Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
04/05/2023, 22:33
230504-2gzmashc9z 704/05/2023, 20:48
230504-zlfzmsgh7z 704/05/2023, 18:37
230504-w9tc4aed69 7Analysis
-
max time kernel
316s -
max time network
336s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
04/05/2023, 22:33
Static task
static1
Behavioral task
behavioral1
Sample
AffinityDesignerInstaller.exe
Resource
win10v2004-20230220-en
General
-
Target
AffinityDesignerInstaller.exe
-
Size
436.0MB
-
MD5
330380e25cd4ed381d8bb2aaad76fa32
-
SHA1
df77a010aeb90ca87283be7f99d5d5447348e8b1
-
SHA256
a25edad8dcff7c005d34063392a5ba3e211290800a405c91f78046840522751d
-
SHA512
8d120a13c57d91088b37b9b97061e486e36948fbe03a54e47e088fceb16b95d65468025e623c81a272d7056367aa4788723c4dad946c92965423a189e4daa884
-
SSDEEP
12582912:kvc0Cvsk4LWlZPrx6ho9phMRbVI53T7wcNd6czg:k00uskJlN0wka53dNd6h
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1675742406-747946869-1029867430-1000\Control Panel\International\Geo\Nation Designer.exe -
Executes dropped EXE 3 IoCs
pid Process 672 Designer.exe 744 crashpad_handler.exe 4392 cltest.exe -
Loads dropped DLL 64 IoCs
pid Process 4800 MsiExec.exe 5112 MsiExec.exe 5112 MsiExec.exe 5112 MsiExec.exe 5112 MsiExec.exe 5112 MsiExec.exe 5112 MsiExec.exe 2768 MsiExec.exe 2768 MsiExec.exe 2768 MsiExec.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe 672 Designer.exe -
Enumerates connected drives 3 TTPs 64 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\H: AffinityDesignerInstaller.exe File opened (read-only) \??\P: AffinityDesignerInstaller.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\M: AffinityDesignerInstaller.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\X: AffinityDesignerInstaller.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\U: AffinityDesignerInstaller.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\Q: AffinityDesignerInstaller.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\E: AffinityDesignerInstaller.exe File opened (read-only) \??\G: AffinityDesignerInstaller.exe File opened (read-only) \??\Y: AffinityDesignerInstaller.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\L: AffinityDesignerInstaller.exe File opened (read-only) \??\N: AffinityDesignerInstaller.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\S: AffinityDesignerInstaller.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\B: AffinityDesignerInstaller.exe File opened (read-only) \??\V: AffinityDesignerInstaller.exe File opened (read-only) \??\K: AffinityDesignerInstaller.exe File opened (read-only) \??\F: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\F: msiexec.exe File opened (read-only) \??\F: AffinityDesignerInstaller.exe File opened (read-only) \??\I: AffinityDesignerInstaller.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\T: AffinityDesignerInstaller.exe File opened (read-only) \??\Z: AffinityDesignerInstaller.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\O: AffinityDesignerInstaller.exe File opened (read-only) \??\W: AffinityDesignerInstaller.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\A: msiexec.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\ObjectControl\align.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\Tools\tools_slice.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\English.lproj\pages\Painting\create_custombrushes.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\ja.lproj\pages\ExportPersona\exportOptionsPanel.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\ja.lproj\pages\Tools\tools_dnut.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\ja.lproj\pages\Tools\tools_sharpenBrush.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\it.lproj\stylesheets\translation-win32.css msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\pt-BR.lproj\images\newdocument.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\fr.lproj\images\panel_character.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\pt-BR.lproj\pages\Tools\tools_calloutEllipse.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\effects_innerglow.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\ui\exportTIFF.png msiexec.exe File created C:\Program Files\Affinity Designer\Resources\Affinity Designer\zh-Hans.lproj\Startup.strings msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\es.lproj\pages\Tools\tools_placeimage.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\ja.lproj\pages\Tools\tools_calloutEllipse.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\clipping_after.jpg msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\Adjustments\adjustment_channelMixer.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\en-US.lproj\pages\Artboards\artboards_print.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\English.lproj\images\layers_arrange.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\it.lproj\pages\Adjustments\adjustment_ocio.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\shapes_ellipse1.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\zh-Hans.lproj\pages\LayerFX\create_layerFX.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\zh-Hans.lproj\pages\Panels\glyphPanel.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\fr.lproj\pages\Panels\brushesPanel.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\pixel_painting.png msiexec.exe File created C:\Program Files\Affinity Designer\Resources\ICC\USWebUncoated.icc msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\es.lproj\pages\Text\opentype_fonts.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\pt-BR.lproj\pages\Appendix\copyrights.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\pt-BR.lproj\pages\CurvesShapes\about_linesAndShapes.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\ui\constraints_minfit.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\ui\planar_side.png msiexec.exe File created C:\Program Files\Affinity Designer\Resources\etc\color\Apple_CMYK.icc msiexec.exe File created C:\Program Files\Affinity Designer\Resources\etc\encoding\ksc-euc-h msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\DesignAids\guides.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\English.lproj\pages\Adjustments\adjustment_posterize.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\it.lproj\pages\LayerFX\layerFX_innerShadow.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\cursor\cursor_rotate_105.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\en-US.lproj\images\packageCreating.jpg msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\en-US.lproj\pages\DesignAids\constraints.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\pt-BR.lproj\pages\ShareSavePrint\createSVG.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\es.lproj\pages\Tools\tools_Brush.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\it.lproj\pages\ShareSavePrint\creatingPackages.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\ui\line_cap_square.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\pt-BR.lproj\pages\Tools\tools_roundedRectangle.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\ui\preserveselectionmode.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\zh-Hans.lproj\pages\ObjectControl\duplicate.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\CurvesShapes\about_linesAndShapes.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\es.lproj\pages\ObjectControl\compound.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\fr.lproj\pages\DesignAids\constraints.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\fr.lproj\pages\ObjectControl\copyPasteOptions.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\it.lproj\pages\CurvesShapes\transform_linesAndShapes.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\symbols-before.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\ui\transform_tool.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\zh-Hans.lproj\pages\ObjectControl\isolating.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\en-US.lproj\pages\Workspace\toolbar.html msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\es.lproj\images\layerorder1.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\fillhandles_before.jpg msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\swatches_example3.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\ObjectControl\warp.html msiexec.exe File created C:\Program Files\Affinity Designer\Resources\Affinity Designer\base.lproj\livemask_presets.strings msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\pathtext_reflow.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\shared\stabilisation.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\es.lproj\images\newdocument.png msiexec.exe File created C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\English.lproj\pages\DesignAids\snapshot.html msiexec.exe -
Drops file in Windows directory 14 IoCs
description ioc Process File opened for modification C:\Windows\Installer\MSIFC03.tmp msiexec.exe File opened for modification C:\Windows\Installer\e57fb38.msi msiexec.exe File created C:\Windows\Installer\{3E47B1B9-99EB-43A5-AFC5-043A60951ACF}\icon.exe msiexec.exe File created C:\Windows\Installer\e57fb38.msi msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File created C:\Windows\Installer\SourceHash{3E47B1B9-99EB-43A5-AFC5-043A60951ACF} msiexec.exe File opened for modification C:\Windows\Installer\{3E47B1B9-99EB-43A5-AFC5-043A60951ACF}\icon.exe msiexec.exe File opened for modification C:\Windows\Installer\MSIFCC0.tmp msiexec.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File opened for modification C:\Windows\Installer\MSIFD8C.tmp msiexec.exe File opened for modification C:\Windows\Installer\ msiexec.exe File opened for modification C:\Windows\Installer\MSI83B5.tmp msiexec.exe File created C:\Windows\Installer\e57fb3a.msi msiexec.exe File opened for modification C:\Windows\SystemTemp\shiE024.tmp AffinityDesignerInstaller.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 5 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters vssvc.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Designer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier Designer.exe -
Modifies data under HKEY_USERS 3 IoCs
description ioc Process Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\1E\52C64B7E msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1e msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1f msiexec.exe -
Modifies registry class 24 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\ProductName = "Affinity Designer" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\PackageCode = "2745B943023B60C469DB6FBFB1AD8DE9" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\AdvertiseFlags = "388" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\InstanceType = "0" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D7B30DBF65BFB9A40BECDCE2ED2E0C2E\9B1B74E3BE995A34FA5C40A30659A1FC msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\SourceList msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\9B1B74E3BE995A34FA5C40A30659A1FC msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\Language = "1033" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\Version = "33554435" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\Assignment = "1" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\SourceList\Net msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Roaming\\Serif (Europe) Ltd\\Affinity Designer 2.0.3\\install\\0951ACF\\" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\SourceList\Media\1 = ";" msiexec.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\Clients = 3a0000000000 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\9B1B74E3BE995A34FA5C40A30659A1FC\MainFeature msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\ProductIcon = "C:\\Windows\\Installer\\{3E47B1B9-99EB-43A5-AFC5-043A60951ACF}\\icon.exe" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Roaming\\Serif (Europe) Ltd\\Affinity Designer 2.0.3\\install\\0951ACF\\" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\SourceList\Media msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\SourceList\Media\DiskPrompt = "[1]" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\AuthorizedLUAApp = "0" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\DeploymentFlags = "3" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D7B30DBF65BFB9A40BECDCE2ED2E0C2E msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9B1B74E3BE995A34FA5C40A30659A1FC\SourceList\PackageName = "AffinityDesignerInstaller.msi" msiexec.exe -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 672 Designer.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3500 msiexec.exe 3500 msiexec.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeSecurityPrivilege 3500 msiexec.exe Token: SeCreateTokenPrivilege 4156 AffinityDesignerInstaller.exe Token: SeAssignPrimaryTokenPrivilege 4156 AffinityDesignerInstaller.exe Token: SeLockMemoryPrivilege 4156 AffinityDesignerInstaller.exe Token: SeIncreaseQuotaPrivilege 4156 AffinityDesignerInstaller.exe Token: SeMachineAccountPrivilege 4156 AffinityDesignerInstaller.exe Token: SeTcbPrivilege 4156 AffinityDesignerInstaller.exe Token: SeSecurityPrivilege 4156 AffinityDesignerInstaller.exe Token: SeTakeOwnershipPrivilege 4156 AffinityDesignerInstaller.exe Token: SeLoadDriverPrivilege 4156 AffinityDesignerInstaller.exe Token: SeSystemProfilePrivilege 4156 AffinityDesignerInstaller.exe Token: SeSystemtimePrivilege 4156 AffinityDesignerInstaller.exe Token: SeProfSingleProcessPrivilege 4156 AffinityDesignerInstaller.exe Token: SeIncBasePriorityPrivilege 4156 AffinityDesignerInstaller.exe Token: SeCreatePagefilePrivilege 4156 AffinityDesignerInstaller.exe Token: SeCreatePermanentPrivilege 4156 AffinityDesignerInstaller.exe Token: SeBackupPrivilege 4156 AffinityDesignerInstaller.exe Token: SeRestorePrivilege 4156 AffinityDesignerInstaller.exe Token: SeShutdownPrivilege 4156 AffinityDesignerInstaller.exe Token: SeDebugPrivilege 4156 AffinityDesignerInstaller.exe Token: SeAuditPrivilege 4156 AffinityDesignerInstaller.exe Token: SeSystemEnvironmentPrivilege 4156 AffinityDesignerInstaller.exe Token: SeChangeNotifyPrivilege 4156 AffinityDesignerInstaller.exe Token: SeRemoteShutdownPrivilege 4156 AffinityDesignerInstaller.exe Token: SeUndockPrivilege 4156 AffinityDesignerInstaller.exe Token: SeSyncAgentPrivilege 4156 AffinityDesignerInstaller.exe Token: SeEnableDelegationPrivilege 4156 AffinityDesignerInstaller.exe Token: SeManageVolumePrivilege 4156 AffinityDesignerInstaller.exe Token: SeImpersonatePrivilege 4156 AffinityDesignerInstaller.exe Token: SeCreateGlobalPrivilege 4156 AffinityDesignerInstaller.exe Token: SeCreateTokenPrivilege 4156 AffinityDesignerInstaller.exe Token: SeAssignPrimaryTokenPrivilege 4156 AffinityDesignerInstaller.exe Token: SeLockMemoryPrivilege 4156 AffinityDesignerInstaller.exe Token: SeIncreaseQuotaPrivilege 4156 AffinityDesignerInstaller.exe Token: SeMachineAccountPrivilege 4156 AffinityDesignerInstaller.exe Token: SeTcbPrivilege 4156 AffinityDesignerInstaller.exe Token: SeSecurityPrivilege 4156 AffinityDesignerInstaller.exe Token: SeTakeOwnershipPrivilege 4156 AffinityDesignerInstaller.exe Token: SeLoadDriverPrivilege 4156 AffinityDesignerInstaller.exe Token: SeSystemProfilePrivilege 4156 AffinityDesignerInstaller.exe Token: SeSystemtimePrivilege 4156 AffinityDesignerInstaller.exe Token: SeProfSingleProcessPrivilege 4156 AffinityDesignerInstaller.exe Token: SeIncBasePriorityPrivilege 4156 AffinityDesignerInstaller.exe Token: SeCreatePagefilePrivilege 4156 AffinityDesignerInstaller.exe Token: SeCreatePermanentPrivilege 4156 AffinityDesignerInstaller.exe Token: SeBackupPrivilege 4156 AffinityDesignerInstaller.exe Token: SeRestorePrivilege 4156 AffinityDesignerInstaller.exe Token: SeShutdownPrivilege 4156 AffinityDesignerInstaller.exe Token: SeDebugPrivilege 4156 AffinityDesignerInstaller.exe Token: SeAuditPrivilege 4156 AffinityDesignerInstaller.exe Token: SeSystemEnvironmentPrivilege 4156 AffinityDesignerInstaller.exe Token: SeChangeNotifyPrivilege 4156 AffinityDesignerInstaller.exe Token: SeRemoteShutdownPrivilege 4156 AffinityDesignerInstaller.exe Token: SeUndockPrivilege 4156 AffinityDesignerInstaller.exe Token: SeSyncAgentPrivilege 4156 AffinityDesignerInstaller.exe Token: SeEnableDelegationPrivilege 4156 AffinityDesignerInstaller.exe Token: SeManageVolumePrivilege 4156 AffinityDesignerInstaller.exe Token: SeImpersonatePrivilege 4156 AffinityDesignerInstaller.exe Token: SeCreateGlobalPrivilege 4156 AffinityDesignerInstaller.exe Token: SeCreateTokenPrivilege 4156 AffinityDesignerInstaller.exe Token: SeAssignPrimaryTokenPrivilege 4156 AffinityDesignerInstaller.exe Token: SeLockMemoryPrivilege 4156 AffinityDesignerInstaller.exe Token: SeIncreaseQuotaPrivilege 4156 AffinityDesignerInstaller.exe Token: SeMachineAccountPrivilege 4156 AffinityDesignerInstaller.exe -
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 4156 AffinityDesignerInstaller.exe 984 msiexec.exe 984 msiexec.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 672 Designer.exe 672 Designer.exe 672 Designer.exe -
Suspicious use of WriteProcessMemory 18 IoCs
description pid Process procid_target PID 3500 wrote to memory of 4800 3500 msiexec.exe 89 PID 3500 wrote to memory of 4800 3500 msiexec.exe 89 PID 3500 wrote to memory of 4800 3500 msiexec.exe 89 PID 4156 wrote to memory of 984 4156 AffinityDesignerInstaller.exe 90 PID 4156 wrote to memory of 984 4156 AffinityDesignerInstaller.exe 90 PID 4156 wrote to memory of 984 4156 AffinityDesignerInstaller.exe 90 PID 3500 wrote to memory of 5112 3500 msiexec.exe 91 PID 3500 wrote to memory of 5112 3500 msiexec.exe 91 PID 3500 wrote to memory of 5112 3500 msiexec.exe 91 PID 3500 wrote to memory of 2612 3500 msiexec.exe 99 PID 3500 wrote to memory of 2612 3500 msiexec.exe 99 PID 3500 wrote to memory of 2768 3500 msiexec.exe 101 PID 3500 wrote to memory of 2768 3500 msiexec.exe 101 PID 3500 wrote to memory of 2768 3500 msiexec.exe 101 PID 672 wrote to memory of 744 672 Designer.exe 106 PID 672 wrote to memory of 744 672 Designer.exe 106 PID 672 wrote to memory of 4392 672 Designer.exe 107 PID 672 wrote to memory of 4392 672 Designer.exe 107 -
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\AffinityDesignerInstaller.exe"C:\Users\Admin\AppData\Local\Temp\AffinityDesignerInstaller.exe"1⤵
- Enumerates connected drives
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4156 -
C:\Windows\SysWOW64\msiexec.exe"C:\Windows\system32\msiexec.exe" /i "C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\AffinityDesignerInstaller.msi" AI_SETUPEXEPATH=C:\Users\Admin\AppData\Local\Temp\AffinityDesignerInstaller.exe SETUPEXEDIR=C:\Users\Admin\AppData\Local\Temp\ EXE_CMD_LINE="/exenoupdates /forcecleanup /wintime 1683006351 "2⤵
- Enumerates connected drives
- Suspicious use of FindShellTrayWindow
PID:984
-
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3500 -
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding DECAEB9756F8AA6FF228DF64FA0608CE C2⤵
- Loads dropped DLL
PID:4800
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 127A9C82CB67A7540DA650C69FEE75C1 C2⤵
- Loads dropped DLL
PID:5112
-
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:22⤵PID:2612
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 93038482922E9A5BAC3AEB40E3334CFE2⤵
- Loads dropped DLL
PID:2768
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
PID:1700
-
C:\Program Files\Affinity Designer\Designer.exe"C:\Program Files\Affinity Designer\Designer.exe"1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:672 -
C:\Program Files\Affinity Designer\crashpad_handler.exe"C:\Program Files\Affinity Designer\crashpad_handler.exe" "--attachment=attachment_Log.txt=C:\Users\Admin\.affinity\Designer\2.0 (Store)\Log.txt" "--database=C:\Users\Admin\.affinity\Designer\2.0 (Store)\CrashReports" "--metrics-dir=C:\Users\Admin\.affinity\Designer\2.0 (Store)\CrashReports" --url=https://seriflabs.sp.backtrace.io:6098 --annotation=format=minidump --annotation=product.name=Designer --annotation=product.type=retail --annotation=token=261a09b9dec3672bad6cbc9d5061853c27ef603ea8d91962f74297e834ad4968 --annotation=version.build=1688 --annotation=version.full=2.0.3.1688 --annotation=version.semver=2.0.3 --initial-client-data=0x518,0x51c,0x520,0x510,0x524,0x7ffe19e2f130,0x7ffe19e2f148,0x7ffe19e2f1602⤵
- Executes dropped EXE
PID:744
-
-
C:\Program Files\Affinity Designer\cltest.exe"C:\Program Files\Affinity Designer\cltest.exe" platform2⤵
- Executes dropped EXE
PID:4392
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
581KB
MD578eb5a635365b6c68ba9501dfefd0d05
SHA1ec4af03eb4f8f99559c988ff6c0275fc568369f3
SHA256a9ed9e5e4c7e81b3ac6e80f8dc009ae46c66425eb8daecdffe8563c6036813c1
SHA512df36f02a37bb0f3e67b736759475259d7ed2e5867d9739bc9e94740ede18a042443e04ecc0e130a62ebf7e74f23e1bc78cb844b849bd053057ed0761fcde69ac
-
Filesize
3.8MB
MD5bf3f8aa315a4b9205a88295be206a710
SHA1fdf1b5565129a957c061c10367914c5b86162363
SHA256437241d8473c5e0b564c498f4c9ef5de108e5f57861152b8ad89e5500ee1a7b6
SHA5123b8cc4561bc4c119f0056ee22640aa726ab840d4a4eb38e31ba6dddb921f37ea0dc6dbe203445400cfc1e5450bfe1a56b45d1dc9fae5620428c955799f54d729
-
C:\Program Files\Affinity Designer\DesignerHelp\Contents\Resources\English.lproj\stylesheets\translation-win32.css
Filesize751B
MD5697174674cc0e929f1ab91ff4bea55e2
SHA11a17263c2f5e78eef89d8c0eca632bad3ce48293
SHA2567040d333bfeabd274e63de550f89fe6a02259fd864d97bdefec8921ec8f55e1b
SHA5125f45a51e5b0a760a6f5a3d8dcd3a0eb83e3a5eea629c38a3a6271271313191d6fa6d75c3c8e4b411617c76889d4749f973abb04b000184bfaa0f614ba9069d29
-
Filesize
5KB
MD5f34c2c9ea5f4d1673c2f866ff3278d7c
SHA183eaa0ba30174ebf8b86186fe97d50c499a9d9c9
SHA256df0adf1e55f0173665290ea814fff8d214bcc6398583434d78ed1fe021b03d83
SHA51216e4d4ed3ee961c7332c42f72953f175cf5b770578ac649fb8bbf7ebe21bc5a7445527dd13ae8aa6cbe5727c2b72c72ec03b6c5ed69a77a9254d2a75b88d5e16
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\AffinityDesignerInstaller.msi
Filesize2.2MB
MD59c267b379707ebaa6bdf8e958c40eed0
SHA1ae1b061a874f611ede9e3713204355f0f93302ea
SHA256745e9c8485ec22d56d610f042bb7620ef1b3faa3e6acc343f4cd4a2ad626a89a
SHA512e043f62f10f0a151da0913817a3d79db1871d1f3948315e3531325dac0bfa095608c5c934f29b584b06f48e16e257770b43fa9f4e5e150df790884a55a4111e8
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\AffinityDesignerInstaller.msi
Filesize2.2MB
MD59c267b379707ebaa6bdf8e958c40eed0
SHA1ae1b061a874f611ede9e3713204355f0f93302ea
SHA256745e9c8485ec22d56d610f042bb7620ef1b3faa3e6acc343f4cd4a2ad626a89a
SHA512e043f62f10f0a151da0913817a3d79db1871d1f3948315e3531325dac0bfa095608c5c934f29b584b06f48e16e257770b43fa9f4e5e150df790884a55a4111e8
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Info.plist
Filesize1KB
MD53026a419f81fb5419559b4a7eb368d2c
SHA170e5a0eb12fabe598f7877e29020b354d8e620af
SHA256eb7bf4b2d27d104b285d12fba74eec718822f4d2e79dba89b7b98fa0782619db
SHA512283847c8f369a73425c482a8b0483d18fa69fa7aec50c0015489054363f139d7946b1f7aeeee0037f53816e8d4d8ef8ecad97148929184e5b45020e23b1e3b3c
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\help.idx
Filesize2.1MB
MD5ad2298d800420ae93ebf5b0bb73347af
SHA1db27c714b7f51e67ade5b25714c04106633d5e23
SHA256fe05dc740ce48eab99fc244f486b493c3a20834ceea847055a81bdcdbb58413f
SHA512db75d9616f25f625acb83290a3d05c7a3c1bd5bbd996199b6e9c8a48dea4b4ba1fa0ea0498675b48d780785c956daadb9efc52b340efd472813ab82c10669467
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\images\brushDynamics.jpg
Filesize51KB
MD5c0d60d3d6d24c1cb3f3c921e8a066160
SHA1c1713934dba65286a9a36b78175863d09b46e479
SHA256de1ba8afe93a7cfa4d2a25f9158388d47bad6be5e0a39b13de9773e094a4ff88
SHA512fe0d339b5773c6ad0d3491a92bfcb98defca77f1a02fc453d5c648d48c8fafd933874a2730715bdcd3c99fa9ba8d1ce1c0dd2156dd27ed9578d2a26bd86d21a2
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\Addons\aboutAddons.html
Filesize3KB
MD5ec34f3dd6bc17735f72f13db51d62487
SHA1b7d647116c58880cf263b1be7c123634f2f98ca7
SHA256fd5a1dd15bc4b2c3de241638ea7edd84fdf3f36f026b7ae369f73cd4480b5a22
SHA512b45e4e8564528d35cd5e0653a3a90f59e6786917b0a81a4277a50f10ca869e2d76e1f01d8c841e70607da6343870010fa6ccdb7032a572f2a5f0ce9be58d282b
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\Adjustments\adjustment_3dLut.html
Filesize2KB
MD5b7d2bc850e603cffed74deb50a773d08
SHA129457287f9e9fa205190c8a6f7beafaa5b56e7b0
SHA256665fa6ecfc019539b1ac5e129f8ea8203edb551b76a095db84dd727bf05c46cc
SHA5124cb2132a8f9321c3813f5f2fa9573a69b699cbe8d5599a14dfa2ea17a122971c936e72c28184394af89eb2c51e283c599f1516de195e9d0d5d82a4b7ddd5b025
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\Appendix\contacting_us.html
Filesize1KB
MD5a901693039fba7850bac2be7b3bdfe59
SHA1ded3f79ac55351e13c33fb9b46ef4646d24e226c
SHA25601f783b9fa88502cfa548bdeff1c354f39c59c566c6673056afd9b4f670557ae
SHA5121ce1f1e67db03d6c05756840ad15c05370cb3bded02f8a63bc11041b40902678e1f02424a71bf0c65d595a9315981ce74d4d8c60af3a1fb21e2fc9ea23b9c480
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\Artboards\artboards_about.html
Filesize5KB
MD54070b18203c47dd52d3211c5c6a0c1d9
SHA1df4e72e9032763e05aee53a0d085732d53cc201c
SHA2567fa433290d920e90f51a2f7653061a05bd986fd1fcc2df28efc3d8162c010d3c
SHA5124f512c50e272ecb851980a27ba7999b3fa70310f1b92625b9f7b08410c3be247722a8e2a956bbbacafc9cf30d6008660934bae91ae37b5da22cd116135bf0620
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\Clr\aboutClr.html
Filesize2KB
MD56d3282f9cd5e423bc80ef89e5e51de13
SHA11305e4d0e8e93bbffb81ee233c5b43bd55a97ed7
SHA2567e7503bcbddb635ff40fbe9a626911f7ab923a6db64181743b2eaf9b2a78a00d
SHA51251787a6c9b9517dfcc7e76913e8054699b7b592abbba9c9b3a4638d7264ccfc9010ddc8a2b1cfa936dd3f0f8518430e9bef98b85bfcb4f4c9b304e9b23e839a6
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\CurvesShapes\about_geometricShapes.html
Filesize3KB
MD5e198870eb2f273d0ad842e5069b9505f
SHA14079bd42f7ecdd32be6ccdafe7bd37ee6db33765
SHA2568b856cd854ff1e2d8ad71bb1741830055611643aa9244c6c7dcdf45e77141d47
SHA512e79ca5ad792604ab079180a3f725a4db72b496ffbe157686e23b54c3af5b852df8bfe7af84aedc98084f079a2286da5578be0c5e6727e5ef07eef40107fd70b8
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\DesignAids\clipToCanvas.html
Filesize3KB
MD574478b6126cdbc10d2d167fb480008e4
SHA13a17d7e6f1997414459fe3d85dac0d3af05f6ee5
SHA256fd49846100ecb92b119d9b477b892288ee36f3bee894a80bf3531c239731f964
SHA51246f1a0c3b38b5b5445c3864c4f43a02e8ea9b50626e1924342aadb2c0c91b8a946dd39904acbd008fc779f562088d754d53fc8656b712da492cf11a73cebc621
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\de.lproj\pages\ExportPersona\exportOptionsPanel.html
Filesize3KB
MD50c05e4ca7ec05bc14ca9a9f17554867e
SHA12d4df837f56608831debbaf15b631d87b772b7a0
SHA25602639cb9a1befbb6f2621808f4b6afd4e56b58785d2008cc89cdcfc130a97b84
SHA5127f639e1d7a6ee96b9f2f221f0605c1a67eb1b3602cafb476197b93db2c772c3f7fc0d7fcc4444e5234b123b62fb0f0a4c6dad681d2c278b1540382ec397ca282
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\DesignerHelp\Contents\Resources\shared\adjustment_base05.jpg
Filesize46KB
MD56ea56319ea4c6f5cbae1616ecd6b4b06
SHA1056917bff6a5f10ec364c264553752a2c7f473c6
SHA2567cf20d3950c0086c2df257df6f72a6fe3ba1eb7dc9b0b13f105f0afde455b72b
SHA51266abf5be42c41af9d6a71bdb0e32c3f09a78ffc9645e84d4dca98e355c6a904b0b741be747270f8a0bd8bef9474065a77fddcdf18fcecd72110e8fffa6960987
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\abbreviations.propcol
Filesize29KB
MD5e87a0293d2c6561b49ea44677586e86b
SHA161a969e5af89c931c53d0abd2b98f8b2ec361acd
SHA256713e90fb032696ac3dcf7747b89c23977f4c37e5e3b82fbc8af1853fa91eb11a
SHA512a5d570aeb0fedc9079b3eab7033d4a5b5f2176fd25d573f29764caaf8cd00358d72feb79f487a499062a299b4c537feedddd9e182f00ad370f252290f38b79e5
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\base.lproj\abbreviations.strings
Filesize23KB
MD505dc6c2554054698dcd363650488c46d
SHA1dbe0b00f89609ebdacd9ea3f90248716b2d474f2
SHA256bd73de7639e25032b9eea53448f7d80a70725ba030a26b0d62f58aaf05fa6ba2
SHA5123cacdad86faeb05e4e50cc7ef0cbe891d46b334ba905dd59be5fa37539e163782f141007d6c9d276fa5203fd0983650be861d1c6a50cb9b6de638193301ddf7d
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\de.lproj\AboutDialog.strings
Filesize1006B
MD53f2b03c4a9eb16569eeaec9af4a3e7c5
SHA194730acd4ae65f47ae95786ca9a60d6614bd2264
SHA256bbc791cb27411081f9ac1f2f05e636f20d8497b8c94d4baf05bc152538efe31f
SHA5122df30edbe84bc14e5d8d6eb8e66fb5d8ba4c35fa5f0844ff784c05dd3a857830d426aa80bba2276b46c39c7a00191c17b451389da1ac8b6e0c69bdee3a82ef00
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\en-US.lproj\AboutDialog.strings
Filesize928B
MD521fc5740e680039018bba6aa9e76cb16
SHA14a9b1c1b31b292fa4ace937305d51b4c62e37a1f
SHA2562f5b45e833bd302c2298eaff5e259fd47cc25249c4704547364c07ed01410d37
SHA512f8bf78d5f85be9151fd6ac435e424698981c097ca636bc3e8137c48639dc90fcbb78a57d2e6f30e984da95afce3e185f749e34b6ac03e53de226f8b36e17b0c0
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\es.lproj\AboutDialog.strings
Filesize932B
MD5ed38395eada757098c480da0cddacf5e
SHA161ccc773d6237142677f41e7d764a3f83f518e37
SHA256fec7dda2cb40baeba847dcffcd1a57b3dbe04c814ca43c2ac9ea89bbb36c796f
SHA512bc6520dd59ff159aefa82f662682b820f657295a674aa33baf866bbb4c06e67b2906d62f61cd2ac82271019b85c9efc06b61e5a8cccc852fe91c956f2f980fa3
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\fr.lproj\AboutDialog.strings
Filesize922B
MD5092d71fd1872feb14cd40f2cab351d7d
SHA1bcd3dc66b43f129be4c2ef639e538f26b0073d33
SHA256381e031240e22226830570ee88c9738e9ace7900b8207e35e26976f0e278278a
SHA51205bf619da214172ecf1d6b4b92a6726a8aa04b51c9306eebb6d29b656ad5ab4af666fa504ffa7a27efd681b1ee45c03c94c7c0542e80e29334795e4111dbede4
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\it.lproj\AboutDialog.strings
Filesize938B
MD5aae6a8cc49d16ceab7b34e0c50b530b6
SHA1f9acc730de9e5a88f83b297cc159a1ee028b2761
SHA2569747ee965d005e6773016858ff2132247c5734de933c32238e95b90f78fd9c32
SHA51222d60eab8fc3f7a15a027e3faacfec4e3f1b49320411e40dd95f8c1faca9782917a08c0bddfb8ec43a1aad279c9039ff6d88f50c1790f5c781ece93b653d83e0
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\ja.lproj\AboutDialog.strings
Filesize906B
MD554db7f9f0f619adc82f628d298d88eb8
SHA11dabda25feed0edb3197d12d31bc74d8f120f95d
SHA2562d6c152a3a96f0bec1cdadc42d6380a8fe9851e9e3468d452463ea8dc1d76b5a
SHA512fc213ab9ec755eda62c5c137d7d1361d695b3a66b785383c5c41c1932790cd08b89bb24bd6b24fae509bb96679da4f36d260686068cd1fb42512f9b55637d266
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\pt-BR.lproj\AboutDialog.strings
Filesize928B
MD59582538a15a0115b6a7d8902ae82c0e5
SHA1dc532d6f53ea20fdccd04d52fd662852c9c90d5d
SHA2562922cea08e75bf86144cfc39d19cf1a6d9a35a020db0444cde273c40f49bc060
SHA5125932784111c5ab5c85184ab944a53bf3d47062604d1780059692cb45b3dacc3ee3cc871717572f906c414d6c7fb02b6443e54acaa34a0c211be47969448b21f5
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Affinity Designer\zh-Hans.lproj\AboutDialog.strings
Filesize882B
MD5e59b8948d6b5c9ce3d0e2deaa02048c7
SHA1211276f1e3e7c0941d844f5ff225e57c05b55088
SHA256fdb887aa3bd66ca275d7f6e61833b213cb5529f97503e467bc47d5deffe70cc5
SHA512c6b00372ffe15d6dbeae7833c83cfdb8eb5d7c5cab1fa1bc9fd10f646ce7cffe55925c604c0a473cb410acd871affc99445c2c5c7bf5b64744bda0860ee479bf
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dial\dial_adjustment_group.png
Filesize2KB
MD50066cb1b2107029f61d81dc7f8d3e680
SHA1866de7cac0b071d3750d9cdb99099da9805bf26b
SHA256a4355efc804bcf6faf0e7051dba2f90dc78d36e8745443a523fa6b40e10fc709
SHA51203f4cf592ea87d2d49e218bdf6aec9381e7da55249f15ef72955b066852beafbb3d2b3ddba0bb9ac0a50ff7ecfac9ae0f7b270335d1111c402719445a89ba1ce
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dictionaries\de-DE\de_DE_neu.aff
Filesize41KB
MD5f7ce052682a52972038af0431db78233
SHA1e444d358e3706984bc8f2b2c1dbb6ca86572a762
SHA256f71067042cac76f079d69d7c1e4b80c55d9c4e1fe8ea8acf72ad6058fd797c7c
SHA51200f43faccfb39e6fb547d3fce44c94fdc54887598e1a05c1b7dd86f8a1a249b2ff6baabdbfd3fc8af517041fd26197cda94734670e0e45fce35075802b0e4f63
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dictionaries\en-GB\en_GB.aff
Filesize3KB
MD512a35862ef2ac8ef99b52fdab0bc3831
SHA1ea78a321bf306b3d59ba3a8338da023861c0b4a3
SHA256b9b1c0678d417cdaf5ed190561c57c783b68ed8d1a4b64ba2e3d7e8ff5ffc5d4
SHA51220518f790dfe94fa5365eea54b66497b9f21dd92cb68d239531ad9e7d82a8e239b8883456813e4b86274d8f113c4040d4b697e38d4df2666875120c3aa02e2fa
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dictionaries\en-US\en_US.aff
Filesize3KB
MD512a35862ef2ac8ef99b52fdab0bc3831
SHA1ea78a321bf306b3d59ba3a8338da023861c0b4a3
SHA256b9b1c0678d417cdaf5ed190561c57c783b68ed8d1a4b64ba2e3d7e8ff5ffc5d4
SHA51220518f790dfe94fa5365eea54b66497b9f21dd92cb68d239531ad9e7d82a8e239b8883456813e4b86274d8f113c4040d4b697e38d4df2666875120c3aa02e2fa
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dictionaries\es-ES\es_ES.aff
Filesize160KB
MD54b606a5308692120a81f00a2a3c9113d
SHA1448a6b438bb558ecca9e9eb4ef867866e95aa59c
SHA25609ffa5c2ca95970f0a6c6daba5e5c850ed0d71daee88c2e85ad0cde8ba0bf1ff
SHA5129f27a09046087847a32cab9c7f197c69d59f82cae14a5d5c7b848973b429fc8a6d9bd5a270e83e9b8d421d9df238f44ebed60b9ebf73e0fe83e5cd0ac49b019b
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dictionaries\fr-FR\fr_FR.aff
Filesize337KB
MD525b3896fe0fbf73d73ac094eb45f75db
SHA107be064145d70776b9347030f966acdb2ac77374
SHA2565016b9e8f286103bf243d21143f40b76812e0401be36730a0e54f2aba2256c91
SHA512a94ece997afb041df559c029f2f1f1140efe1c320a06c641f0aa230e380db9e5059b384fb56f148ce514f281806049676c3417d4437a67549ac753b6932f5952
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dictionaries\it-IT\hyph_it_IT.dic
Filesize2KB
MD5e86e1df6754b5afa7ac8bfb480442640
SHA1e88b30127a3c9c437d400a170556b78b6001aea8
SHA2561f38a5b5aa3df66c8c2a47c57bab0208bd0875b5a0297e7f8efd6a35e0b93c57
SHA512d4ec7d1124fbeb01df400c55f039b0a83c32305ae17a5833e038f8da4438855122a1fb1bc82feb57c7c84da5924ae12f5acd42cd5c8f1ff657dc41718bad2372
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dictionaries\la\hyph_la.dic
Filesize2KB
MD5f564e4dc9d1f58c52f4187c9c9167d2f
SHA14d8bf48fdf0d26808e360b30f722a90dd5dd3fe2
SHA256e645adaf98bdb0eea3f08f755db19886256afd8131beb7daa84d5b7295dbebdf
SHA5126c67169e7077f6faf8213209d0b5db1adc9a850546717d3fcb49c71bd5233d48c72db2004e952add0e10686876ee07d21bc1bd6590cba4cfe1dc74e8440c2534
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Dictionaries\pt-BR\hyph_pt_BR.dic
Filesize11KB
MD5960010cc9f8875713335939749e38e3b
SHA1aaf584628f4bcea3002b4fe4c35e1e71688eb1d1
SHA256b34d086d922ffac13eea81ed0e8a8cb2b850451243b75cd9c220af0b85a40d4f
SHA512f8be674d0c7814a60ed1ae4e4489938ef2fc8b98a06773daa6174d3704a2fae97a858ff5204059cac324076e3019ee540f0193a306f1801ddaea6ee28855b328
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\ICC\AdobeRGB1998.icc
Filesize560B
MD5dea88382d899d5f6e573b432473ae138
SHA1806e8561209515151f477f2c7a6bd2b1a00bb63c
SHA256304f569a83c1e5eddaddac54e99ed03339333db013738bb499ab64f049887e28
SHA5121dd957ef51787f9753f94c24ae3eb4edb0bb120d144a9e36b812ac3d4ba7e292a3469fd2a510c67e4ea54142b1d9bad6d5ef133c04a4b72b6ba8be694edc63d7
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Pantone\PANTONE Color Bridge Coated V4.csv
Filesize80KB
MD5951484ca5a74dab7ebee7ae28efd05ae
SHA1b8e7464c5cc966acf69fddf6a2c42aec8d05a4db
SHA25608c06975ca9b627ee8f1a98bcabeace28b730fd7e9ac187c66fdfe595c8fd70f
SHA5126cc29f36bf5cd5b6ccef338ac46f95a3f0b5d9434b5f3f800dca4187b58c9b66fa3bf6f08f08942d73a3e8273e193e62c51ccfdf582c23dc6cb2d89cc7cd26ab
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\Standard CMaps\83pv-RKSJ-H.txt
Filesize6KB
MD5dab8861fbe1bad120c84994e4e0d4a70
SHA1dcd83afc33e77e87678829c7c5aff1e282856a9c
SHA25682ae2f6db71aa36c3604c8846add7db697f100c27c203374fb3226a1bea9753a
SHA5124170ad89538538d0174207a2d3d8e8e3505b40e951ca34b81ce918f2e4a341558bda787c5b200de7947ff90955282b8d55e02e5524570df356cae83a124fe416
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\String Encodings\Arabic.txt
Filesize24KB
MD53463fb31b8a9528fa0dab46fc8c80381
SHA10d4625ad042fb57402381e6318f3917d8d3d63a5
SHA2564ee069425ade44fe0ba8f5fee489ca8d6603287842881b5f04471ddd1ed4e5d1
SHA5129bf87fcc1ed6693891621fb85b7cefc1d6862ffcec96239e27c66d00bf3f784361ab42b1794da3aee8d3394703d96d6a94bf8b9c6c4079c5f53f844f04e92eae
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\etc\color\Adobe_CMYK.icc
Filesize84KB
MD5f6121656f9534a3cee0fc494e0a16ed6
SHA1f4f72368d812183222a051959465e648bd63b329
SHA2568735f70e0ccbd5cbeaf6b0fbfd94e7000352178a128e309cc359bf95cfb0e039
SHA512e0dcba2fff8643b75b20f9e7402c50e09bd4cdfaa7f6c8410b174790f7c67f9850d5f1d25fbd4a56315b4e2bcc2a1be8c47716294642ab1da89db83b4294b38f
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\etc\cour.t1
Filesize44KB
MD5d30ebe91b57bcca671154f1649cdc801
SHA1fe15f0c0b086ad03ed064e94a63e4ec96a57a1fe
SHA256bb162d65e886d6f6825218434753cfc19a3612d47231af9e0986f910e7a7d2f3
SHA51289069ca51c4fb77a6d42e1ac3b6f2306389780889730485e89348f7ddc6d5c7c8a269ffb3e95749c496c1442fd809c30e186bf67d4e12890bf741ef25da4f876
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\etc\encoding\78-euc-h
Filesize14KB
MD5370839cdfb43b7ebe4e445403a98aacd
SHA1fb73a64f56dedcae222e13db148db380a4323e6c
SHA25696350bce0c635cba4f6342338cb377af35c89dad7f4d69d02c8a1f98cb07ccd5
SHA512cf1cacf3e5da02f6649cc8c6cee8ab02ebb8f7c144424b2cd0f257993e2e50457fa2dd4e8c852cb8225502da42efcd4e8b8927336944602c54b61b5923ec7caa
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\Resources\icudt70l.dat
Filesize28.1MB
MD5740701fc36ba576cab0dc42594c95de2
SHA1a61548fb5b7139ebf483a34cbd01e3b0e6175457
SHA256672dafc4940a0183cb48c3e369c1a0795cc8dfbf19951c86ced0ad78398f9480
SHA51231e45b6741682b7315a2e6ff38e175e38ecd8511bdef622bdcc6542f4688dc175cef52285e5de0f754cee2b1a85b088583ad734d4fdb595934c9d883b9bca271
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\de\Serif.Affinity.resources.dll
Filesize556KB
MD5e007c712e7de73da93a327ac352dd9ae
SHA1ff1ad1d24dd321aeb497bc33b2d07807a16d6ba1
SHA256603f5bb875b9d17fa0c4a3904b817a15886e71ccd0507b185bdae4db6d97aecb
SHA512ffb77df6caefb04242fc9e70e542b3de0b822028f7d1685f3c31d7f1a51d3cb00a99c9e87b0be87b2e669778b4e93983efdc45172794c05bfd82298de267c955
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\de\Serif.Interop.Persona.resources.dll
Filesize1.5MB
MD5e78c8eb25c0168d66b23391fb047423e
SHA16ae875b177b24dbca2da00fc3d261d00185942bd
SHA25630f7aff1a41d841077fa6121f0f0ebcf2d12fadf7cd5843dce2b39cf2d345704
SHA5129a4424d2d3359b7f49e59cc3919ba4a6378a7294eb295c2c49462c24980c243867de04b8c15f5c96164f93928a56b2545585137bd991458bb47cc25b53511e0e
-
C:\Users\Admin\AppData\Roaming\Serif (Europe) Ltd\Affinity Designer 2.0.3\install\0951ACF\ProgramFiles64Folder\Affinity Designer\de\Serif.Windows.resources.dll
Filesize9KB
MD5737081712573c592e33c98e2a1f80cdb
SHA145df077927a8c9ba49e712496c85cd998df99bbb
SHA256e508a2b992bd628d3dcea78d2a5db458ae96cb48fdad94de5a41bb26e97f3f2e
SHA512bf24656bc037c9a7ebd3d66d4971dc361da910508e582271483cc8b71fddb69a19973ab09f0159c57048140c20aa01fa865a03732fe753538a7898f10205f58f
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
557KB
MD5e1423fc5ddaedc0152a09f4796243e31
SHA1c92cec1fb6093d6922fe64719e583048fca12153
SHA2563042d947f0e3accd3307d4d983aba352c4b01f6ca10aa45dbe660ca0a0a107de
SHA512fc21fadb5b86dc0c4fc8fea5d166b9b8a500df2b662c201626a8bcf6d3f7bd590b8ec3bae31f2f558b74ccb49ca74f51ee48b19bd047a27ef0c794b21cc84b39
-
Filesize
703KB
MD559f4b7e8b960987b68b311660c99957a
SHA13ba452e27d4bf53e72bf28cde68240290e72e46f
SHA2563b43d469e1f3656f948eabbd9e1ed99570a7962118fcfc9ccaa309eb657502bf
SHA51264bd1ddbc90dfae6a7b34b67eaa32a0fd03e5ccff7e25f997dfb488f56b7ab2c7fab867915d05ba40f215216f87942d035e740edd64db7cb6df049a589dde27b
-
Filesize
703KB
MD559f4b7e8b960987b68b311660c99957a
SHA13ba452e27d4bf53e72bf28cde68240290e72e46f
SHA2563b43d469e1f3656f948eabbd9e1ed99570a7962118fcfc9ccaa309eb657502bf
SHA51264bd1ddbc90dfae6a7b34b67eaa32a0fd03e5ccff7e25f997dfb488f56b7ab2c7fab867915d05ba40f215216f87942d035e740edd64db7cb6df049a589dde27b
-
Filesize
23.0MB
MD5796bead902c8b52fd4c120ea88d86011
SHA127653e347fb1a8a84733a55139f083291e9297c1
SHA256ed925baee805d73afc99297de244692acd607d07676deb334bbf4efd449b0db0
SHA5126dd4fb5d8b993aa4c6742edb7afc5796f31d571cd4f0713c8118db10e0a2873f67ba319f57e29403a2c8f00925da1503f31d56d5f9f098c126f44b4eda1fabf8
-
\??\Volume{93c6d6f9-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{d5496bc8-772f-4848-8b45-57200eafd2ec}_OnDiskSnapshotProp
Filesize5KB
MD5b314aedfba61ffee795c7b0937bf7239
SHA1566a368b6c4412730898befcf41e1cde8d7c474b
SHA256bf8723675d0ae7fecacc3e99b54c1ac60974cbfd9f6d2a1a1514bd51ba71fde5
SHA5124fa3ec95bdb2bf4d2ff071cc05306de12bc72341470d70b9d7bd7e98fabeafd78e4671082b2d3891904cb9fffbab7def6d287434fa6ee77c691dbfbd0c809523