb<GVG HG_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441882463.000001D7F4C02000.00000002.00000001.01000000.00000040.sdmp
Source: Binary string: C:\projects\Squirrel.Windows\build\obj\Squirrel\Release\net45\Squirrel.pdb source: SourceTree.exe, 00000004.00000002.2450551036.000001D7F55B2000.00000002.00000001.01000000.00000060.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Hg.Ui.Wpf\obj\Debug\SourceTree.Dvcs.Hg.Ui.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2441723940.000001D7F4BE2000.00000002.00000001.01000000.0000003E.sdmp
Source: Binary string: Splat.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2448339623.000001D7F5342000.00000002.00000001.01000000.00000056.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api\obj\Debug\netstandard2.0\SourceTree.Api.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2423381219.000001D7DB572000.00000002.00000001.01000000.00000014.sdmp
Source: Binary string: C:\projects\sharpcompress\src\SharpCompress\obj\Release\net45\SharpCompress.pdbL source: SharpCompress.dll.3.dr
Source: Binary string: C:\projects\libgit2sharp-nativebinaries\libgit2\build\RelWithDebInfo\git2-106a5f2.pdb~ source: git2-106a5f2.dll0.3.dr
Source: Binary string: Mono.Cecil.Pdb.dll source: Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: Squirrel.pdb source: SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: d:\dd\WebToolsExtensions\SDK2.4\intermediate\dev12\Release\Publish\Microsoft.Web.XmlTransform.pdb source: Microsoft.Web.XmlTransform.dll.3.dr
Source: Binary string: /_/src/Configuration/Config.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.Configuration.Abstractions.pdb source: SourceTree.exe, 00000004.00000002.2434178994.000001D7F4332000.00000002.00000001.01000000.0000001F.sdmp
Source: Binary string: E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003883000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000385D000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb source: SourceTree.exe, 00000004.00000002.2450431929.000001D7F5562000.00000002.00000001.01000000.0000005F.sdmp
Source: Binary string: c:\Users\Kent\Repository\wpfconverters\Src\Kent.Boogaart.Converters\obj\FX45 Release\Kent.Boogaart.Converters.pdb source: SourceTree.exe, 00000007.00000002.3944487573.000001D3E9B62000.00000002.00000001.01000000.00000068.sdmp, Kent.Boogaart.Converters.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Bitbucket.Libraries\Bitbucket.Net\BitbucKit.Net.Refit\obj\Release\netstandard2.0\BitbucKit.Net.Refit.pdb source: BitbucKit.Net.Refit.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.CustomActions\obj\Debug\SourceTree.Api.CustomActions.pdb source: SourceTree.exe, 00000004.00000002.2438966201.000001D7F4952000.00000002.00000001.01000000.00000025.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\Sourcetree.Analytics.Emau\obj\Debug\netstandard2.0\Sourcetree.Analytics.Emau.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2440949154.000001D7F4B42000.00000002.00000001.01000000.00000034.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\obj\Debug\Sourcetree.pdb source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr
Source: Binary string: E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038A9000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Programming\Github\ColorCode-Universal\ColorCode.Core\obj\Release\netstandard1.4\ColorCode.Core.pdb source: SourceTree.exe, 00000004.00000002.2448953354.000001D7F53E2000.00000002.00000001.01000000.0000005A.sdmp
Source: Binary string: C:\Users\saha340\Projects\Git\WPF-Task-Dialog\TaskDialog\obj\Release\TaskDialog.pdbh} source: SourceTree.exe, 00000004.00000002.2434017295.000001D7F4312000.00000002.00000001.01000000.0000001E.sdmp
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Atlassian.Libraries\Atlassian.FastTree\Atlassian.FastTree\obj\Release\Atlassian.FastTree.pdbL source: SourceTree.exe, 00000004.00000002.2433562622.000001D7F42B2000.00000002.00000001.01000000.00000019.sdmp
Source: Binary string: /_/src/DependencyInjection/DI.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdb source: Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: Refit.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr
Source: Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb source: SourceTree.exe, 00000004.00000002.2449649910.000001D7F54A2000.00000002.00000001.01000000.0000005E.sdmp, Newtonsoft.Json.dll.3.dr
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.Client\MS.TF.SourceControl.WebApi\Microsoft.TeamFoundation.SourceControl.WebApi.pdb source: SourceTree.exe, 00000004.00000002.2454946478.000001D7F5AA2000.00000002.00000001.01000000.00000065.sdmp
Source: Binary string: System.Reactive.pdb source: SourceTree.exe, 00000004.00000002.2435844874.000001D7F4572000.00000002.00000001.01000000.00000022.sdmp
Source: Binary string: Splat.pdb source: SourceTree.exe, 00000004.00000002.2448339623.000001D7F5342000.00000002.00000001.01000000.00000056.sdmp
Source: Binary string: C:\projects\dragablz\Dragablz\obj\Release\net45\Dragablz.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2438673026.000001D7F48B2000.00000002.00000001.01000000.00000023.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Host.Scm\obj\Debug\SourceTree.Api.Host.Scm.pdb source: SourceTree.exe, 00000004.00000002.2441592815.000001D7F4BC2000.00000002.00000001.01000000.0000003C.sdmp, SourceTree.Api.Host.Scm.dll.3.dr
Source: Binary string: C:\projects\dragablz\Dragablz\obj\Release\net45\Dragablz.pdb source: SourceTree.exe, 00000004.00000002.2438673026.000001D7F48B2000.00000002.00000001.01000000.00000023.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Host\obj\Debug\SourceTree.Api.Host.pdblH source: SourceTree.exe, 00000004.00000002.2439097863.000001D7F4972000.00000002.00000001.01000000.00000027.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.UI.Wpf\obj\Debug\SourceTree.Api.UI.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2434288501.000001D7F4352000.00000002.00000001.01000000.00000021.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Hg.Ui.Wpf\obj\Debug\SourceTree.Dvcs.Hg.Ui.Wpf.pdbPUjU \U_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441723940.000001D7F4BE2000.00000002.00000001.01000000.0000003E.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\SourceTree.Analytics\obj\Debug\SourceTree.Analytics.pdbw] source: SourceTree.exe, 00000004.00000002.2440466472.000001D7F4AD2000.00000002.00000001.01000000.00000032.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileList.MultiColumn.Wpf\obj\Debug\SourceTree.Ui.FileList.MultiColumn.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2446905997.000001D7F5152000.00000002.00000001.01000000.0000004C.sdmp, SourceTree.Ui.FileList.MultiColumn.Wpf.dll.3.dr
Source: Binary string: C:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.GutenbergTextView\GutenbergTextView\obj\Release\Atlassian.GutenbergTextView.pdb, source: SourceTree.exe, 00000004.00000002.2440161177.000001D7F4A92000.00000002.00000001.01000000.0000002E.sdmp
Source: Binary string: /_/src/Options/Options/src/obj/Release/netstandard2.0/Microsoft.Extensions.Options.pdb source: SourceTree.exe, 00000004.00000002.2423455096.000001D7DB5A2000.00000002.00000001.01000000.00000015.sdmp
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Bitbucket.Libraries\Bitbucket.Net\BitbucKit.Net.Refit\obj\Release\netstandard2.0\BitbucKit.Net.Refit.pdbSHA256 source: BitbucKit.Net.Refit.dll.3.dr
Source: Binary string: /lib/net45/Mono.Cecil.Pdb.dll`,]q source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dll source: Update.exe, 00000003.00000002.2337346163.0000000003617000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, SourceTree-3.4.19-full.nupkg
Source: Binary string: DynamicData.pdb source: SourceTree.exe, 00000004.00000002.2452408234.000001D7F5832000.00000002.00000001.01000000.00000063.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.ExtendedClient\MS.TF.VersionControl.Common\Microsoft.TeamFoundation.VersionControl.Common.pdb source: Update.exe, 00000003.00000002.2337346163.000000000341D000.00000004.00000800.00020000.00000000.sdmp, Microsoft.TeamFoundation.VersionControl.Common.dll.3.dr
Source: Binary string: Refit.pdb source: Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.Window.Welcome.Wpf\obj\Debug\SourceTree.UI.Window.Welcome.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2433648563.000001D7F42C2000.00000002.00000001.01000000.0000001A.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Localisation\obj\Debug\netstandard2.0\SourceTree.Localisation.pdb source: SourceTree.exe, 00000004.00000002.2439314630.000001D7F49A2000.00000002.00000001.01000000.0000002A.sdmp, SourceTree.Localisation.dll.3.dr
Source: Binary string: E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Composition.AttributedModel\netstandard\System.Composition.AttributedModel.pdb source: SourceTree.exe, 00000004.00000002.2448554556.000001D7F5372000.00000002.00000001.01000000.00000058.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Account.Basic\obj\Debug\SourceTree.Api.Account.Basic.pdb source: SourceTree.exe, 00000004.00000002.2441038308.000001D7F4B52000.00000002.00000001.01000000.00000035.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Benchmark\obj\Debug\SourceTree.Api.Benchmark.pdb0gJg <g_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441369987.000001D7F4B92000.00000002.00000001.01000000.00000039.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Composition.VSMef.Net471\obj\Debug\Sourcetree.Composition.VSMef.Net48.pdb source: SourceTree.exe, 00000004.00000002.2433781146.000001D7F42E2000.00000002.00000001.01000000.0000001B.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Vssf.Client\MS.VS.Services.WebApi\Microsoft.VisualStudio.Services.WebApi.pdb source: SourceTree.exe, 00000004.00000002.2453128556.000001D7F5912000.00000002.00000001.01000000.00000064.sdmp
Source: Binary string: E:\A\_work\21\s\obj\Release\Microsoft.VisualStudio.Validation.Desktop\Microsoft.VisualStudio.Validation.pdb source: SourceTree.exe, 00000004.00000002.2439175850.000001D7F4982000.00000002.00000001.01000000.00000028.sdmp, Microsoft.VisualStudio.Validation.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Dvcs.Git.UI.Wpf\obj\Debug\Sourcetree.Dvcs.Git.UI.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2441660495.000001D7F4BD2000.00000002.00000001.01000000.0000003D.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\Atlassian.AnalyticsService.Client\obj\Debug\netstandard2.0\Atlassian.AnalyticsService.Client.pdb source: SourceTree.exe, 00000004.00000002.2440066015.000001D7F4A82000.00000002.00000001.01000000.0000002D.sdmp
Source: Binary string: C:\Programming\Github\ColorCode-Universal\ColorCode.Core\obj\Release\netstandard1.4\ColorCode.Core.pdbSHA256C source: SourceTree.exe, 00000004.00000002.2448953354.000001D7F53E2000.00000002.00000001.01000000.0000005A.sdmp
Source: Binary string: /_/src/Primitives/src/obj/Release/netstandard2.0/Microsoft.Extensions.Primitives.pdbSHA256T source: SourceTree.exe, 00000004.00000002.2438899966.000001D7F4942000.00000002.00000001.01000000.00000024.sdmp
Source: Binary string: F:\agent1\_work\20\s\src\System.IdentityModel.Tokens.Jwt\obj\release\net451\System.IdentityModel.Tokens.Jwt.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000385D000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.Client\MS.TF.Core.WebApi\Microsoft.TeamFoundation.Core.WebApi.pdb source: SourceTree.exe, 00000004.00000002.2449340169.000001D7F5432000.00000002.00000001.01000000.0000005C.sdmp, Microsoft.TeamFoundation.Core.WebApi.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Host.GitLab\obj\Debug\netstandard2.0\Sourcetree.Host.GitLab.pdbSHA256( source: SourceTree.exe, 00000004.00000002.2442391292.000001D7F4C82000.00000002.00000001.01000000.00000043.sdmp
Source: Binary string: D:\Documents\GitHub\NotificationsExtensions\Windows 10\NotificationsExtensions.Win10.NETCore\obj\Release\NotificationsExtensions.Win10.pdbTO source: SourceTree.exe, 00000007.00000002.3952572560.000001D3EEB62000.00000002.00000001.01000000.00000069.sdmp, NotificationsExtensions.Win10.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\Atlassian.AnalyticsService.Client\obj\Debug\netstandard2.0\Atlassian.AnalyticsService.Client.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2440066015.000001D7F4A82000.00000002.00000001.01000000.0000002D.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Host\obj\Debug\SourceTree.Api.Host.pdb source: SourceTree.exe, 00000004.00000002.2439097863.000001D7F4972000.00000002.00000001.01000000.00000027.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Host.Msft.TeamServices\obj\Debug\netstandard2.0\Sourcetree.Host.Msft.TeamServices.pdb source: SourceTree.exe, 00000004.00000002.2442486228.000001D7F4C92000.00000002.00000001.01000000.00000044.sdmp, Sourcetree.Host.Msft.TeamServices.dll.3.dr
Source: Binary string: DynamicData.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2452408234.000001D7F5832000.00000002.00000001.01000000.00000063.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Dvcs.Git.UI.Wpf\obj\Debug\Sourcetree.Dvcs.Git.UI.Wpf.pdb,VFV 8V_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441660495.000001D7F4BD2000.00000002.00000001.01000000.0000003D.sdmp
Source: Binary string: c:\personal_source\RestSharp\RestSharp.Net452\obj\Release\RestSharp.pdb source: SourceTree.exe, 00000004.00000002.2449131450.000001D7F5402000.00000002.00000001.01000000.0000005B.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.GitHub\obj\Debug\SourceTree.Host.GitHub.pdb source: SourceTree.exe, 00000004.00000002.2446703111.000001D7F5112000.00000002.00000001.01000000.00000049.sdmp
Source: Binary string: bin;bld;ClientBin;Debug;obj;AppPackages;Release;TestResults;FakesAssemblies;*.*~;*.appx;*.appxrecipe;*.build.csdef;*.cache;*.cer;*.class;*.dbmdl;*.dll;*.docstates;*.docstates.suo;*.DS_Store;*.err;*.exe;*.ilk;*.ipch;*.lastbuildstate;*.lce;*.ldf;*.lib;*.log;*.mdf;*.msscci;*.ncb;*.obj;*.opensdf;*.pch;*.pdb;*.pri;*.res;*.resources;*.sdf;*.suo;*.svn;*.swp;*.temp;*.tfOrig*;*.tlog;*.tmp;*.trx;*.user;*.unsuccessfulbuild;*.v11.suo;*.vcxproj.user;*.vsix;*.vsmdi;*.vspscc;*.vssettings;*.vssscc;*.wrn;*.xap;.metadata source: Update.exe, 00000003.00000002.2337346163.000000000341D000.00000004.00000800.00020000.00000000.sdmp, Microsoft.TeamFoundation.VersionControl.Common.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.Window.Welcome.Wpf\obj\Debug\SourceTree.UI.Window.Welcome.Wpf.pdbd source: SourceTree.exe, 00000004.00000002.2433648563.000001D7F42C2000.00000002.00000001.01000000.0000001A.sdmp
Source: Binary string: E:\A\_work\339\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netstandard\System.Threading.Tasks.Extensions.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003969000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\projects\bitbucket.org\atlassianlabs\askpass\Askpass.UI.Wpf\obj\Release\Askpass.UI.Wpf.pdb source: Askpass.UI.Wpf.dll.3.dr
Source: Binary string: d:\projects\bitbucket.org\atlassian\sourcetree\sourcetreeshared\SourceTreeShared\obj\Release\SourceTreeShared.pdb source: SourceTreeShared.dll.3.dr
Source: Binary string: ReactiveUI.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2448615694.000001D7F5392000.00000002.00000001.01000000.00000059.sdmp
Source: Binary string: C:\Users\mpagani\Source\AppConsult\Windows-AppConsult-Tools-DesktopBridgeHelpers\DesktopBridge.Helpers\obj\Debug\net45\DesktopBridge.Helpers.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2439240279.000001D7F4992000.00000002.00000001.01000000.00000029.sdmp
Source: Binary string: C:\dev\github\roaminglost\chimera.extensions.logging.log4net\src\chimera.extensions.logging.log4net\bin\Release\net451\chimera.extensions.logging.log4net.pdb source: SourceTree.exe, 00000004.00000002.2433835454.000001D7F42F2000.00000002.00000001.01000000.0000001C.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.Diff\obj\Debug\SourceTree.UI.Diff.pdb source: SourceTree.exe, 00000004.00000002.2447062008.000001D7F5172000.00000002.00000001.01000000.0000004E.sdmp
Source: Binary string: C:\projects\sharpcompress\src\SharpCompress\obj\Release\net45\SharpCompress.pdb source: SharpCompress.dll.3.dr
Source: Binary string: JC:\projects\Squirrel.Windows\build\obj\Squirrel\Release\net45\Squirrel.pdb source: SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\Users\Matthew.Davey\Dropbox\Checkouts\WeeGems\WeeGems.Require\obj\Release\WeeGems.Require.pdb source: Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2433207494.000001D7F3E02000.00000002.00000001.01000000.00000017.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\SourceTree.Api.Analytics\obj\Debug\SourceTree.Api.Analytics.pdbS*m* _*_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441296524.000001D7F4B82000.00000002.00000001.01000000.00000038.sdmp
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dlllH|m source: Update.exe, 00000003.00000002.2337346163.0000000003617000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: E:\A\_work\104\s\obj\Microsoft.VisualStudio.Composition\Release\net45\Microsoft.VisualStudio.Composition.pdb source: SourceTree.exe, 00000004.00000002.2440529503.000001D7F4AE2000.00000002.00000001.01000000.00000033.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileList.SingleColumn.Wpf\obj\Debug\SourceTree.Ui.FileList.SingleColumn.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2446991097.000001D7F5162000.00000002.00000001.01000000.0000004D.sdmp
Source: Binary string: c:\Users\Matthew.Davey\Dropbox\Checkouts\WeeGems\WeeGems.Option\obj\Release\WeeGems.Option.pdb(J>J 0J_CorDllMainmscoree.dll source: Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, WeeGems.Option.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.UI.Wpf\obj\Debug\SourceTree.Api.UI.Wpf.pdb< source: SourceTree.exe, 00000004.00000002.2434288501.000001D7F4352000.00000002.00000001.01000000.00000021.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileList.MultiColumn.Wpf\obj\Debug\SourceTree.Ui.FileList.MultiColumn.Wpf.pdbXnrn dn_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2446905997.000001D7F5152000.00000002.00000001.01000000.0000004C.sdmp, SourceTree.Ui.FileList.MultiColumn.Wpf.dll.3.dr
Source: Binary string: System.Reactive.pdbSHA256; source: SourceTree.exe, 00000004.00000002.2435844874.000001D7F4572000.00000002.00000001.01000000.00000022.sdmp
Source: Binary string: 4http://defaultcontainer/lib/net45/Mono.Cecil.Pdb.dll source: SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dll0y source: SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Dev\vvvv\SVG\Source\obj\Release\Svg.pdb source: Svg.dll.3.dr
Source: Binary string: c:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.PathTrimmingTextBlock\Atlassian.PathTrimmingTextBlock\obj\Release\Atlassian.PathTrimmingTextBlock.pdbH8^8 P8_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2440248560.000001D7F4AA2000.00000002.00000001.01000000.0000002F.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Host.Msft.TeamServices\obj\Debug\netstandard2.0\Sourcetree.Host.Msft.TeamServices.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2442486228.000001D7F4C92000.00000002.00000001.01000000.00000044.sdmp, Sourcetree.Host.Msft.TeamServices.dll.3.dr
Source: Binary string: d:\TCAgents\buildAgent1\work\c81b3924259cf9ee\github\slf4net\obj\Release\slf4net.pdb source: SourceTree.exe, 00000004.00000002.2434234756.000001D7F4342000.00000002.00000001.01000000.00000020.sdmp, slf4net.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Installer.Squirrel.UI\obj\Debug\Sourcetree.Installer.Squirrel.UI.pdb source: SourceTree.exe, 00000004.00000002.2446782077.000001D7F5132000.00000002.00000001.01000000.0000004A.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\SourceTree.Analytics\obj\Debug\SourceTree.Analytics.pdb source: SourceTree.exe, 00000004.00000002.2440466472.000001D7F4AD2000.00000002.00000001.01000000.00000032.sdmp
Source: Binary string: E:\A\_work\104\s\obj\Microsoft.VisualStudio.Composition\Release\net45\Microsoft.VisualStudio.Composition.pdb!k source: SourceTree.exe, 00000004.00000002.2440529503.000001D7F4AE2000.00000002.00000001.01000000.00000033.sdmp
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Atlassian.Libraries\Atlassian.FastTree\Atlassian.FastTree\obj\Release\Atlassian.FastTree.pdb source: SourceTree.exe, 00000004.00000002.2433562622.000001D7F42B2000.00000002.00000001.01000000.00000019.sdmp
Source: Binary string: D:\Documents\GitHub\NotificationsExtensions\Windows 10\NotificationsExtensions.Win10.NETCore\obj\Release\NotificationsExtensions.Win10.pdb source: SourceTree.exe, 00000007.00000002.3952572560.000001D3EEB62000.00000002.00000001.01000000.00000069.sdmp, NotificationsExtensions.Win10.dll.3.dr
Source: Binary string: Octokit.pdbMPDB source: SourceTree.exe, 00000004.00000002.2450903511.000001D7F5632000.00000002.00000001.01000000.00000061.sdmp
Source: Binary string: /lib/net45/Mono.Cecil.Pdb.dll source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003928000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: d:\dd\WebToolsExtensions\SDK2.4\intermediate\dev12\Release\Publish\Microsoft.Web.XmlTransform.pdb4: source: Microsoft.Web.XmlTransform.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Dvcs\obj\Debug\SourceTree.Api.Dvcs.pdb source: SourceTree.exe, 00000004.00000002.2439915527.000001D7F4A52000.00000002.00000001.01000000.0000002C.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Benchmark\obj\Debug\SourceTree.Api.Benchmark.pdb source: SourceTree.exe, 00000004.00000002.2441369987.000001D7F4B92000.00000002.00000001.01000000.00000039.sdmp
Source: Binary string: /_/src/Logging/Logging.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Abstractions.pdb source: Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423005552.000001D7D9C42000.00000002.00000001.01000000.00000011.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Atlassianaccount\obj\Debug\SourceTree.Host.AtlassianAccount.pdb source: SourceTree.exe, 00000004.00000002.2441882463.000001D7F4C02000.00000002.00000001.01000000.00000040.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Localisation\obj\Debug\netstandard2.0\SourceTree.Localisation.pdbSHA256, source: SourceTree.exe, 00000004.00000002.2439314630.000001D7F49A2000.00000002.00000001.01000000.0000002A.sdmp, SourceTree.Localisation.dll.3.dr
Source: Binary string: /_/src/Logging/Logging.Console/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Console.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.00000000039F4000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003A0D000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423340776.000001D7DB562000.00000002.00000001.01000000.00000013.sdmp, Microsoft.Extensions.Logging.Console.dll.3.dr
Source: Binary string: /_/src/Logging/Logging/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.00000000033B9000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423277919.000001D7DB552000.00000002.00000001.01000000.00000012.sdmp
Source: Binary string: /_/src/GongSolutions.WPF.DragDrop/obj/Release/net48/GongSolutions.WPF.DragDrop.pdb source: SourceTree.exe, 00000004.00000002.2448135668.000001D7F5322000.00000002.00000001.01000000.00000055.sdmp
Source: Binary string: D:\a\sourcetree-assets\sourcetree-assets\SourceTree.UI.Theme.Wpf\SourceTree.UI.Theme.Wpf\obj\Release\SourceTree.UI.Theme.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2442823138.000001D7F500C000.00000002.00000001.01000000.00000047.sdmp
Source: Binary string: c:\BuildAgent\work\220dc32f273423f2\Tooling\obj\Release\System.Net.Http.Formatting\System.Net.Http.Formatting.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003883000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038A9000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: ReactiveUI.WPF.pdbSHA256" source: SourceTree.exe, 00000004.00000002.2433396437.000001D7F40C2000.00000002.00000001.01000000.00000018.sdmp
Source: Binary string: c:\Users\Matthew.Davey\Dropbox\Checkouts\WeeGems\WeeGems.Require\obj\Release\WeeGems.Require.pdb@:^: P:_CorDllMainmscoree.dll source: Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2433207494.000001D7F3E02000.00000002.00000001.01000000.00000017.sdmp
Source: Binary string: /_/src/Logging/Logging/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.pdb source: Update.exe, 00000003.00000002.2337346163.00000000033B9000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423277919.000001D7DB552000.00000002.00000001.01000000.00000012.sdmp
Source: Binary string: E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Collections.Immutable\netstandard\System.Collections.Immutable.pdbSHA256* source: SourceTree.exe, 00000004.00000002.2447464343.000001D7F5212000.00000002.00000001.01000000.00000052.sdmp
Source: Binary string: C:\projects\libgit2sharp-nativebinaries\libgit2\build\build64\RelWithDebInfo\git2-106a5f2.pdb source: git2-106a5f2.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\stree_gri\obj\Debug\stree_gri.pdb source: stree_gri.exe.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Git\obj\Debug\SourceTree.Dvcs.Git.pdb source: SourceTree.exe, 00000004.00000002.2441961915.000001D7F4C12000.00000002.00000001.01000000.00000041.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Api.Framework\obj\Debug\Sourcetree.Api.Framework.pdb source: SourceTree.exe, 00000004.00000002.2441452133.000001D7F4BA2000.00000002.00000001.01000000.0000003A.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Installer.Squirrel\obj\Debug\Sourcetree.Installer.Squirrel.pdb source: SourceTree.exe, 00000004.00000002.2442714316.000001D7F4CC2000.00000002.00000001.01000000.00000046.sdmp
Source: Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2449649910.000001D7F54A2000.00000002.00000001.01000000.0000005E.sdmp, Newtonsoft.Json.dll.3.dr
Source: Binary string: /_/src/GongSolutions.WPF.DragDrop/obj/Release/net48/GongSolutions.WPF.DragDrop.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2448135668.000001D7F5322000.00000002.00000001.01000000.00000055.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.None\obj\Debug\SourceTree.Dvcs.None.pdb source: SourceTree.exe, 00000004.00000002.2441785716.000001D7F4BF2000.00000002.00000001.01000000.0000003F.sdmp
Source: Binary string: ReactiveUI.WPF.pdb source: SourceTree.exe, 00000004.00000002.2433396437.000001D7F40C2000.00000002.00000001.01000000.00000018.sdmp
Source: Binary string: /_/src/Primitives/src/obj/Release/netstandard2.0/Microsoft.Extensions.Primitives.pdb source: SourceTree.exe, 00000004.00000002.2438899966.000001D7F4942000.00000002.00000001.01000000.00000024.sdmp
Source: Binary string: C:\Users\Administrator\code2\ae3e0d9d-8f1c-53dc-b46b-65dce19487a8\1677043917973\build\Bitbucket.Libraries\BitbucKitServer.Net\BitbucKitServer.Net.Refit\obj\Release\BitbucKitServer.Net.Refit.pdb source: SourceTree.exe, 00000004.00000002.2433092664.000001D7F3DF2000.00000002.00000001.01000000.00000016.sdmp
Source: Binary string: C:\projects\gitlabapiclient\src\GitLabApiClient\obj\Release\netstandard2.0\GitLabApiClient.pdb source: SourceTree.exe, 00000004.00000002.2449464204.000001D7F5462000.00000002.00000001.01000000.0000005D.sdmp
Source: Binary string: c:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.Utilities\Atlassian.Utilities\obj\Release\Atlassian.Utilities.pdb source: SourceTree.exe, 00000004.00000002.2440307772.000001D7F4AB2000.00000002.00000001.01000000.00000030.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileListContainer.Split.Wpf\obj\Debug\SourceTree.Ui.FileListContainer.Split.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2447311337.000001D7F51B2000.00000002.00000001.01000000.00000051.sdmp
Source: Binary string: c:\projects\bitbucket.org\atlassianlabs\askpass\Askpass.UI.Wpf\obj\Release\Askpass.UI.Wpf.pdbH source: Askpass.UI.Wpf.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Microsoft.Alm\obj\Debug\Microsoft.Alm.pdb source: Microsoft.Alm.dll.3.dr
Source: Binary string: /_/src/Configuration/Config/src/obj/Release/netstandard2.0/Microsoft.Extensions.Configuration.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2433921178.000001D7F4302000.00000002.00000001.01000000.0000001D.sdmp
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Bitbucket.Libraries\Bitbucket.Net\BitbucKit.Net.Api\obj\Release\netstandard2.0\BitbucKit.Net.Api.pdb source: SourceTree.exe, 00000004.00000002.2448014407.000001D7F5312000.00000002.00000001.01000000.00000054.sdmp, BitbucKit.Net.Api.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Bitbucket.Libraries\Bitbucket.Net\BitbucKit.Net.Api\obj\Release\netstandard2.0\BitbucKit.Net.Api.pdbSHA256R source: SourceTree.exe, 00000004.00000002.2448014407.000001D7F5312000.00000002.00000001.01000000.00000054.sdmp, BitbucKit.Net.Api.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Bitbucket.Server\obj\Debug\SourceTree.Host.Bitbucket.Server.pdb source: SourceTree.exe, 00000004.00000002.2446605100.000001D7F50F2000.00000002.00000001.01000000.00000048.sdmp
Source: Binary string: /_/src/Logging/Logging.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Abstractions.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423005552.000001D7D9C42000.00000002.00000001.01000000.00000011.sdmp
Source: Binary string: C:\projects\libgit2sharp-nativebinaries\libgit2\build\build64\RelWithDebInfo\git2-106a5f2.pdb| source: git2-106a5f2.dll.3.dr
Source: Binary string: /LIB/NET45/MONO.CECIL.PDB.DLL source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api\obj\Debug\netstandard2.0\SourceTree.Api.pdb source: SourceTree.exe, 00000004.00000002.2423381219.000001D7DB572000.00000002.00000001.01000000.00000014.sdmp
Source: Binary string: c:\TeamCity\buildAgent\work\1aad0b52fc40d6db\src\Core\obj\Release\NuGet.Core.pdb source: SourceTree.exe, 00000004.00000002.2455794809.000001D7F5CB2000.00000002.00000001.01000000.00000066.sdmp
Source: Binary string: Octokit.pdb source: SourceTree.exe, 00000004.00000002.2450903511.000001D7F5632000.00000002.00000001.01000000.00000061.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Account.OAuth.TwoZero\obj\Debug\SourceTree.Api.Account.OAuth.TwoZero.pdb source: SourceTree.exe, 00000004.00000002.2441120442.000001D7F4B62000.00000002.00000001.01000000.00000036.sdmp, SourceTree.Api.Account.OAuth.TwoZero.dll.3.dr
Found inlined nop instructions (likely shell or obfuscated code)
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then jmp 00007FF848F3A8F1h 4_2_00007FF848F3A838
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then jmp 00007FF849E44870h 4_2_00007FF849E446E5
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then jmp 00007FF849E44666h 4_2_00007FF849E444D6
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then jmp 00007FF849E41606h 4_2_00007FF849E4144E
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then jmp 00007FF849E43DA2h 4_2_00007FF849E43C01
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then dec eax 4_2_00007FF849E426D0
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then dec eax 4_2_00007FF849E427AE
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then jmp 00007FF848F2A871h 7_2_00007FF848F2A7A5
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4x nop then dec eax 7_2_00007FF849AE476D

Networking
barindex
Yara detected Generic Downloader
Source: Yara match File source: Update.exe, type: SAMPLE
Source: Yara match File source: 4.2.SourceTree.exe.1d7f5cb0000.86.unpack, type: UNPACKEDPE
Source: Yara match File source: 3.0.Update.exe.f80000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\RestSharp.dll, type: DROPPED
Source: Yara match File source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nuget.Core.dll, type: DROPPED
Source: Yara match File source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe, type: DROPPED
Source: Yara match File source: C:\Users\user\AppData\Local\SourceTree\Update.exe, type: DROPPED
HTTP GET or POST without a user agent
Source: global traffic HTTP traffic detected: GET /software/sourcetree/windows/ga/sourcetree_ga.ico HTTP/1.1Host: product-downloads.atlassian.comConnection: Keep-Alive
Source: global traffic HTTP traffic detected: GET /software/sourcetree/windows/ga/RELEASES?id=SourceTree&localVersion=3.4.19&arch=amd64 HTTP/1.1Host: product-downloads.atlassian.comConnection: Keep-Alive
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /software/sourcetree/windows/ga/sourcetree_ga.ico HTTP/1.1Host: product-downloads.atlassian.comConnection: Keep-Alive
Source: global traffic HTTP traffic detected: GET /software/sourcetree/windows/ga/RELEASES?id=SourceTree&localVersion=3.4.19&arch=amd64 HTTP/1.1Host: product-downloads.atlassian.comConnection: Keep-Alive
Source: global traffic DNS traffic detected: DNS query: product-downloads.atlassian.com
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3D32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2436809478.000001D7F46D1000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3CC0000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3936305714.000001D3E7A00000.00000004.00000020.00020000.00000000.sdmp, BitbucKit.Net.Refit.dll.3.dr, Askpass.UI.Wpf.dll.3.dr, BitbucKitServer.Net.Api.dll.3.dr, SourceTree.exe.3.dr, slf4net.dll.3.dr, SourceTree.Api.Host.Scm.dll.3.dr, stree_gri.exe.3.dr, git2-106a5f2.dll.3.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp, BitbucKit.Net.Refit.dll.3.dr, Askpass.UI.Wpf.dll.3.dr, BitbucKitServer.Net.Api.dll.3.dr, SourceTree.exe.3.dr, slf4net.dll.3.dr, SourceTree.Api.Host.Scm.dll.3.dr, stree_gri.exe.3.dr, git2-106a5f2.dll.3.dr, SourceTree.Api.Host.Identity.dll.3.dr, libintl3.dll.3.dr, Svg.dll.3.dr, BitbucKit.Net.Api.dll.3.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://cacerts.digicert.com/NETFoundationProjectsCodeSigningCA.crt0
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0=
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3D32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2436809478.000001D7F46D1000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3CC0000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3936305714.000001D3E7A00000.00000004.00000020.00020000.00000000.sdmp, BitbucKit.Net.Refit.dll.3.dr, Askpass.UI.Wpf.dll.3.dr, BitbucKitServer.Net.Api.dll.3.dr, SourceTree.exe.3.dr, slf4net.dll.3.dr, SourceTree.Api.Host.Scm.dll.3.dr, stree_gri.exe.3.dr, git2-106a5f2.dll.3.dr String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp, BitbucKit.Net.Refit.dll.3.dr, Askpass.UI.Wpf.dll.3.dr, BitbucKitServer.Net.Api.dll.3.dr, SourceTree.exe.3.dr, slf4net.dll.3.dr, SourceTree.Api.Host.Scm.dll.3.dr, stree_gri.exe.3.dr, git2-106a5f2.dll.3.dr, SourceTree.Api.Host.Identity.dll.3.dr, libintl3.dll.3.dr, Svg.dll.3.dr, BitbucKit.Net.Api.dll.3.dr String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://crl3.digicert.com/NETFoundationProjectsCodeSigningCA.crl0E
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3D32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2436809478.000001D7F46D1000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3CC0000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3936305714.000001D3E7A00000.00000004.00000020.00020000.00000000.sdmp, BitbucKit.Net.Refit.dll.3.dr, Askpass.UI.Wpf.dll.3.dr, BitbucKitServer.Net.Api.dll.3.dr, SourceTree.exe.3.dr, slf4net.dll.3.dr, SourceTree.Api.Host.Scm.dll.3.dr, stree_gri.exe.3.dr, git2-106a5f2.dll.3.dr String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://crl4.digicert.com/NETFoundationProjectsCodeSigningCA.crl0L
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: Update.exe, 00000003.00000002.2337346163.00000000037CC000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFB5B000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://d145e4fdyl6drh.cloudfront.net
Source: Update.exe, 00000003.00000002.2337346163.00000000037CC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://d145e4fdyl6drh.cloudfront.netd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/Readme.txt
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/Readme.txtd
Source: Update.exe, 00000003.00000002.2337346163.0000000003760000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC2AA000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/SourceTree.nuspec
Source: Update.exe, 00000003.00000002.2337346163.0000000003760000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/SourceTree.nuspecd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/_rels/.rels
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/_rels/.relsd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Atlassian.FastTree.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Atlassian.FastTree.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Atlassian.GutenbergTextView.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Atlassian.GutenbergTextView.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Atlassian.Utilities.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Atlassian.Utilities.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/BitbucKit.Net.Api.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/BitbucKit.Net.Api.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/BitbucKitServer.Net.Api.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/BitbucKitServer.Net.Api.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/BitbucKitServer.Net.Refit.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/BitbucKitServer.Net.Refit.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ColorCode.Core.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ColorCode.Core.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/DeltaCompressionDotNet.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/DeltaCompressionDotNet.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/DesktopBridge.Helpers.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/DesktopBridge.Helpers.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/DevOne.Security.Cryptography.BCrypt.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/DevOne.Security.Cryptography.BCrypt.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Dragablz.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Dragablz.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/DynamicData.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/DynamicData.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/GitLabApiClient.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/GitLabApiClient.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/GongSolutions.Wpf.DragDrop.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/GongSolutions.Wpf.DragDrop.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/HtmlAgilityPack.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/HtmlAgilityPack.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Kent.Boogaart.Converters.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Kent.Boogaart.Converters.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Kent.Boogaart.HelperTrinity.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Kent.Boogaart.HelperTrinity.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/LibGit2Sharp.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/LibGit2Sharp.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Alm.Authentication.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Alm.Authentication.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Alm.Git.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Alm.Git.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Alm.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Alm.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Expression.Interactions.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Expression.Interactions.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Configuration.Binder.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Configuration.Binder.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.DependencyInjection.Abstractions.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Logging.Abstractions.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Logging.Abstractions.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Logging.Configuration.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Logging.Configuration.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Logging.Console.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Logging.Console.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Options.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Options.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Primitives.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.Extensions.Primitives.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.IdentityModel.Clients.ActiveDirectory.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.IdentityModel.Clients.ActiveDirectory.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.IdentityModel.Logging.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.IdentityModel.Logging.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Build.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Build.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Build.Common.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Build.Common.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Build2.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Build2.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Common.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Common.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.DeleteTeamProject.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.DeleteTeamProject.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Diff.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Diff.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Discussion.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Discussion.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.DistributedTask.Common.Contracts.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.DistributedTask.Common.Contracts.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Git.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Git.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Lab.Common.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Lab.Common.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Lab.TestIntegration.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Lab.WorkflowIntegration.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Lab.WorkflowIntegration.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Policy.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Policy.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.ProjectManagement.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.ProjectManagement.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.SourceControl.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.SourceControl.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Test.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Test.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.TestImpact.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.TestImpact.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.TestManagement.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.TestManagement.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.TestManagement.Common.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.TestManagement.Common.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.TestManagement.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.TestManagement.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.VersionControl.Client.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.VersionControl.Client.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.VersionControl.Common.Integration.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.VersionControl.Common.Integration.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Wiki.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Wiki.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Work.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.Work.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.WorkItemTracking.Client.DataStoreLoader.d
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.WorkItemTracking.Client.QueryLanguage.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.WorkItemTracking.Proxy.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.WorkItemTracking.Proxy.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.WorkItemTracking.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.TeamFoundation.WorkItemTracking.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.VisualStudio.Composition.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.VisualStudio.Composition.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.VisualStudio.Services.Common.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.VisualStudio.Services.Common.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.VisualStudio.Services.WebApi.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.VisualStudio.Services.WebApi.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.VisualStudio.Validation.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.VisualStudio.Validation.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.WindowsAPICodePack.Shell.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Microsoft.WindowsAPICodePack.Shell.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Mono.Cecil.Mdb.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Mono.Cecil.Mdb.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Mono.Cecil.Pdb.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Mono.Cecil.Pdb.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Mono.Cecil.Rocks.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Mono.Cecil.Rocks.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Mono.Cecil.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Mono.Cecil.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/MvvmValidation.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/MvvmValidation.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Nito.AsyncEx.Tasks.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Nito.AsyncEx.Tasks.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Nito.Disposables.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Nito.Disposables.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/NuGet.Squirrel.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/NuGet.Squirrel.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Nuget.Core.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Nuget.Core.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Octokit.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Octokit.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ReactiveUI.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ReactiveUI.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Refit.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Refit.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/RestSharp.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/RestSharp.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Accounts.Windows.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Accounts.Windows.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Analytics.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Analytics.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Account.Basic.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Account.Basic.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Account.OAuth.TwoZero.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Account.OAuth.TwoZero.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Account.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Account.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Analytics.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Analytics.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Benchmark.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Benchmark.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.CustomActions.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.CustomActions.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Dvcs.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Dvcs.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Framework.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Framework.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Host.Identity.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Host.Identity.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Host.Scm.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Host.Scm.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Host.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.Host.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.UI.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Api.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Dvcs.Git.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Dvcs.Git.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Dvcs.Hg.Ui.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Dvcs.Hg.Ui.Wpf.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Host.Bitbucket.Server.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Host.Bitbucket.Server.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Host.Bitbucket.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Host.Bitbucket.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Host.GitHub.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Host.GitHub.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Localisation.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Localisation.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.UI.CommitContainer.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.UI.CommitContainer.Wpf.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.UI.Diff.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.UI.Diff.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.UI.Theme.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.UI.Theme.Wpf.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Ui.FileList.MultiColumn.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Ui.FileList.MultiColumn.Wpf.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Ui.FileList.SingleColumn.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Ui.FileList.SingleColumn.Wpf.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Ui.FileList.TreeView.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Ui.FileList.TreeView.Wpf.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Ui.FileListContainer.Split.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.Ui.FileListContainer.Split.Wpf.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.exe.config
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.exe.configd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree_ExecutionStub.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/SourceTree_ExecutionStub.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Analytics.Emau.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Analytics.Emau.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Api.Account.Pat.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Api.Account.Pat.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Composition.VSMef.Net48.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Composition.VSMef.Net48.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Host.GitLab.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Host.Msft.TeamServices.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Host.Msft.TeamServices.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Installer.Squirrel.UI.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Installer.Squirrel.UI.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Installer.Squirrel.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Sourcetree.Installer.Squirrel.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Splat.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Splat.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Squirrel.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Squirrel.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Svg.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Svg.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Collections.Immutable.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Collections.Immutable.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Composition.AttributedModel.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Composition.AttributedModel.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Composition.Convention.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Composition.Convention.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Composition.Runtime.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Composition.Runtime.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Composition.TypedParts.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Composition.TypedParts.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Memory.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Memory.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Net.Http.Formatting.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Net.Http.Formatting.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Numerics.Vectors.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Numerics.Vectors.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Reactive.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Reactive.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Runtime.CompilerServices.Unsafe.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Runtime.CompilerServices.Unsafe.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Threading.Tasks.Dataflow.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/System.Threading.Tasks.Dataflow.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/TaskDialog.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/TaskDialog.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Validation.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/Validation.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/WeeGems.Option.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/WeeGems.Option.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/WeeGems.Require.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/WeeGems.Require.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/chimera.extensions.logging.log4net.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/chimera.extensions.logging.log4net.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/de/SourceTree.Localisation.resources.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/de/SourceTree.Localisation.resources.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/PortableGitLfsBitbucketMediaApi-1.0.5.7z
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/PortableGitLfsBitbucketMediaApi-1.0.5.7zd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/gcmw-v1.17.1.zip
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/gcmw-v1.17.1.zipd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/hgext/hgflow/hgflow.py
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/hgext/hgflow/hgflow.pyd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/hgignore_global_default.txt
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/hgignore_global_default.txtd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/Apache2.htm
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/Apache2.htmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/CPOL.htm
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/CPOL.htmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/EULA.pdf
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/EULA.pdfd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/GongDragDrop.htm
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/GongDragDrop.htmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/PuTTY.htm
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/PuTTY.htmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/WPFConverters.htm
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/WPFConverters.htmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/octokit.net.htm
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/octokit.net.htmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/slf4net.htm
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/licenses/slf4net.htmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/mcmw-v1.11.96.zip
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/extras/mcmw-v1.11.96.zipd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/fr/SourceTree.Localisation.resources.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/fr/SourceTree.Localisation.resources.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/icons/Notification/SourceTree.ico
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/icons/Notification/SourceTree.icod
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/id/SourceTree.Localisation.resources.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/id/SourceTree.Localisation.resources.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/it-IT/SourceTree.Localisation.resources.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/it-IT/SourceTree.Localisation.resources.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ja/SourceTree.Localisation.resources.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ja/SourceTree.Localisation.resources.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ko/SourceTree.Localisation.resources.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ko/SourceTree.Localisation.resources.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/lib/win32/x86/git2-106a5f2.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/lib/win32/x86/git2-106a5f2.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/log4net.Alpha.config
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/log4net.Alpha.configd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/log4net.Beta.config
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/log4net.Beta.configd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/log4net.Custom.config
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/log4net.Custom.configd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/log4net.Portable.config
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/log4net.Portable.configd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/pt-BR/SourceTree.Localisation.resources.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/pt-BR/SourceTree.Localisation.resources.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ru/SourceTree.Localisation.resources.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/ru/SourceTree.Localisation.resources.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/slf4net.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/slf4net.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/slf4net.log4net.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/slf4net.log4net.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/7z.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/7z.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/Askpass.UI.Wpf.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/Askpass.UI.Wpf.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/Askpass.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/Askpass.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/SourceTreeShared.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/SourceTreeShared.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/getopt.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/getopt.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/libintl3.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/libintl3.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/openssh_add.cmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/openssh_add.cmdd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/patch-2.6.1-1-msys-1.0.13-src.tar.lzma
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/patch-2.6.1-1-msys-1.0.13-src.tar.lzmad
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/patch.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/patch.exe.manifest
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/patch.exe.manifestd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/patch.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/putty/pageant.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/putty/pageant.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/putty/plink.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/putty/plink.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/putty/puttygen.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/putty/puttygen.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/stree_gri.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/stree_gri.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/svn.pl
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/lib/net45/tools/svn.pld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC2AA000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/package/services/metadata/core-properties/d339c8078e8e44f2a5d38387e21dd88a.p
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.7z
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.7zd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.bsdiff
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.bsdiffd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.cmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.cmdd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.config
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.configd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.diff
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.diffd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.dll
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.dlld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.exe
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.exed
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.htm
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.htmd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.html
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.htmld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.ico
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.icod
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.lzma
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.lzmad
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.manifest
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.manifestd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.nuspec
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.nuspecd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.pdf
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.pdfd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.pl
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.pld
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.png
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.pngd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.psmdcp
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.psmdcpd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.py
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.pyd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.rels
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.relsd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.shasum
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.shasumd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.txt
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.txtd
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.zip
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/tempfiles/sample.zipd
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DB647000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe, 00000004.00000002.2438673026.000001D7F48B2000.00000002.00000001.01000000.00000023.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DB76B000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF2B5000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF151000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF453000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://dragablz.net/winfx/xaml/dragablz
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://github.com/git/git?
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3D32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2436809478.000001D7F46D1000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3CC0000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3936305714.000001D3E7A00000.00000004.00000020.00020000.00000000.sdmp, BitbucKit.Net.Refit.dll.3.dr, Askpass.UI.Wpf.dll.3.dr, BitbucKitServer.Net.Api.dll.3.dr, SourceTree.exe.3.dr, slf4net.dll.3.dr, SourceTree.Api.Host.Scm.dll.3.dr, stree_gri.exe.3.dr, git2-106a5f2.dll.3.dr String found in binary or memory: http://ocsp.digicert.com0
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp, BitbucKit.Net.Refit.dll.3.dr, Askpass.UI.Wpf.dll.3.dr, BitbucKitServer.Net.Api.dll.3.dr, SourceTree.exe.3.dr, slf4net.dll.3.dr, SourceTree.Api.Host.Scm.dll.3.dr, stree_gri.exe.3.dr, git2-106a5f2.dll.3.dr, SourceTree.Api.Host.Identity.dll.3.dr, libintl3.dll.3.dr, Svg.dll.3.dr, BitbucKit.Net.Api.dll.3.dr String found in binary or memory: http://ocsp.digicert.com0A
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr, Newtonsoft.Json.dll.3.dr String found in binary or memory: http://ocsp.digicert.com0C
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://ocsp.digicert.com0K
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: http://ocsp.digicert.com0N
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr, Newtonsoft.Json.dll.3.dr String found in binary or memory: http://ocsp.digicert.com0O
Source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000385D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://openid.net/specs/jwt/1.0Hurn:ietf:params:oauth:token-type:jwt
Source: Update.exe, 00000003.00000002.2337346163.00000000037CC000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFB5B000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://product-downloads.atlassian.com
Source: Update.exe, 00000003.00000002.2337346163.00000000037CC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://product-downloads.atlassian.comd
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://restsharp.org/?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DB647000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2447157957.000001D7F5192000.00000002.00000001.01000000.0000004F.sdmp, SourceTree.exe, 00000004.00000002.2446991097.000001D7F5162000.00000002.00000001.01000000.0000004D.sdmp, SourceTree.exe, 00000004.00000002.2433648563.000001D7F42C2000.00000002.00000001.01000000.0000001A.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe, 00000004.00000002.2434288501.000001D7F4352000.00000002.00000001.01000000.00000021.sdmp, SourceTree.exe, 00000004.00000002.2447311337.000001D7F51B2000.00000002.00000001.01000000.00000051.sdmp, SourceTree.exe, 00000004.00000002.2446905997.000001D7F5152000.00000002.00000001.01000000.0000004C.sdmp, SourceTree.exe, 00000004.00000002.2446782077.000001D7F5132000.00000002.00000001.01000000.0000004A.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF151000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3944487573.000001D3E9B62000.00000002.00000001.01000000.00000068.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF453000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe.3.dr, Kent.Boogaart.Converters.dll.3.dr, SourceTree.Ui.FileList.MultiColumn.Wpf.dll.3.dr String found in binary or memory: http://schemas.kent.boogaart.com/converters
Source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.openxmlformats.or
Source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/claims/Group
Source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/ShortTypeName/Assembly
Source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/json_type
Source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000385D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claimpropertiespIDX12401:
Source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid
Source: Update.exe, 00000003.00000002.2337346163.00000000037B9000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF675000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAFF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
Source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://selenic.com/hg?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://sourceforge.net/projects/mingw/?source=dlp?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.7-zip.org/?
Source: Update.exe, 00000003.00000002.2337346163.0000000003883000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038A9000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.asp.net0
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.codeproject.com/Articles/17201/Detect-Encoding-for-In-and-Outgoing-Text?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.codeproject.com/Articles/25058/ListView-Layout-Manager?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.codeproject.com/Articles/28093/Using-RoutedCommands-with-a-ViewModel-in-WPF?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.codeproject.com/Articles/49853/Better-WPF-Circular-Progress-Bar?
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3D32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2436809478.000001D7F46D1000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2432229265.000001D7F3CC0000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B32000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3936305714.000001D3E7A00000.00000004.00000020.00020000.00000000.sdmp, BitbucKit.Net.Refit.dll.3.dr, Askpass.UI.Wpf.dll.3.dr, BitbucKitServer.Net.Api.dll.3.dr, SourceTree.exe.3.dr, slf4net.dll.3.dr, SourceTree.Api.Host.Scm.dll.3.dr, stree_gri.exe.3.dr, git2-106a5f2.dll.3.dr String found in binary or memory: http://www.digicert.com/CPS0
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.git-scm.com/?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B4A000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.google.comEHandler
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.newtonsoft.com/json?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: http://www.putty.org/?
Source: Update.exe, 00000003.00000000.2053912375.0000000000F82000.00000002.00000001.01000000.00000005.sdmp, SourceTree.exe, 00000004.00000002.2450551036.000001D7F55B2000.00000002.00000001.01000000.00000060.sdmp String found in binary or memory: https://api.github.com/#
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://bitbucket.org/mattdavey/weegems?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://bitbucket.org/sinbad/hgattic?
Source: Update.exe, 00000003.00000002.2337346163.0000000003760000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003770000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2433648563.000001D7F42C2000.00000002.00000001.01000000.0000001A.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC2AA000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2436809478.000001D7F489D000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC2B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF453000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://confluence.atlassian.com/get-started-with-sourcetree
Source: Update.exe, 00000003.00000002.2337346163.0000000003770000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://confluence.atlassian.com/get-started-with-sourcetreet
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://downloads.atlassian.com/software/sourcetree/windows/ReleaseNotes.html?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe, 00000004.00000002.2446703111.000001D7F5112000.00000002.00000001.01000000.00000049.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B4A000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF453000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/ButchersBoy/Dragablz/?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/ButchersBoy/Dragablz/blob/master/LICENSE?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/Microsoft/Git-Credential-Manager-for-Windows/blob/master/LICENSE.txt?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/Microsoft/Git-Credential-Manager-for-Windows?
Source: Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: https://github.com/ReactiveUI/refit
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/WilliamABradley/ColorCode-Universal/?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/WilliamABradley/ColorCode-Universal/blob/master/license.md?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/abdelkarim/DescriptionPersister?
Source: Update.exe, 00000003.00000002.2337346163.00000000039F4000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000033B9000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039E8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003A0D000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2434178994.000001D7F4332000.00000002.00000001.01000000.0000001F.sdmp, SourceTree.exe, 00000004.00000002.2433921178.000001D7F4302000.00000002.00000001.01000000.0000001D.sdmp, SourceTree.exe, 00000004.00000002.2423005552.000001D7D9C42000.00000002.00000001.01000000.00000011.sdmp, SourceTree.exe, 00000004.00000002.2423340776.000001D7DB562000.00000002.00000001.01000000.00000013.sdmp, SourceTree.exe, 00000004.00000002.2438899966.000001D7F4942000.00000002.00000001.01000000.00000024.sdmp, SourceTree.exe, 00000004.00000002.2423455096.000001D7DB5A2000.00000002.00000001.01000000.00000015.sdmp, SourceTree.exe, 00000004.00000002.2423277919.000001D7DB552000.00000002.00000001.01000000.00000012.sdmp, Microsoft.Extensions.Logging.Console.dll.3.dr String found in binary or memory: https://github.com/aspnet/Extensions/tree/9bc79b2f25a3724376d7af19617c33749a30ea3a
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038A9000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2448554556.000001D7F5372000.00000002.00000001.01000000.00000058.sdmp, SourceTree.exe, 00000004.00000002.2447464343.000001D7F5212000.00000002.00000001.01000000.00000052.sdmp String found in binary or memory: https://github.com/dotnet/corefx/tree/30ab651fcb4354552bd4891619a0bdd81e0ebdbf
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038A9000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2447464343.000001D7F5212000.00000002.00000001.01000000.00000052.sdmp String found in binary or memory: https://github.com/dotnet/corefx/tree/30ab651fcb4354552bd4891619a0bdd81e0ebdbf8
Source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003969000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/dotnet/corefx/tree/637a8d58f72f2b0f1a71187530c3cf433e95a75a
Source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003969000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/dotnet/corefx/tree/637a8d58f72f2b0f1a71187530c3cf433e95a75a8
Source: Update.exe, 00000003.00000002.2337346163.0000000003883000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000385D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/dotnet/corefx/tree/7601f4f6225089ffb291dc7d58293c7bbf5c5d4f
Source: Update.exe, 00000003.00000002.2337346163.0000000003883000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000385D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/dotnet/corefx/tree/7601f4f6225089ffb291dc7d58293c7bbf5c5d4f8
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/dotnet/reactive0
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/englishtown/slf4net?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/kentcb/WPFConverters?
Source: Update.exe, 00000003.00000000.2053912375.0000000000F82000.00000002.00000001.01000000.00000005.sdmp, SourceTree.exe, 00000004.00000002.2450551036.000001D7F55B2000.00000002.00000001.01000000.00000060.sdmp String found in binary or memory: https://github.com/myuser/myrepo
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/octokit/octokit.net?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/punker76/gong-wpf-dragdrop?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/reactiveui/ReactiveUI/blob/rxui7-master/LICENSE?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/reactiveui/ReactiveUI?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://github.com/yadyn/WPF-Task-Dialog?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://logging.apache.org/log4net/?
Source: Update.exe, 00000003.00000002.2337346163.00000000037B9000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFB8E000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CF675000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAFF000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://product-downloads.atlassian.com
Source: Update.exe, 00000003.00000002.2337346163.0000000003770000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC2AA000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2436809478.000001D7F489D000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC2B1000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://product-downloads.atlassian.com/software/sourcetree/windows/ga/sourcetree_ga.ico
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B4A000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://support.atlassian.com/sourcetreeyhttps://confluence.atlassian.com/get-started-with-sourcetre
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B4A000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://www.atlassian.com/git/5https://sourcetreeapp.com/
Source: Update.exe, 00000003.00000002.2337346163.0000000003770000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC2AA000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2436809478.000001D7F489D000.00000004.00000020.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC2B1000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.atlassian.com/legal/customer-agreement
Source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038F6000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr String found in binary or memory: https://www.digicert.com/CPS0
Source: Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034D3000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2439314630.000001D7F49A2000.00000002.00000001.01000000.0000002A.sdmp, SourceTree.Localisation.dll.3.dr String found in binary or memory: https://www.kernel.org/pub/software/scm/git/docs/git-check-ref-format.html
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://www.mercurial-scm.org/?
Source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr String found in binary or memory: https://www.transifex.com/projects/p/sourcetree-for-windows/?
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown HTTPS traffic detected: 3.161.73.137:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown HTTPS traffic detected: 3.161.73.137:443 -> 192.168.2.5:49721 version: TLS 1.2
Detected potential crypto function
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_032946B0 3_2_032946B0
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_032960F0 3_2_032960F0
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_060EA688 3_2_060EA688
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_060EA698 3_2_060EA698
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064FC768 3_2_064FC768
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_06781262 3_2_06781262
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_067810CC 3_2_067810CC
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F3E1D8 4_2_00007FF848F3E1D8
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F3DDD3 4_2_00007FF848F3DDD3
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF8493AD418 4_2_00007FF8493AD418
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF8493A1BDB 4_2_00007FF8493A1BDB
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF8493AFC40 4_2_00007FF8493AFC40
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF8493AFC60 4_2_00007FF8493AFC60
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF8493B14F2 4_2_00007FF8493B14F2
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF8499CDDC0 4_2_00007FF8499CDDC0
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF8499D06C0 4_2_00007FF8499D06C0
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF84935A060 7_2_00007FF84935A060
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495D5460 7_2_00007FF8495D5460
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495D042A 7_2_00007FF8495D042A
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495EC358 7_2_00007FF8495EC358
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495D6586 7_2_00007FF8495D6586
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495DC8F6 7_2_00007FF8495DC8F6
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495EC6FC 7_2_00007FF8495EC6FC
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495D4269 7_2_00007FF8495D4269
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495E64C5 7_2_00007FF8495E64C5
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495D0F6D 7_2_00007FF8495D0F6D
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF849AF8E0C 7_2_00007FF849AF8E0C
Dropped file seen in connection with other malware
Source: Joe Sandbox View Dropped File: C:\Users\user\AppData\Local\SourceTree\Update.exe EDB23A210132682D4C150003D6E02A3D894D82EF018FDF986FBF9BEB6B5D68FA
PE file contains executable resources (Code or Archives)
Source: SourceTreeSetup-3.4.19.exe Static PE information: Resource name: DATA type: Zip archive data, at least v2.0 to extract, compression method=deflate
Sample file is different than original file name gathered from version info
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.0000000002900000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameUpdate.exe. vs SourceTreeSetup-3.4.19.exe
Source: SourceTreeSetup-3.4.19.exe, 00000001.00000003.2053614545.00000000028F2000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameUpdate.exe. vs SourceTreeSetup-3.4.19.exe
Uses 32bit PE files
Source: SourceTreeSetup-3.4.19.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb@w
Source: SourceTree.exe, 00000004.00000002.2422623874.000001D7D9AC0000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: ;.VBp
Source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003928000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2447827174.000001D7F5262000.00000002.00000001.01000000.00000053.sdmp Binary or memory string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb
Source: Update.exe, 00000003.00000002.2337346163.0000000003928000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb
Source: classification engine Classification label: sus36.troj.evad.winEXE@8/252@1/1
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Mutant created: NULL
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Mutant created: \Sessions\1\BaseNamedObjects\C__Users_user_AppData_Local_Atlassian_SourceTree_sourcetree.log_rolling
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Mutant created: \Sessions\1\BaseNamedObjects\SourceTree_{34C68F3E-F159-462E-9B59-F9A23A0F405A}
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Mutant created: \Sessions\1\BaseNamedObjects\C__Users_user_AppData_Local_Atlassian_SourceTree_settings.log_rolling
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\Temp\.squirrel-lock-7FD03AB0DF75386580AE5482BAADF2764ECEC87C Jump to behavior
Source: SourceTreeSetup-3.4.19.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File read: C:\Users\user\Desktop\desktop.ini Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: SourceTree.exe, 00000004.00000002.2434288501.000001D7F4352000.00000002.00000001.01000000.00000021.sdmp Binary or memory string: SelectedRowFrom;ScrollLogWhenSelectionChanged7IsSelectingCommitInProgress-SelectingCommitMessage1IncludeWorkingDirChanges-AllowMultipleSelection!AllowContextMenu)CustomActionsCommits
Source: SourceTreeSetup-3.4.19.exe String found in binary or memory: \need dictionaryinvalid literal/length codeinvalid distance codeinvalid block typeinvalid stored block lengthstoo many length or distance symbolsinvalid bit length repeatoversubscribed dynamic bit lengths treeincomplete dynamic bit lengths treeoversubscribed literal/length treeincomplete literal/length treeoversubscribed distance treeincomplete distance treeempty distance tree with lengthsunknown compression methodinvalid window sizeincorrect header checkincorrect data check\..\\..//..//..\UT%s%s%s%s%sOpen Setup LogCloseInstallation has failedSquirrelSQUIRREL_TEMP%s%s\%sUnable to write to %s - IT policies may be restricting access to this folder\SquirrelTemp%s\SquirrelSetup.logDATAUpdate.exe"%s" --install . %sThere was an error while installing the application. Check the setup log for more information and contact the author.Failed to extract installervector<T> too longi
Source: unknown Process created: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe "C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe"
Source: unknown Process created: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe "C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe" --rerunningWithoutUAC
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Process created: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe "C:\Users\user\AppData\Local\SquirrelTemp\Update.exe" --install . --rerunningWithoutUAC
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe "C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe" --squirrel-install 3.4.19
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe "C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe" --squirrel-firstrun
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Process created: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe "C:\Users\user\AppData\Local\SquirrelTemp\Update.exe" --install . --rerunningWithoutUAC Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe "C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe" --squirrel-install 3.4.19 Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe "C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe" --squirrel-firstrun Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: sxs.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: onecoreuapcommonproxystub.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: msvcp140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: windowscodecs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: d3d9.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: d3d10warp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dataexchange.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: resourcepolicyclient.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dxcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: msctfui.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: uiautomationcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: d3dcompiler_47.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: sxs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: explorerframe.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: edputil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: windows.staterepositoryps.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: appresolver.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: bcp47langs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: slc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: sppc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: onecoreuapcommonproxystub.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: linkinfo.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: rasapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: rasman.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: rtutils.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: msvcp140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: windowscodecs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: riched20.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: usp10.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: msls31.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: napinsp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: pnrpnsp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wshbth.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: nlaapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: winrnr.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: linkinfo.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ntshrui.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: cscapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: msvcp140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: windowscodecs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: riched20.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: usp10.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: msls31.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: napinsp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: pnrpnsp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wshbth.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: nlaapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: winrnr.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: d3d9.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: d3d10warp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dataexchange.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: resourcepolicyclient.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dxcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: msctfui.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: uiautomationcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: d3dcompiler_47.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: rasapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: rasman.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: rtutils.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SourceTree Jump to behavior
Source: SourceTreeSetup-3.4.19.exe Static PE information: certificate valid
Source: SourceTreeSetup-3.4.19.exe Static file information: File size 24789968 > 1048576
Source: SourceTreeSetup-3.4.19.exe Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x177a400
Source: SourceTreeSetup-3.4.19.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: SourceTreeSetup-3.4.19.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: SourceTreeSetup-3.4.19.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: SourceTreeSetup-3.4.19.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: SourceTreeSetup-3.4.19.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: SourceTreeSetup-3.4.19.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT
Source: SourceTreeSetup-3.4.19.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: SourceTreeSetup-3.4.19.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: C:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.GutenbergTextView\GutenbergTextView\obj\Release\Atlassian.GutenbergTextView.pdb source: SourceTree.exe, 00000004.00000002.2440161177.000001D7F4A92000.00000002.00000001.01000000.0000002E.sdmp
Source: Binary string: /_/src/Logging/Logging.Configuration/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Configuration.pdb source: Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039E8000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: /_/src/Configuration/Config/src/obj/Release/netstandard2.0/Microsoft.Extensions.Configuration.pdb source: SourceTree.exe, 00000004.00000002.2433921178.000001D7F4302000.00000002.00000001.01000000.0000001D.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileList.TreeView.Wpf\obj\Debug\SourceTree.Ui.FileList.TreeView.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2447157957.000001D7F5192000.00000002.00000001.01000000.0000004F.sdmp
Source: Binary string: C:\Users\mpagani\Source\AppConsult\Windows-AppConsult-Tools-DesktopBridgeHelpers\DesktopBridge.Helpers\obj\Debug\net45\DesktopBridge.Helpers.pdb source: SourceTree.exe, 00000004.00000002.2439240279.000001D7F4992000.00000002.00000001.01000000.00000029.sdmp
Source: Binary string: E:\A\_work\339\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netstandard\System.Threading.Tasks.Extensions.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003969000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.CommitContainer.Wpf\obj\Debug\SourceTree.UI.CommitContainer.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2446851536.000001D7F5142000.00000002.00000001.01000000.0000004B.sdmp
Source: Binary string: !bin\;!bld\;!ClientBin\;!Debug\;!obj\;!AppPackages\;!Release\;!TestResults\;!*.*~!*.appx!*.appxrecipe;!*.cache!*.cer!*.dbmdl!*.dll!*.docstates!*.docstates.suo;!*.err!*.exe!*.ilk!*.ipch!*.lastbuildstate!*.lce!*.ldf!*.lib!*.log!*.mdf!*.msscci!*.ncb!*.obj!*.opensdf!*.pch!*.pdb!*.pri!*.res!*.resources!*.sdf!*.suo!*.swp!*.temp!*.tfOrig*!*.tlog!*.tmp!*.trx!*.user!*.unsuccessfulbuild!*.v11.suo!*.vcxproj.user!*.vsix!*.vsmdi!*.vspscc!*.vssettings!*.vssscc!*.wrn!*.xap;!.metadata\ source: Update.exe, 00000003.00000002.2337346163.000000000341D000.00000004.00000800.00020000.00000000.sdmp, Microsoft.TeamFoundation.VersionControl.Common.dll.3.dr
Source: Binary string: /_/src/Options/Options/src/obj/Release/netstandard2.0/Microsoft.Extensions.Options.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2423455096.000001D7DB5A2000.00000002.00000001.01000000.00000015.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.ExtendedClient\MS.TF.TestManagement.Client\Microsoft.TeamFoundation.TestManagement.Client.pdb source: Microsoft.TeamFoundation.TestManagement.Client.dll.3.dr
Source: Binary string: c:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.Utilities\Atlassian.Utilities\obj\Release\Atlassian.Utilities.pdb,*N* @*_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2440307772.000001D7F4AB2000.00000002.00000001.01000000.00000030.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Api.Account.Pat\obj\Debug\netstandard2.0\Sourcetree.Api.Account.Pat.pdbSHA256y source: SourceTree.exe, 00000004.00000002.2441216299.000001D7F4B72000.00000002.00000001.01000000.00000037.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.ExtendedClient\MS.TF.Lab.TestIntegration.Client\Microsoft.TeamFoundation.Lab.TestIntegration.Client.pdb source: Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll.3.dr
Source: Binary string: LIB/NET45/MONO.CECIL.PDB.DLL source: Update.exe, 00000003.00000002.2337346163.0000000003617000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\saha340\Projects\Git\WPF-Task-Dialog\TaskDialog\obj\Release\TaskDialog.pdb source: SourceTree.exe, 00000004.00000002.2434017295.000001D7F4312000.00000002.00000001.01000000.0000001E.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Host.GitLab\obj\Debug\netstandard2.0\Sourcetree.Host.GitLab.pdb source: SourceTree.exe, 00000004.00000002.2442391292.000001D7F4C82000.00000002.00000001.01000000.00000043.sdmp
Source: Binary string: C:\projects\Squirrel.Windows\build\obj\Squirrel\Release\net45\Squirrel.pdbSHA256/ source: SourceTree.exe, 00000004.00000002.2450551036.000001D7F55B2000.00000002.00000001.01000000.00000060.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\projects\libgit2sharp-nativebinaries\libgit2\build\RelWithDebInfo\git2-106a5f2.pdb source: git2-106a5f2.dll0.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Host.Identity\obj\Debug\SourceTree.Api.Host.Identity.pdb source: SourceTree.exe, 00000004.00000002.2441536704.000001D7F4BB2000.00000002.00000001.01000000.0000003B.sdmp, SourceTree.Api.Host.Identity.dll.3.dr
Source: Binary string: c:\Users\Matthew.Davey\Dropbox\Checkouts\WeeGems\WeeGems.Option\obj\Release\WeeGems.Option.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, WeeGems.Option.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Bitbucket.Server\obj\Debug\SourceTree.Host.Bitbucket.Server.pdb` source: SourceTree.exe, 00000004.00000002.2446605100.000001D7F50F2000.00000002.00000001.01000000.00000048.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Api.Account.Pat\obj\Debug\netstandard2.0\Sourcetree.Api.Account.Pat.pdb source: SourceTree.exe, 00000004.00000002.2441216299.000001D7F4B72000.00000002.00000001.01000000.00000037.sdmp
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dll@\]q$ source: Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Vssf.Client\MS.VS.Services.Common\Microsoft.VisualStudio.Services.Common.pdb source: SourceTree.exe, 00000004.00000002.2451809086.000001D7F5702000.00000002.00000001.01000000.00000062.sdmp, Microsoft.VisualStudio.Services.Common.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Bitbucket\obj\Debug\SourceTree.Host.Bitbucket.pdb source: SourceTree.exe, 00000004.00000002.2442579500.000001D7F4CA2000.00000002.00000001.01000000.00000045.sdmp
Source: Binary string: C:\agent1\_work\27\s\src\Microsoft.IdentityModel.Clients.ActiveDirectory.Platform\obj\Release\net45\Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.pdb source: Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll.3.dr
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dll@\]q source: Update.exe, 00000003.00000002.2337346163.00000000033B9000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Api.Framework\obj\Debug\Sourcetree.Api.Framework.pdbHmbm Tm_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441452133.000001D7F4BA2000.00000002.00000001.01000000.0000003A.sdmp
Source: Binary string: /_/src/Logging/Logging.Configuration/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Configuration.pdbSHA256" source: Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039E8000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003928000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2447827174.000001D7F5262000.00000002.00000001.01000000.00000053.sdmp
Source: Binary string: $]qFC:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.Pdb.dll source: Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\paulb\code\Squirrel\squirrel.windows\src\Setup\bin\Release\Setup.pdb source: SourceTreeSetup-3.4.19.exe
Source: Binary string: E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Collections.Immutable\netstandard\System.Collections.Immutable.pdb source: SourceTree.exe, 00000004.00000002.2447464343.000001D7F5212000.00000002.00000001.01000000.00000052.sdmp
Source: Binary string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb@w source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Hg\obj\Debug\SourceTree.Dvcs.Hg.pdbt! source: SourceTree.exe, 00000004.00000002.2442194647.000001D7F4C52000.00000002.00000001.01000000.00000042.sdmp, SourceTree.Dvcs.Hg.dll.3.dr
Source: Binary string: mscorlib.pdb source: SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Composition.AttributedModel\netstandard\System.Composition.AttributedModel.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2448554556.000001D7F5372000.00000002.00000001.01000000.00000058.sdmp
Source: Binary string: /_/src/DependencyInjection/DI.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdbSHA2562 source: Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: ReactiveUI.pdb source: SourceTree.exe, 00000004.00000002.2448615694.000001D7F5392000.00000002.00000001.01000000.00000059.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\SourceTree.Api.Analytics\obj\Debug\SourceTree.Api.Analytics.pdb source: SourceTree.exe, 00000004.00000002.2441296524.000001D7F4B82000.00000002.00000001.01000000.00000038.sdmp
Source: Binary string: $]q4http://defaultcontainer/lib/net45/Mono.Cecil.Pdb.dll`,]q4http://defaultcontainer/lib/net45/Mono.Cecil.Pdb.dlld source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.FileListContainer.NoStaging.Wpf\obj\Debug\SourceTree.UI.FileListContainer.NoStaging.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2447222210.000001D7F51A2000.00000002.00000001.01000000.00000050.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Accounts.Windows\obj\Debug\SourceTree.Accounts.Windows.pdb source: SourceTree.exe, 00000004.00000002.2440385499.000001D7F4AC2000.00000002.00000001.01000000.00000031.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\Sourcetree.Analytics.Emau\obj\Debug\netstandard2.0\Sourcetree.Analytics.Emau.pdb source: SourceTree.exe, 00000004.00000002.2440949154.000001D7F4B42000.00000002.00000001.01000000.00000034.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Hg\obj\Debug\SourceTree.Dvcs.Hg.pdb source: SourceTree.exe, 00000004.00000002.2442194647.000001D7F4C52000.00000002.00000001.01000000.00000042.sdmp, SourceTree.Dvcs.Hg.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Account\obj\Debug\SourceTree.Api.Account.pdb source: SourceTree.exe, 00000004.00000002.2439039596.000001D7F4962000.00000002.00000001.01000000.00000026.sdmp
Source: Binary string: /_/src/Logging/Logging.Console/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Console.pdb source: Update.exe, 00000003.00000002.2337346163.00000000039F4000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003A0D000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423340776.000001D7DB562000.00000002.00000001.01000000.00000013.sdmp, Microsoft.Extensions.Logging.Console.dll.3.dr
Source: Binary string: c:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.PathTrimmingTextBlock\Atlassian.PathTrimmingTextBlock\obj\Release\Atlassian.PathTrimmingTextBlock.pdb source: SourceTree.exe, 00000004.00000002.2440248560.000001D7F4AA2000.00000002.00000001.01000000.0000002F.sdmp
Source: Binary string: C:\Users\Administrator\code2\ae3e0d9d-8f1c-53dc-b46b-65dce19487a8\1677043917973\build\Bitbucket.Libraries\BitbucKitServer.Net\BitbucKitServer.Net.Api\obj\Release\BitbucKitServer.Net.Api.pdb source: SourceTree.exe, 00000004.00000002.2448490605.000001D7F5362000.00000002.00000001.01000000.00000057.sdmp, BitbucKitServer.Net.Api.dll.3.dr
Source: Binary string: C:\projects\Squirrel.Windows\vendor\nuget\src\Core\obj\Coverage\NuGet.Squirrel.pdb source: SourceTree.exe, 00000004.00000002.2456556762.000001D7F5D62000.00000002.00000001.01000000.00000067.sdmp
Source: Binary string: /_/src/Configuration/Config.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.Configuration.Abstractions.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2434178994.000001D7F4332000.00000002.00000001.01000000.0000001F.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Atlassianaccount\obj\Debug\SourceTree.Host.AtlassianAccount.pdb<GVG HG_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441882463.000001D7F4C02000.00000002.00000001.01000000.00000040.sdmp
Source: Binary string: C:\projects\Squirrel.Windows\build\obj\Squirrel\Release\net45\Squirrel.pdb source: SourceTree.exe, 00000004.00000002.2450551036.000001D7F55B2000.00000002.00000001.01000000.00000060.sdmp, SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Hg.Ui.Wpf\obj\Debug\SourceTree.Dvcs.Hg.Ui.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2441723940.000001D7F4BE2000.00000002.00000001.01000000.0000003E.sdmp
Source: Binary string: Splat.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2448339623.000001D7F5342000.00000002.00000001.01000000.00000056.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api\obj\Debug\netstandard2.0\SourceTree.Api.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2423381219.000001D7DB572000.00000002.00000001.01000000.00000014.sdmp
Source: Binary string: C:\projects\sharpcompress\src\SharpCompress\obj\Release\net45\SharpCompress.pdbL source: SharpCompress.dll.3.dr
Source: Binary string: C:\projects\libgit2sharp-nativebinaries\libgit2\build\RelWithDebInfo\git2-106a5f2.pdb~ source: git2-106a5f2.dll0.3.dr
Source: Binary string: Mono.Cecil.Pdb.dll source: Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: Squirrel.pdb source: SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: d:\dd\WebToolsExtensions\SDK2.4\intermediate\dev12\Release\Publish\Microsoft.Web.XmlTransform.pdb source: Microsoft.Web.XmlTransform.dll.3.dr
Source: Binary string: /_/src/Configuration/Config.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.Configuration.Abstractions.pdb source: SourceTree.exe, 00000004.00000002.2434178994.000001D7F4332000.00000002.00000001.01000000.0000001F.sdmp
Source: Binary string: E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003883000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000385D000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb source: SourceTree.exe, 00000004.00000002.2450431929.000001D7F5562000.00000002.00000001.01000000.0000005F.sdmp
Source: Binary string: c:\Users\Kent\Repository\wpfconverters\Src\Kent.Boogaart.Converters\obj\FX45 Release\Kent.Boogaart.Converters.pdb source: SourceTree.exe, 00000007.00000002.3944487573.000001D3E9B62000.00000002.00000001.01000000.00000068.sdmp, Kent.Boogaart.Converters.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Bitbucket.Libraries\Bitbucket.Net\BitbucKit.Net.Refit\obj\Release\netstandard2.0\BitbucKit.Net.Refit.pdb source: BitbucKit.Net.Refit.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.CustomActions\obj\Debug\SourceTree.Api.CustomActions.pdb source: SourceTree.exe, 00000004.00000002.2438966201.000001D7F4952000.00000002.00000001.01000000.00000025.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\Sourcetree.Analytics.Emau\obj\Debug\netstandard2.0\Sourcetree.Analytics.Emau.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2440949154.000001D7F4B42000.00000002.00000001.01000000.00000034.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\obj\Debug\Sourcetree.pdb source: Update.exe, 00000003.00000002.2342993066.00000000043B1000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000000.2105900715.000001D7D9812000.00000002.00000001.01000000.00000007.sdmp, SourceTree.exe.3.dr
Source: Binary string: E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb source: Update.exe, 00000003.00000002.2337346163.00000000038D0000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038A9000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Programming\Github\ColorCode-Universal\ColorCode.Core\obj\Release\netstandard1.4\ColorCode.Core.pdb source: SourceTree.exe, 00000004.00000002.2448953354.000001D7F53E2000.00000002.00000001.01000000.0000005A.sdmp
Source: Binary string: C:\Users\saha340\Projects\Git\WPF-Task-Dialog\TaskDialog\obj\Release\TaskDialog.pdbh} source: SourceTree.exe, 00000004.00000002.2434017295.000001D7F4312000.00000002.00000001.01000000.0000001E.sdmp
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Atlassian.Libraries\Atlassian.FastTree\Atlassian.FastTree\obj\Release\Atlassian.FastTree.pdbL source: SourceTree.exe, 00000004.00000002.2433562622.000001D7F42B2000.00000002.00000001.01000000.00000019.sdmp
Source: Binary string: /_/src/DependencyInjection/DI.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdb source: Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: Refit.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr
Source: Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb source: SourceTree.exe, 00000004.00000002.2449649910.000001D7F54A2000.00000002.00000001.01000000.0000005E.sdmp, Newtonsoft.Json.dll.3.dr
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.Client\MS.TF.SourceControl.WebApi\Microsoft.TeamFoundation.SourceControl.WebApi.pdb source: SourceTree.exe, 00000004.00000002.2454946478.000001D7F5AA2000.00000002.00000001.01000000.00000065.sdmp
Source: Binary string: System.Reactive.pdb source: SourceTree.exe, 00000004.00000002.2435844874.000001D7F4572000.00000002.00000001.01000000.00000022.sdmp
Source: Binary string: Splat.pdb source: SourceTree.exe, 00000004.00000002.2448339623.000001D7F5342000.00000002.00000001.01000000.00000056.sdmp
Source: Binary string: C:\projects\dragablz\Dragablz\obj\Release\net45\Dragablz.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2438673026.000001D7F48B2000.00000002.00000001.01000000.00000023.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Host.Scm\obj\Debug\SourceTree.Api.Host.Scm.pdb source: SourceTree.exe, 00000004.00000002.2441592815.000001D7F4BC2000.00000002.00000001.01000000.0000003C.sdmp, SourceTree.Api.Host.Scm.dll.3.dr
Source: Binary string: C:\projects\dragablz\Dragablz\obj\Release\net45\Dragablz.pdb source: SourceTree.exe, 00000004.00000002.2438673026.000001D7F48B2000.00000002.00000001.01000000.00000023.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Host\obj\Debug\SourceTree.Api.Host.pdblH source: SourceTree.exe, 00000004.00000002.2439097863.000001D7F4972000.00000002.00000001.01000000.00000027.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.UI.Wpf\obj\Debug\SourceTree.Api.UI.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2434288501.000001D7F4352000.00000002.00000001.01000000.00000021.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Hg.Ui.Wpf\obj\Debug\SourceTree.Dvcs.Hg.Ui.Wpf.pdbPUjU \U_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441723940.000001D7F4BE2000.00000002.00000001.01000000.0000003E.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\SourceTree.Analytics\obj\Debug\SourceTree.Analytics.pdbw] source: SourceTree.exe, 00000004.00000002.2440466472.000001D7F4AD2000.00000002.00000001.01000000.00000032.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileList.MultiColumn.Wpf\obj\Debug\SourceTree.Ui.FileList.MultiColumn.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2446905997.000001D7F5152000.00000002.00000001.01000000.0000004C.sdmp, SourceTree.Ui.FileList.MultiColumn.Wpf.dll.3.dr
Source: Binary string: C:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.GutenbergTextView\GutenbergTextView\obj\Release\Atlassian.GutenbergTextView.pdb, source: SourceTree.exe, 00000004.00000002.2440161177.000001D7F4A92000.00000002.00000001.01000000.0000002E.sdmp
Source: Binary string: /_/src/Options/Options/src/obj/Release/netstandard2.0/Microsoft.Extensions.Options.pdb source: SourceTree.exe, 00000004.00000002.2423455096.000001D7DB5A2000.00000002.00000001.01000000.00000015.sdmp
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Bitbucket.Libraries\Bitbucket.Net\BitbucKit.Net.Refit\obj\Release\netstandard2.0\BitbucKit.Net.Refit.pdbSHA256 source: BitbucKit.Net.Refit.dll.3.dr
Source: Binary string: /lib/net45/Mono.Cecil.Pdb.dll`,]q source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dll source: Update.exe, 00000003.00000002.2337346163.0000000003617000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034ED000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp, SourceTreeSetup-3.4.19.exe, SourceTree-3.4.19-full.nupkg
Source: Binary string: DynamicData.pdb source: SourceTree.exe, 00000004.00000002.2452408234.000001D7F5832000.00000002.00000001.01000000.00000063.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.ExtendedClient\MS.TF.VersionControl.Common\Microsoft.TeamFoundation.VersionControl.Common.pdb source: Update.exe, 00000003.00000002.2337346163.000000000341D000.00000004.00000800.00020000.00000000.sdmp, Microsoft.TeamFoundation.VersionControl.Common.dll.3.dr
Source: Binary string: Refit.pdb source: Update.exe, 00000003.00000002.2337346163.000000000343A000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003457000.00000004.00000800.00020000.00000000.sdmp, Refit.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.Window.Welcome.Wpf\obj\Debug\SourceTree.UI.Window.Welcome.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2433648563.000001D7F42C2000.00000002.00000001.01000000.0000001A.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Localisation\obj\Debug\netstandard2.0\SourceTree.Localisation.pdb source: SourceTree.exe, 00000004.00000002.2439314630.000001D7F49A2000.00000002.00000001.01000000.0000002A.sdmp, SourceTree.Localisation.dll.3.dr
Source: Binary string: E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Composition.AttributedModel\netstandard\System.Composition.AttributedModel.pdb source: SourceTree.exe, 00000004.00000002.2448554556.000001D7F5372000.00000002.00000001.01000000.00000058.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Account.Basic\obj\Debug\SourceTree.Api.Account.Basic.pdb source: SourceTree.exe, 00000004.00000002.2441038308.000001D7F4B52000.00000002.00000001.01000000.00000035.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Benchmark\obj\Debug\SourceTree.Api.Benchmark.pdb0gJg <g_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441369987.000001D7F4B92000.00000002.00000001.01000000.00000039.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Composition.VSMef.Net471\obj\Debug\Sourcetree.Composition.VSMef.Net48.pdb source: SourceTree.exe, 00000004.00000002.2433781146.000001D7F42E2000.00000002.00000001.01000000.0000001B.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Vssf.Client\MS.VS.Services.WebApi\Microsoft.VisualStudio.Services.WebApi.pdb source: SourceTree.exe, 00000004.00000002.2453128556.000001D7F5912000.00000002.00000001.01000000.00000064.sdmp
Source: Binary string: E:\A\_work\21\s\obj\Release\Microsoft.VisualStudio.Validation.Desktop\Microsoft.VisualStudio.Validation.pdb source: SourceTree.exe, 00000004.00000002.2439175850.000001D7F4982000.00000002.00000001.01000000.00000028.sdmp, Microsoft.VisualStudio.Validation.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Dvcs.Git.UI.Wpf\obj\Debug\Sourcetree.Dvcs.Git.UI.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2441660495.000001D7F4BD2000.00000002.00000001.01000000.0000003D.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\Atlassian.AnalyticsService.Client\obj\Debug\netstandard2.0\Atlassian.AnalyticsService.Client.pdb source: SourceTree.exe, 00000004.00000002.2440066015.000001D7F4A82000.00000002.00000001.01000000.0000002D.sdmp
Source: Binary string: C:\Programming\Github\ColorCode-Universal\ColorCode.Core\obj\Release\netstandard1.4\ColorCode.Core.pdbSHA256C source: SourceTree.exe, 00000004.00000002.2448953354.000001D7F53E2000.00000002.00000001.01000000.0000005A.sdmp
Source: Binary string: /_/src/Primitives/src/obj/Release/netstandard2.0/Microsoft.Extensions.Primitives.pdbSHA256T source: SourceTree.exe, 00000004.00000002.2438899966.000001D7F4942000.00000002.00000001.01000000.00000024.sdmp
Source: Binary string: F:\agent1\_work\20\s\src\System.IdentityModel.Tokens.Jwt\obj\release\net451\System.IdentityModel.Tokens.Jwt.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003850000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000385D000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: D:\V2.0\A1\_work\44\obj\Release.AnyCPU\Tfs.Client\MS.TF.Core.WebApi\Microsoft.TeamFoundation.Core.WebApi.pdb source: SourceTree.exe, 00000004.00000002.2449340169.000001D7F5432000.00000002.00000001.01000000.0000005C.sdmp, Microsoft.TeamFoundation.Core.WebApi.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Host.GitLab\obj\Debug\netstandard2.0\Sourcetree.Host.GitLab.pdbSHA256( source: SourceTree.exe, 00000004.00000002.2442391292.000001D7F4C82000.00000002.00000001.01000000.00000043.sdmp
Source: Binary string: D:\Documents\GitHub\NotificationsExtensions\Windows 10\NotificationsExtensions.Win10.NETCore\obj\Release\NotificationsExtensions.Win10.pdbTO source: SourceTree.exe, 00000007.00000002.3952572560.000001D3EEB62000.00000002.00000001.01000000.00000069.sdmp, NotificationsExtensions.Win10.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\Atlassian.AnalyticsService.Client\obj\Debug\netstandard2.0\Atlassian.AnalyticsService.Client.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2440066015.000001D7F4A82000.00000002.00000001.01000000.0000002D.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Host\obj\Debug\SourceTree.Api.Host.pdb source: SourceTree.exe, 00000004.00000002.2439097863.000001D7F4972000.00000002.00000001.01000000.00000027.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Host.Msft.TeamServices\obj\Debug\netstandard2.0\Sourcetree.Host.Msft.TeamServices.pdb source: SourceTree.exe, 00000004.00000002.2442486228.000001D7F4C92000.00000002.00000001.01000000.00000044.sdmp, Sourcetree.Host.Msft.TeamServices.dll.3.dr
Source: Binary string: DynamicData.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2452408234.000001D7F5832000.00000002.00000001.01000000.00000063.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Dvcs.Git.UI.Wpf\obj\Debug\Sourcetree.Dvcs.Git.UI.Wpf.pdb,VFV 8V_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441660495.000001D7F4BD2000.00000002.00000001.01000000.0000003D.sdmp
Source: Binary string: c:\personal_source\RestSharp\RestSharp.Net452\obj\Release\RestSharp.pdb source: SourceTree.exe, 00000004.00000002.2449131450.000001D7F5402000.00000002.00000001.01000000.0000005B.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.GitHub\obj\Debug\SourceTree.Host.GitHub.pdb source: SourceTree.exe, 00000004.00000002.2446703111.000001D7F5112000.00000002.00000001.01000000.00000049.sdmp
Source: Binary string: bin;bld;ClientBin;Debug;obj;AppPackages;Release;TestResults;FakesAssemblies;*.*~;*.appx;*.appxrecipe;*.build.csdef;*.cache;*.cer;*.class;*.dbmdl;*.dll;*.docstates;*.docstates.suo;*.DS_Store;*.err;*.exe;*.ilk;*.ipch;*.lastbuildstate;*.lce;*.ldf;*.lib;*.log;*.mdf;*.msscci;*.ncb;*.obj;*.opensdf;*.pch;*.pdb;*.pri;*.res;*.resources;*.sdf;*.suo;*.svn;*.swp;*.temp;*.tfOrig*;*.tlog;*.tmp;*.trx;*.user;*.unsuccessfulbuild;*.v11.suo;*.vcxproj.user;*.vsix;*.vsmdi;*.vspscc;*.vssettings;*.vssscc;*.wrn;*.xap;.metadata source: Update.exe, 00000003.00000002.2337346163.000000000341D000.00000004.00000800.00020000.00000000.sdmp, Microsoft.TeamFoundation.VersionControl.Common.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.Window.Welcome.Wpf\obj\Debug\SourceTree.UI.Window.Welcome.Wpf.pdbd source: SourceTree.exe, 00000004.00000002.2433648563.000001D7F42C2000.00000002.00000001.01000000.0000001A.sdmp
Source: Binary string: E:\A\_work\339\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netstandard\System.Threading.Tasks.Extensions.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003942000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003969000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\projects\bitbucket.org\atlassianlabs\askpass\Askpass.UI.Wpf\obj\Release\Askpass.UI.Wpf.pdb source: Askpass.UI.Wpf.dll.3.dr
Source: Binary string: d:\projects\bitbucket.org\atlassian\sourcetree\sourcetreeshared\SourceTreeShared\obj\Release\SourceTreeShared.pdb source: SourceTreeShared.dll.3.dr
Source: Binary string: ReactiveUI.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2448615694.000001D7F5392000.00000002.00000001.01000000.00000059.sdmp
Source: Binary string: C:\Users\mpagani\Source\AppConsult\Windows-AppConsult-Tools-DesktopBridgeHelpers\DesktopBridge.Helpers\obj\Debug\net45\DesktopBridge.Helpers.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2439240279.000001D7F4992000.00000002.00000001.01000000.00000029.sdmp
Source: Binary string: C:\dev\github\roaminglost\chimera.extensions.logging.log4net\src\chimera.extensions.logging.log4net\bin\Release\net451\chimera.extensions.logging.log4net.pdb source: SourceTree.exe, 00000004.00000002.2433835454.000001D7F42F2000.00000002.00000001.01000000.0000001C.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.UI.Diff\obj\Debug\SourceTree.UI.Diff.pdb source: SourceTree.exe, 00000004.00000002.2447062008.000001D7F5172000.00000002.00000001.01000000.0000004E.sdmp
Source: Binary string: C:\projects\sharpcompress\src\SharpCompress\obj\Release\net45\SharpCompress.pdb source: SharpCompress.dll.3.dr
Source: Binary string: JC:\projects\Squirrel.Windows\build\obj\Squirrel\Release\net45\Squirrel.pdb source: SourceTree.exe, 00000007.00000002.3909136966.000001D3CFAAF000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\Users\Matthew.Davey\Dropbox\Checkouts\WeeGems\WeeGems.Require\obj\Release\WeeGems.Require.pdb source: Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2433207494.000001D7F3E02000.00000002.00000001.01000000.00000017.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\SourceTree.Api.Analytics\obj\Debug\SourceTree.Api.Analytics.pdbS*m* _*_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2441296524.000001D7F4B82000.00000002.00000001.01000000.00000038.sdmp
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dlllH|m source: Update.exe, 00000003.00000002.2337346163.0000000003617000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: E:\A\_work\104\s\obj\Microsoft.VisualStudio.Composition\Release\net45\Microsoft.VisualStudio.Composition.pdb source: SourceTree.exe, 00000004.00000002.2440529503.000001D7F4AE2000.00000002.00000001.01000000.00000033.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileList.SingleColumn.Wpf\obj\Debug\SourceTree.Ui.FileList.SingleColumn.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2446991097.000001D7F5162000.00000002.00000001.01000000.0000004D.sdmp
Source: Binary string: c:\Users\Matthew.Davey\Dropbox\Checkouts\WeeGems\WeeGems.Option\obj\Release\WeeGems.Option.pdb(J>J 0J_CorDllMainmscoree.dll source: Update.exe, 00000003.00000002.2337346163.0000000003823000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.000000000383D000.00000004.00000800.00020000.00000000.sdmp, WeeGems.Option.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.UI.Wpf\obj\Debug\SourceTree.Api.UI.Wpf.pdb< source: SourceTree.exe, 00000004.00000002.2434288501.000001D7F4352000.00000002.00000001.01000000.00000021.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileList.MultiColumn.Wpf\obj\Debug\SourceTree.Ui.FileList.MultiColumn.Wpf.pdbXnrn dn_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2446905997.000001D7F5152000.00000002.00000001.01000000.0000004C.sdmp, SourceTree.Ui.FileList.MultiColumn.Wpf.dll.3.dr
Source: Binary string: System.Reactive.pdbSHA256; source: SourceTree.exe, 00000004.00000002.2435844874.000001D7F4572000.00000002.00000001.01000000.00000022.sdmp
Source: Binary string: 4http://defaultcontainer/lib/net45/Mono.Cecil.Pdb.dll source: SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: lib/net45/Mono.Cecil.Pdb.dll0y source: SourceTree.exe, 00000004.00000002.2423499610.000001D7DBE92000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Dev\vvvv\SVG\Source\obj\Release\Svg.pdb source: Svg.dll.3.dr
Source: Binary string: c:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.PathTrimmingTextBlock\Atlassian.PathTrimmingTextBlock\obj\Release\Atlassian.PathTrimmingTextBlock.pdbH8^8 P8_CorDllMainmscoree.dll source: SourceTree.exe, 00000004.00000002.2440248560.000001D7F4AA2000.00000002.00000001.01000000.0000002F.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Host.Msft.TeamServices\obj\Debug\netstandard2.0\Sourcetree.Host.Msft.TeamServices.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2442486228.000001D7F4C92000.00000002.00000001.01000000.00000044.sdmp, Sourcetree.Host.Msft.TeamServices.dll.3.dr
Source: Binary string: d:\TCAgents\buildAgent1\work\c81b3924259cf9ee\github\slf4net\obj\Release\slf4net.pdb source: SourceTree.exe, 00000004.00000002.2434234756.000001D7F4342000.00000002.00000001.01000000.00000020.sdmp, slf4net.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Installer.Squirrel.UI\obj\Debug\Sourcetree.Installer.Squirrel.UI.pdb source: SourceTree.exe, 00000004.00000002.2446782077.000001D7F5132000.00000002.00000001.01000000.0000004A.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Analytics\SourceTree.Analytics\obj\Debug\SourceTree.Analytics.pdb source: SourceTree.exe, 00000004.00000002.2440466472.000001D7F4AD2000.00000002.00000001.01000000.00000032.sdmp
Source: Binary string: E:\A\_work\104\s\obj\Microsoft.VisualStudio.Composition\Release\net45\Microsoft.VisualStudio.Composition.pdb!k source: SourceTree.exe, 00000004.00000002.2440529503.000001D7F4AE2000.00000002.00000001.01000000.00000033.sdmp
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Atlassian.Libraries\Atlassian.FastTree\Atlassian.FastTree\obj\Release\Atlassian.FastTree.pdb source: SourceTree.exe, 00000004.00000002.2433562622.000001D7F42B2000.00000002.00000001.01000000.00000019.sdmp
Source: Binary string: D:\Documents\GitHub\NotificationsExtensions\Windows 10\NotificationsExtensions.Win10.NETCore\obj\Release\NotificationsExtensions.Win10.pdb source: SourceTree.exe, 00000007.00000002.3952572560.000001D3EEB62000.00000002.00000001.01000000.00000069.sdmp, NotificationsExtensions.Win10.dll.3.dr
Source: Binary string: Octokit.pdbMPDB source: SourceTree.exe, 00000004.00000002.2450903511.000001D7F5632000.00000002.00000001.01000000.00000061.sdmp
Source: Binary string: /lib/net45/Mono.Cecil.Pdb.dll source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\b\4741\2186\src\intermediate\System.Threading.Tasks.Dataflow.csproj_1037d191\Release\System.Threading.Tasks.Dataflow.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003928000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: d:\dd\WebToolsExtensions\SDK2.4\intermediate\dev12\Release\Publish\Microsoft.Web.XmlTransform.pdb4: source: Microsoft.Web.XmlTransform.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Dvcs\obj\Debug\SourceTree.Api.Dvcs.pdb source: SourceTree.exe, 00000004.00000002.2439915527.000001D7F4A52000.00000002.00000001.01000000.0000002C.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Benchmark\obj\Debug\SourceTree.Api.Benchmark.pdb source: SourceTree.exe, 00000004.00000002.2441369987.000001D7F4B92000.00000002.00000001.01000000.00000039.sdmp
Source: Binary string: /_/src/Logging/Logging.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Abstractions.pdb source: Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423005552.000001D7D9C42000.00000002.00000001.01000000.00000011.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Atlassianaccount\obj\Debug\SourceTree.Host.AtlassianAccount.pdb source: SourceTree.exe, 00000004.00000002.2441882463.000001D7F4C02000.00000002.00000001.01000000.00000040.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Localisation\obj\Debug\netstandard2.0\SourceTree.Localisation.pdbSHA256, source: SourceTree.exe, 00000004.00000002.2439314630.000001D7F49A2000.00000002.00000001.01000000.0000002A.sdmp, SourceTree.Localisation.dll.3.dr
Source: Binary string: /_/src/Logging/Logging.Console/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Console.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.00000000039F4000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.0000000003A0D000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423340776.000001D7DB562000.00000002.00000001.01000000.00000013.sdmp, Microsoft.Extensions.Logging.Console.dll.3.dr
Source: Binary string: /_/src/Logging/Logging/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.00000000033B9000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423277919.000001D7DB552000.00000002.00000001.01000000.00000012.sdmp
Source: Binary string: /_/src/GongSolutions.WPF.DragDrop/obj/Release/net48/GongSolutions.WPF.DragDrop.pdb source: SourceTree.exe, 00000004.00000002.2448135668.000001D7F5322000.00000002.00000001.01000000.00000055.sdmp
Source: Binary string: D:\a\sourcetree-assets\sourcetree-assets\SourceTree.UI.Theme.Wpf\SourceTree.UI.Theme.Wpf\obj\Release\SourceTree.UI.Theme.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2442823138.000001D7F500C000.00000002.00000001.01000000.00000047.sdmp
Source: Binary string: c:\BuildAgent\work\220dc32f273423f2\Tooling\obj\Release\System.Net.Http.Formatting\System.Net.Http.Formatting.pdb source: Update.exe, 00000003.00000002.2337346163.0000000003883000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000038A9000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: ReactiveUI.WPF.pdbSHA256" source: SourceTree.exe, 00000004.00000002.2433396437.000001D7F40C2000.00000002.00000001.01000000.00000018.sdmp
Source: Binary string: c:\Users\Matthew.Davey\Dropbox\Checkouts\WeeGems\WeeGems.Require\obj\Release\WeeGems.Require.pdb@:^: P:_CorDllMainmscoree.dll source: Update.exe, 00000003.00000002.2337346163.00000000034A8000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000034C7000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2433207494.000001D7F3E02000.00000002.00000001.01000000.00000017.sdmp
Source: Binary string: /_/src/Logging/Logging/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.pdb source: Update.exe, 00000003.00000002.2337346163.00000000033B9000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423277919.000001D7DB552000.00000002.00000001.01000000.00000012.sdmp
Source: Binary string: E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Collections.Immutable\netstandard\System.Collections.Immutable.pdbSHA256* source: SourceTree.exe, 00000004.00000002.2447464343.000001D7F5212000.00000002.00000001.01000000.00000052.sdmp
Source: Binary string: C:\projects\libgit2sharp-nativebinaries\libgit2\build\build64\RelWithDebInfo\git2-106a5f2.pdb source: git2-106a5f2.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\stree_gri\obj\Debug\stree_gri.pdb source: stree_gri.exe.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.Git\obj\Debug\SourceTree.Dvcs.Git.pdb source: SourceTree.exe, 00000004.00000002.2441961915.000001D7F4C12000.00000002.00000001.01000000.00000041.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Api.Framework\obj\Debug\Sourcetree.Api.Framework.pdb source: SourceTree.exe, 00000004.00000002.2441452133.000001D7F4BA2000.00000002.00000001.01000000.0000003A.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Sourcetree.Installer.Squirrel\obj\Debug\Sourcetree.Installer.Squirrel.pdb source: SourceTree.exe, 00000004.00000002.2442714316.000001D7F4CC2000.00000002.00000001.01000000.00000046.sdmp
Source: Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2449649910.000001D7F54A2000.00000002.00000001.01000000.0000005E.sdmp, Newtonsoft.Json.dll.3.dr
Source: Binary string: /_/src/GongSolutions.WPF.DragDrop/obj/Release/net48/GongSolutions.WPF.DragDrop.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2448135668.000001D7F5322000.00000002.00000001.01000000.00000055.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Dvcs.None\obj\Debug\SourceTree.Dvcs.None.pdb source: SourceTree.exe, 00000004.00000002.2441785716.000001D7F4BF2000.00000002.00000001.01000000.0000003F.sdmp
Source: Binary string: ReactiveUI.WPF.pdb source: SourceTree.exe, 00000004.00000002.2433396437.000001D7F40C2000.00000002.00000001.01000000.00000018.sdmp
Source: Binary string: /_/src/Primitives/src/obj/Release/netstandard2.0/Microsoft.Extensions.Primitives.pdb source: SourceTree.exe, 00000004.00000002.2438899966.000001D7F4942000.00000002.00000001.01000000.00000024.sdmp
Source: Binary string: C:\Users\Administrator\code2\ae3e0d9d-8f1c-53dc-b46b-65dce19487a8\1677043917973\build\Bitbucket.Libraries\BitbucKitServer.Net\BitbucKitServer.Net.Refit\obj\Release\BitbucKitServer.Net.Refit.pdb source: SourceTree.exe, 00000004.00000002.2433092664.000001D7F3DF2000.00000002.00000001.01000000.00000016.sdmp
Source: Binary string: C:\projects\gitlabapiclient\src\GitLabApiClient\obj\Release\netstandard2.0\GitLabApiClient.pdb source: SourceTree.exe, 00000004.00000002.2449464204.000001D7F5462000.00000002.00000001.01000000.0000005D.sdmp
Source: Binary string: c:\Users\Administrator\actions-runner2\_work\sourcetreewin\sourcetreewin\Atlassian.Libraries\Atlassian.Utilities\Atlassian.Utilities\obj\Release\Atlassian.Utilities.pdb source: SourceTree.exe, 00000004.00000002.2440307772.000001D7F4AB2000.00000002.00000001.01000000.00000030.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Ui.FileListContainer.Split.Wpf\obj\Debug\SourceTree.Ui.FileListContainer.Split.Wpf.pdb source: SourceTree.exe, 00000004.00000002.2447311337.000001D7F51B2000.00000002.00000001.01000000.00000051.sdmp
Source: Binary string: c:\projects\bitbucket.org\atlassianlabs\askpass\Askpass.UI.Wpf\obj\Release\Askpass.UI.Wpf.pdbH source: Askpass.UI.Wpf.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\Microsoft.Alm\obj\Debug\Microsoft.Alm.pdb source: Microsoft.Alm.dll.3.dr
Source: Binary string: /_/src/Configuration/Config/src/obj/Release/netstandard2.0/Microsoft.Extensions.Configuration.pdbSHA256 source: SourceTree.exe, 00000004.00000002.2433921178.000001D7F4302000.00000002.00000001.01000000.0000001D.sdmp
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Bitbucket.Libraries\Bitbucket.Net\BitbucKit.Net.Api\obj\Release\netstandard2.0\BitbucKit.Net.Api.pdb source: SourceTree.exe, 00000004.00000002.2448014407.000001D7F5312000.00000002.00000001.01000000.00000054.sdmp, BitbucKit.Net.Api.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\763db6d4-2acb-5c63-9de6-7ada1022506a\1713172038208\build\Bitbucket.Libraries\Bitbucket.Net\BitbucKit.Net.Api\obj\Release\netstandard2.0\BitbucKit.Net.Api.pdbSHA256R source: SourceTree.exe, 00000004.00000002.2448014407.000001D7F5312000.00000002.00000001.01000000.00000054.sdmp, BitbucKit.Net.Api.dll.3.dr
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Host.Bitbucket.Server\obj\Debug\SourceTree.Host.Bitbucket.Server.pdb source: SourceTree.exe, 00000004.00000002.2446605100.000001D7F50F2000.00000002.00000001.01000000.00000048.sdmp
Source: Binary string: /_/src/Logging/Logging.Abstractions/src/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Abstractions.pdbSHA256 source: Update.exe, 00000003.00000002.2337346163.000000000399C000.00000004.00000800.00020000.00000000.sdmp, Update.exe, 00000003.00000002.2337346163.00000000039C2000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423005552.000001D7D9C42000.00000002.00000001.01000000.00000011.sdmp
Source: Binary string: C:\projects\libgit2sharp-nativebinaries\libgit2\build\build64\RelWithDebInfo\git2-106a5f2.pdb| source: git2-106a5f2.dll.3.dr
Source: Binary string: /LIB/NET45/MONO.CECIL.PDB.DLL source: Update.exe, 00000003.00000002.2337346163.00000000036C6000.00000004.00000800.00020000.00000000.sdmp, SourceTree.exe, 00000004.00000002.2423499610.000001D7DC1F0000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api\obj\Debug\netstandard2.0\SourceTree.Api.pdb source: SourceTree.exe, 00000004.00000002.2423381219.000001D7DB572000.00000002.00000001.01000000.00000014.sdmp
Source: Binary string: c:\TeamCity\buildAgent\work\1aad0b52fc40d6db\src\Core\obj\Release\NuGet.Core.pdb source: SourceTree.exe, 00000004.00000002.2455794809.000001D7F5CB2000.00000002.00000001.01000000.00000066.sdmp
Source: Binary string: Octokit.pdb source: SourceTree.exe, 00000004.00000002.2450903511.000001D7F5632000.00000002.00000001.01000000.00000061.sdmp
Source: Binary string: C:\Users\Administrator\code\bf33d5c8-6ccf-5a5d-af63-a4b075d6bb29\1719334951294\build\SourceTree.Api.Account.OAuth.TwoZero\obj\Debug\SourceTree.Api.Account.OAuth.TwoZero.pdb source: SourceTree.exe, 00000004.00000002.2441120442.000001D7F4B62000.00000002.00000001.01000000.00000036.sdmp, SourceTree.Api.Account.OAuth.TwoZero.dll.3.dr
Source: SourceTreeSetup-3.4.19.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: SourceTreeSetup-3.4.19.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: SourceTreeSetup-3.4.19.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: SourceTreeSetup-3.4.19.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: SourceTreeSetup-3.4.19.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_060EE420 push es; retn 0004h 3_2_060EE430
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_060E1E11 push es; ret 3_2_060E1E20
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_060E1EF1 push es; ret 3_2_060E1F00
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_060E4FA1 push es; ret 3_2_060E4FB0
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_060EFD1F push es; retn 0008h 3_2_060EFD20
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_060E1810 push es; ret 3_2_060E1820
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F9791 push es; ret 3_2_064F97A0
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F85E0 push es; ret 3_2_064F85F0
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F7380 push es; ret 3_2_064F7390
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F8380 push es; ret 3_2_064F8390
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F73A0 push es; ret 3_2_064F73B0
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064FF015 pushfd ; iretd 3_2_064FF059
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F9010 push es; ret 3_2_064F9020
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F51F0 push es; ret 3_2_064F5200
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F6F31 push es; ret 3_2_064F6F40
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064FACE3 push edi; ret 3_2_064FACE5
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_064F6970 push es; ret 3_2_064F6980
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_067816C2 pushfd ; iretd 3_2_067816F1
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_067816B2 pushad ; iretd 3_2_067816C1
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_067882C8 push eax; ret 3_2_067882C9
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_06783E75 push ecx; retf 3_2_06783E76
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Code function: 3_2_06781B7A push esp; retf 3_2_06781B89
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848E1D2A5 pushad ; iretd 4_2_00007FF848E1D2A6
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F3A10F push E8FFFFFFh; iretd 4_2_00007FF848F3A12D
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F48167 push ebx; ret 4_2_00007FF848F4816A
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F47969 push ebx; retf 4_2_00007FF848F4796A
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F41629 pushad ; iretd 4_2_00007FF848F41663
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F455E9 pushad ; iretd 4_2_00007FF848F455ED
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F4A70C pushad ; iretd 4_2_00007FF848F4A710
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF848F45FB1 pushad ; iretd 4_2_00007FF848F45FD3
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 4_2_00007FF8493A7943 push ebx; retf 4_2_00007FF8493A796A
Drops PE files
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Validation.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ru\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.GitHub.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.FastTree.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.SharePointReporting.Integration.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\WeeGems.Option.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Alm.Git.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Benchmark.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Threading.Tasks.Extensions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Web.Http.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\Update.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Diff.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.Convention.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.VersionControl.Common.Integration.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ReactiveUI.WPF.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.DistributedTask.Common.Contracts.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Window.Welcome.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.AttributedModel.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\TimeZoneConverter.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\patch.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\stree_gri.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Git.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Splat.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Analytics.Emau.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\7z.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\it-IT\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Octokit.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\RestSharp.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.dll Jump to dropped file
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe File created: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Configuration.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ReactiveUI.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Lab.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Web.XmlTransform.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ColorCode.Core.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.Rocks.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.Hosting.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Validation.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\fr\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKitServer.Net.Refit.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileListContainer.Split.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.None.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Alm.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\slf4net.log4net.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.CommitContainer.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\Askpass.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Memory.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Accounts.Windows.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.UI.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Newtonsoft.Json.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\LibGit2Sharp.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\EncodingTools.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\MvvmValidation.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Build.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Framework.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.AtlassianAccount.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\lib\win32\x86\git2-106a5f2.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.Mdb.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.PathTrimmingTextBlock.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.VersionControl.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Reactive.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.Msft.TeamServices.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.DeleteTeamProject.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Test.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Dvcs.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\puttygen.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Squirrel.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\pageant.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.Runtime.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.GutenbergTextView.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\log4net.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Build2.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.Utilities.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\lib\win32\x64\git2-106a5f2.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Options.ConfigurationExtensions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Kent.Boogaart.HelperTrinity.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\getopt.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.OAuth.TwoZero.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DesktopBridge.Helpers.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ko\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Analytics.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\chimera.extensions.logging.log4net.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.Client.Interactive.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.WindowsAPICodePack.Shell.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.Binder.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Wiki.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.MultiColumn.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.TestManagement.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.WindowsAPICodePack.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\NuGet.Squirrel.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Git.UI.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Expression.Interactions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Primitives.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.TestManagement.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\plink.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.UI.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\SourceTreeShared.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\libiconv2.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Client.QueryLanguage.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ja\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.CustomActions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SharpCompress.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Lab.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Numerics.Vectors.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\HtmlAgilityPack.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Console.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Dragablz.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Composition.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nuget.Core.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\msys-1.0.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\slf4net.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.IdentityModel.Clients.ActiveDirectory.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Composition.VSMef.Net48.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Work.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DynamicData.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.Basic.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.Abstractions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.IdentityModel.Tokens.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.SourceControl.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\zh-CN\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\Askpass.UI.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\SourceTree.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Abstractions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Theme.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.IdentityModel.Logging.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\WeeGems.Require.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Dashboards.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.Server.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.TreeView.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Localisation.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Threading.Tasks.Dataflow.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Alm.Authentication.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKit.Net.Api.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.SingleColumn.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.TestImpact.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Core.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Windows.Interactivity.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\7z.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\GitLabApiClient.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DeltaCompressionDotNet.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Identity.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.GitLab.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nito.Disposables.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Build.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.Ui.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Refit.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Analytics.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.Pdb.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Lab.WorkflowIntegration.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.AnalyticsService.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nito.AsyncEx.Tasks.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\de\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKitServer.Net.Api.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.FileListContainer.NoStaging.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\NotificationsExtensions.Win10.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Options.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Policy.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.ProjectManagement.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Api.Account.Pat.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.TypedParts.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\libintl3.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Diff.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Discussion.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Proxy.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DevOne.Security.Cryptography.BCrypt.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.VersionControl.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Git.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\GongSolutions.Wpf.DragDrop.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Net.Http.Formatting.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Runtime.CompilerServices.Unsafe.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Collections.Immutable.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\pt-BR\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Client.DataStoreLoader.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Scm.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.TestManagement.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.DependencyInjection.Abstractions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.IdentityModel.Tokens.Jwt.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Svg.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKit.Net.Refit.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Kent.Boogaart.Converters.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\id\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\TaskDialog.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SquirrelTemp\SquirrelSetup.log Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe File created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\extras\licenses\EULA.pdf Jump to behavior
Stores files to the Windows start menu directory
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atlassian Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atlassian\Sourcetree.lnk Jump to behavior
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Registry key monitored for changes: HKEY_CURRENT_USER_Classes Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Process information set: NOOPENFILEERRORBOX Jump to behavior

Malware Analysis System Evasion
barindex
Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)
Source: SourceTree.exe, 00000007.00000002.3939895902.000001D3E8B6A000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: WINDOWS.FOUNDATION.DIAGNOSTICS.ASYNCCAUSALITYTRACER.DLLLY
Allocates memory with a write watch (potentially for evading sandboxes)
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Memory allocated: 3290000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Memory allocated: 33B0000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Memory allocated: 53B0000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Memory allocated: 1D7D9C20000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Memory allocated: 1D7F3600000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Memory allocated: 1D3CD850000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Memory allocated: 1D3E7150000 memory reserve | memory write watch Jump to behavior
Contains functionality for execution timing, often used to detect debuggers
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495DF3C9 rdtsc 7_2_00007FF8495DF3C9
Contains long sleeps (>= 3 min)
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Window / User API: threadDelayed 2814 Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Window / User API: threadDelayed 796 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Window / User API: threadDelayed 824 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Window / User API: threadDelayed 417 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Window / User API: threadDelayed 3167 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Window / User API: threadDelayed 1931 Jump to behavior
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Validation.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ru\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.GitHub.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.FastTree.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.SharePointReporting.Integration.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Alm.Git.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\WeeGems.Option.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Benchmark.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Web.Http.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Threading.Tasks.Extensions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.Convention.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.VersionControl.Common.Integration.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Diff.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.DistributedTask.Common.Contracts.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ReactiveUI.WPF.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Window.Welcome.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.AttributedModel.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\TimeZoneConverter.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\stree_gri.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\patch.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Git.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Splat.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Analytics.Emau.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\7z.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\it-IT\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\RestSharp.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Octokit.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Configuration.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ReactiveUI.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Lab.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Web.XmlTransform.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ColorCode.Core.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.Hosting.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.Rocks.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Validation.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\fr\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKitServer.Net.Refit.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\slf4net.log4net.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Alm.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.None.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileListContainer.Split.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.CommitContainer.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\Askpass.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Memory.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Accounts.Windows.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.UI.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Newtonsoft.Json.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\LibGit2Sharp.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\EncodingTools.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\MvvmValidation.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Build.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.AtlassianAccount.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Framework.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\lib\win32\x86\git2-106a5f2.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.Mdb.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.PathTrimmingTextBlock.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.VersionControl.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Reactive.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.Msft.TeamServices.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.DeleteTeamProject.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Test.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Dvcs.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\puttygen.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Squirrel.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\pageant.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.Runtime.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.GutenbergTextView.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\log4net.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Build2.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.Utilities.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Options.ConfigurationExtensions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\lib\win32\x64\git2-106a5f2.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\getopt.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Kent.Boogaart.HelperTrinity.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.OAuth.TwoZero.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DesktopBridge.Helpers.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\chimera.extensions.logging.log4net.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ko\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Analytics.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.Client.Interactive.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.WindowsAPICodePack.Shell.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.Binder.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Wiki.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.MultiColumn.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.TestManagement.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.WindowsAPICodePack.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\NuGet.Squirrel.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Git.UI.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Expression.Interactions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Primitives.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.TestManagement.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\putty\plink.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.UI.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\SourceTreeShared.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\libiconv2.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Client.QueryLanguage.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ja\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SharpCompress.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.CustomActions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Lab.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Numerics.Vectors.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\HtmlAgilityPack.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Console.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Dragablz.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Composition.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nuget.Core.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\msys-1.0.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\slf4net.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.IdentityModel.Clients.ActiveDirectory.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Composition.VSMef.Net48.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Work.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DynamicData.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.Basic.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.Abstractions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.IdentityModel.Tokens.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.SourceControl.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\zh-CN\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\Askpass.UI.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\SourceTree.exe Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Abstractions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Theme.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.IdentityModel.Logging.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Dashboards.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\WeeGems.Require.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.Server.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.TreeView.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Localisation.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Threading.Tasks.Dataflow.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Alm.Authentication.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKit.Net.Api.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.SingleColumn.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.TestImpact.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Core.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Windows.Interactivity.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\7z.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\GitLabApiClient.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DeltaCompressionDotNet.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Identity.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.GitLab.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nito.Disposables.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Build.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.Ui.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Refit.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Analytics.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Mono.Cecil.Pdb.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Lab.WorkflowIntegration.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.AnalyticsService.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nito.AsyncEx.Tasks.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\de\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKitServer.Net.Api.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.FileListContainer.NoStaging.Wpf.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Options.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\NotificationsExtensions.Win10.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Policy.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.ProjectManagement.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Api.Account.Pat.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.TypedParts.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\tools\libintl3.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Diff.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Discussion.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Proxy.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.VersionControl.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Git.Client.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\GongSolutions.Wpf.DragDrop.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Net.Http.Formatting.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Runtime.CompilerServices.Unsafe.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Collections.Immutable.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Client.DataStoreLoader.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\pt-BR\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Scm.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.TestManagement.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.DependencyInjection.Abstractions.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.IdentityModel.Tokens.Jwt.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.WorkItemTracking.Common.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.WebApi.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKit.Net.Refit.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Svg.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Kent.Boogaart.Converters.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\id\SourceTree.Localisation.resources.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\TaskDialog.dll Jump to dropped file
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe TID: 5664 Thread sleep time: -922337203685477s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe TID: 6400 Thread sleep time: -922337203685477s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 7136 Thread sleep time: -922337203685477s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 7136 Thread sleep time: -30000s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 5908 Thread sleep count: 824 > 30 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 5908 Thread sleep count: 107 > 30 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 6476 Thread sleep time: -922337203685477s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 6148 Thread sleep time: -922337203685477s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 2700 Thread sleep time: -4611686018427385s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 2700 Thread sleep time: -60000s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe TID: 2700 Thread sleep time: -60000s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 30000 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Thread delayed: delay time: 30000 Jump to behavior
Source: SourceTree.exe, 00000007.00000002.3936305714.000001D3E7A00000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAWce%SystemRoot%\system32\mswsock.dll
Source: Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll.3.dr Binary or memory string: 6TestingCapablityInformationNVirtualMachineTestCapabilityInformationz
Source: SourceTreeSetup-3.4.19.exe, SourceTree-3.4.19-full.nupkg Binary or memory string: rVx}CQuIQeMui
Source: Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll.3.dr Binary or memory string: <>c__DisplayClass4_0<>c__DisplayClass5_0<>c__DisplayClass6_0<>c__DisplayClass7_0<GetCapabilityInformation>b__0<GetTestAgentController>b__0<GetCapabilityStatus>b__0<SyncCapability>b__0arg0<>9__4_1<GetTestAgentController>b__4_1<>9__5_1<GetCapabilityInformation>b__5_1<>9__6_1<GetCapabilityStatus>b__6_1FromXml`1ICollection`1IList`1arg1Int32arg2arg3arg4<>9<Module>Tmscorlib<>cSystem.Collections.GenericReadAddGuidAppendReplaceITestIntegrationServicetestServiceserviceResourceget_Codeget_SubCodeSoapFaultSubCodeget_Messageget_StatusMessageset_StatusMessagemessageRuntimeTypeHandleGetTypeFromHandleget_NameXmlQualifiedNameresourceNamem_testAgentMachineNameget_ComputerNameget_TestAgentNamem_testAgentNameget_ComponentNameget_MinSupportedDateTimeget_MaxSupportedDateTimeget_ServiceTypeget_NodeTypeXmlNodeTypeMessageTypeexceptionTypetypeget_CurrentUICultureget_CurrentCultureTfsHttpClientBaseLabProxyBaseParseLabSystemCapabilityStateCompilerGeneratedAttributeNeutralResourcesLanguageAttributeDebuggableAttributeComVisibleAttributeAssemblyTitleAttributeXmlAttributeAttributeTargetFrameworkAttributeStringFromXmlAttributeEnumFromXmlAttributeAssemblyFileVersionAttributeAssemblyInformationalVersionAttributeSatelliteContractVersionAttributeAssemblyDescriptionAttributeInternalsVisibleToAttributeAssemblyDefaultAliasAttributeCompilationRelaxationsAttributeAssemblyProductAttributeAssemblyCopyrightAttributeCLSCompliantAttributeMoveToNextAttributeParamArrayAttributeAssemblySignatureKeyAttributeAssemblyCompanyAttributeRuntimeCompatibilityAttributeget_ValuedefaultValuevalueMicrosoft.TeamFoundation.Client.ITfsTeamProjectCollectionObject.InitializeIndexOfget_Tracingset_TracingtracingSystem.Runtime.VersioningGetCollectionUriStringCollectionToStringGetStringWriteElementStringSubstringTraceSwitchget_TestIntegrationServiceUriget_AbsoluteUriget_LabSystemUriset_LabSystemUrilabSystemUriToUriget_TestAgentControllerUrim_testControllerUrilabEnvironmentUriuriMicrosoft.VisualStudio.Services.Common.InternalTFUtilMakeSoapCallMicrosoft.TeamFoundation.Lab.TestIntegration.Client.dllCheckForNullSystem.XmlFromXmlToXmlReadOuterXmlGetBoolget_Urlget_SoapNamespaceUrlget_ItemSystemEnumBooleanop_GreaterThanop_LessThanMicrosoft.TeamFoundationTestingCapablityInformationLabSystemTestingCapabilityInformationLabSystemCapabilityInformationget_LabSystemsCapabilityInformationGetCapabilityInformationVirtualMachineTestCapabilityInformationToTestCapabilityInformationSystem.GlobalizationSystem.Xml.SerializationSystem.Reflectionget_TeamProjectCollectionTfsTeamProjectCollectionteamProjectCollectionTfsConnectionTestEnvironmentInUseExceptionInvalidEnvironmentStateExceptionArgumentNullExceptionTestMachineConfigurationExceptionSoapExceptionTestAgentControllerExceptionget_InnerExceptioninnerExceptionTeamFoundationServerExceptionTestIntegrationServerExceptionArgumentExceptionConvertExceptionexceptionMicrosoft.TeamFoundation.CommonMicrosoft.VisualStudio.Services.CommonStringComparisonMakeSoapCallWithoutReturnGetTypeInfoCultureInfo
Source: Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll.3.dr Binary or memory string: Resource7TestingCapablityInformationOVirtualMachineTestCapabilityInformation
Source: SourceTree.exe, 00000004.00000002.2432229265.000001D7F3D32000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllAp
Source: Update.exe, 00000003.00000002.2345463693.000000000A25D000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAWdGg
Source: Microsoft.TeamFoundation.Lab.TestIntegration.Client.dll.3.dr Binary or memory string: VirtualMachineTestCapabilityInformation
Source: Update.exe, 00000003.00000002.2345463693.000000000A25D000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process information queried: ProcessInformation Jump to behavior
Contains functionality for execution timing, often used to detect debuggers
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Code function: 7_2_00007FF8495DF3C9 rdtsc 7_2_00007FF8495DF3C9
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Memory allocated: page read and write | page guard Jump to behavior
Creates a process in suspended mode (likely to inject code)
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe "C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe" --squirrel-install 3.4.19 Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Process created: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe "C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe" --squirrel-firstrun Jump to behavior
Queries the volume information (name, serial number etc) of a device
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Queries volume information: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Queries volume information: C:\Users\user\AppData\Local\SquirrelTemp\background.gif VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Queries volume information: C:\Users\user\AppData\Local\SquirrelTemp\background.gif VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\netstandard\v4.0_2.0.0.0__cc7b13ffcd2ddd51\netstandard.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Abstractions.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Console.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Options.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.InteropServices.RuntimeInformation\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.InteropServices.RuntimeInformation.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.UI.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Reactive.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ValueTuple\v4.0_4.0.0.0__cc7b13ffcd2ddd51\System.ValueTuple.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Theme.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Window.Welcome.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Dragablz.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.FastTree.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Composition.VSMef.Net48.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\TaskDialog.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Localisation.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\chimera.extensions.logging.log4net.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.Abstractions.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\slf4net.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Primitives.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\log4net.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.CustomActions.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Dvcs.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Composition.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Validation.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DesktopBridge.Helpers.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.AnalyticsService.Client.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.AnalyticsService.Client.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.GutenbergTextView.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.GutenbergTextView.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.PathTrimmingTextBlock.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.PathTrimmingTextBlock.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.Utilities.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Accounts.Windows.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Accounts.Windows.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Analytics.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Analytics.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Analytics.Emau.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Analytics.Emau.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.Basic.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.Basic.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.OAuth.TwoZero.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.OAuth.TwoZero.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Api.Account.Pat.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Api.Account.Pat.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Analytics.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Analytics.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Benchmark.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Benchmark.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Identity.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Identity.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Git.UI.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.Ui.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.None.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.None.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.AtlassianAccount.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.AtlassianAccount.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.Server.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.Server.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.GitHub.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.GitHub.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.GitLab.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.GitLab.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.Msft.TeamServices.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.Msft.TeamServices.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.UI.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.CommitContainer.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.MultiColumn.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.MultiColumn.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.SingleColumn.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.SingleColumn.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.FileListContainer.NoStaging.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.FileListContainer.NoStaging.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileListContainer.Split.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileListContainer.Split.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Collections.Immutable.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Threading.Tasks.Dataflow.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Threading.Tasks\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Threading.Tasks.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Diagnostics.Tracing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Diagnostics.Tracing.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Collections\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Collections.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Collections.Concurrent\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Collections.Concurrent.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Threading\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Threading.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\GongSolutions.Wpf.DragDrop.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ReactiveUI.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Splat.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Newtonsoft.Json.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Linq\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Linq.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ColorCode.Core.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\RestSharp.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKit.Net.Api.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKitServer.Net.Api.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Octokit.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\GitLabApiClient.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.Common.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.WebApi.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Squirrel.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.SourceControl.WebApi.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.TeamFoundation.Core.WebApi.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Composition.AttributedModel.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Windows.Interactivity.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DynamicData.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKitServer.Net.Refit.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\WeeGems.Require.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ReactiveUI.WPF.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nuget.Core.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\NuGet.Squirrel.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\netstandard\v4.0_2.0.0.0__cc7b13ffcd2ddd51\netstandard.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Abstractions.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Logging.Console.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Options.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.InteropServices.RuntimeInformation\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.InteropServices.RuntimeInformation.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.UI.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Reactive.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ValueTuple\v4.0_4.0.0.0__cc7b13ffcd2ddd51\System.ValueTuple.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Theme.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Window.Welcome.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Dragablz.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.FastTree.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Composition.VSMef.Net48.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\TaskDialog.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Localisation.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\chimera.extensions.logging.log4net.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Configuration.Abstractions.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\slf4net.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.Extensions.Primitives.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\log4net.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.CustomActions.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Dvcs.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Composition.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Validation.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DesktopBridge.Helpers.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.AnalyticsService.Client.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.AnalyticsService.Client.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.GutenbergTextView.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.GutenbergTextView.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.PathTrimmingTextBlock.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.PathTrimmingTextBlock.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.Utilities.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Atlassian.Utilities.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Analytics.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Analytics.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Analytics.Emau.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Account.Basic.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Api.Account.Pat.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Analytics.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Framework.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Framework.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Identity.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Identity.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Scm.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Api.Host.Scm.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Git.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Git.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.Ui.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Dvcs.Hg.Ui.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.AtlassianAccount.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Host.Bitbucket.Server.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.GitLab.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.Msft.TeamServices.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Host.Msft.TeamServices.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.UI.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Sourcetree.Installer.Squirrel.UI.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.CommitContainer.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.CommitContainer.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.UI.Diff.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.MultiColumn.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.SingleColumn.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileList.TreeView.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileListContainer.Split.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.Ui.FileListContainer.Split.Wpf.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\System.Collections.Immutable.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ReactiveUI.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Splat.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\DynamicData.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\WeeGems.Require.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\ReactiveUI.WPF.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Microsoft.VisualStudio.Services.Common.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Nuget.Core.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\BitbucKitServer.Net.Refit.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Octokit.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Newtonsoft.Json.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Squirrel.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\NuGet.Squirrel.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\GongSolutions.Wpf.DragDrop.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\Kent.Boogaart.Converters.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXmlLinq\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXmlLinq.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\NotificationsExtensions.Win10.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Collections\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Collections.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\SourceTreeSetup-3.4.19.exe Code function: 0_2_00E8A31B GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter, 0_2_00E8A31B
Source: C:\Users\user\AppData\Local\SquirrelTemp\Update.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid Jump to behavior
Source: C:\Users\user\AppData\Local\SourceTree\app-3.4.19\SourceTree.exe Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1523483 Sample: SourceTreeSetup-3.4.19.exe Startdate: 01/10/2024 Architecture: WINDOWS Score: 36 32 product-downloads.atlassian.com 2->32 34 d145e4fdyl6drh.cloudfront.net 2->34 40 Yara detected Generic Downloader 2->40 8 SourceTreeSetup-3.4.19.exe 5 2->8         started        11 SourceTreeSetup-3.4.19.exe 2->11         started        signatures3 process4 file5 22 C:\Users\user\AppData\Local\...\Update.exe, PE32 8->22 dropped 13 Update.exe 30 266 8->13         started        process6 dnsIp7 36 d145e4fdyl6drh.cloudfront.net 3.161.73.137, 443, 49713, 49721 AMAZON-02US United States 13->36 24 C:\Users\user\AppData\Local\...\RestSharp.dll, PE32 13->24 dropped 26 C:\Users\user\AppData\Local\...\Update.exe, PE32 13->26 dropped 28 C:\...\SourceTree.Localisation.resources.dll, PE32 13->28 dropped 30 197 other files (none is malicious) 13->30 dropped 17 SourceTree.exe 15 22 13->17         started        20 SourceTree.exe 37 13->20         started        file8 process9 signatures10 38 Tries to detect sandboxes and other dynamic analysis tools (process name or module or function) 17->38
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
3.161.73.137
 d145e4fdyl6drh.cloudfront.net United States
16509 AMAZON-02US false

Contacted Domains

Name IP Active
d145e4fdyl6drh.cloudfront.net 3.161.73.137 true
product-downloads.atlassian.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://product-downloads.atlassian.com/software/sourcetree/windows/ga/sourcetree_ga.ico false
    		unknown