8b4852da19283b0cc08010a92efff18d88679720ae1771aba86a595a4fa2432f

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18-10-2024 16:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

585d473754867606952c65397da45397_JaffaCakes118.exe
Size

12KB
MD5

585d473754867606952c65397da45397
SHA1

e656c2ffc85c0d467a985746b260ae5da9e31a1d
SHA256

8b4852da19283b0cc08010a92efff18d88679720ae1771aba86a595a4fa2432f
SHA512

0262d7361e3750899b0a2a0924fdbb4d054daa7ada73cff9ede5fefc5517d9d6c129891723c6df3b0e737b740d10f4813577b7ae3c23f6d56fade91a847038a7
SSDEEP

192:G/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMdy4ZB8:GebFNw4Pk1itKkpAjjI2Ypdmdy

Score

9^/10

adware discovery persistence privilege_escalation ransomware spyware stealer

Malware Config

Signatures

Renames multiple (5856) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 8 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 5 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msoxmled.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msoxmled.exe\DisableExceptionChainValidation = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msohtmed.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msohtmed.exe\DisableExceptionChainValidation = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	msiexec.exe

Manipulates Digital Signatures 2 IoCs

Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wintrust.dll	585d473754867606952c65397da45397_JaffaCakes118.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 1 IoCs

pid	Process
2732	OSPPSVC.EXE

Loads dropped DLL 20 IoCs

pid	Process
2504	MsiExec.exe
2504	MsiExec.exe
2504	MsiExec.exe
2504	MsiExec.exe
2504	MsiExec.exe
2504	MsiExec.exe
2504	MsiExec.exe
1444	MsiExec.exe
324	MsiExec.exe
324	MsiExec.exe
324	MsiExec.exe
324	MsiExec.exe
2732	OSPPSVC.EXE
324	MsiExec.exe
2504	MsiExec.exe
2896	MsiExec.exe
2896	MsiExec.exe
324	MsiExec.exe
2504	MsiExec.exe
1200	Process not Found

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\6eH5TJWawcmL508.exe"	585d473754867606952c65397da45397_JaffaCakes118.exe

Drops desktop.ini file(s) 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.1.7601.17514_none_a026547dd7dc8bbc\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Desktop\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Favorites\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Heritage\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ini-accessoriesuser_31bf3856ad364e35_6.1.7600.16385_none_7ff91f5d2dd6c770\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\FreeCell\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Recorded TV\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Globalization\MCT\MCT-US\Wallpaper\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Characters\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_6.1.7600.16385_none_480c0d8bd31ae43f\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..sktopini-sendtouser_31bf3856ad364e35_6.1.7600.16385_none_64398328adc9c59d\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17514_none_75d78dc0bb37c026\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\Purble Place\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\R627XHFP\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Favorites\Links\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Afternoon\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Videos\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Pictures\Sample Pictures\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Festival\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-m..ttheme-au-component_31bf3856ad364e35_6.1.7601.17514_none_36a5754e72dd8aff\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\98Y29LGS\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Links\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.2.9600.16428_none_197d7b3a29314757\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-m..-gb-links-component_31bf3856ad364e35_6.1.7601.17514_none_0ea01e97df141032\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CUMHXU73\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Pictures\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-m..ttheme-za-component_31bf3856ad364e35_6.1.7601.17514_none_a5926b147a413e6a\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ini-systemtoolsuser_31bf3856ad364e35_6.1.7600.16385_none_7ca09f65fd387e58\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Calligraphy\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Savanna\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_8.0.7601.17514_none_da0c2f9edf5b1353\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..undthemes-afternoon_31bf3856ad364e35_6.1.7600.16385_none_2a05e57d5ab3659e\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Web\Wallpaper\Architecture\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..-soundthemes-garden_31bf3856ad364e35_6.1.7600.16385_none_f7a4bf1e15863e21\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\OM66BHWE\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Libraries\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ktopini-systemtools_31bf3856ad364e35_6.1.7600.16385_none_da623240a154f357\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\Mahjong\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..-soundthemes-quirky_31bf3856ad364e35_6.1.7600.16385_none_e55404efe49bb9cb\Desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Desktop\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Recorded TV\Sample Media\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini	585d473754867606952c65397da45397_JaffaCakes118.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe

Installs/modifies Browser Helper Object 2 TTPs 3 IoCs

BHOs are DLL modules which act as plugins for Internet Explorer.

stealer adware

Modify Registry

T1112

Browser Extensions

T1176

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\NoExplorer = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\ = "URLRedirectionBHO"	msiexec.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_prompts.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wuwebv.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\asycfilt.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\KBDFR.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sqlwoa.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wscapi.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\devmgr.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\find.exe	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_script_blocks.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\angel64.inf_amd64_neutral_6bed16c93db1ccf3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sendmail.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitsTransfer\es-ES\about_BITS_Cmdlets.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\com\comrepl.exe	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\iexpress.exe	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\msvcp120_clr0400.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidirkbd.inf_amd64_neutral_2b561a02e977e2e3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnlx00v.inf_amd64_neutral_86ff307c66080d00\Amd64\lxkpclui.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\version.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\about_arrays.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\dinput.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnkm005.inf_amd64_neutral_c03c9e328608873e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHW06A.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\migwiz\migcore.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\mscorier.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\averfx2swtv_x64.inf_amd64_neutral_24a71cdaabc7f783\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00z.inf_amd64_neutral_27f402ce616c3ebc\Amd64\CNBSM4.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\iepeers.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnok302.inf_amd64_ja-jp_708c81a8b0ad8846\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\UltimateN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\KBDGEO.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\networkmap.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\NlsLexicons0414.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\HomeBasic\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcpq.inf_amd64_neutral_fbc4a14a6a13d0c8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnod002.inf_amd64_neutral_a10c656b6c7c053c\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SCardDlg.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\SpeechUX\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_data_sections.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_hash_tables.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\digitalmediadevice.inf_amd64_neutral_6fd673519d66ab20\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\Temp\{522f6bf6-ae20-0f66-d982-a746d010852a}\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0021\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\HomePremiumN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\SpeechUX\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_remote_output.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_aliases.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp8000aa.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx005.inf_amd64_neutral_f65eeb9bff6bd8f3\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ql2300.inf_amd64_neutral_ca8487daf77ff7cb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\kbd106.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\NlsLexicons001d.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\p2pnetsh.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wiashext.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\catsrvps.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00d.inf_amd64_neutral_0600b2ba575729f4\Amd64\CNBBR311.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\ncrypt.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_parameters.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00b.inf_amd64_neutral_2e6b718b2b177506\Amd64\EP0NH434.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\es-ES\erofflps.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\msvbvm60.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\NlsData0414.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sisbkup.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnbr006.inf_amd64_neutral_f156853def526447\Amd64\BRURD23A.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216153.JPG	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21448_.GIF	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\epl-v10.html	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\System\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\fr\System.ServiceModel.Resources.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\System.Printing.resources.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_m.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Web.Entity.Resources.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_settings.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_kn.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\AUTHORS.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\logo.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\28.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_pressed.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_off.gif	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50F.GIF	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_over.gif	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left.gif	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\System\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_bullets.gif	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh001.htm	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0175361.JPG	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\FreeCell\FreeCellMCE.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21328_.GIF	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\es-ES\picturePuzzle.html	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_cloudy.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\UmOutlookStrings.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBCONV.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPTSFrame.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\es-ES\currency.html	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\de-DE\css\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382970.JPG	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50B.GIF	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre7\bin\javacpl.exe	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.lnk	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\UIAutomationClientsideProviders.resources.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\System\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-2.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1033\MSGR3EN.DLL	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files\Common Files\System\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Management.Instrumentation.Resources.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.PNG	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\1033\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfig.zip	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\de-DE\picturePuzzle.html	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400002.PNG	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR33F.GIF	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\settings.html	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\logo.png	585d473754867606952c65397da45397_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\winsxs\x86_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_8aef539b8d387fbe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-msmpeg2enc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ce23d1c17a69de4d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ceservice.resources_31bf3856ad364e35_6.1.7600.16385_es-es_01cd34f6f16540a2\ReadyBoostPerfCounters.ini	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..e-cleanup.resources_31bf3856ad364e35_6.1.7601.17514_es-es_f2b649efd693c800\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-t..languages.resources_31bf3856ad364e35_6.1.7601.17514_sk-sk_f93f2cce557c0aed\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\msil_microsoft.security...cymanager.resources_31bf3856ad364e35_6.1.7600.16385_it-it_5142ef2d57543048\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-s..tore-main.resources_31bf3856ad364e35_6.1.7601.17514_de-de_d985c5c2ab4a43c4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_de_b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-localregistry-l1-1-0.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\wow64_microsoft-windows-notepad_31bf3856ad364e35_6.1.7600.16385_none_d5642974be118415\notepad.exe	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-fdeploy.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_aff391789079b45a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-wlanmediamanager_31bf3856ad364e35_6.1.7600.16385_none_f96bf4d6ffe3f71a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-smartcardksp.resources_31bf3856ad364e35_6.1.7600.16385_it-it_9395ac8d670c4c46\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-t..nputpanel.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_9f6e2269f12dae95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_8.0.7600.16385_ja-jp_edf96fb1262f5b5c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_ee871b8ab496c12c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-rasapi.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b8c6df2cd7182bac\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-smi-engine_31bf3856ad364e35_6.1.7601.17514_none_f63b350329826c41\SmiEngine.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-t..shell-adm.resources_31bf3856ad364e35_6.1.7600.16385_it-it_fe68f514b890400e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\wow64_microsoft-windows-p..shell-mui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a733017dc4416ca6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\b308b9c61f65cf2dfd876031ee385ba4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Manaf08ebffb#\2252d66ed466508b3e8ab4d944669b9d\System.Management.Instrumentation.ni.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\msil_microsoft.backgroun..anagement.resources_31bf3856ad364e35_6.1.7601.17514_en-us_871eaa807d00cbbf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\msil_microsoft.iis.power..framework.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_2a3dda7028cf9576\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\wow64_microsoft-windows-i..l-keyboard-0000042a_31bf3856ad364e35_6.1.7600.16385_none_62d4eb54a49a8ebe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-setup-cleanup_31bf3856ad364e35_6.1.7601.17514_none_5b9d8788858bb5fb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\AppPatch\AppPatch64\acspecfc.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Workfffcbcd8#\8e020cc06c4052a50083fa7eb060e92c\System.Workflow.Activities.ni.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Globalization\MCT\MCT-AU\Wallpaper\AU-wp6.jpg	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\msil_comsvcconfig.resources_b03f5f7f11d50a3a_6.1.7601.17514_fr-fr_74872b00aff740df\ComSvcConfig.resources.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\msil_microsoft.powershel..hicalhost.resources_31bf3856ad364e35_6.1.7600.16385_de-de_9f20a6abfea7ad81\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft.grouppoli..mpleditor.resources_31bf3856ad364e35_6.1.7600.16385_de-de_3fd7798a60d65add\Microsoft.GroupPolicy.AdmTmplEditor.Resources.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\wow64_microsoft-windows-p..ll-preloc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_27fbee50ef7f6588\about_do.help.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.1.7601.17514_none_04801f69e1dbd8e6\WMIMigrationPlugin.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\es\SMDiagnostics.resources.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-dot3svc.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_91dde3f80ea85a5a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-m..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c155295e758629d9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-m..overy-adm.resources_31bf3856ad364e35_6.1.7600.16385_it-it_38e83aea4b898ee1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-net-command-line-tool_31bf3856ad364e35_6.1.7600.16385_none_ae2743278c281682\neth.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Accessibility.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-b..ding-shell-ultimate_31bf3856ad364e35_6.1.7600.16385_none_209493e8e411a4e5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-certutil.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2c17be8337e2e190\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_it-it_f7c88fd818ef8148\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\wow64_microsoft-windows-i..l-keyboard-00000427_31bf3856ad364e35_6.1.7600.16385_none_5034bdc8b093d098\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.B83e9cb53#\67215fe430cb12f890a7dc19fd53aa55\Microsoft.Build.Utilities.v4.0.ni.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\62765bb26133f581e10bb7c866f35c83\System.Net.Http.ni.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-gadgets-weather_31bf3856ad364e35_6.1.7600.16385_none_4db0b909695af8f9\docked_black_few-showers.png	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-m..layer-mls.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_4d4268ef91aef8e4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\9d5e83b9d71682d12ac040f8f933b44a\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.ni.dll	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17514_none_75d78dc0bb37c026\Monet.jpg	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\wow64_microsoft-windows-i..ibinaries.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_8bd619bfc102154f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-ehome-epgtos.resources_31bf3856ad364e35_6.1.7600.16385_de-de_80c638890bc8607e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-f..overy-adm.resources_31bf3856ad364e35_6.1.7600.16385_it-it_36533c7ab71f6461\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-msident.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0a54395e36fbc277\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources\6.1.0.0_es_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-bits-perf_31bf3856ad364e35_6.1.7601.17514_none_914aa0fa1749a409\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..thmtpcontexthandler_31bf3856ad364e35_6.1.7600.16385_none_98d68f6e6e99a5c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-parentalcontrolspanel_31bf3856ad364e35_6.1.7601.17514_none_ff675a2d4d66d4bc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\office\14.0.0.0__71e9bce111e9429c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-b..r-edition.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5a1145f59b31f9be\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	585d473754867606952c65397da45397_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b87da52fa7e9b700\401-4.htm	585d473754867606952c65397da45397_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	585d473754867606952c65397da45397_JaffaCakes118.exe

Modifies Internet Explorer settings 1 TTPs 26 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\AppPath = "C:\\Program Files (x86)\\Microsoft Office\\Office14\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\Default Visible = "Yes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ButtonText = "Send to OneNote"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\MenuText = "Se&nd to OneNote"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\HotIcon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBttnIE.dll,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\CLSID = "{1FBA04EE-3024-11d2-8F1F-0000F87ABD16}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\AppPath = "C:\\Program Files (x86)\\Microsoft Office\\Office14\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\Icon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBTTN~1.DLL,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ClsidExtension = "{FFFDC614-B694-4AE6-AB38-5D6374584B52}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ToolTip = "Send to OneNote"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\Policy = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\Default Visible = "Yes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\MenuText = "OneNote Lin&ked Notes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ToolTip = "OneNote Linked Notes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\HotIcon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBTTN~1.DLL,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\CLSID = "{1FBA04EE-3024-11d2-8F1F-0000F87ABD16}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\Icon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBttnIE.dll,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ClsidExtension = "{48E73304-E1D6-4330-914C-F5F514E3486C}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\AppName = "onenote.exe"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ButtonText = "OneNote Lin&ked Notes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\AppName = "IEContentService.exe"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\Policy = "3"	msiexec.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-20\SOFTWARE\Microsoft\OfficeSoftwareProtectionPlatform\Policies\PayloadOverride\	MsiExec.exe
Key created	\REGISTRY\USER\S-1-5-20\Software\Microsoft\OfficeSoftwareProtectionPlatform\Policies\59a52881-a989-479d-af46-f275c6370663	MsiExec.exe
Key created	\REGISTRY\USER\S-1-5-20\Software\Microsoft\OfficeSoftwareProtectionPlatform\Policies\PayloadOverride	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-20\SOFTWARE\Microsoft\OfficeSoftwareProtectionPlatform\Policies	MsiExec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2F	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\odcdatabasefile\DefaultIcon	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{FC8E6CD1-E6F2-4A8F-A99B-2F3BA2B3DE6B}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{D9230E09-3737-43F5-8C78-BC4C83DC296C}\VersionIndependentProgID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-compressed\Extension = ".tgz"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\odcdatabase.1\HTML Handler\Icon	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C514A18E-862A-45d3-8A5E-62CF54D912B6}\TypeLib\ = "{EA3E6E3C-5130-49c1-8EDE-F889CD0F4429}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Office14.Authz\CurVer\ = "Office14.Authz.1"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{CB3F7806-3CB4-409C-BA3B-12D642BE371A}\VersionIndependentProgID	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{CB3F7806-3CB4-409C-BA3B-12D642BE371A}\Programmable	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OneNote.NoteAnchor\CLSID	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{5554F805-47C0-489D-AAE6-2D11C6E4A3ED}	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.QuickViewShellExt.1\CLSID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.docx\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}\ = "{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B8D12492-CE0F-40AD-83EA-099A03D493F1}\InprocServer32\ThreadingModel = "Free"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TaskLaunch.TaskLauncher\CurVer\ = "TaskLaunch.TaskLauncher.1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\xmlfile\shell\edit\command\ = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE\" /verb edit \"%1\""	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-excel.12\Extension = ".xlsx"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{A394DCA9-3727-11D4-BD85-00C04F6B93A4}\VersionIndependentProgID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{2D95B6CF-1BC3-4FA8-B52F-474CED0DDD10}\1.0\HELPDIR\ = "[{2D95B6CF-1BC3-4FA8-B52F-474CED0DDD10}]"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.pptx\ShellEx\PropertyHandler\ = "{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{807573E5-5146-11D5-A672-00B0D022E945}\InprocServer32\ = "C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C514A18E-862A-45d3-8A5E-62CF54D912B6}\Version\ = "1.0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{453ECAA6-9C91-4e7a-A9F0-7289F8940A64}\TypeLib\Version = "1.0"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.xlsb\ShellEx\PropertyHandler	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneNote.NoteAnchorCollection\CurVer\ = "OneNote.NoteAnchorCollection.14"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{E87ECCF7-3CBA-45CF-B58E-1A6630D39199}\InprocServer32	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{453ECAA6-9C91-4e7a-A9F0-7289F8940A64}	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\xmlfile	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\xmlfile\shell\open\command	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OneIndex14\shell	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{977D8304-FAAA-4331-81DB-B67FC2134A38}\TypeLib	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.CInfoTipShellExt\CLSID\ = "{D66DC78C-4F61-447F-942B-3FB6980118CF}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\URLRedirection.URLRedirectionBHO.1	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\odccube.1\HTML Handler\Icon\ = ".odccubefile"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\odcdatabase.1\HTML Handler\Icon\ = ".odcdatabasefile"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E772CEB3-E203-4828-ADF1-765713D981B8}\ = "Microsoft OneNote Section persistent handler"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneIndex14\ShellFolder = "{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{73507951-A405-4E95-A197-B5FE6C6C001D}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0006F045-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.docx\ShellEx\PropertyHandler\ = "{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OneNote.NoteLinkContentService\CLSID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E390D9E-7641-4819-BF38-8EEE08964681}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8DE0A0A1-96D0-4B04-8EC6-2DBF9BD888DC}\InprocServer32	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\XEV.GenericApp\EditFlags = 01000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D9230E09-3737-43F5-8C78-BC4C83DC296C}\ = "OneNote NoteLinkMeta Class"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{9FBC2D8F-6F52-4CFA-A86F-096F3E9EB4B2}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8075731E-5146-11D5-A672-00B0D022E945}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.ImageExtractorShellExt\CurVer	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{096CD76A-0786-11D1-95FA-0080C78EE3BB}\ProxyStubClsid	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{2D95B6CF-1BC3-4FA8-B52F-474CED0DDD10}\1.0\FLAGS	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{34CEAC8D-CBC0-4f77-B7B1-8A60CB6DA0F7}\PersistentAddinsRegistered\{89BCB740-6119-101A-BCB7-00DD010655AF}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{99D651D7-5F7C-470E-8A3B-774D5D9536AC}\ = "VSTOAddinLoader"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\Version	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{64654B35-A024-4807-89D3-C6FDB5A260C7}\Control\ = "VSTOFormRegionsHostX"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5554F805-47C0-489D-AAE6-2D11C6E4A3ED}\AppID = "{C17413EE-FCDE-4B55-A238-7788D1026DD4}"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.vss\PersistentHandler	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.ppam\ShellEx\PropertyHandler\ = "{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5554F805-47C0-489D-AAE6-2D11C6E4A3ED}\ProgID\ = "OneNote.NoteLinkStoreService.14"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4039B326-9F27-4B4A-B460-47A0C6A39D5C}\InprocServer32\ThreadingModel = "Both"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{200C17D6-6854-439D-AFFA-0BB35D09B8F0}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.potm\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{760681E7-B985-41CE-BCBE-2985A1DFC61C}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5A98B233-3C59-4B31-944C-0E560D85E6C3}\InprocServer32\ = "C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll"	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
880	msiexec.exe
880	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeSecurityPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeSecurityPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe
Token: SeRestorePrivilege	880	msiexec.exe
Token: SeTakeOwnershipPrivilege	880	msiexec.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 880 wrote to memory of 2504	880	msiexec.exe	30
PID 880 wrote to memory of 2504	880	msiexec.exe	30
PID 880 wrote to memory of 2504	880	msiexec.exe	30
PID 880 wrote to memory of 2504	880	msiexec.exe	30
PID 880 wrote to memory of 2504	880	msiexec.exe	30
PID 880 wrote to memory of 2504	880	msiexec.exe	30
PID 880 wrote to memory of 2504	880	msiexec.exe	30
PID 880 wrote to memory of 1444	880	msiexec.exe	31
PID 880 wrote to memory of 1444	880	msiexec.exe	31
PID 880 wrote to memory of 1444	880	msiexec.exe	31
PID 880 wrote to memory of 1444	880	msiexec.exe	31
PID 880 wrote to memory of 1444	880	msiexec.exe	31
PID 880 wrote to memory of 324	880	msiexec.exe	32
PID 880 wrote to memory of 324	880	msiexec.exe	32
PID 880 wrote to memory of 324	880	msiexec.exe	32
PID 880 wrote to memory of 324	880	msiexec.exe	32
PID 880 wrote to memory of 324	880	msiexec.exe	32
PID 880 wrote to memory of 2896	880	msiexec.exe	34
PID 880 wrote to memory of 2896	880	msiexec.exe	34
PID 880 wrote to memory of 2896	880	msiexec.exe	34
PID 880 wrote to memory of 2896	880	msiexec.exe	34
PID 880 wrote to memory of 2896	880	msiexec.exe	34
PID 880 wrote to memory of 2896	880	msiexec.exe	34
PID 880 wrote to memory of 2896	880	msiexec.exe	34

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\585d473754867606952c65397da45397_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\585d473754867606952c65397da45397_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops startup file
- Adds Run key to start application
- Drops desktop.ini file(s)
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:2408

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Event Triggered Execution: Image File Execution Options Injection
- Enumerates connected drives
- Installs/modifies Browser Helper Object
- Modifies Internet Explorer settings
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:880
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 71A82ED9E9715EA1A499ABFC8E828929
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:2504
- C:\Windows\system32\MsiExec.exe
  C:\Windows\system32\MsiExec.exe -Embedding 1C1BE96E46C84E22A4D09C2CDFA532D7
  2⤵
  - Loads dropped DLL
  PID:1444
- C:\Windows\system32\MsiExec.exe
  C:\Windows\system32\MsiExec.exe -Embedding 33E18157DCA748245D53CE315456C921 M Global\MSI0000
  2⤵
  - Loads dropped DLL
  - Modifies data under HKEY_USERS
  PID:324
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 97A6D9FCD224DC4395DD0542753B5E86 M Global\MSI0000
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:2896

C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2732

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Browser Extensions

T1176

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-312935884-697965778-3955649944-1000\desktop.ini

Filesize
129B

MD5
3e4afbbb236fad10a20fe8a162d9dedf

SHA1
15f497d6c7109bcf217f4d0dc32cca56cf45d661

SHA256
aaa0b6babc4998400370498fef5813dbb1b453fb4e5cd9734ee452899eab80ef

SHA512
9bc7ab4774ded4ebbc9a9d8fbbe08b0dd7e8ca5504eabba6d8c960655534abddbe2f0d41899369b261ab6a5ade1fb88ae8184efe6abd41e45a4cbe97c1a4d5df

Download Submit
C:\Config.Msi\f768e8d.rbs

Filesize
219KB

MD5
f5877ba91475f9795db0cb73d40b3532

SHA1
3fbe889b41515795afff02b2a8e26e20c5b5f043

SHA256
00ce22daa1278115d155a306e03b02bf4cfbf62c27ac7776560b7ab346a080ee

SHA512
0faf607427a5c11f90215b2ee0bb292ac41306500b3478786e31a1210e143ed7ddc80630814a9aa520d5e522a40af3bc89788bbaaf22fbddbc4bb8fe7fbf27da

Download Submit
C:\Config.Msi\f768e8e.rbs

Filesize
198KB

MD5
1dd9e7f39291a6f185aa200b5332d050

SHA1
bd5e18ed63055455141dcefa65712d6ff9819445

SHA256
426b5bb7db26bf41a69a5f40b7f9d3accaef851dca8804644b8aeb5cf2c3a5d0

SHA512
4d7f6875db919b2987e516c2b07e3020dfd263e908cdce6c6fc3d51944e8fe5dde59079c8a3b5b8d5e2876a04d547ad095c773afb5921ab182e550a3b1693a25

Download Submit
C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
372B

MD5
993eaa8792620d40b347403c129d3dc8

SHA1
71934325ba9b3a7190ace37a23799c04e23ad414

SHA256
4469cf5d3febfdbfe5c144e9a21985f3ee9e9d338a58abbd41ff7fef74f08f25

SHA512
d1cac20172a96ca9aab66b6d86bda7cbb9b9cd06ba02f5a80abf68d2b39c6c7c64214ba167b2275c88358cd6205782bf8adf081b5e7faf6c556d23aca3211ffc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF

Filesize
341B

MD5
39016b2580460d60b278c31ac29f0a5f

SHA1
621464a50f2d1d8b4a285a7a2ec709cd77617a7a

SHA256
61cccb1e8ffe18805e3945a0930690710786d21ebb2fa70373c0e1d63f3239ca

SHA512
e38990d67929c9a6913a2297896032c059c735ae25bec120c3fbb5f106c4121a4b014b2fa1b456903d25a055fc9610c2bc2ad9728e6efe315ac8069b2d9b6f61

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF

Filesize
222B

MD5
01b521c0c0f87210be09c5a8780bba23

SHA1
7b0bc5c2ee8fd26d08110bc7f9ed8ffa3cec8f62

SHA256
9b8c9e16d183dfafb27271b9a785204ce8ef8cd9f35e79ea0887480ec736d800

SHA512
531881fac3e986f03a7ec8ae874116599f78214b0bc811f516bdc3f6eae43f52c365d8f313512d2e9fe92a7f27dc7694a8cc6e4a058c8989502710e04a7b606b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF

Filesize
24KB

MD5
333618b9480a95f457e2f98775fce971

SHA1
22a64b9fd2d192a40b529d3093718cb2d77dacbe

SHA256
0cc5defcf67f80926b74efbb82fd48bd923ec30ed84bba567ce5aa44b09aeaed

SHA512
65695bafa47a2761cf513b66389e490e264de2ee4a09cc5d7087b6f38278e74668cd1e635c1a3ecc38664e02bae50c346247a9f0572a185be0a34432b36f35ed

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF

Filesize
185B

MD5
8d6dc08033ca7d846ff831cb8626b540

SHA1
a64d069859ff877b7af7bb660ac6c7f9ae681527

SHA256
4049506414abddf65b34627dbeb692b9fcbc943120a716495bfda3fb5abb4e4b

SHA512
0668c21126025a1dfdff57e08ab822f255740b601d47cac2b99e2732942434ee3cd7352f345b310ea4a1cbdcb63b627a36ca8fb74c7fb35302b56a2a9a36679c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF

Filesize
496B

MD5
8101687dad493e9505987f19282945e3

SHA1
799b53e7ec3f3399da194032cd5d8b8f43ba6d05

SHA256
4a179947190c39655c2fb10028f94467adf3665b95b0b64bdda6468388492138

SHA512
45c71e24a103928ba5613394d11511aee2db32836e644df2503408a4cbcd381f4a6f6a89a5bfa90c7b6dce07f50d0056514309797573479690ab3b3e5f326f49

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF

Filesize
1KB

MD5
7b6537fcd1230c20c4f32be257b924bd

SHA1
5f14acddff12c28743e3a76b2a706136fcc5e349

SHA256
d17b9b5523191c282d703d5dcf3ec488930cd9c84bf7e02578082b5d635dc5ca

SHA512
d70e79dfbc62572444a3dbd47129b1974f21893976f121b4ada91bb7b7e5d178384ca1bf29fb6670ba215eed6642bab731ac7fa134918c24f1c0a9d2b5b331df

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
341B

MD5
1acdeea97a51f3d105c3767e8f32339f

SHA1
e25b904d054b1517cec012eb2d0ac7dc0a6101ac

SHA256
5495d655f023c3470c518fcfa6db8482da68edba26f1d87ef45de99740f1d2aa

SHA512
83d19fc7bc778b8871b4be0bd7aab656da12ed1a0e2dfe293e9cc1289f63719ba9b266372aff1aeec2023153f3a85d24af2e30991cc8c8606a31cdb4569cbefd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
222B

MD5
8cf9b1457121340b48decf44ab388785

SHA1
9418a4176e05e12feb6ae9732cada4173d3e4484

SHA256
f5749a243b708bb3c36751390ba6515609ef2e3184b88b27d6d1c0e92cc79052

SHA512
53381c4d0e52c071ca69efb7c4d4a8a154129513ce492affbce81b317a2210c23df66d59602701d57bb046fb3ce680ecd5bcdd4edd28a8f3578abdf899c3c2d2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
eda50d0b11f5de989b5568aaf8190316

SHA1
8506bdd91006d1993c0ff77fa8537b486cf7ebd7

SHA256
ea9fd72799a97e9b66ba0e6369eb273e723e125a9f7c0f5dda300cbd0a2a1fa7

SHA512
55a8896c5a146f4abc1e40390569f8d4f44384403110e4fd87b5685b5a3f5f625f9465fd81b10ac0c8ced4c72c863a877b75fff9d8320ce5dc524b95a1de2a85

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
28513e4f21f51967fa01b37daf092747

SHA1
5dcc0ba5bf78506b2bd0c44fce964478306a9eaa

SHA256
ae47766dfef3fbeff6765011499ac8d4d2292efb6e24f6d83f9f37397020c29b

SHA512
8e1761dfa8ff0f8eb3e4a5d0841e6e867b9dc86da6febcec9431b1fe948e2a00d5746ded1a7e5598c36ef62b43396cd938df10457a4951813f3074b432a74599

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
d5b4f32ffedca34628bc07164e913a7b

SHA1
cce01b780dc6387d82e088e6c702be89ddb58efc

SHA256
dc67f736294d27c70fedce60b3e0b8eb84fde17f674875191cb734e430f1cd96

SHA512
afb98d195fd86dcdf91c0b29e1c974a57451626429786222bf99d51c55c05e7de818c07b1a86bf6f79b953b09e71fb325f8055990a4c720ef7fc0622e4577d80

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
fb5c65dc2815c64e6895f73d69cc684e

SHA1
8e4809b88c302c2b19afb1bc31fce3dee2655ef5

SHA256
12aa8e3e50ae1e03c9b730fb9fafe48d40a3557e1a6a38435992e6383f4ecb48

SHA512
9a73cae092a7d2e9ce88a2f4c7a3b4f4ae3725a6105aa93c7d09e0877d407992d6cc8a6e4ccaaec0ef6d19c975caec2006fe0a6df4183769dda288eae25148c1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
106B

MD5
17b2a8d7947616b4c84e03a618948227

SHA1
2933334be0635fa7095d1a0619ae6c56cfabb73e

SHA256
aa9706fbf1478d85f081a84bbc73aa84ea30f83babc069046fee5d66a8100d9c

SHA512
3c806633401364743136f53b531bf23ea41b4e7c49f2ad9f85015daa475e7a545ed44e93366ec0b62a661374901ab438aaeda86536a0483439732586dd81a0b3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
57042229031c7fa9dfbb587f808cb4c2

SHA1
f4519864cb20f448aa626ad8ef4b3c1270c1a22d

SHA256
cae697a1065ac0716602d55782d17a3a66d3605cf05bc00b94351e76fd8a08f5

SHA512
67e962ac330122bda89c5ef9e74d73c228d84575ba9e8318d9c44cb1920e1baf0951d0fa59bbb4d1fdbc5d658676bb155a04c6e923855729e21454b590f9993f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
839157dfd156d5f6abb5c998ade2b715

SHA1
111c1c9f6cb60da835c1da9ff8e9b309feacb9a5

SHA256
74cdedd9e1f5e1f1d050b89cbd8acc1bcfb0c8d1a53ddabd48dd2619f1e3dc96

SHA512
f8db7494b1add5c3f3b98bd8b0d7228bfac30feed90c94177b443b564614b0f893f9ea6790c3212b78f514411301cfa6a2873e1dbd5c326f8a870903612449db

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
e78339a21d98a059936f280bbb6da546

SHA1
edb941469dc604176b618ad86c5f283c677187bb

SHA256
fc47e3a5a7894958f336c3853675a2ade5b28c4c6c5c6da0be1d7eff8488e49a

SHA512
cf3caddcbf6ee2f3af506fbfb9fd1e35b6431802cded03e562ab9e47d845da635215ea2636322760b27b4badfcfb9c2d27dba018f7246723f1dac2c6346122fe

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
4074619a6efa03c48679938452b38fba

SHA1
30e3411c45469db099f66d0744dd57d1976fd6fe

SHA256
7aeff9495ea88700adf1dd3b25778a22dcbcfd24543fa16fe2300c5de0a0f0cb

SHA512
da4c32c7e2c7563ce500dfa1e6ae8f282c011034e8c9f917b5e9015fb96b768d41a537aa81456b42bd198a01b457d75961ef369e409fc40e023ceabfa2fc367a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
cf4c92950d73cde1738b15573a18d440

SHA1
11f92ef861923684caef89ffa858ad6240fceb6f

SHA256
ae72dc3d07a6c6626e5051dbe61d78e707d9ffe75e8ad669ab099df9868b9dd8

SHA512
b5c03d13e941cdfe2e6379069f25ddb506844f0a8006c3ad08b19d25446fd4ec6f45e5bf53a2d96cdfbddba186ea9177241f06fa9e4dc69844f37beb469a7d27

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
c488299e6e22765c420c71c385e0ef61

SHA1
6c43c94a70658ebd3a03a11af367605c654ad0b1

SHA256
d5415a213f0bb7bd548c35de7c39f58fa2bca82a74dfdf05f8c7dafdb966d1f5

SHA512
709c68dce7ba174c4dcd7f879747b6e39c27acaee444c0799122b86b01439ebca080a7046ab9dceb4dbc6b124fe90c9370419b4f9c8120a33204db595e6d65f8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
0e100f9689665bfa4cd9581866e911fb

SHA1
29952ab10caa19f93da998710e3ed8619f372ff1

SHA256
c81907b25bbdc3e8499fe2ba8c28a9f79c9b84f91fefd417497937acf520ecb4

SHA512
e8710a5b2fd7f97e40d8354970fb53e0787a6908f41fb11b7529e55cbae352f3dc74ab15ebdd7c4a1bd1287d77155f83983f7a300e5573036983c653647b4be1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
dddd646cc86136875cca0dc222470b80

SHA1
e357e3eb6156dcada99aa0a41f87f6eda5bad7e8

SHA256
bead8e43ddaa766add7264c99b98dc7adc53f20ef8722572ef39d6c133a53705

SHA512
54b8a9095aba8a4110006fd238e906fba8931aca304a5974316c309b41875ce6bfd2d967e36f9a600cdd95ebdd3dd0e7577e41e2b403f82b6b2336a4a311267f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
6KB

MD5
7955567de9a434417fd44ab43da50214

SHA1
7060fc3e6845be933a1f012509ede29f3fb53ddd

SHA256
0fb33a2fe17e4838ade2648e391167decf0932d0798d540b9bdd06e818212aa8

SHA512
e49eda341b0f42dd88918c1d069d91adc31966f7a1f7226e4f76b80dee3dbd68b40c431a4e6bcc243060d23f1687da6ab12104c17cf8760bd57867469d5a00b7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF

Filesize
255B

MD5
83c64a99f8519d07665c7cc2358c3521

SHA1
196f6cd7653b186871900002d1fb5fed72f10823

SHA256
37c5786b091f3011b2daf04fe56d416f3ec5970947957d065c7300cd217f64fd

SHA512
c2948106bcef78e6278b1e795b71a261ac31a0bbde6731514b47f95af0f3580ea2322006185a4cf9b71c564dba6f10d9f76869b35d0c21f9ebd31b7a543a47f4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
323B

MD5
723692c7b991a8fcfa4331ead024230e

SHA1
68d3b3f00b16240fd4a860beb3d4b298f68921ce

SHA256
55ff9382a90c7cc3d8dd37f7ae949934f08540e18a5ab11d0138c2044a2e16f3

SHA512
173d8f920030436fb9f33f4e7eefac02b0c1a3e1bdddbfae6f513ce08ecb443b64bf7d9c8a93a7886bf7724035f0fcec1efd28cc8b72276cedbd3dbefbdee17e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF

Filesize
367B

MD5
1eeb851368df7c714512bc5f01661d80

SHA1
0da1c46b87bd00ece94716d2842851c870248d71

SHA256
30011ca9c282990e8314cf7331bca57b5a5ad0f9fbdebff300da7ec8014db417

SHA512
e0dd0a57bead33ec873dc6feb8fbc5c694b489fa8b02be1e81084e2acaf73fa7d844a1e3d07a51e508564ee01c3169459425a48adafabf0c7688faa6cd2371d0

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF

Filesize
148B

MD5
ca5097f1805f77452a5f0863668c26b9

SHA1
7e7aa08ea36ef44bdf47398029d86ae85bf96eaa

SHA256
f9bae2d0ad7676e5107e0f5882e2161837380da7193169be50eb0805b680c562

SHA512
37ae03f636b5ec786e191d5b987459db008b1f947048bd2b5f4a2d20b3e7d5b785b931114a462eae5de67576c7cd7a43a76c5c9f5cc6a1bb2349434d7e73c404

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF

Filesize
440B

MD5
e737553235fa1b799b463a50a38cdac7

SHA1
cadee2c8dca132e133176678b26da498e57bc2b0

SHA256
de2bbca18c149c858475d20f74b4895b53c78f924a4cc25160deff0d0a01938f

SHA512
e26f27737e459eb8366de351c4bab67622fc55acb8b032e99d91a27779e9eb687422440f04f2ee879148cabae927bdfaf248299d99dd86dccffc13a806905444

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF

Filesize
462B

MD5
1b3ebeb04232c307ca770acea12232e0

SHA1
14b9b9d9476bc59468cc388ef9c2e2731552ce32

SHA256
9fff0ca05c53a428930aa82fad3d2f2865584e9ec581ac1ac2ac0e484502b439

SHA512
b4eb87a086de6e0040dedc27f19528bd8846e795f183de6f230572281d48375dbef604214266a33b780805351e7bebd0db43f8db7fd78668daf3c3fc0caa8b5e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF

Filesize
267B

MD5
64b02e098a7461ac80927ac53f4f2e52

SHA1
51d883bd083c4be0156bac901dd2f727a874902d

SHA256
739b52682bd95bd78b3af4ab2a47165e191d656c016ead59805425a2779762be

SHA512
e2a04a54d8337e5bb45c7e57d22c5e373e5bba3411b17004c25f4150b2f2b440900db4e88e95ceb1b079e40c5a21d275a30ed70a6ab2372ecdf6e42720e2c4f6

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF

Filesize
2KB

MD5
ec628a7998b3f639b46fec5c9fa944c8

SHA1
e34e527698d9f208717e1ecce13cd177778e7d44

SHA256
7c080dfce2eb325d763b014875c361187db9c3e4e6fc630d9a7fb43786a75bbf

SHA512
364778301fbd8aa9cdb5808d0dd32302113b8b331703bbbd62142736c9c4094e3f89bf4584029710a2e6d1e8615357ba0c1dbda633e38ee5dece65f042eab244

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
233B

MD5
45f1c87340eb73104c3d0906c1981555

SHA1
3c26da1f78b6cae58ffce54226a0fa24d59f05f7

SHA256
ad2acffb7f7b1554c1baf5b6c60965cf80da5813e1ff82985b801718323a5b39

SHA512
6027f0131b3982b6ede1fb3073e4d3ccb68fee0a4598a79e8e5e64408e7e9c89d051089ac15cad28f63cb274e88c416ef89457049f3359548c3ef793052b3b76

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF

Filesize
364B

MD5
16f51875fa8b2f89c6d4ace103f10bfe

SHA1
d36e2aa04eae964e68b8ec5e2ef411ba1a69f81d

SHA256
ba896a90da670b15700b1ddcfe422dae69f6566d2e1d85316f4806c1d2ef47a9

SHA512
366a2c6a419d808fdd0437dbbbc0e3bb1102ea480630040ad0074f434ec6ffa07fd06adee5877c2efcaa7581f15dfd74b62e1dadc97fb91c6657132465f97c89

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF

Filesize
364B

MD5
c5101dc19fa0f5b9fe60099ed8a20ce1

SHA1
685a17a7a8dc15368e1b75ecc03e9fcc66a44183

SHA256
ef97e13ae11abe1833db97eb91d2854abd57915548dac83de012f8032e7b8cbb

SHA512
467d56bedc9995e40d963dace5e4852e3ef637b145a51a32c2be0cd05f7a5703b232ee031663e1c392da7e4d8eb47a32b8cb6cde94210770fb431ccaa4d42681

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
37a7d602693a2d33738edb7e2b709a09

SHA1
9ba5c2c2a7f44412a11f39aa818c83732d364564

SHA256
d38b8c054a62f366b094a8c99b3cfc5fe145f8c24cca593677c0151be776dc69

SHA512
e95e77a8fdd09b2586c5c0cb1fe33ba0b84df01eb81389106db1358c3ec59efc7534bad0675407ac942483780ef08ef931716785866841bdf58625421ba3db09

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF

Filesize
428B

MD5
9ced3fdbb76cd6dde922709aab40ff57

SHA1
5b22c0fae16da291213ad1f73c8d8b9949ad44c4

SHA256
50c7ad974b6de3577bb8cd55827c8f7b4528577d5ba242d1607a515ee30e016d

SHA512
63ec2066f4066098d89b65ed3b216010393dcc3ecf656e893ee640ba01c17c5a0ea57f8f08307e15d17890fbcf043f97f6995cbd69ff1c2ab253419ae5cf1528

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
815B

MD5
db89fba65756e93d2a2dab2d9a8ab15c

SHA1
c9fd659dac19ecce892d0687b579f2af1b1f5e2c

SHA256
80f2faf745be1b3590e92c0ecefafb7754dd15ddd79e0dfc4e69d3d2d702c899

SHA512
4430c35243f70b246bca371e43f889a35eeaad242987c6585a697ec520c0c2c3a2b813112cb24ea1776c2be20bf8ac6495b7c60f11f7293fb48a0f9524427582

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF

Filesize
870B

MD5
390fedb754e4e51fb98b12374be1311e

SHA1
fa39bfad66c3fff75fc8368571e2b4fd89ba3d37

SHA256
6f4b6e5af17bd011275a498e0a3d6ad3fb076d2871a3c009bc46ff40108a79a0

SHA512
2b8259cf13dad1f11edd634e5e94943f59d398fda8edc65669b0b95ba207ede358d9ed8d36ab676b1783d04d5bff72e45387113d3710fc2fa0a0c21b04b1f4b9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
514526c080940160c67fcf06e4ff5589

SHA1
fe6b5ee24fe3e9d38803608deec50fb91ab39b65

SHA256
555ab1ad32b846764e7ed33a43ac2396053b8af3d793102e4e4a7b979075110b

SHA512
6d53ca6e79409d83e9cfd0c58b5076fed15d7ef3c7941250dfe79fdd11334c4d95e0fa15670f5540c8683748444cb53f37f77c3017ae85e82560b3413b867e15

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
53266e6422647320322704a2fbe4af41

SHA1
b1017ff9e114e281ecd8548060005b2b1380ce14

SHA256
3d2ad992c4ff26d76b3fbd538d29a4c344e4a96cfe330684e398298059579853

SHA512
39395975330125fc552f73819e38fe2e1c69331202798b636178a9edfc52a54b9ad9e6071191999490c4eedae90c243ffe86831464fcb9d15198bb58e472b894

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
c8fe3a5e00787e6ea43e0694d5f87171

SHA1
2d3cbd184af339b15989f74fa1dc20b5b79b926f

SHA256
5a688a9096c2e2a74e1f3f0632b78fd3c2e5b671f262a4637d99a3e56db6a2e1

SHA512
5fe20e5c7abe008804b5919fb12e9b55150bb14bee14b1d902f54883a047ac3399ae10dc3321610234b18cb75d4aeb68609d9d422d4608f72537cf55bdaf38b8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
890B

MD5
c59d64b66dc78e8f353fadd8be5e1ba1

SHA1
623991724afabbdbf9d391cb3e3fed142e88cf60

SHA256
e38ff356dfcdf1407c9baf4bb67925844bcd086a132bcd2a2bf03625df7e2e5c

SHA512
50772bf0b7a941779e0fa96332f2c6ce4fef33460616e1776cea088918515d60e0c7221609abff35af3ea0880b6be800f81680a51e36d2e825bd86e18f94b2d4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
852B

MD5
91dc1778e2461a1ea03f097441753659

SHA1
3d519c605c242f0f3359b9c83143424a359a2658

SHA256
cd051be34a71f01bf85289b4b9ebbae3ca464498e9cd56628ce94dae3997cce5

SHA512
36471a0e24711b5637f7d89eb494442dbfd5ec1e5be0f868c87088fae21048e2613a4bd4fa72034e1b15234317219fcaa09d0886a4d3140ad7cc5a7df004db22

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
860B

MD5
b4e29c67f5628b4fc8bc994521af561c

SHA1
d2b1fa1e8898c61ca2982f4673769cd201826f1c

SHA256
295dbb89af56a68ef3e441257f2f1dda12f0b64d125c87c8da04ae3d81e6eaf0

SHA512
4e82f6591b782cc0a464a65d41044b9ca54ce7e849f0217dac3b4bcaa6d674cdbc7ca6f5c9bd89305489dd5e35222647e4d761bfa58796531d10db144cebd72a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF

Filesize
580B

MD5
2f36e4db9fcba2a92b4996157866e2d8

SHA1
154e8acd9d0fa603fe662f913367005218238474

SHA256
37541394f835369a633dcfaa2f68c5d3816bbf2a51af2cfd5ed76028ba64d967

SHA512
f1787bb2b1fb79a999dc980a27ffc2e74f6794810deb2e2ee5a9b7c999116e1945f38c7b75f179a7b63211f23a408c4bdd384cb7c8de2ecb2fef0317ded3ff87

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF

Filesize
899B

MD5
cc29042daa26cb44127768725630d3f3

SHA1
05b3dac6bd4d54b5fb3ca710a43983b9b1444aaf

SHA256
eb6879ed795a9a0694e16a5026de5869184677be294f68fde7d383895b716eba

SHA512
d6407d157e4597e62589f0bc4c51f0b880320d904ff9c6c69d88668a1d9d4579d942c363c9a34f0224bb887575bbffe88e57e0874511301bd12edd2159c8837d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF

Filesize
625B

MD5
2b122474c45ce25479c2211472ad4408

SHA1
1f673df875c4bf711fab912280a1fb29d810d406

SHA256
7a1537c30876f869adb07674d3cfc46b330681e3b2bd0734493811088fb0a352

SHA512
2a9abb1f86b60b684bb942c09257a166bd03496da9bdd20fe101b7f39a1d75c3163045a1c458318ca7e238100c2376b7e9cf627a60f87aa9345ed09654cff6c7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF

Filesize
873B

MD5
fa0ce1327899b35ba88e028d30c17e8d

SHA1
d06710acd4ff6ec3b7edbd490920c01e57c200c5

SHA256
531474c32d303163bd1e3d2272f7757e16e89c2d183a93abe39c6201f4781eaa

SHA512
30aabfadd1a5e8beac3f81834ed5fd5786052c9733620f6017ba18c71dc95e0ded341f16fc947604154a73287efd2ead8d1cd2067bd13c78858b38ca18a117fa

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
9542c3e47da2b700adc66c47f840c006

SHA1
f37217fa9c74332bd274a8008b055e27b74d5ce7

SHA256
33da865bf6cebefb2fe12fa3dc869d9ef2acb6e9ba9aebfaa1f144aa0fdbde63

SHA512
029c7cc2bc36dcacb2c8c5eb54ca80916675515b764116e3c147b2be2fc130a0b162330f1ffa9aa20abc5faeded1686856ac533998130358b8737c1852ef7dd5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
53fc61d4c5add073bb7c3424e5ab0417

SHA1
2f601ba96f5ab6641618373adf6fb7550aa1eb74

SHA256
38e2e1f9bcd9bbacf15155f8808004e7c988adf94402ec5f3fa02738ec66885d

SHA512
bc20079d4036dca3ddd02b79687d4bddf294c601ca8fc3b75be73fb73c494bea514ca5bfb5934c7a586e955fe5c3f0b49ea6e3d2e45c77d552880712badbc7d5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF

Filesize
615B

MD5
5979d1b2f9b60379b1e47719df45d24c

SHA1
9bf4f7e571b75a6322421b277e09fdcef9f69f95

SHA256
456424f75a739a05d7c4cae008d18a0c2b8af96bb63955a1476ca68da638e3be

SHA512
bd48996eb11a4bfa4d82f52a220abf5adde697771ed82de058816496a98564a24d5a2932a7f8211e22353e99389ae0724b18352c958e4f0ce1f08d6939a4ccba

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
848B

MD5
35d9f205a4dca472b50da30d5a0d7667

SHA1
51d94de93f84b1189c24153f72eecbef9f5f449a

SHA256
f3d4751c2bc22a22b0692c9cbe347a39024d5233b25049f694062af92815c5b8

SHA512
21de554357f4b2a556b2fb1e1aceb999e1cd8eaa987b3bd5c13e0ce15181310fc2d26ff7e4b0ed4b5906ac5033c269af4334734f85a41f1924afd96fddc804e6

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
847B

MD5
683e4323e13a6e16d9c9c432d6b3f5b9

SHA1
a14b95f4d192036c0a0d9d10c23a0a40897a8f50

SHA256
5a3eaa9cf05dd093bdb86766f4be1760f9dbc3ddc9fddc3b53766e2bea47ad15

SHA512
6f5ac79d61790744ccf41a95e7af2b8971d0a90a69dd4c76d110f9fcd9c6c8118e8d6ffaa72d46f2b013ef41f31765e85eb6f81ef72eb0c846895f3e5e7004e7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
869B

MD5
dfc4528499ca5d0323464f603af9ce06

SHA1
89378fcb8785c577c6707420bbacfae347b8bff8

SHA256
73606468c6e30441983178dd77ed942ad6fc2ca8599e49fe7acbb3b07251473a

SHA512
8e34615ddc277c17b93d125700b5c005806294c637c97b14b02b44c03d3e5cad0d36eb1cf3054c10c6be1f3e3cd91e0983c47988a57d16fcbe790351ea961d66

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
847B

MD5
aa2e295de7df0d8cfa79ea6fef557153

SHA1
e839db251ec64b1d8ba85f233f5de3abffefb14e

SHA256
cfd2f97b8f304f52128682a8a3b1394bfbdb80c831c2984834f79576f5a08b5d

SHA512
e4c860e43d3cb103f826c2975cbca6ca5733c27ae7a52f55afa9518132b1f6338702907341008614a90b988dbddbe67e43b86af269ea5c1e05d14c9830fc30e8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
863B

MD5
9325560dfb1b63dd87cd3e861aee4bdf

SHA1
1b3ad6c54d89b3412f289c756703bbd787a0a19c

SHA256
196da41fb63dfad7e6118279088edf503f7e8ab53597832d8c66869ce8a4e5e1

SHA512
452f14e6fbb137e58c7cb3b2ee17062dd6f2b336164b3bd4fd5c3eb3e9f7da3bbc7235892c4e23fcbc9704d64b9d6a87df8626ae2cc0955135b5c0140a6bc863

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
861B

MD5
7c93cf3fdb7a4eee7fa9dffbd3dd290b

SHA1
2ed1fc39c781976d0a5ff6aa1cb5267b7a506fd9

SHA256
81eb7f809080c917bb323f0eb5a154dd2d8b89a179c16a377ae678dc3700ac1a

SHA512
d00d4e6f32d24d1a33fe70ff8f4494a6b5bb6b6dc266af52abca4f51c92b288a24cc15e3089803116d3c8eb92ccf80098b0d65adda790dc275e96b33d6f3c0b7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
850B

MD5
0f1a6a96c89656a4aff4e0a8bc887395

SHA1
3bf98fdf7c48da739aae88c3d7cae5fdd2bf6584

SHA256
f8007e445ca88b956d99d700438bac9111a208ad8718e24d6d4b2904fa35bc7f

SHA512
faecdaec81ff3a29f9dda24a36efddac340fad38492e1f2d9c6b0931dcb342ecac011faad08587d3967688188440dc8bcf6db71d8a4645cf17801e20f9259241

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
883B

MD5
97362f8115315361e14df167039541ce

SHA1
f938201c3ccd04083db7911ba40a641edfabdcc9

SHA256
a642d5ef2087d0e99a5d2de7cdb53b3d982cea488e66081e19a0cb49ad835502

SHA512
ad78739c239f977390e3b27297c1db0ada485e60d675d62c0fbe031ef5c6f7e98ded295376a7cfc48c5ba38dc926515f623cd76f05a186f485a7e97cf9c47ed0

Download Submit
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL

Filesize
2.1MB

MD5
f62175f3b0cf55742a2085516f1b9bec

SHA1
a2c81a9c02f91250f2413121cdc3b1592e015e6a

SHA256
2a544298abd8a9c386e902d85f4827aa03cc9514cab23e79f8531cf65e368bbf

SHA512
a556b58392fedb3826c5284b4cd322f8fa83f45e4621ac3a2a9871a63c7fcb45a65e1c5397395020229ade651285ccb115d834287b96e5ba9e6f5ac03fe63a16

Download Submit
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

Filesize
4.7MB

MD5
61bffb5f57ad12f83ab64b7181829b34

SHA1
945d94fef51e0db76c2fd95ee22ed2767be0fe0b

SHA256
1dd0dd35e4158f95765ee6639f217df03a0a19e624e020dba609268c08a13846

SHA512
e569639d3bb81a7b3bd46484ff4b8065d7fd15df416602d825443b2b17d8c0c59500fb6516118e7a65ea9fdd9e4be238f0319577fa44c114eaca18b0334ba521

Download Submit
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppc.dll

Filesize
145KB

MD5
8c362bc4687838891922dbd00d622acd

SHA1
baa7b4fba6519d3f3d3da305e7fcab31f1ec8051

SHA256
383ff92cf608b77a1e5e24d65f2089d8b22c1594b58f0f86994322586fe5cede

SHA512
3504c0097400fc05591e275e64aeba899a2a9def68e2313b6b73d9185bf8683d991bdafc79c1d9e74ac897d11c907c254d44817e100ac9e17c3ab55d0d5e90f4

Download Submit
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppcext.dll

Filesize
1.7MB

MD5
0ef845af06ae5f34ba8f9b397a98be3a

SHA1
585837231487c537648f75a9282daf8bd6fcb76e

SHA256
94b1bfeea829bd99768126e2f6cbbcbe13b46fc67b1ea0b6f01edd817d779d51

SHA512
a6cc8041a0c785afd521b38558076f98ba5b8652110e7f28a228182f5e2156ac99d0b9e5976500ad0fc63cb4d04b309a44827c30da91680ac442a5d626e1920e

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll

Filesize
809KB

MD5
465a6878326125e865416d8be07a7e5a

SHA1
41b8656a48eaa21b1012666e5fce4f913191e17c

SHA256
51aec8c72d799ae34553343fc984bca7804ad054dd39c957da64a9c46b3a4f55

SHA512
f5e32a870333b1a6a1cd780e875de7bb22bb2d9dc49d6414133dec36bd107080a0b77c998eacd98881ff1780eabf575becceebba022794ff3ebf2447eead1667

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
bbdc0acc7f8bf3f2ef04ebc16a6e1316

SHA1
7ce0aebf7777867e1ec83389c3fbb1f6dcfbd9ed

SHA256
0cbe0c1d1c5dcb400a9011013e87aed17a511699b718be121ce882e10897e247

SHA512
e9f6342c6fea1ab5bb44637fa8b9566408e80ceb25d96706e51eee9cacbafb410d70a61882ee4c9de9b811d2021b49b027e15cdea7783723dd6443a12efada93

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
99c74170d373cbb76522ef78409346c4

SHA1
fce4f6c975ed881be3e8e08303fc830d9f285207

SHA256
d1dde24158d7ac5f70cde20c1490dcb083ded6cd6eea763b6aaa4263ee93616c

SHA512
0836af265452438c5c937cad93bc59eb07813b3061952dac2e0c3ce140004ae117dd14e9ffcb1a8aeaca20a0198c70279b4ac03eac9db37bf2bc58afaf627f48

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
478b2119b2eb44373c5e3f7ffd31edce

SHA1
eae7273eca5b785b8fc164c7ee3078e99fe45246

SHA256
18419d59f82b63298e16289d7a2f7cd1685b36a09d36580a62082376e4a63c76

SHA512
46820ae8012acfbcf6742de5284b5e74d78117757caf82ea8df081705c1ba9e1b46576ebdfa5de19e32bc3200e290208997ebf148b381d319f6cd08b799b251f

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
714b0ca509711f08c87debd4eb3054a1

SHA1
9b4440b758d94c2f449f21fbc70df7bf26a76d3c

SHA256
8009784cb265ff5318c586ebb67957fac73227abc154ba7f8c800b5ac9983853

SHA512
366b4c0a300d19404e0384546f8f134194dc2f261aa62048ca54637a3da03578dc92ac80bd403a0247fb2d45159da4c5cf1c4067d85ba7e34b995589cc113a46

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
9c52eb31257286267b60841aae11b315

SHA1
65b4359df1bae29e1787c3b50b3bed832580b719

SHA256
c006e06e55fa5f4d80ec3e283474fe23f69fd29a122f528496fdd226a5dd6ac9

SHA512
4c924a0db9722efb9c5f69a04b71332820babbe03eb4d2e53f86c2a433b01fd997f067d4ca2231108d362d193782ecec5c1623c2d487bed31a82676a23e87106

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
14943f3c99d7e9c47ad9e432cdcffc46

SHA1
7fdc1e58ca34144ff25b413d391ef13db6869ca1

SHA256
96d16fbe7a08a031af88ea86493aebc9bcae7f6b39cc2a4b396d398f4b0308c2

SHA512
c47d72a03cf8097f785c59d7da3cd2f81f8a68c862909805a9245e92a8fb754596799447a9b849cf6707c7053fdfdf6f9091d09b7f40d14553c4da7e6fc4f97f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini

Filesize
645B

MD5
4041cb0f80cf8e8da7014c6094695d06

SHA1
b7b2e844db7c870983b5936c0d61d7d8043f24cf

SHA256
de5e3a629907525e857ef6d1d7bba4c7ff810a9a106e49ed43e4b88fd51f1940

SHA512
e620a14dd46a1a7b95904993701ef441e72035936810e4eb6278c3c87eda4599f0d98139661cddea633e951c2e52423e0f0abd6e6e65e861d53b2aa0354aee13

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk

Filesize
1KB

MD5
f7139f203828e20b73711bcb63ec5a42

SHA1
967a8bd2bf2aa9e9bca19c2a6c4b9fea71970943

SHA256
a27ebe5535a49c1faca306cc8a8727dbde55d8c6f6823354b78487a397735bfd

SHA512
ee09e68876aa23c38de4d6b97484e28097fc53de5cc291b53da5f5cd77510116fb3d1a9e6f55964e8804ad25bc32e0a82ef6cdc4863c74b27977078a0203a508

Download Submit
C:\Windows\Installer\MSI8EC8.tmp

Filesize
257KB

MD5
d1f5ce6b23351677e54a245f46a9f8d2

SHA1
0d5c6749401248284767f16df92b726e727718ca

SHA256
57cb8f01cf553c3886760180d1a74839f2f676640115504485aca9692f577acc

SHA512
960e90894e7bedcc89894e77e57e8ee0c99dd2c530d02665e8bbd3a1793eccc1e295c5923d1f37c757fa1158097fbaae70898c16052882d3d210c29ea801b3ba

Download Submit
C:\Windows\Installer\MSI8F74.tmp

Filesize
363KB

MD5
4a843a97ae51c310b573a02ffd2a0e8e

SHA1
063fa914ccb07249123c0d5f4595935487635b20

SHA256
727ecf287fb6f4953ee7748913dd559b4f8d3a022fa2ca55bc51cf5886c52086

SHA512
905c081552d95b523ecf1155b6c7e157652e5ff00cda30c1c21124d266eb7d305c3398d6832316f403dc45d1b639f1a5a67aea29922cd1a032f52e5247ec55d2

Download Submit
C:\Windows\Installer\MSI918A.tmp

Filesize
28KB

MD5
85221b3bcba8dbe4b4a46581aa49f760

SHA1
746645c92594bfc739f77812d67cfd85f4b92474

SHA256
f6e34a4550e499346f5ab1d245508f16bf765ff24c4988984b89e049ca55737f

SHA512
060e35c4de14a03a2cda313f968e372291866cc4acd59977d7a48ac3745494abc54df83fff63cf30be4e10ff69a3b3c8b6c38f43ebd2a8d23d6c86fbee7ba87d

Download Submit
C:\Windows\Installer\MSI91DA.tmp

Filesize
148KB

MD5
33908aa43ac0aaabc06a58d51b1c2cca

SHA1
0a0d1ce3435abe2eed635481bac69e1999031291

SHA256
4447faacefaba8f040822101e2a4103031660de9139e70ecff9aa3a89455a783

SHA512
d5216a53df9cfbe1a78629c103286eb17042f639149c46b6a1cd76498531ae82afd265462fbe0ba9baaff275fc95c66504804f107c449f3fc5833b1ed9c3da46

Download Submit
C:\Windows\Installer\MSI93EE.tmp

Filesize
86KB

MD5
ff58cd07bf4913ef899efd2dfb112553

SHA1
f14c1681de808543071602f17a6299f8b4ba2ae8

SHA256
1afafe9157ff5670bbec8ce622f45d1ce51b3ee77b7348d3a237e232f06c5391

SHA512
23e27444b6cdc17fe56f3a80d6325c2be61ae84213bc7cdaad7bb96daa7e8d2d3defc1b96c3cee4a3f32dc464b0e05720bcf1c0e99626bf83de1b6d5aac000a3

Download Submit
C:\Windows\Installer\MSI97F7.tmp

Filesize
556KB

MD5
13810e6e8bf54ff502728fcb577ad4d3

SHA1
30c5ecdb4a0b8275c6e5dd44a87678cd4cab186c

SHA256
f313e17ffd7247ceefd8f8e8b5d52b37b1500b1602b7fd6cf18fbc2143ea2a70

SHA512
ebf9c0162c9f3e560a083312e11d9b7eae4702532021f2b5bac1295208e09129c775674548d799006aa6a6ad15069933ce897bcaf3ad348ed1f8a05a22c9656b

Download Submit
C:\Windows\Installer\MSI9E14.tmp

Filesize
64KB

MD5
2af7ac092d41bae372787c21a4c81242

SHA1
29f4a6fcc0545682aecda7ed27c0c9580851c3d1

SHA256
174278900dbad135e87318e07c8fbf16b819320bb68ac5d8e9e97f745f9360a6

SHA512
f1390fcd9e08eb30b407e160395a6c6b890a2ce8afafe5c25109af6dd220994efe1b3dc1317db9ec109340e822569661665bbe345f51e7bfba65abaebcaea793

Download Submit
C:\Windows\Installer\MSI9F00.tmp

Filesize
68KB

MD5
954c7720c5e88fa690fd1d38dec47347

SHA1
2f5b87593066dac3f5a58272358b1e8e27a9dfe8

SHA256
532343ebbf4572f69673a0adc5d5737fee88aa73c1acb3b15554338c3033cc0f

SHA512
0425dc825eb9389309e73bd545a5904ff9aca9b29605ac70294859bf38abc0f1366fd119d84458f766b81cf7c9fc212d64a2c8faa1d3a84993902d6196f5d51f

Download Submit
C:\Windows\Media\Characters\Desktop.ini

Filesize
1KB

MD5
cbb4a48465b707639b77a5c27df3cf8d

SHA1
9cd5c460ee24b09e7718c6877fb570929989d4c6

SHA256
0173dda7fc9690b100c5a2fed29656f4d71ed3dbff87d5e0f59b3421e2ac97b6

SHA512
4cc9facdd9339cda493a533b04b7252933ce91185f36681d96c523662cf09a5b8ce875ae8840842b0ad2279d8b5bf15a6d1ad9781958db2bb5818dc208502006

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
697b6ca543ccd08e489eac7998077f5f

SHA1
ac9b33c9a637853a961138236c596881e59d4102

SHA256
c9f4f953c1dc0ada593d566a6947e2f8656fd5273325c4f5c6e8af1c7de814f9

SHA512
fbc347bb4e5d4b66d4788ce5df1389a1138a9a773e6cca325c6c273b54dc5c0fbef2b308e2b01ab1c8caf3a6fa21b3d2c2092695b4b250391cd728a82148a12b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
63bbafc0b6a47baab2c7410d8f85ae48

SHA1
528fee80d0320eae378877090223a69841728c2b

SHA256
5131f82512beb4cbb890dbce661bc55b102ca3dc35b0e21aef8ecb79128d39e0

SHA512
ca9012cecc2fb4c21737332bb2ee8b72c0bcdcc8ffd90bd055563def3e7b51d204418384f663a583e930a2005b3d501f97a894fed3f670e40a0310b9d32020f6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
104ace0849bf59780fafbe9359e6f13a

SHA1
2991ac972b804101e39fae7c90eb3a49ccadcfef

SHA256
d28be916de74c48d463aa3ef66a0f8ef04b962edbcb847e607de4194d574ee88

SHA512
7104336ea6bdeb32ff2a57c4216472c49533471f96ca6bc05f9d7570246e29dfb0b40a9cb857b0f9a03a0e2f3f4069aa68ca2768f87dec780a32eb007432146b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
f22f3db414e7580292c8521d132128d9

SHA1
8cd233b3bd20623d54494736e58759cf091d3aeb

SHA256
279f5d565cdebf4259b1b2189b8f73eb98ccf7fccf57d34a28115c8f5b4a0389

SHA512
4d4bc8d0bd19433348409770f8c24766ecb659cc7676aae95c220427f12305abf3395def6638a528543786467c42aa8ca93eca38c90228bee8fb7fbfb00c1940

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
5feb0c527639478892ad364cd0ca8394

SHA1
7ea627f82155f7a4665b02bacdd3c3156d878877

SHA256
7e3ded1106bf80a887f075b289398f66bfaafb4e92c72f84a9dce170ccea9d2d

SHA512
d5ab84db283d0a5c3fadc078b5f8c0965992f8d4e400d1a53ea6c92029b55292c23c7174030b2a91b2d75d2c44707b8e894247cf7f64d9f6ccdc1ea166bd05aa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
452f67b151096bd8727728f5aa4028d3

SHA1
a9bded22cb974c68318d7a99fb24f125d39f73a9

SHA256
5d35b5da5fcb9a09b890d413832c61e5680e652c01ed63b24e00476821a2e98f

SHA512
60f34d44881091c5b6eb850fa5af285a4953a726340f9b2fb893412740364369529a5875881ab431dc469d328b4fd4f72010b969d3bd193d8cfddafe53f00fa8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
d2b907d04566565f73a5f80606623c10

SHA1
7796119be6d4cd88b7350f894574488b8d763dd6

SHA256
f3aacffd99a06d1812ddbbf22eea7fd8ad9363a22b78169d513086f49db2ee46

SHA512
1b511a65bf7a289fc8be028e79da5f3ac68933f51daef5558a8339249ebce2e9edc9c6a47e2c9867624c9c1d8ee75352acff569ca5a7563da553e463e0e61901

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
7c08d45b94343f5a61628e8056d8f59a

SHA1
f06e4b483b0ac1249ac40774db53dfda9ca602c6

SHA256
2cbc9e3369805f469862b1eec9dccac07ab8c45cb3da39eb4ed66efb43bcb040

SHA512
e2209cda0707bc8aa2469152ebd4d0e58d59c0c562bf7a9fe7b5e2ed065ee55ddd4161ab9887c43f4a62bb32557cb8fb82db70680cb552d1d33d9557f72d59fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
dd7ce21b0f3e984af01f2c18c69571dc

SHA1
042475689401ed3c9c88cbfbc07e2f306cfdb5eb

SHA256
bb00f94caec8773f6cfd142e47ad988b4168afb89bb6207a6006ca9a9233afdf

SHA512
81d546880232d77f4b915be735c8c5325f07a186ad059d1e3fab731788496485bbdfbcd8fdcd840125c737d802e249503a0b0c6ed781d42fe5be045038a65e87

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
856cb9745f2278f5129f4014ef42a269

SHA1
d4a1df1c0f973574673b80fd4ed9631622fc629e

SHA256
61453694fffefb61b9c559e067f8ae5861e787e2054adecd73a3e40add624de1

SHA512
4f5451eb79610f4d0eac46be27c7eeb1db3fb8f4b02fbcf77a9edb30617ddc16c27dbb2864e00b4d8dc03152abb8240e8fc583f148e77f20c71700e4d083712b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
e5bfb622fab6cbe1b6a516eca33a4271

SHA1
d6344ab81d06ed50ef99640e7539789398974d63

SHA256
92ba6159dc7394448aff78734c663f6b3571151ef3d17073846fa0b44438fa5d

SHA512
4a4bde98a55b89d592b3cbf92a2e47d72d0ff60d70bfefbc75abd13f8e11ca00774946d7958e51cd0e1d6232bc36bfe0a281a000aeb50fd9e234f29a6535fb5d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
c2da83d4a3a14c32e323c32d48056eb9

SHA1
870a8f70bf2e2fd787845cb96918fee11bedf079

SHA256
045323517e982da18451ddfe3139fe907e7ad80eea86ab42fd6984423d3f8de9

SHA512
d8aab09df41f3571a3cfad69c46a0f5a09270daa7bcce0c0b855f179f7c1892115837b98c2fc14ed1fc167a21b6cbb1e27425bc23bd25ea79ef1673ac47b6ee4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
ffe67b587c756f55af4e0bc2ec044e9f

SHA1
2a80aef31e97f542c7b4d3187177461f3881189b

SHA256
7fa3849d2700a22d07774acbf2c5b220c3852e735fc602d392c6ccd601486020

SHA512
38c5cec746666879c14c343c33ebbacb5b4b1686ffc625a95fbeae7dd58ceb076c3fdcc92e38f618d22c7ba975fec114312463f1a7925acaf444dea0640d07a5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
7c00853c1e51c8ef12bd34611f7f7aad

SHA1
d224c68df33e0faf385392425033260835b386a9

SHA256
ca78d7b6d10c005ae4339a14bf3fdbdd930a451810fbfc71b1fb27647a2f3e53

SHA512
055b1df00c523f7ea20379ddb1c06380f1413db410212ed01aba088140a84352741e696871e565d60fdd87b2fa9f6dd30524c3cc80035cb08dc030aae6cc9484

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Accessibility.dll

Filesize
35KB

MD5
3a73b900854ea76b146add576714ec67

SHA1
1bf2fc092409b42297b63d3eb0df5c39dc660bf2

SHA256
e15be6b356f86cf5906dc52cbb3a3ae3e4ca7bb8190730c687dfc11de1c2fc21

SHA512
452a8339112a1cef5918842fd7237a9653c6c3bdc07248c2a75e059c568676ac2b47c34e4f19ebf06373b83381b969d82fe8394475191c03b1bb699d4a54149e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AspNetMMCExt.dll

Filesize
497KB

MD5
0201049709e4f2e2f0560d9724040921

SHA1
9f53b4930502cda9c4c0e56587dd7c2c2d6b2db2

SHA256
32166f276ab16ebc5be1841c78fc9b6f9e1201ec0385cf375fdd7c4724e645dd

SHA512
e0d94b310c9796dc23df1d22442f7eca95ffa1c57aef8294afd744f569f73da1dc99d5a5f09509fa60b77a4b4264633faf3b91f134325f3b71c0868be1b0adf8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Activities.Build.dll

Filesize
52KB

MD5
93406b65bcd81106c7229df2f174756c

SHA1
913b088b095e116adee74c15a314beea0348c9f2

SHA256
fd23cd15f010193ce84f2165c89fe57951cfac3789f38918962e77a5eefc0ff5

SHA512
97a47bce88a696b4646f8ed8dd7093a0cea50e7ce741cc5d6d7ff1141e1b7e1bd8be972dd1227db53b7b2bde66a11221d3dfcc39fd4ed5c59d61f88d922eba3d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Conversion.v4.0.dll

Filesize
83KB

MD5
d731f082dde2e622ba5a6f69a7bf25db

SHA1
72be2c1007587d18f131dae15e6892cceac97328

SHA256
6ee917880b9cfdc75778fe29ffae02455800930ba01abb7f9f2b32e6ad8432df

SHA512
3f565b1bc35253c5d86b2951dc44606ef34fb2de9d016bbd62d33ed80278c7a6618ce49e78b670e9189e80b76197213cd3b296194d17f31427176689f38e499c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Engine.dll

Filesize
643KB

MD5
2e322aee0804be3bee4eb0ea372e4adc

SHA1
d9880dc614ab384de0cdf07bea27f4955a6672e3

SHA256
62c573ff763820cca088ba0b7b8a3a32a96805feca2be50aa4b88c2675e99c81

SHA512
468a246e5e2e6eee4a5fc5bd3731cac9dedc39bc0c8322b88d8939621238188f552247f2948d6cb6c23a0646806a2f7d49b94af3d766e1e5107443b4beb4de52

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Framework.dll

Filesize
97KB

MD5
7c174f9e10cf163f04c6719032659a7e

SHA1
ed907e253dde07089f2fc98ce6243aa23a4bf19a

SHA256
a0fc715ccf4b727e4c35301d543e2c0aba0046cf4616e871c711add25582cab4

SHA512
729f55e8f3aab6fdd441bfca466c954ab35935f05203caf0909c53bf37dc7af4368020de53c5b64789c494579092ab269cffd2da42846a396bdbe320fd885242

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Tasks.v4.0.dll

Filesize
1.1MB

MD5
901bc54ad2ed595f7e5d63bb7a268d39

SHA1
541bbd816fa627ab7142e1a2d5feea5588dd4c8f

SHA256
92298301ad9fdd88b5dc181f4769bde1cfc2e8bc667b6931f653fc881a4a82e1

SHA512
c0f6c2ed601a435d6b89bfe6227ba599bcef8ce909ffe5c8e32842b5fd1c32c4dffa471a8067b52e9ed745b3710c79e163f7a85dacdb3ad7a9f4ccdbbd413d6d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Utilities.v4.0.dll

Filesize
263KB

MD5
914ca1e010c40630d69f32b12836600c

SHA1
ccc2a42e4cb072cec5dc8d83659f8b6f31d0d02a

SHA256
8ffb5aadf4092ce5dea10f6dced5f0c3cfe4bdc3ac612d02fde92c0685d7e0e4

SHA512
23c829d86c115386d2c444917ec90a654600de49baeedd9d08e2ea235e09328f2b7a9a55dca17c6076bbedb7f5033be5a76e074533c66099a063a5cb2ed2adcb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.dll

Filesize
1.3MB

MD5
e2b0b66122385a69105d5a7ac2b4a580

SHA1
7ae9c97d7d9d96b850a3e9a9fbdaeaee31d979e5

SHA256
b599a53e3e336b6ef9361b9807cb0dbdc00773e539c3ccf388095150d6807629

SHA512
ec20e4c0df9ae844b074af9b5096d53aa2327c911dc330829b63730e783a18c892fec916e90117914b5dc679896416efa258abd29001df2595736dd60b9bee09

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.CSharp.dll

Filesize
475KB

MD5
fe75fe213b3b1991379a1694f5e9664c

SHA1
622a3b08e40a760e663efc2d1b82de52cbe00e12

SHA256
b08046520444b531654df56e96efc3b6e245b4c1af848434c487b1fbdba49014

SHA512
95c079db753dd9162dbb11e366a968400d98c6a155ef5d720d8882ca0167194ee5b9eac59cda296c4057091ef90d9082bcf72087c44d05df39155882caf1b4e5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Data.Entity.Build.Tasks.dll

Filesize
51KB

MD5
5e255c76375fc4018c40699d716f7024

SHA1
5d55a27658e51135c6f4fbca2539efdb48cdc908

SHA256
fffcc0e6fe58a71bdecd4e292fdff3ace663d1fc8c0caacd0b344b085ed77a58

SHA512
d2677e6f3bf2f13615eea189c876e5cb2f204686b299c9faf107738fb107a3db62739025f7d779f05cf4927d9c9ba438fb0a9a5ac6baf7a8afc2b462c0b10b67

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Internal.Tasks.Dataflow.dll

Filesize
180KB

MD5
1615f5da8370d73ba185d7aec8ee088c

SHA1
c7a35fb90d920fcab927413cdfe50801298341d0

SHA256
2c0e018b96169a2981e552d94ca6abc36b66446877c278087dacaaa66b2e1dcc

SHA512
84fc297c1c6e4732a14aaa8b4b11bd45b0aefbf7006a044fd4090731430dcc567d85a1d86d45849e569c241302d912fbcc7270a6f7cafc2af235229d4060774a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.JScript.dll

Filesize
736KB

MD5
4d19c02bc71e562240594d0e174e383f

SHA1
974e088adf1760559ed25ef68a488573a246bbae

SHA256
28e48f9ee9c6ea450b7474d1aad9096fbde4a7fd8b97451d4481516ebfcc65a0

SHA512
7df2809110971687f548d0a8fc58f9ebee9aa22ec00e4aaf60b9ee6c11676e5d4b4c5b2b7a8dc1268d202af3695b7cb5a441db4b5a50647a89b0f4a3f51175de

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Transactions.Bridge.dll

Filesize
386KB

MD5
2ecdc23e4d0ead7c168f2aef36adb181

SHA1
9e6264608651f4547e60926517f92e80f5032463

SHA256
dcf78ffc7f3c9d22e5014c77ba540bd9c5e00a09ff18edbccb5c88da8303fb9e

SHA512
9c1e43cebbecebc78a1b1f82d26da52d3607345e6760185717bba2357a7d2f45e7185c49d36198814c04e9eb5c2f39dc1adfddcdcf7150673067ba7ebc3ee4df

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.Data.dll

Filesize
114KB

MD5
e927c04d1fa53583f545231ca1405889

SHA1
28af2d3d6b84b52e7ed874bc9b5a0e66f8d391cb

SHA256
8b86b801e634cf88d9570b052ccbc032922e9d0d260b35fd3bc0dc95365a4e94

SHA512
cfc6fd800b434b92b692e89a8c58cfd358ff0fd1baef334ee797a82b3936e6695ae11afd7d4c3cb6c608ffe57bb13614f1b0ff52496c51766a08ace7f8f16e7b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.dll

Filesize
486KB

MD5
8a4c3fa0f56460715584f072bf46da4b

SHA1
d4e58bcbf0500a7e21a25fc58f881c844d5c56bc

SHA256
bcd64b027b52df3dfae2c78bc075c29db57bca0709ef3b55bec7345f60c75669

SHA512
ce6a300b2b7f4210587f5a5cef9f9cb785dc682bc58ea9bf95cfccdc3b7582ea91d8a9c21c5ad6522e924c8f980cda74d066be43c9c205eb5838aacb0d04ea74

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.dll

Filesize
625KB

MD5
d5063ed877afb10911d8db8fc17a798b

SHA1
927830e3028b1bb7c30ac79f47c6e74ded26f8fe

SHA256
a806aa7ccd7665c9c4b95045f7db532bdcc651a54eb14fc32874255cbb4a560d

SHA512
6aa5edb48bd4e4053e55545f616dfdf6f78d3f694861b28e8d31d59f7646a70bb0e45c0479121c9612d2fc87bee0f2a20fdec5370e06e147dccef3c349ca4133

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.Dll

Filesize
29KB

MD5
da94c9d60d7883116198fd8cca860cbe

SHA1
d4c4ed9c6a0c90d97881e172f3687020eed22b60

SHA256
d1cb0573e6861fbf95a1e056ee238b91a74960f357bff3f525aa561287a630d8

SHA512
a5936666a5538106f3c65196fcbf5f58bbc6240a09221b803931a1ddbd2816b3029d4d4924a3c0be11100ba0cc7bd8250b61ee8bc9a19f467f3ae53bda18fdd2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.STLCLR.dll

Filesize
49KB

MD5
a5cf82c16c027fd30aee11b35c470d49

SHA1
748dcb23c7f0767a8dacbc04e1568fdc7838daf2

SHA256
64b092ddab33b304ab12a4d79153498e8531d245e8e23559c20acfee9fcea927

SHA512
d1c0bb392a69d8b19a16241f883cdf108a09a65107459a3b5eee13f6c376088cacdea3922d12f6cc50ad813eadb84d8baf2b4dbd5d12d7cac7a5acddeb43e306

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Win32.Primitives.dll

Filesize
28KB

MD5
fa9dc674680952725766ce79eb3c6023

SHA1
43ab7a6042ff09b2ff3c1d91a36ef64ed5e0be88

SHA256
b0a51007b031059fbec3cffbb74a2c911f712e1cb7cbeffcbb2741d27eb9dcc8

SHA512
f11e94cd39665867b36330fbd2305cf85dd0c2c4e643dc4e1cd3b1b5d29fdf1cff278a12e52a60dfeed3c71a02391db0d6d01bb76cbb42fcaf1d886c4247eded

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Windows.ApplicationServer.Applications.dll

Filesize
137KB

MD5
096df5f4bc82ed1872b96814c3946a14

SHA1
14c309aaf49fad617d78b74c32d4148cda53f71d

SHA256
e4e7891d03679186ce1ad5e1f8903da89619f60ca12c38141c8439b1ba3b8094

SHA512
84096e96e3da15a768f0857ccb7ac7a028aa65057f3dda86b744cf9a73c720c4ecbddc967c56a264534f5ee674352223189bad3857c113519d177030bac9de45

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Workflow.Compiler.exe

Filesize
32KB

MD5
057d0d154d143d53ded1c52a3bb580b2

SHA1
56bb945fedd7a7effd5483f7b9f56f4826286c0c

SHA256
6be19997d6a42ab8d1a4944e819341d14c4f1e23798e988f6f618f7baa1d6cce

SHA512
91de2dec622567db685a3dca0e0964c201674683f889962ae2a14eb842fdfc3c1b2782644022226a15d3d5fad4096c7321bf6e8e65811fe760b2df98b78e8f62

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMDiagnostics.dll

Filesize
72KB

MD5
f64043c208bb1ab9fc6b544116b52063

SHA1
c45797b57fc7c8847a0fc822f6c2fd3715deb070

SHA256
cbc2fe5372ef7eb1675deb3e24d7f8135023178785e7d15d3e7a865a5cb7b6e0

SHA512
d92cbbc5053385c0d8b9732fcea25e13772b7a499108c48b63938760c3bf711145c98c16ab015a039a3bbe9f6858bfda68abd844140f322c5e31605ff4c29414

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Core.Presentation.dll

Filesize
698KB

MD5
e8875c37ac7454a1049c0f6227fc9f8b

SHA1
e7824fc2d57234a7c471b7b4aabf72235d8567da

SHA256
c0d60b18073fc59ae49d6cfdcb69c5e8c3e9516992a610013208a96337942346

SHA512
0a770464d684782445b91b3875d6a5e81722b05f20a845acc9a706ab4891baaa9bdb7a3b11fce211c9b79367866973ac4625adaeb3b498f347413e2291299ecc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.DurableInstancing.dll

Filesize
138KB

MD5
e8586e016b2fb4f615dfa6e1986afb3c

SHA1
c42bb0bf76730f3a08c30a70f34d3f704761a854

SHA256
6f451ac40c08c99508ca2e945692e3f0f5bc10fa0fb94ba06569352ba7803cd8

SHA512
efb30c9ed9d3b46403b4b6df1d534ba4a8b053e820e4c2d7d7b5b8b6357f7f5d1e6bdf05fb4a3ad2d40885d7f4741824a6f7e686b91349c905feb04ea96be03b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Presentation.dll

Filesize
2.0MB

MD5
6d071a79e271bb8ff2913f9de76fa916

SHA1
54819b5027958ec1a89edc4468a634d6d7889c27

SHA256
cdf05a2615fd01cc16168f9e0eceb6ca59131e3d76011ca242175a95405e3bdb

SHA512
6fd96b27d9aa8645de32099ef7562971d5af8b53a64b835e83d99e8ef8229ad89ba3aa92204bb86d52d8b35c92e155aa86f8112c93bb589e7bbe6ed88b67dd69

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.dll

Filesize
1.5MB

MD5
ce4c205c29e9619e7b3f53d7427bb5cd

SHA1
8375e4e1674a5c49f31f07b77927f7d6cabb376b

SHA256
a59776ea5acd9e3a9a108b5b91770c8f695b2ac017350189e524694af3b35839

SHA512
836f962a93491c6306e1540cd6c9a48fabc6720d91ae4c6477d28529a29c6bea8da31057556822f76b7d81127bba7738689fed7cbc3c52ad89c264cf1eeb8ec8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.Contract.dll

Filesize
51KB

MD5
8ac6f379af6cd89df8ba2dd101069de6

SHA1
8cfd7fb9928a4caf79795a29b6665b9fb1135b31

SHA256
6d69f6a5fd603ddbf95ee90bb6e624a630cc63f8a48c9563afcd61f4d350ffda

SHA512
5a0792a2de6a77eb1c9b4616d78d2987651073b0ce43921b689d953da6d464968043a0ae034c1e735ba032a1217c2b979cd56a2bd862b28f5f86c6d75e530013

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll

Filesize
159KB

MD5
ddbe9e603966d439f88b10a1f5d6e35e

SHA1
5ed7a61ce7a800ad9d37c37ec68f0be2dbbf653d

SHA256
6e4c092da0b997f0dddccfb51a675d36dc1a0a122edb28b9643a8cf8addd3fe2

SHA512
6501423107be43d0d7e881592f77dd1c1b9e4e3fa8e1056a73882e897143c24fb9ed2ccacb251c40ee6ff1af148ed5b3d9fa88525fcae57fd669da045d3262bb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AppContext.dll

Filesize
28KB

MD5
ce3d915f4a5deae399e1b9b5e9380d55

SHA1
7ea203adb7ab386c92c21651fae38460be138941

SHA256
cd5f174e89246c8a8eb170c4fb4f7dd1d799b7e068c9b3e2889275769113902a

SHA512
fe1e87d34ffbd0b208e70f4e30f158297c8680eae4e7eac741628d34f9de6739e5e9e4623885746aa576195fe1ddd34e7b70e518675b552930c647184fc547e7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Concurrent.dll

Filesize
28KB

MD5
15a0238932276bb97de2d3d1b4b2bf02

SHA1
a7d5579ab41847d1e6700ee81ed3e3479e125fe3

SHA256
a1d4666998199369bfbbbd8f5ec7a826a589c8c419f2fdf85b1b12c4bcf2551b

SHA512
d623e41013a6e9057672ec38a7c9bf1760aa358510df64781686100af604b393da3715295954e0e175b42cddf266a015a7381e63a0141e2b0f5b088fe4d54805

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.NonGeneric.dll

Filesize
28KB

MD5
a153c692fe9da394438c4644d849a218

SHA1
588e23503fb145c53051b929564274c2b4f577c6

SHA256
d8658cc8a3e63bf0d8af837e22af49d39f435606f9bc5d69c51b1e5d2c5f6838

SHA512
fc740a4bc79388abd2065e9aa37f2d704e725981cfbdd618d15edf7f1360bf9d68dbdeb37560c2cadd9f1c8210d72b9912ad64f50f315a497a0fdfe8b49fe61c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Specialized.dll

Filesize
28KB

MD5
4b1a8a8436bb9edee46a41bacf21d4b1

SHA1
7858cea2893059ed2f932b04a93101b6a5e7cb1d

SHA256
57b65944d7cc266566bc4c2cfa2ef1dc59448623f2ab45e613da3b04a82d3155

SHA512
b233bfca2a7ff111c63fd815010f5d261323798138349e95d36e69a37827857a4a6371526b75506b20fb0cceac55dcb8d2436f5ad4ba5ba485b103e5eb0b36e1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.dll

Filesize
29KB

MD5
cda45c9fd4dac82388ef67d9eff99bf7

SHA1
4c648e4d89553ef10b18d6e5cead6945a7d33d4d

SHA256
47ef6bcd1536f5174fe8c3115abd0a293f2b52772a99680e615b4aace7a213e6

SHA512
494bb707a3ec7404117a9e42502310eeb66426fba8e49e4b27b48f329f620436c6ac88b19d060014b4d7f709d90bc9315bab99e0ad9bcaf5cab385859689646f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Annotations.dll

Filesize
29KB

MD5
5ee8d4852a96f5bea8d359b93d3042a7

SHA1
1863e0bfe7538b88aa095aba84bce8ead4f24e68

SHA256
b029113eb686534b9afda6f985152d5be9e4ad6bcf82efdb1c17cef1a330b611

SHA512
42b352f5c86ab6708f9ae5db040551de6c96b53487d0c01669a3840884203fe4e555c2e98c6c3f15215283e9a37b5509836502bdf6efaea44b62fb82710fae37

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Composition.dll

Filesize
298KB

MD5
c256ff0fac198b1ee852a343bbb201bd

SHA1
bc2814448436f738e4a8a321bb432e835756433f

SHA256
06fb8555f3b9c49c1b668d93d1c5a6cac92df6f1c5260e0ffb85e5a3c562fbe5

SHA512
d55afc334517fe8f6739c011306e1fdeec7820a37cfc1c61452967492d1e3094c7a67ac9e6a78102e68d870d302ebd2d3f3cf3962a1283f43dc749ce3b6ae687

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.DataAnnotations.dll

Filesize
124KB

MD5
27d14d0124aad34f3508dda3f06cc62f

SHA1
437e809da25819445916f75ec771764b51f98f20

SHA256
8e2ffad56d4fb7c0c9bd0ac57ad045db9fcb4cc69e57fa3929f48316d41c3646

SHA512
9b5e3611894af3e550616af7b344ea6aa075d88e60d43d81e74e4608db46a15b196a3a6557457055814f56c8e36cca1074b6b5bf53092d212b8d8d5032dc4ad7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.EventBasedAsync.dll

Filesize
28KB

MD5
b8767c9fef74b8282b247c61006ba03f

SHA1
289684ce80a126bf7eaffe2f39c3826926bc7c74

SHA256
dcdb496a0d13f0a46eb6dba0c63da142c321ea72f04804a77edf660492f6a1e0

SHA512
87df4dd6296da9ee8c1ecb1f7d6ec88d9027b64643468cc037be9c422a151347c13709fed96ffd9ca09d7afd35f9c906a889fda133b7c9582ca3db27d191b36f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Primitives.dll

Filesize
29KB

MD5
037afa0ce4d0cdae7ef10d417e794a8c

SHA1
3a052c998902c5c87518dba72b56be32c087438e

SHA256
64f9ff392d5ec5b85595e7efa989709d71378cd5c19e5de9220c9ee1dba73bee

SHA512
3aa387df1c4089d8d31017697eebe731126cc74cae9534272acd07ea5dff84dba3f9f689e18330e9f9057974a58a18a954e553abf696485e4ca1064ea692744c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.TypeConverter.dll

Filesize
30KB

MD5
c9a53a120c4f9913a60648d0d31985d3

SHA1
eb5f71cf2062a04732bbaa78673b0ee5d7ce7124

SHA256
afd3d1e52728cc4ed75760f359a8498f041b00a913888c0e254abc0ab7ff60c2

SHA512
44044440322d9fd3a7cb4b158f65c79e8de051381c7f08bda531dfd80efd68af1fd8ddde3c0587926bb67e681c99c530794dd34f572e3fe35e4d979cb0ae2a6b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.dll

Filesize
28KB

MD5
70e41462893fac317ed274098919341c

SHA1
7399d30c8f3bfcb378f917c28343691c54273c4c

SHA256
b2e3a5cf64f6bb84e93f9e6d7ff09d0b86a80cc27c71fda6fb366d34c3178da4

SHA512
ef2bba5d6e17e68aa90fc5348161984ad9fbaa25bd122ee730ec9d65975582eda0b97358eb461986576d70ea3a470f8337690a57d02877ebdb517db1f29407e6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.Install.dll

Filesize
100KB

MD5
d03d363f03f665eb066c3a04d4da6a0a

SHA1
da57cbf12f8d4ddd9a280be5eb2e298848aefb2d

SHA256
ed71da853e7556ef2d40e4878ef812a7ab9371143c500a7e435654a2f2681289

SHA512
10ddeb76c6a19517e6591a3d5108349e2ece8aaa58ef2f2a65b6ac9301d5278835dffbfd64c9da02da813293d2c166aa7924c08e505e83c0bd0e5682994a0267

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.dll

Filesize
406KB

MD5
2b17072502760b4651a6e00b08aabaad

SHA1
6070c944af8bffa9282f0c4f0f4c8981c0da65c7

SHA256
034adf1ed4d194742fc8cde60acf4485aaff662b282692a0060f8d3967d87533

SHA512
74296b9c1a59b474a9c16136073db98faa297f74a499f6f9bb11fc2d4acdaaf5a8a396602a148283f0e118dc6c0e467241e2cf396a1d52511a12d7842611e402

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Console.dll

Filesize
28KB

MD5
d2bfd5816f620da83e88ccac9ec38d0c

SHA1
f39fc7cfa07c69dbbd48f099b1dfab40f8389343

SHA256
53651fabf707e2d134f3d76c1e012635c3f99bd9c48df831d92c2fb55268bcae

SHA512
ec27779c5bba59dcfd10d499afde7fbee61a72d79f4c2e80b8d7803492793b854287d134e09e0eed5d7992287cc3f0508721917dad52b023436c4d2daa9359a8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Core.dll

Filesize
1.5MB

MD5
63638a68f1b9f673a77f05eb4d072106

SHA1
37c4276495f1f5f8f8db2dbe08f03e7b37d0c640

SHA256
596b456ec9ae25bdb8cdb779db99ac6901e7e340cfd0999e20b9e8e2faa6dcf5

SHA512
f4500be8b72ef0158ce83281bd315b7176a3b989a87d1b0f42cbb380cc4c1378009e1f9d643e9aa421e0328b866feb4d1b8405f1bcfcb8f73e5e92417a46fcb1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Common.dll

Filesize
29KB

MD5
43a2c9da208233069f134919c5dffd8d

SHA1
e7ce469d1024037805e8e129e68c7a7a1413e9f6

SHA256
2c1d363b458b487ed2783cb74106e9918362f1e6491cb5a245d693b66c386671

SHA512
58f54dad7a79e383f1f4a91e72b0b77280cb707f5ae446a0746455e2e2b9b7d5ae46338de3fc8be607615e023c80d89b2e4ceed83a059bd108601a77bc3a03ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.DataSetExtensions.dll

Filesize
70KB

MD5
ce5b9007b6b5cd2b1810c499df3364e0

SHA1
739b5860530fbc64bb52fae89662eaa34a338084

SHA256
e9e5e5c6476c5e58e8b5a3d9d47ba4b3315d6d7c769acd2258ff59476a6dde41

SHA512
ac31d523206614392348e37de56f21054e4a520812ce38c8834bcd2ac127efb68b4042dfbb609e60d7d8c1f93b3ead87495adc8b60858c868610de687e1dd240

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.Design.dll

Filesize
1.0MB

MD5
2289960f4974ff02c3fcfd510f697a84

SHA1
742b1c2a3bb33b964657eba60718dd73aea31ae0

SHA256
92b1158f65da8d3c1e576f42e6821d2bfe2cc4c04208783e78efec7183b95180

SHA512
bb2ee1f281c256fc324b313f659c6a48479536df0dc989703cd273a9ac8312e39b4e3b001c1e10d9beb42b92a6c691e944d2acca37af6f2dff0b379d70099cf1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.dll

Filesize
3.8MB

MD5
10492eb4688bbadfb475c56afae49662

SHA1
e9b9c8f8b27288cb7ad0023dd814b907cb165d1a

SHA256
fe86c6982ff72392069bed8109ec496fccbd80e5fbee786258c8c43192e918f9

SHA512
4fb2c70e22ee7f5f1e40eea720304da971ddbaa8d73ff17e9bbf5b23c23b743aa98b15e1a02548a1f593c670638ce3db19bc9c8e11e2f94e34e8cdb632fc8395

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Linq.dll

Filesize
673KB

MD5
29a5eaaa80de5011ba91337f14075ffc

SHA1
5667db30a4f0f0ff69c57e97f28a2421b1206ded

SHA256
5758efd5811f9d8ad95f0b31bec367d3367e62a66d0a3c065fa321aefb1c5da7

SHA512
f7e0dece2995968e6dfec9486afcf42914d7ac9a9970bcadea4f7604f4dcf843b2fe30be98415b8ff68224d4eaf04ca4f255b837db2f0454e800fa8dae68a978

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Client.dll

Filesize
434KB

MD5
a4375c76da49726f5374fd23acf13705

SHA1
1eab71b7095d79670fa8b396377cf9a32088129b

SHA256
bf20a06f6919311942a1b8989ae231b794df7198257fc1a49b00ca30ef1fd84e

SHA512
ec5e5d2eb4a29619c319c512e8d380b60e662d20bcf2fca6a8b129bb946ac87f20cfaf5dc89c6325457d63b3883954ed2526e998caa526948cb552b87371be27

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Design.dll

Filesize
170KB

MD5
bf4cd3ec3a294137f7be62b9403e8ed4

SHA1
5358b7b8dafa866134dc7fdb3fe0a120de18337a

SHA256
d5f6b37d386a93c3099b096f70f54e51bbb906a07cf94c4eef97049bbf2ec650

SHA512
06c82eb9b523820b534d70f9ba030c5fbb40407056dfe038b7814d9809170ee9d9e4316b37bb1cc8e1755a799bc96c1660c72c23317e10a162f15b347d3505fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.dll

Filesize
657KB

MD5
8ef341ce715b53b20b4a158118feffd5

SHA1
21b82762623f01c3f1be594a31a6c2db078e0677

SHA256
b7eaeab28b00f1155d2c2cff9a224f9824b50927bb79bb711511c49dd47a6489

SHA512
06e668d2d2e78898963a08995415497e034a8ea09e72f766647f6667f52649e14ef46fff983ad6e149541ea982d4b23440b373f0bbde927f8551fb95e390f633

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.SqlXml.dll

Filesize
717KB

MD5
d35d6e6b83aff0ec3e57feac5ceddeb4

SHA1
2d8e2996c4ebe6a067eccce2c6475e6ca0ef40f1

SHA256
3e18482f0056f4b68d026f5117aa44fa0cb9e5456d1c020390260569104d2bb3

SHA512
482407c02be2539e4ecdd79fba2ff128b392545b8d508ccdc7c6cf0e9e60371354089bb3618f7ad2bc14dbcdb731f4eea99f679426eeeecb5f6d7cac6f28c7a6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Deployment.dll

Filesize
858KB

MD5
80eef3d8decebc721ed65ce44faaa0dd

SHA1
89ef655107f5c1b8012e00a0efa2d8c8eb97aeb9

SHA256
b12d9112a23c73c63dee2af7f88e495734f0e9a29196e51ed92032a539b8b08e

SHA512
14c3c84b75c873e22952feb89e6369734ab966d6e8491bb179cae6eb24f72135ab10b027718682f15fcd2275ae02def435583909d84fcae4f36225fe0280a32c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Design.dll

Filesize
4.8MB

MD5
3f7bf5a93854c7815e18f66bf71fc34f

SHA1
4020dfa66d559c16920eec997ae2ccf46f5a698f

SHA256
0da4a606256b0b4799896c9f4c750028429bc47fcdcb7f4faa9b9e4943b4d222

SHA512
bab2c065ccda7180c9c20e19140d698dd5b8a0ac34fa1fa0113ab284fc1992078ab6d874c9b1fe817fef6d4f24d5903a36f7a9f39e71d587d60e1db9fed795e7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Device.dll

Filesize
62KB

MD5
4b84b96eb28c2d73801f652a94397508

SHA1
aad77823ecb23bbd6072104726d4a73f317bc539

SHA256
c6cbe44800f1e0e3bd62fd5e4f7264b5c90380f7bcdd4215fcaf84461a1c4095

SHA512
c6413b769879005c85d00515a8b941800f108e90e4308143e798e1e734554d616e7a3332c6163fe2800f83f553fb3b04407da8e6c7d20d54f288741bba5b8093

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Contracts.dll

Filesize
29KB

MD5
e873a012769330dbf5f09e270afd628e

SHA1
31a549e0917ec171c4f212abdb1f21ed3a19f660

SHA256
708a67eb607b446fc5ba34fd0ef76c64249a0e8aeccbd6df2222faf688734c98

SHA512
35a51a82f036ae5d22e3541186d6e981b0ecb61d1dfaf31ad044aa968faba268472c758d9a01538df29500d7f48bd5030af3977a52f87696f18845846952178e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Debug.dll

Filesize
28KB

MD5
c19296afda0ebdca675bfcbf97b7595e

SHA1
d8b6c3ebccd0cdf7e22246839ea4471a97899915

SHA256
2d8e3080bc4286b93f1f6727902cb577efe02021fdadb7cb9d1998d57490ecf6

SHA512
5e02448c04e7f62342a7172ed7ce9c71aefa7bf2f4129728bc7b322b9a211f38dcb9903c86ae0d144f1b8277b15357cb7e25e32ffd6d15f09d03f0efe888e54b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.FileVersionInfo.dll

Filesize
28KB

MD5
ffa0aae0e1f714d705b1c16debaa5eca

SHA1
3d946aadbd44f4937abb1d54eaf4122f407acdf5

SHA256
c1d37c81af97e31e556c76cdfa495d3cf10e914158be8141dda929c93d41fe45

SHA512
db59ad037eb62c38a178abb326d1365f11426892d165af36199af35706d04df21e9a9e97f2f24914252f0f8cdcb68e59cbaa9c45a036ac7ca69d158c9090ccdb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Process.dll

Filesize
28KB

MD5
b4adb0b30f2f04f70b1acc9ce8aff7c7

SHA1
2266737749dd1e900f367710ae5cc42b72a9ecf0

SHA256
35903f57ea64e3b40829a24444f59e87a58511f99aab3f3e383380747fe76b3f

SHA512
2efa3149ab5a9458dacaaeba27d4d8f24ab42b5315ffba08d32ae0d66eda79948dbce0e8907326eba3a060be518c86b7154afaa97c5fab3d8ee5eb360812e4f5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.StackTrace.dll

Filesize
28KB

MD5
bb82cb78c4bfa6f2c9b040a1c0eef69a

SHA1
83dfe73af670b75705fee67b622c4e403a83b357

SHA256
b1e4b2508564bb6039e7d36b4781bbd5188085217c0f2c9902670aa3fa5710fe

SHA512
fc6b34d45e8ed82a5c9549a5d17901fde0f6b91c58eeccdbf8d993835f7ff3d0679274d99a0cfb51c8c9c792901374b7a7fea74c7a9538e25dca1e59738bf21d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TextWriterTraceListener.dll

Filesize
28KB

MD5
8b6b3534da64bc4cb355235702094bf6

SHA1
3a7538404a23b869d17f9a5290fe8065ff35db46

SHA256
e6d9e0b9ab5b25df30923c0374b88fc45ac5659bc4573859d6c54ca18290c0d4

SHA512
9792ad1ae02c29065526581dabc0a624e4f55f242ca1048a2cb637151ed91c92838407c7eb58e3ea8514a57d6656901d2cae4d25fc50acf4ca5dc06f42865a99

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tools.dll

Filesize
28KB

MD5
eef322d228087d7467f0114a4276cfa7

SHA1
5754de1b83b5ae4d3b81af6b5c6265982ce80d82

SHA256
960738753ae076818fec2dca575af329654912ae8a74fff2c03f66443906be70

SHA512
d3787c4e407b65fe626d0747f6c91722ba92aa1d125109f0c49cea1f62bcec4429f16fea3e555ab4fc5cfa581757be6af8927f80649db2871a7af703fb0e9909

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TraceSource.dll

Filesize
28KB

MD5
fa5a2ea7e55236f4c3a0dd13a5390769

SHA1
3a66af2a46ed22a2d6e17bfab58b8ddb6ecafc3a

SHA256
cd5c527823c930869091f9149fcce7f2a15c642531d08a63683503ee3cd8d800

SHA512
38731d4642ac321e5888acae6b365baf6a91a13ce2b2f1a1cd2a8edb4cc2c7e244a1e380e858d7d9c38f173ea56feca4c4757d7ccce3fd1df2fd24f248c8973a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tracing.dll

Filesize
39KB

MD5
9262dc2499b8ce5f820229bd6049aed9

SHA1
634654193aa97fa27980d16ba736a154f261580e

SHA256
f49a16c023ea809b3352f3e6dc9ed438b7a1524db857bcea89540b70feeb6469

SHA512
7857ce77c7e1dae634b57114d53fd5c6de0819d475c15b54a94e985dc23072eb05130b585c451e8dc82140a2e179b4368cfe3f4a921db82add5ef1f3b6b6f732

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.AccountManagement.dll

Filesize
289KB

MD5
c3d033162dd63c8910cd4ada2a010d6e

SHA1
df8f096a909766b166fab41fe7b03a884dc95d99

SHA256
33795648cebac0aaec4bfd33c29fd86e1525445c3e166cafc71a3912d079d0a6

SHA512
8c02b1b1fb50a7e49a7f61301ac51d93fa0359fa62615629c539eab95f4b85cc9dbcfeb6d63818b215603001bad0d1d93aec53b8ef37c46c92390088f86982ce

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.Protocols.dll

Filesize
196KB

MD5
3b335e38ff9fce0425504181e052ab0f

SHA1
c6b17a1ff50d6c566cdf299a64e99936ea39028e

SHA256
fd2761769753646ae0f0b33b10e8ef4da1c166ac29c77e05171252332af8ed14

SHA512
591d9fb3f0bc8836ace273bd62b2c749dc0b5fe42f357f7998a0df55a48bef766ca8624c3853a9bc028057ce9fad2a75c5cb5aad2e8caf01c4c260510e181de6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.dll

Filesize
413KB

MD5
d0bf7ac26d67b25912fffa53b2378852

SHA1
3537e37d06c09f677beb118614f554b9c28d0467

SHA256
7fd72ec402a3aaa1530b1f957f679604e519064168e7f7e614813efc5212a925

SHA512
505c1792b5feba6577ac396947e167f5b68f22db45cad2c1f9e19c6ff4a724aee62f52c1d4ac43a4188ca8abe6c7238f9ff694ed31fcca93dbfaabf5233e9140

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Design.dll

Filesize
117KB

MD5
4c6c790315756330cf424a365bc490bf

SHA1
32614d5700abc2fa9ce7707e0850a86cff1f6975

SHA256
daf3a7e15e69e38af97cd4b7aaa6436abf3b3d13d22a919117a2486070750bde

SHA512
7b07287765d2b481840541399dbacc678314cfd81565a5c395c5785e3aa6e646c52b6b111a3abf0b46ba99536c519ed9eedb56eef4864d07c6870da2374b467c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Primitives.dll

Filesize
28KB

MD5
fb31fc12be074e7c38eee88ad9fb8fe6

SHA1
2a5b10c570bfbf3b20f93a8045f68adb38a3baf2

SHA256
fba30a5e70d04cb4c379cceeb7182f09a6de950021446721ebf6d6b670c7a040

SHA512
8010e1a516b57421c1a34a29a8f204bf3e31e6e538d2c8d85331a4c9b7375b8b21dbf3d85a845a7f2a566d72ba2d6538dffa6bd4e8a422e9b6854afacc07930f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll

Filesize
586KB

MD5
77bb3ebdaea2da17129ecc4f27a5bb1f

SHA1
e2bfb37e16693ed34715a04d87699c2757c272df

SHA256
c970496e0b6bf5cd5b29b7ef1cd263711ecbdce57cedb8565e574ae2248bfd0c

SHA512
1016d422650fc85e17173e52c7dde63a8536f542bb233ba4aa0f278ae94325506441375d8c92ffcba348970fd2761693878af807134a972cdb98db3305529365

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.Runtime.dll

Filesize
29KB

MD5
777d256943542b63ebeda9200ef0f139

SHA1
6727f46b9d6308d98b9c90349bc152ecbc10342e

SHA256
a4135e59d2cb390071361030256b2b73500ca706dee3f46564c384ae5085583d

SHA512
9c3375d06e1d926f2afa16dc0367b8e61c6e28f756d4a88141964db2b6a218394cd323f4d104495d51d52e37271a86b6af22119e6c1c1298a6a731c4f2773a13

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.dll

Filesize
127KB

MD5
a5945a2ad83ac8d3cfd59bca37485ee5

SHA1
c333e49f8cb37f793ac42105c30c416882e76255

SHA256
8b979e8576dedb0369ab587c85c2f1b1f78c906caaa9e95539f52341e2ee3d56

SHA512
dc8976504f90977a3375116180b577736f476c0d5f43847d0d71d54297174a318c8e36064cae3ae94da343dc9129c1a4be9347dbad7511c54e7a4dbff808a5c6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Calendars.dll

Filesize
28KB

MD5
f54440a9b0006cc22193781c3154327a

SHA1
db8d3bb8c8cea97de5692ee665d05f71b87c475c

SHA256
33ce9400e0edc59cb764230107a15cded49a25fe36ebdf250eb0cbca68e6e1bd

SHA512
9d7751ff5324bcf05d6da22ed77ed1331eb19a18d2295bb3fe027f0c946904ff215883df2526a80ddb9ed05dc65fee2c75ca21e3025e26bcdb1e314ab68e3659

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Extensions.dll

Filesize
28KB

MD5
7be66c916b3148312094d0417be51966

SHA1
2da403a9322acfb6b66118e79e58ccbb2a877509

SHA256
d701a2dde9a1eaf193ae9b8606521d2cfdb464df187c2e33a3c7b989a76d909c

SHA512
d56205aa05141fc57ed5da3a58e077f328c912ae9abc9904661d187fbb03f54ff2a4a4bb633c7dad26db7067e17cd0e35c53a6e18ad139ada03dad35ea28434b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.dll

Filesize
28KB

MD5
735cf8606b2d1762ac8cca97bf03ee91

SHA1
59385be798e21cfad50db3ec93bec6156693c43d

SHA256
03ceff36ab9dff4ddf5f2afc7e225acd97e974cccf14fc5e304f4bbae26ca485

SHA512
d4b9238607885684c3ed5d6ace034ca1efa78adf116bca85f70fe5d9adcc6a019c72a41af09bd739fd9a208117171d57d73ef247dbba76ec0588aad9a59f3987

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.FileSystem.dll

Filesize
32KB

MD5
ae71f9f306b3d8c3ec37baa9350ea3fd

SHA1
2b33cd862a876ae5259d441b78af739c1ca87f0b

SHA256
1581054655db6cd261d1f60be2d41cce2f12922e928f606f27257e31f16d651c

SHA512
946bacf3d89f86f952ee5d9bf446dad6ca8d70c409b38ffd3dc10555cd54413976296e33fa4a69e8d498ad2725195fbf03a5ea7301d7e3e67b9de232ece19db0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.ZipFile.dll

Filesize
28KB

MD5
f73c11d3290416e7fc8029690c79f930

SHA1
a4c0913d36d27c29c981e2e4937f1c7215fff63a

SHA256
2cd1cc102c5b8ea8b76d478df88b2625114284b3ba172c812fe329b2330e869c

SHA512
ba0a784654e0843e947fd53be9596954b62ebed6bdff663f9664a9a037cd78a8e4cbf83be7b118c8afa30b3d9277fa3fd5834f1cc800ea4092fe7d7d9203be6e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.dll

Filesize
70KB

MD5
2d7ccf20d920b90934557f112ae20dca

SHA1
33a75c5f6420fc6e029b25aff2e898fd25899592

SHA256
79e77605c1cb7e9f3d08d8d8af83807b331ed9dc60779a8ea136266c0bd73039

SHA512
950b7efd1dd5930f2a38f8d5ce197203395b6c4c1c7ac31bec703d865581ed300e4cbedd324222da1496a6ac036ddc8b96e535f01d7f0e1d2d37f84f9ee3a1a7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.DriveInfo.dll

Filesize
28KB

MD5
01cdc8a1b62717002750f20224f494e0

SHA1
03e662590fe0eb81600efc947c87a1a71ac4d0d1

SHA256
b1783ea50f891af6c0dfc16b4c738d356482afbb6512255ebcfb1a85d7bb40d2

SHA512
04d933cd4c2b57bc6cf536e0aca675682b4ef4cbd3d1d77b6a6e4038a2c9fa6ae9ac438af2aed19d5598053d306a5e214950510927481e34d44225e735d76cd6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Primitives.dll

Filesize
28KB

MD5
2cf183404b1133a8b2be6483f4d6f5ae

SHA1
f5d278121bfaeec62976f0a19e609a2fbd03e50c

SHA256
e3c70beb6783ae18c092f26ebb256d2c02edcbf678b2c199c974074b8b0bf2a1

SHA512
3e97b00edc51c3ab7bb9abf13b697c6d840d5c17c2dc1d73d6a12b942f056b34f7a475b036b9739e77fc740718154711e5f028383f8db51a04a9a070ce86d77a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Watcher.dll

Filesize
28KB

MD5
9d8ecf9c05e9d9ffd227030e0c0c2693

SHA1
1ba4b8b90649d8e6a55a58d0c1e62c13d9d174e4

SHA256
bde1138f1ab8f83d9053e995f44c144ca15c0afee5435f02ec80f4980015134a

SHA512
f8c07c6d54a304edd46d8eb67df1f271165880ffd875d80b080d36f14fbf9449daa23bbb7026a48666ac2e1600b26de5b71e71fdd40cefca8947c07eb80b334c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.dll

Filesize
28KB

MD5
1caffd78d754ce26c4af79dd89ea6324

SHA1
58cbdbf8832a8cf19eafb44f2343bf87907db687

SHA256
27c61f18e32696ea9ea97d2f4ed43652b66c425709a844fb3bb5f50f9418ed10

SHA512
19737805508d0bbcc5768175ed65b832fa254a010d6f1f4acf5e7988568e9148fe2466040f0e9e57597c5bebce35350b120dab9d840222f966af579487d8fbd2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.IsolatedStorage.dll

Filesize
28KB

MD5
e5fae1f43e0594467e2bc68f56c1c85a

SHA1
0d992a7a46a690102053448ad9d1b5d82a10d998

SHA256
c0aad21a56841cd3cdc7f13746498f286b962a911fbe8828b967f98ab4043a81

SHA512
aba37e39f073635c43ac2d8dccd8abcd2d64bd4dc34ccf72e540c2b5cf1d19d26f072812806bdfe9f2bed17e3bf1f79b9d669874182163374d600173ae82b5c9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Log.dll

Filesize
130KB

MD5
63054faf71ad448786205ca208cd40cf

SHA1
7ac1794ca6d0150df7942518f79e8117302366e2

SHA256
0565d267bed922f84ddeee9cf7ac9d7eb2f27e3877241e1e80bc03d39d434d4b

SHA512
078e5e8a3ee800fa72fad5bc93e93bed39d0f2e91e8b6b1526b1bb7abed2596eeea8055f83da7b6e26d726f886ab59fd0b3cf3046a85b41bc2d074bfa7a82036

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.MemoryMappedFiles.dll

Filesize
28KB

MD5
455418c90580904a4107e716e1be36d1

SHA1
209d111437228f61627aeef45371f955bbf6a11d

SHA256
9bc9a50ce22d544df6ebb69287c792508fbc701de760bbd012e33c72f55acf74

SHA512
7068e1a8e2f9fb15d12ee8b575cafab28332b7b056ce09d7c616f0461b951a50f08170c8e5c9ce789ededa80730e8d7d38398d56f95806effc3e7ce5729d8a0c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Pipes.dll

Filesize
28KB

MD5
c0987cffe1d5c154ebd840e73d3052cf

SHA1
fc4557cb361e366fa3d7d7bce7f9091aa00000c3

SHA256
1d29f355fa19fa01eaa07b785476a50003ec0ee453673b4d122e18bdd43fd0d1

SHA512
5ec557fd8f44891626a8f6359221b3a4dbe46867e1bdd24f3e677a74f9ba2b3a452c0bc59897ffd82fb1cbfdbc215e3e21c6e65242b0f1c55a7970b7447945a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.UnmanagedMemoryStream.dll

Filesize
28KB

MD5
9af16282773f5094f9c104f12ec631de

SHA1
ab23ca141a5447508631f7ea684b887039515f32

SHA256
4aa3bacc7a379570f6a101e3e68e7d128dc7edbe3fd7e097ec6501fbc60d1ca3

SHA512
50a1eb1c3ab88548896583df1569bc0e5ea302e075bd87f0ab13de9fd15b2ac8a5366adcae63f4b1a7f17789c74fdb9b4ee6605f72a700f06f9a2ea5d1a2dafe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.dll

Filesize
28KB

MD5
3f01d9a1bac14d5d3e7b71c29646d861

SHA1
64754ed0401cd85179ea0e1d49668d542f93c1ca

SHA256
0c1a54c1ddfaa78e12780dfb31c9dd6d3b36787cf69f51c923aaf402ccf06a11

SHA512
9b33f2b1eebed79c99520e50e27b58b818325d4dbed4004dcf842cf02483135c7b9e7cd41243e8d6deba7658f6fba0088682680d709eb24dc8560e8793837a25

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Selectors.dll

Filesize
141KB

MD5
e0b572d25c00855348df38bdc3401886

SHA1
b4774b26547003300714442382f46ad38f41ccd3

SHA256
93244fc26cf5428f14a9dad7afd78ff53c7206efa989272eaf1ea72c221e1f84

SHA512
958979cd3a157492f7c0cf2645b0c97bd3777451b4109f4f789356ed69e759a63091910a571590b674b2838d171aef94d97d9a15d1eb01b505ef29ee090642c1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Services.dll

Filesize
193KB

MD5
bddfcb52043693f040ca9a1bd2022a1f

SHA1
37e1cafe778f014a4312772e7413cd50bfce8201

SHA256
116f8d89f3784de25a24db0e654053fdd53c696ee4f5542cdc4a27bf56aa0bd2

SHA512
4021ac6a57359d088b81565b22c052862b12b476caf56ab2efa6963c801be4b982f35387e7f3bfa428e6ec09234e5557a90aeba67715b56d31c978e38df4c46f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.dll

Filesize
1.0MB

MD5
5ee53c531b0f30391ba19e9e4151096e

SHA1
a07898b375d9d2b951566b5f3f99773f6b351e0d

SHA256
50809678845c60547c8670e7d42d894c01364dc730a2533e657690a36ec68f32

SHA512
442c30d06732102c77abaa6c9bb551ecbc05934ab5257de26858e6f7de6b37bf7f9409e5929e2d3f6f01353c8d33abfe204d958838857ef4354cbe37a6573386

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Expressions.dll

Filesize
29KB

MD5
c465416fbe95a7661460a73cb2ce8957

SHA1
f06c93d663aa6e76e92dcdcf53346bcade386f9a

SHA256
b80f75fb102c1c4c00c52487209d4881353568d34cf4a60b4222001bd5b91e37

SHA512
c7dfb0e7d9eb60e58687033fb2b25ff025295ceae9f90db16eac08767482a5f50d05f42eccc8ee3a48039089dfc20aae4ed67008deb8ce2e51947fd91d5dc1a2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Parallel.dll

Filesize
28KB

MD5
a9ac372b3d69f501b444d593557f0d5a

SHA1
85d959279e6c732ff244d240449bde9c353f2df1

SHA256
48635be532f4d7a0f54033eb0a10179421987712c419a2e93778f6428a3e0edc

SHA512
f7d0b15fb545ad9f9a13ac1aff4aea097ebf529f8b9883548b018cd7acff7cdef18cb2c845104bf4f33a737c5dda384ddcf6aeb18b1c27b74b597fe346905aab

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Queryable.dll

Filesize
28KB

MD5
cd51916730f887141ab23fc76891a4ad

SHA1
c923050c497c60ab264b7c2c3151fab299a312b7

SHA256
8aebc76eb95c4b8d318c36e3d17920cb32135a299ee2ddbc11eff6cd6dacbade

SHA512
1bf735e72e6381712a1273b4e7efe7413a40967c222708ec4e7b9230408060843dfdd6ac085c75635aded245410b1260ff8b04008000610e0c4c1bfc7b3df9ce

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.dll

Filesize
28KB

MD5
f3a5978a136752ef65da62a4acd66cfe

SHA1
e21f47d1a0ce86c32dccf5b57cb61dbd299fa0f7

SHA256
7a0e0e0a765a9280bb35d9c76036f5d3b3dade22ea527c870a59b0bd51f31585

SHA512
782d77bdf85c3279ef45a35e1c1e6c2010a47a5af5786b290ef2fbc5defc4ac10a7d32d4f5a27d3857dfe106044611925a6d7eae49b5a98ddc43fe96a680a434

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.Instrumentation.dll

Filesize
142KB

MD5
d217f63b8e3e1289ab3ecfdbbab1412e

SHA1
825c82dcd32fdc801526dfe4a8f6b49bdfe7fdb2

SHA256
2e46675a295a853633b818b8ace0f524a49fb98a675c20eba02125b12f85a7af

SHA512
0eadb8c20046c77d095627ae90d1fcde191cf810a74223217009a1eed3b140e2c340dfd95b824ada358329a68dcadba3bfd394aae3d8000687263556b24ae1f3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.dll

Filesize
405KB

MD5
326312a23b14f89c4142504f209544e1

SHA1
3df85ea2d482dc1bdd2104efd7e55ea7af1b5bf3

SHA256
592f9906f2aba5f9681458bd9d891cc021cb03d38d2882ce676ea2177fcd0292

SHA512
1db667beec651a6fbe87b9687c46c1e3f7cd697ac351ee8491dc88827a696781765ca168997db7be58af1779baada56aeb9946d99297e0b2a4238cd1d0f01505

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Messaging.dll

Filesize
271KB

MD5
48c4e61b4c001290583182a7df7e10d2

SHA1
314ad2ae64e5d6e6c9dc8f3c11dd282bbabc7df5

SHA256
149cace88d60102748f6d8a89af3bc10666511b3b0710e21b071c21369a8ddaf

SHA512
0e09036d34b3883888e4fca54b35ef3ad444e88f2217b299c455bc8291d48d719f6e25379dd362aedc614e50272ad17bd2ee49ff272e37f9fc7e4847f1692de3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.Rtc.dll

Filesize
28KB

MD5
788edefe67c2dccb8459c8a341524e0f

SHA1
6cd1bfe593d0e81108b8a03b552104509e7a94e8

SHA256
22944bb98a76d416a6c255b2fc8233e8c5deb44a5152e504cd5f4230b77cae85

SHA512
e52569bc4e440f6a02c8e71146946f2a90d7db0de7ffeafd244356881a56733ec8b55d4f01f223e59c87082e8ba0686fb4946bc93cf85c6fd19eabeb7fc808bc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.WebRequest.dll

Filesize
49KB

MD5
73607d28abe247b899243d3c79ca11a5

SHA1
3f993b22a58f85fcdcc9c9cea50defe1d1d9609e

SHA256
c4969fd3a296c542b0cdbb50227c29b44659f8b8143adfa380ad3a708f25a3e5

SHA512
e627adf8048f84be42492da46774d5832adcb35c0258c24b6b66f49a006773951d31e64272b5fd2a6edc3089562d13d4359f523a6c130d71c486fd593fdc1171

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.dll

Filesize
199KB

MD5
fa4e785f2766bcb6f8db09d4cd3fa96d

SHA1
f36532c4f873998cb922a23fe3b4b134a3c6b145

SHA256
1f933fbee183996d52f70cad9a7815a9cc55984a6d7fddc116273d63f7100c27

SHA512
712703afd7134350bb5316cfca1cf8b1869331c2580ee6f0ed4e3cfa10b846b39f01ab66c3da0214be90702e8896965b33f7f7c3e52cd09ca3976aefb31fa97f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NameResolution.dll

Filesize
28KB

MD5
de0b7cc0f8eb454760ebca8647b2441d

SHA1
209458e1ff60aa69c901b65a9edc7ae45a12d744

SHA256
3732dddea97ea03f71395f98fff78e691c4fc6779a3ed272ed108f49dd2be587

SHA512
9609c0929e33300ded7da1210e5c756a52206809a1ba96ccda3a34729d512aca4eebbe82f746f4a091349fcf98830b549abc4a388734796964ad755ae27de108

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NetworkInformation.dll

Filesize
29KB

MD5
23fb227c3ab26e2467ee995ada6a3d9a

SHA1
327d48cc917a550a8411b03ee8f4a29acbe4d36b

SHA256
137b473affae40abe8b7045a26b70d2795e47806a927419705af503011ff757e

SHA512
d271420095a698c13a468025dd5c8675d97a4ccbeb0e4962ee4d147de5f5d400ebfbea717ffb8575b6c44a6cdb173e80f5c94fb25628a14eb96f71f354895faa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Ping.dll

Filesize
28KB

MD5
4907be3b011e9dcda4a21fdc1a616dcc

SHA1
7346ad7b1112c88f6eec60f38d308ef7bc5754fa

SHA256
e2f1ee636ae057de0d88c2bf0324c6f816362681cb485025efd3645a11720b3a

SHA512
d92f8fe6be3a80b612e7e641863cfa820f15ae568c73d31e299967b84cc59fbafb8b631c092483fc3ea24b1583bfd8e0675d71f6b00daf18bcd612e689522110

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Primitives.dll

Filesize
29KB

MD5
20c6852d7ee7763a04171ab34de1060b

SHA1
912c2d7e441a282adbd4a3026165767ade30a49d

SHA256
7514a18eb3242d6dd225efc66364e8f130fd63b6600f97d491a5c3148f3c696c

SHA512
8495ebce428ee50cb85d14c28fff1ffb1a72c606f6c49f394345828a8ffcd45e7749ae38372fc60140f568fd2b92410ad3580eb48497af96888b13cb14e1fdca

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Requests.dll

Filesize
28KB

MD5
de8bae1f389c9719f200a46138955c49

SHA1
341479a7791e95a12b46826bfc35c42375175a9d

SHA256
975f6b4612c506a5acaffc0afabc31e6aed0dec77e83b4d2d79178dbe6198038

SHA512
bebd9fa02c24e5f28e79b182649fa99d032e5a036725f2ca7b7cdd90ba04e07de3e79a2209bc598f9fa7bf59ae464ca0e0b1865aa724b1b7727c8aca2ad5d2c2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Security.dll

Filesize
28KB

MD5
c629bfbe9e55c26db831e0de44410e4f

SHA1
b8d6ca9c6ba0b245c6284fa3ec82b5026f0b237d

SHA256
0cb1b25e6d2b51a152c14f4c4dd67277a9d5af6c2009ddd7b15753f0106536e2

SHA512
307375762a2ab11f9117f605a24f3682c8fd002d00fc1b95b3f05179e1b53ad511d9bd9d9afd2938523f9d6832ad2ceb64f09bcb0aaa86023e4b23632521464e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Sockets.dll

Filesize
29KB

MD5
673dee1a7cff9aeafa71dd0b66235083

SHA1
3bee8a059d3fe5f9593bb6b5b24f6280280ed6c7

SHA256
1ac46f85aae94935eb9eb6426808434a22c34d31c7750d048aa77e5a6e4e092a

SHA512
4ff7a2ee6e15cebfa99e618487e121a650463949b6972aa630155f08d6ef2df1c3d1e4369b925b2958330fb6efefa91d07dd66061eabd1db09cf9809a8c596ea

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebHeaderCollection.dll

Filesize
28KB

MD5
0474f83f7213b76a604462dfb2014cab

SHA1
ddfa87160d003ecd04c93eaa3a9362dd8ecdc120

SHA256
1ebe71ffc7d497432db716631fae9eb06076447560842348d0aed11e95bc76a6

SHA512
693792ba557b466e60c23843ba46924b0472cae24a8ff135b9015f85f6e907552f301eb33aca42bd0823c9bc2f6bd2e03624052ed5c3b9ac801f00390be8a52a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.Client.dll

Filesize
28KB

MD5
9bdfedb48bda20a30847b84e85b8a79d

SHA1
d595b516783ba2a2dca71828ee56850cecd60d80

SHA256
5e7813579064c897a595ff91b7cec3df81572bb3bd3d843fedda9a706096550e

SHA512
09456d6aa2e285cefca7fc8b42fcc1c1c4e7af7e1141dbece7f826f00f97bf9275b4162ddfc2d5b27adf8cbb5eb378fd42cec6b58fa308786a086b191110927f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.dll

Filesize
28KB

MD5
b49404caf350093186923cca6ab6f146

SHA1
68015a47275c27d398ad324f439f81a91632b6b1

SHA256
ec8856cef1a3f9332ec82369cce7b5617eb17d2ae8a169b9bd559e1e659add32

SHA512
cdd7e1c0db1718941427aff118387befb3f1112abf8caf4d56c188a60a5d75a725f973b0d1e0c530ef7df5040ca0057e4dde9a486d28750366ec8f5a212bafe3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.dll

Filesize
251KB

MD5
acb8730280458ee30c7a5013556f8dd8

SHA1
1f95cb1503f5456e474597b8c86f5de499ae6502

SHA256
a564cdd98880550299a5c4e60a162e66446d9b0d34c7855ccf5637b69a969995

SHA512
116c5a8cfb4bd5bd223909434946ee5ebd493479185640a20ebe9588cb76593b2fa1c139363a0e282d7bd2f2017cd76fd59b84ff19b29a931daacd7c2ca392d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.Vectors.dll

Filesize
30KB

MD5
68c34cc58a00d08ede3664dda3a667c7

SHA1
1083f0ab5503b1a5de15156fa48461b6c004416a

SHA256
e6dcad5078c588ac4f552351cfab5593d6cd9d314f11e35a070f11b33573a5eb

SHA512
0ac43342114899512b68f584b6e9d153732e5588bcd406dd184173192884651420ca4e1da3124fddcc407a68b61600c798175d918420415c6636af40f5a79c68

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.dll

Filesize
135KB

MD5
e83d249521e2e6c914fe4d2e2a31cd05

SHA1
bf0d6d827f75314496eff4097fd2dbce22275c5f

SHA256
f2d9859efa15bcce0e6982ef5ec73afbc5b8084b09ee2aa195225523f3b92f43

SHA512
fd0498aaf59386bc6006a09376d652539b9733a27462e1bbb03a25b3e913a51abe6022960101d53b8bf546a62d3e0b663edfda51aa512176e6f4e6a9bfc0b065

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ObjectModel.dll

Filesize
29KB

MD5
d4da81fafaf43eddd5b5961137d56e77

SHA1
4394c6107388688ebef3393ae9675c0bba885b84

SHA256
2e7505defe140cfe3924daa97e60b14c6241aace1c63673b2a332546eeed6810

SHA512
0e6ea97ab83ed730facc37d43aec5cd42ee6f462bbdb426953b1eb699b58764894ccea70a8f7e6d4cebbc0e1be6173a9cb1c296802e66a445b53b0caf0da36d8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.ILGeneration.dll

Filesize
28KB

MD5
ec88d0ffd583096967bceabf2911a059

SHA1
71a03c25127f2be25ef7a26ba046ab43d62afc84

SHA256
b4903c6a0f4acda98ccbbc270b039063735723eb8b989b3caf52bf8817acf6c6

SHA512
82c44ce5301558b05aeda9b56232a3da62d2dded8304b949bcada0589905a43c7aff5754068ce839b81b99a21676b52922897515be974da55643509d8cb22107

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.Lightweight.dll

Filesize
28KB

MD5
fe5bb6a52a5719ed4755ec755b59ff4c

SHA1
3d499466dd9c665b9a829494bab872bab278e57b

SHA256
c2d0f6d1d558b33b7efb509e51ba4180634c05007450e8b07188eabd94dda8bc

SHA512
490d801adce6ee89ed334eaf53c3c271bd43f24a2ad6786966892c0109d333a5220a6427b57a1b003ee184b7561aa0c83e0f1da0cb9918f6cb9cb4a1e7102e73

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.dll

Filesize
28KB

MD5
0fe26db45d366bcd0276c194f3ee49c9

SHA1
16df3347c7e29656254386d7dfebea9ce86a92bb

SHA256
af7863cc85bcc8fc39c3decb46ff3ac8d422b7b0495a422b5d6edf15afc3b948

SHA512
145e4e1ff8d4a60429de94cb05a4175a61566fd1de8b845ef931044cd565b21d598144167705aa66e21b8a8e05af949d77f545284b1a4bd2743f84a227872138

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Extensions.dll

Filesize
28KB

MD5
a37d764335f82535069acceaf36c807e

SHA1
9cd5062cb6bb1ddf01458f26f7694633d4f771c4

SHA256
8ad8b43a32db58388d54216238c04133e24b9500794945540121412d2b4fe0b0

SHA512
fa0a1ca57dd819ff154f8ccb2fd522b1f58d624a8216052a1ea6a0dfdf54ba033c7ce27a279cc6139270613ca56ecddb43214edcfd32f9856f89c5ab05db7d7e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Primitives.dll

Filesize
28KB

MD5
3fca1dfdf236e6fe69b99c1967973071

SHA1
44b56ff7a6685ea34e508a9918f01e90cd83862d

SHA256
2acf07c53926c60ea41d4ad00a88f8a5f54c5dd50373af2f0267dc08f228a347

SHA512
b775bb802b3c7f1cd1f48c7296bbeff83d58a70843a855ac985ababaa3a6047ed0c7ab800604c04cce07683e7a67c4cefe8dc0bce83d4e709cdf13a5c0865692

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.context.dll

Filesize
105KB

MD5
0d957c033c8b1231e25317c2efc7a460

SHA1
1e1482217ee537d6ee86f24de7a55184f2130ba6

SHA256
7afeeadd12fe7988dfc666328560f10db25426103098ae153e2a98a04578c42b

SHA512
0ceab0ff65bbba38084825de461db5ecd588f9d3dac0b86b20f1a16c197a329f30a2c6f4204c24e458504726c2d7f84059af6df08b866b9df8ddc62cd868b108

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.dll

Filesize
29KB

MD5
bfe39b5de518deb4c867ae5e085bd2de

SHA1
0fc4d27ecd3cc7b0a61e43213dd1b44b5bf96f61

SHA256
2d2752b465d8f3ae559edc5fc44e9f1670859a97a66f4eda3f886fc3a00c9ca5

SHA512
aff5f19a3ea47f6119ea586dc2621adad3df3aae5eac031b948d067105a72efdb58a96b636e47cf0e339c6fa64019f3c2c72a41d26d6d6dea24879d126f6c797

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Reader.dll

Filesize
28KB

MD5
28e98f1329d7b4c1f4d6b0de600af16d

SHA1
12b77d6556de1d775b068e011218b2bae6b6595e

SHA256
f586bf5cd44ccfb32c28095498264b33a277a6f2ed10f60f559977b465bfe284

SHA512
c02f33082b3b40482437bad921052a7cb090f0c7a5f5ea7fa42d9de4d4e3831dbaaf1b5d5b8f907f6c1a80a292432e2c346153c4f4b53d252a2f6efa8dba1012

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.ResourceManager.dll

Filesize
28KB

MD5
f61b10ac8c6648af6cc73f36e39e8cce

SHA1
317504be73c813b1970d5f7068a53b8d75c5afa1

SHA256
c04bfa50b597c50888c8e92cdce75f997a0a33d885211059eb972310cb699b1f

SHA512
12f09127d2ccc015d2362b27aab160ff4c512f4bffd8be9c4292755b5497314748f740747175232421bf38ecf1b40edf60cf41c3feb86c6339f23604407040c9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Writer.dll

Filesize
28KB

MD5
3ce3894752124b83f0ac78e067bec029

SHA1
3301b10c67c9e111c454ac669c8079824e01cdb6

SHA256
0577ab02d4fd4bad30e6dc7b1fd2ce7be4ffb119a40a60f6faa9016f2154dd0e

SHA512
d694a329400b29cb4aea96b57ef7e11a151712babe14527a0d4702095f091b5eaf499dde2b11c66ec80eda5fc7b1995972c8f29f038d3e22bf7255743a26a904

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Caching.dll

Filesize
107KB

MD5
4ee0652c4d8eaaa124c95c96192738aa

SHA1
5b8e4b838a45e3d5b153159534f3a115da9657c0

SHA256
b19d3beb5e1fba3b22c45121324eceaa3cffd36e9854026d010c3696cd6bc178

SHA512
f4d830421bff88c89ddc86b57721ad38a2b9860695d31293914a228f39b4323cf3e564420772e7058ff21002b4fa62b780ce94fb13f2f5df25d7dabf9d399581

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.CompilerServices.VisualC.dll

Filesize
28KB

MD5
d291aae62cef20e11dcf71abb297bfd1

SHA1
0800d24034258c1d9c0c602276af7149e6f58963

SHA256
589be11db4a58f3ecae5980c57a7f407ff186ca13d37378cc8c8baf2744822c4

SHA512
40c20f69a15e6fbad82df546254367cc1b7a1837640a90d2e699b75488dd0084443e2c0597b6c580b5c44611b34ff6a97597ada2a588647c3949bd8eb3973595

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.DurableInstancing.dll

Filesize
168KB

MD5
fd7d1a2dcbf235d9c70c43925fd36612

SHA1
d46b4d9cc1e404d9a1f13a19f92966b0c1cf53b2

SHA256
084155666e2e84e9bd95ca512a104d49d1ef80e12985894960382cb0d29b6395

SHA512
d01c062341d58379ab0fc9ba88c9786dcd85bf87eaff2951b2265f5953001bfcef262daa4cded8825c5a529e36b3efe420c7820a1f27c86158ca0722d6e19dcc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Extensions.dll

Filesize
28KB

MD5
a21dc33b1fc2ef6bd43a3ba683bb4ca4

SHA1
7ec14e6dbd30743d2ade3131a15df1c3a2e22da5

SHA256
c9bcb24751b1bf8108bbb463076fffa093df577231f262c160316ba1c4e57962

SHA512
1d9f3e0a96e830c3f874db5626b1c384bcd8de31e193841efc76a7353e339d06b6538525535362702db74454f7452f31f9f03a1ee9ae2aeaa23ee9c1298b74c8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Handles.dll

Filesize
28KB

MD5
a97477558d52986b493526b27f56ad65

SHA1
494c247b112d48a4ba20750a818193b38b116783

SHA256
ffdd194592b086f18399cfd473ecbbbf91b0ec227a05f748e3bef8a683ea410d

SHA512
6157fc17f60ef20e190f1813aca8dc4f486dbe4eebfdcbdacc02ce8465f3e5cc90027ad3ec8126ff0773967e5126f5748bd122d2080512c88624b7ddf335c1da

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.RuntimeInformation.dll

Filesize
28KB

MD5
3bfd31f8d23388477fa31d9f6ccb35b9

SHA1
84333be710c7908386ce7089c127a849c2d02ed4

SHA256
7c7b936070c55ed95b4e4c91bb394be7a77bf0a7f4bccb81e027e34425594e56

SHA512
23ef1113904521b02f597e7733f781681ad12a7321aaebbc09b5a89b9b1acf2f3ad93305f4ecedf3876a4eea3563edb5cdee2659190c75ae7661788d2a2a6630

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.WindowsRuntime.dll

Filesize
28KB

MD5
ee62dabb6c054938b3c9fccc87a5fd3c

SHA1
a113f557e1edd180bbec17e657f7253c502463ef

SHA256
7bced4122810204fb76143b709af85d19a316a280667491985e6e499cb2679a6

SHA512
abdb59d05210153139f864d52b2efdb2a701582da9d4c8505fb6e5850b7b31af6f4d8874dd2ce97734ae3ae7897e62e72294ca59003444b3ddeb196525d1fd01

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.dll

Filesize
31KB

MD5
9fd7a4d07859f6236be509a443cbd6ee

SHA1
9d69c5552844da1ae1ccd707af4217329c9584ec

SHA256
714e1a4f85770f97ea65d9e7d37282ec044d16b50dfdf2cd2268e4f1f712b276

SHA512
bac83c6e4503cb21ee37a5252f82d28c2b308177e0cd1dd8b9b0da0e0c010ea347deefc6423eb422119b84657549658c60af0ae1dd2370d9f5586b811281605f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Numerics.dll

Filesize
28KB

MD5
d9c301046e5ab4b982b1c4dca5bfcb3f

SHA1
e64e5be991c596a834261495706e92479d6b169d

SHA256
837684e506a69bcd2f4e88796bb37ad51e2acc052b97c9a663aa2a3d61040387

SHA512
330e6cbbaf21e7d12dfcaafd7dd859c1a952fa57bff2a078ff5a678af6e8ce0b78a83e5f88739372763bc0e3bb8c0a837a1872b2ffaf7694aaf8391f5c4cc705

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Remoting.dll

Filesize
339KB

MD5
50a9d6896bf847df6dd7ad32662ff57c

SHA1
84c4a74d5097ad83fc5fa22737d8dbe301a4a19f

SHA256
b52fd4b68858f9bc61654015330aa68b9b8950c689d7165f3c9271bf8a0cbe08

SHA512
bd6a3470004dce34364ee52728f48625a21e10f5a37773bfffa71aae93ff4e758fe44a24ea9271efee3b6b5f5dec59d914f79ca0112f4898ea278af521ebe16f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll

Filesize
138KB

MD5
6831e87a7cfe85c6eb4b3cf3bbca0ca4

SHA1
9b0992dc1be262b87442d98c00ec2c29e800e78a

SHA256
9f76da8c020b4fdc67e1312cdd21a7db5fa324eb63fb9d54a4637260cb24d1a4

SHA512
104cab778fd569d2f38fb857dd4dca1fd34ae95465d5d6041fdacc94f65b3bbc8ff1a822c3c5963b79491ba4439edfd52ad31f822e02cd20bcb9b953a6121a93

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.dll

Filesize
28KB

MD5
667cd641e0ee0af927a4716945dd615a

SHA1
1371bb17fd7405c920193115b2a241158e2ee0d4

SHA256
727bb2af1483cc2b2e3164a7ab692bd4d893ef8a6abe77fd89b527e12fc3fda2

SHA512
4e0e76a85bd66434dde128803c4c2b47674e05b6692c99865d0b1b7bb66e1da54d6a07915ae74621d03aef76e467b2c88260fe1a9346e7637b1519d86b77dcba

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll

Filesize
28KB

MD5
e5e3a5c2066668c07cbb47123bf2f361

SHA1
f834448b25ab901a6ac7ddd6e47a2a589ecf9ac7

SHA256
3437782e8f88c931a2ebeec7686b3368794cc615e5f4deb01a16b819507274bf

SHA512
a54c451a5b3d1fceb73590e4411a6e8edbdb71bba21da2f401101e575d1230b5a4f57b9a438d4b0df24fc07fff30adcfaf9ebd9548e9bfc1dc1ed8c494b22e4a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll

Filesize
28KB

MD5
4adc8a51489b27ced572650d1fc648bf

SHA1
172720a47616926d0ea7e45225d35be05a5c5496

SHA256
3f3881ebe3a3217795ec4c4e49c549a13ebb8dcf1ef23a65d641b924dd57ff06

SHA512
0349180a736272290bf9b179b83ba248d5d5e37c62f7e9c5491ca2e880e87508ad60e512e00c12900b7d0ecf0d919c3daa11fcdb5ef471712e6cf2f9343e12dd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll

Filesize
29KB

MD5
5920f6f36dc692737dbd4d271ec034ad

SHA1
6cb0274c5298bca1aa1133d4e4c2f8bb48700616

SHA256
7c1f31542c3bf1cc37623cccb42b6c5ce7d72e8597f9d84b4e396ca5621a7bb1

SHA512
c46cc0dae32c9de265e774ba8525d3f07303f90e4d5c2a033509b82582afd9b5051d3f4309b8d258e12814cad976e6d72a67dd8731c28ae6b33ed7dc62d5d92a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll

Filesize
1.0MB

MD5
061ed0089acd1a47541bf5e6f43b648c

SHA1
a4c3cc96892281d44779d8d0dbb6067d9406fcf6

SHA256
0ecd2a78a263097b987a71f4f3a7967fc23275ea59ad434a732061b6ef9dbf75

SHA512
7535ff4032654cf3769a9c9b7effed395915f964587ce96d60d24b2837d5f01b26c4a62396d172cdf12bddda59cb4c311d483915c7847c8c2f6348ddb262627c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.dll

Filesize
36KB

MD5
d77b367d7a91797f624c74f665e67011

SHA1
96340715221a39e05065fa55e6a1b85ae7e9611f

SHA256
ea1ec48ec8d103af2e844581039e47cdeb477ad713e96b08377235f9742d1c37

SHA512
bde5b91013aa6f024985092c6530d71b779ca6a21d37e7f8fbcb6f19a7d2527905d810f1a61320b6e19f30e9bfddbff1e18df97a25ad681688053e21e406ffe0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Claims.dll

Filesize
28KB

MD5
74fa9f22c92aa1bab5c43413fa5ed15d

SHA1
be0a8b7a4d5b69c6235128c691d069a9dbc46bed

SHA256
d1f0c48b2d8b1e8da695827dd459eebd64895126d7f01b3183bcfb7093ef7a3b

SHA512
69865ca936d3fa373ece24c3216750804ad05556e14f9f839520e88bb35625ae36d865a17a070565af716b304a6d310fed4bb297b0af8cfbf3e7bf7d81546e4d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Algorithms.dll

Filesize
29KB

MD5
7ba39a090b12c67561ad906b1af32cbc

SHA1
7a46174d4cfa426d0ddffcdb07b1ccd5f1e34c63

SHA256
b6fabd626ba8d10da243d86af52ea24616f372cefdd5df78cc46c6cf36c67452

SHA512
da2b612b241cb20f3965f9bd8e7fe5096e9f0f4e798c1b1ff9655dd0204094584c81e365a5450977971467091d006cdc32ee325ab7dba6eaeb2594ab2058ff19

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Csp.dll

Filesize
28KB

MD5
eda2f30082c0dccf3a20f4ecc2f3adcc

SHA1
3101f02a945dec013c62a81c2bd6362caad64cb6

SHA256
71075cb4c6985a0e04a36af8c8f3a2db5726fd9f20d3a18aabd603becc02e132

SHA512
538a1c9dfc551bd3f4c933705dac5a5c6115f9e153f03eb66bffd7007d76737f1d6962b4d0f3a280ecf01444d3f59de96e09720946d7cbd38255d3bddec5b58b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Encoding.dll

Filesize
28KB

MD5
d5e158610c3207bc60ee58c4d8dfab41

SHA1
337b07c23dac05f7cd9d603705501c78fccc5601

SHA256
671360bee7cc1186467afcd5b367e619f35278be666e01deb91e322bb3eff9d6

SHA512
5eedcd655256f71e8294980d2274894715ffef87564cbdabd1e10f407bf8486233d34faece7ebd25ef1369b2648ca9754456146ba46c1754f46624687e981539

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Primitives.dll

Filesize
28KB

MD5
2bdebb0fc1f1097c74bc1cf734c8ae80

SHA1
b78b1816c2a10e34e8cffa294acff5c033306494

SHA256
2cf921f3b2c8ccfce6d9d88f104b0436245459241fc277fb1e7620d15e8ab14d

SHA512
49498fc330f078d5aa37fb3fd239db1bc58eb37bc5640d463f16921a6e286fd38209e2640af4f886ed71823d8fa83bdc5e6a5ef0801816a0cba06ea73aba8631

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.X509Certificates.dll

Filesize
29KB

MD5
05ee813c5bc0cd4e289b942d1a777264

SHA1
13783319584fe0f504cb4ff6116d47d0b9859673

SHA256
659ae584e6670d8f6e4c053824cefd592363f9c5b617bba7649848ff49e7476e

SHA512
eab21b1f4331cb415033f7efb6d68bced5e83fb3d82f33eef1aa7b5bd5cc4cda20d559337f7e8a5cffea5ac811027bb5263d54d81f13d7b02e44ea4040b5064c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Principal.dll

Filesize
28KB

MD5
4c6c566b39273ebe630c2fb33b354982

SHA1
05f6d80c2184123dc1376460b790edddcb5e4c45

SHA256
9f4367036d2bf4f05ecf98e3e019ecbb72f04eccbd95d0e2f10739a7c04f05ad

SHA512
3752708bb6ba28f18341c06a1065b0e3c42c4ed9a83867c65d0293f840338bcd065039bdda61afe365d1a6510b88edb3dee527d043c6ba7b80043a0c854d91f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.SecureString.dll

Filesize
28KB

MD5
d1b40b24922a9c9267ee712db114c661

SHA1
2685cdb3a06db48881e42441ab04e3d03517e1ba

SHA256
b5958082b3e7de728a3d0c0df85629baadaf7228d57d4b30242a2c35f6492e35

SHA512
f68652fd1b7ecd52a2d5ca7740a2b0e39964ef0f3d057d61a6947aaf895239dc7cb12bf699814339e3f0561ca9d27c2fee825650e1090837ed071507538bb4c8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.dll

Filesize
318KB

MD5
94daa26b762e08593d451cc89697c058

SHA1
c2e778c7409a85633122b3b68dcc1df55b86a132

SHA256
952d8ec35b5884536c1d470408f8ac39d81b8e643c0d70914d17f84501252078

SHA512
32a3c562d9990a6bcfc3d6be12c730cdfb1acb100f903cd98cce25353c2fb4c649afd1daf532f7bca8d076dacb0a05222f4fc8ee9472760b78dbeaa2691ad6f6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activation.dll

Filesize
197KB

MD5
aa651242c31a6dedc56ec93b9ab90a87

SHA1
074ef2429814764de0f81d399fa85df3f52a77dd

SHA256
400c04d76e95390ec6fe6a8791b7421a28c0e430c46caa8bd5e397eb1a9d6e0b

SHA512
af2c5047e89827cedaf6cf78119d59efb1f5e5635c8893d4c1370c2c0c3c991015f606b3122fc599a5957fb5dd5a49a5a5e14cba30780f8015fdf90036e7e542

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activities.dll

Filesize
548KB

MD5
0a22d26e8bd15daa9840264f81e2c68f

SHA1
f55cbd0f4d6d1b4c05f45f2b56b742f6ae206e7f

SHA256
4e431893e96d1a0fd3b5eb030c2b64f488d85a6baaae61a1aeaf0c62aec4c985

SHA512
4fb99e38b0763950a33b71387b7f805d209071b946306539dc0beee5057a80c3eefb91b5b101f976cd34e5d6353f5eb0858cfb74eba468bccb7097ba6aa1a923

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Channels.dll

Filesize
154KB

MD5
36ba9ed90232919738e3fce001e3b711

SHA1
5b77c70835e46e6567b83eb8e9a2f8df7290339e

SHA256
63275ce630b3e33bdcb1147fc8498b4af2687497b1928aa858bc3a6368d60776

SHA512
a1cd097be4e548a754662d742ef00dd843be7cd3f68d596e529b6db116265a30e8f3f72ad482fb82daf2c2b5a375944d10330e74e1d61b403342a90631beceec

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Discovery.dll

Filesize
301KB

MD5
39ee388d3ae8ec64783059cfac29d629

SHA1
efa5e73c23b1a76e19b14e3e8324161156c2c4e1

SHA256
8e0c1ceb223486231750c4bc83df793e50b99933c8a0476cae6494f63ea5f81e

SHA512
f654be3b29f74e5833114b320e337ef9fb4aa5bd0faab476634140c71206d239770162d46208e52ccaf4fd35aaa97a4623ac49eaf1f06e1e66cde91ed4179466

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Duplex.dll

Filesize
28KB

MD5
f3c26fcc4cb47acbb740e9a3f52220f3

SHA1
1aee4bea69f3b99321b793b252b25cedfb8cb678

SHA256
e318b04229ea9eddfad558d59f361d177fa4526a5cd054a65bcfb25b6b67a3d3

SHA512
795dd4f2f7f628fe71dc59625a6c0152246332116a8923d53336a3fc0d7f0c59d805abeab8fbaeeceaf900d631d921dcc8ac66da3e26674931ee85bb0f92e560

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Http.dll

Filesize
28KB

MD5
22ae0f7a81674f993fbf05b5dc434fc1

SHA1
52dbb4208301a4118f2993bb4f456142fecb15ba

SHA256
0b974b0d7524a0c21b6371dff799163ed042ce70c565df76db14d338659852d0

SHA512
72a8155649e097292fca1c60e9304578037a8a6ecf5b09fc485143a6b2d776aff58c260ae457e5042921a195195b036c97d3ce700eed7bce726c489c2afa3e60

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Internals.dll

Filesize
254KB

MD5
9ad79d93cf6299bcd4c76590dd215766

SHA1
99bc8d5a94f94d226637872931140dc54a107525

SHA256
f8003e1009a0cd4fb12b429015498fda2caf31b975136b645c75117c076cd5f6

SHA512
9f266b1c0bfa30cc83eb59c56626dea10c20d84b6ecb2f841eef7d725a1d5c5900a06f55bd82cba5d9640385ec1e706da4485abb378a7003b9b1817b026b32f0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.NetTcp.dll

Filesize
28KB

MD5
64501eebe3572939f9e5680421e20e63

SHA1
cfe3735bf21ba9859d6a9bd6e354cbd322bb7426

SHA256
0e8e8917b606062b2c8964c81406167db4ce4b2827a20c05b92fa15c997b5171

SHA512
e0dad9cf99358084925457fc12a3bc970334c96f05b6813461821be282b7722f7a84bf6b6dbbe05eb7a947f5fc32d28cf4f6043b22210750c464b12ac850e628

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Primitives.dll

Filesize
33KB

MD5
c72e859b425f78202b1e3006a8b24e3e

SHA1
1098f0e0808f70fb1f8b561d2e5a6e0a7e15909b

SHA256
435d34abca4e5bc5d399565fd13392d48bae344a90e6cd1893eeab4cfecb1e44

SHA512
7c0b3a0d5ae3c38aa146c110ef53fb1f5594cbdb9166e37fdac2d94668ac5fffce61bd1b44b35862502d6b3203a4627d9eaab55358dace74ce6b42b6fd2f52dc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Routing.dll

Filesize
127KB

MD5
00ae822dcdfe849f7ddbcb629c680bef

SHA1
7a16553bdcc29c1d0aab140c23a6b8b895057f09

SHA256
85d9e57d0463b6dab38e1486fe08b55c5ab54a0fbf011a8eacb5c564de8b6af8

SHA512
17bc5d70231c7b08a483dd1218fb0c26c1d7bd2152113340389f7453052ca4c75fb0d6c412b571502d54b458d053e1e15b9a1776f157ea9467e7de92cddc2b2a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Security.dll

Filesize
29KB

MD5
f165529c90693e9492d9c074866bebed

SHA1
102732f0a355e99d5b429e24cf8081e761c2fc40

SHA256
ccc2962305afcc4df6706fa3d0f48c0f7603927e409c8c6cd626fdca25e2f02c

SHA512
2319d7794fc3c4c2b4bbf5f28dd8953e7d2bd00ae07d722693059709908c16e732b4258a16e05c57d2273faad99a322c0b07f12b5fe092f337dfefe3a27b1cf2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.ServiceMoniker40.dll

Filesize
22KB

MD5
87dae329d36dd2e4ab0a7a5f1597fa80

SHA1
e5255053e8cf27f8a5c3d4fb4438d2390bb58111

SHA256
d52676d1c90941f58d82e16155491de5b99ce27e1be5f3965890cdbe5e2917e0

SHA512
a80969fcb154a25f255ad44258abca4f4486573bb6c519c1a33873720bdf8668fcaf45e7d0120c540638c7c06b2b85c085271787161cad3f660a83165ff0e9f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.WasHosting.dll

Filesize
38KB

MD5
af34ee15e5912a6d243b14c1d2c8b6bd

SHA1
2adbd0944defaa16cd4a2de524b95150be115d7c

SHA256
6f34ea43fdff240fc0ecd78db5bcf8cc3dd6b3ed4e4d5a8f989af72ee8be7b25

SHA512
163ca8c4b5fb56f058a9fcf4cee72c54c47e586c241e9d61322d25906922ce9a229ef697cd12f732def15931d5f4d61ca95ae0d880f8c000f63910a1cfa80e2b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Web.dll

Filesize
320KB

MD5
c0c1d7af7a8b13c7d85eafcc92df6fff

SHA1
1404f8faed0b8c0e510c3abbff59cc72e70cedc4

SHA256
4802ed3289a24d5a13e96204cba49d01c9cfe64db02de87f2d04459fdec9595f

SHA512
ff304987d769519e1aad92440c76f456e2d574ca12bf89cf2a840a8e3a0f7bf1b1f5b4572245e928a56d442aaeb1982d4cee165ddb0bf10335b049653898d39b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.dll

Filesize
6.0MB

MD5
ebbbde008163978459bf4ee28763a258

SHA1
c7e17826fe4a6a5bf9f4ead40e3682c52ebae589

SHA256
da012449a05b5f0d1fab3d6390f11cc60b06d71bfc375e5ea416853f79f5a892

SHA512
fb3f8a5e13bf5e0392d4ce00f0a90012740ff236d805ac55f0ba5f1dd741198a331e57adb689ef18d2f4ae5895837ddd4961f26b6768ba1b0f0ceee1f56ca5e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceProcess.dll

Filesize
135KB

MD5
e4b5e38b2f107a5f2af375b22d5bb7e2

SHA1
12b6cc42077eb69a5db6d64a5a18ab68c62fa63d

SHA256
c4db2ad9a4b61bacc887372acb738490d878e4f0785ff4d09fdae513f0e8c634

SHA512
8dfed6f876caf46ad8b8741605651d173c4eb47cbf34779140d1d755c01e620a1459b4562a2fa56fa78672c8deb4b0eb77f0848daae0810226e269924ccee393

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.Extensions.dll

Filesize
28KB

MD5
e1f3e1102e2922fa77449d30804a0014

SHA1
f03ecc1980542681cde2f92c620479f785175e47

SHA256
9e1c259d7d4d9372fb03a3b8ec264e5d17e9f55be7bd89738c3ebbd4f154d85c

SHA512
025da5e0847f372371340c1bed76cefad666bd055f0cc3e4d000f48073527f93e892a71398e6be82f3e8d47387c30b9268fe2a41a19696203c018ff9c953a0fb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.dll

Filesize
28KB

MD5
ccdc8fb368e613f71ffaf0505c51d7ba

SHA1
8cbd4900690037d3568b69af639cacc29a634021

SHA256
89be049abab46a4f800199f4f32cf4fb64b9919cfd9d10d3c2fe0c162f78c9f0

SHA512
b8cf1f11f8771a280e15410557384c3aa551cbf205c63bcb63727a31cdd7e2939493ca19a30960fdc77b0e54020f7d6d8963c3e639b260acc5bbde08dc702874

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.RegularExpressions.dll

Filesize
28KB

MD5
fa44ff34dae7a22a942d00662f0e2ce0

SHA1
96213334836c3ac23c0a062f0d0cd1e5535aaf90

SHA256
90bae9c4cde3bee5e29b6dc428c4a343145db0ac1f1d20bd6d61acc23a2de506

SHA512
a1f5ddebc352e7c573ad6dbbe0e2f024d28630dbc87dbdf355c61e40398adb44b3307f5d9c3b58c49dc0ba4b2274ccce1cd4d457c147455e52144e6b03f43db2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Overlapped.dll

Filesize
28KB

MD5
69d03ff3a24c4ece13a42287a66cdf20

SHA1
0b9508be78c1db5b76d50511817c9f8919e44d64

SHA256
caf6c10e5120bc9b8b5e8ab38b00ce937f73b1262cb5e7f2ee2f54aa632ff469

SHA512
4584075c4fd561733479652d27ed76969f2241c05ea2a925bcf19f78547f275f1bc237494d6d473616d4ba670ca14544d6f89f05dc6914cea104e92ca3d6d953

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.Parallel.dll

Filesize
28KB

MD5
393eb4e0c63abcc3384a9a86cef61cee

SHA1
056334748d088cad558e555b5c90cece2394f941

SHA256
8bc64651aa3a49f26174e80995b3fc7b173ed5788d72c5053400c90da96bd30e

SHA512
00ec7c990c2d7d8e047a52fe27f22a9c30337ae23b28f2465a368318befec108015ef24e9faf337348d024c7da39e7796838b0a264a4de8a0601719fa9c748ce

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.dll

Filesize
29KB

MD5
59d8cd673a8843679e87973835774427

SHA1
53d70af01dc36cadce5fb74618366ead66ba4b72

SHA256
e5930e12d5d5649fca64902f4b34fb6078272c4fd274367f4f231bbf35bae5c5

SHA512
0d466b1af43640a5253ca37cde5a44a7e6bbd798b684746c5c8fdf24acd70f96704df51f2fcdedda1896dc851375ecf2a57cc029fab4d7f5e8374dcd164fa366

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Thread.dll

Filesize
28KB

MD5
0ec783098fe2ab01a0ae81720ccc4a6e

SHA1
2e9c3a658d0b4afc5382714b1e525f9cbc020841

SHA256
8681564f453eca5ecb99e8eaea545168e5f5258de13d29dd2e1ed122fbeb5ed5

SHA512
f7bd159b6e6d71a91d55619496d190a355e6162578467028c09272a926a0306598163f49df0b60fc35b70284c77acd26b885e7d45d14a27b83037c0857aff560

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.ThreadPool.dll

Filesize
28KB

MD5
cb2ce1e5cebc28e6ed08068fcc9310cd

SHA1
f4560effdea1c5b1a362b7e7d50402dd62aaa868

SHA256
8dd37c05a8cc13b31584589552094b2a78e0c3864b27a97b98ceba2e4dc2b6e4

SHA512
7b6bd43df07e2b007c2094ef3a3e3475fe15581e3705a0e3022aac1f68c8dd1ea8a1329b30bb4f54de48ea459dbe8e29f24815840b60a0eb19c3df7bdf5ca601

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Timer.dll

Filesize
28KB

MD5
11db6e6860e1a77668278aa57a44357a

SHA1
832b50e9ac4db91231df6e321ba30dba93a282a1

SHA256
c897887a3a67a022053268057949f97e9d537d9329fe4c1375661b8f13e8d15c

SHA512
84a15ad57ac008a2cc4a3c8034be5536e04be43594db3c6001d259d06ef26fadf28db1e4e07bc7a107f928c5b5621977967812626f4ef789ad10ba36a7423e67

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.dll

Filesize
29KB

MD5
de6d1e89950270a3a853b33b8967540b

SHA1
f9870ab0c6117125755e89f3332cedf1bca24246

SHA256
0dac65603d3854a4c939f5cf869c08cc141a30c101e865a8e9887ca0e8518303

SHA512
cfde6145789c4fe481bcfba414f76268847fca8fae858446ef59cd3b2af3dbfe3616e24a492efa9cd8a6d0811762d07e518ce642e9eaeb016d37331f5a6dea1f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ValueTuple.dll

Filesize
28KB

MD5
460a8e44023d39e649575ea859749df9

SHA1
4b01cb457c3a7c6d939f7de5c1a21f0737e4d20e

SHA256
839a37f82262def0adeaa31efbc70e604b98a2cbe910b108640b727e3d76ccab

SHA512
90e31371d3fbf216a6ec76ce30e40d77f125e1f079ae748debbb62d3c498f96067a772663a6938197479f55f2af3d35bd9aaef43723c4c76fa17693724f4a0b0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Abstractions.dll

Filesize
22KB

MD5
e5a885bea4b7f57615e7ebf5c90c48a1

SHA1
1d77a0046d038415c7a4fcde340bbdf98451cfad

SHA256
8722bea4ca03f51bcfe50b3a9bc90a7151033e14793b2aff857d9cb0d658d3c0

SHA512
3ea56978aa5a55eca14d3ae53b85be9e499d3d4f376e7b832d56ff788f42d40be028cb7f29506eb7d8b1ab4edb691ca46aa7d9e1a4819766f9b24f60a8de1376

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.ApplicationServices.dll

Filesize
69KB

MD5
0fef44c0df7d759bc40b1b4c11a31abb

SHA1
55c7978865a3f7c6c802551d067607b43d80bcb9

SHA256
28079e28d50c7c8b8079e987a01a0ea22d6e45d2ca6a4c0b9c1ed50309ccd551

SHA512
d6237afc8b19d3f5e2061e366c75f37c45518dfa5b455def1965d47035e260639925f89f8beb3778a88a3db9e7b2416703b520bcf5b7a603924b146712b4ec75

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.Design.dll

Filesize
103KB

MD5
d9a8af38ce3ba1c2d08e5f9361ffad96

SHA1
5970a6914595978d797e87c27a5a2c4305b61eed

SHA256
c4be4a780689611790db6ceb4167335e03cd8d5129fc8e8ee86f6139f0a420b2

SHA512
894fbf7daaace073a1175da9654d29a0a1174eb65a62f9691b97617a99a8e905d91645811227a4c849808bf000b7cc26a93afc8367878117eec4e73d2bc155a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.dll

Filesize
1.6MB

MD5
86dfd1279696ef22931982361901f96f

SHA1
1bb3809cc0f005fb77f0af48a648d91200de96f2

SHA256
60040d2ff066f22cb7d690b99cf1e482b329f1e048ad89943414de7ee15b3087

SHA512
7ac5df1d06399acd43d915be0058d1254c8bdf7e3dc6269c884ff4f88fb7004beeb65d39e193a89967f1be2f1bfa4585ca59c572cd8c0bf758f6e06f9b50f690

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.Design.dll

Filesize
43KB

MD5
d9b4e5307a7b5a26310e405d481a76d4

SHA1
db9b27f34fe185e4c2ee0580cb3dfee936829d1c

SHA256
d3f3aad872d075e3a5bcac91a409ba9322bea40dd4a729c2a73e3bf7003806d5

SHA512
e8c85ceb9ab568e748ee3cf38b0aab36aaa4fc4ede2cdf3eb8efa12d2b5c7dbe37ec23b056011c04b530eeaf520ca517ac697cf980a15ba999ec38bde835642d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.dll

Filesize
242KB

MD5
c31c88f3db821471c5465a49bf135559

SHA1
74187cd4d9be2459b9d881035955a9775b2bb97a

SHA256
ab2dd38b567a9d1b998810d4ceda59ad5af7c7b8ab03162c11666e568cdd8540

SHA512
050098735ce25362c97e109074a7a8c6e35c16aa678c644696f6308339a0db79af9ecff1bea8e088bbe7d600a9dd137076c6c30572ea8f9c0accac74a2bc4690

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.Design.dll

Filesize
172KB

MD5
de6161b22ae308c13fa385f7922479df

SHA1
906cbebe5cf0c74e75d30829bd800e538363de7f

SHA256
105b8f313c5846127af8f37b969fc9de547fef1027f74a86e91f783883c54caf

SHA512
3ff725cceca91ba619544b2f52f07a053c0782f76d6b764b73756c9e373c5645515bd11140954a033b331065d2c8155c6305df13f2924c50f7f72cf543c963e5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.dll

Filesize
161KB

MD5
c3ab1ba2eac530a940d06f3715b07540

SHA1
369177d69a3fac44bf9a4392f031022de7292f0d

SHA256
3f8863522f75571d8e786198c05835040091712472ed70e5628d3b7d03e2fa90

SHA512
598a344be1b5a415742a0a6d5a44aa5c958c9820fc7cf2f85db026d6109eb76076ffa58afe73d7c399e2d38724e626ba920f6a3134348f5e207b434f023dbb75

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.Design.dll

Filesize
348KB

MD5
c17d91a5ab8a3af501875be2596f25bc

SHA1
f0447be3a3192a461572a280e2db8c6f139263ee

SHA256
6ecd284f2f395788fa77bb4de4bb69a3cc609723fc3b9a1e688a86be1bfcc8a5

SHA512
08cfdd18c9766bdf05712cc78b37785de65504f33bc1e0b0c6df9b98217aadefc0406a5af2427e52a58884c6378b07f78dd0462f0d91e0d2b0b2221ca521f1f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll

Filesize
1.8MB

MD5
8f16a529125a0f030a68cc4915b7a9e7

SHA1
ceaf17ddd5b9287267ddc1ab9fa1932065fa09e7

SHA256
721ba78f73eff3251276555c8249544f838ff672bef84bc41171c7c4b31a4949

SHA512
2f381926dac5e19040cc15107ff4a44a420bd82dfd333d1311279bf48c2af44c048209efd39cb6e63a500c13a8f576ce1697a8ae788c5be03b10f98f978364c1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Mobile.dll

Filesize
811KB

MD5
25504c8a701782cdcff9ecc52648c24c

SHA1
26af53d97bbe7af3de9c32e53e93cabef700ea4e

SHA256
878c7e4bc2c3045caa9b82be12bae6b6251f05105cd4ea600ee15937071ff885

SHA512
00d1b15fa32f1a960b1477678c0b91fde5f81b9e841eeacca620a39d9efaf75af06679098581a0c1fb462d001770075fcb4b72f98f6e4983153bba10f963d69c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.RegularExpressions.dll

Filesize
103KB

MD5
5784c708ba9dc269f40fa206f7e25467

SHA1
2ee196509fbc721b0ba680c9f4b8aa490a51e6d2

SHA256
71fab5cd12bf463f3390312ab4e98d5567c4d60f3a96cc9bee32fcead9e49574

SHA512
4491fd606d1d08787ea553f8af2abc6c71c51b198af8bb40660770295c73c305236883c30c6b63be75225c0f22fd1e12f1e79568e58ed75cfc0f3231fa0cfeac

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Routing.dll

Filesize
22KB

MD5
ee07f8d72a7b846b02f0d578087ecdde

SHA1
f8d7e0e3e2a9e7ec8b10605c56e0041ec2c65367

SHA256
bdcdc180cc4bf08d765adce28b53cd77c657be802ecf3d2a722fc4a91534f661

SHA512
ebf1ff4f77b233164af491015a1179b2eabce088f9184b7d3cb1a6b4575b516846878756764b6c26d176b5f5e137038ac773396c8d137aa6783d9ef275c191de

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Services.dll

Filesize
827KB

MD5
0db209ae5c560e727042b4eb8f7ae80b

SHA1
24c4686c45252f9c08626374b0f9f67a2956e898

SHA256
51d5e800d1dafb140192f654cfff1ac40f135e467d625cc214547ab5c5251e01

SHA512
319082909fabdbaae6ad2ebca7799703c2e407cfd551abb03272924f1dd7654fb35b3b3ba002097b46d463517710fb78730b1cdb87dcdaf17469b1b85e6cd363

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.Design.dll

Filesize
80KB

MD5
b04b32a3b9ed4c9d51b32c5b41b6b019

SHA1
cebe16757289fab813675da7c63ecbb55047dd71

SHA256
6e1bc7085e06d0c4b5327d5f01d9e547ec17339b80fc45eac2fcc9e40ce7b1e7

SHA512
a51868c6a239a9ea4ef7415c4b745c93fd054ba8a76d77034c354d06f25e4405dd65ac23e5ca6342e8fcf454750e9a75b149d9b911b7c7a3f7d2a4dd4689334a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.dll

Filesize
1.6MB

MD5
e2cd405db4099c2f1d6ee42478fe902a

SHA1
d7ff28694d0a33611494bbbcb73e9f0d7a4beafa

SHA256
f405f8584afa9b9909424006b24182bd21dcf16b409e9cbea964acdbc234900f

SHA512
0b716199260d3816cb5310862d00448f5d8aafd10cdad5c1742740b74343c404c8de9525246efdf08a2023c7cc5cf32edc7e403ed99697dcc49c78a629aa503c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll

Filesize
5.0MB

MD5
c9547073255fbbf0d2978571d8eb6f7d

SHA1
e2b3086cfcd45215f59ec855d7a5515e9ba6918e

SHA256
875d03d2d426f397da51ed47582d2435f5942c6e97a15bc1daa96210aa8f70ae

SHA512
a3744517241423a3acbcaf7e919d776e557e69d694fb4db477527067659879654eb90ece3296f937415cc4802c1cd010f0c2796ce4790a77393dc8c9bb007ddf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.dll

Filesize
30KB

MD5
2a5d8299a462ba7e9350584c0a5b19f2

SHA1
56b4963d737b4651a2bfb81e45d25074431b4340

SHA256
2007c263871ab53540d23bec2c3716d5c9c4f35c05520c93610cb9b6f3fde670

SHA512
1230bf3b611b976d1ff89426892e2970505eed476ccce2021741676baeca81497d17b2def3a46ef9809487c385caccab15951c096c26f60de7abf7686dd3fde2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Activities.dll

Filesize
1.0MB

MD5
eaebd74c7af159685afcbe1823e77e87

SHA1
cacae3c99305e57988103baeda4f6364cac5a6e0

SHA256
3e92547c6380791d8e481fce2e7ed374f73e81ae38901468669b054908c4944d

SHA512
1d08c15fb0f9fd2f1d96afd8dfb9cc8da3a96a9873568ad45862b6d0ac73015e38458c5d3b5c5d22b327ce587627e99520c66cdb2853f3d349e1303d644b5c73

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.ComponentModel.dll

Filesize
1.5MB

MD5
ecc61d54a6f1d40312994c5d4afec67f

SHA1
cb99b7d4f3bf4416f6ae41a55f430fe20b33174d

SHA256
0dfa0bb1c5f8f2704c409e5ace197ffce787a45e4e7d33b8c04ce8b1b0d4783a

SHA512
bd7a4d5714ace004a2badb7d6fbdc871eb1bc7baff02a1c6df0d32df0f20f0cfde05953e440b9d25e22898879b8cfe266ea68f42a30798f7ddce4d9e1257f9fc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Runtime.dll

Filesize
487KB

MD5
d20312a0d93ab332e8482a3105afb325

SHA1
59243194f8e6fc60690323454cfda5637eb841d9

SHA256
c6e2898767f7975aea6fb097c011d47bece0d5509474bdd4868379b7b561693b

SHA512
605aef0f02defa7b796f259c7c870ef7f180c5f1aa6ed30bb4f1318e1c9a191edb02915dbb9b51c8a813707b1338673342a165ab3ff47a3a096c9d8411d93c20

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.WorkflowServices.dll

Filesize
440KB

MD5
25b0b90666f42423a4aece40b512b77d

SHA1
73cc65dc3319642b14e61ea291c3e99cb96735e8

SHA256
fd66601e000f39beec0fc515a6c37f92a03f29e984fc67d6daba91c4c23c4b72

SHA512
ef4e193ec3834648383855dd6889924a6b688a3cd5b70cdc968c0033d60e78771d0cca170e86f1ffa48ebd3809c2fbc3b264248ee99871ba4c0fe01aac5cfe69

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.XML.dll

Filesize
2.5MB

MD5
5bd3c77e14afaff816da82957354ffe9

SHA1
fa918794abafdabbb92c053ca4885f4df9259eee

SHA256
a34954e4bbc0322315a06a7e1890e7bc2f519fe33aab4258be956652c4c2eefd

SHA512
8041903146fd5ad2a820fc6295757d6672579f71bb7b7ebc21b35c766fd55267182cdc8f6b5f544785e16f434d64defa9df33bfbbfffd5aee40386268692345f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.Hosting.dll

Filesize
42KB

MD5
cf25692ea52481076a6dc08596107b85

SHA1
1279d1cd59435e3b9c9dd7aacfc3c5231342ebd3

SHA256
3c64db8a146a68853955d44eabdf8f97dc5161f4b0b46422f763deb193ce3c35

SHA512
7af05071f0c87a50cd04c1ea5907a350304de9ae102ea05b4463a6a8274bbe63b6f6603e7dbba3419d5e29cdcb739a8c80d09dbfb5bdd382bea86773bb47854f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.dll

Filesize
618KB

MD5
5a73e96989cb40b924e72d621877cdb9

SHA1
4187dbf10e5688539857ecc533af8760dc82071a

SHA256
f7149d866fb5257089ae0decb21b0081931c4fa3d154b1668aee2407b079be7f

SHA512
6d70f3ad108591b376ee896d6452d553c2bfc0a35c969474e6ad2eeb3052f247ee5105ee3fc9ceff1d52c85da470949691bd6a45933f8bfabe8d22a860313515

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Linq.dll

Filesize
159KB

MD5
f6db2c5d89228f1dad4d353248342372

SHA1
f8fa7d2131becd73bcc2bf00e780abfe8e5e0fd1

SHA256
6097a7230007a3f8b72e9979265aec4ebafaf91f32a9b4bf0b5de9e3bcfd07f7

SHA512
c94eba2e4395a1bad95c93d3751b96dd99cdce49497820566d462368b22e3345b147b61ac1c024b7f0d774c918aec30e8a2729578a467e74e61184ef09d68e32

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.ReaderWriter.dll

Filesize
29KB

MD5
724a4d1e4afa7562ac24052fb7bf2f5a

SHA1
8c2e9fad17b72a8dc6bc0c68cb47ae3afc765c31

SHA256
74d54e249d866be7cdcc89183db546e2f2d8a2ba1b35e139aef3ad3be7f3a8be

SHA512
c1aabe87bad4e77e5640633cbba7699c40d346e0d04c0c5d801becdd66c010a7a840c4776f5934855d942e564c9b0843d7d1382544f7771b24c0b9097d9f0a30

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll

Filesize
44KB

MD5
2e8549540fc30ff72278b6df46c7f1fe

SHA1
680b3b7bdb2f65ea9acb47136417a9244f96e921

SHA256
8ad2b1a199ebfa748a7823e277b411391ee4a17abc1a02adb2e4b80d34eabd32

SHA512
cbc602d5abdb54faf657da3bfaa45476c878e7509a8f498443d9b380e9c919d1002fcd9410051da9e014fff297260b74e7166686167f89818b7e0978a5893c66

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XDocument.dll

Filesize
28KB

MD5
51298da92a032abe9a590224d624f3de

SHA1
1ac8079a72f711ec873bbd61fe186d7f79db359a

SHA256
45fc8d9dadafbdcc8ed8d0a8d1997035c04815bff7fcf41a4cec2e4d23694ade

SHA512
f92e39ec33106aade5ebc7bd8605e99a2416d7a005c4057e7ba670161eaf04c2cb756afd36c1090ca90df3635838372661df25c1b189b7362e0ddd3c59101f9e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.XDocument.dll

Filesize
28KB

MD5
40049b8a3c596b78fdada0cd8b4f174d

SHA1
00c8ee0af34d194f2218349de5780b1476b58699

SHA256
80a94dd01d11e7e122b9b1ea5f2cdda74d1922a2859587925eff4cd8a734768b

SHA512
3c8ec0f85e20d27ad128d9a821735c9100d89bdeb082b38a9b44912a99e2eba48bae9167a6650511a7b41f6b4072c7c0a5e8d82469126d428dafd4501e6f80c1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.dll

Filesize
28KB

MD5
f42b8329b5f04f4f3d1078fb8ac096df

SHA1
1ca76348578da81725a6bba064be8317a869a004

SHA256
2fc7bcaf2642dc15b1b0c789a5fb079ddea5dee9e7ef0552212895c19a3a5175

SHA512
db240699bfcf3dc8a1b79f2c7a3f3f2958bdaa9554bacf417af174ab4effd27390469ac67633d3deba6e1a9dfaf575ec00f3950c5abc80ea8224790d68c9e23d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlDocument.dll

Filesize
29KB

MD5
8a4f834d6b34e810caf63952314e6225

SHA1
e8a6ba1f7a534bdc89db97d777ecc3a65e3a5935

SHA256
c7de509146a07e847e6f5f7d1ccba2f441fb3a6f123f6b2a05c99fcce46e0e81

SHA512
f6f9e2045748b6233793819f9db539541e0b3870dba206546b04d9f431c393f5340ffae44875f60e2014cf1656c04c42e6f1edce4350ecdc79b7f3954cff4e66

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll

Filesize
29KB

MD5
c53fe6475f35c9fcf5103c3914b78bea

SHA1
5a42651ca9673daf47ffd01a495a228dabf9a6a4

SHA256
ea7701fa52635927bce2cde547d6e050b69d550a1d26ce9afd78de04f075e778

SHA512
2d2c524883582c15b0467f7c55f9d005de396108033576eb568d90e102c4b4cb08e0efd4f6628b137352017bfc8ed381c7c135e581d461c81c995d835bf99e52

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.dll

Filesize
3.4MB

MD5
b519087e24cf4de153020d11d9685470

SHA1
5e2121a2d98e58658a68dbe294e48a50d6d681ab

SHA256
b0973e543db849e536b3157add48ac5a51905f974cbf2664a3c5d459732daf4b

SHA512
646c09d34dbb07c4d9ed4f69d9b88d41dcc78d775da2f579ee3f04aed45cbe8ed232229303176fb7cceb19c34149ad6b08397fcd8601e4cbbbc5f2dd0e5726b0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\NlsLexicons0009.dll

Filesize
18KB

MD5
52f02a968b05490f44d801c9dfd6c129

SHA1
02b3fe456a9cd8ead436bce980ef07717020a346

SHA256
193a769b0da418e721dca89c6063fa507c803d0a2a0317e9a48f58bbefc65ab8

SHA512
8b57631fadae13d1f261a349d2b57151eb36290390740786591bdefc21e1f30adc7e5674259778f09bb06d16fefcc5348b3ee574a82d1eea3c1376b13cdf2d77

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationBuildTasks.dll

Filesize
597KB

MD5
169f8d5cb2eb9bff67b6a543395a6932

SHA1
1579f92cc48345a0fc4db95754f645ad83744bcd

SHA256
d9273b10a1ddbb4093d2ddf740845fad19f766591bc9e1f00a2feb89b4d581ca

SHA512
b4b717b0e8720ec61f1599ed75262b91db124cd494d685435f70e07b9e861da1c29aaa0ba56b116aaac819a414f3b6afb74edc5dec25e8fcc46561645a8b0693

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemCore.dll

Filesize
25KB

MD5
1413f7d7b7afd30303dcf9a7d282caa3

SHA1
0c3645952d9f8de6a3dc460d439bc9321deaeeb5

SHA256
e8efc190f77f1138a0bc4ff0152b77777b7dff70fc632500ca64c2dbf18fb2c8

SHA512
c5ba682effb534d13a513c965f2492351d76e78a1aa950ddef31ff82fab5dcba785973e19c20c3d85b708900028210522f89144d9e4827aa38099f1345da01e7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemData.dll

Filesize
23KB

MD5
02539d6a837cee6141f673d089259bd5

SHA1
07d192b5c6c5fcab18a89621faffd88ecc3b5f32

SHA256
4fb44d9322af4d710552330a580a117a1326aa1275915db99fcd1f31da6ccea9

SHA512
28bf2928b335644e65d827926fd5f06e904bc62fbfa4f7fcdcc93f170d93cf2fcdcb4df9f29b557347d63826fabdbc80c0c7e4dcbcb7f575ae395de8d99b49ef

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemDrawing.dll

Filesize
24KB

MD5
1e2705bcbb4af2a9c91a61a6639b76bb

SHA1
2b766b5de927c3bdbdb42be780973dad4a5943c9

SHA256
052fefee5c14298ecd9fbe049fe0d410ad32d9edf775e25f2dea053c85ffb11c

SHA512
088df97bf0946d434319bba857e8892cdbffc6fc2b537a971e2dc17b7461dc44eda477170b0ebc1d9d55dea734cdbd4e9affb2af5cb7c1be38da3b81f351b3a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXml.dll

Filesize
24KB

MD5
f35e6eff2e274350958a8caf0ca20747

SHA1
7966c748efdc2add736b5500f2bd6b22a6696ea2

SHA256
720f5fea5d7cb34e7532340bdddb7a81797f7add16b6b675ab6d4206dcd10002

SHA512
eabb2be1893a87dbc8ab0b78b67054e8f8ce13390701365a079e10eaf22216d75b93b836e8d88fd053d0030715a88e858c31b98a324b1525cf89e344edb33b62

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXmlLinq.dll

Filesize
22KB

MD5
6c86e844792590006e0341464188a7a8

SHA1
3d4542bcfc2c91a80b7fa087b2631128ab02a4a6

SHA256
f3580093ef5492a58d0443f44b6edc80fe3c1a5dc046721a931edc67f6e22ccc

SHA512
c0b931e3d55e86623890aa883c19601234216346fd9ed35a8334643c0184c2cede2da0894a5e18092232c16a840fbdcd319b42790f962c85c70e93162a2c4793

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Aero.dll

Filesize
245KB

MD5
0e5bb20541b1f9caaf3c6dc17fcdced0

SHA1
bb104899ee9fe22e654956af88b734f2e3cd4579

SHA256
aeec3504efe805036ce85f8a3927208492b8c473c673e3f723c0911b6ec4a25e

SHA512
563f6ec1de91530aeafb44142748fc78313398fcaf36cc254409920744c8a46ae583b2aa4125f73454bf4ff444cd459fd783cd78987cae6deb282be2c87173e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.AeroLite.dll

Filesize
175KB

MD5
aad5fed8936101709035e907651d8133

SHA1
ecdf7eb8268585b828e4e37162880bfb92f2b4ba

SHA256
89045d97c6b9af56e8ac671052fd8a6434f6abecc07abbffa6dce47dd9aa9f41

SHA512
b6a05c1f3e54c89954b7d5abf726304062afdf46cac6c0c1627c861b896b34303db427f4e423ba0e0df9d18c6a5bbd3dad42381686f685df9751618aaa608a3a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Classic.dll

Filesize
184KB

MD5
d00a67d6cbd8ca07785942aefb4e1468

SHA1
4f721580f89193a4ec68fc64073a2581de49fd19

SHA256
840c55723e508876bdd820af0056e847bbac4e45aeb5d9dfc69bf85c8fe0d4a1

SHA512
3e57dfc15f3e0f32d3ecef127c803c6da96e2bf3eceb1df53c751f33a011b6e09dd9c0676d3a468864dd654f8fb85a24d54e412d7364d1cb121c7d6de05204b4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Luna.dll

Filesize
482KB

MD5
3e0266046469e26caf34a393d08b159d

SHA1
0bcce2032aaee1a8f7f4b2857dc1e223e76b92c9

SHA256
8f46f5ac810299195ebb8e4c1370800a5a4bebcbaf23d85ce1e173914e7c6369

SHA512
a2ac4c9d17bc46cb1bdf208535eecf0960615b354f09279560658c4db975c2ad6b74380c6ed7dda085cd8506729dbb2a33bb0df3cd463fd5e473567b6bf27397

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Royale.dll

Filesize
206KB

MD5
b77d58b01819be2528b9e802732fed3d

SHA1
150b9cd4606c354627ba8a63af94e34c0f678f8b

SHA256
839fd989f3377710d7c6d5e48b666428cb77323ee7c6490d836ef24ffdd1a3da

SHA512
37885b2f20a4c49cbd3fbcf70931903c53535cf105e828f5f0107e9ffed8462d7a017a729aa1c7566ad3841d9d0a7a0a5f6ddc7c12234dde17cd3f2791348ba5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll

Filesize
5.9MB

MD5
36217db25c3319767028929805d66716

SHA1
c00e38561eb6ffd5b2c6a6135290c3d2b62e2069

SHA256
62625b1a9f16440497d3d17234c1fdf5b6a9d224bd54b6db864e5841b518141f

SHA512
572aa018a3b980db4e0c635d6fdaee79d748d7ad87af24dc62ecde99e03d477202f78e55532996fbcd46735c881ad124c34841341be33f7a28d1fb3116f88aa9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationUI.dll

Filesize
837KB

MD5
e8d4183907869d6759c0248e76bb786b

SHA1
0c39820f55c83c0c83cc2d7e6e75769db1a7891b

SHA256
d8b46da0c8dc53731893fd03c0d0e6fab50e9c318a32d0dc238179ab8f403135

SHA512
419b768b8e3286ddc4059dfc06f4a57117ae2ea770512280ca45ba52cd600043a1b811db2ebfbf41f01e7a82e3168ecd323769c5f4964a8917c827287474592a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\ReachFramework.dll

Filesize
633KB

MD5
d7c23a91e65657f9557b4cafbd35b4d1

SHA1
e64cb7a577d10a1138dcac781d0ef3e7765d7c44

SHA256
ce3119740202e360eb8617d78439f27bd4bc1abc597cf23aece11317c17ecd63

SHA512
097397c142a51a18d0339a4dad4755b0ee5ca5666ad47f324ed86dd43725c0f41e7281869dd6c202f9357fee6db7deae4dd5c9b304c106d692ae7f201092dc8e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Speech.dll

Filesize
666KB

MD5
7eb0b29c968791aa8671dd6bdb23a783

SHA1
2c6110642e5038699e16a408e420310c3021ca8c

SHA256
7d8e2b183a0c14e5e350f430de051851532454e7e935e5fa133f002026b17a16

SHA512
e8c99004b0971f4cfa7f7c5741e92729afc1666c8eabb93abe49158b37e6c29b1553298a91fdd96933e23ca457c043d650ef5288a3bfdf4f540325704aa61a59

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Controls.Ribbon.dll

Filesize
725KB

MD5
2275b6d6c01bae302470cee87a5842ba

SHA1
984fa4e1d5f08bb3a1814c65df7da87684a418bb

SHA256
ed3805dda96c67dac820ba1d367bc1d4753fa3e52ba199612c4f8218a3b3d774

SHA512
ee444341c054ec2d5b57dafd6e139e6d73cccce6d5afa3eb5043a5c7ac4214406d28547b205033c56b92e23ccce527c8c766c2cb3a4ad05e3df30fa1bfe757ff

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll

Filesize
66KB

MD5
5ad60d887d6b49322f9c0711efbca81e

SHA1
40464e38353126f195490d59d6ddf4c10aa9ac5b

SHA256
4ed8625e215ea2e597e953d0947a1919bface20aed467d2a10d32d400c5ecbd5

SHA512
2f50f849186da8ae0f94b93c94bec3f9f9d487ae9f0081f355d5765db6315cf768b9e712f92266bb196bb9e8885d4f4063e0e7f6c7a0f303fcf572ec8364e71c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Presentation.dll

Filesize
28KB

MD5
5e0dd45ed009ffdf6c783c6e8de1566b

SHA1
4913855f1cd3d787b9786904d3eaae6a52896b38

SHA256
58c25e15345979cfce06ab0e3ec821b730a3846979a7535de1883b4950c3902f

SHA512
69577ae348bde2500930d254bb81b8224ffddb359ecd0b58716a0e5595bc876770e6b46ee2116fec90255cd0d55865f141e6ed2891e15760a26a82a8907f226d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClient.dll

Filesize
173KB

MD5
42eb96850e1f58d32665efa3ae981130

SHA1
1c61b88ddfe9b6e12a670cc8e4fcadaf6a746753

SHA256
95ff3f571c369662f73f083bf054b27b9018bc46dbffa2abdd3a55bf5223b2e5

SHA512
cc10b9826b1d8c6fe2a0d0c0701deb6cd130b0c2af3aeb0b76fa0d89996853a05a8a137778ffaa406986da43cf49aec605c3fb674b36969b5df885bf5d7127e6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClientsideProviders.dll

Filesize
352KB

MD5
cbafba091cc1a0ed5fa830544f571b2f

SHA1
3125380f457bd27066156942d7cdc0074c589d27

SHA256
449a53d3c53ab7d51ac679f186dde381d033b8c517fa6341b5fb8fb32c0e3ae1

SHA512
8aa2001f4d3e6c5a75a510ddd45c2cce47cf1b63a3a175ce8d342acf27ac9c3c157c814f1dcec93c365418c1f249fff62249c8b92478fd74efb4996201dc473d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationProvider.dll

Filesize
47KB

MD5
e7c48a1dbd4766eb5c22094ac51d2c4e

SHA1
b4d07d3bea0ff08f50220a298691731650ca3aa6

SHA256
67b6a6eae3af249e5c07492da03e2c671349e4f2576c54033360e055841b0c23

SHA512
fcca6bad5ba3f0b27fe270110132a3e98838d67b83a4ede12fbb7aa0c031da8ff47ba1ba306eabbcd6924498a6e92e74e941ffba40b95649a1e8a3db4cfeebeb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationTypes.dll

Filesize
215KB

MD5
50672b78674b1e07a4176fd2a1a0c801

SHA1
0b4bc4821fa4ff13fa17334d1cd3fe170e07d4dd

SHA256
93e448f763879c6c9ae6b45f86e74b3d1deccc27775a8e523b06b404857ebcf4

SHA512
c79144eb57d0356c33ad948f96dade39a09b100c1a70caae8b2f18f717ac128a8b2dd6a76ed03c00269fb0e8021c7d40b6e22786c52110130103fbbf8671a5a8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll

Filesize
1.2MB

MD5
166f0ede22ed0aeaa3d008e56d8490d8

SHA1
dfbeb180b0a5291906254a329c1a459c372f3cce

SHA256
53cef3e3e1af8c4e1c768199823aea7fc449528bf7d2080cf5859240e7b82121

SHA512
6f46165cbee8af90c8a0171c0b79176fc301bb8433f9174c43e04e2a1700122567f86d17696bf570fe52de5869d4df3e95b53ac621904591d7e387d931f344f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsFormsIntegration.dll

Filesize
101KB

MD5
c69cf45fd5d5018d1997de9567a19341

SHA1
9e0b72c887279d479feec9519803b82688669527

SHA256
87ff312461687f8976180f751df9381bdd4c22decd46b3a33bf63392f113d678

SHA512
d3240c5bdffbbee959829c27d2cddab486aeb95f42bae8fe26dcef35b0b68d487cf3a2c7d2814164b9ac7a1a65b85d31c0121c89913730322ebf2dad6d436a62

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XamlBuildTask.dll

Filesize
129KB

MD5
0788470111a19380334eebd868a92a91

SHA1
f880e74214597c1d1da009c2d5cae7353f8d2a90

SHA256
e8912eae787d3bdc0278b3f21e6aea6debbea3a1532c768921d692c31942683f

SHA512
dfefd60c13dd3164b0697385f58d3901af416a435554f2fccde4aa0a660eb283dfc07fdd9ee95faa343f38a84f938ee57abccf5fa93c9da1ad524b0ecc672323

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XsdBuildTask.dll

Filesize
66KB

MD5
2900750656e8b916d1ab207d24a223c5

SHA1
960e07dd49c4bdf3f02423dd58a464acc914c7ee

SHA256
41210fa86f2975d6a03e85469d13152ba8803d39f644488d8248fcacb69010e0

SHA512
c380f6bf5f2472141f2d07b636b11ec977482caf3ca72e9bd4ddd72d82ea110a9aac66a49d30704ce93e21f813ab1845a863da6b9e58bb4692801a4331ba5ca5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netmemorycache.ini

Filesize
1KB

MD5
dcb072c9a6d085e56e96bca827d6f13f

SHA1
c8fa84184859b98ee4b992bf808118a41f259231

SHA256
86e9f1d9afd89a60fa64a016831246cde6c30f91876cc52561f20579f528fc5a

SHA512
5c7a1ea3d0957f5800fff8e4aff8653c6a1b347f79f28055e8e07c5f297c6e2da57e3dc757e02596ae0213b2bab00df119a2beacf0730f3a11e5244cee3f2c4c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netstandard.dll

Filesize
104KB

MD5
ca768789bc72aa181ec05d0f57b4b384

SHA1
026c2394408a5d87942ec68d3ed539e44e4b38c5

SHA256
020a3f602ad02e86f75032b76c10295f5dd0f06e97ced6d525f05c54d743ceb6

SHA512
73d09fb9b553808a347396d58fdb317a4828869fe514e3d98b5dedacb69e8b9c7ed77b0de06d03281ae77a4369707b9d70adcf62b1ed5a4e8b76ff27ed9b6c35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\sysglobl.dll

Filesize
129KB

MD5
0f202a9e37c988b6597eb5c7259230ab

SHA1
f5712c0a40e5e9413d46cfa5a6cc911b8715d848

SHA256
3fa92332d0eb4c64438aa131e0cf5d305f42a90a2e04920421c206f7e243b4d6

SHA512
6bd8dfa81486cd951305012fd1f37ff20426a1f0b338114d6e856463015bbe8644e283c9c8a5b0f919e56eefaa9bc388b8a2561895b3a17e0b375d2d76afa5b7

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsLexicons0009.dll

Filesize
18KB

MD5
8beb4c2ebb775b42e45e01c4aa442c1e

SHA1
dae947d1ecfdd4266b88422b7e2ac82053bc9e6e

SHA256
8d2faa7f5f10390cbceca98412f211737dddb04f2d1193d6fb42d9b5f9a8c412

SHA512
b898bf835b30ec02a32a9e9a47defe132026817b7bc98e3563dcde7cfba9d63e8a1b63411c4b7e4ba41c6a67f2b64fddbbdb68132465de42c22b0c41f2bf4027

Download Submit
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\desktop.ini

Filesize
145B

MD5
ee89a064cc99c9bc71996e56ac308eb8

SHA1
0440b0eeb7ae261e55641a14164efa0265be7832

SHA256
4b954d41e60198b0390b19659d1332fed1c91158e87d24d9dee61bbc0cbb7f08

SHA512
7fea369eb549b2152b44651ea758c59a73775980afb0a9777cae20fb2e4a6e57f70081817c5070aebf20c2f9b03551765288d77a14d6710e72622a376090f08c

Download Submit
C:\Windows\SysWOW64\msvcr110_clr0400.dll

Filesize
18KB

MD5
1abe502f98204cb292d0c72092860dab

SHA1
84c414391885ab25bfae6940ee6a387c7773e4ed

SHA256
cbf4cb840e1d9c94cb262e7ecb898bcede5c352728ab824b0b43350715faa8ca

SHA512
da24c462a9c14a0914cc026133c52fcbd4ea512a6e0d8db30a3ab6d4bc72ee4080c6b28c5735e1c05e7273a85a62f892835bd3efd6fec49f507da2129ffc3fc9

Download Submit
C:\Windows\inf\.NET CLR Networking 4.0.0.0\0006\_Networkingperfcounters.ini

Filesize
162KB

MD5
138fc75952d5b12ded47df67c114860e

SHA1
9b8f3fcfd19aba82787a548a0edbf6b92ff3560c

SHA256
c4f0803982c0ec4ed9ecca85041aa2bbce9c5f5420d0ad264345fccf035675d1

SHA512
46b1c7cee3cf5101a4a92f75e7cb057dd235e80fcd251ed1a6f314f8c34ece105518eeb112c1e2c521a36e5e30ecfda38e89f4fb3ae1c8679c5e0b4eeb2db8aa

Download Submit
C:\Windows\inf\ASP.NET\0005\aspnet_perf2.ini

Filesize
972KB

MD5
a344f0425d9f987ca123a6df2f4739ca

SHA1
ccef4bb83f5c3535053866cffff064e069e4f98b

SHA256
f659cc5fde8a84366c53e9075efe32a258828ef1807e1f25380592b33f428244

SHA512
436d0b6f55f53ebe57205f410e766e8221d29d9a2eee52955036295419b647395375fd2eec52e036f3553a5f11e953d8f13217aa5c261387a42733f167d6a281

Download Submit
C:\Windows\inf\ASP.NET_4.0.30319\0005\aspnet_perf.ini

Filesize
974KB

MD5
8a2322324e561ee05127e7103e29f4b2

SHA1
60bc854261d544ac9c433d4b7bde02b27fc22ee8

SHA256
ddfdee054f3eae7986a71946402d57d1c6cae70a1544b94328c8116810603edc

SHA512
0d7b72a6e671fe33308a7e22aada6400098b9d868d51f41fcc23457e3b781eaeb4f9bee6ecfb601cb0186bfd95d5044ddec5d773369041cc1d7c847251629830

Download Submit
C:\Windows\inf\MSDTC Bridge 4.0.0.0\0006\_TransactionBridgePerfCounters.ini

Filesize
132KB

MD5
ee973c1d71e3e580ad4d8937f6b5f69d

SHA1
53cbfbab15542012dc663760fa0eec82f62f1397

SHA256
9a5145648e1ee50ce77e9227360a8fb4652a6c8c105f011e384998d55c916326

SHA512
125cf42212f09832b5089ed5bf64cf58b405d8899115a8e8156ac5f831c21c97ddd0385d6dc51d5eff8a4850d394fc6bd6b5680f90e533b80926b4288aa5cf4b

Download Submit
C:\Windows\inf\SMSvcHost 4.0.0.0\0006\_SMSvcHostPerfCounters.ini

Filesize
130KB

MD5
9ab00bf71a7bc19ab82fa2fb45bf2581

SHA1
8e10bfea6932fc01a7c63c2e0259c159172b237f

SHA256
24a1797a93bb757f3165be7f1aca3439e72d4f714b8dd5c9bf3b8d899023ead9

SHA512
6bea9e04c8f1e891078addeed6b7e3838132d4362d10e86bae2fdfcff981274e19bd8d4dbf4ace4d30f873944166b36d4bcdcfbab6c45e5e12447fef2e129e1c

Download Submit
C:\Windows\inf\Windows Workflow Foundation 4.0.0.0\0006\PerfCounters.ini

Filesize
150KB

MD5
9c4006e59ddb1c0a760456632a8c3643

SHA1
0752a1775acf144f1de995a8b057aaffa2c2c63a

SHA256
5c540e46943416202b976515fbf3f3c15c28e7aea3559b62e7cc538c675647ec

SHA512
ddbc57d62b71760f49bc84577ca041925eed4d4c98199ad4645fde78f97b298add216d6039284cda7692e95cd58a96709edd67446435252bb95cef24e7c16c51

Download Submit
C:\Windows\inf\aspnet_state\0005\aspnet_state_perf.ini

Filesize
41KB

MD5
c02e8f46d2dd454bd0ff247c76a442f1

SHA1
d42c1d3e68def6e19d6c09b43a4d86e4e377bafd

SHA256
b594c646d0e3d96faa6dbd6b30cd6f185d69e142eba5f8d1efeace84e4dde330

SHA512
9988fb70cb484ba86f9bcd0d5de7d18ee447110d880cf82087313b56e8f5aa7f721f57fd946f052a3cf4e26c96b3b328f232153f01adf071e4d4d79cb95cd844

Download Submit
\Program Files\Microsoft Office\Office14\VISSHE.DLL

Filesize
953KB

MD5
2f4759c23abcd639ac3ca7f8fa9480ac

SHA1
9a3fece585fa01b7b941e124ead0c39c8ce9bc7c

SHA256
6d66fa59407862e0fddfcb36472fe810eb308653321ca0e374ac870f9aa8cec6

SHA512
6ab14d6a8d3e9a751d68133e734cc804de2b50a7ef223d484d0f727cdfbd00d48f6e0666c3b86a0daf9ca42c0b726f6c2a088e5bb32c993748abfea7b5904ec6

Download Submit