xorist | 9be38b91de4c97f277b1cf221e8a3e8b95141e617e82cfdd5341faba775dcfba

Resubmissions

13-10-2024 18:32

241013-w6x7wa1epa 10

12-10-2024 16:11

241012-tnbvtayfpb 10

Analysis

max time kernel
142s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
12-10-2024 16:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Size

16KB
MD5

3aecd251d296551ec8827008796244e5
SHA1

2b225bcd484f71b14e3c4792cb0c5965b26a830a
SHA256

9be38b91de4c97f277b1cf221e8a3e8b95141e617e82cfdd5341faba775dcfba
SHA512

ac2a5f2ab6173145e02c07e52a423a674ca9a1da309c3027e52dcd1c0302186f0d1d124c6d89302f011bd945dbd1f92b0e44a9bb7d2ccf081f7a58859f9fc975
SSDEEP

384:cprr1gkDCgSLY19Iigbbjt7l7l7lljjpeyLLs4LD/B:SrVDC7YsizU

Score

10^/10

xorist adware discovery persistence privilege_escalation ransomware spyware stealer upx

Malware Config

Signatures

Detected Xorist Ransomware 7 IoCs

resource	yara_rule
behavioral1/memory/1580-7835-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/1580-7836-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/1580-11872-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/1580-16708-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/1580-16832-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/1580-16836-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/1580-16840-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist

Xorist Ransomware
Xorist is a ransomware first seen in 2020.
ransomware xorist
Renames multiple (6073) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 8 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 5 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msoxmled.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msoxmled.exe\DisableExceptionChainValidation = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msohtmed.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msohtmed.exe\DisableExceptionChainValidation = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	msiexec.exe

Manipulates Digital Signatures 2 IoCs

Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\wintrust.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\gX3l02hO2C0d6Y9.exe"	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Installs/modifies Browser Helper Object 2 TTPs 3 IoCs

BHOs are DLL modules which act as plugins for Internet Explorer.

stealer adware

Modify Registry

T1112

Browser Extensions

T1176

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\NoExplorer = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\ = "URLRedirectionBHO"	msiexec.exe

Drops autorun.inf file 1 TTPs 2 IoCs

Malware can abuse Windows Autorun to spread further via attached volumes.

Replication Through Removable Media

T1091

description	ioc	Process
File opened for modification	C:\Windows\BitLockerDiscoveryVolumeContents\autorun.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-s..ccessagent-binaries_31bf3856ad364e35_6.1.7600.16385_none_de06b4fbd5b45f78\autorun.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\pautoenr.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Dism\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00l.inf_amd64_neutral_f1fa021d2221e2c7\Amd64\EP0LIMC0.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\LogFiles\SQM\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sdiageng.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\xml\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_execution_policies.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\adp94xx.inf_amd64_neutral_4928c8870f6a1577\adp94xx.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnrc302.inf_amd64_ja-jp_64ee91a0bf7b132c\Amd64\RPCSRES7.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\IME\imekr8\imkrudt.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\migration\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\BWContextHandler.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsuprv.inf_amd64_neutral_31d10a1a73b4feaa\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00z.inf_amd64_neutral_27f402ce616c3ebc\Amd64\CNBLH4.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_preference_variables.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\winsta.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\atiilhag.inf_amd64_neutral_0a660e899f5038a2\atiumd6a.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\divacx64.inf_amd64_neutral_fa0f82f024789743\ditrace.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\NlsLexicons0013.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\cxfalpal_ibv64.inf_amd64_neutral_4c42ac5f00413365\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00l.inf_amd64_neutral_f1fa021d2221e2c7\Amd64\EP0LVRA6.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx00b.inf_amd64_neutral_89b555703683b583\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnlx00y.inf_amd64_neutral_977318f2317f5ddd\prnlx00y.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnok002.inf_amd64_neutral_616c1e9b7df7d5a9\prnok002.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\IME\IMESC5\ImSCCore.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\KBDA1.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\iscsi.inf_amd64_neutral_2ef24e9270d8b2a9\iscsilog.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00c.inf_amd64_neutral_510c36849918ce92\Amd64\CNBP_323.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00x.inf_amd64_neutral_eb0842aa932d01ee\Amd64\CNBDR3_5.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\rrinstaller.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_eventlogs.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\about_Core_Commands.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\tsusbhubfilter.inf_amd64_neutral_d0615d6fd67bad03\tsusbhubfilter.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\wvmbus.inf_amd64_neutral_fca91999602b0343\vmbusres.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\_Default\ProfessionalN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_Throw.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_regular_expressions.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\HomePremiumN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmiodat.inf_amd64_neutral_839e9ee1a8736613\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky007.inf_amd64_neutral_e637699044f367f3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wvmbusvideo.inf_amd64_neutral_8f9a8242d3699a44\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drmv2clt.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\ProfessionalE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_format.ps1xml.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\about_Automatic_Variables.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\averfx2swtv_x64.inf_amd64_neutral_24a71cdaabc7f783\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\avmx64c.inf_amd64_neutral_8ebb15bf548db022\avmx64c.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHI06A.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WinSCard.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\divacx64.inf_amd64_neutral_fa0f82f024789743\disrvpp.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00x.inf_amd64_neutral_eb0842aa932d01ee\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx00d.inf_amd64_neutral_ce7a0b4e23e432ad\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\msvcr120.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\NetworkList\Icons\StockIcons\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_script_blocks.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wmpmde.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnbr006.inf_amd64_neutral_f156853def526447\prnbr006.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnlx00w.inf_amd64_neutral_d4c93bb2fbf75723\prnlx00w.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\IME\IMETC10\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\HomeBasicE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\signdrv.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\default.help.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

UPX packed file 8 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1580-0-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/1580-7835-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/1580-7836-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/1580-11872-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/1580-16708-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/1580-16832-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/1580-16836-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/1580-16840-0x0000000000400000-0x0000000000410000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Windows Media Player\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\es-ES\js\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01332U.BMP	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR44F.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\de-DE\js\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\cryptocme2.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\CLNTWRAP.HTM	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left_over.gif	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\co.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Premium.gif	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\RSSFeeds.html	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Data.Services.Client.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341742.JPG	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR4F.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\license.html	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_up.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Linq.Resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Media Player\wmplayer.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\PREVIEW.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7EN.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClient.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\visualization\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\Windows Mail\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21332_.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_docked.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\TAB_OFF.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\NPSWF32.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\ONINTL.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\COMPASS.INF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\INDUST.INF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21329_.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\Java\jre7\lib\zi\Atlantic\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\eo.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099147.JPG	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImages.jpg	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_up.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\fr.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\orbd.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14755_.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR2F.GIF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\Chess\ChessMCE.lnk	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02810J.JPG	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\fr\System.IO.Log.Resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\BLUECALM.INF	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\winsxs\amd64_prnge001.inf.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_f7032ee8652ba164\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\wow64_microsoft-windows-storprop_31bf3856ad364e35_6.1.7600.16385_none_8c9c50707efb7dff\Storprop.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-main.resources_31bf3856ad364e35_6.1.7600.16385_it-it_3a2551880d3fb310\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..pt-regedittools-adm_31bf3856ad364e35_6.1.7600.16385_none_c67266ca1f0e89f8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\ir_begin.wav	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Savanna\Windows Default.wav	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..nt-client.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_8bddfe09846c6f83\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.1.7601.17514_none_b6a4c6f53be9aced\msoe.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-d..roperties.resources_31bf3856ad364e35_6.1.7600.16385_es-es_3ee4f3449050bc68\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-ie-ratings.resources_31bf3856ad364e35_8.0.7600.16385_ja-jp_a31e12271f624cf8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\15edb548fa79197e66dc803215bd391b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Afternoon\Windows Default.wav	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-kernel32.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_3b92880831ee8845\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft.windows.h..iverclass.resources_31bf3856ad364e35_6.1.7600.16385_it-it_630092c341d86cae\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_netevbda.inf_31bf3856ad364e35_6.1.7600.16385_none_960cfc4d7aab525d\netevbda.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-g..licy-base.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_efdb39f58f7fc483\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-smartcardksp_31bf3856ad364e35_6.1.7601.17514_none_b7f7d8e8e19ade8a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-wlangpclient.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_799c27afb3b80041\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\inf\hcw72b64.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-gadgets-rssfeedsgadget_31bf3856ad364e35_6.1.7600.16385_none_07861dacd36a18f4\rssLogo.gif	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_prnca00a.inf_31bf3856ad364e35_6.1.7600.16385_none_dcb5d501c451bacd\Amd64\CNBP_327.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_networking-mpssvc-svc.resources_31bf3856ad364e35_6.1.7601.17514_de-de_e07f4824fddc38e6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\inf\mdmc26a.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_ph3xibc12.inf_31bf3856ad364e35_6.1.7600.16385_none_64d7af985f2a04e4\Ph3xIBC12.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_4efe5dee1b501fb9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Calligraphy\Windows Battery Low.wav	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-i..tional-codepage-720_31bf3856ad364e35_6.1.7600.16385_none_2ae4fd74b4dd3f24\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-dhcpds_31bf3856ad364e35_6.1.7601.17514_none_1c77be6ebf25c03d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-m..odeupdate-servicing_31bf3856ad364e35_6.1.7600.16385_none_ff7cf696bfb54620\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..ity-vault.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_7d5504b4e13c8ab5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.1.7600.16385_none_af3522070c88b45c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_ja_b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\70823ac0d6e6631a11d443bf38987cc9\System.Web.Extensions.ni.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_it-it_31f2bea73f8ae0c2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-where.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_87c6b1493bf1f18d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-wmpnssui.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_c7ae34ca97276b98\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-capisp-dll_31bf3856ad364e35_6.1.7600.16385_none_d1de960a9e99a4f2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-d..elsupport.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_f8e0291224aaed35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-w..cture-bsp.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_703a658bb8025c25\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\ipdmctrl\11.0.0.0__71e9bce111e9429c\IPDMCTRL.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\inf\ASP.NET_4.0.30319\001F\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-w..extension.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_edad9550b038d804\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_dd18b2a07d49aa11\Microsoft.GroupPolicy.AdmTmplEditor.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-l..erver-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_778fe3b1c781b4ad\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.1.7601.17514_none_fc00d9a9415b5f6e\NlsModels0011.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-p..topeercollab-client_31bf3856ad364e35_6.1.7600.16385_none_9d0ba9d0ec2082dd\p2pcollab.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_faxcn002.inf.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_046e7515912e39e5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-gadgets-weather_31bf3856ad364e35_6.1.7600.16385_none_a9cf548d21b86a2f\41.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-dot3gpclient_31bf3856ad364e35_6.1.7600.16385_none_7a2a3d711dcb2bb3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-e..ntication.resources_31bf3856ad364e35_6.1.7600.16385_it-it_dfea768da6223dbc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-icm-adm.resources_31bf3856ad364e35_6.1.7600.16385_it-it_875ca00c0019e557\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_wcf-m_svc_mod_svc_perf_vrg_31bf3856ad364e35_6.1.7600.16385_none_d87385efa531f369\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.1.7600.16385_none_2ad2380d0ae7577e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_es-es_febbc040503fb19f\System.IdentityModel.Resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-g..cy-gptext.resources_31bf3856ad364e35_6.1.7600.16385_es-es_c230275fe2c8af31\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-t..s-utildll.resources_31bf3856ad364e35_6.1.7600.16385_es-es_40847d851b6960ba\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_devicepairingproxy.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_7f4f041e22424650\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Te3736ca4#\9312b7591cfb35c1c4b3e6d497c0489e\Microsoft.Transactions.Bridge.Dtc.ni.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.Contract.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-findstr.resources_31bf3856ad364e35_6.1.7600.16385_es-es_7bd524c818def71b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.7601.17514_none_19cfd51cbe8ba697\iecompat.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Modifies Internet Explorer settings 1 TTPs 26 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\Default Visible = "Yes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\MenuText = "OneNote Lin&ked Notes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\HotIcon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBTTN~1.DLL,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\CLSID = "{1FBA04EE-3024-11d2-8F1F-0000F87ABD16}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\AppName = "IEContentService.exe"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\HotIcon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBttnIE.dll,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\AppPath = "C:\\Program Files (x86)\\Microsoft Office\\Office14\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\AppPath = "C:\\Program Files (x86)\\Microsoft Office\\Office14\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ButtonText = "OneNote Lin&ked Notes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\Icon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBTTN~1.DLL,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ButtonText = "Send to OneNote"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\MenuText = "Se&nd to OneNote"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\CLSID = "{1FBA04EE-3024-11d2-8F1F-0000F87ABD16}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ClsidExtension = "{48E73304-E1D6-4330-914C-F5F514E3486C}"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\AppName = "onenote.exe"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\Policy = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ToolTip = "OneNote Linked Notes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\Default Visible = "Yes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ToolTip = "Send to OneNote"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ClsidExtension = "{FFFDC614-B694-4AE6-AB38-5D6374584B52}"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\Policy = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\Icon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBttnIE.dll,103"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}	msiexec.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-20\Software\Microsoft\OfficeSoftwareProtectionPlatform\Policies\59a52881-a989-479d-af46-f275c6370663	MsiExec.exe
Key created	\REGISTRY\USER\S-1-5-20\Software\Microsoft\OfficeSoftwareProtectionPlatform\Policies\PayloadOverride	MsiExec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2F	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-20\SOFTWARE\Microsoft\OfficeSoftwareProtectionPlatform\Policies\PayloadOverride\	MsiExec.exe
Key created	\REGISTRY\USER\S-1-5-20\SOFTWARE\Microsoft\OfficeSoftwareProtectionPlatform\Policies	MsiExec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D66DC78C-4F61-447F-942B-3FB6980118CF}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Office14.Authz	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F5BF6FE9-913F-4117-94C7-5040C7E3A6C1}\VersionIndependentProgID\ = "VisShe.IconHandlerShellExt"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.pptx\ShellEx\PropertyHandler\ = "{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.pptm\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}\ = "{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OneNote.IEAddin\CurVer	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{807573E5-5146-11D5-A672-00B0D022E945}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{2D95B6CF-1BC3-4FA8-B52F-474CED0DDD10}\1.0\0\win32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{34CEAC8D-CBC0-4f77-B7B1-8A60CB6DA0F7}\ = "Open Document Format ODT Persistent Handler"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.vsd\PersistentHandler\ = "{FAEA5B46-761B-400E-B53E-E805A97A543E}"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8DE0A0A1-96D0-4B04-8EC6-2DBF9BD888DC}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.QuickViewShellExt.1\CLSID\ = "{8DE0A0A1-96D0-4B04-8EC6-2DBF9BD888DC}"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.IconHandlerShellExt\CLSID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneIndex.ShellFolder\CurVer\ = "OneIndex.ShellFolder.1"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{34CEAC8D-CBC0-4f77-B7B1-8A60CB6DA0F7}\PersistentAddinsRegistered\{89BCB740-6119-101A-BCB7-00DD010655AF}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\XEV.GenericApp	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\odccube.1\HTML Handler	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{E87ECCF7-3CBA-45CF-B58E-1A6630D39199}\Programmable	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneNote.IEAddin\ = "Send to OneNote from Internet Explorer button"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8075731E-5146-11D5-A672-00B0D022E945}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\URLRedirection.URLRedirectionBHO\ = "Office Document Cache Handler"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{096CD5DE-0786-11D1-95FA-0080C78EE3BB}\TypeLib	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OneNote.NoteLinkContentService	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{EA3E6E3C-5130-49c1-8EDE-F889CD0F4429}\1.0\0\win32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Search.OneIndexHandler\ = "Microsoft OneNote Windows Desktop Search Protocol Handler"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5554F805-47C0-489D-AAE6-2D11C6E4A3ED}\ = "OneNote NoteLinkStoreService Class"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{B9164592-D558-4EE7-8B41-F1C9F66D683A}\1.0	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{95F35795-64B1-495D-9DE7-390EECC31EC0}\ProgID	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{D9160E22-BDF3-4D8A-818C-D99D10EC7BEF}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.vsx\PersistentHandler\ = "{FAEA5B46-761B-400E-B53E-E805A97A543E}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.CInfoTipShellExt.1\CLSID\ = "{D66DC78C-4F61-447F-942B-3FB6980118CF}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.CInfoTipShellExt\CurVer\ = "VisShe.CInfoTipShellExt.1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\URLRedirection.URLRedirectionBHO\CurVer\ = "URLRedirection.URLRedirectionBHO.1"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{200C17D6-6854-439D-AFFA-0BB35D09B8F0}\TypeLib	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{F3685D71-1FC6-4CBD-B244-E60D8C89990B}\1.0\HELPDIR\ = "C:\\Program Files (x86)\\Microsoft Office\\Office14\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.QuickViewShellExt\CurVer\ = "VisShe.QuickViewShellExt.1"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{B9164592-D558-4EE7-8B41-F1C9F66D683A}\1.0\0\win32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{95F35795-64B1-495D-9DE7-390EECC31EC0}\Programmable\	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{F90DFE0C-CBDF-41FF-8598-EDD8F222A2C8}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{096CD5DE-0786-11D1-95FA-0080C78EE3BB}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Sharepoint.OpenXMLDocuments\ = "SharepointOpenXMLDocuments"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B9164592-D558-4EE7-8B41-F1C9F66D683A}\1.0\FLAGS\ = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.potx\ShellEx\PropertyHandler\ = "{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\XEV.FailSafeApp	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{977D8304-FAAA-4331-81DB-B67FC2134A38}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{312DABAA-7ED9-4C95-BEA2-F3F5D3EA126D}\TypeLib\Version = "1.0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TaskLaunch.TaskLauncher\CurVer\ = "TaskLaunch.TaskLauncher.1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneNote.NoteAnchor\CLSID\ = "{73507951-A405-4E95-A197-B5FE6C6C001D}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{95F35795-64B1-495D-9DE7-390EECC31EC0}\VersionIndependentProgID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{73507951-A405-4E95-A197-B5FE6C6C001D}\InprocServer32\ = "C:\\Program Files\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneNote.IEAddin.12\CLSID\ = "{48E73304-E1D6-4330-914C-F5F514E3486C}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7CCA70DB-DE7A-4FB7-9B2B-52E2335A3B5A}\DefaultIcon\ = ",0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.CVisioFileFilter\CurVer	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\URLRedirection.URLRedirectionBHO	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\odcnew.1\HTML Handler\shell\edit\command	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Office14.Authz.1\ = "Microsoft Office 14 Authorization Control"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{A249E9F6-5B28-4ED1-8AF0-C9B9C5195486}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneNote.NoteAnchor.14\ = "OneNote NoteAnchor Class"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OneNote.NoteLinkMeta.14	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4039B326-9F27-4B4A-B460-47A0C6A39D5C}\InprocServer32\ = "C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F09D237B-3FD1-4900-BEF2-3471CA68142D}\InprocServer32	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.dotx\ShellEx\PropertyHandler	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\XEV.OriginalApp	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B43AE14C-5F52-44EE-87DC-B13C98904BAA}\ = "INoteAnchor"	msiexec.exe

C:\Users\Admin\AppData\Local\Temp\3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3aecd251d296551ec8827008796244e5_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops startup file
- Adds Run key to start application
- Drops autorun.inf file
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:1580

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Event Triggered Execution: Image File Execution Options Injection
- Installs/modifies Browser Helper Object
- Modifies Internet Explorer settings
- Modifies data under HKEY_USERS
- Modifies registry class
PID:2940
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 2EF152530343A0ADAD4BF40E29A8158E
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1804
- C:\Windows\system32\MsiExec.exe
  C:\Windows\system32\MsiExec.exe -Embedding DB15F3424CB73134B6127181153C2717
  2⤵
  PID:1264
- C:\Windows\system32\MsiExec.exe
  C:\Windows\system32\MsiExec.exe -Embedding 5B16B18C2905DF86F6DCD727F87419CC M Global\MSI0000
  2⤵
  - Modifies data under HKEY_USERS
  PID:2824
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 86E7207D32C90E1C99817D241B933F03 M Global\MSI0000
  2⤵
  - System Location Discovery: System Language Discovery
  PID:380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

T1091

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Browser Extensions

T1176

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Replication Through Removable Media

T1091

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
181B

MD5
7b7d352a7eaf1faa87385a24b34edf71

SHA1
d2d03c8c818f4abc41d4e25b9f98c4cd32e297f9

SHA256
b83e129ead7114bab33f15ddc0aa4939a588f120867304a95063adb8ae62ec88

SHA512
a1383cd45991a0e73fee095172ed3f024f1d98c1e0ce517da5aab2cbc376924741efe6df9909e2469336b1dd6a04c9f4e83d7f3b7f196c016cbf14fc6f0c7753

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF

Filesize
341B

MD5
8f46fb31e3547fe4f0588fc4dcb1dae5

SHA1
562a69024a6c51cc3d9d1ea2497a1449a622080e

SHA256
0ea37c322172c182a6ada6f7913e28f74d8878ad16fa2ac2df47a93c0e3d24ff

SHA512
7f8fc06ea7121e23246f9524b6afb0e61cae7c59c7720305fdfcd5470382234187fc9b402906eecfd580439af53029bd62de98c412425dbee95698d5f9631b32

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF

Filesize
222B

MD5
7df973567afc201dd03f4de9a8c5f96f

SHA1
a6a178212409cd94edc4f8e4487a76703ab34ff7

SHA256
5928a9063f66062a37c10fc2957780bb5f25325d93571c61930e847a16cedfcc

SHA512
3afb91e9a965b1529389a1099a5852c429aec0275d26869d2b9b19d519a42880c4e131737e35f70d7068b2c0c5a1f74a88a1a523ba87a9d5bf839f5ae8dd73bc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF

Filesize
24KB

MD5
e61c55cd6d8c3221eaf7a362029af92d

SHA1
3e175d99a39c014ba2191f15c6c9cc8fbbe28863

SHA256
e5c91fd45ea667922650c06d9d4b134675180db0578b3d33bb10d973355ee9a3

SHA512
fec7bb88bbd9f844fd6305c2624925a37f4ff15e937e6f9b91169ebb6d3a9ea757c5c920e1a0d1f2fa490d49757e156f24180c8d0799db647c9a4d91624c6317

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF

Filesize
185B

MD5
3033d8b998849dfdf0ea3a15b37ed66c

SHA1
5edb419b5154711074bfa0abbb5e12e9919a7f5f

SHA256
8b604ebbcb27d8937c01d1e336e61d2f01f15f183113854ed8c7b2953a2c8617

SHA512
02a5e772ad171707883d52eed4ba20aac788a58473b4b190453aced2f89e6df7c1fd393779fb7b0601780cf5bf255362209611e04320c59d46ca1b770591b0cf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF

Filesize
496B

MD5
930137e112a1185ccb080c7757f8de98

SHA1
db7dd2c41d55cff31558a1c15adcc1140971dd6a

SHA256
0d90fe130d2571560122607bc5cf94c11ba8c1922dc52006b1783f639619dc9c

SHA512
75ec8f14c1246e8d6539bd56783bf4f39b5340d9ed9f9aad506d6b8d0d77888642a51f2b4fe2e67cde621a9547e8afa73da7df4b0143c457389b9ddf8ece430b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF

Filesize
1KB

MD5
adad3fc841b8a7926a1e72e2526782a3

SHA1
7836f50164a729e2f7f2e17a36357fb65f9804b4

SHA256
d13a28c93ab50b94383749aae66f5c2fbb2853c6023b2390ec607fd4260ad3e1

SHA512
5cf678d82adf6df3d45e259c7368d549c6b85f09814051d0d80ea10f4082027f641882489c97d1a04d9e040b9d7b867b12a9ff644f85c1dfdeb4a562c905d9de

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
341B

MD5
d4fefa6f876a8fbf52b4ef8becb3daca

SHA1
3d0dc8379085895b952d6f3eed81b5c790333914

SHA256
8168a5ac36b5c6a8e187612f08e16da6d87e88870eb415b888579ca603bb67b9

SHA512
7f4ced4baf6ac7d76ae3069281a7917d3dd892f31c90379944219bb7298c7964de7fe840d7654645ef62fdc04442f6aaff990ae1960130ecaac1b050376fe678

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
222B

MD5
c844068388fdb804a1aac2a1d71bd216

SHA1
709658fe19303017769f4010c51c12df55f82e49

SHA256
2a95255fc5a2954f25c0647e3ededa26cf8f3d3a97e9995bab14dc2432e4179a

SHA512
b90992ab1f5749f46a4248365e7b459278bd8f15ea05fe9b38cc5b3f27d0a7aa3ae2df6532158d6ff39c52deac6955d600289827111eaf540b6bc7169436fbdf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
27b431e56a6f8235d57f23803bbb85ae

SHA1
961748e597502d9c7bc943347ec49ab2459b97cc

SHA256
0be7eecd32dd381cf8e31519997322ff2634845115130eddf74007c9887c485f

SHA512
32eaa2956e4f24c5929d605009da7241e06b15f5009e8399260e241ff92460306f59d3cfad1720bc2146de233b9a993fbb73bb3d0848fecebf4cad62fa3881c0

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
b1ee37667e4fde6e528167516e1d6fd7

SHA1
fa9c22a88391c71a8adf3ece258e32e504e3a0f2

SHA256
594c9deffabff2e82831ffdc5e37afcdc5a3b0f4b393a8c8696fc18b8176f29e

SHA512
d1b0c81a87b46c03d7894f94d0c582afb0326ddf744462a050900067162ed898586eb943865bed96dbea140a27ef2a51124db1d5250a047ba699161bf2177496

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
9f4ec1f622af3efca2fa00c996a55516

SHA1
3f34aceae8f8d4d04d0726054a80d49c17a62f99

SHA256
90450ecb1f749010a54773c7af5497178c7466511b29e2f8ccc642b3ed85eabf

SHA512
6e0cf01e1bd0874f82c02c0f1851beda80bab318b03aa821aef74e4533f418418660e0bec58f7a2ff5925480b54dfe135569d7a6230acc4c2978f74de03b9653

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
3326d9186b0d95a84f4b0b144390389e

SHA1
934e409ce262aecb4a649113ca969c7e5ad75146

SHA256
4e942e6c02bd7511b51a27dc94562df0ee8b4528e41253f9494317078b8917cc

SHA512
e615ba42abc83f82ef2dae8a2de3de86c55a1d65628c75bb3a9bfc6dac13830d733569fb8840399b2549ad5e4f472154c18af627be3b3a89fbe446a592ce3cbe

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
106B

MD5
dceebe5eec593d1ead9b33645f65f97d

SHA1
20edb19786a371caa4021afc0bd8760dbc049e42

SHA256
f09c3e68be5f750e1fd01f62ea5128c7721839d44449d3ae1d0770671c306efe

SHA512
07b380fdacf77084888a60132361f153c92a57d07aec302d6482acc71d496c10cfd46a6e7a12a4a4a4e1d98f7519871581873f89beb6d37f9ce5314913d30118

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
5da9f91eec978c441293a94b049806ce

SHA1
99a8c333e06dff2f92c01be3feb57900530df8e0

SHA256
86612e4d0e8e184da7e272f992853d2a6bb9b46f0728749c69154c02d4174ee8

SHA512
8dfa139f9e657455c61f7038e8a029049729bf17faed0a495e5f39bea4d2b33d8b8212c01e73ed3d95541859a0d8189cde0b72452cec1fce20a35a9e95fb5273

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
88dd89091684403deb91077009a8e416

SHA1
5e4fdee98ea3afb803462b4e42609c6f88806c38

SHA256
c372f71a355971edef9b887c008917ab2ef3e35bf075071e032811e4e83cfc29

SHA512
c1aa1da739a2c4149cf89aa8505d1e41e1ee8cda754c0a5787f8a5f846d7d6745e57e18a60a8b2f8c6450ff043f120cd8f52ae2f2b9c48dc8559d2fd12697dcf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
57d58d6678c635e109eee98adf9e5a60

SHA1
9a9ef21adf39e3be03fd595c4cef0ccb8a773c42

SHA256
17c7c65b4321f28c272dffd286f9a1c8b48e205202677693f87ca286109d09a3

SHA512
25bea7f7560034a86ebe816c9e6c2891b1b66e7b20fdfd26a8db5e241c6f26fe74a84033ee6369e57605d8c92b53a3d23208f065a34ccd950742c500fbbb6661

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
7ea48c01d5bf78e1072edaf81ecf8fbe

SHA1
e459bfc5061a64268f4d91ea5d321e8754f144e7

SHA256
505a210f1e446f2a290b8dc07eca145557d0ab9eca82ee43cec849d1a5046855

SHA512
fbb0fa0bc3ac725482d963a835eac19e28d85e92ecfebfe4e0a3211c9aeb10c19e39c9a916b501832132c484af9e4eb2b428bc77b7efc591d2b9ea0941a55bbe

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
0123a85999a813ee262e9454ce8f9e8f

SHA1
6b47d87df9ac92e30c5799065d6df02f34dabd7c

SHA256
2bb4a6d1c8ef59cf6f2696f99fdaf856f11bb6dff2cbdec30862780179ea5d94

SHA512
1ec3a80ba233d3bf4d9aeb1da70e9347f61b64a03ea36e82b71a844ac6a4e2813c1096a74a86fe21d7b67a8774c0b1b8297c5dbacfe41bf90fbe1c8113a48688

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
7579eea510a29a95aef2b62be0a9f8ac

SHA1
a9c0fedb227acca1b6d3091aa4dbf899a0148918

SHA256
0066bb3b64e50f7034d0e75126dbdec5b3977da99afdcfc848e9161f7bb2f57c

SHA512
81887b83f00f2747938e01d5b4f80813ac28adf94a684f4c8e0893f02438f8da5bdb21b043e63dcf52cec5da65cf11c2b7e8936e265878e200c7da91cbc5eb90

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
8441122654fc890ec7dd8e19312eae1b

SHA1
00f629e87d163c7bc057014cc40d95640fe1aaee

SHA256
3a7f6b677b225c374a40dc3e5f8f6007ce716cc0790818c057263e03152081b7

SHA512
a22ca5080d219a8a65ce1802f0e93e5dbb2489795ae70df399b8083d9d8140a5af484479fd818ecc67e19fa691a4bc506f0a5ca5d0cb7b1ea4b95acd878b8216

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
cf199ecafe6757c41c563bd93914383e

SHA1
bdb5b484c8c65d43454829eab008aa0994071fb1

SHA256
09a00dff4bdb9f191473227e9f06d942002a1229b9281f597a0cf3ce1bfea26b

SHA512
7bd52985f439ceb83113828ecf0fa49b2d25a327ee6cc57d746c40a8492b8df47226df436e9f376409a13c4868c92d9b1f43112268267a9f78bf51584ef240ae

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
6KB

MD5
b47afb0e359ee3173b488fa56d82609b

SHA1
b6ba8f7324a3c82011f3d3a7e0920f214681ab5b

SHA256
500ceb8a8097d4e29cee0613b8f3b8ffc0ecb55a8ce77700ce9efc2a2cc43b88

SHA512
4032269cecf542fc7f012aad117918e7a5f9c9701d8e9c854c38ea714d91c4b85c12f4a2737b9c8f3446e39513973b7a7feea3b47f451f3d92d3594267d76e02

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF

Filesize
255B

MD5
5aeea4495d47e953949e604b52dbf29a

SHA1
c00f40df6e58e49bd245140c5a0deaaca7231d2b

SHA256
1aa6c5211311ccaf6445833ef0e062acbaa11a2d6b3f5c2768161a97c276c6dc

SHA512
23dee52c58655b16f96ad22dd388f7b05c2018132792690e308a9ee3a1fe9806d2641c5dea74e3d38e69bf192a11dbe917c6015455143bb19952a8695620c299

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
323B

MD5
2348a78b456651a7e13ad37e0633618c

SHA1
f4c3e83960a1a291414494b508924f2299636fb2

SHA256
2e113e4493d06cc4d85605127936566c7a0b21d0a9c4c1dbde196bfc8838998a

SHA512
df9f0724513a285e59c2ba593026cf2df1512eb6968bcbfdb1f511b0e17460c048f08706eb0b485f4115085e9bdebbd6a7a1255f65d85852e677a9f301259d01

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF

Filesize
367B

MD5
39d3191ff12099a6cb2c304fadc81ffa

SHA1
38dc0c66d4ee85ba96bb81366fad728318dffc5b

SHA256
8aa8a17ae5d0ded02a5cbc32999ce9b1e92ee8c1e132de92e095312a644491d0

SHA512
276968ffefc038a52e58ba18b40e6aa054285e29feda796238e15750d730ebc05b32961e144c7a16aca194f03d75b55894ea8797a22a756eb52dd4d9d6f3e119

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF

Filesize
148B

MD5
7ad09f6e7623bfc3a43a2519d9bf04cd

SHA1
cd147dcdcc2b02f2afe4e3ccb8a6ba402a9340e4

SHA256
73d3d0a97bf0af8a7d6a3ff1da726f0ac5f52878d9839303492cddf9443706fc

SHA512
dcc289a450da35ac1787230a8dc9cc35dbb6480cdd3dadc381f404c8d191b1a166b2b48f546a4d3a93454c817fcde9f8e2553d7f803f8cbace4e136c9beee43f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF

Filesize
440B

MD5
ca956c8fe41ef4301dc815f265c40037

SHA1
77d766192683065407ba8542e017673b5f3584b4

SHA256
d2813f3dd52b643cae579557ac653602b69b7ff0364d1e3e99aae3ed26a824bb

SHA512
b824f31a78e9bc86be74228d5a341ce51c20da10f5a834a2f3c095cc0633602b18b6ede3028346dec32064fdc38bad7b87a32fd723169809e8613e54a86a72de

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF

Filesize
462B

MD5
e85f878e13a8b0977d08d9c8e13f761c

SHA1
fd97221b7043dcb5f718039cfa09b78d83f72224

SHA256
eb8e592228eac6891a7c6feea39a560af2f90b7ada1dddcd07f8bd1dd31b97e5

SHA512
a3197a7e4a15d2b8b53e55651b6769fe1d0db3871e2b7d2e23dd62c91485fc95837f9ef2f984bb530bd6f673873127cb1c68e690461905d5273a97beaba6a743

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF

Filesize
267B

MD5
877c326e883f4907b136a124e2d18d45

SHA1
b48a49dcbfa02d3e29ca8a67cc92d9c6ccd5e033

SHA256
11f086484f8de0353999926f4ecacf76cfab8cc4ba51f834e1e80cfb0b2f85ea

SHA512
02046dbba2782571f47b036111c46f8b93dfa63b751f5da13bd6e382c49872f7c24ac703573b0be44c560cdfdde6ca634296f408d6e5c64ae662e6fdcbc027a2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF

Filesize
2KB

MD5
e56efcada70bc93e3e6da2a5bb50821a

SHA1
9878490f867a42b4f51a37d741e51db08b6eb94c

SHA256
b8d373d5228fe766fe6f08ca72982f9099acb39634b26e66506ebebb0f0fce56

SHA512
e855b1f23b948bee7411144c821c231b8cf39fa0301ad620c60893be5a14239b9713b6fd28ae74d07630de0aad044d370c1be77e56d325a818f10a589ab54cd6

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
233B

MD5
9d4974d775344c4464ac23f826c29d97

SHA1
5a80973463ebbd95228ba8e067ee3ff2d8f2362c

SHA256
887d6bf1aadcd79fa64e0c338fa6d5de674e94c4531d24b775b1d491744873f9

SHA512
bf2b5ef8a0f8f02e68737c215565bb9041c351db2ade70d2c7f7d9ecfefceee26871da6fa76f28f4449419fa9b14b8f4983af38390b6aae22c80b884814a17aa

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF

Filesize
364B

MD5
e96b14e0df7ab349675a9bc40c117b76

SHA1
72a9e1fe6d849d3db52a3d8a8339d84a33d857bc

SHA256
68f411c88460f9747424af7ebf6dec71a39f5041af45d7df67bd18266ec53de6

SHA512
6c690aec23bee2b4361cb1cd7cfed1118548c5a7d95f58a887f3222d8c7e44b3c573f59fcf5526cf2c51e1a0f5de49df029d73328111ad1ce289788e2b9b3bb3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF

Filesize
364B

MD5
8a6a7861b8a4e209d6e48c7b0669ad9d

SHA1
745feac09d69956d6d5eb290c3c3b412437177b3

SHA256
e87969510e2f509ec6019f97737d71b85b21b07ae5471eb69fe5e03192d17637

SHA512
c8ae8d2b8dd5f1a42009c71a5254c0dfb1107508568c0332ecc9f1018358034f3175206a8aecf1cd559b2fe82f1c1caf34b3c251fc1d51dc99d4035647b4bb38

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
997e71164a84aaf1d7555132d37b4a3c

SHA1
78e964d394a763faca4e5187f763dafb50c8db81

SHA256
d1a46ac1df74f9bef768a5fa7fe5b6b55c17da5df8e17939adbb7a185576e875

SHA512
4fa76bf1d3939d463c587f66512a06a7c61bef8a842c7d7def82128e9c229e36995c84509eea28c412feecadb7e51f6f857ce45b50a8967b19a0d7cf2819be7d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF

Filesize
428B

MD5
328ff028f1f7d6d724185cd2973da7ea

SHA1
29aef8a2f496d9a4c08af48d9165ee356e92fef0

SHA256
eea66b60d2a497ea88ba9f473f4df1d556c44449d31eeb620802e8466c66265e

SHA512
b79b19e898c3271892f271345f6bd874eec6cb741891654ff66fd167456b81d7f48d05eed886caf35add04d02387f247aa1e550b990d2d590eec39a61979b5da

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
815B

MD5
8a0e2b65d5547c39eff9e91f7516f612

SHA1
4cf4cb8ed8f6890b5a2140848b3969b3140cc051

SHA256
5e60c34084f0f31695066df24c6d194abfbd99ddef9bde9cd3759cf377e267a4

SHA512
83663b6efbd62fe7844e4be3e8576708e3771ebbe3ca7dfc80517a307bbe85a7f011e3a7682dd9362fc4e73672b29186094021cff72e86e3d696dd12af7c3edb

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF

Filesize
870B

MD5
82ac0ad03d3420bb23f1fee55c5e954b

SHA1
c3ec59ab8aed2228485e14579b1ef0112c60f947

SHA256
846f4a0ab38632fe5a232b5615ece54cad14b346213dcf5d8d63334f4c8201f4

SHA512
dfe105e62f3af26498434a0a21472edd5d9d8ffb86b0f460fbe1dce862681ca94480d0b2dd59b5045877de11b2705fa92c41df635d6aa0bd98fca0e58776352c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
325a2c0b33ae7062e25034d69523495b

SHA1
7f1c719574c42adef1e9bcf92b9b20b8864e43b2

SHA256
bb848bd73dac1500fd6c3e01c8df36be1cf724734feac012322120b4c90c4c74

SHA512
eec6e831f850b3cdc36fd41518d44c0d4dcd69cd43d3f0412ceadbed931ad0ddf00e5fbdf3df57ac91eac1d8ce1547d03086b6e872b29383cabc51407a0bb6f9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
e717e4ae7adbbde686179103d3a03278

SHA1
8f285c32feca59557ec335fcdfaa4ad7a7a7fd47

SHA256
f35a71feef8574b44002a8c1d728606818d245ad2bbcf1da5c0410d251dda931

SHA512
ca29134e8d95556684b3f3aeeb94883f6f5b51449b62d767b96fba75a30e3f7c83538841fa85048c4c46b768bf261bd4058ef60e95de7cf14fc0350011f667fc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
14196938dfd3556cba80fe10de7baa5a

SHA1
d04d8bac05369d372b17205b975e1edc4a4687b7

SHA256
2614b0327c6a4109009878eaf1b52fafe43581d7b8c9c8e61b4f289a5a7cbde8

SHA512
a8cec331d41a6b0230168ac92d9aa9acf9363a00c8b1b062e7ceae040ba344033ddeddbac54206041768e5b0e60dedec753aac6693b0435b420ed28d820ca68c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
890B

MD5
97b626baf6bfd07ce306df2391c5194a

SHA1
aa5c85cddeeb1a8e0097245a83f9579a4e1d126b

SHA256
3d0e3102396f8d754c40823f091b79bb269cede6e738327eb2cd71a58a0f873f

SHA512
f6b12b8142d4e5a74caf9e0a4ee24d97c219c1a4b101106d0a481605a7995781e490d0457aed9f789ad5caf5ed136c5d93125ef435609d54b496b92b95b5d247

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
852B

MD5
b3566730de16b792e782e99b581e0a8b

SHA1
e40cc201ac6a68d353cfdf0871de8ac357baba21

SHA256
767be7955a6805c2081ccb29ddb6762717a0d28688b6303f693158063a55ee86

SHA512
bb67f6b4b9cec1a26d49165091c9aaf4f96c0b5070b12c72ed0a9ea3129461d1e24d51c4087ef325411a1b7a084509ae928f7ab945fc3e2e282bcd5a622ef1d7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
860B

MD5
aa9b538e2e44b3875330193cc2aae558

SHA1
f7f56f0dc69afc3ace567bf81eed2a731d1012f8

SHA256
ddab89f8fbc3ee1494cf9aa18920649c4e3ed733c23cebe48b1351fd02e21697

SHA512
b8492765ce8ffee24ef88d3f66a691de9c01d53d6635612a38c00c61a14ae490932def7d9a332df00a0424ae23b161c8eb10ee11e7a18a8b341ac3788cd3bf90

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF

Filesize
580B

MD5
e46cbde18be98c5052a72a46d56319e3

SHA1
a40f2ff574f563315afefe8b7a3a81acd606e429

SHA256
fc3764950c81cb467e2112ea3d2a98869e42b4abd33166b4e6f377786a4189b8

SHA512
105ce77ee5f13149a7b5a10dfd1ebf4a341e9e55095b23780aade461a308aeff8313f9fd0f3d63cc6e8e04d353efe55c2b326b5323f5bc8927a5bcd413f4ee98

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF

Filesize
899B

MD5
39f1c4fcdbe5ba0731c95e2b35833946

SHA1
c4d396274140ec9b18f77ef143d34055361e782f

SHA256
3352d265c485a4157910c11f79a270e9b386c95fb0c74b679b1e3fcbb640fdef

SHA512
aeb06d6473a485036611d00f74bfcd3c0b454858878269a5c916872398a7101897bb2b87e078d90e5b3ee4a100e57e91e91ffe1c2b70c202213393eac51e1ef9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF

Filesize
625B

MD5
005fe77f527bb6ecc64f129c8456a586

SHA1
c90665d2541e70c724893495c41cf1c7bc9c203d

SHA256
f4d256b869a57e3da2063cca66cda1fb5fb0f41c42e531abdade433282466438

SHA512
31599387cec9c07453253e285dd56efd05d8130b30d904f8e0b579b7988bd118fcc3ec9cdedbdddc8750c9c30d5875c5e738a377d685c40c5976dfac169b4647

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF

Filesize
873B

MD5
424d43a45779f50d01268e1c2cd55fd6

SHA1
b74a6db0b34c6b1c1d5c7e66cb55e2efd8b4edd6

SHA256
3f839cf75fea64b9256aea13c1e1cb21b7897c8a27ed7ecf5e5a2ca228eae53b

SHA512
a669f2426fa7fdf6f0f5e8c171babf9ab4d2fa55ba4ff6e0c38ce4e94142925255ff2c66f774d383a1522327e71dcf801e6e50752be426eccd9c3e28083fe2b4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
d2ee0edd2a613a3d36474745abd10304

SHA1
5f08fc17e39235378827fae8ef7f945537c61d04

SHA256
c48c5495b3a9b65d474de35029bc679e64878a210ffaddf369f39bf5ed515756

SHA512
69d47c8a4146d1c64cc4cc95f1d9e55e1820807cc7fe91512707fa900deb188158c4a7d5215cf6a51376b1d4338059c04ca63b002647ee1f2f45e48670dd9c63

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
5e593cfa8588b5eff96f74efba6e14b9

SHA1
0bdfe9f2269d69094d71c7f52581f83460c5d217

SHA256
65fb5e1b19f64eee8de44143aab49f0536da54b086fa3b46e5526639cb88373c

SHA512
03bb624ca7e267f51e7576568aefa0ce21be09b6f92150bef8d137354551ba3da3e7712d136ec32959ae916750cbc6f5ac282481bcc0aa05ca575e6825ae1e01

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF

Filesize
615B

MD5
e3af44aed98f10f8fea964e620da562b

SHA1
ffdcbd329378883d0d7242a60d890cebd90e9c6d

SHA256
e7f9752d8233577baa792e2f01e28ee41fab2b3693cd1fb6af1ad7ac077342f2

SHA512
2fcabc03766ddb2c946958493dd6927136c1b386d41a92bc6defdff7b439a0920eb7651370b4c88c2d53eca085dbb98c8c128f7d7064812393f2e64e4e5e2d53

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
848B

MD5
4463df6bf76b5785eba40300ca78a0c0

SHA1
b096091e5fabc1f64789478cd394a7f6f29771de

SHA256
b59daae3e882fabe5f0b9ffaf3bf1337552e3eea8088f626239f95a7ee83eed3

SHA512
c6d7ef31510434b953e70a0e5f30f286f1d59f5d020ce2159725aa0a9d56593b7d1775c4500a775aaed5e47cf64651ab977364a631ae548bd3b3ba96647b3cfd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
847B

MD5
a09f0112324b239b8d8f5ba403a6495d

SHA1
83650c52c509d3d42b5f6857e61439ae3e704d2c

SHA256
9262f2ef52f9d216594790f55c72da7a38050b3f9d22f02854e529c14291808f

SHA512
425d8f6c116bd0acea44d41d15ecb3e936e15392dd3ba453805e0da645fb6ac3f9b9b367eb3be21ba851cbacd2dde7e7b5d468c8dcd6ee3946198ea001425d49

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
869B

MD5
f0b35cf0b5191f84d411944e40becf69

SHA1
c44c2e3403e36b40f6242d7c7e5a1fdf86e43a41

SHA256
c91cecb1d2d7f9a5f9df58d12560608b56f0fdde3ff3c61814106eafa66c320d

SHA512
8bfe162af67cf71036150792da27a08b6e6288915e8c8263673637c5172d38a1f557e49bcc76ac0b065ea78300a735728ad6ac39fc89f32c9b04ea563ced5032

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
847B

MD5
ab9a8ad8bb1929d3b7733fd466bc5474

SHA1
ec0619766abc30ee22b1b98c7b312c5d16e1bdb4

SHA256
f1bb718cb7f82c0973daaad339b8dc5232e1672550d35034829de6be1066db57

SHA512
6fd4bf02fb408d5250f7003399a6a11ea0e5cbfbe80b6c8ea980438787395c9afd9cfdb33c7fdcc2baca6cc077fe06cc68fde9111267c1531508d6b5d33c58d9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
863B

MD5
102ee0fea3a1d84d7b23654e914a3eb0

SHA1
6a05eb677b1d0734138fd4523808703663696c4f

SHA256
644756468ae3f3e5a9ad72c70eb158dcbd0c282e919c6d3c2b14c9c7ea5de3a7

SHA512
1e144bcc0c36a640389eef0754c5c4ffd617cd87b822d7e8bf50601060ffe6193b5a3214d42cfd52b1587ea3d11ef84ba4013d0cc899ce4b4492547a3597fc03

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
861B

MD5
19b3eabd27294f0e694a930bff8fee0e

SHA1
8eaba34ac97ea2eb55f9aa048f6d006e2707c5c2

SHA256
a2289840c30b6bd45fd9071aca66963e6cf4e3551b4516f4482b48f847664161

SHA512
110a1f8b7c611c2491a1a50b8bae5df42826a66989878de73e97e46fb8cdb1abab2070652743e14f4ea35faa13929a6790a30fc9fb368f29592cfa9c86909bfc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
850B

MD5
1f73a546c26367ca0bb7088c468cfa40

SHA1
bc552d9c051d0dcd8543e47a251f139ed6ef1d5d

SHA256
2d079b0f9caad9fa996705ef78b45e9ead19685c28a7adbb30803053bc1fcfb8

SHA512
c6fb194b46b1eab82c133bd58ce0d5417912ca7d0688f5c2170faaf7d8db66b1f1deb8774d53ad681c1edcbfb6c6f8ac12e760f208e5dc19360c5eea29091dcb

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
883B

MD5
3ab640d27bd64bfac393077e5c2e0175

SHA1
c6700af2fe815087138cd7ec86bdd7dbe97275a4

SHA256
0c44fbe8ee39fb4567609dc55e22e8ade621465c54cfade212b5ac414efc892b

SHA512
88bfb09fbcf9583038b32b406db3883b2eb2ffacb43d2e72839b58ee4b07a822326a40632da4e712b0e86887fa5099e61eb9d8d735f466ffe1a6e26ca7a89d41

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll

Filesize
809KB

MD5
ef1752aaf0cf5c912e74145fe3bddfbb

SHA1
865a190c2741d98d4965317aeaccfff1413817fe

SHA256
3dd85d38b29686adae8a613f4ba1637e5b99316044ef3f3c501fd8123c11e67e

SHA512
f1a17315a37e7e97c12ba31d0c1044968530d3badf4c20e30529581dda142e2b8a0587ce061389328ab2ab7fab47fee325efa27859a4b7d0e89eee1506be0219

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
3797e72f022ec08e7f4a33e1e1d14962

SHA1
a46948a11e241102426a541cc8a5580097cab213

SHA256
61304a304d3fd32aa781eb96691240fc5a49ae05cf9ec6f2e78fec13fd812a2d

SHA512
5f75fdd63da242d3db8580dc7984959a7001da75e33eb7f67fcb24619cf6655390384c75754e5951910c9561e5aeff4dac7dafefdceaef6338ead5ea0b5284f7

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
d6efa40609018b404459c363659a08ac

SHA1
517dc1998588f0380eca649d08bc69dc7f2a8f84

SHA256
d5a7e9f6d9c0fb1aca210f1ed7709d7da41c28caceb07f193d0a50b203c52d11

SHA512
7446df5d414346a8728dd500aacc54206017e3d551b2649d19034a2212aafc8811e157953d5d93415a3b5a91ab47dee7ac18947e263b5d1773be36fc26e75283

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
a93eebc91928aa9c723d156bde59611c

SHA1
9216d300c242231b55808cdfb4021b4504f8d356

SHA256
feb8c43d3e742c8adf0a5edb1616ac2865fd51f26bdfe3a1bbca816bc7aaef2b

SHA512
354c5e803ea15adc29ce45ce76f573a4de2113b3078dcb673fa3c04821fe3a0883474ea1f3c2374286df3c417663a71f9bb2b9f2bc75f8af82350a8a4e3d93d0

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
154d9df04dc187083d2aa35493979a63

SHA1
58f8417981b3dbec3e3acfb6c66c3a1012125698

SHA256
97548f464bed41f7ce7da9a0f3773087a8ec83f6fc749af581f4b00342a73712

SHA512
7fde19b23d3785cfecc601f211412be1faccc8e2387886c40aed86af8becd366fb398634952d7d679a9ee0a0b92ce45fbffa135c503d0a6fc6c315bae491d000

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
372037bc45194847f8dacea3018a855f

SHA1
54eab109bad4d1c172e67bac987e75301ee74dbe

SHA256
e7e22ee956796067fce5bcd978d77a67abad124d4ccad43c1d14987e7dfa28fc

SHA512
123334f71efa9160a9ae4729ca7a1227b1b2e544cd7197965ce4f0ef045646e168408eefce40b98224bdaf27f82d62991b3d37abee819fe8cf36c98a4e168c32

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
596995238ee2e1e1c8aa43a4eff056a9

SHA1
9679f66d8eaae42d8aa646a01c639e5420283bee

SHA256
efd3c1dce309593eb3eb5d53a1d9e8914524202ab0786c7d725e6ea9a3e7c176

SHA512
363ce8181d14c8e2f9139328a6b12e7f4767849d0e0dc1f7a76586d1b5a26ffb7b133b302909b6e624486a1215269147a909bf33b6afe730fbad125271415235

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk

Filesize
1KB

MD5
6780b83c61fd37b2221896847ae01476

SHA1
10881f54586741ed68cf4ebfd4416cb2c1411998

SHA256
b06001e9dc53138b3708d6205bc43b688b12c200cb2f623ace651998d3f28267

SHA512
29c795d1ca6e70d0ac69aaad7f06e54199ffbea9da62627f95ffd566eabad166d6a7bf43175dbf21a804f2808b9f833a22f449f0f95bc028a8a15e72a5ff8407

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
fea5f4e018dcd46832d84530bbfebf88

SHA1
b877b6d3eeccecb16ee3701bc060d107cfc18a95

SHA256
2abe992f82005d31dba0b6acb701699591d37676de930def56c10db4d727f136

SHA512
d2e6debd96f9415136e20641e6c555c187acb80d5b0c9f8ae88bcb950df0d2c5360b4aa25b9c5056a043205ef5a70cdeb5927367ba76e58d92c36f647d7b83e9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
09c0150a966eb5780ba88908dcf05c9a

SHA1
d3f16c6103e67ee4ca8127969785f2807eaac0e7

SHA256
647dd6deb188bb1687e7753cd2d59d9d1a7c7dfbbc360238124218967b6663b2

SHA512
d091b87104697c16e3ddb796d3f630d701e0a3792eab0f8a48378a38aaee7ceccfa21908b104e7c2660cae005e26304715b997f3b0e3baa563afd173791c839c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
b26f5cfdfc5868e02a1aa60e56a797dd

SHA1
0fa3b12c2b7937e5d50977848aac42ad4690675e

SHA256
9ebad899a2d09e3d568a3cdd72bb406d9886f5cead19d861fa826f8006d4e900

SHA512
448ce77d138d1316e4931dcead2451a06076f6cf16e2e405c3c48070ed9815b7199d7ffd9f4e7eef08c0ae9a998f82b48702fbd5af1a998993f9e139329b7585

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
ce1cc010a7d11edf83334fb9be3cea0f

SHA1
3598413f3da7a0dd5db3e22e71a6d4f997530853

SHA256
c008fb53ec9bcccb6b85dd66b55796c11782d2b9bcb495b76a31b8c6b7b5afa8

SHA512
d46a409cbe527b4da421dba110c0741a61d44aa6e30e9c62b98308862fc05e668f1deec891772c3d585fa922031232be2f4dfc2a711f139c809a73302ab446ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
53aefc70b990c100cdc42747fdafa267

SHA1
6503b7302d76d3d91ccf22e335a91de9995f8de1

SHA256
ae914e4e409aa6713b575d5a6e0bc68211b88930f227367949fb69d56a965375

SHA512
8185594c459cf169c229e35dfabc234e130ff0344eb5dc4a261223240182a88a3708eb3a282f862a333545d234fa26d2b8008de0a13366f9cd9b5f722e9c3cbd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
dced33eb1546832abf1afc07ee0edbbf

SHA1
20c7c76ba557d10b04ff95a895cc46a717684edf

SHA256
6923601dbef594c3620d496d4fe87c6baba237b6dc120dab1484fec18e7875e4

SHA512
abc2c37f39e21a75b3adbdcb2203e3a725acf68e85bfc2451478051c3fe7de72190d586fc58597b51043150074fc779e8ecd620378365136ee0d11141f0a519e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
c0bf4c8ef969ba5dc302c80333d23a00

SHA1
093d91d0ed97a16da6628799be74dbae10dff547

SHA256
782e1475824a8b97047a9574d8bbcbd41ca0fb0f55a3f0a8f2ae2d717deeb095

SHA512
983875ff800e329fe618dd2a18c62c09a9b7f11548c7f2542deab26b486cbdedfd19b10acd721ad09e448024a7ae39746ee32281953b0f1f6682cff7a5cfb23d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
5f072d5a44d7a28ee69bfe62b8bccd5f

SHA1
d12ae22e7510b9b9c53a679d09825dacc3363a05

SHA256
87c90a5d721669f108cf6d9bf885b7568e006825b407b8624fcf9a0fe0f7d9a6

SHA512
e17a2c7cc73ce21291b755711ff9637beaca052ee5a3f98a00dbc7ff172071cb7f1fc7ea958e4d0e603c90aa609c771ef97f224bd6678f3069a5b616abd10849

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
04225f85f08993476255ea5e584e532a

SHA1
d7b1fc518a6949e5554faaf60bdb6c391851a7c3

SHA256
4cc5414b1d976aaf9975a9a6110f89fdd9be6afcf0f1e4016646ffdd82128244

SHA512
d874a295bc6228aba1a505488476eb26a67cc8a270ffa9e24feeca0c7c5a02f5e65ac7ca2d59dcfc62e6f499819a4496b2736a19dc3efacab9acdcbe6b1236a7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
47fe08f9da249e60dedc62a3210e2373

SHA1
af4b7a7106a057c13b2d09032613efa073713849

SHA256
1bdcc5c9230c6caa6caccebbec99799781bad1b02085eff30a4aa68645546566

SHA512
1a3e31ad4a346cb70a199291fc077debd4534fbd57c966abb9e41e005f70b30c1a7fea6222390a1111e6a9f9afbe6b57f05f004c45ac020e7a4814d61ecf8757

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
41ca268b51f892a122163d2cfdf58602

SHA1
6b216769ac4fa0eaf89082298afba84ce410d7cd

SHA256
e7621e3b7376e8705b7648d88f44c92776fe46274e0bb007758dcacc82596811

SHA512
741f51c08b5624c562fea757307ec175e0c3ed617d3392921cc77f9e57b9870b9bfa00d34444e8420b2adb60c22e0c25409c1c9fbc12194a877684dcfaed20d8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
86754a57724dfb3e4e1ca4d7f189c98c

SHA1
7f3b28a7cd24c5c16c5a85ed12595f7e34fed781

SHA256
92db3df798a0305dcaa5bcee7c0fa10b606015ed3eab8713d72f4b91f6d6250e

SHA512
7efbd2ce2f07dc5b1e7ffeee9fe43022876b3c81cca36ba5cc226ac8bdb2a0521d88f78fa5785fbe0ea96997eb10baeb6087c1a80cf7e6548a48ca5f541268d9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
f26899f476a9dcc01a76ed2d598a0662

SHA1
704d0aaa6dcce8aafc57ba2474b3c6b06d19c074

SHA256
759c36a246c1d534bd7cc27add067f8c8baa3f15a702bab9f8dff2da86056372

SHA512
32571b540c65fe4f814c9257800b5639583a82c271e844164643d0e160b6aa2eeaf819530f86cc58a6ad1a48417b5c302d1d55902fd21efe09147dd6a61bded1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
726e33f3c6649a0ec07e17837c102d88

SHA1
eee070e1b1fa48300fe8dbaa66af84b0f783e57d

SHA256
fecad4dc87e18602498c4654d69131cae767a565f69ef80a05d0ac753b7a3b17

SHA512
f595b6ab76c329874c70affb2f637d77ff985b19a9ade53af78e03ebd0b3386b0682b729f2f448e7788eee5b4c318a1555c0d0443e049806b80c26a02f4f667f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
7a66a19950910136995942283db64252

SHA1
928fbc790823b6828c31918d3c5b9495121f39e5

SHA256
573c341525779dae6ad7bfa6fb6f815026a240a30bd9b55da06a6a0be013a9f0

SHA512
01c06c60f8572da1027256bf5e26d2b1849358519b7dd07361c75814f505b25591c8fee7fbc28039099f4dd22c503169f74c5abb1a655c7954d1671cc457ba98

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
6d001d899b261908dba766050090f8af

SHA1
33f67f7c73d2574040a224ab2dcd199d5e5073a3

SHA256
8966955b7e1ead2b929b7565dc27b4f9961eaf4467ad87417d13975fcf58a69f

SHA512
9776cc55d9da86e233dd2e2f212b5d41a64633a8fc2e76e82bedef4420f25f492eab756e0fe77f594c8acc447b462de6a789f31cc8a916e50f0f5fd76c9e75c6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Accessibility.dll

Filesize
35KB

MD5
708088514b17c01340811d3997419ccc

SHA1
c77950beca05d7e709983cd712b8fa2c6f2dab16

SHA256
3bb1a73e51be3ecff80fd929eee95e5fae1a94a6a5a07d8f49356de9edd7f9f1

SHA512
d11ade94dbb61b9bd0f9f9657d0b768916c2f2a1b0dddaddc6651ddcd70d9d1fb39345b32eff3fae656eb776ec2efb6c7ccf7f7655c8245885fffa62513c4fa1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AspNetMMCExt.dll

Filesize
497KB

MD5
bea32a1858d06e2b20134f4d60e58aac

SHA1
9b526bca44e24d5ae0f7e0d7dba1fc0148b4476a

SHA256
a197ad6b1a7f3af324fd0c80cad56731ae1893d30ecd1859686678f7864b069d

SHA512
0371acf394211a57d27de43dd6766ab88595216398246282b5995713b724a9e312ae72ef0384dd69f40f07e10dfe2e8ef7550498027868dcbca14224376a3b22

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Activities.Build.dll

Filesize
52KB

MD5
986539893cebeebe48c71cd5294dac32

SHA1
59a5f78b814628c94029958113302411dcb7df7a

SHA256
38fb4e895ac7569b24911d7d349b9b694d70aec207ed2a61a68176d609d5ada4

SHA512
a49df77e022853588919e31cba65b59b91fb4f590ac21dd0193311582765056675e94c5d7c1f1026cbadd89be40c1fd9d62fd02478323d9da82eaa4d24d41a73

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Conversion.v4.0.dll

Filesize
83KB

MD5
058b0694dcc0e73fb97c38c231bc525b

SHA1
54fb5499e60d33f49fca531765d9125cfefd40df

SHA256
beb44f2ba0792d91e763c240bd9c3bbd8ff5bc1243c0cee055d2e88934760ac2

SHA512
9f051b99274d1666e915fa5edb37b61aa557760b69ab760cc90dee3ee592b3f3da01e2df485666f1cca1314971adddc412f3b560e182daa8f2a9eeb0b2ad123c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Engine.dll

Filesize
643KB

MD5
d4bd8e17c0c3713a5866aa69691108db

SHA1
40635b8ab25208afc0c08c92e296e15bec6ff302

SHA256
3d9175670c57dc49d433ad86babc248bde97266931a576791283ca22cd2d02ea

SHA512
5bff9bdcbff3656daa7d30816bba06aa1a961aa24c266d903ca07d90766807277feea13993a46e998cdd1a5a1ad8dfb33cd5ac080fe23faa43886296e9359e3b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Framework.dll

Filesize
97KB

MD5
5e92ad854911a2fdabd809e3e733329a

SHA1
475746f350c027e637b3ade2c1652323b79736e5

SHA256
c6fa5cd3774059d12495815e5d79d7d7bb3c9782a239069812e36b34dc1fd100

SHA512
61181b7fd654354f64beab7088bbca72613fc06dd79342fa97b965f14ff4670e355ee5fd7e3ab1cefdce783a04ee23ce7ac1b3e9a39dbc7a12711876cf5d6d3b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Tasks.v4.0.dll

Filesize
1.1MB

MD5
546a453bff309ce9ed1dab9fd3d7a536

SHA1
53294d14a7ed0c4eb93048cbbd717dc1507a1c78

SHA256
f944e42e762a31a14f92310a668ecaa6ec9b7ddc9377b895ff1398997f6d5750

SHA512
337b594e392909aa342a5947c8b039dcc147d8429adc63d6e180c32cd15b17df820d510b6f695e334ed2a79a0a0c74e24d1a686bfdb8ce6debcc85facb84fef1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Utilities.v4.0.dll

Filesize
263KB

MD5
f3b16b063f860df43bc2ebd3fb6c72ee

SHA1
37679427adebc3685870a5959dc5d2f17a64f18a

SHA256
ef09843379a42305d745a2ef9c2d480890d933cea7398463a2a01ec53c0a7d79

SHA512
1e8dfbb671876b121d996aa470ed838545d77aebd5e9e1d67622ce03c21605b1ca158b9b6284e2692c20bbe06da735fab8dd914e3680c3a9717c5bc94d98c6f2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.dll

Filesize
1.3MB

MD5
bd3854578cbe57b751e9352c44741b5e

SHA1
364f6a2916dadedd55fd673403d73f64e4011f6f

SHA256
4381e348880f98f8f8771c2449ae3917df3eca32a2ebf6351135df6b5b29c440

SHA512
1731160c75c269c5c650c01ff94b023c06035fe57a4d84fae35bd39a8247bbf60ab5f51f17830d539ed00459a4356cebe47d216d0b5e1079aee053b9773ebc2f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.CSharp.dll

Filesize
475KB

MD5
542321e301756850e68bce3d059a48cf

SHA1
bffeb75cb1f95b40c504cabfb2803d46d785ac74

SHA256
3235ead5c866300a4e4d5f8267872bf10fcd90cea015d42d61df46fba2d5ab64

SHA512
9cede7f4996fe2bddc4da8f098bc931a4cf9e70dd2f8b8b7a7c6fb9a4ff555ee8cb848c25097917795fe88b00d8db93b2e880f686824210d64194f8434540131

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Data.Entity.Build.Tasks.dll

Filesize
51KB

MD5
118f8822c9a76f5a5178086b37b4d9f8

SHA1
2399c0ec455883c1c03f2e6e0da3f4577bf8abf0

SHA256
537d004f24a2f9babdb2b1eb447b4992fc1cda0a50d7cf1c1ed7a69aee2237cd

SHA512
c51a89dae3be2260193ffb096067699c5eb7506417056edef439203f0cbe2693fec03d6acadd1771b84db482cfeaf209becf4aeedf1987238d80a959b8ff41ad

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Internal.Tasks.Dataflow.dll

Filesize
180KB

MD5
b198a516c9ecbb5d903373bfd9c1436b

SHA1
6172b54fc684def9de19b77fa32131d8bb8770ab

SHA256
fa09321a8996a455a9d4b75310ff5f69bec8af4b8420d355735610e2ad09aa32

SHA512
4f69227bbf417c467e891dbc0476c18aefff8ffaefbfddc221b90a7eef3ac1ed0f39161d6fd02964fedcb06171f63ff90cf84d3110e5e04a5928d825478300c6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.JScript.dll

Filesize
736KB

MD5
f87448242125e061791b585bedf589b8

SHA1
3844b06950c1269066f7baa3ba6fe01f8718b80c

SHA256
56a3d2de8319ee62e8352608336da489ac5acff43e412ca5dbf89ee64cea4c72

SHA512
ed9360278c9d7f17c56826c9da59ac98ce1a6a25bb062644f94d48d316cacb8bc24860be3746b25e6e5662070bee5e821cfbdd9fcf80bcf87ba1756eaa8d8527

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Transactions.Bridge.dll

Filesize
386KB

MD5
daab3021b9e5f9416db15079ad6c6ce2

SHA1
c930d41dfee732de24b26cf9152f57f01a158010

SHA256
49d1fcedeb59bb92186859c87698fc2221e217a55b8ea5b92f87b472e4010436

SHA512
738f6701922eba44e1a4da4001c603238665354bf006e6054e63d8c29e8e79017bac98b4f2d49921f609430429c1ccc00ca46c7dc80a01958e82ca9e1a9a71df

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.Data.dll

Filesize
114KB

MD5
ec1f93ec93ac4c689cd7388cc821d3ce

SHA1
1cf8df274a6ecb93933f77bde9abf447c2f6ee58

SHA256
82f2065ee70e4bcd5fa928b7d8892789912a49054e9c72400e4c859c2585dbbb

SHA512
3f59cb4cf407226b0fb69bcf40d35885baecd0ae38a80ef7aa3b7a93350f89dcde3743f940a81c6f4f430c330e9882f450069a6fed14a584ae16988cb6fa50d3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.dll

Filesize
486KB

MD5
65e4efd7e67b12a0ffac5eca4428ec50

SHA1
d5f3df73e3072da0f0f9ce9aa12b76b7b45824c6

SHA256
b53224299c879034f42dc670cedfa2ecd31c62da59cd693fc9e25fe4d15d58bb

SHA512
9b76a6b435780becea45d22b490efd065d4452772d66a29829970f632169ae9dd37244d8060ae81b54f8af3c621924097c7ce062160503537aa6323e765fcfb4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.dll

Filesize
625KB

MD5
bf94d1e4ce932593692d0522bb39f022

SHA1
8579ae7b5615e6e19981329ee7e67e1d1af1a58f

SHA256
bc5e3f9b8c15d453e5b66b0e49cfd8ecb18621c9dfba82d2d0c9e3b06a2b0405

SHA512
028899936d8a49501028b40180da5737d0c299df0d95745ee8191b8b47f96629e2251240676e67bfa4bea9a100e360196a0f7f056a5e27ab5cbeb788d876309e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.Dll

Filesize
29KB

MD5
eb625d65c7784ec1afa32368d756532c

SHA1
c36121c463172eaa686f53563f681cd8c1163f88

SHA256
8c972aa68100ee8df1215e1c49b6e42f2443ec03bff1de6a494f70a30f6530ad

SHA512
6cd5365747b0b0a2f817f2316008ff5c3daf7f9c53a20ef3c4071d2471b057379267e2febb82c84d54d6f282466bcfbf7931914730d7799068e2e8fec8a184ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.STLCLR.dll

Filesize
49KB

MD5
35c87c09b595057adfc06615f06938aa

SHA1
15dcc5a0db398a1813465bfd0854e48be0726352

SHA256
d1424db923a9f823c727488f94042f04bdff7e5a6ab570a3c19256988ef52d26

SHA512
abdceaaacddb760bf58d5b73539f431842a3488ef03826d5a787fed50d423dec728749914604cdab5f4056949c0b4e1d9a9d1c3bf891db8f6e84cc6e18232fc0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Win32.Primitives.dll

Filesize
28KB

MD5
c364b526e836c840406f59040d40a16e

SHA1
3037db3c6b4058452b50b72de1b909efae769efb

SHA256
767da62de5912917cebd83bcfba705ac2fdc4ae1cd16c35b6315dbf809633344

SHA512
af4846c5dd1efad2199d7aaf7d593b5c1ade0765d409d381d53e47b3c0d303a7f85cd295f663980160bdb1716d41efaf8183258ba074f44abaf58fbf052e9041

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Windows.ApplicationServer.Applications.dll

Filesize
137KB

MD5
8937c3232125b0f2819c9677bbe12f0b

SHA1
dcd35bc56b710f2719e1a5a85758ba620aa0687e

SHA256
9db3cc00312f5614624e9ff46af7ffce999a19753fe7c1033c2911bd2523660a

SHA512
f85e8696c638e594461d8c1116139afcb0f4668c8ab11bd22f58a3a534431b0e381459f5846e971c4689fa97fbc6f75423e6bf144df4ed6c9120cdd25027df92

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Workflow.Compiler.exe

Filesize
32KB

MD5
b85021bc1e473b17d0d98de097cbce2d

SHA1
16f5805f0d92146ddd23e63a56bd1dcbae469867

SHA256
4ac8de703173ef31a09d3c3196454923e92175c759ca98f9b592f9292a573be0

SHA512
23160971017027c064638de46dcecb794955bcaf981b0147ed14f1475918bce38c3ee245353425c2b5a487b33e986daefb75421fab885dae4d34ecb1e7afcee3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMDiagnostics.dll

Filesize
72KB

MD5
57edebf5b5a1b6e481cf9217fc1a0fec

SHA1
8e73d2942134fd23c30f5376d0fab2d0d53cbac2

SHA256
6630e3db5ebc0afa9638697a998357a16f5e928854611ed86dc0ce771b4e2ab3

SHA512
b2789a30347089196304191efea7080e8cf5a8181f69c5e87b3dcf4ad19746585f3444ca996e7ed2e47f84d1c4b1e44813bbd5ae523c138bdb07ef8a531a8b65

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Core.Presentation.dll

Filesize
698KB

MD5
363e489433339aa7999206279a9e9eec

SHA1
45686dda4abde6320046e8489af25f1c93980393

SHA256
b26cd69e65616b10b9dcfeedfe7177bd2b0aa66dbd4ce2cfbc3089ac0e004e70

SHA512
436f6a912a0a92ba73bce28bd04e2beb7f4720499e7bad423e9203dd04d621837faea0b5117ee1775971cb2442ca29ff10323b9cd87b03763d59d7505610fbab

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.DurableInstancing.dll

Filesize
138KB

MD5
dd41833d134d033e2bce530a9dc25d90

SHA1
53030b93ad44e113a21ce88b3568345f5e69b804

SHA256
f1443d153156c16bf1c6f99e5ab3d903837eef56681e89087e1bca454dd6f321

SHA512
eb56da8f4eb8520f7504a945473c21fc90eee4834262d95dcad946112f5e4129e4ba155708193e519997efcb7b852f37fdd5d42665b5c0449218f9bbb0313065

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Presentation.dll

Filesize
2.0MB

MD5
f6b0184f1b7bac04cae24cef92a634d6

SHA1
4b99d9f3ef6284879ff0406aa13baf188f58dfb6

SHA256
1f24963ce8a207f630d39352d1f151fd05dee5cacdbb5d8a4f45fe893f6338fe

SHA512
60cfe6ef80fc324d4fdd95e1ffff04e916724c4528a3f52f677e68b67b575b6ac61a35b9f6d2e8d58f399318bdc39f1870fc2f380d8f24d6c4f4ac7fb392791d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.dll

Filesize
1.5MB

MD5
27a031d9a16dad9f8b179a8d10e27ec5

SHA1
2a5252f73d3baed6ffda6be9454b89162d85d47d

SHA256
c1279334df65a236b8b2aa2cb50d981477c906098f9144208df2dc4d38d06eff

SHA512
bfac3c67df6ffd06ee16cf604c4d76919ab68938da0e63454bfe4b95f11d6ebffa37627af39b7ba6b36820a0b2efadb6c6f769efbefb580ff9f449f139a3701d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.Contract.dll

Filesize
51KB

MD5
bdcbca84e895f54660037458fe5591cb

SHA1
4adb78b397eb27bb5b53d6d9b41cb824f3448a5a

SHA256
bd31a379287dfdb7406432dd4b06f1abe0d0737c2b5a7e9b4993e89281e9bc9d

SHA512
b6f397f22bf92859bd027d03581194b92a104d7ce46f27727ac4ff894a88eeb1ac9611cbeb039ef5104d1a5dd7b4e388800725e9cd546969962299005f9de125

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll

Filesize
159KB

MD5
cebc103df8437cdf142c801d0600c231

SHA1
edeaac9cffe2eec934491d52b73115e5aa5eb4dc

SHA256
aeb4eac89a2e297195c919c94e798f124c38ae72672e0592d16d9963fd1d5b42

SHA512
b5cd074329934e2fd04bffeda438d5367492cfaaba8335b8e5d394f07498827b20643524e31d387a6ce38e081ff920bf52209c1710031deac70860806c2d2019

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AppContext.dll

Filesize
28KB

MD5
039b2f7f2e21069c1bcc0f0918e21e3c

SHA1
12ce9124a13ef3ab2d6e719d88c59dbaadaf2f75

SHA256
0edd5d3f016f97336ba731a9ac61b6f8a05aec72f055396fd8f48d2244575e3f

SHA512
d113130df6cd45bc0f4437adde6aeecac7590cfbcfec41e378536ddb827718f769f7697fcdaa296f2f6e45d6bcdb01aecd94e8ef529ba038f8df6bff8664b706

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Concurrent.dll

Filesize
28KB

MD5
d6c41564945032c4f28e6303d5243a09

SHA1
d90c381eff1b23a7eb690480d20bbaf4004e9a17

SHA256
2bd63da8ce21ea3a70d4cbf339e15c728cea0ee2e2811d34e62b403023611439

SHA512
d722889776f120f06b27d5b2debab01002cd32997d573069dbbb2c0d36857f5f86b571e050158dfec41055c61da39f41abce256d234742269c02c71c8f7cef64

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.NonGeneric.dll

Filesize
28KB

MD5
1ad3831068eddd969e6659a782a7a5ac

SHA1
66c4bf58336ec2f96bfc974262fdbec2050f1f44

SHA256
461f7b5e0ddf6a1966c936b0a1ea0ebcefc57ed44c3bf10edfccb4b3f617048e

SHA512
873bcf0cac401eeea3b81579413db55cedea06048b54cba385254592473b1d6129684da3bf0da4b9d1f0803ffc0107d17139531411b4dbeefa84c857c8cc092c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Specialized.dll

Filesize
28KB

MD5
092dd66d54b00a323dee8c1cf191d4d4

SHA1
730ceb0e47e5877045097ca7ae8dab8edf498b69

SHA256
9e1c1d2105216b7d32384a579e7ca663c7b7cbf95a33a49c3aca80944c9f652b

SHA512
1740aefe2b304d953073b29102fbf57ef24f1be168922126975c971ca4c4ebc39b64584a956aefe89c2350e2cefa7d35ac9e97f6f31dcb26dde58adc2c6ce78b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.dll

Filesize
29KB

MD5
5158a3865831337c01ad29602da00266

SHA1
04438489ec21c154cde6f35ee0f0a9965036aa3a

SHA256
1cd24611252fdc3d2efcc15efe225a7075db6d478e255f4544eb33e3d0c57f6e

SHA512
080d163c3800d7131abb4b99e9567c3e9144b57f4a4cd60c9b3fcc534b5acb68f832f7186652dc5f68bda79ca0e3c07683df64eb6961347e6920219a7eb7bb5d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Annotations.dll

Filesize
29KB

MD5
39e116bba31591e88f2321a8d74c3eec

SHA1
ebbb4d20f3a1ffbd3165b0b0dfa8b5bc8be7ff22

SHA256
b8508548909cbd2844886939006b086b52af61215726fe52ce1758cebad03e8a

SHA512
dd19f5efa0c39a79cd1fd50424bfabb45d68d0613f5ae292a34abf848c693b2d60bdeac2a4a4e323bd629dc5c244a58c3dfaa771b79d75dbfc38f26fa8213e84

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Composition.dll

Filesize
298KB

MD5
7c0956da17e056e3e082108d442ec81f

SHA1
3b723c1b630863cd46daeaca1d4fa30303e46703

SHA256
ab1062a5622109f18964e3cebc2cddcd5841c6db6b0dcc7ff5d4a7ee25f44109

SHA512
d142c492c432961f647c4980e9c9b1c37c075c44f1d4775b88bb7f6370b265921adbe3ef53c56b222bd75d91cca825f122063b0e0be91050e3ebc368b6d4c386

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.DataAnnotations.dll.EnCiPhErEd

Filesize
124KB

MD5
e2ced2b6360e2e6c801143f280407004

SHA1
7db74ff2f73533b5c79332fb2a9f2a228c89bdfb

SHA256
d4431ea8bb027a187adb148b6aa88ac52286234e4074a86dd5c63581a2f250e6

SHA512
c7c491c097afa51608f917f59eb34baa764a942ce52dd0b25f546c8359b96c31b290939601ab1af21c5a023f4cc123f0dcd3564542d3bcf22fdbe7e94ee911be

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.EventBasedAsync.dll

Filesize
28KB

MD5
b29a85031e1977a920f378849495a44f

SHA1
d5b642f0ce0ec4d3f0f8bd4ba5148cd7a3783783

SHA256
293f36b2b77c96de1f607a55d56b368d2903cdf25fe961380b6e843a4d4141d9

SHA512
77bd6f3d295e5266aa9599bd966daf6e6eba2bffdb88a7aa088071b1df8a77e2297922f0cd3b3ce7aa9c8a2690bfa07bf5d1782349d7ed3ef0058df88f9b3980

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Primitives.dll

Filesize
29KB

MD5
1af1fb920b105d99da94e4afee842c41

SHA1
962387faf5be37a9fb6444dfe297af0d46fc91a7

SHA256
97b7e0d0f94e57fd20345c3f96f53cb78c2c4e6f410f11ff12b096325d8a5f0e

SHA512
4ce7f3eeb42504a62a7ac81b9dec92fe68c04ef6a0314ab4a3cda23e4937b1716eed68879ee365025739e71948d0c05445f35dfee55a823c93b90475e0b0d877

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.TypeConverter.dll

Filesize
30KB

MD5
436a20c66a6ca838ee0b4f6afbdb30bd

SHA1
9f5a7e302aac836d399f91ef5615e9182de9dfad

SHA256
f9a7aaea22fcaf8ca6f761894c0c339efcf8210074a9e95bb5e1913d4c6949d9

SHA512
3b736f9cff8bd7938ed936cb689a38f5a752972371ce85dc56d32fafffe9d80464dd976d4a9a5f71c12935803a0668a1f3b6c6017825ce82a952821b76b30b1c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.dll

Filesize
28KB

MD5
51d35d21c643026839165a021a176229

SHA1
db69c5f71291d42ebf1e311ed66b2f1c10c6a319

SHA256
612274af1f6957d420b140572a88c3df0ebaa007aefb7bbe84840a3eba912572

SHA512
74a8abc019c26f268bd22321182e4a64e608bf345e8e8658ef5c102365c9414bc14c4ba2d303ae27cb9073db8b3a91207232eefbc8b654dceeef509d3dbe14cf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.Install.dll

Filesize
100KB

MD5
155fafc4fd0adf10954ab1ef7517d2cb

SHA1
dfe12f393087cb34b0521950f6f57557292b6972

SHA256
22e8f13eceaf715af5a6350d3c0c5a4c8980c8cfcbffdc5d5518eb28ac1a0ba4

SHA512
7401309620c8f58d2b61151c54f2620f1963d24b15bd131ab28d97f104dd19a50e7c7433272480ef8ce0fbf7bbf3c507e11e192317e48cb5eee27f05577b0582

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.dll

Filesize
406KB

MD5
81bb6595af24de001250638afca1868e

SHA1
f7b592e3a1aa1af6427eb5181df29f0077b6f614

SHA256
387e4ca209b21f0462844f22aff351bb3fa697ebe7bb92f7a528fb9c06936c4c

SHA512
87d8cac2f3b101cfe18a28c30b278a7314cf3780115546be0801e2f7b961815b0af99183a63d841378fa5a93e1bc2b786bc408436c64fc7a965d038e3a7da75f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Console.dll

Filesize
28KB

MD5
defb779f96aafbcf25a462c2464ad1f9

SHA1
80c4f61a83192902bf68af9fa529e6bbd786ca91

SHA256
594cc6c7e91752aad8f6603072759bcc5a78a49b2835972880b7cfc310280ca1

SHA512
23d57d6352b9ab7db0c51daa7ee97182a8ecfe9649cd05c141bfcc4a6bc6e428ebe34c0956dfd5566069d35754a8ba6f4a2d2a1e67fe7f3ef7508bbdb0aa200d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Core.dll

Filesize
1.5MB

MD5
2b3b3b136cd8b0a4582a88c0d951620b

SHA1
82081839608bb1420a3f7730fbcb6ec2e6e3f2ef

SHA256
a0fd0aefecfdd0cd9261ba079f63c086ce20e90e3cdecee8248f73a1df3bd531

SHA512
f4eee1302968ee66481674e9eff80a44d8068cc1d6a45ae5b56b13edd6fde5fbbbb1ab16fc396058ec8ecbb62ed577637916a2b9144a644ec208c832f06a12f1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Common.dll

Filesize
29KB

MD5
386c9306c7e4ef983f4d8a14d27954e6

SHA1
d2a32d6615a5efa2a38d5d3843148425109facd8

SHA256
666db097a26a329a32541f4710995c3cdc2dd8c9d486c138aec388570ab1d2c9

SHA512
720f1b7fa3d0e54e4774e0a6908ed202cd8ef53238e3e16c71e4fa72ce5d4561135e5d54c09097a5b9044bc0c61cf503189b2f94ad5970136c05715936c7e0d8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.DataSetExtensions.dll

Filesize
70KB

MD5
5a363384f687d86e908a5a91ab3e9d15

SHA1
4d7ef9ee1a035dced8812f4304a302707ea774ae

SHA256
571eb8eff42ad49274f9f340c659b688ceb9f90123d89a05855beae4d8a3d695

SHA512
d8113e98775fdfae7a9bec28701e9a9335758f446dcd946a92a5395469aff076801c6f99fb5f66448de6c19db44eab98ec617eaa306afd6ad87a9b3267f15e0c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.Design.dll

Filesize
1.0MB

MD5
a9e2eebffa5b50fb850aa02833925c19

SHA1
6d052b9171aa503f9e958e4b941f043c30de4d03

SHA256
8c75e903c098f35e4f0bc1a54208fd5966d30cf4584c99eec10dccf12044c058

SHA512
14975b2a1579ac8531d57b58057f096e286e841cccf0a82faeb60e7c2beddba1335532a920208a8bcaaf0d38970d63c18025dd605d7de670c09e158a1ee5c894

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.dll

Filesize
3.8MB

MD5
eefd61cb133824925ae9876fed57f297

SHA1
8d100149f785f3d67ec544aa4b133fddb58f7f2a

SHA256
07d8db405a11af31da2344e09a72c9e4cb3632cb184a4827769a47ee98399a3b

SHA512
75777f60d3eb94818fa9dd7f209d2b98c4006fbc1ce60236941e371453171b763f6e679d18eb08de0cd32a5ce7529274f5ccefc6ae11abe0f3a303f82f2026fd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Linq.dll

Filesize
673KB

MD5
e86a0744c97d926d5acdab460429f161

SHA1
21e7cc03826e247fcb453cdf1f289d1fb2be2ba3

SHA256
c04eded43e93ca95cecaa83700c604fdbcdf8e75e19fe2f8834ac33aae23e006

SHA512
6c16b402a83e8d46fc98137d748f8b0a48c11c857be3fd8d31b772767dc3b3f298bd4c7840018c6928951724706d1dc52d596a7b98bfa1244bce943c0b49e015

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Client.dll

Filesize
434KB

MD5
0cc39895ad1d6516919d84573479f625

SHA1
894e00c594c9bde00077537e75c01b0cec8edc9c

SHA256
6825de429a6300af4e6696d8e9f2972ec0ffc9608c73c520db1a1004541f0f71

SHA512
7c7bf7f0fb8e93295f505e7183033a0d3972bf56d6a2362a1b2cb0f6fbaad932aeb3cd332a02a5380b34c44303c1a795ef24cd8b4356df909b7f04a87457836e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Design.dll

Filesize
170KB

MD5
f30d861b6de1895a401b4d5703ca13dd

SHA1
a81f16ad5accc41736d9af26e3b55d9127e6c59b

SHA256
034176681a75c645e7e6bfe996522e3b3218ad517aa3574bc4b29ebbbf5476ed

SHA512
432116392ca0a3ed600578a71419b506f03b917b33d3661bc38de66e05f1f03c07770edf318a3898b7a7dfe536e2787d5af5caa7ace7def957cc04255f04a7f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.dll

Filesize
657KB

MD5
214a649225d71325410f53af9c6efa06

SHA1
44b63fe95fa24ff4ee6a4647b1140f31732c4506

SHA256
b7080c9ef515f1f09017d9d334d07cccd731000fd4a68236abe86f5fdda59f8c

SHA512
1cbdd29a92c2e8685aebae1ba1d5529b67e8ed04e799ea7460ce28997e6061e8e05dfd8a36c1207f85098971d1bc10b1419cfdf580f164af5fdb01126ada0934

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.SqlXml.dll

Filesize
717KB

MD5
9315c7d5a9c592b8efe5e1b64c3e9992

SHA1
56085d6bd43a6d5c25fdbe0863b72f255a83eff5

SHA256
771280c979493628e91b72cdbfbaf3d593f7989d7bb713cd271a2777249df8a1

SHA512
ed3e9cc134815fd620c93211afc281f81a2986f4e1af71b6461e667a3634726a2d1d57c9ab04f4051125a759ec040c347ec316672d7c70f283e4cdc2a3a83c6f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Deployment.dll

Filesize
858KB

MD5
7133c3f2de06aa448524b8afda78e0a1

SHA1
0871bad08196d3969145d601d370a4ed5c144513

SHA256
13b22fa8a79e61838b68134130540e7a70ce8ec8fad407a7fe8256bad40d2c89

SHA512
acdc3d8ff5df6b869b95128054fcb6729c21831d7488f6b9c74f00c82e2538b00285977c3e1e314be92e04146d56632a80bb0f1adf0e01582b49518979542087

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Design.dll

Filesize
4.8MB

MD5
1aee994a1c9b1c60dfa8ce0250723201

SHA1
2bf4144a11c9c09c04756501be309428c9559b42

SHA256
9dda71c14da6eb474edf3c76cb02cb1ceb4ebb558fdb26b36911e3a661dd4905

SHA512
e41c71e0bb59fa0eab4dfd96b23f118fb31a3cf19be17e2f78e2f3351bb0657aed9e9c8a0a4bf05b6d3be765cd1623a3dc4246d919900c43ee238393909f8ff4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Device.dll

Filesize
62KB

MD5
08f1e6084966835e8b4dcd4511c4f10a

SHA1
55eaf5b886f3c8e4f1f3b8b14c4168b1168cb3d9

SHA256
889d5867be1a1fd6359fa2b0f4f7342ad7a59b90fc6fef459058dea97f371b2f

SHA512
42952074ad1ec1d72374795dbb3d518c0c6d2d0b33765990f3be78c17e686dc36007c20440e49f8b760d8ab75309e831818a83f4ad794b71d6543705060a2ea1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Contracts.dll

Filesize
29KB

MD5
c15d17a513f67edc718f7c07ded07f03

SHA1
923661c52ad69d7347b82ebf4e688713f1abe2fe

SHA256
bae38d6a2f5c10d4e93ee0610e717b5645b21c90886a71ac6da1fbe0d985fab2

SHA512
fd549083e5317572da7b4e61831fc8f783afd1ad72a71c9f29425488007b77ba90fcfe2ea2526481b302ef485adf935a98818c42e0a3bd99947c186fe75393fd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Debug.dll

Filesize
28KB

MD5
7dfc7e9c3efd0e74cdb80a0bb13ffed3

SHA1
c61beaf5d821a3ff7b6559e3598fb27304338e3f

SHA256
5a202ac35253d869c3728a2a320a5d1e937f88428d37a5ff5284c86e7dcf2e27

SHA512
4053a4c0420326e3c03c604100c8320b86427f2c5599725e55e289a2ad34a42688aec06ddda2ae2950d605178706a49fcb726e26b5ae70ce9cdda987bf88e045

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.FileVersionInfo.dll

Filesize
28KB

MD5
830b3dd6cdb78bbb037e004c04239f20

SHA1
f47b06979408119b8b013890470be81fc06c93db

SHA256
6d4d46c2db435afc4dd87ce961448cfe3878510f51b5a022f394996cb53d9d7d

SHA512
73e46ea7cca28517405e67d07873b358af41d815083d0997cfebe51a7bda38e5d9bcd29d71d7e14c7c30d5dbce33d7bbd6bfc25dcc41ec84e26a0f66e77b77ab

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Process.dll

Filesize
28KB

MD5
af9f8f905d673052fc1a9cb972c7a8e3

SHA1
bec5f7f4a602b5e74446ba67a44b2fc024e53d27

SHA256
5d5f17a534299a786c6abd79a2d3ff3b17780f56cc15dd028662966fb721febc

SHA512
dfa9fc93900e94e5beedb611e0c86fc0b7a305532d43f294b2bfe0be90a951516df7f437a602879f16da16718f98a72309c559e079a60edd56eab02e2a54e35d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.StackTrace.dll

Filesize
28KB

MD5
77b624bbce206d1f962bd7f54e3444c2

SHA1
b9901a75490d93a2999356d548e675c432b1dd08

SHA256
c01dfa30f0554ec3da488c34b8cc5eb89f4377d06da8387f4071cff66515dffd

SHA512
5423e01490f52591a782fca1314e0d8cd479e4d9700ca8f550af44dce60f7d1f724f97f894fd2d54de2e51b880107f760b9fa4b686e5140961ebef18efdb88a6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TextWriterTraceListener.dll

Filesize
28KB

MD5
fef16ddcda40cd23c1e785fc017217da

SHA1
afaf807d19f4b1a77ef294b398a29d8dfdf26d96

SHA256
f356c6e521ddda6447dde6e6e93f7c9e28b1c529a4b692801d191ad54475d8be

SHA512
3780ff4e6b79dbfb0a329de48b06095a7c4bb6e0662ffe89b197833e195bd4eab565ad0856f66a9360bada656b715110f7788b44b64659bf9406d4bc3777034f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tools.dll

Filesize
28KB

MD5
20c46b1293333fc42124efd2450b4a37

SHA1
e2b41676fca197c3f7ea2c0cc130b2997af26ed6

SHA256
5fdc3aff7fe6e522cfe3eb558f90706f39a9427ca66bfa9c2f9faa654e54a77a

SHA512
9958a00282fe3b17a1f29b58ae160e09399721d5a15f8382cb712c70e49f25c4d87f7d56bb91c831957ab8645cb4c935c698cd0a4059a3b2507014cc56a8dda1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TraceSource.dll

Filesize
28KB

MD5
097c794494993cd549faa2bf28373ee9

SHA1
907fa8e8e842ca6ce32fcf356b17aa18e40300ef

SHA256
827fdd39263764be4ea054d25fc96a7bca5f9c28395cdf5592bc91c869b15179

SHA512
0f1030bbb52dc9a93f75203dfdb194f22fef1da3f058859f19584028b4453694bc18c576a741efcb0ac1b3fb626c8eff03701659e629f106b529dd5dfbdaeb20

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tracing.dll

Filesize
39KB

MD5
3f50d4f6ecb6f495d14443f705e58fca

SHA1
fc5fa521a5ff32dea4695b3bd74e1210e09aead7

SHA256
4dfe70ca536ffd9d46c9e21442181ed8cccb85bd4f66461e54479f40b8ebe4e9

SHA512
9e060c6596dd7929f4a9106703c7fd1d8cdb0d8a6cddf9d47a27b6c1eee14a6dbc4ae91a3c5847bc7bbb0e771510964e485ff01b0608316b15eac548cf0fbb70

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.AccountManagement.dll

Filesize
289KB

MD5
47bd0b32422f187bc740020808b59f3e

SHA1
12b6d7fa36a0dd46b59152610dfd083bd66a2a4f

SHA256
9e451e7c0285b1f11da94452d9be24d71bd5a230bea8a1d74310b9372889734b

SHA512
4e66902054004bdbe12c929bc50a261109b34e8cb3b29ba81ce59ca10a38e890d61ee05fde9ee4aab341c16cc95dbbafec3b69203c4d761cc2c15146b59890b9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.Protocols.dll

Filesize
196KB

MD5
c2bb0fdeebf53c22235f829dc5213a6f

SHA1
61f0937f30aee5518423e2a41ca2e7ab5df61844

SHA256
f01a4c3671337ca4258a4ce995b1ac75f81ad11681bb0866ef1534940286c7a7

SHA512
ac5b09daa0c7b80d01b771b85c81bf169f0cf7a857057c319729b57534b8b176e5008a9b21000acc2ae5edc6bcb922fae41dd80cfbedd35ba497fcd4a8d95106

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.dll

Filesize
413KB

MD5
9da12711d05a898fde2e3ca62f25c072

SHA1
65a9702631d7897ef3b16b647912ecc1fd9f527c

SHA256
a2ec94587f82a627143a4095e046ef732de6ce5bbb72bdebb646458a33e7978b

SHA512
529121bbc0b70a77394a5e3c689cff25f10070804383bbb5563bc1cbbd316515bef0ba55071f16d1e132baf3ff4cd44237d4e767917062fff84ff10044b6f568

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Design.dll

Filesize
117KB

MD5
2681dedd9eb3ce926ecbb9bfdde30f44

SHA1
9450626adf01e17451b6a546305034a87367f805

SHA256
f2339e36a25aad0ecd1aa4b22691e129c264a2ae97e4047b88ae766b2d38f53e

SHA512
47619ede0d38208a706333b165ce9ecd93ef4ae5b2d17de931a388e9e14b345133de541b18ff67d47bfbda5f050482806726fc4f7f5ff2bb2e6faae31fc683a3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Primitives.dll

Filesize
28KB

MD5
e73fc9f55fd2b1ffcbd361b81991ba9a

SHA1
cadb71f915c4150345cffecf6a5d7e3aa2c028ee

SHA256
902d90867598f7d2d7ba1e4c19c4b7d1202f3b1c2a59c2d3383016c43f2880fc

SHA512
e44e7d92b1f03f886cf6db0e5684b760f397ccde84d29cc9d9a2cfb68a25e0ba6019e44ea10932ade739903726c6cc17bad82d266c6a766485a2b98a1e035f91

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll

Filesize
586KB

MD5
55b19caa4c95c64122093c8df509adf2

SHA1
8949cbb0682b380749870d02be648ce069093a71

SHA256
77995a91866820e13503b211a850df3eb723e75fe76bfe4bf1f60d3b51990b20

SHA512
e34300fff7c9104174cb8378980de06586d902bc100a4cb5a67ba1c8f925c51c09a08c458004c65d7babcbfe17783a54118637d1bd23f64a59488328018634f2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.Runtime.dll

Filesize
29KB

MD5
1721d627715c7e5c0507a5461363a440

SHA1
b9a2715d92b32e423b9ae41d3412f47878b9203c

SHA256
17cf2d5d3ddf88bae76940c08e1c233ae499838df3af847fcf00925cb9f1610a

SHA512
89c9b5d800e30a62cb8fb3940e5eb920c55897a9513778e5bfa3d46db2a705d6a899dc084765cbb247c553df2bc83e0f054aed46dffc498df4f24771a5cf90a3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.dll

Filesize
127KB

MD5
125937461c0a3891fe129f3a972b2166

SHA1
050713d0c2b72792cebd15c2bb4b988317df6f87

SHA256
5a66377e4e9814047e12d4a807fbc5d82c53ed43fd906367bb92257e3ae344e6

SHA512
71717015afc77aa09e413c342876b2b177c4b03d30d3a209d2e008b005bcfb1acc404868347ef4a40ca3b0b4e8e8fbd0ba4ed1d4b44eee867f85ae14cb00f1a9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Calendars.dll

Filesize
28KB

MD5
2f7bf2d29aab1dbdc621e0241fbb35a9

SHA1
47dc5e3e9eeca51416a26b1733adb64a124a5f5a

SHA256
2de1a61a3113ffd3d7adaa2d7cf3ce334f89e1b11bfbd0dbd191e69d6660779c

SHA512
0c12d283c85629167e85e3db41435d0136858bd06c02fdabe60507e7b03a5995fe03f7e8f8ba7ab8a8d52a929655b549326138d879afaf52d3e168f625e616e5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Extensions.dll

Filesize
28KB

MD5
b9a314b1f949feebd299bdee8b70b3ba

SHA1
73d05b55949b0f1cb433153c0364d3337f07e515

SHA256
104a1a437b9541ea7d7206aa884a41357acdabfbf455a13b29f9e6be74099922

SHA512
619742d970892e09e9360cc267f691777a1ea5bf5c63d4e2466545d1ec2dcfead15badf2d7fa25da04e2d1053d84cc28ca69a7e418d45e271226cc4be8b059e4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.dll

Filesize
28KB

MD5
7417001968451ddb70d46292519bc452

SHA1
0544242bb758898f4ac64b9066667b2a606f9a17

SHA256
e8cee2c05772b0a3a4a44a804fdc623f86909a35d671597daf9bba3f2130997a

SHA512
57ddbf3ff54735682207079c719a493f7beeb99ce2d236eb9f22c6ee9cdb9217234732c294f7cef0c85d31e9a91fc14b2f7fedc153fb57a9897c81758fdf2da1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.FileSystem.dll

Filesize
32KB

MD5
235cbbe91e9fe5d616cff98e8e1f59e5

SHA1
9cc1e1ee73296f6c5c90d4024daaf4cdd79f7659

SHA256
d08b012ea9f86759a97358414b3e6d6cd98dfa14428f2f665367228b5fb32d34

SHA512
523bc6e79d5affdfe0e152f0dc2dc351509e3f49266b0da58304006998545c5b797a63e0bb6bf30c00402b0b8945061536364204685629fb16df88d9b8280bca

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.ZipFile.dll

Filesize
28KB

MD5
6c69db5438b30083626aed74dfbfbe0a

SHA1
e6889807525a723687dadf82000cd971397dc1c1

SHA256
778717686728ee20dfc1364681a510f5aae01f416e67e428c7dbdb7037ac8266

SHA512
6a442b5630994c74168574e9a62e69486fc98e56b5f8cff1805dc2df054a5daa8edd1356da891d2c65417931df245c08edd79a6f00bc60357414e99e9b18cfc8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.dll

Filesize
70KB

MD5
608a0220d424e2bdc148aa3f9c34ec0c

SHA1
fe693053f4e8ece9ac0ea20e6a53879ba5793d96

SHA256
2c72a24f5dc68c10ee43215b0cc1e87860585c5ebaf32ac57d63d69546ebfae1

SHA512
fecd20165d6977c7b4e4f71a326744aa8010ddfa32cd945320949b0f9b64b729851ed8b2e96b52e4b4d82d4a35795be3b8368c95ad02f83d7a39391145e6976c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.DriveInfo.dll

Filesize
28KB

MD5
580398dfdf6fb62e896821096bb4ce34

SHA1
3126d41870fff534f7f220c2040e5984a698f57c

SHA256
89ca4ff8c448eef7dbc71ba4783c028921c47e4e45a385ac90376d6c77a1bbfc

SHA512
aed9c81f6f7e641c349c4de5f44df310e4f1478771be7f29d52d2e4d98a6102c081acab814bc29b807364443da12d4d33de5bc5e0b633ef921cd2555d1bc4e4d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Primitives.dll

Filesize
28KB

MD5
2c37099af7442b7077bb77b3c1b5f0c5

SHA1
dfdbb74829699a77f1645b11511e02341a938b4e

SHA256
96055c90d0ee363f8e5d41eac16048eb3feb07b16b242fc425ff068a2f005936

SHA512
c1853ef35e400e241554805c9127a25c0ff1b73d4a93d344a3890f6edd37dfb873c5e1b2d28cee0c228f3fb9fe8a0a6501fcc84abe929a0d19dcb72f8f0aa7c1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Watcher.dll

Filesize
28KB

MD5
c3f6e44658bd3fa39c7447511d372f2b

SHA1
c8e8d220cec4f05fb77112b2a2b21956373c214e

SHA256
e27d7c58c92797e430e125988464494d223ac289df479185b630544deaba9728

SHA512
c06a0c111378eec9786eb5e1d5d23987d61c9b29cca4aa8709583de5424381ba6edc66e5f3b209dac59105e29013dcab0522188f2f35ce377016c2452aee7c38

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.dll

Filesize
28KB

MD5
2050d2562d8cf4682e1235a8c1cf5d7a

SHA1
47bad238fc599281e3e7a09e6380b598271e5f05

SHA256
7276dbf3a337103633ea83f65790bd9d19bbf63f772549dad08f499b8295e550

SHA512
c00d726dda3c7fa77cfcb994c488c1d41ef8558e76be6513c369adbc2fd294a23bb58c3c791fa520aeabafd8ac2de3cb307fce3480a0746db66d6b7bad94d0e0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.IsolatedStorage.dll

Filesize
28KB

MD5
7d96ee010d53a4c5efa4aac30a4b7afb

SHA1
dec6225a1a5b534ce723d00d16ba126eabf3adfa

SHA256
fdd1a909c1398acb68ea34eef67f4b29b0893216fac6145abb95a93d07fe3d65

SHA512
449cf8cf6118c5d8c6ffbd8bff421a5d3cb02bf494fc4c7d353385146aaa8621a3cf58683cfcba720712322102b28aeadc629b32c9b5786587574074ba3f9443

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Log.dll

Filesize
130KB

MD5
4467b60589e864062f4ea6a005c7dd02

SHA1
d3ebff82e76cc43743767afa8496c83ecb59ccbc

SHA256
5975ea59480fb062a5fd11b0a43317a512314f33a8274ea6fede112726c184bb

SHA512
11df972c87c3d2f8681d83e863cff58775d1e695dccdff10a1b9821a136dc54982effdbb0d25f3a26c5fa83f496e0f379f99247e973381061b7685064640f7ed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.MemoryMappedFiles.dll

Filesize
28KB

MD5
6915aa0aa76747cf6070415c15cbfa05

SHA1
550b452ecb077903140cf1098bd46c55ffdc25df

SHA256
72af9b51fb2a23df79258fe18606b412f6581a166e2b8c06e656572a1831ab52

SHA512
a994272aeeaf34c6f76351ae7e37c6fc03ca7d963b18949c4cb97d65abdb26d1404a7c4712265f42126453ec6b6826faeb533815b133902563ba2aa8e3c2b563

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Pipes.dll

Filesize
28KB

MD5
9868f64828acb52dd00bcbbcb374eb8b

SHA1
b9d832d391ecb6c09522fee5f43e14b1553dd37f

SHA256
5e576e297c9b530d501e3a2d3691e3b7ca1dc3324647f4b9cf03fe2d3ff48494

SHA512
37910d60611fb0821bad8619bf99b1e959d0e4aa347e52d785a57b53f6d46c2b0fa1158df6866f331e6e9d9999b8773b50cf75f2aa56baa22e89b89c8399e96d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.UnmanagedMemoryStream.dll

Filesize
28KB

MD5
4bb2b56a84e0df027b09451b6bb5bbb4

SHA1
63b3884bc429ee508273f8b08163237d44ae5cc2

SHA256
63ad04f01e3260ea4b1d1b3ebdf8e03c52eb43773bdc398d19ea5cf2fb3b9f5b

SHA512
fc0d7b341f7ad09d5344e2db5f7b60366e410aa82ec48dd8609402a9492103af053f7397d54313dcc3aa09b1ff885259f29aebe077c3f21ab81a94ed2f8e8056

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.dll

Filesize
28KB

MD5
176ce2881ce2d204e162ebb1a017af9b

SHA1
43733b24dc039d01f98dc109fbfa0d9a281914b6

SHA256
941a40ca00ea64c3d4cbbdec22d5cd7cea06b620263e493662f4f49cf32579e3

SHA512
f4f1782afdb35467cf272dc125b5c7b3de6530c50af6c2902e957f01634881303c7d1c49de24046b942b9035e869334bd6806cad2c273c087d665b0e9f7f3e47

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Selectors.dll

Filesize
141KB

MD5
f19d76029ed61e2a45c6b6d3b8a746ab

SHA1
6bbd19a9cdeab5b419209a423b5115609d596b4b

SHA256
27a1af9bea98c38088ccdb314da83097f168830d746230a7f40134478db7d704

SHA512
d1c3dd70df78933f507a82353c0d616b7927f65793a82efd4864e511a6317bc9ec8dedd95c9685438b2072b98a82928ead2db84f8d88d4ef6243a96a106654d0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Services.dll

Filesize
193KB

MD5
d4b21e35996a10291ceeb6d383303f67

SHA1
8a8ecd5bce1198e9c2bc5dd0ac9826e701871ed4

SHA256
d56228d85692c4a66cc196969fe7d68510b63aa90356a4ebe988d46faf89a47e

SHA512
0fb82b76c56c8ab94bc3f8f1b6ff1b740cf119c013f94c76b5fc90f0119a93f6470e1ae4497050e6cfe507aaade006a68d1996aa3da61c67942408407f729e3e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.dll

Filesize
1.0MB

MD5
d65088f181dcde68dfdd9ba96c26aad0

SHA1
b721d3172f6d4c2a708da9e1dc66d97ee6324fb4

SHA256
7244f55fdda39517f8380d7cdf73b189da2baea8d71f6b6249419bbb9cc2ea06

SHA512
912813ca18bcb8a46eec509544e2fc1d2276afe09b71b7523e052aad7461ba637774936289a00c71e3c78a9d2ce72d40a5d452e5421d15360f5e50e853b58444

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Expressions.dll

Filesize
29KB

MD5
4914fb8c8dda5c956494b49c5c38ec7b

SHA1
f99647338efacfdf52b5d32bc66f1215c275d8d4

SHA256
b87949c141262f6147bfc51933a02fd4bf7ed0fb4d8ea27b35ae1eac9349297c

SHA512
4c1f6504f6c754750ced6bed427e7a5f9e4341baef4c1a75e0409663374b5e26f0d47d9394d18888ccf4d6d25f7d23a5cc62d4ad1b9c702ab8b36aa9bc2cfaac

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Parallel.dll

Filesize
28KB

MD5
c0d266050025b2158ca14bc80d785508

SHA1
8b6fdbcd52a0135296b54c9155f3419faa83ced1

SHA256
c55352a3f3f1a051380805209802378dead80e46724572e8f7e7256ba5f6d39d

SHA512
b193fbee1e87ee0e57c3326f7c9eda84f67fbda00d487ed99c4786d06bbdd885b3fde00c6fb56e21419b069cfc22b149a2cfbff015cba764781ca9182cc32c58

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Queryable.dll

Filesize
28KB

MD5
966c23bf11773c23aa50595a2f0842e4

SHA1
421358bae15bd42ecca86a1bb8b7b09c16ccc579

SHA256
15147976eedee55012b029a12de87b48e82d4bdc4fd65e85ae93b7b2cfce76ab

SHA512
7d7d546330b7e528bbdd3571c3b9654b98fcae8d806d7157b85cfee543f475a943669dd896ec06b6d99c066f2c10ed37d5398257d1bc02cf3b9e995b2c5181d3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.dll

Filesize
28KB

MD5
8b7679cc7fe23c4c299c6f2e0e7ce8da

SHA1
352af034a712f724524ffdc9f40eac92d4d8666d

SHA256
6360e2bf2cbf61476300b56f29c6779dfa2171cb44a49d351b9b7a2574084c1a

SHA512
6ea7e62b732e2d40b3191c434acedda8793967ae3bef7d60a55edd60cc8945ca6a3dcab272e4398a6910223701bf82e320af948e0bd6ea895d8d1fd8e87b8a47

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.Instrumentation.dll

Filesize
142KB

MD5
6d96df09566c5b4d4886741de387ea7e

SHA1
f0ec33dbe8eeb8fca47ac908b6855f28e9f16116

SHA256
ab0ec5a51c6f5dc01385c62c5d7ef1e202b14ff1c241c9f1b603c732c6ae0aad

SHA512
27f1c6896d3edff72d52f19c81c4d79db1cdb362efed8988fcb559804aa07c1302e2a0e1f7f16dbcfa10b78406570549a999de452e29d3e4534b73a72e75651c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.dll

Filesize
405KB

MD5
c624b311fb0435c0a8951f312d946b64

SHA1
b4a6bce8090223a9359ca965fbf6fcb7e6740698

SHA256
5a6ce7c42cca680bd4c8c883338bfc55c57a92660e8185f0458fc0634b450468

SHA512
69197f51ca7ab7ee2021aaa026bfe5bf38eb77fefc4bc1851b79b1b8b9693ed0c6db1fbca1a8cedf122be18a32a83d67c4d5f404ca5ff72fbb66819b001a7939

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Messaging.dll

Filesize
271KB

MD5
3cc7a99eab24d11e5a5aaf7d044271d9

SHA1
d2355afe2f0dc48ea10d4ace62914672a22e0ccd

SHA256
a951c408853e38c2fd3b510a91eb781a9350b8b43ff5f12b780004cea47c19e5

SHA512
034a4859a902b59c96ff94881beaf724d810906648839b7a279aedfa8f7e84dffa3b552f40686beb4294c70fbd767f893e5f7af44f7ba7e0adaa846baf32418e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.Rtc.dll

Filesize
28KB

MD5
4d88f918533027100980138576170fad

SHA1
950fd6181a0318bd92dd5b3191f76f87b750e01f

SHA256
1bee122401b4a3c7bebad7a5350da57e7873f92966f539bdbab187b8251a2e64

SHA512
be90d4f1f2892b809b06688330c1f8afae298be1669b5118fd0ce25b5547816abf5da4554c7b68436439a895c8a6dfdfd3d66c645759892924f21cfda197da67

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.WebRequest.dll

Filesize
49KB

MD5
a28c383bc4972768017835f5f8b17730

SHA1
45032f555c4d8808e945f48120507c9b34b7785a

SHA256
a4a928c76559ba81ee291aeda808adde59854884698816309a6e69f528dad0dd

SHA512
3514173ed02a09d9c0d0e96604cc01c499b5835c449146793e44d2620ead473fa96e2c2ea5474895fcd01d651b9e42607958f77dfd3b07762c6416834064abd2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.dll

Filesize
199KB

MD5
128fb45d9428c067936751fd360192ed

SHA1
d163225ddf21abfeaa5e9cce97b9ca87a18a1f03

SHA256
da88c16749838a1684704b6ca0ea754f27c18271c9cff023c2cefe81a788d55b

SHA512
013cc9c8785e5e81f7ea855b67bb6666186c111359bbaaa02132db8d2e6bb51e6bd2d1dc047a1eae914147867e39c90d362bea01a128541e87f66df0b88ed6ba

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NameResolution.dll

Filesize
28KB

MD5
710cedace554aae2626829b2ba498b0a

SHA1
d6f6809fd492c2a58f1db2d190fb08b7966efeed

SHA256
7eedc8e02aedf246124883b500c24756fb947dbf8a1e855e58d6a5b6f9963c3a

SHA512
96638a5399e6dab84e261af687b5bb511b1a1f0d8f8cee6a022cb490be70ffe3418b2f9f1081c4c5d0841afce4e4881933a1171693ed0aeb7607059afd5c7b47

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NetworkInformation.dll

Filesize
29KB

MD5
d93754e6d6fa1ca283e7d2d41b0b79bb

SHA1
51767a02a4fe431b7ba3c4d8e86cb61c693890ec

SHA256
dcf799dbe447f15f03240344c547bdd3bde8dffa1a876ddaf1b619fb56ee2d7f

SHA512
30de365617bb3f1b2a5189f948619082c584f85efaf1dac0e461f95316ee8f755ecf215d17f65eaf08f768ad3b759de04c619fd7d41b6a3960a2e6798818bff9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Ping.dll

Filesize
28KB

MD5
f530e83f5c84a286d48c0b88005459cd

SHA1
2acca30cfd46b3d4c4ffdc1c3326484e56e7d5d2

SHA256
5af02b04627b1ed70f0b86cdf4aba3a823a0b4942d403e521b71027c5191c5fd

SHA512
81928913d41496adf30e87bf79d07aec775742bbc9628a5a3e521bfe339140f58606a51f365b2a26412a3b96100cbde677c3aeb475a000d0a62beb598350c5c8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Primitives.dll

Filesize
29KB

MD5
80686ed77dba83a6e4aab15b4a147a03

SHA1
987bb7c12fbd95f0e13800143adec251a2ced213

SHA256
ea3d3c19023d3d658b7633d1f968b89642e59158babc1655ee3ac010a37dfd52

SHA512
9dee4f2c6bdd42976a274fd3002d57a180db5b7a75db86982703ed027c7e6b2a427af663273812b154a6cd7f6fcc05aa399755e7d35e658be84448a249e153b9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Requests.dll

Filesize
28KB

MD5
02d55206e37def01ba257b03b2d1e634

SHA1
2614fea41169207b1de40748b413815dcde46dc2

SHA256
3ed612bb11528fbd945314e1d165d6e28e5d8c07dcf899e9cb1c886f5a9f91d6

SHA512
52b7d59b3a76617b641c0e8b5502e334e4b84368fcca4acfa0e062f26b03fdf5918677dfffb0c893f316aa0d3c4e1099a250403d497b04e42a3e872b571d18ce

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Security.dll

Filesize
28KB

MD5
6bded0779c5e5c2ba2ae1064c8ad27aa

SHA1
bcde13c8a0051c14a89b904ab33129a40024d63c

SHA256
3c32f9641f375269beff1a892c61f4caff099bce5347d55b7f0acaa07313c58e

SHA512
2cba30788843466626a4f78165822cc69dcd30b5606019dfcef27b0a718038983e60b0422d42f516221c6b1d03a3984be32ade666691dde1c60950e95db1b0f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Sockets.dll

Filesize
29KB

MD5
1d943df7ec061c5ed6cf6c936e914227

SHA1
e5e0ef1a91fb39cd59e214fcaf471b40c1a14ba0

SHA256
fcbbce17b12188aac9fe22535714041611fe5fb19035051377fac771864a4e60

SHA512
d4bf6fd02358440aa69c151475bc91433fb4b5b88b1e6b959d2bc73c2a6d5761d034874b787dc41295c1ed957eba792767aab2307c097641401aeede2fb42986

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebHeaderCollection.dll

Filesize
28KB

MD5
469237a9c774604de2e23146be6991c8

SHA1
c63ade8a9327067b9fc9ff2e4a55456661e39411

SHA256
b7abfdd41806e4baacb83504a9cb67645e1d1aef2f594cd22fe19d6ee4d150d6

SHA512
b868ebc06056419027918b3aaf39765653295b85238ea89aa6f695a72a704c5310f2c5e9c222e3ead68e12024804943ee591238bfc80d840fa2f5eedb132b1c8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.Client.dll

Filesize
28KB

MD5
7b47235be756093a1ad370a9ccdea25a

SHA1
e4b125ae2cdb61467ca2a75e563c7545361549c4

SHA256
8a3d6db704e893fd56ef2585e99022981026589076445bd80e45c2994b85fc3b

SHA512
1301d3c70b3111abc7d564c19745f1173184c0d9c6b0c2c96974375b678e822c734ce1b66f6d34ef700a505cab941a0d04210f3755198b0d0c79d5bdff1a5209

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.dll

Filesize
28KB

MD5
496bf57dc98e6dc6bea4167fc2ce00c1

SHA1
2182357f2229fb2fa76bbc19a813422840d501ba

SHA256
05e4e4a398bcee1d01a7e0a648e0e224f3ece9d8f41a71041f2fdc5aaab7809f

SHA512
ca0960f46d652c7cfda4cea9ffba5bf8cbbfb8164699e85b6df636c3e00e2868270306527d6e5d3c5c7354175ab57f5ff42a2ff32c2900088a61a0f259f279c8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.dll

Filesize
251KB

MD5
2acb408cfffca461c5bbdb0c3910da9d

SHA1
f2cf89c7fc12cbd696828a76d78cc472b82cac5f

SHA256
6f8f9b0dfd139471f9e66168a477a82d557b3d359ad016221fc2e7d3d2a5e8f1

SHA512
6c9d0dac4cf375954154d2e7d88c3d5e6067450fae0225ac9a0b724cb13d0e33bb761b538e4fad651cb699bfdca256d6b1c3969f97e6313d78808bbd517b302b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.Vectors.dll

Filesize
30KB

MD5
43c2575c69261540fd04b271b4014c96

SHA1
da65019e44d381ff34358d7cdd5fc66fdd16ad91

SHA256
b729cf56a56ada799f33f2da9edcffbab07ea36a0ea6eaa4b73d0ee9d89ce8c5

SHA512
f614d44e6d83938030c59e5e51d62741235dc2fe4ee567bb4d03c1673617b6dc951745d9245a7e3f2c8d1b52817193b451300db07000f3aad3d46f4f8afcc67c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.dll

Filesize
135KB

MD5
595a329f37505d4f32d28a413395f607

SHA1
652ebc34f85af17d93d0f412aa8c6b03d67cd9dd

SHA256
a2bf81986b30477a2d3cb76cec18a75ba7186593394d0cfeb15daea1ade5740a

SHA512
cf336dfbb1637014ffb870c3b87a2e743ac78ff94182cd5881a7ef6248ecd5f75c4c8a2a4206ffa5b6a5af5204a9796b768f74b6d9ab7e048d83de4d8afc3f46

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ObjectModel.dll

Filesize
29KB

MD5
7c69c3b90574d2e789babbf2ad3e5f53

SHA1
adc4cd18b32559045dd4537036b4b0d48736b7f0

SHA256
3a16ae989056b1a315d06fac7234b379467d78762ea85c40d611db2424477353

SHA512
2034df3dc1a1ddb541be6107dc09b7d06e98a07c8619c8b29b49f9f3bb2bf70d1511b5cbc471a0e5e19b882f58763503bf064ca43ccf2a11b512cb4e4fbbaa54

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.ILGeneration.dll

Filesize
28KB

MD5
fe6bae1c53599ad74458130b579f5290

SHA1
040e2f0a2df6dd264e96e922f64bbd89d1bd16ff

SHA256
8c008da3c3913a9a629f03a65ed5a1008385e4b0536176a3471f6fb3105cae16

SHA512
c3db0cfd04cdc3bef156201cf1d284f34f30676388ba75d7075217e2b8e3ade6c35a91ec3902c333782b8b461010ca45d200a69afce8e994fd1741398f11f2d3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.Lightweight.dll

Filesize
28KB

MD5
14a87e9b06827953c8cf37d0402d859c

SHA1
d1515f4402d861a7ba9660d49a2cf6afab775bfa

SHA256
e3fa795a6c2a5ecc654d6a7457abcbf391a1e24061a7f54950e8a9685efed987

SHA512
997f5534a4cad360a9956a587c06e72decad2ac945318d677eb95164af19150894f5c4da0fc1c1e15517adbc728a349d1997888a5a7e777e080800462663368c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.dll

Filesize
28KB

MD5
6542c62225aa21cde0e73a4cd550233e

SHA1
a1a3532d9f5b50796a05e78628cb7b54f7fa5b64

SHA256
944dc0f45830368a77d1241b2e0d164c107d80c2573679fdedc9a3e49e480f12

SHA512
176304ba9833635f0578b1247cb8ec1b8b9a53bd3bbeb9b06c7b90a3b4ec9267f3314ec0ff5c4fe9ec937991dad7f19045d32a8556b35207989e3a39f41aa91a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Extensions.dll

Filesize
28KB

MD5
09bc8d0faf799af0661f600104c60ad4

SHA1
b3612e52d6a96379b97072f7a3951ceda3fb5b20

SHA256
be4e22b77b5ee4c6134b0e61a5c83059d48e24527fe51f0861281df6e80f14e6

SHA512
d99aca22dbe5631e7bb5d8a2188b14120f334c5cbfcf32723a968a2a8f15e46725a736398d66e19a45e98ee19ac51cb14014a6870c162f70d1e985d98b0b06c1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Primitives.dll

Filesize
28KB

MD5
1ce3212f3bfc3a54fcc7b7d8dbd34983

SHA1
35b8477696f65d23ad1fa2f92e55e48766c7ac31

SHA256
4afbe82574f752d7a9c79af745c36118f75a7f68a54d7400a5fa7dd5a79c65c6

SHA512
a555cb83fc6ab96b6e8bfc088dc2947c6ff98e4ea33a6d68aa4d9573d16429c9d2c8602d982ed21aa7f9aad88ea3774a0cb49607a19f49521d695ba1810d4168

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.context.dll

Filesize
105KB

MD5
4728712d055d8881a96f41d53eb797e3

SHA1
e6945ba0f590bdc1a8d07500527426de167614df

SHA256
26ba42c2aa47d5d04bf21bccbc8ed54c4754305304a38b83191a567653a7f8ba

SHA512
1367c3f3762dd99c09934c07b516337c55b9e341630cf2b03b9d9cf4effb176a20f10eeb2ea86400090a22de6c4e917494a637888ff35d86969fb4e3d7a9e893

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.dll

Filesize
29KB

MD5
4274489ee0d63a2469f0a66fea13602c

SHA1
d5e883dda80d58d4c527a02be3d86adb8cd19cf9

SHA256
081b740f3e98c8e97f93a724e3c37964ee5994ae680d5abd77bfa10912374482

SHA512
7fb48b7c7635c68eb54283cda54e2582dc3ad6f5053032d9b5b2f3c41f7920b45e26210623f88e387bda09359e9b358a01f7e248d72d1bac1e97682c6b896002

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Reader.dll

Filesize
28KB

MD5
60a5d1fb78d4322512a0c82d39a28f6a

SHA1
7cab6b4326ca3d1ec9cd1ee5d5864f0a5a4dbd3e

SHA256
5fc22583347d6af8dffb4bfb405f93fc4708575b03ae9b948f7b4180367a897a

SHA512
92e88c00226bb605c6328782c2ffd0659add21f4d77288656b3769a9ccdc8ea21c6ad4609a4c8bf371e762d7b8c770fc493748d79e3b6286f5cfeaa509101c08

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.ResourceManager.dll

Filesize
28KB

MD5
20fbcb2ade2d1b66aa3acf9f313e4b08

SHA1
ca0f81d57f920a9f73b069a503254d8df0d0e971

SHA256
cb75660b042ecce7c2b45f96e13097a7f8dd54194d987dcf6484a54cbade3ad1

SHA512
8c0311021307dabb63d1ce555cc9afce8a41d13f77b3c27082989ed122ec5eb1d771ab718e9f7ca414c275284495e0243830801dc39bd1c244e2d90971644612

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Writer.dll

Filesize
28KB

MD5
093660f49951c4731c72e52c6eded921

SHA1
35b7f7dd65b6c7c4544857e4d0d5a5fe2537675e

SHA256
60f391ed5f92e850d120b95c837aaae6375a97e0d25ebac777f2cca2cef809e1

SHA512
f16c65c5c208321d824f570fb74712a20551afc31b0190699907fd4919b7e2901e31f16a84cb5be96c44d49aee5deea0aa81a8382ad54617a07d793450b03e93

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Caching.dll

Filesize
107KB

MD5
1ce88ba6bcd3ce68f5bd188ae5ded560

SHA1
4076e934267e1eb69232250e080fd5a72bc67ec3

SHA256
731f883b01d73f30aed45d565159666e9f90a0304a24ba92b6bc1683b63f5f99

SHA512
e5ea282ece1f1ca5db9e7f41954c7918c147df740b2e044735dd3848ca8d5e62dec83d56e3f16eb0d08c0d64785664d09148eeaf92066359599323997964a5d5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.CompilerServices.VisualC.dll

Filesize
28KB

MD5
ad3a3fa0ee6681a92215c1d7330c13c8

SHA1
7b3edad69a33c7ce002ac4379cc111ae988a21cd

SHA256
4442bed6603c89f60d5afea5ec4dc8c991c4d9c4e93263f0fd0bc6f5eb821c7f

SHA512
653469fdf0d5a05a01535d83cf7c2cb419924b5414301f8dd6fbb2081c2f4b0e8d7a02303dfe23f73bdfbefaf4cf91586e6fb0f3db31593574dca9bb73ac6025

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.DurableInstancing.dll

Filesize
168KB

MD5
a83f0a5f1dbec74a3efb8ad1ac4e2278

SHA1
38be8ee7536251d704374993886b9f336f2d24bc

SHA256
21b806534b21b4ae5164e2231c222307da36bbfb5fe178a635018c6ebd8f6ca7

SHA512
cf3edd344d734e2d0d7351ba0c44f515b36f6de2807bf86e889f10e6de5c17d608f97b85acf134d7c05c9bf62af42f1ae6f645980e487740bf027289acb31988

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Extensions.dll

Filesize
28KB

MD5
cfff2c607f3b140eed717c8346bbdc5b

SHA1
4b582ae33c6e3befd908e14c2f8d76e467944428

SHA256
700d825e20c89a69e72be66331a702e5e33c1e7aeada587eb1846d5e92310c54

SHA512
48541eb90fa18b0b181f001ec435de5f0b6e318424217c4c9480cd74c11b24ce8632bad760128057dec4ffad4a7030aa08bef4c7f79c53a78e84baff6c3f4371

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Handles.dll

Filesize
28KB

MD5
c35125cebc06448f5a878b52a5be7727

SHA1
921b011a044b01376c7614661dc8d562465fd2c7

SHA256
52114cd130d80dec26f58473f8fa3aa241f47eb28720db3079a1afdd35907433

SHA512
d6f8fef4d841efa98a7fcd826ae90c92608f3e95fbfbe3e56b7a0b91752a53f1b164792b98c620e526efda6f0543dcdd92f2dd492903c8b759683b06ccc9675a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.RuntimeInformation.dll

Filesize
28KB

MD5
37c4ebe1ab9d0050b7ff0100132d8661

SHA1
aa2cda6e5083e41ffc61bca21c9dc66d73bc6e0e

SHA256
253fbf39f34ccade399013cc1d811f67322b7dc157707041b78aee79f1b30075

SHA512
f0cb5b713a5a46e6f0f6542d8064a78a8d7de4dbb8fde485fac51a463342191b3f81bcfb36064abf6a20e658bb117900b44a686aefebc55cb1e6ab71d90f216c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.WindowsRuntime.dll

Filesize
28KB

MD5
00578780bbfd0397ce6920bad36fa4e8

SHA1
94beffa782453c3ad476b124b7078db560a89b13

SHA256
c2454c2c3a720b112f9a9ab3e11efbb12ad8ef1589decb71ce844e9c0a71ea09

SHA512
5b6106df71aedce0d7985920ac9fcf0847d38a5cad6fb605e51bdf56c4a62c4a6655753de73b6d77c23a1ba363b25af4f2c5f01d5e4e77ea53aeb768a99550fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.dll

Filesize
31KB

MD5
6cc0f4ed08044234911e39d09857549f

SHA1
43c581a737aa1992b18d752e5c812c01d2b02dbf

SHA256
5c6111c36efa90bea66042e0769f03d55b5f475fae9d8d8b0ec3a7fc0015805e

SHA512
bcab6460de294bff7ee97bd6e15d81260a582d0607d3ea365cf542c4188056d8eb400da282d778477b01a5962c72ad4e6c06b6ad703a90bf1333b7b784bd1fb1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Numerics.dll

Filesize
28KB

MD5
1b3643151d6df2ca411e3b26e3743571

SHA1
1efdf3863765d7729053622b12b336717cddc3ac

SHA256
61a3e41c4afa7c047713d9c4a91f0843017939c2bd2b98739285378a8f922a50

SHA512
b67542abe7a4a8e8adda4b6f5e07bb1cdbe693a782528f8806c2ff21553eb87a1554762cf7464243678484bffefa9710df95f9f0690bf22231591311869076c0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Remoting.dll

Filesize
339KB

MD5
9eda2e7fd24310c0b5fff29f46374786

SHA1
804bc3f9d2e76a539aa3f028e4b0085760394c97

SHA256
3c4c8f44d1bd2b791279cccc184e3799ab8239a1e741c6d66d3669b0dcb23f2f

SHA512
e2471f9a5c1d49287165368a383cb8d83f1bfc42374ec16a40242d7099dc9b5b71dd379c1d429f68dead653a16827e79a8f90d56a161b80a90f35f119cefd86a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll

Filesize
138KB

MD5
087705a646b9705a0be5b62903b4a707

SHA1
7d7c617298875488bceaeaf8f0f76abc9115f717

SHA256
1be9f91a566ea17d8f6e29acb15a91648b1f6dad456eb232f4a84571f4d711dc

SHA512
bea23d6afc7805c301934929869fcd6a220978d1aecabbfb765403a84e12070e802788be539f1962ad496bd564703d9a9ee99d5ffc8900edd370e2ef7439a7bc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.dll

Filesize
28KB

MD5
449428f7dc9229c0a6880d45f1c063a0

SHA1
31053d2560e5e6d57432fb1782740624234edf5f

SHA256
576df49d987ecd6763c3e641c57f306b2649c2076b15008986cb6ea3707ae314

SHA512
0603c3d460ecdc1d9d2a3197ce5e8027740dc6b44ee12339c1bf03306d7c6ba4c306342a11512f1382631401dca4d90aa4132f46ce7241013653ff0ec42d42d1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll

Filesize
28KB

MD5
3a08ff8ab1a08fc4e83c257e52f0d8f3

SHA1
87a0760625063d2627fe83db0761aa53c164c7eb

SHA256
0b9893e5b6b9bff4ed183441e6aca54a332d9341136699ef2f93e3948bcc20fc

SHA512
a7fa419eb59404b24f8e0b35bed6b778f9604a67359097ada1e1e47172cd00cb90dfd10f3df5cc000759f6ee72e57453b08e351021d207258f61612a2b16e0c3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll

Filesize
28KB

MD5
8f201671a42068655f15dda850582fd4

SHA1
41dcbabe165a683650154c89a0ce15ff9c9fd02f

SHA256
00fc091f1121805fef479d2d53cdb1a11a7ae8895dbaeeb247e892c648bb29a2

SHA512
e69a754e18099b9b583d6746b777fc2094da8c806fb4d3d2eb528a78e5ed358997bcb5801c155cd3cfa9cefaf6ee93f8e7e08667a7cee4f0289b913ff1232601

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll

Filesize
29KB

MD5
e707b85364bd39ee420c9001ede23208

SHA1
7eb49ebc16833587ca2b350b381b04c102605045

SHA256
a710f70a79f6de98964fa99933585c3f425edf4b27c4f130ecd4fce08f715657

SHA512
ee4920dbc6e2633138364dc394141fbb499e346c6f27279bda243ca5010bbf20c1589c4dab3c33cb78bb545931eb4e378347241cb6e5ba5ee8413b2efa4d6d6b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll

Filesize
1.0MB

MD5
9d2c504f45c04ab7863c97b05ab73087

SHA1
d82418da3573b0206bcf2432cd7930078c2d3d88

SHA256
b3f7403020d1ecba99821ed8548fbaaa506dad337356070859a6cfb761b90a8c

SHA512
ddff855bc42195e0cc83e5c65861ba1c81d170d706833394c78b30cc5bac4a0b1683e23a7b76116e030b1c613e82f22ac06948e4ff8131d7d91a29e93712cc07

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.dll

Filesize
36KB

MD5
c95b25dc058aa25494ea03f346b50270

SHA1
6e6d378f07bcfe9dda432b031399e6e99fb8db37

SHA256
e8f250e6ed028640dfef8c60640c489a3b751afce506c842384b170ec88b2651

SHA512
adb098776ce5a0d9cb16c22b3256afa19b815484ccba3cefce3cb55119240a29557fc3c7a86aa18aa439a03d43da4f960bad7f87f3876974cf071e7c307cc0e0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Claims.dll

Filesize
28KB

MD5
a482e34fbe20e5f82a40d9ba7f6e0da2

SHA1
df384c08bb5457d6a41ef3aeee97ac7abdc8a157

SHA256
c8a4842ad56541f023510ed46c58efd9c54ef5b642acb5325638d959618df8d2

SHA512
23500ca00e481862f1e2fc43f35329161d5b6a381b9768ba23ed9c84a789b0d0a737a730d57f0df86f38afb7806c618dad33f6319a5ee1b811ffad2dc16539d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Algorithms.dll

Filesize
29KB

MD5
6f515b5fb2c9a24f1d689501c0179aa3

SHA1
bb7e00d5444758483422aaf943d6d6bf4cee8065

SHA256
b1986ea38564e1e32f72b517c19bf6c4f9dfa5e02c9d56f657f09bb8ba193b24

SHA512
4dfb74f327b495cd458066e33274ecf136b95f5dea41f5537bb7e7785bb308b0bc8371b3116c5bccf4be3c5c424fc3a427f5fa5a73fc26ec9f6d56351e02653f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Csp.dll

Filesize
28KB

MD5
b5e32a8abaf1b8a2968bfd0e6670eca0

SHA1
d00554cbfbcef61fd498eae0f4882153dd67c379

SHA256
38b7568c80054891531a445008c6be186ae1a151f6a79a61639ddef9af3aa023

SHA512
630d60f9de6abe0594d9d60dcc42cf6fa991c3a3fe281357444e143def78875ddca0413e41123acf06de7803d17d3a3c9b529c362443cf2a2677eb4a682726c4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Encoding.dll

Filesize
28KB

MD5
31506335311a0f2622a163ec5a275538

SHA1
a4efd5bea8e367ab0e5b464e4545fafedf1eace7

SHA256
80c43a5920a8079c3da7b83b53694b22f0cac291b506327e299a613d11fe1953

SHA512
0e5bdad5684ff640149ec195f5e86cb80bb22b05d3956087a870353426f1e9e12fe13ed886337e3a7e4054d704d0235f0541b54492107335437aaa3392d1cf35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Primitives.dll

Filesize
28KB

MD5
4a091fb0e86ebff08b704ddee25c4f1c

SHA1
85a808ae01703c46ebf5d478b34336948efbd2f9

SHA256
cd4e38b6314941dca3b840ba934527537508d7f2cb7efcae43de08f562b68f6b

SHA512
9eb9fca42f2021a6019adb10236361bbe1ed4d70f43e9a9c4a2766fb797d19152d7dafd0f0523f5a63fa9653edde9efb0f8a9f88deff51625ac924d4f7985d80

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.X509Certificates.dll

Filesize
29KB

MD5
03924dd5b6d4b667e2f7a49e47ff6ffe

SHA1
39a1fa1fa490d954b88da41e4b6bb79e456aa331

SHA256
e70b488645bf161483dddc22e47ef09274ebd3f993e43e4d434677f6f8771ba7

SHA512
7a27142fc295b89a085bbb722717c62cc93b51536d6db52495f00439b1565d092820ffb4e83153514045e9f9f69f5f4f1d0e04e1a74043def3d3130fde5dfcf4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Principal.dll

Filesize
28KB

MD5
dd97252e6bf003f6360daa0013aff2e9

SHA1
1f80c997a3994715eafb10748ea8a7cb6cefa437

SHA256
2787ea040607f8abd69ec703acb8fad523d7089e93af7851de8dfb4a6321ca59

SHA512
6fd70b25e6a82d4f99a4b6255b6fae4853426fadc285b1c83c6e442bbf8a8f252574a86ca56f81f4f55dc34f4ae128354b607b2e941d98bf11fa82425354cdb8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.SecureString.dll

Filesize
28KB

MD5
1cfac2a6776b6494eae3df1c29cdf7e4

SHA1
a596fca75c2295c3b0edc6c272aaa404c2025000

SHA256
59023cbde2223dd77b12b036cb894d61064773187e8f1190970cfe792d8148a2

SHA512
924493d0c8d058a2e540495e18f4528b2394c3d03065646cffb62dc905ddb0e7312b79b77bc50b1871a20f0274172e377dce46dfe308f4664eb16a6b193a562b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.dll

Filesize
318KB

MD5
aea030736787c894654206ea78bfa6ee

SHA1
f12eea1da68dcba6ae06ab96e2d699f3e92ecfaf

SHA256
64702ca8073748fe539e02abd7f3d4d62437af9465583d2a25bb9aa6e785870e

SHA512
62c2dc4b99de21d682b0a56269add70e9f365e6427327aef06dd809e34447ef1c384b9a8daff17ad2fb2e732e1298fed81625a9dfe787eb4395fb12846c0b15c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activation.dll

Filesize
197KB

MD5
529a41f9141c6063ecfe7d283e7271a2

SHA1
c96767ad684cb577baa2003b9ed6af1888d01187

SHA256
bfae77c847159bd966f794902101548c9e29c57afe2effe6a7b493d426f2e26b

SHA512
917457f77429a02c8ae4536e0575c3ffba0afcbb83bcbebc8cb0d8095c5725a33edc02f75dfe759d14e3b654c29b40c646487ce0268ce277dcc07f9317f769a5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activities.dll

Filesize
548KB

MD5
2841bb4f6af1741f5596432bbf6d8459

SHA1
f1692e9ed1e4438a3016fc8d7f7e54fdeadefd31

SHA256
a1699d637bba88ccf9b4fa008261a0736c0cdf52f0ccf338bc858f1ad25d9f89

SHA512
85dcd8eb5676df33c6b79a77d9efa7d2b9bf29aca118af9347555799468d9bdd4ed5321b435bd8d3e613fabc2029a9c559324ccf37c5d8136abd45845126bbe0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Channels.dll

Filesize
154KB

MD5
01c5750dcb4ffe18e402fc8c8396f91b

SHA1
48ffbb5f961a9fa94650986d582c604841fb0b66

SHA256
faa8f66884d12e4d6913b078f18922647bd3079d8e9a4e5c409afa7ad33e87d9

SHA512
d93662cd2e7e1388d9fa0ccf5032d9f99469fa6397ecaacc364c38da6f8e1d67ce2838a3798d39bd7e2199cf1cd558158ac20c6358f2d2e63787f861073e67d7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Discovery.dll

Filesize
301KB

MD5
50b824a5c8ead954145aa650fb4ec526

SHA1
2381b195087de8b603a0ccc281678c38ebb0e572

SHA256
0d8022e72cb9df38fe4e0eed5d759b17b7b83960c4a72278b7260c6a01477ab8

SHA512
07a34ad4b6c2295b038cc8d8a34ce2efb7da53305185a75797775abaf12ae963391c8e88b4cb9da74ce89882136450b4b0ed2cb422f419ef454d588c595d6cb5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Duplex.dll

Filesize
28KB

MD5
6e3ecc882f16044c9974b2bf32e4bd09

SHA1
8f4ecbf84543640822dca8a433e9293fe0b190fe

SHA256
f9a1d26872320875a65106a5186044abbfd55cf6ac169cb3753b7c95bdb1459f

SHA512
9f77bac30bee65d8a9afe76e6e02ec64a5c465fcc60078b891b2fa49c1432ff1fe2d62d0ded1d9de88d9b40f9c50d389910c22ca03c43d3243307a4aeedc5126

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Http.dll

Filesize
28KB

MD5
28bcd0e98f2bd3ed5482c90fe056cb6b

SHA1
f792c45c1ba9fd242e2bcf8efd3d1c33190159f1

SHA256
a58b27b1ed01dfc38adee4f3ce30b880ec915119ddded05eb81eb708f8decd15

SHA512
cff2962bbbab1c0e489475df01f9a33addec30c1386fbc37a9c0253e269b47a5a58a05b700c53c2eeb216a08fb9313c42bbbbebc99188aa858ebd14d2d2ff128

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Internals.dll

Filesize
254KB

MD5
b6fbdeb5d8d1924716c9c5bbd5ac62f4

SHA1
1ed3cc640539c9a038c668b15b0f2244a81add86

SHA256
4142cb2fe849ead7843766f5f9f48a23905f28791f43d059202078aa7b77e970

SHA512
32d750ac76e9a18ece5afad8e8d99cc75e9600976aa94378cd0c57051fdc9176b5c4cf67d36a5b50d0a9998511faafb90c41b2c011dcad76b86b3560bc12b5fc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.NetTcp.dll

Filesize
28KB

MD5
3542c9d78868a5c834dbe7fd9e43e59d

SHA1
d41383bc8fdefb07be6500db92f0fe428f1ce98f

SHA256
42c128fe373ffa47317be19ccb0fa4fe8da6c5aff909d65a6b3d79cad176cae0

SHA512
70cc7aab273be3b47f354827b1ea634bf56e899b992222e33281737f94728bf71219070faaf8d4e268e82211d9a30296c4cef7a9289691f8124800c23f2a68d1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Primitives.dll

Filesize
33KB

MD5
1b47a06e706d7061673fcc87138e92a5

SHA1
3841a22359def0a70e4c7fc93286578d63d2709f

SHA256
90cccb8499c0327a42acf58debd4e0c2a940ca00327f0c63b35790d4ecb6df9f

SHA512
fa0ebe7d6caf671bcbab3a711a589bd51afacf80c79592825e03596351fae5352dfd1e46c2d9d5e4071865d7fdbe5f30afa14db99ffb85267bf678ea8482033a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Routing.dll

Filesize
127KB

MD5
9cf4b3587f4c98a87f5258f505f7163d

SHA1
1fcc6008be57c5ed83e8a85660c9506593480e5e

SHA256
f00285fe4e60bda4c344bea2d9ca17391e72274d1b3ca5dd20ba194fb6a2f4d2

SHA512
dbe1687aed35aa8a9e223e019e215d7ac400a4fcd9296a253b12b9015476e360e638c1607859c2cb6dc819e05953a41bf77866c0cd0b05bc866df0290bbe6d08

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Security.dll

Filesize
29KB

MD5
d01bf80585f17ba85bb7b2537c8f6dcb

SHA1
78319831a166117f3876859a3ea2e08f0d8d73fa

SHA256
1649d436b96a7aea0cc4289e2b2a0408c0b1c75f4e2b33cfbfb3b94373adae55

SHA512
f303ebef82c4343cfe19028e68637fa84fe528b44f0d333bb68b9a5944c31d280509626a96af218273253aea5bccd3799c2eb762101a7482a82af230775f3dbf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.ServiceMoniker40.dll

Filesize
22KB

MD5
84090b149c738aec129611e01c909e35

SHA1
b34db7ad62c1683d604146bea969cd8d32425817

SHA256
eaa41361576ef28da8079950cb4812168574ce3dc98be2b11edee4b35210cc4d

SHA512
b113ad047b533e5e2608637902bce7795cb9dd2c0743552e4059960b648de19aaf9675e7b236bceea9ba116cca36ef8e33507c3747a563828b4407ca1beeadaa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.WasHosting.dll

Filesize
38KB

MD5
4004ec336f9e68bb5e5b0b6fa33b169e

SHA1
c03cd9673a1117ab0f9754e77c9d573a3289cf2c

SHA256
6b9f63288b44cb7f67e2cff6e3660ee3edee5e672b53370c74796d82b02c964c

SHA512
7d528256e888e3746bcb781633a263dfebd55bcd0101c68725d1a6724610df4b4bc50dc5df7f6f8b4f04dd3105bd8434572f1895cf7a646fa05116a90c26086a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Web.dll

Filesize
320KB

MD5
8596b8a6e2152b73c27ff881da10d313

SHA1
f290518253896717b1f51e7816c7d6d4300dade1

SHA256
6538515f369abedce7747428aafa8edffe048e451cb7d13c82e12d6418d8d055

SHA512
048df526ba75bd8e3768d30a51ee0377530e7977299f8ee1f6813b467f1ea5c21b125bfc6ce4960c82caf42af6e4a3d4e099a4a818f7e3ee6eef3b37ef654c80

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.dll

Filesize
6.0MB

MD5
78b1c6fb9cf72b6642be19e5e5eb4e15

SHA1
e5d98de88b5d1c73300cd5f2be8b74fbff6f6681

SHA256
a2a0b9b7ebd2b4db5281ef9c7a85cabe4c9810d2f26701b0018fee133141e910

SHA512
cc7b78a20f9ebd5edf29ca72d47fcb572848a641250aadc62c855868687fc2123ec95cabc808d84a82a29db3cb7f2b0ab2c61984452e689fe9d892e64bf8de0d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceProcess.dll

Filesize
135KB

MD5
4a8cc3185fc9ce07859966ad05ac44ce

SHA1
fd17f0d137812370a96cbe9b5f0db686e03ad2b9

SHA256
c1d0a5ac7c87b9c71a9776de684d0b7d9bcf909b0b3b5ddedaa218445e54d30f

SHA512
2547536bbc67de6e46b2cbb031ad3b738ff6e8c8a3fae26c86a0a74a486938ae87b22d30a4e6ece6c94375aa19084d0a46e69254e78ee43e666f391833c0143d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.Extensions.dll

Filesize
28KB

MD5
9f200446eb6483345a6b95f3db4540eb

SHA1
5d3085c3c10707e7cf0f5215206536b6d59debcb

SHA256
1373eacf71776efa17828515b3c2a2fb5261c089e55aad7ffbd353842627ed65

SHA512
95803a80c260486137f96cc0a221d30c2c2b0b573eaf0da3686e0271678c83985cae00147e53930e0bd2f93839eb0a9808bbc6cfc01bd9ccf747453ac0656805

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.dll

Filesize
28KB

MD5
505f1ce1e66164126cbb744dfe1229d9

SHA1
104d99abbafe0011b0bd1eb8e89e4af416d9e6cf

SHA256
4e9930c41b5fac7773dfd47c1beec33144e8b38b0ce22d363a5a76a996f139c5

SHA512
a660e1712b175639589b2bd3fb642d382a562665ebb5e6612ab5c62d70604a0015ab1975423c7307b7bbc665ed989828a6b8014087b7086779ffa553ec584142

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.RegularExpressions.dll

Filesize
28KB

MD5
e07738cb65748665adff8e716133fe16

SHA1
782c22d83dbf3bbf01dfa9aac1ac7008f43ea697

SHA256
f75f2f2fe4a962678334d2884364649cfa04dff40d9a0a93c4a624c3292cb6fe

SHA512
000db30b8f615c2493549f060e08b9303b48c032280beacad3938d1c88f678ce262bcfdb8e0f2faa9e7a41afb69871a9a80d2efd0c7cd0b0f04cc63990c0f550

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Overlapped.dll

Filesize
28KB

MD5
94ccbf829d3c61d8600981ba871b37f7

SHA1
38e136580685ba7e50be1123b577ef94b4b6813c

SHA256
578667a8bbee64b5e10553a4f0a28709a1a43b0cfcf5ce106dc9c18d39ddc5a8

SHA512
95b6371d89fd24f19effbebdb55e54e1d8e3fa07c3361082daca14927c73359c82f88346c22155c4f313d43c952dc15c7a08dfdc9dee7ec1aa95cd5de22e9b77

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.Parallel.dll

Filesize
28KB

MD5
74b261ed83ec299787f27657f4ec52c9

SHA1
7d801b1ece6e80b5826ca36d831fc752b5cd9566

SHA256
cc7285753a246a4e174b26102538b3f786c8565e72c312dbdb46b96bcd30d57e

SHA512
adb917b9fba04ff08c9c0fc5710dfe6cb786e0da5272a4dca2d18ec8410d86d58ad1729f2c06e7f2fc906a7d69ba9f36a69827f6e596fee8631a5060f9db8720

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.dll

Filesize
29KB

MD5
9419399c247cf46c1db2d51011a61539

SHA1
b2870e190765a9d92b6368231423a869c3a5fb9b

SHA256
9ce809d91fd1b73adf582585ef833beeb3e6eb6b0bb08f7199d0dac210ee8699

SHA512
66b316b4d0757d3c589d703bd83542aefce609e4fc10fddf1ca628dec6d48f5030750bf7962e3f42afac4db4ef51a96b82cace5480d45872e090626c48de05d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Thread.dll

Filesize
28KB

MD5
a5e6ab246c18eab8d91e35471b6f3514

SHA1
45627c82e9d71f174344de5dd33a5f1ccf9f3cbc

SHA256
2b08775e0c00649bd3a25b3fd753d27ed1561ec502875a6ea1ae21ef04f9b8c6

SHA512
7f07952c7f36a24d0434bb6f307e0c0cc04283832e6d6402a40ccc2a8593152e8a50c6e3b9e24f6258235cc6611ffbfe2c795878af5dc068d8cfe1b71ad06e54

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.ThreadPool.dll

Filesize
28KB

MD5
709eca2de284ed2461bd5531a64dfb62

SHA1
d4b85c96bf8a0ed8fd528efd22412633dc26fbb2

SHA256
4c89af55d48b33832605ef580a99e709b2232ed4bebe5724e4b394239619f0b6

SHA512
b10b4d136fe4f98dc7043d4549d7c2dd085cbf010bc77a006b7b7ea4fe23f420076568dfd05d8734b18ec8af49d90b520343cc63ef6d9035bc0b41f562b5942d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Timer.dll

Filesize
28KB

MD5
103865cb9429773e3a2537e9f6d844cb

SHA1
c74196ed9f2e57c704b609d8ae7d4941cb5c3e28

SHA256
b530be0c4308605ed8dffb1f046a1a1573963fd6e664ac7a9daf152e8630488a

SHA512
f71c85748914c51edeb3faac6668001bed7dfeb09403d5fc829d5c3b9ae0a4b26385e3869e8f149388e4afc212884b2e331ddaa60a7840dfbad4d5c0f74716a3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.dll

Filesize
29KB

MD5
a47efdf60e676a872a7ee14ee0c568cd

SHA1
eef6b6dcb8a90c7c2aa353bd82072415fa0bc70b

SHA256
5157885860f09e872a45d524131e921e1ab680d97d5acad505a2f7d090411295

SHA512
9761b9a49da771f373e038f2e9e6e28b101d411a3ea2599bd9356ea4ab74c74369fed5b8d71367c6218453fa7c6107c2bafc06358904af32260d3ab45dbae7fd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ValueTuple.dll

Filesize
28KB

MD5
457dfb6220fbe069e814a96190918973

SHA1
02f7724f7ce03ce806346937c923e2ef7ca4c2c0

SHA256
bed3d93a6701231d0970a50450c15ec9cb0b232fea55f7c9397791a59e21bbf5

SHA512
abd7c28161a94f8046b541f23f088615281db3f2c9afa83d32eee65128fcf46e4ee3b06eb94d45cd2900d7f17503d302783333de80894758999374d404d4f502

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Abstractions.dll

Filesize
22KB

MD5
6a18e40dc78fe068c482f0e3f8fd9141

SHA1
4698d1766b0440e60f2342572c21be276becfd8c

SHA256
7bb49e998116053de38ac90ca66ef2adb1db045ad6295fe770858151b4f36620

SHA512
0550f35948f50c5739632475dd54ac232f58b503d8f199b6689b42fa485964b38b7b599cf6c4ebd27162d9a590ee35fe87ae3e22f29635fe6fc0c8a9bea6033a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.ApplicationServices.dll

Filesize
69KB

MD5
5d901d3975e501c8a199deca6e703add

SHA1
292ee4516bee20ee7bb3bc02735b24415a97ce9d

SHA256
f76aed77c27931ec31c8fd1de81c3ecf680ddfa4223fe302ead697d798ae0282

SHA512
b859b991bd0eb51defe2df155a2653285cab550040ce77212b84d03e377292ac9c1b17cd89cbc8f869e2ec4338085bdea18a7b4cdf1827531746f37ebf830dc5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.Design.dll

Filesize
103KB

MD5
cb3050c0fa0d2c08be339c8f87c1a4a6

SHA1
3a85dd1c89cbe4e029436017ae8242b41da4e815

SHA256
7f5b9a24dd64883bb381c03897b5492fddfe60928b91e89f28c380d64e70fe0b

SHA512
faf9d51813c94b06aeab1a8280eaba007984c0de6efd5057b8bbea8eb19bbf9b8222d839282f7ff0c0dbcb699ff3d9fb689c34d2b4d3d7e53720d77cfcc8356a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.dll

Filesize
1.6MB

MD5
c32249969867dee5262f2af9f94d80a1

SHA1
5872e9119ab8b6647ce06edb9a0c6b5a2f62bc08

SHA256
0d6015af2b9c165541afc5bd583442f3699686489cff2e2e5410c7d492b63344

SHA512
67cadebfb79ddaf7c236d71531dda0e9e0f42dbc12b3c287d9f34a5a0fcd6c30282b84e00b8c445387b78d8b07c0de03de9acc9b86ded0ecddb5c14915057582

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.Design.dll

Filesize
43KB

MD5
40a26c81d436edf75f772f2c1b80cb6b

SHA1
599cc99ca03c1f862ffdbe5e97e68e2f2a42f4b8

SHA256
752efd2ff66b1b1a8e713ae466701748120148454485ab00b3dfe6b9d1dd1d04

SHA512
8ceec3e4ad24a88f1bca651377b5aef2df99e3b009052cbcb4ff238e59f6493434e225c676b29f62eefbd5ea0c3c20bb2af64dcbb2a98e713dfb6c08d0dfadb8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.dll

Filesize
242KB

MD5
13f6d6b395255aeba50175afe47b0616

SHA1
5045ac84e03624c9417f61f245ca0afb9d0523d5

SHA256
b674c4b5ff748ef00a7fdb3b5a7b9ea297813a2e8b4d60f8680731db5e2fc583

SHA512
a4a3a0aa5d0d91ca5d22a9c530b60c45f5c61a119535fd841eb5b13d1ace557087ae44da5cb371d7263a77113af64688311369e4b11494ce51661bc3e9e564bb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.Design.dll

Filesize
172KB

MD5
242f94373d13f8c803181f1238c0bd75

SHA1
755d139d196498b1cde64835e9b7212b547ef0c7

SHA256
be426ee7c5e45444029548e9dc533baf5da5e9f87205ebb2a1c71eb45c91740a

SHA512
f1c1121f66d0d2f863b10fda2caa52a6721adf04997aa732d656831a5d6a51c6b752d9429ef0cbcde52a5b4f8dde3c4b7a7c0fb85dfdd1ec0c5358e0abca5628

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.dll

Filesize
161KB

MD5
00a77f6c752a2c63cd8818ebe8f3955f

SHA1
791ff4209f94cac02fe0d96399cfabf04d5df6dd

SHA256
3394657747acb8a969d2e4e7b96bb7a02e7ad629975500d16a8cbaacd80682ff

SHA512
772d3d03bf44cf07b3442be372d2885fde2b73eb0b7fcffde272bd3057eea02875a2fcb1dd7872b768a32afbceb1cf3b5e556eb5ad52f8fc0d8120383c6e577e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.Design.dll

Filesize
348KB

MD5
8c9cb9d6db31549939d9c0c21e9c15ea

SHA1
fc57607a0b084d81074419aff6186664144c294e

SHA256
c22db9a5d671469abb980e8897440ca6637eec515ff29aa9edcf262a61963300

SHA512
6c484612c01b9a60570e7eb012d887e0143607ed60febf822ba52be61d42a4d75be5a5e5eb637c9aef0895263a8c4158fbf6b897c05de7d3ced1825cad8b0a2d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll

Filesize
1.8MB

MD5
1231d55a5a309e0561d361b607dfd2d7

SHA1
81acad52e6b35a6b8843a04ba9e77af73177e295

SHA256
60986b29004dbae2750bbfe75e6c27d8bea4979b0f15a92c8fe1ee8f313b3f11

SHA512
59b4cac74e485a58cf0823be97c5a22b258043e3effce4958fb6fc59001687b98da7c0ca759e04a486ec460fcbf5fdf9a151c7853dc9f9074589fcafd20fb623

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Mobile.dll

Filesize
811KB

MD5
d5909e9e665f3ef45a05b03082cdc1cf

SHA1
ba7911f3f81665669da7fb888829c62a31bb6187

SHA256
21f9c8154b62b41beb7c9ae8ba857bd7d74d7866674c8e6bd8f6b24c1270e71c

SHA512
9df57ae88e5ed9e5fb3708809fd8dc4661a4f5734a6a065398122fda5671c0a9db3d7a3a11f39cb2744ff0fa26cea3c306f84788d99775d79493ee98531956e2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.RegularExpressions.dll

Filesize
103KB

MD5
d7f7f64eb364669dfd36c746c9632301

SHA1
cd662110ab586b2a9984246c24732b920b556b58

SHA256
891792c0dde35eb28ee92453e19c7d120e7e2feb569249e8b3d6bfe021c07ec4

SHA512
e2c2ac6644f726510310a5cbb97b9daf051a36bcb144f6d4530c7aeec2aec03591fb6af97f78d4cb7832cfafe4c13e0a8326a1b5e28c0ebd250d00d045964554

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Routing.dll

Filesize
22KB

MD5
6ce59240b78c5b99897da716b09fc02c

SHA1
e401a9663ba1c26474e7a3b0c982c197fbf8cf7f

SHA256
679b59f894e2ada2e34a67035858b6fed5b3a093cb01282774aee1f3c386c473

SHA512
59d7f6ba1436f9ec4935641cd2b4034f2d0ab062a8cf19f31dbfdd38b5e06ed5ffe1cd8494267e8c3ade7e53e95d26bbace6647549dd163f8e94e731264ae018

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Services.dll

Filesize
827KB

MD5
694ad8e6f1884104fc2a4ebbab7fa094

SHA1
d1cb788bda28f2709ef0324d791431966ffa31df

SHA256
e8c7070e966d4c80dd0b4a6bda25ef1a2cb18195d49b8144952e65837525c378

SHA512
b54ba0e9402b4f3997024271b4b32bf7ee3a27296bbf260058d9e86c90ce9188778e2d09456f44c87667735be945eea6624eda458713530f0e18f55f7c8e10f1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.Design.dll

Filesize
80KB

MD5
83b7822ab887cfb60fcb2c55c3926e93

SHA1
d365cf327302cca8735b7d960199f0025af40299

SHA256
7b51e79731686680ab4e769343d9a208899ec80d9ae998996c424db8f9b799dd

SHA512
4103eaf6c3af9130f0a19330187cb7357828b7d4f45a98252eeb9e3629737be5e3ae29d1354814be8532d0d13236e36009f697e18e4a2a2141b7258f60664b20

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.dll

Filesize
1.6MB

MD5
aa96840b1e99b128c9197ed44c37aa69

SHA1
02978560f6820b554455c60855947ce14ce0afe8

SHA256
9fbec3957d7cd291f93a348507c35065c3ea96cec73ba4790ee309ee6d16d677

SHA512
6664b3620946c44abf9151b656ce1476210382bf2b1acfa4af494cdbce35de06f7d74970448a5bcddf6ec1757e070968c3d5a52aac225d87d6f8c4eb3a139728

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll

Filesize
5.0MB

MD5
b08308f8cca2f714710e1164b9127284

SHA1
d897f8b561f8f12facb680ac3f6432764511dd2f

SHA256
24b0c97570c7e23198058c0d1ec24d213f27461ae0e0417315006c596b6d3c17

SHA512
66e3a09baae674dd2c874da9d1c8830d7113e9a30a1668e2131d16e25af497efee1baa5d2b8c35f0debd4ff2d4374e89714ead815958d6889c2e5856b948bff6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.dll

Filesize
30KB

MD5
00249c36f1e28e90e29874d5fda60dfd

SHA1
ced5361d0235f864700511d483025b5eac7dcdaa

SHA256
337ab8df77d888fac7838bd4f372d9a56f06263cd89a3142cb2530bdd46b7de3

SHA512
1abc47849825aa27e07aa7eac2d10ccf4d7f9ebb5c12ee6bd4986a0afaf9d05919cc305ac849649eb95519dd5b5ca0d12ecccabc1d5ebdda0c286d8fc1c1ee8d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Activities.dll

Filesize
1.0MB

MD5
fd3dc5fa68a03252b0d696f0ef568492

SHA1
326a6128377c6a373dc5b8fadb577fca198078f1

SHA256
8af4fae831bbef6f1d94a217190bd2e00a255e4f4c2ee2609a0a42675c6936d7

SHA512
6d5d2581c990b7ddeb406ce0f881d860d7e352954d0c00a03f51a76739b0b27199de753aa5d38aed48de751fffb8128fa0f1f799ce8eaf0514c31ace5577fb42

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.ComponentModel.dll

Filesize
1.5MB

MD5
90ddc5ddea77eb68b28174d3369b68cb

SHA1
cde426e1f64106b576d85b79ad3ecfe2e8212912

SHA256
601bda48e4fd1716438bb69d86092bd3ebd9cdad5991f430560aaf0a498c74e6

SHA512
2e1be9abd36fc9e95df93352b34a202e8047b755d65e6fd658de661b787b0ef5db4d876eb14c18aa875765bb88b2ba9e311e7f0fe7e2f8c866576b464b5dc10d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Runtime.dll

Filesize
487KB

MD5
c71b5db201de69c70ae14244446955eb

SHA1
353fa5e0ec739d90c743da37875aaf4e75545ff9

SHA256
d0c3ae4d9664d0f8940ed4dbf014ca233fcc32cb998c2c040dadc4b75418bb8a

SHA512
daa9294c670fd141f79824f96bdb1d9e38876d32aea209cdb812cc60117f061b496ab3e072c7a0914496c58dd9bec16cb9a5f10838e4c106e984c8e2c0383c17

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.WorkflowServices.dll

Filesize
440KB

MD5
bf851d0eb7d6d740069c5e240a17f5d1

SHA1
f83f520e4875129d9b499ac07a44b139662ad5a8

SHA256
797daebfeba36ec80a68b06de73e5531c422184275f7606726d8a62f7164ad53

SHA512
0f21c3fce3b3dde4004df2e5f078723022b27922b7bb84c4321c0e9027b0c7f9f5aaa80b1b0d524a4b3fe352b52c6726f084423dc4138752603abbaebafbe038

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.XML.dll

Filesize
2.5MB

MD5
9409d76c7243df9c0b7b8b8be95bf57d

SHA1
5537e60df96401df9809ee955bf5b753e92fd68d

SHA256
8f2394a48ef5aef9e87b1b4e1318f39a62d5e2668d137bb5573def8b7d167d2f

SHA512
732f85460f7c35d508d9be5294107c0efb45112e6d1fcbd6045dd7b0b6f8573940f3df5351eb2d456bc517167c1303ccb3f8df045c0f0cc35c45c2e8fa6f2005

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.Hosting.dll

Filesize
42KB

MD5
bf9b22d1e7118571c0b87b448d705adf

SHA1
6b77e324304af74ee5e56a3eb565e87a0a7643fe

SHA256
f059f6357ea1c231886187c774f5e3d93137ed1ed0a2d9713af1b44385c35165

SHA512
9e0108216d2b56fa22dc2c9aa71c8a5a37834e1856f68d84637ed96393c1b89c1960d454ce5b802e551f40566e0a45e3f528c677f892bc5a0023e663db5f6ac3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.dll

Filesize
618KB

MD5
685696c9905c809d1e1ba7e36a908d71

SHA1
6db2436f63cc97cccdf720dfb255a8acb68ef2e6

SHA256
a20fe0ce5be7c9fc33f450fe921cd547db21a544f6b5450c80a1b5abe0a14af5

SHA512
546384a0a65952bdeb23b8b6547bdec7658e03ec625a998fb32d5b760e8e2a194d51f5aabe7d0a65fbdbd8531e66ee3ac18ceded8b491bb527b907a4d4c0c840

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Linq.dll

Filesize
159KB

MD5
c515e577d1f7ebda6063be0840c1d271

SHA1
0b1d26d86f9cbbb8f0e6f6f1dc43627f9c437779

SHA256
cacfa4daa07746c39ce5ced6df80e0d65e664eb0776bba2eeaed88dc77a98729

SHA512
66250961b9152ad1f0c41c58e104afada1bad29243dd53eae8c7b2e59ba35277567f0f3c45c9711a68852105a58ad8127499833f41c7de05400c08efb9f53d4e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.ReaderWriter.dll

Filesize
29KB

MD5
d7c5d7d690dda3412425e93d2e7a45dd

SHA1
6572cb7899f424ca53d6428cdde7f87ad607999e

SHA256
ae007b79978c6fa618c72b4d5c11bb58bb2334cfa5384b6f8e40f5182f527c90

SHA512
7f6da0787f54935dcb66d3ecb538410bca7f790fbb917adc0362ace4abd6b8762239a685bf239a24c5b85078a92c2b6cf38137be8c0c2f7ceefcaba74758039f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll

Filesize
44KB

MD5
62111fd97c6f3433adeb16d7f2c95182

SHA1
9d48b5158fa43e7bdd2477978a8388c28e3bfb42

SHA256
dadec3a1d60722ebf34345a3dd1c42e240e49b5ddbcffd40d7c667de04219ad5

SHA512
d2d1520d2787e62ccf3d33aecdf08e039aaa5396ad5385d59908a771f4c46eb35363a856a0102840a49848145b8491bee8fc57fe22363956ddc9e5e98d5122f0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XDocument.dll

Filesize
28KB

MD5
381a35343fcd8cbd2bcbb653c0745824

SHA1
d8cfbaa91b96c0a5dd86de250b59be33574f04e8

SHA256
492f8bcfea009a3ec8f8a5e6286b203cac8602970a2ab4b27a4eee3048da60f2

SHA512
6b2c2c71e0b9e878438bbadd400bc7d4072f8cf471c3a94640088fbd749e654d8252b8db345252f6313fae702acf9c8c94ac0d5f3b5b45935fc491b7d8938ffa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.XDocument.dll

Filesize
28KB

MD5
83f7717bae0e8df212b1e252c1e551a3

SHA1
f7e3b1cb5c4993e5162daefb9eca1744e1110527

SHA256
a587686cc16727327fc6abfe03f047dde21a894a5f2464bb6fcf05095a746426

SHA512
548afab74a4b122a91359915f5e15cc09b344643a6b8da311dae83889ac02f6c474a14ad2ea9f8c8b16d1bbea17d7e6e3dabe3de56bc5328982e1252ed89cf1f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.dll

Filesize
28KB

MD5
8279d7e495b22d0835aa712dd79133d4

SHA1
0fbad44e5c646411ca719a272019309fc990f0b9

SHA256
a64fa04608643c53cba9f9b9a6bec160ef31a4f973f8558854604ef4aafc944a

SHA512
8c723c3569ccfaf9ca1bb2aeb410b0993886a0c03e1d69cbd9d64c1d113357ad139196776e19a572ad27df48c2cc919de5a04968d21e2fd2537fa2b51d49bc8a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlDocument.dll

Filesize
29KB

MD5
74556cd8a5f94bc8ec2d56f03bc149b2

SHA1
d20ac5fa2ec27db84bec0fefd31780dde82080f1

SHA256
b1ef606f261c883f340f02b5626551d87d717adcd8a2450d1265d9cb971e5ee2

SHA512
e96cbfed0ad055a0e5e303b5ff056195ac6ade33e8325dec425ddd19460770fea5700e88af7962de6ba762739b4462594fb9560234b7104c14b8ba945d671fbd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll

Filesize
29KB

MD5
14e1cbb8ab08d6b9223f2edfd2f66056

SHA1
2111955c1d5f88f91acffce9f432066836aa5592

SHA256
caddc7e1775da048c21cc137d6f29f5bd6b08888a093721600accbcdea35331e

SHA512
3c55b14034f940e8173e0d91e97264873c62a3c108307fa59e600a10b597f99366986fce0b93b25896f37fa8b0208590d4d9afb6ac6127ff7336b4012c04f8d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.dll

Filesize
3.4MB

MD5
355e597e15958792bfde91e46a02c262

SHA1
8f3d3532f7e8d1b0ebeff6314c7d458082156815

SHA256
608221914184748c27a3c51488a070b75e31c562fe4bcf3eb310164f4c865026

SHA512
b1f1898783f484f07105ed65084449d7eb7e156cb9e43076d1dda8bd63b0148b8de2c4d9224966796c3c46298c0595ff61aa586f438124090a10b32be6c5e272

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\NlsLexicons0009.dll

Filesize
18KB

MD5
c9d76245945a39d6c74657149bda9e56

SHA1
6c9a20e4364de9d97ddf57ae9e7968e94afe60a5

SHA256
09c0fcf95c6d5ab60ea7e12e8e1c8a3fb16dac7b7eda3ea3f6fab898185e3bec

SHA512
dbbdc443395777001b9dd793ec36f73dff8bb79a319c2bda3486a06d2fa26980f3535fb99f529320e86bfe603f813211ff047ddb8655f00b2185f66b54616db3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationBuildTasks.dll

Filesize
597KB

MD5
87a7f12b3d2858e410aea6a472bf2de7

SHA1
72662ab5c7da20aeefd8b5a5c62d24fa0381689f

SHA256
6a7a0ca6176058040c9fbb4c03fac1a494a02dab5804fe3f8d51d3b36758aedd

SHA512
444d3165d75b1f9d63a4dba0acf8e34c6f685fc1a7cb23949456ab9096474cbd8d5eff62dec9ff12a8c6daec1db36ebbbbaad05650c25fcbc3a9b4369e16c8f3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemCore.dll

Filesize
25KB

MD5
fee29fa151c124672863755c3d13efe6

SHA1
261b4c98ff2883569d0529e404f21cb6ae553cd9

SHA256
7a40e83f5b5244d5d3bd17d334bd1eba13f1ac0b8e64d82d3dfede686e944950

SHA512
33e1be2e1d4d19cd3aba05a0bff985efdd521455a5603bc39f16cbe391430da21595c1ccc720ecae815721c08b84fb1498130dd5143c272d250ecadab0d1c80b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemData.dll

Filesize
23KB

MD5
dd8d5a7e1bdda22913ea9978dfaa10e5

SHA1
31a05c91defff75d2594b716a77f9bbd5f34fd74

SHA256
f7ae9fb17075845ebadf93e35c4c0701e7cb8a5263f0fa8a6a0380e91c7753ed

SHA512
07b9b3d69e956200cfb765998559c3bfccc58f81f91d6bde9177f37d7e6ed8d2b153803014dfe4ea8491d5e50ab307d74ae66b449c1782425d127307bdc7b687

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemDrawing.dll

Filesize
24KB

MD5
1848e69aaac0c209e42c1c13856a1b39

SHA1
68a20ffd97bfd0794613b9ce685434bf066151ef

SHA256
023376e4b65d885ece88b408e129b7373f0c7eebcc212e67bb96efd7f008a7c4

SHA512
1a04e0975ce87d0e397675ce87f09fa149a45d447169243427a9d7e3808f7b4d359a26056b796e36b66bb6a38b86622ab5eeb51cdfb47b492f1dda0f4b95eadf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXml.dll

Filesize
24KB

MD5
bfd58e94029a221644dc56c3f1ebfc15

SHA1
79a56563f4fbf7a9057db9c29b1b62258326aa1d

SHA256
72409843ccfc53f16e14106533096c1b821eb62e896488131b798989d523e716

SHA512
aee522956142ccc02ef6f56e333e088e87d0c12fba3f2e4c933957fcb1d1ab198ff9d5dd28d8505bf65a01f6d855919c9f51ab809abaf8f1cca86692c3432096

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXmlLinq.dll

Filesize
22KB

MD5
d2608c53f101c2f34d8216066b87829f

SHA1
20bdf9a9f713816afe38108a20b7f2637a732848

SHA256
55a7a4eced97e9a09b7d1e42a865487ad655c3f2c53cbf585d6b7e11a31d55ff

SHA512
be152598b691846443823d7b041f3f316fab5b034e7c68d53302382915f45fa116f17280e8e60acda5863d844e189981b793b050fb6c6a929c3d5f4f84778869

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Aero.dll

Filesize
245KB

MD5
18b2b3b757b8b235b1e39b271656bb71

SHA1
7aca3ecc94c46aab519d22a45394880079df4556

SHA256
610e0f741e304574330c1fcaafff5481592c1391cd8f87be4315a6f94890549d

SHA512
cf0ed34c4f0605c4503301218aca240b79cb3ab9f2edfdfb9c4f918659bf742e8d8d2cabd6f2a086612164466f690e345869ddac829ef29c630d58550a29a92c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.AeroLite.dll

Filesize
175KB

MD5
81e2b581ae7059199fbb61dd1b667c37

SHA1
0e785326bfe2ab4196837e9a74418dbf9150e3a8

SHA256
6615c94bfb0b5b1f26ec3c3be4ac5d3246ae0c643c764340bef221cb727b17b5

SHA512
87e716b488984e41a866b64f4a435fb22ad7efd03de36395dbec638feebc130f7521e8a567921cb53d64639ff3128597553af9804b1d34f51dbb86bbad8618c9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Classic.dll

Filesize
184KB

MD5
d1817f11316da9969f628cfa5c1b1108

SHA1
712927e6401f28eb0f61814f71fb6c3bc75277d1

SHA256
0009a612f637db6b558c6d5478a933015209e344961083de8eb4bc03010e58aa

SHA512
759ae4a264360ac92181c14cf4a49adf0aa1cf1bcd4a105c89b0b798a8f15511ac807aeccd698811420088dc643efcdf9acfe2db22f9f16a3c05ebed4ecf8ae4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Luna.dll

Filesize
482KB

MD5
4c707b95673ae728aa101a36f9063846

SHA1
add3098e9ec7624b063a8650c17156f3693f2509

SHA256
8efc7f7fc9fecdfd8d252f3d9733ee9ace567c5e17f13e85c41c26cd0e8ec791

SHA512
53c46187ce27b018dbf33eb99d86e9acb969455b4c6fd3d7442c2b10cde7db125d46f21e0fcc9b717018c38f48e2f43c61e70512e84e326b6f17f390e35c7719

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Royale.dll

Filesize
206KB

MD5
4cd62eea1a081afb78502aed22afadf7

SHA1
f7b8b0fe256b33c5657b1e61a839fdefb4f88fda

SHA256
e7b4d2bf94065cd3f1352ea761c7359f450d1ba93ab90617ee9e63cf905a2bdb

SHA512
131b035cb5e53e4cc729a6b632da054abf1d71e042b9f83af0735dc9c41829cd11aeaa15442057de0e3e5b978c33fabd54750af56d2f8dbe163265f0134bac97

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll

Filesize
5.9MB

MD5
7aff71c71e7599f4e08ee31bda3d28bb

SHA1
a216417d4b6181d57d10f0e19aac68704780f842

SHA256
5a7b8e44f78d1692f577dedcf94ea29c29e5e91901fdfcde7864abc823432a7a

SHA512
aa9786ab1ebf2a7b798fc8242b539ac7178c108a2fbe53123547e5d4f9ca08b7e7063d66f1c8d49a42d265a7ecfd009b6d5b9b3be3ad452c34ebd8ad8a2c7c9e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationUI.dll

Filesize
837KB

MD5
14736ec85a3edae824d9c79eed6e80d1

SHA1
c0c4ccd0743147502a3ac558351c8388aeef0bcb

SHA256
7155f3773129ce25f6f040e27e7fce426a9e0163295cccc39157ceb9db9bff5a

SHA512
b128a2ee4814fa296f51c2b6083a013b3f66ec67dd32c1100084e1525af11c8df3a8489f2811fb2b385e0e1323f5451c465cd9a4583a54962f0565fc96c76f0b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\ReachFramework.dll

Filesize
633KB

MD5
5616b51d5ebde2bfa846550f848d15d8

SHA1
485c0280720cce93e733438513da7bbf97513a27

SHA256
a485accdf396164a833c811496116912ccc331cf39a9c9102cac136d62b4d480

SHA512
60805a07bd6d2648c72094899aab0a15d763d158a50252e314139efdd20b7532db2e27336d827f985c446cc352cb5a279ce5dc99de55776d497bf81d226b694d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Speech.dll

Filesize
666KB

MD5
44cefac17b05845ccd7e4c5338deef15

SHA1
bf2b666961f82275e696c92ed1ef3546d5daf19a

SHA256
ad8f62761dcbe4c6e6f377e45549bbca349f7c71beaee87d1ceba2318fbc70de

SHA512
970f456f893a4ec25b4ff34da0e2ed034f3be1911d460b27276e264c7e87e34fb0d096f5dd671b72b589279a36cf96a8eaf5e7c89696b2536eb0b84c637b8b77

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Controls.Ribbon.dll

Filesize
725KB

MD5
eeaeb2b8b2e7c93b1b2322488a501790

SHA1
bc59a7ad0b5f9844ca787768ca19afebacd7bf16

SHA256
108cd052d13556f0403538bca07375501c2a4f91ee8a58cc4f296333f18fcb5e

SHA512
213ed726e922358cab9b358b06889106304ab3b370a3cd8ef98103fb8fd9f8b17fa406aff72fac4c4a41021f1b91654ec5eb151f999c409a922399dee3b1031d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll

Filesize
66KB

MD5
95ef90f0f86691f28e2afeb2b21b232d

SHA1
9575d51228c99118c13005fc268fccd4f00e1031

SHA256
4b698c8b79af525b6236c2e11740142274ea41b622ad13a8c8602ba9e6dee9b6

SHA512
ba20623e37fd369b3274180bf0e1af33cdf2c4ac111a4e406a85226bc48f2c365615212fb51fa31d80201a4b3aaa16de681dfa82d9a7142da1d91caef64b1f98

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Presentation.dll

Filesize
28KB

MD5
c44a105c970c9bd83b69ba8106cfd07f

SHA1
e8c5be9ec3f204c693b4b56135a251eddce14fc3

SHA256
779779557bb7e087335d27543b121c62d655a38a7464145b1ab2cdf854f2ae0f

SHA512
4bee883cac90a65eb05b966792556eaef3e2486b7e76a8a011ce4072a99094b05d1ff95081b5a90ba22afa5cfac85336044419ce0972a178d8c30003a33d499e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClient.dll

Filesize
173KB

MD5
4cf72b60f3fab2683cc9172a1320a62a

SHA1
b05e668fa47891ee59b652bd25a6951378e438a4

SHA256
509aa78936231707d5ab2eeb586a7dfe6778e788016b395be8a462977943f604

SHA512
23a7d2502b4f2ecdf40a412d4305c0c1f951f704e5378b2972ddf29d6cfae193dbdeee05218a3538bfb0a7f16309b6326e3d1355e8086e0d3e4f3bd05f11a1ab

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClientsideProviders.dll

Filesize
352KB

MD5
19e6ce61ee45256e0e801e463a4adddb

SHA1
b3c214c3705ae348df58e2c3a294f62ad661c941

SHA256
0ef2fe5fe86af05e00127373c7f7161e3e046934568459fd8c3139465621dd72

SHA512
4ba43e82da26acbe1baf75df03743a7789b827ca7fe92bf02d04d555ddc16d32412bac3cb2c6d0482c1d93e8f795c8e8a217f92302a4334af79fa4dbdaa2975c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationProvider.dll

Filesize
47KB

MD5
c096eef90cdfcdc387ee23a8e10892f1

SHA1
a0d30cabc6054f7d82b77ebdcba5df07caaa401e

SHA256
b94874d7cc3e5c936178ff47071f16fa2d96167c49f5e1f4fbc12356feeb76da

SHA512
f699277480848b79e8736f63c5fb48bfb77727661bd9a15c954e145ac3d9ab74d3ddf57ca0c36b25e9829560c4f7b057717622f1329df578eaeda799c58f089d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationTypes.dll

Filesize
215KB

MD5
050680e418cd9e22bfbb4d91a3ed272b

SHA1
5c6e32652015798a140cac68ebe864c52bbfe87c

SHA256
6cacba4605307f3fb5428334d240cd1ca5b61a97d2655d8cb644f33877451df9

SHA512
ba25044c16cc4fb8cec5bac9ff75372501bfa7a4b3b4b90c62acaba3a08baa72dbdd4ade97f5aeb0a1b16836e1343d89dfb69715d8c765c02096d902f0201eae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll

Filesize
1.2MB

MD5
77f1724391c68a2199050de7b2cb8b4a

SHA1
fbf4899eddcf3e3096ecf7c7abede2f326c4e491

SHA256
4d73a0d1517997a1d79db9e66469000374b98e5d79ed13cd46eb73ab00c10cfc

SHA512
47fb1088e350a0a239f9bea54dd57ccd1cce2b0992292158377dc91a69889bbea3bceb8165d0984bcb50468a4f5c5c3d2927b4db0f20a0e42ceb7feebbe45ac4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsFormsIntegration.dll

Filesize
101KB

MD5
9e79ae38474574622b5f9f6bd4cc120d

SHA1
f7db45f2dfecf6013a34e7f73ae1e23dd5b2db13

SHA256
17786cf59f8e92d0a93191f832772457f45dff8e0140cdc5bc544a7f7fa2ab74

SHA512
d589892c604ada0c4bfd52cba4d93c9fe34d851de0209dcdeed32aea3322a50f2326aa17cfa2d7410e2280d5b8dc804a1392d43e4b1d41d7056ace66f4de489e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XamlBuildTask.dll

Filesize
129KB

MD5
0476614eef18be36b246911a340d5415

SHA1
0015e6f34e17ef5eca346e45a0d62a8381c347fc

SHA256
69b2139bcf6b856d6e5a155478a68e278fceb2edac48dbbd8d0fad7546139f2f

SHA512
809081899909ae4a7b06d6f484758fc69574139ab87146a4130480aca8e1d7b2a5978c2f87b2e220311d71cf23252202f5225b1891855b655db32b9856624f85

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XsdBuildTask.dll

Filesize
66KB

MD5
70f8eba663ce54f2c3d41f08e94fc2fe

SHA1
726eeedf58943c590b05661a53164bc7ac0cf993

SHA256
83f8b7e072075b9b77e949b3d0d151e52015969894ff3165962886d005ed9f6f

SHA512
402d705f89035a54b17c2308c40aee92646c90d54e5b5dfaff79a9c0b56b61ce539ee842334150a3cc3c7ec3f09ff8d654f9892b377a3dafddc3ccfcc9ae5ce9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netstandard.dll

Filesize
104KB

MD5
d8c57644e90707958b64e5692c1e1f25

SHA1
fc73e5eb4e09a50a921392901e22d1dcfec375dc

SHA256
7defbe4057e64b8b40b5277641bc4175f691789fa1ac7a2df11342cc2bef657f

SHA512
774f79332726770b7469ea3da52052796c005bb00df0ad20e8645e9048557f167641164ff1d679434e157e1251202546b8c0ec1acfccf648fb77784e1955c631

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\sysglobl.dll

Filesize
129KB

MD5
759e2cf60340348a7a6992aa940ab151

SHA1
3ba78c5ab64e13c6f59bd0ea8aab8cbd23ff277c

SHA256
106130cfc38c840b67c4bd42b08a43be2a51fc43df5513a91341c70bfe413ad0

SHA512
1b0c58d2a8e0da026fe335597b0b0422ffc36fec5e0449c11f8cbd85f0dfe20ee37a7e5114571122de2b72ce9a0ff839f5d080f3332de1224f984985460b33e5

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsLexicons0009.dll

Filesize
18KB

MD5
f26df6b14010d7b5fa4a2ec0ce219d01

SHA1
658ccf964a0f2f4c7e2ab0c8ee29f56fa5b6d72b

SHA256
a9f0b532114d51e6cdf2a9cc60832d78478aeba0c319da90c780b4a26971a5e3

SHA512
698d088e9117098aee83129c87ced9921e8d0db988baa989e456353d391b22a97aedc4a7b53a0178f2f1cb24b5aa6c94c7c2447fe19822279eda88c760ade910

Download Submit
C:\Windows\SysWOW64\msvcr110_clr0400.dll

Filesize
18KB

MD5
231f862312efcb817a244468f567f4b0

SHA1
ca802d95ad9f9fd3f0c0b8780a4eb0736e058b86

SHA256
3a118856c0e24160f50a5d79c947f62f8bafd1a85133565496e06ceaf088e954

SHA512
14d049d9807f504c776a3401e10e6003ed0486dfed22f0d5282efaae599bf04132092968e2def14ba1bccfb1800f51fa3651452789419aaaf12035bdb48ed31e

Download Submit
memory/1580-16708-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1580-0-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1580-11872-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1580-7836-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1580-7835-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1580-16832-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1580-16836-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1580-16840-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads