top title background image
flash

sfk_setup.exe

Status: finished
Submission Time: 2021-01-11 17:57:59 +01:00
Malicious
Evader

Comments

Tags

Details

  • Analysis ID:
    338143
  • API (Web) ID:
    578178
  • Analysis Started:
    2021-01-11 17:58:01 +01:00
  • Analysis Finished:
    2021-01-11 18:14:43 +01:00
  • MD5:
    945d981860358a2da40321783865f6da
  • SHA1:
    df551d918354421e60b458cbd7a9032080835bc9
  • SHA256:
    407ae7a2edaae00d7e109b746153310fcfed60104687bde65b90b9a46c85f655
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 42
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 20/71
malicious
Score: 7/28

IPs

IP Country Detection
54.39.133.136
Canada

Domains

Name IP Detection
spyrix.com
54.39.133.136
www.spyrix.com
0.0.0.0

URLs

Name Detection
http://www.ceneo.pl/favicon.ico
http://ie.search.yahoo.com/os?command=
http://www.etmall.com.tw/
Click to see the 97 hidden entries
http://www.taobao.com/favicon.ico
http://list.taobao.com/
http://x265.org
http://search.msn.com/results.aspx?q=
http://search.goo.ne.jp/favicon.ico
http://www.kkbox.com.tw/
http://search.daum.net/favicon.ico
https://api.dropbox.com/1/fileops/move
http://opensource.org/licenses/afl-3.0.php
http://www.servicios.clarin.com/
http://www.cnet.com/favicon.ico
http://it.search.yahoo.com/
http://www.tiscali.it/favicon.ico
http://www.cdiscount.com/
http://www.news.com.au/favicon.ico
http://ariadna.elmundo.es/
http://service2.bfast.com/
http://search.centrum.cz/favicon.ico
http://www.iask.com/
http://search.orange.co.uk/favicon.ico
http://www.openssl.org/support/faq.html
http://www.target.com/
http://search.ipop.co.kr/
http://vachercher.lycos.fr/
http://www.recherche.aol.fr/
http://search.dreamwiz.com/
http://search.aol.co.uk/
http://search1.taobao.com/
http://buscador.terra.com/favicon.ico
https://api.dropbox.com/1/fileops/move?
http://www.google.co.uk/
http://video.globo.com/favicon.ico
http://www.orange.fr/
http://www.dk-soft.org/
http://www.auction.co.kr/auction.ico
http://auto.search.msn.com/response.asp?MT=
http://www.univision.com/favicon.ico
http://www.soso.com/favicon.ico
https://api-content.dropbox.com/1/chunked_upload
http://www.rtl.de/
http://search.gismeteo.ru/
http://www.google.fr/
http://www.asharqalawsat.com/favicon.ico
http://lame.sf.netD
http://www.cdiscount.com/favicon.ico
http://www.amazon.co.uk/
http://www.linternaute.com/favicon.ico
http://busca.igbusca.com.br//app/static/images/favicon.ico
http://www.ask.com/
https://api-content.dropbox.com/1/files_put
http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity
http://buscar.ozu.es/
http://search.msn.co.jp/results.aspx?q=
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdline
https://api.dropbox.com/1/shares/dropbox
http://cgi.search.biglobe.ne.jp/favicon.ico
http://search.hanafos.com/favicon.ico
http://it.search.dada.net/favicon.ico
http://www.etmall.com.tw/favicon.ico
http://www.ya.com/favicon.ico
http://pixelgraphics.us/
http://msk.afisha.ru/
https://api.dropbox.com/1/fileops/create_folder?
http://img.shopzilla.com/shopzilla/shopzilla.ico
http://in.search.yahoo.com/
http://fr.search.yahoo.com/
http://www.indyproject.org/
http://www.dailymail.co.uk/
https://api.dropbox.com/1/fileops/copy
http://www.merlin.com.pl/favicon.ico
http://www.mercadolivre.com.br/
http://search.chol.com/favicon.ico
http://www.rambler.ru/favicon.ico
https://api.dropbox.com/1/fileops/copy?
http://cnweb.search.live.com/results.aspx?q=
http://busca.orange.es/
http://www.soso.com/
http://www.google.si/
http://search.nifty.com/
http://www.gmarket.co.kr/
http://search.yahoo.co.jp/favicon.ico
http://openimage.interpark.com/interpark.ico
http://search.sify.com/
http://www.ozu.es/favicon.ico
http://uk.search.yahoo.com/
https://dashboard.spyrix.com/account/login-from-program?email=
http://www.actualkeylogger.com/help.html#registrate
http://list.taobao.com/browse/search_visual.htm?n=15&q=
http://google.pchome.com.tw/
http://browse.guardian.co.uk/favicon.ico
http://www.pchome.com.tw/favicon.ico
https://spyrix.net/usr/monitor/access.txt
http://sads.myspace.com/
http://www.twolame.orgMPEG-2
http://www.amazon.de/
http://search.auction.co.kr/
http://www.google.it/

Dropped files

Name File Type Hashes Detection
C:\ProgramData\Spyrix Free Keylogger\temp\reg\info.uid
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-I5845.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\zh\is-RQO1I.tmp
ASCII text, with CRLF line terminators
#
Click to see the 97 hidden entries
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\ru\is-6KMM4.tmp
ASCII text, with CRLF line terminators
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\is-UV691.tmp
ASCII text, with CRLF line terminators
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\is-D7G9P.tmp
ASCII text, with CRLF line terminators
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-UN49E.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-RAS3U.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-OB5TQ.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-NVGKS.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-NFQD9.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-MAUC1.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-JOKOG.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-JJI58.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\is-LBPNQ.tmp
PNG image data, 1122 x 60, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-I3297.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-FV6S4.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-E7A5U.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-7CVNC.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-3C4BQ.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-34SMA.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-1AOEA.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\32x32\is-0B2TM.tmp
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-UU3L8.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-UAREM.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-RVEV0.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-4IR4C.tmp
PNG image data, 122 x 295, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\SNets\16x16\is-21JHN.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\SNets\16x16\is-1AEF7.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\SNets\16x16\is-0N1KC.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-VFFTA.tmp
ASCII text
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-VE9US.tmp
PNG image data, 80 x 80, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-R7SLK.tmp
PNG image data, 520 x 260, 8-bit/color RGB, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-QQDCV.tmp
ASCII text
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-Q6H70.tmp
ASCII text
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-BKJ08.tmp
ASCII text
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-AE97G.tmp
ASCII text
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-9V1AM.tmp
PNG image data, 346 x 54, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-93I91.tmp
UTF-8 Unicode text, with very long lines
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\is-K3KTO.tmp
PNG image data, 210 x 336, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\mSpy\is-0852N.tmp
PNG image data, 52 x 44, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\is-QOTF2.tmp
HTML document, ASCII text, with CRLF line terminators
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\products_page\is-QS9UL.tmp
PNG image data, 58 x 60, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\products_page\is-QCJ49.tmp
PNG image data, 122 x 295, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\products_page\is-NP20P.tmp
PNG image data, 58 x 60, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\products_page\is-NJN1S.tmp
PNG image data, 346 x 54, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\products_page\is-GOFQA.tmp
PNG image data, 66 x 67, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\products_page\is-FRKUA.tmp
PNG image data, 58 x 60, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\products_page\is-29SJF.tmp
PNG image data, 58 x 60, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\PR\1\img\products_page\is-11HCR.tmp
PNG image data, 58 x 60, 8-bit/color RGBA, interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-RSB7I.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\Spyrix Free Keylogger\temp\reg\ru\is-D4F46.tmp
GIF image data, version 89a, 327 x 57
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-4JVHB.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-3N91F.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-2OGR5.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-2EVNU.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-19SBS.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-19DK8.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\Spyrix Free Keylogger\temp\stat\dlog\2021-01.wdb-journal
data
#
C:\ProgramData\Spyrix Free Keylogger\temp\stat\dlog\2021-01.wdb
SQLite 3.x database, last written using SQLite version 3013000
#
C:\ProgramData\Spyrix Free Keylogger\temp\start\Uninstall Spyrix Free Keylogger.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Jan 12 00:59:16 2021, mtime=Tue Jan 12 00:59:16 2021, atime=Tue Jan 12 00:58:53 2021, length=1233133, window=hide
#
C:\ProgramData\Spyrix Free Keylogger\temp\start\Spyrix Free Keylogger.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Tue Jan 12 00:59:16 2021, mtime=Tue Jan 12 00:59:16 2021, atime=Tue Jan 14 06:59:00 2020, length=5197960, (…)
#
C:\ProgramData\Spyrix Free Keylogger\temp\runprg.ini
ISO-8859 text, with very long lines, with CRLF line terminators
#
C:\ProgramData\Spyrix Free Keylogger\temp\reg\ru\is-LTAH2.tmp
GIF image data, version 89a, 884 x 198
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-53THT.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\Spyrix Free Keylogger\temp\reg\ru\is-12C72.tmp
ASCII text, with no line terminators
#
C:\ProgramData\Spyrix Free Keylogger\temp\reg\is-UNGJL.tmp
ASCII text, with no line terminators
#
C:\ProgramData\Spyrix Free Keylogger\temp\reg\is-11S5P.tmp
GIF image data, version 89a, 884 x 198
#
C:\ProgramData\Spyrix Free Keylogger\temp\reg\is-0B1S9.tmp
GIF image data, version 89a, 327 x 57
#
C:\ProgramData\Spyrix Free Keylogger\temp\logger.ini
ASCII text, with very long lines, with CRLF line terminators
#
C:\ProgramData\Spyrix Free Keylogger\temp\desktop\Spyrix Free Keylogger.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Tue Jan 12 00:59:16 2021, mtime=Tue Jan 12 00:59:24 2021, atime=Tue Jan 14 06:59:00 2020, length=5197960, (…)
#
C:\ProgramData\Spyrix Free Keylogger\logs\logs.dat
ASCII text, with CRLF line terminators
#
C:\ProgramData\Spyrix Free Keylogger\logs\44207.wdb-journal
data
#
C:\ProgramData\Spyrix Free Keylogger\logs\44207.wdb
SQLite 3.x database, last written using SQLite version 3013000
#
C:\ProgramData\Spyrix Free Keylogger\logs\44207.log
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyrix Free Keylogger\Uninstall Spyrix Free Keylogger.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Jan 12 00:59:16 2021, mtime=Tue Jan 12 00:59:16 2021, atime=Tue Jan 12 00:58:53 2021, length=1233133, window=hide
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-G7O97.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-QL6MH.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-PITLA.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-P3SDT.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-OK28S.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-NCOG1.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-M6QCT.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-LDOM6.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-L53CJ.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-KS7HO.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-K3TN6.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-HIK1U.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyrix Free Keylogger\Spyrix Free Keylogger.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Tue Jan 12 00:59:16 2021, mtime=Tue Jan 12 00:59:16 2021, atime=Tue Jan 14 06:59:00 2020, length=5197960, (…)
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-EEF1R.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-DQF44.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-BG337.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-ATN0O.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-AP20J.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-AHS2A.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-9K8JO.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-95L8E.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-8SH8M.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-897LB.tmp
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\ProgramData\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\data\IM\16x16\is-5NBD5.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#