Malware Analysis Report

2024-11-16 10:45

Sample ID 240603-k14xpaba33
Target GEN3i7iUpdatePackageV8.exe
SHA256 4cec01304868ca6c3c2011b93cb55810f6511b71a5ee52f4c8dc608f78e42067
Tags
evasion persistence trojan upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

4cec01304868ca6c3c2011b93cb55810f6511b71a5ee52f4c8dc608f78e42067

Threat Level: Known bad

The file GEN3i7iUpdatePackageV8.exe was found to be: Known bad.

Malicious Activity Summary

evasion persistence trojan upx

UAC bypass

Checks computer location settings

Executes dropped EXE

UPX packed file

Checks whether UAC is enabled

Adds Run key to start application

Drops autorun.inf file

Enumerates physical storage devices

Suspicious use of WriteProcessMemory

Checks SCSI registry key(s)

Suspicious use of SetWindowsHookEx

Modifies data under HKEY_USERS

Suspicious use of AdjustPrivilegeToken

System policy modification

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-03 09:05

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-03 09:04

Reported

2024-06-03 09:17

Platform

win10v2004-20240508-en

Max time kernel

43s

Max time network

48s

Command Line

"C:\Users\Admin\AppData\Local\Temp\GEN3i7iUpdatePackageV8.exe"

Signatures

UAC bypass

evasion trojan
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" C:\UpdatePackage\GHSSwissKnife.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\GEN3i7iUpdatePackageV8.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\UpdatePackage\GHSSwissKnife.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:13" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:18" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:5" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:6" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:9" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:23" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:8" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:11" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:19" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:14" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:20" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:22" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:24" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:1" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:4" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:7" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:12" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:15" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:16" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:17" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:21" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:2" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:3" C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\GHSSwissKnife = "C:\\UpdatePackage\\GHSSwissKnife.exe /Run-Script /Script:CUP.swiss /StartLine:10" C:\UpdatePackage\GHSSwissKnife.exe N/A

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\UpdatePackage\GHSSwissKnife.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" C:\UpdatePackage\GHSSwissKnife.exe N/A

Drops autorun.inf file

Description Indicator Process Target
File created C:\UpdatePackage\Video\autorun.inf C:\Users\Admin\AppData\Local\Temp\GEN3i7iUpdatePackageV8.exe N/A
File created \??\c:\UpdatePackage\Video\autorun.inf C:\Users\Admin\AppData\Local\Temp\GEN3i7iUpdatePackageV8.exe N/A
File opened for modification C:\UpdatePackage\Video\autorun.inf C:\Users\Admin\AppData\Local\Temp\GEN3i7iUpdatePackageV8.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\System32\vds.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\System32\vds.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\System32\vds.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\System32\vds.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1" C:\Windows\system32\LogonUI.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00 C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "233" C:\Windows\system32\LogonUI.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\UpdatePackage\GHSSwissKnife.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\UpdatePackage\GHSSwissKnife.exe N/A
N/A N/A C:\Windows\system32\LogonUI.exe N/A

System policy modification

evasion
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" C:\UpdatePackage\GHSSwissKnife.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\GEN3i7iUpdatePackageV8.exe

"C:\Users\Admin\AppData\Local\Temp\GEN3i7iUpdatePackageV8.exe"

C:\UpdatePackage\GHSSwissKnife.exe

"C:\UpdatePackage\GHSSwissKnife.exe" /Run-Script /Script:CUP.swiss

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\UpdatePackage\_script.cmd

C:\Windows\system32\diskpart.exe

"C:\Windows\system32\diskpart.exe" /s _mount.dip

C:\Windows\System32\vdsldr.exe

C:\Windows\System32\vdsldr.exe -Embedding

C:\Windows\System32\vds.exe

C:\Windows\System32\vds.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\UpdatePackage\_script.cmd

C:\Windows\system32\diskpart.exe

"C:\Windows\system32\diskpart.exe" /s _mount.dip

C:\Windows\system32\LogonUI.exe

"LogonUI.exe" /flags:0x4 /state0:0xa3970855 /state1:0x41c64e6d

Network

Country Destination Domain Proto
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 68.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 8.173.189.20.in-addr.arpa udp

Files

C:\UpdatePackage\tools\BIOS\bf771.exe

MD5 83f0dc2d1a6a368066c1abe6f7722c5f
SHA1 5ca048914e1c2638fcb378678eb38f7f1adf8c45
SHA256 a56a361df9783185953e8454ca5e99c5c38b686f8135dd89991944996ecc8d28
SHA512 28b2399df4fffab23f987c5eda24eb31aa2596f53408e23e86564b1ff1defc4baac451ddec79651585de98ae78fb2de1b65af555b2e2dad7fcc5b6ccbb5a10a1

C:\UpdatePackage\tools\BIOS\GEN7iBIOS_16.rom

MD5 4329d609af2a045a9da14bcd6b2c6a89
SHA1 97f4198cb886523fac0a6e010b4db4917e989fa6
SHA256 27415d863cb5180846375d988a00c6e3e0df45c382f0749ba9c8923976cfbf6a
SHA512 57bfdcead7490c07dc3be5a444de3049644ade1484138d03b08c38079afd698391ae29e251ec4fe12d84b3f1c32e4a20465eb6dbdf31c874af5e391a2626eab2

C:\UpdatePackage\Video\Graphics\Gfxv2_0.exe.config

MD5 899e708e589c09700bff1c73cb7d7002
SHA1 d98a730a190745037f0f26425952ec017360b513
SHA256 7e9a52f9bd9ed519b87d5419ccd97d9927feeecef2b904abf04abe4b62a786f0
SHA512 7bf5d9ad918fc214ed38ce410a4d1d7f6c3ab3484bf0b49b1df1c62f63ee60ff9274a9afbf2397f9878fb71078c0d0b591fa7feb3f19e0de53b7ce6c1b60c8e6

C:\UpdatePackage\Video\Graphics\Gfxv4_0.exe.config

MD5 59075b2a63df6a568123218bf4dc2696
SHA1 0f3f5ac3751c6ceac225c6ec2819194310bec764
SHA256 4d1231811481534df415027121edea292d2805fdf0863dc7de14a6047c2cd21f
SHA512 2f39a97df2d50e8b302fb42a2ade4118cf1f29794a7753184052e33147a586d2363734845b195e58f6ba682363d9f929b0a520ed1015e7c4f932cd12ccbea8b4

C:\UpdatePackage\Drivers\difxapi.dll

MD5 f5558c67a3adb662d43d40a1cbde4160
SHA1 74ad5dd123037cf4d434c5073cbe04c0bcba4e79
SHA256 83c43d65084cd202aa9982af6d87c963a05035f1e2cdac48304fa299584e3242
SHA512 6df9f780adda4f52d7fbb3baa6af3028c0523ff514f1df0e7dfe380ce21116e09a6f1f3820c316a9af7e16043eb04cdbfe5e885ca24528661c05e32cd18b2046

C:\UpdatePackage\GHSSwissKnife.exe

MD5 36dbaff075cedbba6c986f421f9a391b
SHA1 a89fbe060be334d874847a31666f74dd00256a39
SHA256 bdeda72d3bcde0e30ebeb3b090aa135ea25aebd8024698a92ac2d1ba1582ddad
SHA512 958af314c167e122d9220039c6936147ba3b8de8bc575a3cd525f7738fff59a08e9fa7a5f186fed086b68f71aad2567144db1eb975601eb31eda7ebe89883646

C:\UpdatePackage\CUP.swiss

MD5 dc8daa82937693d36f29d0dbb04e7138
SHA1 cb4b2e8bb0336dc29403c1f4491904facb4e1c85
SHA256 7170b6a216c11d07d2cabc7cd98290390d1bafd29abef87dfad7f8caaca153b8
SHA512 de5bf7e471395c4006203ef5fc982d09ab4dd0853845bcdb7b96b07209ff2c70b9dc70bb0e44ef8bd9b9fbf2f2c8bb979269021a441db236ee36fed17d9dae69

C:\UpdatePackage\_script.cmd

MD5 9c775c8ee56f05e65b0b16af60238e48
SHA1 b7b87c5a7a0f1dfc0a677ddacb4704a29e51bf29
SHA256 7b75f53963740c95ba4320c121ffa609ed20da7b35ce5900334c4adb050022f8
SHA512 69ea3e34d5e1acdedd4069b52e20d229c6df9029ce4f0a5215e196b7e5b765fc5256385fc8ddef01dd6d2cd31d007c165a6cd4eda73d90c62ac5e0a52930e3df

C:\UpdatePackage\_mount.dip

MD5 11f614da3e331782600633c4bbb346a8
SHA1 21e2bca4611bdccce9a383ee412ba0862dc6a225
SHA256 2ec2be502cabb3957d7f2a95a45cc8d6663203a845d294bbda5c1b14c0e23d9a
SHA512 432e7ad85faf848d23402f1125b2dd785d38d0eec60b4b7cdb70f1be33d56e5432b8488b1411adaab861af172055166f2ede6d5115c27b90577611610352ccd5

C:\UpdatePackage\Tools\api-ms-win-core-apiquery-l1-1-0.dll

MD5 f9df60b4c9be0a4903983c6dfb0ae8be
SHA1 70cd4bd3cb0eaa7b7a626fc24fa468073a77d729
SHA256 c37ff58915fe047dff823b2893efd9473660a90b60d9c5589b24d901a1ea792b
SHA512 961d13e331e5748a97fdaef6fdfc02ad51dac04c5dcfc542d8f36db3f77efdcf219d6d7201b51cd6d24b290fee7a2f387e40a6eaee747822dbc2addbfb0a84f6

C:\UpdatePackage\Tools\api-ms-win-downlevel-advapi32-l1-1-0.dll

MD5 4955c129b3ec7a9459978bc3439405a9
SHA1 886e0a82c92f2d41f8ee53eb2b14e71591daed0b
SHA256 2a2e74f0e94d88760824407b809b6a26b39480110aaae4516cfa86ac17786990
SHA512 ad88d21b96911e13939837e1dfd3a9edb7062d8a14c214a0c7919ac2efb26993e4f75a31b6d259c2ae697c465e0be7e37d8c6150fe18e9bcebe26490bb9a7b77

C:\UpdatePackage\Tools\api-ms-win-downlevel-advapi32-l1-1-1.dll

MD5 b1d700ad739fb6fc508db093b261b3c2
SHA1 7fb7bde20a62b7bc8aff43015c56c47108a238c3
SHA256 593ec671e706ba07f5a02a3f396224ffca599c34048c7f284c303e5669b2b826
SHA512 165afabf50f3fe25be433cc6a199eb5a88d540c2951ba309c0c79bacf72ff4fbd7b32af74e8bd078cf17d6780a20c59228835013838ebbf58f945f318976e97a

C:\UpdatePackage\Tools\api-ms-win-downlevel-advapi32-l2-1-1.dll

MD5 df69649136c94335b20d622d632e3012
SHA1 037f902d236f5e367c902c47534d00bd9265b2a6
SHA256 836d0668519f0ab941c8d6e1a7a4a0d94d8fce2c3b5ee7cf2b6c324571a50da0
SHA512 c8d29b78875e5b6d0aee4320e68dafdb393ec24fb2d0e3154cbeddeb62ba7fad19282d5a0fc4da7fced33051ba34c7af3b570139cd02e0b752567bc38bb91305

C:\UpdatePackage\Tools\api-ms-win-downlevel-advapi32-l2-1-0.dll

MD5 8bf35428b2e85df6318ebe315c123916
SHA1 c3cd69f256b7d89490079f8cc8019793f2ac5d4a
SHA256 f025eae749be2685d417afad61d710828a1cd23177fd499e12dce6da54d1c004
SHA512 19da617832b989ca684cd6896b0d274f679f4dd2d73be85b606b6aefb74da6d0531267115e2b2fd3e83ec87914bb30971725c9fb88e71deacac7871529befe5d

C:\UpdatePackage\Tools\api-ms-win-downlevel-advapi32-l3-1-0.dll

MD5 8703ee9fbf728f40ad9489044688633c
SHA1 bf76fd84c074bbb9c91d8e84299a5390cebd4b0f
SHA256 e25f7eb4096a7b91f7f3e96da0df5a8ecb330dd9d8bc99d51dbf29017a63a47b
SHA512 20d14a77f778635f6c64818199f13755f921a3816f7caf5e45143207b6cbfb81d652df321ebdd830672dfb4e9ceed45074c38ee30be39e4ab9c28780d084b01f

C:\UpdatePackage\Tools\api-ms-win-downlevel-advapi32-l4-1-0.dll

MD5 5d0ff9fe93a9e029126d70bf4bd38fdd
SHA1 dcbd335d02018ed34d828ca995cb37146b1b4943
SHA256 9500f7937fc64c6af353dc5afd360e69344dd0fceac5ab9b668750c2c3787bed
SHA512 bde106f31ffcac540c9f4782c63673e8f5872a13fe9e2e2742c170bc0664068bf8958f8fe6bbd696b9f03f0a7938dd3b52a52906f4705634e6b211de0f6c2587

C:\UpdatePackage\Tools\api-ms-win-downlevel-kernel32-l1-1-0.dll

MD5 daaf70348a1a8abef6260a3f73b6e300
SHA1 8875bfb0a997c11af6b2b6713c7102f704fbb31d
SHA256 a2ef181210486703dce8d3ce5f713b90af0f1552c685fd699d89ea45f932e52e
SHA512 68f2d6381360001096e97a9eed110b4f35eab97eb83bf0bce73be6066acafe50651d2bf1913164e2b986e97a9c77a15ddd69e15de6163bcdbfea7c2d480312aa

C:\UpdatePackage\Tools\api-ms-win-downlevel-kernel32-l2-1-0.dll

MD5 ef32bd129015062287f362618d4a20e0
SHA1 adca01c5781426c2c7f11742467f492992c1d9d2
SHA256 9e49785d3fb6b6b95d90f10b3473953029754d839a68147f57b1e6bf86fcc6ce
SHA512 c98b6a2c368f2d4881639fd04edd7adcaddbd64ae0ffac365f6698353c7f7dfedf1346c32e415bee440b449abc7b36749ff0ff2219f9fa44b59d3038e440b615

C:\UpdatePackage\Tools\api-ms-win-downlevel-ole32-l1-1-0.dll

MD5 3e51f7511b79c357f98d33dee3617594
SHA1 b1900c0a6d56bbc41071572707fb722d0f87aa61
SHA256 599d9247707db9e2687eb49ce777efd51da90ae918fe9a4bda7aec8503b22b93
SHA512 d6693b5101e8b017e4da007cd075efc5371ed9f4da8bfb29b2fe90c7208e7529a627697b7efda63a6e8e7bc2a0dba71349396ea261e57de769622611744f8df8

C:\UpdatePackage\Tools\api-ms-win-downlevel-ole32-l1-1-1.dll

MD5 9fa145dcf6cce58a4cd41b5a821bfaed
SHA1 ab19d62486fe9f295ed5083239c8071cc28d2174
SHA256 7c1e072a7f073a241ee6451d4ef2e08e390ae36018e76baec0e90d1d1e77c9f0
SHA512 c1584fd8549a10dc56f11fb3783c3cf4342b36a9eef4f5bb5be33ac5380bf6ac8bfa986348deee038dc3fc0995793c424e35bd7411956f307f71b9e41187b93c

C:\UpdatePackage\Tools\api-ms-win-downlevel-shlwapi-l1-1-0.dll

MD5 cd7121f3a900dd5932c4bbd3416809e2
SHA1 40ae91a4382bed91df82c3c88fc74ce0d9b78087
SHA256 64ff02c0c79fbfff0ec475e7b57b9f92576c0f6406abfda20601ad59d36e5aa6
SHA512 d0e282ba465f07cadf6795f8ea05718b989af376f10224233fef4b5204df5c5b4cb7d4efb0a1907db978acf66b34195cd74b9f886975b350fd4a2f0d060d6302

C:\UpdatePackage\Tools\api-ms-win-downlevel-shlwapi-l1-1-1.dll

MD5 6b54fe4150d071b529d2c551fe98eb72
SHA1 e62a0e715dbfcb49161632b6b2aff097c96434b9
SHA256 17e9ce7c5ae36dd27d01284a6a4694c64907251d9ab30d8cf8b4c620b278d2cd
SHA512 89411f91d5b719fe04841ae1a8f3fcd4d27e4cf558869b931c0b8b69e8b358261f31decb00df8f0ab84d0a33e6fb686f59dcf6368d2c82b9ff60ff1f03fa399f

C:\UpdatePackage\Tools\api-ms-win-downlevel-user32-l1-1-0.dll

MD5 a9603e7ef4b19d958a62b3d15d28da35
SHA1 cda247fc6f0317d6f4191766cae7c4fd8b667559
SHA256 a17aa9f1454876df179c6ecc1b256211c5a2f4154b0679446be99a4ec4c0f61b
SHA512 2fdd63b7e4db2b75f23c9901630027add99e85861b13b469d30727eeed7404fa19d78d641a71e2b6f673f1dc719693887e9e4e6628ad16ce1cf8986dd876c865

C:\UpdatePackage\Tools\api-ms-win-downlevel-user32-l1-1-1.dll

MD5 ef0eff6b90204751363f3687fbab8497
SHA1 c03c8f3294594204c549cc95904759e4ee6da114
SHA256 1e0eb9753653a5238ff67f383d6a54ef54cfd91da821a73d976aa5ec7c46cf45
SHA512 273adac17fb078d4bf9b64c0ad65d98ad536acd3542347c2e0cdab3620ecaf09e05d310b88a1ca96d77cc139ff95b59b25d7a3bf064bc103abcaa6ef05b1beb4

C:\UpdatePackage\Tools\api-ms-win-downlevel-version-l1-1-0.dll

MD5 f30b8cd00d8488b9b4d89b7cab0df185
SHA1 68598efc382cdb67da72a3d04aa5bd4b12dc6367
SHA256 80181027bcb3d4ba57e967ea37c1fb2cf5fba9904c0940a318f444d6803dfe28
SHA512 8a218d02427330731ef1c7ec277d5ea5ee805fe21e102939a386f28e3b283499622c02555f6e1fafc0b0c96687142e74c7fa8e50f4652cb020735a024352e178

C:\UpdatePackage\Tools\BIOS\amtscan.exe

MD5 4de94e1da61d113ccf6f4548ec32ab61
SHA1 268a847f4f8c751d4d87db7138ccb18f54e7aaad
SHA256 fe194a66bcdc9f09a7d3c0a8cc456623333c06b3eeaa03125266320ffc446e10
SHA512 58f1c2d17237c7ea45afb0894d91f38617491bcf42a6f3a61e7c89be7109952e5ebc24b89b09327e2aea3623d944cfd41e70d936938f6d2f71a9091719bf6c63

C:\UpdatePackage\Tools\BIOS\bf.exe

MD5 c1b47e1d9aff2077fff5478d2d3c7fb8
SHA1 cb0aa367f7b1427571cdf3f4ca83f0644f176b9d
SHA256 0e0b458dd7e4b32636f0f824abc9cf9881f0c3f184a746eb0607fda9b54be81f
SHA512 17f70791653a43fe05a9c4a0ff697fb54af6c29644286e1505a8225a06bcb62147e674ba87125c70f2cb874d8795bc05bbc041ea284d84b15424781a2acf786f

C:\UpdatePackage\Tools\BIOS\biosno.rom

MD5 1615b372365dd925b499ad9a960b39c2
SHA1 74271196966d2b986e670f23c8b4851f0546efb8
SHA256 f3bea790a62024599b7730a1d01b2d8dd05cb812253a73d1b093cf96b6c88181
SHA512 d05270ee88654dc87fa8140f42768d613fcde22349ed800efaeff76ef394ebcefa652c6469e167d68b3c55d28d2193368ca12e1c95426db720be7b02920082ce

C:\UpdatePackage\Tools\BIOS\bfold.exe

MD5 c78fac15e18598a535e4e039d56dd55c
SHA1 ec0dcb6427207a7490b34c0b8f37af927a44ddc0
SHA256 6af61d6b193014f49160124088875eed36be337dbfbce9a8ff1bc21571526ac7
SHA512 24e06c992c7084a43894471a7091181b02f856d4fdd7192814e2a001d996cef54c2fb42f0753795255c6a153c160730ad9c07fb3d91bb357cc3bf1fb60f0854c

C:\UpdatePackage\Tools\BIOS\Defaults.exe

MD5 4978f877ba1e81aaecddfc59064d4966
SHA1 1a4605ff1b33326ae85c5270bbf3616563a26580
SHA256 4df7314bdd107646aa29baf8250abeb9863360ea5020af674fdd98619aa0972d
SHA512 71c8f4878cbfad9ecdf6d0b6970933ef0f7957b1c1794b9e9ee2a221f88559191e83c968494873c3f7965daf8249c36af01f12dbd5128500cd90d977f41694ad

C:\UpdatePackage\Tools\BIOS\CUPFlag.txt

MD5 17bed8352a9ad874f0bffa738899e90e
SHA1 fa9c5eaf99a7cd47e8c2a95d23f8b661a59a7746
SHA256 949e050a4769116e75b7689b46e1c9b5bf2b2c5a6ea747e6f29ffe6636e2633f
SHA512 d210255c38fd5065723e35d4ab14a35eec9b228ba21053c1f9246e6dc7d29a8cec471bea3f21a40fda654636503d2d58afebd465bcd92e3c55bf1320a50837b3

C:\UpdatePackage\Tools\BIOS\GEN3iBIOS_16.rom

MD5 072a1d8733a082499f6e972cc6983996
SHA1 d0ff789610d679da5eeaf26289d06bddf3a89903
SHA256 7ff0857479c60d8fe024f92053d4d3c305c89e31e218d640d207e02d389b68ff
SHA512 a1ee3241b63558752fc4f76330b63f0f2891595b54acc530595e3c669762fdce01c040f5b089cbfbab2f4c958b41665d151216d8aa506ec4369d922d86d0a901

C:\UpdatePackage\Tools\BIOS\MakeMast.bat

MD5 9eaf33796c76327c776e02973b4df4e1
SHA1 dc8461e55d0dcd4a9d87b30350ed1df254670510
SHA256 af793252d1c7c9be461ac6b444ec952f4ea785fb61c226f5bd81550dec24b63e
SHA512 eda05bcc0cc294dc8d75784334c48a3dcc3c314e5cdeafe92fad0fce8fb01c96d1fb7d18ff267bdaaca867b23e24b4109d5ecd063cce4f17f88a1786c77e190b

C:\UpdatePackage\Tools\BIOS\LoadMast.bat

MD5 4e25317de46cfb4929a95df2aa8ffeb7
SHA1 000946c83c3d0e3b1e74710b0926f4a5e3b78219
SHA256 ec1e0b68f31878f4a860082a025a2d94020381c77ef54e3f43e40c3b3505e7a9
SHA512 a0823f87b1d18ad46cd38cf434fe8c65585ff1862be22eae79e3406adb9497ecb15b55956e8b75c3bd42f65347db1ae3945658d768409458ac3807cd3a8e0732

C:\UpdatePackage\Tools\BIOS\Upd.bat

MD5 751bfa68c0597cf26db2784c99f1d478
SHA1 903cab087a4550c76500849db56a3f58c032eecc
SHA256 9e1ae8ecb5bb7810383e92c2baf4f1e1af1b08ee76660ff50011262ee8581d44
SHA512 052edb2e4dce2030bc108165226b02680ace5e44a8f0a353a9a70995028675a2fbefd5a6f0724dc8e4aef9b1eb2ccac67535fde59fb299db0f354673c34b6a11

C:\UpdatePackage\Tools\dism.psd1

MD5 a759ae9bb1f111b8d57c0bc08a7f6087
SHA1 3bdd26b5b9f3b2b2c1f5547caf7faa362fc8f245
SHA256 5a6007610509958d352e3f938665f8805f29a1b026c6b2866a8af45658dd6223
SHA512 943978cbc9a20a2b6701d12e434dc7393220a83256322a1e5e9ce71e42975ba20d15429c7f82655fc2d17221637b1e339d1ef783099af6407c8d048f84948950

C:\UpdatePackage\Tools\dism.Format.ps1xml

MD5 b261f43fb9e3ed32fe926a9e2ca0d98d
SHA1 5d9fb7ebfcf9688717f0cbb896ef4450b65ff027
SHA256 bc52f7879adc3d9b607d0ebe5b2652c8f7f6d4edf1cd2fdc468b1cb632c18d2e
SHA512 c66e1799b4ce9fe60f469b71c72af2efc11d3e53d170943a985a879bcae76f4c85e2739e498b2b262b382a5562fa759acb3f0e41d93f8f7b1c08d4e306590bf6

C:\UpdatePackage\Tools\dism.exe

MD5 72430a8736deb8e09746a4ff7214af05
SHA1 09dff5975d4fd3e63579928dabc3f23a29fa25f0
SHA256 effbaefc89273998b0ba537ecd4b9f9efd48c1926b7b7a1727e9298c128a0ce6
SHA512 95b0ec213ac63faa839f3a706eb2b3b424c3ba1ea14e83f23034444d88779cdde56e3a5e589655fb10102f4c45007270ba59b2f32381269ca1819931890c8106

C:\UpdatePackage\Tools\dism.psm1

MD5 39f1d6182f227a29d1f1d4d25562d73f
SHA1 82f67e0576820323ebea6acf6344d8df4da46110
SHA256 cf89cf3b8ddf2647f39a451a23ade7497b52460a3076deb02a0b09f50e331855
SHA512 6adf0de87f0165be4e2001dd4167a3ef659227548bd11c61ed3a70cd10c5438ad63d13aa8473c8febcd3ad4f6913526beda8ddc067cac8d64389c76f5f5c0052

C:\UpdatePackage\Tools\dismcoreps.dll

MD5 51501e7d753cee9112b21ba06a77ab4d
SHA1 e45c8d30b6bf7760ce8c7f8895f681fd2b9a5c08
SHA256 7750f175784ef1970a8ae5aa5050ab29e98e2e022ff737ee7823de0a974fe58f
SHA512 e8cf88f32bf05543224ccd8266ec13e800e609b4b75755cd32d76edb41c9920f4278dd7e4ac71d440cd6ace99e73e38e3844f9f45f501b2ef0a993769b282597

C:\UpdatePackage\Tools\en-us\dismapi.dll.mui

MD5 c9b91ec67f00b7bd2650556fd4e83d86
SHA1 4a27f9e313c5931215e28433a444d605a8639135
SHA256 acdd764b2441dd7b0b76a5cef475ce6b924468159345f6d0b7e70107dd24d508
SHA512 5fb55843a3b1df5cdc3b3131cc69882405085a582a885ebf11e023382a1fcaa7d13a7028ce2c8c603e2bd87a0fd90eead1e4c59bb9c648606bf4ff4730f4d681

C:\UpdatePackage\Tools\ffuprovider.dll

MD5 b37d3a993d573cdadce41321b389125c
SHA1 e8ad6e2cff439b630985fc81ce0682c7fb45466a
SHA256 ca4a09e6ac1d25f613e3f5889d7c0c02cc2074c8530ffa4c736218019973c6e4
SHA512 44bc34ee59b5a0f3dc1878f3a22f8cc982c72b14ad565c81c756ba4e9b507e337230ea16916d5d634291c3ff78dd9290ab6caa907b4f35c937021d5b3ea156af

C:\UpdatePackage\Tools\ext-ms-win-advapi32-encryptedfile-l1-1-0.dll

MD5 f9bce09bff052677845d5d744b579da4
SHA1 048033c3831000401a250f2b8ac2b89347a2218c
SHA256 f0aaf5ed6aa581fd00eb403aa41b16559af0ef33a385771186657a1af7478238
SHA512 fb3f94361c5456887779444e7acf6091389e5b5361b103b7507442e5634710c70f539545a2a3f4e5c15006d19c602dc5ac46476dfae30887f70f4382316a6f42

C:\UpdatePackage\Tools\error not ok.txt

MD5 ed32b795900f8eb6bfb19e2b79c8cb6c
SHA1 3f52bcc221ced99bbb98d01ff54c599093797123
SHA256 d97144f098772954057006d30215198a535d514403d2f4a2949c11617695e9d3
SHA512 89f22e2532454e459b72057b45b186617f424894ab310355e870c288a860d26202494f49151bccae30029c49038c7885c73a194aff7f1c95ceb94cd1787dcb06

C:\UpdatePackage\Tools\en-us\wimprovider.dll.mui

MD5 f8ffef2a1e20f518a1c99a147457776c
SHA1 5613519566c21af647bbedd3cd7e0775448f1a7a
SHA256 c23684ade107ea1192c8229bc9dff02185a603d65cf1734a98ae159e4c1a0dcc
SHA512 9740102f80e8bfaf981f7290b2f7af7ee42fd7a46cf3b275ce3e5d31e19fccea5b4023e3d5d5a5bd5c9fc7852f1986fe846472983fce0ed44610ae71391de06f

C:\UpdatePackage\Tools\en-us\wimgapi.dll.mui

MD5 5f7d43f7f5360b98e12bbf354d154715
SHA1 951da24685264400220385d9b1959615c60cb44d
SHA256 66f4db0e76848d3ac2d3d6a261c8523517116600d91c2491676573635ff5d994
SHA512 50bcbfd3273821298f5deaa610b2d3a3f5a1d48696a65d315c62d4d65d912f3dd69d0213816b4feb3e281cc0e00b0506d5ec00575e9eff59ad40910126e8261b

C:\UpdatePackage\Tools\en-us\VHDProvider.dll.mui

MD5 c5e193db524dd75ce6e274045e8e55e2
SHA1 b6857e92949649bdad82481038d70133a1e76528
SHA256 cf17cc97ca96883a368609b2a4857d60ca76ebdd47d79e3d88a7ee8f8e9a2676
SHA512 e802aa79ae9a4d8a079946971881c1e9f46d188f00cdcf8098f6693a5ed72baa8875d7c9209c85aba5adde03e0d34825fff0f5b4b0397ed8be2d9938cd21dd62

C:\UpdatePackage\Tools\en-us\logprovider.dll.mui

MD5 cca085177e22141086fd2446a12d0efd
SHA1 99706b12e5ab5009c2900b5d3a0d86da55936ae0
SHA256 094a6c1b86e9ec4e90b86908c28c2ee25ffd18a80c31a26cf847ce8e38ee8319
SHA512 a1002be424ffeecb98c9ef6526a52af99941c3f3eb4b4ac31ddf2de695bf99a57abf3dc6412f7552b7b3e4b0bdfb09e7199d03400249bbb1c2c6ad7010b5f67d

C:\UpdatePackage\Tools\en-us\imagingprovider.dll.mui

MD5 1ede3e6dd9a2eacc29beca05b0025802
SHA1 0f1e64093dd0fb292693c3a0ff8f720362e30f56
SHA256 d406d062dcf1632e19b6b36d73862c68a76063febe75e843b0119db048145a4d
SHA512 3c9742d5f0965f9d0e7919a4c6d8170fd60d0eb6a2f645cedf78c37ed3313c3c294481225328cfce18596bff0224d9141249759d1d01e43c2e22c7a3d9b970da

C:\UpdatePackage\Tools\en-us\folderprovider.dll.mui

MD5 fdabbc3e331c2422c0cb62231eb3a0b2
SHA1 e10492c2d90e8cd5ca87e92d755db4333aeb175e
SHA256 f6faa3d536ea5e8c94f1a0dd30e313fcf640f136f7e132daa25bdc55bf7d85df
SHA512 29293a105252e7cfb73b128c6647d7df463baaa1d384f9fce932c70a67b67124ae0bd0eb476ccc81a1f02097312bc47e4a2d2d670f816e79ade3fc95601606b9

C:\UpdatePackage\Tools\en-us\ffuprovider.dll.mui

MD5 139b6c31f8a22e18efb88f8abb0becf4
SHA1 fe75a1fa8d9cabc297eaa3ed38eabbe70be81b85
SHA256 0f7aafde397900f686ac5b00c5a5ae93c837b092d5f7b55339ddbff19f21bc16
SHA512 b1c57f0e92fcf311b36f654438c02c87b1243fe72a6391567a480a8350658083bbaf2ef0c8736d7068689a13e8877e113e027960ca30f56e44be24214c3b1d24

C:\UpdatePackage\Tools\en-us\dismprov.dll.mui

MD5 0afcc289ea653c652e5fc9665645d121
SHA1 aa4ae7abbd97f969b018511ea2c51fa1a9b42350
SHA256 0087c445fee9116d5834ad3585dbf2e7330b11a3a7158475f71eaaa783c1bcaa
SHA512 8845e2d951b59133df4aeb7fd65936797c6588206e81af7cd6f58e06ef51cdb2ce850781213a247427cdf722e75338a79c676fba09407160c0c518aed825c2aa

C:\UpdatePackage\Tools\en-us\dismcore.dll.mui

MD5 998f3fadc2f6235a0a3b4df0b35c9fca
SHA1 f11a08f973bb8b0eb7e0364a414605b4923c1568
SHA256 cc25b3fbda1377ea29c27395b3e9212947f9c5cefd4691a56e7bd7e10e3c2d98
SHA512 a37d4f748536898296f8c033a7a844dd49809266bdf2cd482e04ae32dbd440af6431d380293986b1e85e8711f29c30689adecbcf6bdaba7ff9f951105492ffdc

C:\UpdatePackage\Tools\dismapi.dll

MD5 44a8faef7445952259ddd4622b0dd516
SHA1 2b17cb136105950b99f6050e87663166b305dba9
SHA256 a50f7503a91500b062ed4fd9526289a1ee13483ed6a641350e6685e6550a3d19
SHA512 e16731216952ba5d3c5a07bbd48cf575a4edb2d74d62baa40f60d26e03cbf61c2004366bce525fd0d13ce58f1d2d8ae43233bd1e58e4fed2a8dd0a584e63752c

C:\UpdatePackage\Tools\en-us\dism.exe.mui

MD5 feffe577eaf155faeeca325fdd2615c6
SHA1 fa3d3cf723062c546a8fc92a336d24c59a4a52c3
SHA256 84d39854281f963b93ddab1baf3b737c3cbe5eb9b136502f7c9b3826f6e579c6
SHA512 0f1ae711f2ffc3cc7e8a1bb203f9e37ecfa8943669d3167aed675cf837f9cbd23a0efadc2911d9d94d3664a09d1dd38029857ac3cfa4aaed7b80ba79784e65b6

C:\UpdatePackage\Tools\en-us\compatprovider.dll.mui

MD5 029a38d8049476c3c59abf6ef4ee3597
SHA1 9b1f54d94babb3d83ebef84e6c60e4d9b4d86806
SHA256 bff3c656506be8cc6123f8c4cd8429c39baba18deba8a7759a8cc31ac214fd7c
SHA512 3de49d2408c43d3491baea6537f9d5e12e304cbd26ebfaf037af292ee92d02c862971a0668ddcb6b22e01b114b66a0a87526083e1f88facb796426167865950e

C:\UpdatePackage\Tools\dismprov.dll

MD5 edaf52979ac54e7f2f20068993f22d11
SHA1 111f483cf102ee2e58c88fbc66340b71c551e51d
SHA256 2fafb83aaf84bb9cb9ef5649d4617840d42050f4c42569592a2d0622b7a960d6
SHA512 bc93d41a250f22dacba8188d782c5fb0286896b6625ccc38a1f8f8f58059375f88fe46bc12fba3f7049a806efeefdd92e8d38abdb4b24e074e3e89e5242f1140

C:\UpdatePackage\Tools\dismcore.dll

MD5 52b3019bcb7958b560d53e08251acfe6
SHA1 9e612dcf2336f771b9fadeeef2cd93581085c219
SHA256 60c40d646da75343d746156f38e07dbb52c239bb8498f7a3ae0b637bc0988e3e
SHA512 85718c1c6141ee90877380ed2321e5340f9cce93e184daacb108b56dd0ec733927eea8f49a3903b33472059cc5db998441ee613de0f367bed5e6ca4f47d8816d

C:\UpdatePackage\Tools\dism.Types.ps1xml

MD5 4e4224e2beb9bf8499e42621d5b2f434
SHA1 9a0e87725a6bb7c6d32734e7fcea6e24dab0f26a
SHA256 2e7072ac3447020c9d1ddcb4a5cb666e27d071e3b9a4e0955aff30c98286644b
SHA512 ed9b76ef05c69baf60963e062d1184f83084289ba1a710e99a9cfe0fd25bf0358e93013f7f05d74090328e8239cf0f9ba03623e2d4d27ff1027745ec682ad1a4

C:\UpdatePackage\Tools\compatprovider.dll

MD5 f54d6b8144e6b8a022b53016ccd25326
SHA1 b3ae6eea57043edea5647db5e544c88f0c2b484e
SHA256 bd868937b2190698fdf5feea7158050225d24babd60fd6dea52dd41a2970904f
SHA512 f04c5898746cdeb0f488790f0cf3a05004b2cc9f9c357b75cacb30b85bd65d6d15d245e6f3cc23e978454583fa9ab893540ba34b4a61e7db713230f3762f9069

C:\UpdatePackage\Tools\choice.exe

MD5 59f74ed847f7b7fac82b809896b12f67
SHA1 78f0babc946d6e6fac3109a548aecc42434d59cd
SHA256 291ad296e0ad42603950a7e46678b07b98bf79c86c66b7f49117097ba813ab7a
SHA512 f8a6d3968a1c674b5e1099c61aa661b3f1613b259c4ebde06f9bbfb7db3c2c600e81a4796b83dec4482d2e48b8a4b6acf6fe9d94e479eba944ae5191ead50760

C:\UpdatePackage\Tools\CheckDate.cmd

MD5 71fb50f41acc3f125563cb74fe22834e
SHA1 9a3803849a998b4176d363f287c1107ed05ba314
SHA256 ad3ab9a2fe661d20580736b2093939f0f451b5187e3b9d2b4bd61ec05465c022
SHA512 2ecfc6c431e83c0be64d0184f3013d554851f538af81e7ba130d8870a8e05bdcc105c066030b0a462b6dba5e8faec8a2240faa1114c173a5f60611cef94092ed

C:\UpdatePackage\Tools\BiosUpdate.cmd

MD5 400ba55613582087e9d6459f891936b2
SHA1 d3af9fd81fb5778a2fe483ce1f7644127826fd08
SHA256 6455ff4d224c63547adb86d41cf3ffeb63f63c7f4a35e2613a9cd87bbb3e6fa8
SHA512 e03a74a7367f913e642ffebbacf22b7395fbb3cb1e0412ca64f9b009b6994914dd84d5dba6ec8190c414a5a335f7d54979b2a88b721413e32b40e22e271237a9

C:\UpdatePackage\Tools\bios.bcd.LOG

MD5 f34691ec1d92995cfb34e6e89715aa5e
SHA1 d7b586e3bf84860dd26a31a2e568374dd58abbd6
SHA256 d56c52285ee4e263cfb21261278619d027a1492640309135884a56cf204f56c8
SHA512 8adf2b0bfb4039cf2691f6661543e81dec05c40c8d3c0abd46e25aefb03918ce89ee50ffb45ac0c7ec3bafabb1c6dce1c739bae93aac834e782f3cea5f4607b8

C:\UpdatePackage\Tools\bios.bcd

MD5 5a7383bd0fcea7e838d6d8f7d70aef06
SHA1 e5e2c88c5bd2750a02989a9e3a59c3d4a8edaec3
SHA256 e9778d77b3310c9cc142cd596099bca848853b14fde3171658ed4f7d2acbabe4
SHA512 a5fba1ff4209e88c0c315c0517abd0f3764646cc597a7723713bdaf8acd63f5ddf713e34bba032c8cad6315da327fe9555df674821868a28b96d816cc8232c94

C:\UpdatePackage\Tools\BIOS\RdMast80.bat

MD5 dbb96d808403f10ef56af87c13dd1f67
SHA1 1eab063ad03ed0a35f0332a4ee10ad7c1d11e116
SHA256 ef3f993cc2d485d1100c1befbc1b39a1702ec53340c1de4f6b56100e687cac84
SHA512 6df22f711e81ecf05ded9871190d8d5ae50af47c2f3ab97f0d9dfe8bccdc53a3ca233f8149661467c24fa58bf825ebd8a6e89dac6f78e97fcbc346f92b580163