hxxps://nezur[.]io/Nezur_Executor[.]zip

Analysis

max time kernel
120s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14-09-2024 18:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://nezur.io/Nezur_Executor.zip

Score

8^/10

discovery persistence

Malware Config

Signatures

Downloads MZ/PE file

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000\Control Panel\International\Geo\Nation	aspnetcore-runtime-8.0.8-win-x64.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000\Control Panel\International\Geo\Nation	aspnetcore-runtime-8.0.8-win-x64.exe

Executes dropped EXE 14 IoCs

pid	Process
2552	aspnetcore-runtime-8.0.8-win-x64.exe
5712	aspnetcore-runtime-8.0.8-win-x64.exe
5356	aspnetcore-runtime-8.0.8-win-x64.exe
5900	aspnetcore-runtime-8.0.8-win-x64.exe
6052	aspnetcore-runtime-8.0.8-win-x64.exe
6084	aspnetcore-runtime-8.0.8-win-x64.exe
1480	aspnetcore-runtime-8.0.8-win-x64.exe
5276	aspnetcore-runtime-8.0.8-win-x64.exe
3708	AspNetCoreSharedFrameworkBundle-x64.exe
5468	aspnetcore-runtime-8.0.8-win-x64.exe
5196	aspnetcore-runtime-8.0.8-win-x64.exe
5264	AspNetCoreSharedFrameworkBundle-x64.exe
3760	aspnetcore-runtime-8.0.8-win-x64.exe
5152	aspnetcore-runtime-8.0.8-win-x64.exe

Loads dropped DLL 8 IoCs

pid	Process
5712	aspnetcore-runtime-8.0.8-win-x64.exe
5900	aspnetcore-runtime-8.0.8-win-x64.exe
6084	aspnetcore-runtime-8.0.8-win-x64.exe
5276	aspnetcore-runtime-8.0.8-win-x64.exe
4872	MsiExec.exe
5196	aspnetcore-runtime-8.0.8-win-x64.exe
2380	MsiExec.exe
5152	aspnetcore-runtime-8.0.8-win-x64.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{a3824491-d5f4-4b67-8d72-ee8692f44d61} = "\"C:\\ProgramData\\Package Cache\\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\\AspNetCoreSharedFrameworkBundle-x64.exe\" /burn.runonce"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{a3824491-d5f4-4b67-8d72-ee8692f44d61} = "\"C:\\ProgramData\\Package Cache\\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\\AspNetCoreSharedFrameworkBundle-x64.exe\" /burn.runonce"	AspNetCoreSharedFrameworkBundle-x64.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Components.Endpoints.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.ResponseCompression.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Formatters.Xml.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Hosting.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Antiforgery.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\System.Diagnostics.EventLog.Messages.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Diagnostics.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Razor.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.Configuration.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.TraceSource.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Caching.Memory.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.App.runtimeconfig.json	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.DataProtection.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Diagnostics.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\eula.txt	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Results.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Diagnostics.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.TagHelpers.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Connections.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.FileSystemGlobbing.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Binder.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Ini.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.SignalR.Protocols.Json.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Hosting.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.Core.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Routing.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.Core.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Metadata.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Localization.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Formatters.Json.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Routing.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.SignalR.Common.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Cors.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Http.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.HostFiltering.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authorization.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.HttpOverrides.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.KeyPerFile.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Xml.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.SignalR.Core.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Cors.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Antiforgery.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Session.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Hosting.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.ViewFeatures.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Options.DataAnnotations.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.UserSecrets.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\THIRD-PARTY-NOTICES.txt	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.DataAnnotations.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.CookiePolicy.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Razor.Runtime.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Xml.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.DependencyInjection.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.RazorPages.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\eula.txt	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.SignalR.Protocols.Json.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\aspnetcorev2_inprocess.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.dll	msiexec.exe

Drops file in Windows directory 11 IoCs

description	ioc	Process
File created	C:\Windows\Installer\e58cd13.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI1AD3.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI212D.tmp	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File opened for modification	C:\Windows\Installer\e58cd0f.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSICEE4.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\SourceHash{1A631874-52CA-3CD6-84C2-0465F1280EDA}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSID137.tmp	msiexec.exe
File created	C:\Windows\Installer\e58cd0f.msi	msiexec.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.8-win-x64.exe

System Time Discovery 1 TTPs 12 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5152	aspnetcore-runtime-8.0.8-win-x64.exe
2552	aspnetcore-runtime-8.0.8-win-x64.exe
5900	aspnetcore-runtime-8.0.8-win-x64.exe
6052	aspnetcore-runtime-8.0.8-win-x64.exe
1480	aspnetcore-runtime-8.0.8-win-x64.exe
5276	aspnetcore-runtime-8.0.8-win-x64.exe
3760	aspnetcore-runtime-8.0.8-win-x64.exe
5712	aspnetcore-runtime-8.0.8-win-x64.exe
5356	aspnetcore-runtime-8.0.8-win-x64.exe
6084	aspnetcore-runtime-8.0.8-win-x64.exe
5468	aspnetcore-runtime-8.0.8-win-x64.exe
5196	aspnetcore-runtime-8.0.8-win-x64.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe

Modifies registry class 40 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8\DisplayName = "Microsoft ASP.NET Core 8.0.8 Shared Framework (x64)"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\Language = "1033"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\4728E78050093C832BA238B89B82402A\478136A1AC256DC3482C40561F82E0AD	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8\Dependents	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\Version = "8.0.8.24369"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\SourceList\Net\1 = "C:\\ProgramData\\Package Cache\\{1A631874-52CA-3CD6-84C2-0465F1280EDA}v8.0.8.24369\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8\Dependents\{a3824491-d5f4-4b67-8d72-ee8692f44d61}	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\478136A1AC256DC3482C40561F82E0AD\FT_DepProvider	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\SourceList\LastUsedSource = "n;1;C:\\ProgramData\\Package Cache\\{1A631874-52CA-3CD6-84C2-0465F1280EDA}v8.0.8.24369\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\ = "{a3824491-d5f4-4b67-8d72-ee8692f44d61}"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8\Version = "8.0.8.24369"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\478136A1AC256DC3482C40561F82E0AD\FT_AspNetCoreSharedFramework	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\478136A1AC256DC3482C40561F82E0AD\FT_ProductInfo	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\{a3824491-d5f4-4b67-8d72-ee8692f44d61}	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8\ = "{1A631874-52CA-3CD6-84C2-0465F1280EDA}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\PackageCode = "050E3AE9CCA183846AE2171FCB7DA088"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\DeploymentFlags = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\DisplayName = "Microsoft ASP.NET Core 8.0.8 - Shared Framework (x64)"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\Assignment = "1"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\Version = "134217736"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\AuthorizedLUAApp = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\4728E78050093C832BA238B89B82402A	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\SourceList\PackageName = "aspnetcore-runtime-8.0.8-servicing.24369.8-win-x64.msi"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\478136A1AC256DC3482C40561F82E0AD	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\Dependents\{a3824491-d5f4-4b67-8d72-ee8692f44d61}	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\Dependents	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\ProductName = "Microsoft ASP.NET Core 8.0.8 Shared Framework (x64)"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\478136A1AC256DC3482C40561F82E0AD\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.8-servicing.24369.8\Dependents\{a3824491-d5f4-4b67-8d72-ee8692f44d61}	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 346228.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
2232	msedge.exe
2232	msedge.exe
4952	msedge.exe
4952	msedge.exe
4576	identity_helper.exe
4576	identity_helper.exe
816	msedge.exe
816	msedge.exe
5520	msedge.exe
5520	msedge.exe
5432	msiexec.exe
5432	msiexec.exe
5432	msiexec.exe
5432	msiexec.exe
5148	msedge.exe
5148	msedge.exe
5148	msedge.exe
5148	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeBackupPrivilege	5088	vssvc.exe
Token: SeRestorePrivilege	5088	vssvc.exe
Token: SeAuditPrivilege	5088	vssvc.exe
Token: SeShutdownPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncreaseQuotaPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSecurityPrivilege	5432	msiexec.exe
Token: SeCreateTokenPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeAssignPrimaryTokenPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeLockMemoryPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncreaseQuotaPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeMachineAccountPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeTcbPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSecurityPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeTakeOwnershipPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeLoadDriverPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemProfilePrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemtimePrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeProfSingleProcessPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncBasePriorityPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreatePagefilePrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreatePermanentPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeBackupPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRestorePrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeShutdownPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeDebugPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeAuditPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemEnvironmentPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeChangeNotifyPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRemoteShutdownPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeUndockPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSyncAgentPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeEnableDelegationPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeManageVolumePrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeImpersonatePrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreateGlobalPrivilege	3708	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe
Token: SeTakeOwnershipPrivilege	5432	msiexec.exe
Token: SeRestorePrivilege	5432	msiexec.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 3388	4952	msedge.exe	83
PID 4952 wrote to memory of 3388	4952	msedge.exe	83
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 3804	4952	msedge.exe	84
PID 4952 wrote to memory of 2232	4952	msedge.exe	85
PID 4952 wrote to memory of 2232	4952	msedge.exe	85
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86
PID 4952 wrote to memory of 4708	4952	msedge.exe	86

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://nezur.io/Nezur_Executor.zip
1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb96746f8,0x7ffcb9674708,0x7ffcb9674718
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3036 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6764 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7032 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7108 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6608 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5520
- C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe
  "C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - System Time Discovery
  PID:2552
- - C:\Windows\Temp\{634DB973-C42B-41DC-916D-2872F66A321D}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe
    "C:\Windows\Temp\{634DB973-C42B-41DC-916D-2872F66A321D}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.filehandle.attached=564 -burn.filehandle.self=572
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - System Time Discovery
    PID:5712
- C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe
  "C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - System Time Discovery
  PID:5356
- - C:\Windows\Temp\{A8AFB039-7733-436A-A320-6BF6A24E7106}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe
    "C:\Windows\Temp\{A8AFB039-7733-436A-A320-6BF6A24E7106}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.filehandle.attached=688 -burn.filehandle.self=692
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - System Time Discovery
    PID:5900
- C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe
  "C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - System Time Discovery
  PID:6052
- - C:\Windows\Temp\{C2948C33-C42A-42F3-8622-1D023B87E59A}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe
    "C:\Windows\Temp\{C2948C33-C42A-42F3-8622-1D023B87E59A}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.filehandle.attached=556 -burn.filehandle.self=692
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - System Time Discovery
    PID:6084
- C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe
  "C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - System Time Discovery
  PID:1480
- - C:\Windows\Temp\{A3426F64-B5DA-4060-917F-F4531F07707A}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe
    "C:\Windows\Temp\{A3426F64-B5DA-4060-917F-F4531F07707A}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.filehandle.attached=688 -burn.filehandle.self=692
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - System Time Discovery
    PID:5276
  - - C:\Windows\Temp\{64B9AE54-B72C-44B9-9ED9-B00420761F21}\.be\AspNetCoreSharedFrameworkBundle-x64.exe
      "C:\Windows\Temp\{64B9AE54-B72C-44B9-9ED9-B00420761F21}\.be\AspNetCoreSharedFrameworkBundle-x64.exe" -q -burn.elevated BurnPipe.{ABF14A93-86F2-4B55-B59A-42E773864C2E} {E9CDD1E4-FE66-42A9-8D7F-836B00D358AF} 5276
      4⤵
      Executes dropped EXE
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious use of AdjustPrivilegeToken
      PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,9469601312213653289,16109233655106823816,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4860 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5148

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3764

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1484

C:\Users\Admin\Downloads\Nezur_Executor\Nezur_Interface.exe
"C:\Users\Admin\Downloads\Nezur_Executor\Nezur_Interface.exe"
1⤵
PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?framework=Microsoft.AspNetCore.App&framework_version=8.0.0&arch=x64&rid=win-x64&os=win10&gui=true
  2⤵
  PID:5720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffcb96746f8,0x7ffcb9674708,0x7ffcb9674718
    3⤵
    PID:5736

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:5088

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:5136

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5432
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 1E213F28FBCCB558B5573214DA57952B
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:4872
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 8CF9E8477A98F4CB5B3ECB873B02AAFC
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:2380

C:\Users\Admin\Downloads\Nezur_Executor\Nezur_Interface.exe
"C:\Users\Admin\Downloads\Nezur_Executor\Nezur_Interface.exe"
1⤵
PID:4036

C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe
"C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- System Time Discovery
PID:5468
- C:\Windows\Temp\{476EBDCE-B94E-46B2-9B16-6F461FADFFE8}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe
  "C:\Windows\Temp\{476EBDCE-B94E-46B2-9B16-6F461FADFFE8}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.filehandle.attached=716 -burn.filehandle.self=720
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - System Time Discovery
  PID:5196
- - C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.be\AspNetCoreSharedFrameworkBundle-x64.exe
    "C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.be\AspNetCoreSharedFrameworkBundle-x64.exe" -q -burn.elevated BurnPipe.{6A5FC6C6-528B-407E-BE6C-3CC95888EE40} {CCD0B6B6-AEAB-4C29-8D66-5A1F8FE2A0DE} 5196
    3⤵
    - Executes dropped EXE
    - Adds Run key to start application
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:5264

C:\Users\Admin\Downloads\Nezur_Executor\Nezur_Interface.exe
"C:\Users\Admin\Downloads\Nezur_Executor\Nezur_Interface.exe"
1⤵
PID:1628

C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe
"C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- System Time Discovery
PID:3760
- C:\Windows\Temp\{7AED6B42-9776-4404-B9F2-20C824C7FE8A}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe
  "C:\Windows\Temp\{7AED6B42-9776-4404-B9F2-20C824C7FE8A}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.8-win-x64.exe" -burn.filehandle.attached=556 -burn.filehandle.self=692
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - System Time Discovery
  PID:5152

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\e58cd12.rbs

Filesize
41KB

MD5
4ecab9b9bad9a31c969921399796368a

SHA1
0f4ba7d5f97d15ae808ba0361f13ec28a12e0536

SHA256
4abc59775027f12e551a166959d576963be49914c0698f239c69e52d9c67e2ad

SHA512
00781a0cc5f7ab6c9f0bad421c02f308a85c0bb2dfdb6fdda39b2d93cc69474100b206e98cd7cc299867ee6708295208198c9021decd735fac63b05a2481152f

Download Submit
C:\Config.Msi\e58cd16.rbs

Filesize
85KB

MD5
c68235824c63a28f2dbff7fde3621e40

SHA1
b5a662a1ccfd613c1e7fcede21ee016006c89c22

SHA256
40806e0115fee3f768cad384f561000a7d577d4f11ba5e519976d1ebd9598731

SHA512
d1ac31b05468bca8daab059c14dfe566580b6bb3030de0095bc16bd9e83b6e1dcfaf19af701f6854eddf4583bb54dcee73dfdbe871a3209954699f89ec237aaa

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\.version

Filesize
49B

MD5
4dab729f94069a334b77f81a720dec0e

SHA1
665aa9e618347b0d8427aa864f4200a4dac7e624

SHA256
fe6b293d99d6a67052d68178f3f6ba3c9e5bf4474daa124a612e2820aa44d87c

SHA512
30a52380d3e5fb16876208571399119149b6742e67c5478e410e98777da59398168c061851996a084e7afa327e45a0301703544c09a2bf58eeb5bf4060b3c873

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Antiforgery.dll

Filesize
118KB

MD5
bf2bae9490c8810a49970d0f599083de

SHA1
b5624f0cbe21cc852d5c93eeb6b83c984b8baf16

SHA256
3e35c41f0efe17f9a04fec1e2edb0c723cfff963c57ee77785c201badadad87a

SHA512
0cc303d074c6b42500ef43dc6727a7cb92e3bf1a541147550db28070f7aa1b536b3e2a18dae2ec865adc17edd756bde75e95e62daaae01dbbb14182283f61097

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.App.deps.json

Filesize
22KB

MD5
ca04adcbf7892b9ea1c11bd3810763dd

SHA1
e23e3af9e813630b59d54cd4bef7ce54a2ec1da4

SHA256
93058889dc17a11e756f152a5deb1f58d7128ab830b6ada14fbcde8e55fe1ea3

SHA512
3612b1243fe662ba4ba7e91bc0ac688f58f98a69ca5c185087fd12a0b1e4e9d84f58dbba9d90631353bd41de77d0744fc617fe60faebf2c3c38f764fbcbec284

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.App.runtimeconfig.json

Filesize
288B

MD5
31dd1ad6520e0a309c37904436c98151

SHA1
ed22eae8bfe6fa5f0a14cb5d0b6c721f31a1a041

SHA256
68eac7c3c07155c9a13692fae51743ef4df2fdf29f0f48218f54fe4f778dfdcf

SHA512
73ba31f7386555afe306d7785ad0db539c95504b059a0a71d649341b90c4ab51916ed1d92fbd97012ab70496bd89178049c184ec2a581508b24b4e3f2bd9e54f

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.Abstractions.dll

Filesize
66KB

MD5
650eb223bdbce63aa60cbc444503759d

SHA1
a6633d8cded058ba1fb5931ab50f6fa22db39490

SHA256
70e38117a6ee8676fe943fc85417498f525e04c75b17f5f080f84695eff5a5e8

SHA512
ed8878a7640f26c7d7304693f0ce3abb28dbbe55961189b0e0aaa2d62eb5d7eaba54a1ccb96ebbee404c034beadd2db1cfbf42b429c892ad64cb0a60f6199236

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.BearerToken.dll

Filesize
70KB

MD5
961d16a650aa7fc296f0b1790b411d8b

SHA1
754342135e706c6a344af4df5e433f57e8b36413

SHA256
005f2583a1cb47c998326987d126ee56a97bffd73cd25e5d1798985567b51fa7

SHA512
ef57d66038c54a5d0e5bf60ed18b6e09feb18703fca0c4cb75bfe6faa87a4d2072fceb3e13df98d48b5ac5ab409a0ba7aa12bbca8f5d649d71311b1bee2e65a0

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.Cookies.dll

Filesize
110KB

MD5
b80cb45d6a76bbf8de04e0f973d9a872

SHA1
ccf6001f6d65bf8c6e5cfb52dd0734644ff8c1ee

SHA256
5b912961322b500b12d75c7525f2ce70e55acc5a424dfe3e81bc19aa84f2d603

SHA512
51e8a06507b200c31fa182477cfdd58713fe8f0a0961a77e9ffafc546f983fb9ba79877258873917e1945b3df4df92e144e7c39b9ef70096ad1bdf5372106bb2

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.Core.dll

Filesize
90KB

MD5
3dc8fc281f1e323aa1bb2f367c66fd1c

SHA1
f7460206209f92592e47948269bc9f972b7ceb91

SHA256
9706d1973c4d7aeb00976ca408a1faa403b3d2dcf303f6af473cd55fc48ee823

SHA512
876d5970fe1cda5785620b87f0f8de96fd839aa7d762cfcd7a8dff133e334b748cdef5fde0bc0bf54932b5035950bde6042924b8c8ec5c927b79dfe9cca5c41d

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.OAuth.dll

Filesize
98KB

MD5
25982f3b79546c1d304dacba8c3f0852

SHA1
48f72b66430cd2d36556a3b042b6e64509982191

SHA256
4f40ce71419c7729b002f928a6f43fb69acef2bddac2ee574538dcd69f9d6173

SHA512
1e1b2ff5f9436bbd2e9ba38e12a99e2388a8d3bebb01551790ee84be52bcac52918a40621969292645f5cb8ba85a33150f8dd47f4ed307e8551b39176bc9b05f

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authentication.dll

Filesize
154KB

MD5
ba2348b98e2e16f953b7281bc381606c

SHA1
3a084a7953cd276177142e8906f23077c7403689

SHA256
da0975d5666d7257083a2024588d05d9594b089c118bec42219da551910d3aaa

SHA512
4a07cc800a843009ddb60df139d39357efae085c5ad8f0d8f8c49948091b5ae3ea1541abe1b1df7992925d152a6d6dcfb610fd4f8661bb5d9fdf1768665b3d5e

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authorization.Policy.dll

Filesize
78KB

MD5
69b741c13093c2be33c3465a23a9c67e

SHA1
a73c31eba143dc7a185fbb0ae476247d06e6b1cf

SHA256
793d891e306c3a9c02f13d36182d625b82127fb778863ba1808c16b6d3bdf58b

SHA512
67adeb0c7f35e8f97800713087c2536fc330dd6b947d395a56287bcdeb0389230cc3ca0776ac703a3d580849da56159413f88a78e280c59c69f96cf1f589e5f4

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Authorization.dll

Filesize
106KB

MD5
b13524e9c3ca7d641b396f94a5d43bce

SHA1
fc38f074327eb4e2b2f7260e8071ac455be766be

SHA256
eb38f59936f081c2acab711bc3e388a0905024e51252892dfa7b1c90bf6b4393

SHA512
830f66b17e70da644a5720c105ba48039fbcdec240dfc34bc9e9787c456253738905833ddc8aa9ad6382a05c86fc0ebee22dd0539c51feb04b37846c69be086a

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Components.Authorization.dll

Filesize
54KB

MD5
8d8d8ce074a9a6835d1b761da49a7cde

SHA1
71db14de90fdd9edf7f6c9676eb4c8b726fb4692

SHA256
9786da76157947d14ce3ab93196324cb6d05f1aa5a2982e6570646d983d808bc

SHA512
9c9d1f87bbf9d580d09827630cd5a6ed9d7c5e282e999e43b5da0d1056058f1d499e6ec5d0741d20b814fcc27cfd61fabc83567d2997d7db8b6be2e7feb8baa9

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Components.Endpoints.dll

Filesize
706KB

MD5
15a3c2d7454e413b406dbc6e7b7e94e9

SHA1
1564697feed4841036643070e389ff3d20fcdffb

SHA256
b5902d48a4cd78a674073f68226e8073a08050925dbc79f9b39a5b7547ecba4e

SHA512
1484e753d898c955a91ed4fbadbc2308cc208cf24a8743e5ed513ae541af729b07704a2abb4f28fb2a8cfbf1f0744fa92f4c253c85609ffd0680275b0678a018

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Components.Forms.dll

Filesize
94KB

MD5
734eda2a750f5bbedd28ec4a748054e6

SHA1
17c3ab33ba435e849a1e1b52a5fdc9da4211d96c

SHA256
a39f9957e72b62b5bdcef20c63503e679d59a83786c8e9b05e0dd329bc79ccdb

SHA512
096499f6918ff97925eeb3fd7decc9896cd06c5731de130a4004b7c4ea17449d804f367fab542a2c9d7b4e9841ec545bacda71e93215e6b563f5aee6c4990c27

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Components.Server.dll

Filesize
846KB

MD5
ca014e6ab051634fbbbc3638e3457665

SHA1
249ab5dc02ee8c6ffa267cc14a5693a8a00086d6

SHA256
6f190d1e90d34a128ffe45c91934df1f9d733aa4c5562dde851173d7365ab385

SHA512
3c685d5401dadbab89760db7c62abdefe29994f2e4a1a8cdb52ad3421948d8763f5f2479a1a2dc495344f94e1787cede5b5574112cc193feb177c5b7e79e9f48

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Components.Web.dll

Filesize
382KB

MD5
0202305ebfaf882cde29153847d86f3d

SHA1
336565f84d107b1e64567ff5b0e0c1003faf5ce4

SHA256
9ee585dbdf31b5f5abb14170a2c9a35d2edc3b0980a5c578417d6a9a72a00cb8

SHA512
7495ae05ae55ea28f9fb993b4552cf4dbdbae66f169aae8092ee3ad09cb5c590ebfc5e1836eab2414a6b357a99c812053e2e054a90db19534d4777891c555ace

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Components.dll

Filesize
802KB

MD5
c0ef8e67c7874a498305bff913720ffc

SHA1
63136ab8157b01e0ca5e2840258f42ea6d2ce6d3

SHA256
22d22221c5b053d4b545fa8fd5a9ddf19cebb83f548baa9f529a384eff46e7ec

SHA512
5d701490a3cf08037e2f94e36e8f5ae15cfc88a7fed23a11be30f0144bbd3939d0d76d34ac4f0a31502caf80214fccd84aa05891ab920b3623e2ab1cdb6feb97

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Connections.Abstractions.dll

Filesize
66KB

MD5
1ee66877a7169aabca621bdb5aed6212

SHA1
704b82dae481ad2adb48a02e8576c55f728697bc

SHA256
8467a133a90f23da74c6d7d045924c1be643eaa4cb5eb80d5220e681c5fa6081

SHA512
e3411535a8ac0a6ee731062a180dbbbb50756963be98d8b028bfd875ae2527ab7cec217027e81693e9c6b9722eaee92dcd1930c0706fe90aee6de0c6845a4a7b

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.CookiePolicy.dll

Filesize
54KB

MD5
b35282e8ef2de1ee8fdb828c303a9a72

SHA1
fe03ed73ab58f08cfe1476521ffee0a6cb8dce19

SHA256
e709eec195ba9e2ac268639b4ef1442f2661a0969b15ff5da945c4874e1027d4

SHA512
3bc3530fa975a3a4bcad4eae036927eb6adca11d39fb1eef926124571aec010e96dfb8cde6ca8ec59f035fc9d2255c665d1cb00118519cbac4decf5be81353d9

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Cors.dll

Filesize
90KB

MD5
270ae0718715f387c81c563ceae77f47

SHA1
50b29c51353f88d01ec140354005c619d1734144

SHA256
1f8ca735185b135eb02d1dd348c31f7df20dc83ced5785827a8a0cf6382b223a

SHA512
cd3d1ebe4d765d09f7155ae7bbfb307cc79d9d4d9f6dbd635dca5f2e620ab6ea0f0f2d76caa7a2206fea4d1f964bf0d909ca9e245451a5f597734973e9b2d58c

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Cryptography.Internal.dll

Filesize
106KB

MD5
fd59bd9bb20339a418e55ce541cdd189

SHA1
e8794da9a49306542458406c18268d6a52e64c53

SHA256
852c0871d1fae4f74feba39f0e7aea70da1bd5c122ecd7c1bc6e07f49315fcad

SHA512
30123615a03ba355c11b637b272e4cca0bf5c6a2bbd6c7e28b1dfad1482c102a05510f97fed79c1d42e8d555d422ff2d616651fefec92319fcc5f04103bd37d4

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Cryptography.KeyDerivation.dll

Filesize
46KB

MD5
86db7aa4d9441f203ed33a27ebb17e35

SHA1
72bb2ed0c1ff6cc1905a909cf0a714971c3023cc

SHA256
bfb22fe528216420428d808206b15200d2fe90054314ee0aebeab9230c0bc415

SHA512
636bb5ff70d685dd9b54c6753344e875236c9e77b62f4fbf7bad92c705ba3b2e9ec879dc3c8b01c7aad7442be64bbb46b39b55e4a967166778d93d7e24edf341

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.DataProtection.Abstractions.dll

Filesize
50KB

MD5
39974512a4ea43d52ad28ffa7fe6b5ba

SHA1
8cf2e4d0797ce564e10c43fe8248ffdc0f5e430c

SHA256
b551b10a43e76cae86790dc1c4676898a947807d21a533e61b795fa7dd5ac9ce

SHA512
8922e91801273c6b4b321149197fe47323322e9c7155355601cc1c49eeed570e90b257656e36c6141c97eb1b2b6e70c804442bf4d034318b9a4fb78ac5837a26

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.DataProtection.Extensions.dll

Filesize
46KB

MD5
679426f81209a7067885eeaa6b297e53

SHA1
52e6a24d0e2a64cc5ec5d898f567d22a895c9179

SHA256
cfdaf7a88e090f3f3cce91100a5b231539475ce90b24dd197bd6ddf06967f721

SHA512
c0118571c5d2cc5c68a6a68480775789ecccb5ea575fc6d9713e3eeb60c6dd6014d40997b12bd3e610dfa455829271b9ff5c0849ae3a7e2986749d3628923b29

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.DataProtection.dll

Filesize
422KB

MD5
b3c9f82d41c49ae02465cef983d4f03f

SHA1
70774127c8f26b469e616e42ab3bb5b35fb9314b

SHA256
f85d727537f9b0ac4eeb2e2514d584a67b6d6a81e292c78cbca6751a590b7648

SHA512
13a9b19c825bab0e1f3f42c65cecbbd685d6000f5b327a15b02d62fa5f6e5e0b6c7ce2b65a1d1543418a9716c6469143b99a396f46a9d09075d93e058aecf2e4

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Diagnostics.Abstractions.dll

Filesize
34KB

MD5
1e56a0f9fc030af0ccb3d31b8467e012

SHA1
a6edd4c83037845b9a921372bad3aa438596d14e

SHA256
7f20a6b2e8f110554879ee3a4933dac4afaea3d8b45952d316820b913637f330

SHA512
b1638f21941a5811a2a399055b921511fe584d6e4fe7867102d7998eb040d4f9e24166c728b006d735f8faea23db165750c57885b1c9684f2a5b7dd73feb4d50

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Diagnostics.HealthChecks.dll

Filesize
50KB

MD5
0ea4ab2e5a2653fe513cf34e3ec061a6

SHA1
7cd069e5e8a462dc6c123d6c846731785991d2a8

SHA256
ee96494db2ab36e81d05a3e422f8ad1933a9baa7060c6e6284eaf0dfd355e8ad

SHA512
491f5283e8da95cce6cfc527eb01b6b73bd4511d93d4e61dbd297c7f4f633aa5388ac5bdcc50abad4033e5a0031c9d499f1f0eb9cdea2a97543078704dc63170

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Diagnostics.dll

Filesize
442KB

MD5
1b4c79a8be2a6904d55da3a5f2b24442

SHA1
e44b084525ad4dbd6a91af6286f62de209b46374

SHA256
8830e2453a989f37777d856757cac3ecfcd4d3bdf12a148926ae0246d03ae48b

SHA512
266fe20ce92bb4339c289c5a8e3bc728ac436830c8116c623dab6b60cf83616d71794321728bd829c4f9234c0f4e388cad7bfecad7f78207517e36130d9d922c

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.HostFiltering.dll

Filesize
46KB

MD5
3bc9346eabbc31b73794060b18eca831

SHA1
09e74afc331bb2d7e3f87d99624e19ad4b027856

SHA256
4563a950734df3ce8e8836dcefb74c4ad400494b7c82a62d2a832bd6c085a33f

SHA512
f863e7fc4113bc6d759253f010778167c368f9f34696e2ce91a8d8cea9365ce378b05625bcab84ce69210a8a55486e167ba5d10a0ff2160d24dcfd528b496973

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Hosting.Abstractions.dll

Filesize
42KB

MD5
f6d2f718b9ebefb1480043c4630da97c

SHA1
3a03bab67df54e30903d147914ab77fc814c8d9a

SHA256
619ece67bce5ea8ee7eb79168635785f9d7c6a0c120761dfa64949d6d74d6388

SHA512
ef1955d1b2639e4709a2217f51d9e7399d4ef258877b0f03778a13e42acd6821ade3b89e06e2efe2cb2ad7668dd33edcd196da5c3be0a509b6869e6b37d06422

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Hosting.Server.Abstractions.dll

Filesize
30KB

MD5
a9747c6ffb5ed38ea5068ff7d558c432

SHA1
011fc5b6d4f231563272bd6f7e42b8e71cd8a664

SHA256
dfc064eb105c19d18414e161171249e1e5c881916a0aa55573f687fc2ac25285

SHA512
bda414c1f5cd8b148b1eccb4e47ed7cda4f2561fe4d90ee62f0b5002be697d25305340b0096b90595fc120d16c64a963bb10ce609505694a469646953fda6ec7

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Hosting.dll

Filesize
450KB

MD5
660a9412514859a09d8205fa5ef78c41

SHA1
beb83480c0697eadf936004101413ae2644453f1

SHA256
4449ea80f62ec982ec3fdf72088347eb35feac1d13a2b86bc81b40f7097dd319

SHA512
6bc0b978a9f6ab56d6ca97deb293b7791c99dccc6606c531c37db61a5a09dc45c0524065ab9d6fe98ed36a39a05d7aa7fb012555721b54d3d5b9497504a0ace6

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Html.Abstractions.dll

Filesize
42KB

MD5
de37faed56a5ea949a12ccd413a3b001

SHA1
53e243f4fdd8d9a2d5b18c9d2f63b211065e2fb1

SHA256
04a737a3d83557243f6a2679772a6c45c16a0ee143189f837b686ce953a75d8a

SHA512
951145d3f9ea522bb292821ad9dbc6e81407e1c0801d81f3ff660d0eb8f2d584e0254f43c3533591464ca0ee929fcc5e20729457fcc377c604af13c03c949323

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Abstractions.dll

Filesize
314KB

MD5
b2c4da31e690c8b8882a00f6ef75bcf7

SHA1
31a4717f6575b4e57f51f39f7aad2a90b8b71b4c

SHA256
262903d13b8ff4ddaa5234746e84c833fc100d3a48c7aaad99ecb0b9a209b9d7

SHA512
6bdbe9797f7973857f2fec6f4dc6c865f65a3311e337a581d9438ad04d867dda99863005fcb1bf827aa985764b230a62ddb5d44f447251c4b5b07bf798643a65

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Connections.Common.dll

Filesize
54KB

MD5
8cd63fad5ce9624b0b2887dce08bec82

SHA1
f442c1dcf539f1ccf59b2da3fd7e79d0ce4084d2

SHA256
db7cb1d80f0e1a2041bf9f425153cc54b8518168907b48d0647235261bf2b89a

SHA512
bfcf2361f6ec11c68d170894e16096ae35d6d0762035fafde838144be9b87a670b60a9736aea409537b1f73f8154dab4d6cb1e84b72a89f7766fc03c7d7550f7

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Connections.dll

Filesize
318KB

MD5
60c3587fa1cba3a19681d3520cd78aa0

SHA1
5524fe21582e365a39bf3fb9ba45e6cab64ea107

SHA256
7ea390053a5fe7f1e99ebd1e4f11578da855b5b5ec0723612b0c6a5db574cef2

SHA512
aedb4db2af73e07e252e7ce1fb633a4f0638d2441e71757c85c0224325f1e90ffe4d7e59523b87ebf714a4bb94f61d8b7ed54e3e8649d84f34e93b53dff38827

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Extensions.dll

Filesize
682KB

MD5
ec29519815c52a888978a87d37ecfb77

SHA1
fcad55d109204985edad3eb7b8b39a2b57133036

SHA256
5e6d8d00eef880cc3781e1e91bd0672ec6f42d693e15e67d1a0f18087e7c310c

SHA512
6d670ef3f43f018ad271a21f83e24e31b14450d280654a4efe82789ba6d948d58a6dc84368ac3cd05a92e3e227ccab9a4eac68bdbd63b12494c26bc84176af7c

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Features.dll

Filesize
70KB

MD5
25848ce8878526ea8d10f873b4d137ff

SHA1
8e900e878fc8c4136b168d58bcb00440c38f03c6

SHA256
e1d39f076838cfc5d5ca0cae372e2a1b2a8f1ba63eb271340bc535d2be7fe231

SHA512
cba73898f8a9625daa914404562710c0792ed2fc17f99eb9a7ede2c7c5e3b323725521948ee066ae8524bf343b0547fc48965522c942c5788151280958ed2c15

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.Results.dll

Filesize
242KB

MD5
f193470ce63fd020d6a95a51db8c6e0a

SHA1
06b17b6999fc2b56779d25b0bc61d8609586b181

SHA256
4b61303fc849ce0b84a97fcc34ce5cb31ce5a5116e5967b09df642205b492862

SHA512
ff0af0f09d1cc36c2b0f360bf7808737888c6214a8fc03275fe824451effbf191f7378daf190c27b819817d3604b4a94fbbb5507cad18518d5595aa58dcddbb5

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Http.dll

Filesize
294KB

MD5
49f08b24b55e97c91d263141027232d9

SHA1
e454d5fb6ebe09ac713c6e00573a5ee0f57045cc

SHA256
f991ce4321251db5cdb17b13f291a75345a9fe2b3edd1407a9fcec7bcfdb2595

SHA512
a8e378ba0ac5fec6c42c6b440cba5f00df3481b675b6a0ad82de396bf79e4d672bdc95876edddff1579ba7dce1455c85587a4891b3140501b716467c74aa8521

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.HttpLogging.dll

Filesize
194KB

MD5
bdc378e86cccdb6373e7ddcd98b69021

SHA1
204649bccd3fd78aa39b05d7de07b702f2b8e6f9

SHA256
6ba3515549bf26ff287aca75b7281d34df5c55a1db90940430d81277190dc8c1

SHA512
fedbd87474fc9448af314baf5d87fc2ac9a5fa92a696a541283393f44fa9f0d59ecedf46e2f92c27756c0d287bc8a42864d6299d4359c6b53db5503331c511a7

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.HttpOverrides.dll

Filesize
78KB

MD5
cd5d0d997fd47121451728faa7d59870

SHA1
911c59f7922c49c5e83c55ed98b01282d4376318

SHA256
58e2dd4a3d6c285c989507697d89c746979498dad759ab9d022e0a85b954a727

SHA512
40d268c8466b32043aa0e7870b71d326702d952df6ae692ca35b116462af6eafdcc7c1bd14b26193f2b2a996e0a7923592e76b2ff1f630738e6c68e4b054e98e

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.HttpsPolicy.dll

Filesize
50KB

MD5
e207ac64d012eeedff19a7efafff78d6

SHA1
468135bbb5785449420671178adcb4e7871c3dc9

SHA256
e3e082e352d957b0599131d56c90163728e100913840d680b05e48f55d4f019f

SHA512
100055f2b1c162874cbc672603c928f0885c9e284a84362489415b4f618f0162440c942d6569aeaa8fae73b6c60efe8c48b8d9cedfc466dde355ccfa310030cf

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Identity.dll

Filesize
526KB

MD5
bc2c23e5b5b779711eab3bf01a3c990d

SHA1
37b9f82410c78cf5ffe1cc7e2b402af47e171576

SHA256
2c15ec40ce8f0aeea14e559c4d8486e46b194e9fec978e46b9f3f0fe1fa742a8

SHA512
49b29832d795fb52e572ad738d8d92060229fe72d6eda82b0e47180631438b75e6a22852a649690598712867cfb32d09084c86468aba8b6232731263339ce767

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Localization.Routing.dll

Filesize
30KB

MD5
2286c06c57885a19c185a93fe80906e6

SHA1
2486674a5f9e94c197b9959e3ff3668f3a9f5eea

SHA256
21dc2c05ccccf581bf0470fd79dc3c7ac313d612fd4c53b4c55665fbcb199897

SHA512
52644268b5dc6440d6074cfc9e38e894f64084990362f6aeec8f9934febe0911c9cec612c929b4f1b9dfbbc1a46485998e6631b5518d2ad6c723eeb40bc82bfe

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Localization.dll

Filesize
66KB

MD5
e70202332475c4f2de9040b7284aeaae

SHA1
a6f107a2f9b6aaa2a36fd51aadc123c67f596f92

SHA256
5b7b2f21aaf53a3f1e5df1197fdcde1a94ff764c9f85aaf08367970ffba45514

SHA512
4b1446117ecc54b5a9ec526b7601da05019ae9f7d03f80757b3220e1160607e4f6dcb9a73eb0e3d07bd86ca9627eb1fe2010c809f339dbf4012e81d151093e1d

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Metadata.dll

Filesize
30KB

MD5
44e1e5ea9360121c429d7a5edc312ea6

SHA1
72783314d345ccf73a7a8a76abfd81b7093df07c

SHA256
840dc6b4e8d16484064be18f79357a0b71fac9ccff0a370fce0b1f9cd8eb2473

SHA512
f2899d883db0458be606aefeb0be04dc0605d0d9adc1ec2761db70ad6e6d9ba8cd635e2697f333c681f50124a880fd7f03529b9999f5319ac98ab19efadb3b1e

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Abstractions.dll

Filesize
258KB

MD5
3d4fe05ed784bcaf4be5eb5c0533add8

SHA1
2a8866d15feeb60e032e514c9003cad2c8170ba7

SHA256
304e22dacb2f47e22a1c901aba3154a825d409c8550139560fb61488e4948eb1

SHA512
c32f466a62efa1ad3821632bd483c026cd5012ee8940f374cbb05d1514d18cceae7e2f362554779fb8b8904f25788ae332a322f81002f6da4160a800ec151cf0

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.ApiExplorer.dll

Filesize
130KB

MD5
197d15dd933c1a161eb3ed22fd579f90

SHA1
d5d1bf57e57c1a8a55b9a0cc174364b90d6bab2b

SHA256
c67f6cc6b411eb99eca5e06f308d19bca7c23a5e6dac96feb9a48c01fff9ed48

SHA512
89e1f77b85c59e2b238bd87cad8013b11e587eb99dc1030c70f17935a01efa9602da4f40a5300c40d3e26cd664ede4baf11b44a7e77db0f1a04eb32341adfbbe

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Core.dll

Filesize
1.9MB

MD5
5b42ad4f0beb40bea671360e68955a12

SHA1
406bbd8e924b110790dbfbba1d8c27cf7ab1150d

SHA256
591684347c43f1083680f1bfa257a138405756ed009f91fb50776909bac45e12

SHA512
72d382d5cf4dc3f53583ed7f375a93fa9874e95b189ca01a6474a4b0b31c8c6d4e59ef0d3d3494c14f0cb6842da186a5f54f7ceff47a0cc1f7aa5ea133c6b5fb

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Cors.dll

Filesize
50KB

MD5
5df22878f9158427b1e1714980e60878

SHA1
91f0570963edb3b19630448cc77dc7e884364048

SHA256
0089f090c976d329c7fe9cbea403050105397f06e98c3857bca9731113f91bb6

SHA512
fd481ab69faeca90d0fb8c5a9699ac3fb6658f1a90075fb2237a999dac7a8280a93241599810747919301e35c7b947d1e17ed67be6ff5a9fa4ef95ef235ffbbc

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.DataAnnotations.dll

Filesize
102KB

MD5
12548fbef16a0c1c13bf1c9124fe8368

SHA1
391252ef7bd7c738f45b0cc0ba1eee5d50cc592d

SHA256
199f14b325162701eb81bf1caa54c1a65986689abf2a948e7f34dbcbb9d5fcef

SHA512
4f2c883f8c65afd423e44a834da55a3e9e02b7c62ffcfe32d5f06461d10361c003fed4e73b295c52b166bbe80d676380a70d149315e54fceb56de839ad3a3c35

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Formatters.Json.dll

Filesize
30KB

MD5
0a9de0bb17a742bd5a0bf1adf437b371

SHA1
4c123a8d1075bff1aa99b165786f7bc70d44c960

SHA256
b288b715fc08b70754fed96237024b7d16e6d93286494192b2fdecc96caf29b9

SHA512
af8e2ab4a123e9aa0806401002a7e1f7fa35f2812bf63fa6724caa012603a6dd1cb71c4294334301e17676c331c812d57c2c0f831eb3c7ad943820746a7572ec

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Formatters.Xml.dll

Filesize
118KB

MD5
f07d268832945b4676cf2c1192616008

SHA1
4a289591d85dcd6a8c8bac876cf07c97008b6360

SHA256
a74c8bcdeff440a410cdb2e5790213a4fb4274f98bb65bb24122700058a31a0a

SHA512
861e915aff78d66ed66cf69d93d97a62587d3a33ef85fe0f7b120424652298730fdd9d34a1739930274e9a7ad663110a65e0436d8c590c3eea090d7329ebf75b

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Localization.dll

Filesize
50KB

MD5
b92115e42fce6a45e0001f1255a86bc8

SHA1
e7ecd9d86c5d399ade8286a6c2a0aa8d19589b72

SHA256
75df82cad02508948ce5d544f09f1df7140702a1f42c8d198b4d4d1736cc1c79

SHA512
f97930eae8d0ca0e268dd15ed77fcaae4cf9cb34a1ad4d621a1604dd9c7b1b4475b0f002ee3ab98223fc784d24dbf98f1258b116701405f267746946c93cab43

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.Razor.dll

Filesize
238KB

MD5
35d5bdff29f0d0b845a58476a650cb71

SHA1
5f8d6143dbdca8f8c2a0954b5965e57f1a595e69

SHA256
6d0c183b2143f7f9cdb1d13d6c2f083170155e84c6dadd2bafcf188d54cafee4

SHA512
85439769a3e944d94b9ba28bd1ec5906112ef134d4b5a86b5a7901be84e9188a08db1bf9255236c8f817bf4d53fa13a1177021592acad0b28b84579141573e7a

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.RazorPages.dll

Filesize
442KB

MD5
ab41cb5c67b75d526a148d4ee2e5bd25

SHA1
30085666e59c920fc6916af6e3c7e6dd14831f73

SHA256
5773dae83d80f7f29398d43c37ece97def84934e5be099c231661cdbf6cabbf5

SHA512
c50869794094dbba54376a858592c159d463a15583635ecdb619eca8d191eaaa7f10bdff62e2ff87051b18e338cb0b18b947465ba062ee27db6e4e957611470c

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.TagHelpers.dll

Filesize
274KB

MD5
1de27eb4f93ecbc20bd592df50c0a7d5

SHA1
71993ef4fb027114a72bd48d915dbb335602713e

SHA256
03f9393f71e41f6a8d81857b2dfa249d138952d805a6a792871d3633e8a69804

SHA512
192fee0f935ecb48fb252fdad5f4799bf5eec6c66d3fc4e6e55cf5e78b6ee6f47e6a89ba5e529dfb8db2be10deadfa6f338a8969d78444216658ed1775d01078

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.ViewFeatures.dll

Filesize
706KB

MD5
b13a80044f6955804521e55035772fed

SHA1
d2bb20e5035bb7485cb33e018b77c8f71154fcb0

SHA256
e93d88bb8aadf541c62779afd13a87e56f423c338042112236ee3cca10073938

SHA512
95bb799da22f30d30b949b6cdc380beffe0757de19a58fe94b21b0ea22e25262c52f5227df8c7ecb220099fb36fa9c020e938c327ef843e6abf9fae2c0abc469

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Mvc.dll

Filesize
42KB

MD5
0046d28eb036e5ffa2cae6cf6d2c2d26

SHA1
0324e4ae320b32b08246ab92ffbe25c3f8be5a36

SHA256
3a192950c9087e03818940312e7771290dea9413552a4ee309698c2656739d01

SHA512
5eb59bcedf32c4e7652a0aa72fdecbfba8355324e69e1ee34834ef1fc3bfa3e7008a7843f8b8e23c2ae79f497ef13fa02a4842e10d85d6f78f88bd4be5e71648

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.OutputCaching.dll

Filesize
250KB

MD5
0397e3f75d39abd6a1d96263657e0952

SHA1
9288820f876efcb14666514b3793bf6c86f1effe

SHA256
d9e2dea463ebce35cbc9753f3e9a6bd8f0190721cbea43dade739fdb18830d59

SHA512
c1d97b2120e54ea937fa8b0485f2a0ca5a9488f085583a1d8e78b5749f39986fdab580e9c92bc02e9cf4ab759efd59b0ebb87b4538685c3fbea27fc2a9485fe5

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.RateLimiting.dll

Filesize
94KB

MD5
4c5a85f80c33b0745c4cb58adae2d927

SHA1
b047ca635b5ee29cf2849b7d4bb846c65817ef43

SHA256
3bff9e281627a15d45c0123c7bac3be6b9d991591dc1bf4cd2465607fefa47f3

SHA512
cc1b742fc4af54aeec350ce5c918c0db4c4e71e9fa1f975495134297e23590a86c4e7475b619b89babad1b9394d16234605fbc7e71b8b5611cbcf374c10bd875

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Razor.Runtime.dll

Filesize
70KB

MD5
16ad7b30d580bf5d59bad9bdfcfae377

SHA1
0dcfd1a939ef55c360cb949879df7fd92e88227d

SHA256
10e87226457803dc9270356e324f5dee20f63486a8adf0359518b50d3d93a3c5

SHA512
1a306e7a42b2e0aef8b241de730acb90cd70992d1c0acaaa2c4b1654856b2a61215bd9956f5f8f45b553771fbd6944cb8f589867470c8fd9200547de7b8e2bd9

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Razor.dll

Filesize
66KB

MD5
1ebd63ec555d459f06df70b2955ec7f5

SHA1
477c7a7202b27940d3f5b08b7b4a669b4cd7143b

SHA256
e3ef870a4ce9f38ca2c6790090181c7425db7c6ea08eb284725839d18f96140b

SHA512
4c7cd22ec9ffa4f4e77767588b88c71bd7f3bc44b04c16987889c42bc58eff39580f9fc6282a403e566b7df15f4c2d42eaaf53eb9b4983286321029dc4b36f57

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.RequestDecompression.dll

Filesize
50KB

MD5
585e000e26964ac3bd079bc8be99f397

SHA1
ff016ec9ddfb5f2aec620200b7103ba9d1e5898a

SHA256
643c8de8d011985bb627a3d1c8d5f89dcda9aaeb601bcb4ea302ca7f1e401014

SHA512
6588fb43ce3594e876e2e39df09e46d68c61105f0ca4bd1942700fc3e8307157692208c8b6b18af80ea5050e4f3181a22716a0d96a385275f78bb8d904634945

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.ResponseCaching.Abstractions.dll

Filesize
30KB

MD5
2729ea5907d8370c651968aff2a5a7d9

SHA1
e55b1d6447bc093502f97538a73525e82f179812

SHA256
3202d3138783b12e97415fccabfb6f97f0842ecc9aff00bfc97442b110fca01e

SHA512
570624fcfa9d434783cc2a455bc1be9f8ed68fadbc5ee7f22d15ea802b14a81fc0706ec69451a615bf4363b43ea97ec8df82a25c447c2d9445ed205084b769ea

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.ResponseCaching.dll

Filesize
146KB

MD5
e2d228b2c402b00ff71f44bcc6e89889

SHA1
7b33942692c48f5a55a9bb07748b14515e1c4846

SHA256
7bd170b3c74c09414101cfedb09330a176bb9b2f3754e0a88cfff7cbf181d63c

SHA512
4bfb5149d7709c221e79a312c67679a7b35fd28285b3db16902f8169935cd034ffee7617e90ea98c6294d38cc0bf558830d7e2980014190f30a55c48600ff847

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.ResponseCompression.dll

Filesize
82KB

MD5
f088581d14409a9c88fa131e402259ed

SHA1
9ba01cb5b3b642cba13a77cd1104de499529a560

SHA256
31d2a2d9786920b258eb979d7042334fcc6deaf96ca226aa4e92ed161ff047cf

SHA512
abffe11c67bc8cc46ed40605e23f592e26f27b26e8a5ffc845b8fb609f3a2c8b4e77cfba053edeffc2234a47cac1cb3763a58c35a06d4902ce575cd4abb59e0d

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Rewrite.dll

Filesize
214KB

MD5
5013a4331f8edb6073c7322753aa576c

SHA1
2754b2a288a2c5b442c848c98a11ec3816ec4b8f

SHA256
ba5e4e51032dffb8d3e2c04ad2a866ea6ccd918921a1f5dd881dfa2a0cff1181

SHA512
1e199d5feef6adf3f8203bf6ec40978797bcbe55782debc08ee0e8821c5fb83e3ea4c1c03df3956c77b0f3e537c6ffd1b7fcb78a23dbb3249471d140ad054070

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Routing.Abstractions.dll

Filesize
58KB

MD5
23590e8b0e2f819a1aea6b79b062fac7

SHA1
82433861a7a0d9df3646cd568918a857b59b0b97

SHA256
8f294b1bfb526e4bd6fd7b9f2f21386603ac697edd924fbd8da6787cc8ed6bf9

SHA512
203be52d421547a733be0de282f796d8cd4a9d6a9670ee9fecb50304687b122816e13a5eb4b0781ed07b536626dc013cc2c15f39a304711487b68e3dafe00b34

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Routing.dll

Filesize
806KB

MD5
ce3e24d0df2764f920549978cb07d017

SHA1
5e3e6f993d3a7d68ce1d79bb221264e38be38105

SHA256
6cbe179b6ff76d86c9f641c100c992f706ad971877f3d3e2fa83565ee059e7cf

SHA512
fb59138ce957f6838dbbced4572878de420cd0a8281eddd63602874a5aa518363f888889576ca38f60642e27b21dcccc6e3474bbf1442b46e191cdb817c2c9e2

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.HttpSys.dll

Filesize
606KB

MD5
a2d127af882e83a57556d9091e8536c0

SHA1
6cf14186ea85c2191fdf678f0b15647bd20b9856

SHA256
c2f5d82a421a7fee007212f46da71bf12f22c8b8067a456dd05025cc9de830e5

SHA512
c48b4c08114af3cc3a3d196b26d793d10e39fcc4eb5f04112b9be09ef3f0f64da9f772eadae27e2676a1dac19bd8133f3ced9bb482046691ff981ec7fe0e1281

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.IIS.dll

Filesize
658KB

MD5
ed7e902d195f2e168020afe3a3be31ae

SHA1
daaa5dc1befc0a47c41e9293dd10650a270b4679

SHA256
8da6195ee0e251feffea0fe11429d1f6415ebd745a3ee40ca3d1623851ea2e23

SHA512
95406ca7fb3badfd52fbe5ae4a3e9b713799d18b09646d46df7471d0d7bc087c49ae0ddd9e31bc41b3659929484be92ae0f0b2ff26dacfa79e956a4615b1a210

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.IISIntegration.dll

Filesize
50KB

MD5
e9bde69dd69d1f4e142e5ed882c94a57

SHA1
a204e71b2a0caf02d4cdd1fdb553c3d63dc40e48

SHA256
4723c8f329a499f0638e956a05b051275b29c8953e1fca8b94adc7ec98a80634

SHA512
b795ad75acc6c6d1ec9ef8c75ca1404e90e716862f779fb9566e9178269c74db33595f66881d8d074ebdec0a0397505f1c73f021ab0cc2d488765270b7f94128

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.Kestrel.Core.dll

Filesize
2.1MB

MD5
2e4e9a83d014dab61d4f57770ca5c6c6

SHA1
7ea3f47cad7e56c15e0358e5a7f5e3edfa10246b

SHA256
0addc00a5cf6afa3ce84611b2b1c3c0ff3b5b5aeebeae9c1bd5b71c93dfcebfb

SHA512
4dd27a59e947e2b0fc63d61fda13f4f35fada6f84b504f9fdc844d1449d1e7277adfde15d6ccce826105254813d9aef551ebaa0eb8b155a128ac14b866754616

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.Kestrel.Transport.NamedPipes.dll

Filesize
134KB

MD5
22fdf7a3aace721bd4cc1164d377a7b8

SHA1
0194a08d1bec9f5bbe3dcfaac83e007808ecf8f4

SHA256
d0b9dbb92b0cf21d705ee0a6344edbcb45e9b05c4238e1e0f71fbb3f6da5ee72

SHA512
8a7acbc36417947bfc61dd24600b0acec7621ce48740892c5fdd4973811f2e7c645d4e812382871e77b9ff45c27bcdabab2fc6f3bb4c66a21dc0c701b8e338db

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll

Filesize
234KB

MD5
5e10213155e668db3dd6b04c89481d75

SHA1
1bfd7e102ac7f6be9eee9d1fdcced5677b7936c4

SHA256
be04c6521f4e8c82a9501b79ef23d479217fc93f403c612adb0994299d2c213e

SHA512
f6bce62c5b81a8d6485bd6a93b560039888aebc425423237342b26a6fdb14c32598271d8c115ad8c615c813227c3dcdafe3803847b743ca456b595205baf90b7

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.dll

Filesize
158KB

MD5
0b162090bb228c00164092f778b9dbcd

SHA1
64c05fde5e2e0d7875742b0499d7af7c09b55178

SHA256
f50c3035ca3d18b017cd4c40fde99f507c267682d1ac7593dda277834d7bf34b

SHA512
acbf02f8359514012804b329f340c36d8d8322e2852b1e00ff41f022407938f3232860d25c219ffc47f87ce43bb3338fe0811bb3368e2cc1fd2a90f43b1d9f9a

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Server.Kestrel.dll

Filesize
34KB

MD5
cce9bc4605841e98f229ab9b34b4d6a9

SHA1
cc0a9994b8ee05338429df0f527f50b62e54949a

SHA256
f44ee1e297c884e9adbade0c121b0821c5272fe61eee9ff3e87ff23422744b15

SHA512
84f85b724b1daa142e6e5b166a7dfec3c2310ceb564a9b2367ad22396cad4f2f6f176e2279c4529f6036126c22a132625b6d26cf1fac44fd8bf0b63c94bd2189

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.Session.dll

Filesize
90KB

MD5
c164cc30dbe20692487527a147d8d4fa

SHA1
4963f6e10b8338a1e584cbb8a1e0a0e160a6fa17

SHA256
89e7245a65b8e03b0fcff64df41e520315221528cf537a2ce7c4fe9777e91c58

SHA512
8d72c35ce884b914617d23e1507b2be20590388704bf73d1d7e393dea4df8a8bd58acce4dd7ae48d74f81bd5eb6f191dd75dfee303726d036dab2a40fce18dc1

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.SignalR.Common.dll

Filesize
86KB

MD5
dcaf54794fdbd7fd1755d2c5288be371

SHA1
a63a99844dcb1582ac36556ce09c13e9b6edb3ef

SHA256
28f24b5ec3b5ed270b84d41e77f618162a118624d6e1bbbfefc62f4da64c1945

SHA512
b89308213ab4c40b6892365ac5e54b039fd11942656b2f4f7429ed178b8d0616f7acc57150d5c7abe0fd111c0b631b170d2374577ecdca97c6609da04fb82d4e

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.SignalR.Core.dll

Filesize
482KB

MD5
960122ad0da39dcb0f68f083e1413e17

SHA1
d857bb18dfe0de50355babf99c26cc966bac282b

SHA256
8b9daa566aff3e772300675a1750a7be5fec1e34d155b76da93ea70880ffe55c

SHA512
a801caa64fcd6a45fd8f76389f5352df52ff04df874402c1bbcef5ea6966a7f9c2d37c605894fc40b9b9a6cf67a121000267029c0144c37d273fcf71573eeac3

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.SignalR.Protocols.Json.dll

Filesize
82KB

MD5
954daf90f10e13a05c3e9824c991bf0c

SHA1
4d45db6a13c71078057c3c9cd5ccddb0fadb41df

SHA256
2de6af08e26e742df7cd58e35985fddb37f2c304ffca3aaef7a258f4e2a2213f

SHA512
01c67e7cb98b6421e2d4d4eca86bf3103d8ee7b5a5f2119803bfb608bf312eaacb5b8b0c9a822a4fd09be29a8e26603943ad9b332b794e1f8168b4d5313e9fdb

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.SignalR.dll

Filesize
38KB

MD5
87b799ef09ae086d04ea632a33927ff6

SHA1
bea4285c3483adbc13b98cb8a9754028175a054a

SHA256
6190530385792ae42879334cf0994eaf4b22c82aeee2e14aa03ec54012caf30c

SHA512
29417c3c0290303a3d650b3f0489635da2903aeb4e5b9c85f327055e4dc2199e2f675a0044ca7cf4f1feeddff61915223a893684468355bc341e626f37fdde19

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.StaticFiles.dll

Filesize
162KB

MD5
b40c69887c8afdeb420b3d14379f98c5

SHA1
6d8fb70aed4e59c8980f2a3dbb06649356a68e8a

SHA256
243d33687ed87a78660fa8bffbc1442f7ab06b1b23e93019420f3a992589a46a

SHA512
1eb62c571f4788faa3165d33587029cf8e2c9104c6eddd9f6b9fa4141055407b0286117cb5229d2ec5af1e81ad5a4db9b95d84ab3b683848c3b0dde5a0449446

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.WebSockets.dll

Filesize
74KB

MD5
dc6b83bbd29344281edfbbe7379e4733

SHA1
03f99af47422e3b1b4a9dcb3b608e1b2ebbc11b9

SHA256
5984ce7858667d37d53b50df3bf5b90f4f737427d4ae5228ff775b5a8741bbcb

SHA512
013b3dca688ce0dcda1300dae5554a9d08abfc422f888e84d7cf0d166dc577f04458066d4f5e9dd9c8af7dfa40a03767793462b40fc2f1142c3aea5645e66a1e

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.WebUtilities.dll

Filesize
250KB

MD5
045783ff6e37aa3b5a390e25b93550b4

SHA1
67a241955ff11df42fb53a64f20d839e5b59198d

SHA256
f10e217472e533746f554f7cd7c43f68742125a34e77d155c7815d76be812115

SHA512
8436e2f3872fd721ef722c2a09453c1839d8798e25e63cefab6e798e0081af2cced42474b244d79722936b20bfa48217bef4caa991ac175a4a5bb1fa5af83e4e

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.AspNetCore.dll

Filesize
110KB

MD5
51daeb7608d9657b85c1b28680b49d5b

SHA1
23120a4f3a54228c5e0ae95718a8aa3639a309c6

SHA256
c9888544bf7516ddc09bb2dff282cee020fd2cf5e283eb5187270fb4d29fb96b

SHA512
ddb4a91184a930c4fc6d6fc7cfb5eea86e5c56c7ef9fac254dd838fbabc9590a88174565a4d5c59b96fc48cffe614aa07812829a417f7c3e7261b22a4ac2abdb

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Caching.Abstractions.dll

Filesize
58KB

MD5
dc62c2e999be73e5c040519f071c9ee7

SHA1
99290f850815e262035673c1088bbb52cb7735b7

SHA256
5635a5a07396e3973d6e7e2e2f958a2d0cd58b03ff813c2652a5f76873ead239

SHA512
4e56180a1d762446bfe49a8014da22197c9905e75d9f541ec30db559f0afa7fdc05debcda134dd9f0157a9fce12a83627b21efa729eb41866778164a2191a511

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Caching.Memory.dll

Filesize
90KB

MD5
1dd4f5003d959fcf28d67e552d01df78

SHA1
36d0d4ba953c8211a73f219914695aedc360a1be

SHA256
e0685a8e7c5f16e8f612ab9e3183491a1f6cec29b02598ba68b980a49ddf1859

SHA512
8d584d130ad7311b165639526cfeda722bbc65a9aeff20c81239559d2e34b779ecb50bd48cbc095ddf1c0ab1dce95b09e90b738cd6dbb61fd863e7465c25223e

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Abstractions.dll

Filesize
46KB

MD5
cf8677aafafa17353244d307a5191097

SHA1
731ddf98bffdca4421c742e32030667a798092a2

SHA256
7003f0e7bbdf01e821b4c8e911c1db87a8fa083b4b2a2162f5832d30baa73d6c

SHA512
ff02cc735af53a1d2fdc2da789f4b04a1c5347ceb8f9a9dfd3f5d4c0654cc94c646fd3e1bfa5390427d2e78c1d1366c44f434dc4be146786160bafede34dd0de

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Binder.dll

Filesize
86KB

MD5
2d169ed5f9d310c0abd1efa273838316

SHA1
e90129193ed6f0eebae2a5a95dcbd353a4398a34

SHA256
5064344b7c2a99d12835856f7bcb2970187476b50bd3bd7cbbee9ceca1601577

SHA512
ecafcfcb846f353eea87f3dbd5479bfb8bd9d1b881274cde68d96d96a48cb256f5b589d11215a47ccea2d86a9b0857f456e0edc583f7d978b8306ce97d7b8d11

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.CommandLine.dll

Filesize
46KB

MD5
5d00f4be3bdede52b99c3d9a06e06c3c

SHA1
04e45ab504c6dd24f6d564b7433c0bd4e9504e4f

SHA256
3a21cd937a87f8e884f304936ab7a7f14b57e94f10db14041a0f42d4d662fccf

SHA512
461f89c68fe3722cb13cf3ad3925c24b0623a81f8bb9b871e7857eb6594142ebd0323bfb9baa0d0f3e17f93aeb157340953180972969c126efd1aba1db1bed47

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Filesize
38KB

MD5
a5d32148c96818a0de0bd263a4b7bce6

SHA1
1689c278ac6b291120d40c83601a8c1b009f9a2a

SHA256
17a99c653991782e1be35c6183412a68dcf43bc0ed709c21a6d819a001f285e9

SHA512
5bce9b00ba4b6ecf5061976ec02ec20beca5511e2d5ac1d8f9ceb718490c55c6307feca01c89e8c49948bbd1f884ef9f9b3361df64b3302d92791fc0ea46766b

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.FileExtensions.dll

Filesize
50KB

MD5
9147dff3bbbed72bbb6b35f3c94b45d0

SHA1
990e2fc453c62bcbd02478abba35af81f82027f0

SHA256
d07425f36c4a0ec07bea1f0483a4e7e05386103432b47e4380b0d562fe09ed07

SHA512
03c1278dd6c69ccc4263665e1cc242ed0d8aa460966969eea41e6b5d0a37fc4ac5e217f52041be9bf0c451d3827ae093046637944e0d197c88eb091ba72cdf6b

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Ini.dll

Filesize
46KB

MD5
47907276b0fb75f68729d1e65294f78c

SHA1
ceb8653a502d86cf8ee7fa623d76a240a96e181f

SHA256
fbd17f88f31bf46ffba5cd51b4f4851f06cd7752857278ec75cc642cb04f7cbd

SHA512
9c62d3831adff4c679dfff6af7102339c45f378e179df49cf8411f32555c992981348fae0afc95f1ac85f333c7af6585c0474b134e2e49210046fdb0ff6504ea

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Json.dll

Filesize
50KB

MD5
f9d0265b6a44b92638f3fdc01211f47c

SHA1
eb6f065f4b1448cecd26152b942bb80e480ecdae

SHA256
46b98762e41bf461c16b98db275b2172bb803a665d95ca817f48d632000548fa

SHA512
4532b882e375d57d8adddfd5942e411772f66e5d70579c9a59e8aefcc166ff26fd995a678f414bd853accefd6a85591df32347dc61cc61988e348b9bd6c2bbb5

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.KeyPerFile.dll

Filesize
42KB

MD5
f69ff6411a51fe06dd658f94497ce8bb

SHA1
37139268604955e74ec2e6be42b1bba1bd305af6

SHA256
b25ff4c433f9df5b1359312f34e6681a5c17d8829a662738e7d21dee7e3be4e9

SHA512
a4a95721d8340d6ea18f25acf36205bb63b212e56418cabc0372a6c1a64913a8ccf9b83c092cf86ba4735efeb0d46cb9173833bf69106c29931579deb66a715b

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.UserSecrets.dll

Filesize
46KB

MD5
01d99fd08c06f9a2c7f0d18a15548bb1

SHA1
fb8bb7a9f6bc74f011c706bdf64c7883d00bbe3c

SHA256
db4c1f44ae845e6d73cd5a7a7537b32a938c1eb7bb5b32bee5c20a78a70840d0

SHA512
a758730bd83da36d854a6092a43b77e29b5f578a8bb88334abc6f27f11fd37057babffc8c0d93acd5fa8903bcbfc8ac49c548023111f15c166f12e237a4847fd

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.Xml.dll

Filesize
62KB

MD5
9591536ca0497a02bffd9eb69099cdf7

SHA1
0026b7990d908a15c811ba40139813f738b592f0

SHA256
3f2410d41a6fe8d36a7de1078c5ff6f918a27d168e1122f0271f2531043fbbf0

SHA512
9ef07925aef6b9420074d0a9b636f5c16d4aa97806d832a6c395267f9547a3083cf69405b62c6e77b4716cd8b6b643c9d9cce6ac7dcd5146708f26567a232977

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Configuration.dll

Filesize
90KB

MD5
4eaa037f3763d5ed2c169dffe7b6638d

SHA1
8a57617f7a157e2e363cbc0d9eb7c31b9c44e7ec

SHA256
4410587c4c850e4fa4cd2c165601e2df1bdc7c86a02bb81c21a80cb080fc0bde

SHA512
8a2356e7c9a834995d5693361600fbb463812caafa43ce2d7ed612b6e36627bd63aefc512f63456ae4c162ae57e073f2f3b360d71bde220f61437350b1622dca

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.DependencyInjection.Abstractions.dll

Filesize
138KB

MD5
c67cca62edb174c9b884998c47e188ba

SHA1
115a105ba0059ef0536a3ba9e34f2bd569d41d95

SHA256
370a1d3790f00a67195ef706dacd00969e2069f3f93c7e10fe8b9be0325afb7d

SHA512
25388531386a0fbc7dfa2981456bba11e7caad3c883dc25ae1b8bf6cee938fa36ff4f050ecd9f170aa9b8ef78bfbcb42462924009cc1242658781c3e255a6e03

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.DependencyInjection.dll

Filesize
214KB

MD5
e0fb52f9e6420e1244c48b1a2440dbe5

SHA1
819b5d31bd606d978495f2b603a7e219c0ff06d4

SHA256
1ba888e8e58de0626475386b1b7305f15f6a1ea61d4cc951efedff3f4edc2e86

SHA512
3c13ded621863a66df5ef35a1280af18d34d0cbbf9e2c6d01f39b666ab3cad2af226442387131e0c8ab3c98fafd433018f3a577c5cc83324a0e1e2028e32be17

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Diagnostics.Abstractions.dll

Filesize
46KB

MD5
214098512b130fe23c0706fc1b6d7c0b

SHA1
6f69c8c1be9a73f7ec434cabec37bbb7cbdb4159

SHA256
363197bfb0d86dc24b36200e3c32826a7f2faadae74c22d9001a28e37cdc39dd

SHA512
55d2ac442936fb4b14fdaaf5c2ef653da54a0b9814b3dfbe83afd4dd6651d55359623813f63929241e6d425061335cb77b7cdb6211b27479fe8a53f170b32f58

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll

Filesize
42KB

MD5
94fb525fc694be44f21d60c073febe9a

SHA1
3e252ddd6424719c67ee515a60dad4ac7b11d05c

SHA256
fd7f87b334b58e176a511196716c8f5511e89c64752d0d2965f983e5da0b4f61

SHA512
5d38830021818499cb3b9f6f6909a70c294d2e75f28bb4483d39654dd46cedc7b0a3e9b38a65fe0e04513bcbead95aef308ef59c49d850ccc55bf767ec170df8

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Diagnostics.HealthChecks.dll

Filesize
110KB

MD5
0712912696f9bf8b0ac5e399fcdc7e81

SHA1
ff00628b1a0c2241c7e2b01ae53f7ef108863db9

SHA256
a337890f13101529a668ff45b89694dca55b904eaf25ca5026dd2a53018bd853

SHA512
63335ef5faf679030231e18f6332f35de3dbfbce50da237dce5b8afeefceeb5bbb04ceecea94bba588db6102001d6a2813075bf18d4f295592777dde0be4994e

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Diagnostics.dll

Filesize
70KB

MD5
80b2c31b38c2117310a297fe264a37e0

SHA1
a5cb578d1c8f5060cb8d2b46b545e32ea22cfc2e

SHA256
d47e62dd091d09c4f184b3e19b4aff831f8c60b6c2dfdc6facfedd6a19e17034

SHA512
4d5298743b09f14c5a03e906f87b90d84df63c80ce4c2bcff26daa00dd25c97f0a4b830340ba69e2b7b3c70ec9aaa6f6d2584bdf60e59fb0b287ac3f8b7d8a60

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Features.dll

Filesize
46KB

MD5
c4dda002108194164015c25a6c20814a

SHA1
5c719dcc92e785f6f47b1b295f7d9c3fb5995536

SHA256
f5b4952893f66cfb8e4d9da40618c07055083b50b4142739e3ae433dcaf8a8c3

SHA512
9aab97151847d3c7e5212d344ae08532e5e21853f840ee516e193b64638a3744faf5ed49382e47af9619095cc1345ffaf1814cc8598a2e233ab969eab18c5f76

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.FileProviders.Abstractions.dll

Filesize
38KB

MD5
526146e95210b705e5d364ef437255cb

SHA1
35728c73a48b71ec37cda450bbedd7317b85685c

SHA256
95f2e72b91821aba65cc0e6b28217c1d24cb9df021b8ef4d115e4ee765c375a1

SHA512
bab5ff8b4f4e655f8b9547fae408670622decc429eaaaf51404b061c909632af0624cff2846a7a1f741ae7997302bfff769b02a426c21f5e389c09616f8f9b91

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.FileProviders.Composite.dll

Filesize
34KB

MD5
319e1e69cb7f5d9101a3205d44d54678

SHA1
aca390f2bd26daa4f8f77b4716ed4cd3cd904b5b

SHA256
efbdd5fb95f0ba4cf72140043e706c7435d4332642228821e428700ec1af7a64

SHA512
45f4189e3e97a36e7e4d2d10f88ec8615d42e4b926ce258c071e18bc0cf2bf5ffd7ef32bf9cc5b652be65a22b1cd74ec5fac7eb3399c9ef37a7cea38360fa497

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.FileProviders.Embedded.dll

Filesize
74KB

MD5
3e6c984c183a14f3138f1b1836e7bf40

SHA1
7d81029f2a168ff793bb1d098c83472edd5e3d5f

SHA256
e4babe687b20effe91906a53c100561a00479f2122bf18ebfc247aceee8709be

SHA512
c9ba777ed1855d3fbe6bde6c43fc550a340bc790df55cead0b29c08660934b41f91e6f113cf3c1c179099770073edeb853776a6ca12e119cc1f9f43605c0a86a

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.FileProviders.Physical.dll

Filesize
90KB

MD5
f9205e3709dfe9be51ffb1bf8d6d61d0

SHA1
93d8d016561a879b46d2dc89159c2bf714c2a414

SHA256
d8b0e76603d656d010c0d6894d459004c8e914f233fbcb52a768a27a5f864f84

SHA512
4a0b75ba51607fcf1243339e5d038fc166a41c4eb67b53771bbe532978774042cc31fb9f6720d48aa88daa4867bb049a7122d9ea57470fcc6cf4cc84e90d790c

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.FileSystemGlobbing.dll

Filesize
98KB

MD5
818944e6d4b713e6bb4c8387ffa30221

SHA1
1f4e40285bc2df2dbc824fca1d11c5ad542e3c85

SHA256
6a28850c4a250ba59c976e81d149119d077b7f1d60cb6eefedc851e27be5e545

SHA512
e3bdcbf898047bf4cc01c531dc0a39c989805e94473c198dd5eb8693bb966df3befbe4ac042772e92b57cc4f915eacae614843fe0827a150df6e3a3d055b01f8

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Hosting.Abstractions.dll

Filesize
78KB

MD5
5858a945ee851c0e3390680b2d61cbb6

SHA1
f4e6b2265b9251db998fdeddfc5e295d62d6fa10

SHA256
d68e2d436e1fa823b8b318d481b0b7163d48721353ef04e1b255a7f9159efa74

SHA512
94e21c6f65772c42d0010cd17bb3e3f51479c365ddccdbaf2391b4d498a84f25f9a1744a67516820982dfa2a24e0a988f6fca40af6c552c7b9e6aafb7a913ba5

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Hosting.dll

Filesize
150KB

MD5
472c9f7485045d8a42ad7ee546e737a1

SHA1
4df7ffa66fe27d6606d99686b30ac9883edcec33

SHA256
3a95ebc5f47295d85c3a75ce209afd9ea7efff198ed39d87d4091f042194d6ec

SHA512
21509da5eb4217bc8448cbc0e3d8246d855718cade71c822eb37b3b8fa76b4c64de0f27c375b521f6c8f673680fbc243ba732a0002a68cf6bb0e4018e50cb8bd

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Http.dll

Filesize
186KB

MD5
c5278b4ff44f2853bbacb27070f3338e

SHA1
ba2a8a2fc0fb5e6c1fcd6de21cf199d446b02038

SHA256
99d0d1e1876d9008b8e55b32604c357972e72d29a9a5cf60eee3b4018b0cffef

SHA512
7fafcd7b8acd40a4fc78e1004fe1b9262f3f90fcd406d381102741c8334d622bfccbed1810ebcc3ba4d10d6ee8720409197922ad831bfad68a6cbf2c28ab33b8

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Identity.Core.dll

Filesize
438KB

MD5
53e84b0d1e26c3317414440ceffbec14

SHA1
3b9b260425980142bc6525273ed9606964f7a206

SHA256
576bffa29445184e021ee66336058e39706926625f939df91cf3ad2656a67232

SHA512
dfd71491d2ff42dc2a5fd77b71f66683875151c4e77ab5203aa6a7daf2f49e3649a10a680f31cc8abe5c2501483e7d73256e3951703e2c42e9dfeca9aa831f76

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Identity.Stores.dll

Filesize
86KB

MD5
b76cc02a2df8811f76e48fc33e1546e7

SHA1
ae0fa8c77217641dc6ddae3db512a4e95bfd4889

SHA256
0ec3ad8d24fb6d63c306de206bb9df4855b1a4922d95fabb6ee366947e44f85b

SHA512
9123b16a3e4ab130d49101f64aea5d83b9c7e7b74dc3263fbc8cf4031d62563c6ee4f92daa89fd71f514f8b78e615f74530e606b4540d53fae61c7835efb0c28

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Localization.Abstractions.dll

Filesize
34KB

MD5
ebfa7b20de98af23d5dc7274f4e96e9e

SHA1
4858fafbc9ec7f2663387739e51b3d174082a021

SHA256
cd7e8cde8a91dea3d7ad4fe32a4c19412eb6bc851fd38d710e1d295c9213346b

SHA512
b1fe9ea4c8f97b0126220cf19c8075c5a9e6a25a7e19493e426c6d84b660e5eac4aeafe2535413b64db457c5bf262871222bb6fcd64e43e846c0a1eb38cbf37c

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Localization.dll

Filesize
58KB

MD5
5e748e63ee4ed23a3cef0049ab4fcd4b

SHA1
57fed47e55bfd1cf4551942a8450c4d3fca436db

SHA256
64125e3a4cae871ed74eb3e21db777260a5727f76c4894cee8264d4d5be4e947

SHA512
eaaa8c2ccf31acf0dbcd8dce60334dbc83bbf240620cc58316e9683200d422ebc402b553bf34362cfffe4478ea96ae6664e57c095f1802b79aa5e955c65bf325

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.Abstractions.dll

Filesize
146KB

MD5
301918804b6169ec4789252e94751d9c

SHA1
232334b340262f4923fcf09a5a58335a5094f924

SHA256
759bd72aa5f5bcc730e4f396296e8c8be57fff4d8c101862d614b60213217dce

SHA512
e7a3d7b470d83a3a9cf20bf022d8726e6b96a3545ff7597fb5893a38ce16d108cdd2a1b3ff5b0bfdc7e61dbd440972384a590ada45468b6fa935f275cd7e3bcb

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.Configuration.dll

Filesize
46KB

MD5
ff324d327eedd39476273f2e44d90785

SHA1
f0cad827d3539891102ebf1dd4fda3bc82c05035

SHA256
3c30f1e6be61d983722128661b01e2d293dd0685a4489709936362a544f2e86b

SHA512
566e2febaf2b8c2edf1f8228ce4c4cdcf73ce006faf37ccf880c109b7d7778d74ec7f9f83d9ab1bf893a551c902d7021b878a13c13eeefb09149d8dd850af932

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.Console.dll

Filesize
154KB

MD5
66598d0389537ab30b5b702d083136e4

SHA1
0d87093f179803de692142536abdb0e412436017

SHA256
6ceabd98f3a8c52556916895fa928796d6db4b30a0604e672e8350dd610ba5c0

SHA512
0d663d559057e04e3123178bee30e7edd442f4c7e862628c4cad78108838c41497eda6d8dc06bcee4bd5d8688b00818026e9adb65b6f7445f777272bc662c422

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.Debug.dll

Filesize
34KB

MD5
e1b50afb08fd564ec2efe003630dcc72

SHA1
64a8dbadb84fd32ace2170a08fc75b8620a8dfa1

SHA256
8e923296513b4e2c78846eb18f8deb8614b6996ccb601928374e98d193a810f5

SHA512
032e6b6c9501d6be37e6368f422e2b7cbe87a471f6ff1aa47e174700c290437fe023b46506087ccf05944afce0282c5d2491565b415ee9655f287afbf40f65aa

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.EventLog.dll

Filesize
46KB

MD5
c2bbcc1ce973c87bd96025800d121317

SHA1
1ecd912090bf319da1e5c7ad0e41dd98851edec7

SHA256
5bb94d64915f9fe57dd5fae2d83f596c66052dedd5674e53365302f9baf6ba5a

SHA512
3cb5e50227db0de4a900253e6e5958a90f3a540c17a1015865b6f680be614bf88343876ae185a203f2f22a50b395b4baa1b91770ea65daf84e71ce7b798eb696

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.EventSource.dll

Filesize
62KB

MD5
8db7c6ed16ec0e184791c8e3cdfb0af0

SHA1
c8a0f1f3e679cd02bcc79a951d80122ef542ee69

SHA256
77420058df382421341b0cf0eccce94bce3d610582380470f4b9f6a483744c73

SHA512
eb6676261dba5477c0e97b3fb589c8d88ec05a60bb1801fd22f0ccf0de79e1a8c8cb4e2cf3d6338265a68c540c3dac68470371c2be9665b91b2521c8357634e9

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.TraceSource.dll

Filesize
38KB

MD5
e3900df48b12eafb9c625da0ba365902

SHA1
68d5665387155f95d657eb793ca7519845448ea7

SHA256
1dd94b745a25dd08ccdc65dc7b85cf6a772ea849bb05dd980a50de534d957c32

SHA512
56b12a3e6afd479c7099beb50430d4a73a23a4f4a0bdad5ceb354b74920d85ab05d114168beb7769af31a809742f63322ef7c1b5793d2f0b3ec3fb612ae03d99

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Logging.dll

Filesize
98KB

MD5
8fd60c435b35e0a82ea5c780650df067

SHA1
61cff25d0570564186008dab3cdacf964dd5f54b

SHA256
7225ebdd64733d3f316446fba36eddced20ae942e1326bfc2cc370c46c07ad49

SHA512
37fe2d95102a5dd61adc548cf6c664a9bd2c88e0421c7a976b9f0f09cc9e4252fb805e84ed763fcf15b674849f87dc15cc28fd8bc4d4df8fab09eb9daf950307

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.ObjectPool.dll

Filesize
42KB

MD5
408fad2be36706ac9a06ceec7fa8904c

SHA1
90c6617af11f7d54e01e8434269bf794b22a8f89

SHA256
c101e5d688d4dd7115d2fc549eac599353bae31660bbaa2d04b5c6d27318cbd3

SHA512
efd6396efb9a9ff1842dbe431319e5df681d4bb906381f28fc2902cc2278db433b8446097ceb9f686c1f47629239ba000690f971089b09ca4737982faeec6f95

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Options.ConfigurationExtensions.dll

Filesize
38KB

MD5
7cbf0190a863eaab29c8739ea8c42e1c

SHA1
523e12d6cf4f1e38057c0c43e73f12397fb189bb

SHA256
910cf614fe9eee3a939ef58647261553c1ee34a0424ab3a9f36c7afe26d53044

SHA512
1f9adb919683a8138cb117d20d4dce56457e31479f06555f2b67de47b9216dbe1a50b3a4331c3397093d73848652ae7ca64ef7fb3f0b61d09f3caf1bd7b1be57

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Options.DataAnnotations.dll

Filesize
38KB

MD5
7e8f85fa65aeb0c21999f55eebb4db10

SHA1
66f48cd46220a5fd77f74679879657d10286dffa

SHA256
88b5dbcb131d52dc9ff88ffe3fb9b37144886dcc026aa5f90afb123122ef4584

SHA512
17b33c1dca01c4a696c5dc44f727cbf315f64580b43e15984e212c20cde2ecddcebc2fda7adf1193dda83f1bca7aedfd7aa0fa2d69072bc29a4c4f020ff2c006

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Options.dll

Filesize
138KB

MD5
b7adcc4359dc7ac31595c446d907d1b1

SHA1
f6cb5a2a37e116acb9512421ea9b5091cbca4b51

SHA256
a0d1ebd36c1708bf983ade05f5c0d845aba504cdd8d53bb7652cdcc1ff63ee86

SHA512
fd1400d0678c56c62247f36b8695e502c093c329e81b264478d52f0f19f4699f890ac5258bd325072a0e50f364d319c00a62a2567b1b877c2892d6a9fce3d430

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.Primitives.dll

Filesize
82KB

MD5
8dd9ad66827db7ffac40667f135a61d1

SHA1
8b0dcb1dfd66429f55958c2d34ed18db09e3ff8f

SHA256
8198149b4ed35656d2558204c673a7a37724a2888f27c14f35c8fb161aa65381

SHA512
c378e3cf273665b5452e7b3e8016c9983ddc6c642f9b9003f5fa4794f5aef90abba15c14dbda7c24f6a6111b5c9b8f52f7b6d9726b8696b1df1052c1f9d6cd3c

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Extensions.WebEncoders.dll

Filesize
38KB

MD5
dd240a7236f9eb9a31d4fb906873d5ba

SHA1
130dfd7d79b54dfe2d46a4d82d9b03198b4c284f

SHA256
4e4ad1e30ea0febea4f37e04a7950542480a9a0219064f992af52729a939d629

SHA512
16d4ee5f15d71a2f0bd26642f5b4258ff467dd7cdbb5f90ee119ed4e7b26e878e723a3f96260081646867f202b1695c53aef6d882618fe6a6b483446205d0972

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.JSInterop.dll

Filesize
142KB

MD5
c911998f97c80af49a5d0ced4fa067d8

SHA1
3a3a84b3f568bf63d9562af4b2677a2b00d63902

SHA256
46a050932c96b37587223877e43941209597c1055d3e1766b6ffd77376c68604

SHA512
25070b3992cc9b564d2da62a1f40dda3ba34997e36305079aefe422a5718c735d2fa9954fd6048a4e2320299562860213b9b28727b655d5bf709d833adaa2f08

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\Microsoft.Net.Http.Headers.dll

Filesize
218KB

MD5
0cf42d5c82219da3b157cb87eb136e4f

SHA1
c321b21f6e9117486acd90db9868c49b19221595

SHA256
d9e78ec7b4ffc29265b05252b043209bf6883b1ae26595a57df72eed04e8c0cf

SHA512
02d195a6dae0686232d3b817bfb6930c278ecdaa12de3d6991c1e6ec2651f4ea97b1b00e873b7071c53c2feda6047e3af05a43e350fa200583286921aa1e6ada

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\System.Diagnostics.EventLog.Messages.dll

Filesize
794KB

MD5
bf4e73514b5260a6fe45638f920cb6f0

SHA1
e2e824917f09893e6c47095b4b4b5ddcd8588972

SHA256
7adba294d8a05829ea4b6b0faed84471d0db91ca15446c6aeed39e55a01576ce

SHA512
f4faadc9c6eefa935e800887f7172f384a0eb702f5077fd67f19e1f1de61e9c0386cb6de682bb17b827ca7c9ec37f7a89b7b45b5d14f2a9a0e0a88968258f25a

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\System.Diagnostics.EventLog.dll

Filesize
378KB

MD5
f8bb6b5840688b36c146e0ad0623feb1

SHA1
1d82964562d559b5df66bced1590f33bd4bc9c38

SHA256
f1452bdc74cb05d7483ff63cec96d76b6713e3a6d5e957835832f1648e014754

SHA512
5281206ead5ed492119cff9652f5353f5e7bf12c1d0273f00c4c0ae5a267792b5f69034c5dc3adeb2fddd80ab0e0d4988f28dd4f5975df779892e5e6d65f615f

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\System.IO.Pipelines.dll

Filesize
190KB

MD5
3c7efdba77c0cca2bb9967dcfc5caeab

SHA1
da5e9d0af2d6a187e3c6031ba9c81472fdd31bdb

SHA256
928c827b1a02120e690f9e39c9f217617b036f1297ed926ddae52ff93c139d45

SHA512
366270799a7c6007ea2cddb4ea01799dca78c7627633ea12576c6f79d6774910a871592e380ba9b06f26e4e6cca17bafb64e357a1b992bc4f02f9ec8de7ba388

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\System.Security.Cryptography.Pkcs.dll

Filesize
754KB

MD5
115f1ba0b1a7aef5062123aeb81dd810

SHA1
66474f229438444827157c179c746b068a0f5e3e

SHA256
53be870bf80935699fe7b9c45a579936009c7a9af530cd8116aabb90cf6f0f85

SHA512
33739e983e95897900c4cf9f4c8104678ba337a83740ad22ea577ce84f4beb35407231eeaa00ffa234db7ab733fdeb33fe47e839897e69f8f81e7386c14c67db

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\System.Security.Cryptography.Xml.dll

Filesize
446KB

MD5
d99864e20075410fac260b50a89e1d4e

SHA1
ac78a49c5a135f33c6fb07c73268f49202e221e7

SHA256
f2c269d8b8db8c88a502c6ada36c1fa27f49657ef46546bd083300c8e0ea05c2

SHA512
ae52c879d3b0cb4eb0bdc3e6e21106ca7de812eddf5b9fc63c303c1c7716d7979bffbab2fbdffa93cf07df002562ebb51a2f6dcb3096fef45ae019e046f64a4b

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\System.Threading.RateLimiting.dll

Filesize
162KB

MD5
cb16be5408e06148f4d454ad9b633117

SHA1
db658327aaadd7c27ea3fe365626d4ecbc975bce

SHA256
ec736592a26739607705805f2d8eb8de5af359a24325a1597fba1053423223d5

SHA512
29185d0fda4909fa8953169f3e59ca887c0e02a8b5bb39f339bcda4e44bda237560e59f058fdd6d0ad680df22b8fc115ea2b2cc92d61bcdf29a8045b13a1ace6

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\THIRD-PARTY-NOTICES.txt

Filesize
55KB

MD5
69178a6c02d1247f7ed2736f923afe17

SHA1
ee0b6671593b99572da12b58cdb22b8795f196bb

SHA256
307d014f65d8482314f1400ddeae7a0cbabb96c2207bcc77f6233cc10588e5d9

SHA512
e40e1d562bd5253f366be749b947286a14952a04158c21529b7408a4eb19a89e288e1c68e63d4ba4177cf9f1256f1ca7792e385c8a8bb16a2ca2ea3ed2f207ef

Download Submit
C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.8\aspnetcorev2_inprocess.dll

Filesize
358KB

MD5
f7aacef024419ce84234d6f0b93a04fe

SHA1
5acd2cf3f2884b41ac22910e595b539fb982ea0b

SHA256
896a8f42925639a24b62324696e7e4e75095c9e135116944539d13c471ab183f

SHA512
d7cecbb2886056b09458871b1df08a585ff8fc9663100800baee8c5fd4c841b58ab5064d745485d48b1de9f3cb6c72bfb90f48aef20f3bd74200890dc399d036

Download Submit
C:\Program Files\dotnet\shared\eula.txt

Filesize
1KB

MD5
ba2bed45d99b13d4c31485d0631ae675

SHA1
26c7c096ac257154020a07532c5edeba91ee97e0

SHA256
d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b

SHA512
430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97

Download Submit
C:\ProgramData\Package Cache\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\state.rsm

Filesize
896B

MD5
cd18e08ba0f4510060ac5a95c9458ab6

SHA1
4a3e5076b58c58adedd9af54585cc988cde8c063

SHA256
aa70ffb1dd40b360d1e4bd018a521f723f039b5df6125c40fd05aff2ccf920bf

SHA512
20a5fba2df6de431a02eedc9c51e18cc466b52c326cef2417fb3a705ab4f38f8ec1736808d2a9323f5579002b5da41e631aa8b367321cdc9849a3363ed9a25bb

Download Submit
C:\ProgramData\Package Cache\{a3824491-d5f4-4b67-8d72-ee8692f44d61}\state.rsm

Filesize
904B

MD5
1921c55270e60b17bacc73abbdbe7578

SHA1
0f85532d1b71fab69a7c9e94b947ef562e0e2eae

SHA256
1270b6163c79fe854a847f73ae0c9818de029cbfb8f9f39c155dd0e47c951789

SHA512
d5110e98703e710f65e686b5284eea98afd393a2132f9d7a20d290b1ff9d41c3558cc7068e6f86f78a29d455cf9453ca0350b28987b3fa56924a9140cc84f87d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2052d4cc-f4c5-4c61-b00b-6f50692abaf6.tmp

Filesize
6KB

MD5
067f55eb7981b0cbe91b04d71e9b3ab2

SHA1
93ee716bfd7f6e4c941ad2af0a0f5817d5cd57a3

SHA256
e60cf679b55c3054bca65407a3676383accb1a16dc30bee34d69538d10d8aa39

SHA512
ecb3d3dd04e5ba7103a71e2de3d1f18fa07b3499a58ea4117b45cb8abb8161919b4cb72df0f2b58f8a93b5de90ff324c6829ac444fa44fcef1dcef1e89e8e789

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
8eec960f7f7623757c6d044d74e0e186

SHA1
ffaa1e3592fd33ba8560d39a5e01cf4ab18af0c0

SHA256
454ae05ee6735af5e2cb0f18b1f20814b35e036c23aff70db370341754e13946

SHA512
9619f398a5b01f2a0d4a4f3b6743e24fc7cb0c5411ada498a114f193c3ffd4924064cb6f1e5715e6836cd08bd08dae094e72ca4a0cdc086593e7396caa9f9b70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
abacb898cd6c799028bac2e1a033a629

SHA1
940cfc2323905bba73bc6bb7488c32069a9ff402

SHA256
869f41e67c961f64da05bc45b488879d6f29279d95c9ca645e15f1c27b9feaa9

SHA512
1dc98b3d7f8cbb9d1fdbcb75d0b99bc35f6e41b74164eb301f9dd690e4eac01e56ea56875d73e08689928a3da49dc9d069f23c7f3b10af67d9ef132e6f41dcb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1b84d3676887140aa3c1a421dfdd6cfe

SHA1
74b07cf424ef62211014bed2c914f1a3978dea28

SHA256
e90eab5524d9b21a79515a3fd1e0092800e0cfe22507a3a6c97550f011bdbea0

SHA512
8b44c58a5a9805498973835fc15aa6ebb9eeaa3f8233ba76b0fc5e5419a388df4d497c9f2ef3617da53cc53302ffa55ef564f92a90bf9d6a049fe64c5e81dbe7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
9e4b629ae72776a6140f08536ddccb8d

SHA1
9d400c8513ddfe5509ebcb1d5abaf6870bd05d84

SHA256
9ebf3a98cb9cfc1d1e79e62293566e3ee6a12f6f1b32d62d1df8cf8d2d3b2a1e

SHA512
c1c398a99511ee147665dbadf64c19f9674f99776e5b8787d95cbdd81bc0df7a7ea98cacc4eb0c38c56ee759f1f7d39f7f67fb220169caf2be73914c515270d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ff643c75db4ba8dab985c1942e63b863

SHA1
81c94b124dfbb8f378c7dd98d773dfaa110fc333

SHA256
990dadb6b35cc7bb6c2af8035b721ad9016b11ccc967af24df9e712ec7509644

SHA512
5c13a983a42e9b1ee6319c419746b72da8fc48c358313a97efdd90e9e16052f32af051b2d20f6a1efcbb990643c076b3dfe9f65d7f1b3df5296d7ab984b974fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
703B

MD5
7ce1a1dfa3900a44c382de957ddf680d

SHA1
64b3c2c81b6f5fcdfaa8c5d0691fd386b14d8b4f

SHA256
253f66b0e4985dfff6be1e65c1605665e011576ca650c1e5f208b72c75297944

SHA512
fcc1405368f9b615b90b076d7df4cbcd12909fa6481868760a3146f98b521a913eb58d19dfcd896eda5377ca251d4b16f0c60b429b65f7fb7f06f1f3a2ee1e31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe59552b.TMP

Filesize
535B

MD5
bcf716dd8e52b67008d35e44a97d1eae

SHA1
6547e6b87bee6910aa1ac702091025e535190175

SHA256
a0f55720c703125ddfc3328787fc932489782bdb060538f2c2980c5941f45026

SHA512
e01d842e9d5562bbc586dbabdede96689d19b0f6c77fe91baea7fd4d49f9b869ec534d01dc7dc8cb617fecf50c546458344ffa966d60efb11d001c04507d55f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d81b9c5a0fe733c07aef622646bacdb0

SHA1
fa59933e7b33f737f827adb40718fefdcf064775

SHA256
0a19e1fd14ede9fe924f0a0e2d7a26d82d416c391336cbb5d3f57a3babf9b684

SHA512
37fff85074a6cd2f3ea41d9064e1d47d64fc1c5ad2f5a43ff7ee4e929ce44e0a9bcc708b348159dd688e2aa99c0e827c665ef0327c87e8ed222ccc2961aff04e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1cfb0a74788a081379bf46ae3041b751

SHA1
bb9296f2997c7d955e11b5ced0879aae65f58c45

SHA256
afeb156df417b52d30e7fb2c35a09c3a829bf7da93a878d13f82bb0b09a948c0

SHA512
ed2c11352336f934bf98e82ce426eba9f59b7945b4542213a1860d9d3dd43fc9055a89323a2f57eeaaec1b3c1e364b602b426ddb2017edc8a268ecd8091dbaff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
d310890fcf140857a2b8273bdf84935b

SHA1
c56a9d89732c4aea8861255c422c5b69e9379a1b

SHA256
80c43f0ec909d14ac7c5353ff5a72df70daeb133ed38e88ffd0b5b07e34e7fbe

SHA512
fce88d77ea9224a6e09baa6bb435cd8fba493389212d9256e6dbfe9479e058013d6886d08bc1babc8d54cd7c8f4f77573211afc6ae3e46f7644446885c3f55a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7609b942022347f49db36b096f3a1706

SHA1
511ea48c2314d18ed68c1184fc5b7625a7dda3ea

SHA256
c574d6d38f2632d344b5328eb4d25010b6bef4c9041213091c07bce3a8d4f19e

SHA512
2c6278a6a242fbbd3a1a4cf8e461185ee8c65f7e3743608a4c26fed1c2a10c8997b77b9fe47eefbf05adb96c32391764520eb22587ce4f78a61ddcacac562500

Download Submit
C:\Users\Admin\AppData\Local\Temp\dd_dd_AspNetCoreSharedFramework___20240914182940_000_AspNetCoreSharedFramework_x64.log

Filesize
2KB

MD5
1676bb6d09b10f5c401ef1a5f534a3c2

SHA1
382abe8a7afa6b993ab4c39ac013c7fda5548eb7

SHA256
f38745df6812b8cecb1b0a1b6086e8838c3d6e3e458b5125cf8df2dce6497d96

SHA512
17bf6a638bd850c7f81f9cd4eee4bd5325c3d68ce4cacf629422373684defb639f37976658ad14c718a71667dd72a927b69bdeac6430f28b215aea1304b98d9d

Download Submit
C:\Users\Admin\AppData\Local\Temp\dd_dd_AspNetCoreSharedFramework___20240914183007_000_AspNetCoreSharedFramework_x64.log

Filesize
2KB

MD5
dd4f25cba2926433f99fb1d5b95a1bc3

SHA1
da34cdb27267235722012856bcac08f9ec9318f9

SHA256
0437d786bbcb055b546520f6b9457901182a07199c39c8cae2a862134a76523b

SHA512
0ba2897be50269bce324ae1b795bdeb1065cb07ec7f07ff21cf2a8e521980139d1c61cb527e1b7d65ed758fa164f4c367f0a65bb77f27545e5135728ac3fca9c

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 346228.crdownload

Filesize
10.0MB

MD5
6f56897e53c987931f68ed1f1ca04063

SHA1
4e8a77a431cd04b3b5e3eced67c6224ef418e8c0

SHA256
0f00e3e8630d8261b1962da3bb4df136e85f17fe15412d863be8f61256ad9e63

SHA512
908a9e973b052ebf564f2b693bc004ef968079ff2a325cce2912d6d20dd8a74411ba6e6e98ae6e9cb0098eb1cd3878c7cbece8af62ba0e1926c89ba5408799aa

Download Submit
C:\Windows\Installer\MSICEE4.tmp

Filesize
244KB

MD5
60e8c139e673b9eb49dc83718278bc88

SHA1
00a3a9cd6d3a9f52628ea09c2e645fe56ee7cd56

SHA256
b181b6b4d69a53143a97a306919ba1adbc0b036a48b6d1d41ae7a01e8ef286cb

SHA512
ac7cb86dbf3b86f00da7b8a246a6c7ef65a6f1c8705ea07f9b90e494b6239fb9626b55ee872a9b7f16575a60c82e767af228b8f018d4d7b9f783efaccca2b103

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1028\thm.wxl

Filesize
3KB

MD5
423ee6bafeb6f2d8d3c9c9bd12db179b

SHA1
2632f8cf31f92b54d61796d21d864d908eeacd66

SHA256
b427a8ff060943fc26ebc09a3652d3b233f590d883bdd997365dc7fd42d9c445

SHA512
8401590518ba9024287b6dcf1b854a73ba25257df53b4ee7af921bd46316a056a17fbeecd51243cbf206b7910a0f371a5dbfc464e6873cf4c3153b2f348a3c8b

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1029\thm.wxl

Filesize
4KB

MD5
bab2cea64ba8779d11c881bb497e254f

SHA1
3b1d283f65a0e967e922c07eea0ea6cb8a4748f4

SHA256
7a3d1c7744f8e07a4f456f7a2eb99630568c617f4655092e93e62ea966f82228

SHA512
7297a91c58b700098fca9336c2bacab8562e104291c703d2443c9b3c471461dd31cd63a02cc4f77bee12d960ad434df82b19b3dc02bd43543e270c3c6b72df1f

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1031\thm.wxl

Filesize
4KB

MD5
640087421d90d8cb132af3563ad719df

SHA1
cc9f8a508095d286f2e7bbc3eb0ca540cb534f55

SHA256
4717a1d19f622d64b446b9995c5388e40bfc3b0e87c6b96f12a9f3562f5af279

SHA512
d93ba86e74168764e0e3ebaac52808de837ee278666ebb28f3654eacb12fcb0483790efdc54554eb04e13025e46724ca7af76c4d5416cee70ac44e013b3a365d

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1036\thm.wxl

Filesize
4KB

MD5
d7d57c17e633e99888caabadba8093ab

SHA1
56f2b7ffe2f7e8e3b8a777ccf63ed2336cb70c6a

SHA256
607f94e200ed131cc0439d326491a2ecf1fd8a2eb4f1664e12fa7ee6dc914c94

SHA512
fc045ddb83c337fede425af71dbfdc2ba1bfd2f7701b9a346d494f943142151ce9e20a7ff7dd8099b681676bcc05d2efaa75da9e83eadc0b246cfa76087590c7

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1040\thm.wxl

Filesize
4KB

MD5
f5faf70e5413b4cd0d4be910ebfa47de

SHA1
05c88ef94f04f1a286656a3ee17d03f86a4cd100

SHA256
381d318ae2ad67d7de09f4b3aa215f329c034fd38c5c79e3fd4862d45a4a7017

SHA512
f67f33e9fe70634d7ef4b87fccfe923daae395bea987be1601fa8237361125494fced87563972036fc25eb361300d393e5973244edfbc4a23d8387d27710f339

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1041\thm.wxl

Filesize
4KB

MD5
d486c0e0ad40377b9a6916cfff882f8f

SHA1
77849357f6e10868066a91a719a8f6a40e7d11d8

SHA256
4c6d4734f77698fa5050dd93648d25b73853a834919b75d5c677b48b60cb77d3

SHA512
f9cd15514d367b483d6d7dd8ffd3149265f7fb8fb4c3731e32d7f818344ff80942b649e4ed596cab6fba876b1d7502a7e33d438d7ef963cc4153f6e1da1570b9

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1042\thm.wxl

Filesize
4KB

MD5
259931057cfe2e32a198475b4f8db842

SHA1
27db10128a7b4148ea8741fe06117f7d9d2986d8

SHA256
410efd075793743a04f6f6cdf117695f19bf01b90dfe0a177ef225d8cf4f4dbf

SHA512
0bc75051ed574b5d59acd063e4cdb20b0eee315fd2cee06107716523cb385028438cf663a4bed5249f680678b22554d72fe4326d832465de6b14b576c57acaa6

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1045\thm.wxl

Filesize
4KB

MD5
0c0e8c50a3f3e79726195b98415d1986

SHA1
9cf95d666537b54289bfde14a2f274fa1a11d500

SHA256
84907089b4fa08f40d9ef3211e2e57aa07ff1f457edb18897029a344d22b240b

SHA512
c0b8447b08d7924147a6b78ed924d0ecfcd496a1a4a06dfa14b5003a051ce93ceac61c3156d578e502283498fd0aba4b14539f0a477e75cb11a42c9d17187565

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1046\thm.wxl

Filesize
4KB

MD5
e4f17bb3d78d13e459c4864ca5275eac

SHA1
8bfd2cc65d353cd7125de8cc51fe37c3b14d1a3b

SHA256
9b8cbdd928cbabccd9d42f6035c81a360c48de82af7e3525233c64c5404f8a31

SHA512
b542d04f29172be145b1bbb519163bdaabcdd0c0b8fc008dd3543603728c4ccbf1b9eb243cffaf5e52d6e6bb1ef51d417d9049a77fff3ccdd8e38272ab95df2d

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1049\thm.wxl

Filesize
5KB

MD5
cec2038268cad61a6f27a8076136d5c2

SHA1
36b2900110b19f9275938348386beed561977520

SHA256
95006cf95b2ff12dfab0fc2ac0e54fcc2e1fa1ae94c52cc6ca053673c054cb2a

SHA512
6aa2100f84f141543bef13df4c27d12202054547a76f3a2cb50126d6b3ff0b295795a51708db52166d6c690bbbfae318662ef6a282e1a8fa1573f5d14beb1b15

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\1055\thm.wxl

Filesize
4KB

MD5
6c1974779511da896104e4bf8d7dd7de

SHA1
bb0ac39a5117510e4cfad8ae2c6f75b9ea188645

SHA256
d2b30ba686a0826d49ffec6ec2c5461d0e5d2550424ac4085b8b0e61d58177dc

SHA512
dcdea8440cfd3682d39dafa59b3036072b6012af3a3297193457826a320083c1bb1e27f2a90c0043fc117f62e8220515b1712b155d039668ee27b6f3327ac381

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\2052\thm.wxl

Filesize
3KB

MD5
746ba4c9816d9e151d4814d606bb5b17

SHA1
80663cc15b7c98947859686a9e1a3dfe40dfd0b2

SHA256
b50a6de4c1834889dc39bd3944d6539fcf13fdb544769de738a36bb4838c1e1f

SHA512
f8baf4199d980992c2b2c516c8dfdef6438bbb53c83d040826a4e255633ae0a8c56023a0486236aaca5855fcef4eb7c456c12ed11874715cfa553c77333358f7

Download Submit
C:\Windows\Temp\{4331C2E6-A88C-4EEB-9AC1-2E9CB0B6529F}\.ba\3082\thm.wxl

Filesize
4KB

MD5
0dc3cef13a278c1ce556b6c2c4185d57

SHA1
e0aa2a6ff4cfac136d7a1c99dfb7a289e780368f

SHA256
8e1357b280a7829aa527d93d388f924bd7052d1e04b7ac92421042d7d980b2aa

SHA512
d62ec091c1653ed34055b765140fb365678ea0d186b29f8d6999563fbabe3c7f12042ac373a9b4bd53cf797490a2c781182ba89512e7747b5452fffbc97f17c1

Download Submit
C:\Windows\Temp\{5E00CE24-6EDD-4BDC-B673-220D191F5A05}\.ba\BootstrapperApplicationData.xml

Filesize
6KB

MD5
b9170877fdb4af404a4da64c7f573708

SHA1
93f8c2b74546938fa482b051aef05981c778d93e

SHA256
a8c1f1f9558ce314d48c8b02dda11cb8419d5189b37880a45ee677fed9e322bc

SHA512
4818dd22fbb4ada2fd560ac22f6afbc9d2e5523a9a3088f6e15cdd5b860d59f6a353db5e920cb464ebe65e132f18d570e2cbeaae961919e463084116bd32da09

Download Submit
C:\Windows\Temp\{5E00CE24-6EDD-4BDC-B673-220D191F5A05}\.ba\thm.xml

Filesize
7KB

MD5
639502209707f9ec5dbe56e51c4ac1c4

SHA1
d7be327f8b7efbcec60f878e50dbfef3a961efcd

SHA256
89ae88a04a9248201a1058f1ff4caa6d6e6e36a72edfd254dc1330873a037980

SHA512
089e8093b5dbf64bb9344dde1b7d082889e6eb9edcf9f98ab90e6220701fc9ea24dfbba5c96c8f3a5f7711167b18631224b694b9afbab37884ab33464801ab9b

Download Submit
C:\Windows\Temp\{634DB973-C42B-41DC-916D-2872F66A321D}\.cr\aspnetcore-runtime-8.0.8-win-x64.exe

Filesize
616KB

MD5
27bb02f0a2317deaec8d506618989834

SHA1
f9c4598a3c5d46f651796f21d7068d9ce23cef4a

SHA256
2289eeee46f1abfa20851025e8e2ea393a966f50a52144f149ed5a9b6a465925

SHA512
5f48810dbb6a13b1c3fc6224695e6aaea02373e0d2e28772397dddc4afb9f8ffb47581cde72c3bb4cea9d22b2ee46771c6cad7b64f9317c625b31b88c882a413

Download Submit
C:\Windows\Temp\{64B9AE54-B72C-44B9-9ED9-B00420761F21}\AspNetCoreSharedFramework_x64

Filesize
9.8MB

MD5
c668ad6e1288f40627c8c26bf75e8e92

SHA1
d1fe649f4d80d1d66ec9e90e3d3788e280085e1a

SHA256
30b7632ecc76861150f1a7657315a42a27779c48502012c44ee9e618f2a18dcc

SHA512
443d607261f8a15e362b2ef51fd92e2c89b345857c4898aa6694aaa88324ed9b5d287fd290c2b0119d390db8075bd30258b47994c6b869999c6a9c9a4a202213

Download Submit
C:\Windows\Temp\{ABA974D4-255B-4C6C-A67C-F7C163A42D41}\.ba\logo.png

Filesize
12KB

MD5
84709eb22e4b05688067699ca9b0d322

SHA1
7c3381d8b6a58087cda95577cc2d25e7aa2c21d8

SHA256
c8e23a42e04fbd73f5f66f3b9f2ba34a777bc4769c413a0f78335a4e757baad5

SHA512
04de70b7317ee1cbde73ac0fe84bd70983cf0ff7e769e5f9626c69eaa6e3e9724c95b14ccb7a5478ee639848d3f8c98e4dec599cc5e33ad71de638da589ba319

Download Submit
C:\Windows\Temp\{ABA974D4-255B-4C6C-A67C-F7C163A42D41}\.ba\wixstdba.dll

Filesize
215KB

MD5
f68f43f809840328f4e993a54b0d5e62

SHA1
01da48ce6c81df4835b4c2eca7e1d447be893d39

SHA256
e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e

SHA512
a7a799ecf1784fb5e8cd7191bf78b510ff5b07db07363388d7b32ed21f4fddc09e34d1160113395f728c0f4e57d13768a0350dbdb207d9224337d2153dc791e1

Download Submit
C:\Windows\Temp\{F0F1DD40-DEA1-4AD6-B759-B689E2823345}\.ba\thm.wxl

Filesize
4KB

MD5
d4226d322e0a676476db291ab59c0cd1

SHA1
572f5e80c1b56aadfb15e227d96fb4b6fea47ce9

SHA256
65507ddc6f2ab2a93b684684ba1d69fdf0b024296367cdce5dad31d5e49813d0

SHA512
b69e606d117785412744c131e9559c597d5efbb0b38b97f1369b11f39efd5330c7918369d6825a8f2a4a1490cd4a076981f0008621fbc28c08278481e6d74810

Download Submit