16ff948e12779fe3d09b502772605a037198291861ae2fca4fe0ba91b40d9d26

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
06/12/2024, 03:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Size

65KB
MD5

cabf8f39ef3d24be4adf8a096bae27ff
SHA1

93d6b97bb15dc1b4a719137c2376dabbda264173
SHA256

16ff948e12779fe3d09b502772605a037198291861ae2fca4fe0ba91b40d9d26
SHA512

d93136d85072d4c0b5e3226b2ec41b7bf4affcfe89206a17ae867126079a3020ce480a1cbda7127a2b59278244eed09ad965f11b4debe2bf49fcf10fa7b6289e
SSDEEP

1536:7OhEzK2kcfYFaT630yoxAkWJ5fFE3PTHYi:QEzK2khaKtFJ43P

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (4276) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 7 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

Manipulates Digital Signatures 2 IoCs

Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wintrust.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\Ru59MZ442beTeJU.exe"	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

Drops desktop.ini file(s) 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Media\Savanna\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.7600.16385_none_add5a10aa4d614d5\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7601.17514_none_4f7e32f76654bd3c\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Recorded TV\Sample Media\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Globalization\MCT\MCT-US\Wallpaper\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_6.1.7600.16385_none_480c0d8bd31ae43f\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17514_none_75d78dc0bb37c026\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7601.17514_none_f35f9773adf74c06\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Globalization\MCT\MCT-GB\Link\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Web\Wallpaper\Scenes\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Downloaded Program Files\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Garden\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Landscape\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-ehome-samplemedia_31bf3856ad364e35_6.1.7600.16385_none_b6b9b223710b3802\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..oundthemes-festival_31bf3856ad364e35_6.1.7600.16385_none_121f20b55f0bde68\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-m..ttheme-ca-component_31bf3856ad364e35_6.1.7601.17514_none_fae061a2e0ae5019\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ktopini-systemtools_31bf3856ad364e35_6.1.7600.16385_none_da623240a154f357\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Pictures\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Libraries\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Web\Wallpaper\Landscapes\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..allpaper-landscapes_31bf3856ad364e35_6.1.7600.16385_none_e57abb2f66db71a9\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FXDUII3O\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..-soundthemes-garden_31bf3856ad364e35_6.1.7600.16385_none_f7a4bf1e15863e21\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ktopini-maintenance_31bf3856ad364e35_6.1.7600.16385_none_ba8f25a3b6d81a68\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..sktopini-sendtouser_31bf3856ad364e35_6.1.7600.16385_none_64398328adc9c59d\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-shell-wallpaper-nature_31bf3856ad364e35_6.1.7600.16385_none_d5909570704a09c0\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Pictures\Sample Pictures\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Raga\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Downloads\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Desktop\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Web\Wallpaper\Architecture\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\Chess\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Games\Hearts\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-shell-wallpaper-scenes_31bf3856ad364e35_6.1.7600.16385_none_a4393b1a254aeaee\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Pictures\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Globalization\MCT\MCT-CA\Wallpaper\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-musicsamples_31bf3856ad364e35_6.1.7600.16385_none_06495209cbd8e93b\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..undthemes-afternoon_31bf3856ad364e35_6.1.7600.16385_none_2a05e57d5ab3659e\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\Favorites\Links for United States\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Sonata\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Web\Wallpaper\Nature\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-m..ttheme-us-component_31bf3856ad364e35_6.1.7601.17514_none_b52573ad8e4c2d89\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..allpaper-characters_31bf3856ad364e35_6.1.7600.16385_none_bde0eaed84920a21\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-shell-sounds_31bf3856ad364e35_6.1.7600.16385_none_73076dd9cf3a9dce\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Delta\Desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Offline Web Pages\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	F:\$RECYCLE.BIN\S-1-5-21-2703099537-420551529-3771253338-1000\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\KBDSYR2.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\webio.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\TroubleshootingPack\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\DevicePairingHandler.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00l.inf_amd64_neutral_f1fa021d2221e2c7\Amd64\EP0LVPZ0.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sud.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\Starter\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\ipsecsnp.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\Starter\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00l.inf_amd64_neutral_f1fa021d2221e2c7\Amd64\EP0LVR1C.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drmmgrtn.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wship6.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttd2.inf_amd64_neutral_9dcd97ab7a913b7a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\_Default\StarterN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\_Default\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\AtBroker.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep304.inf_amd64_ja-jp_27c560b15d9928c0\Amd64\EP7MDL0Q.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netr7364.inf_amd64_neutral_68988e550e69a417\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netw5v64.inf_amd64_neutral_a6b778ba802632cc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00g.inf_amd64_neutral_6f76b14b2912fa55\Amd64\CNBX0282.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep304.inf_amd64_ja-jp_27c560b15d9928c0\Amd64\EP7PII02.INI	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\IME\shared\IMEPADSV.EXE	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\eval\ProfessionalN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\NlsLexicons000d.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\poqexec.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\HomePremium\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\difxapi.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\OEM\Ultimate\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\replace.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\cliconfg.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\migration\MediaPlayer-DLMigPlugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\advapi32.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\_Default\Enterprise\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnin002.inf_amd64_neutral_977d40799168c216\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\DpiScaling.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\adpu320.inf_amd64_neutral_4ea3d42a9839982a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnnr004.inf_amd64_neutral_3319ff2548f89fd8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\smpicfg3.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\_Default\HomeBasic\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\netjoin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpc5500t.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\QUTIL.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Sxs\SxsMigPlugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\OEM\HomePremiumE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\OEM\UltimateE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\upnpcont.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\uxlibres.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\StarterN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\dmvdsitf.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\migration\WMIMigrationPlugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\netplwiz.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\avifil32.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\inseng.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\MUI\0C0A\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\rascfg.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\serialui.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\DeviceUxRes.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\brmfcmf.inf_amd64_neutral_67b5984f8e8ff717\BrSerIf.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00f.inf_amd64_neutral_777b6911d18869b7\Amd64\CNBP_279.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\eval\Starter\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\KBDYCC.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\logo.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Common Files\System\msadc\handler.reg	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\libGLESv2.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\es-ES\js\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382969.JPG	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\speaker-32.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\misc\libxml_plugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\ja-JP\css\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_en.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoBeta.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macGrey.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-desk.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\THMBNAIL.PNG	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\Microsoft.Build.Engine.resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Mail\MSOERES.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\36.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Common Files\System\ado\adovbs.inc	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\THMBNAIL.PNG	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_dot.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg_sml.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\System.RunTime.Serialization.Resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Web.Entity.Design.Resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\msproof7.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libtta_plugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\es\System.ServiceModel.Resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Web.Entity.Resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\glow.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_thunderstorm.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\MSOSVINT.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\TRANSMRR.DLL	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\header-background.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_windy.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_down.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\xlsrvintl.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\LISTBOX.JPG	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\fr-FR\css\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-gadgets-weather_31bf3856ad364e35_6.1.7600.16385_none_a9cf548d21b86a2f\11.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-h..nter-shellproviders_31bf3856ad364e35_6.1.7600.16385_none_f06311f5098e0e17\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_vsmraid.inf.resources_31bf3856ad364e35_6.1.7600.16385_it-it_7f9a18d8d701ae73\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_networking-mpssvc-admin_31bf3856ad364e35_6.1.7601.17514_none_a75997dee0110f15\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\JA\System.Drawing.Resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-extrac32_31bf3856ad364e35_6.1.7600.16385_none_371e8c461d966a55\extrac32.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-gadgets-weather_31bf3856ad364e35_6.1.7600.16385_none_a9cf548d21b86a2f\docked_black_moon-waxing-gibbous.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..c-mceburnengineicon_31bf3856ad364e35_6.1.7600.16385_none_0a0899f37b2bab4d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..rbleplace.resources_31bf3856ad364e35_6.1.7600.16385_en-us_09bc2db811bc91be\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\MSBuild\f4a88265ac4ad47978daef8c5482fd30\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-getmac.resources_31bf3856ad364e35_6.1.7600.16385_es-es_14cb683eb69d3792\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-photoacquire_31bf3856ad364e35_6.1.7601.17514_none_925c6a062361e055\PhotoAcq.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\wow64_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.5.7601.17514_none_0f99f84e0e6e2bc3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\Globalization\MCT\MCT-ZA\Theme\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_netfx-applaunch_exe_b03f5f7f11d50a3a_6.1.7601.17514_none_51e5e402131afc4a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_netfx-aspnet_webadmin_perm_res_b03f5f7f11d50a3a_6.1.7600.16385_none_d966c4065f6c437e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_prnca00f.inf.resources_31bf3856ad364e35_6.1.7600.16385_es-es_5d7fab1a039b9bdf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\msil_servicemodelreg.resources_b03f5f7f11d50a3a_6.1.7601.17514_es-es_ed30aee2fb066a08\ServiceModelReg.resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\wow64_microsoft-windows-a..olicy-snapin-native_31bf3856ad364e35_6.1.7600.16385_none_a5b522837df19ae3\AuditPolicyGPInterop.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-h..ragelayer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a2175ff5e085f97e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-netpacerinf.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_f318701f5c84e52c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_de-de_48082d3607b4f4ab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.1.7600.16385_none_a32524c42126d7e8\mscortim.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.Services.Client.resources\3.5.0.0_de_b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\MUI\0409\mscorsecr.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-i..pbinaries.resources_31bf3856ad364e35_6.1.7600.16385_de-de_2856a514b1493d6c\axperf.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_prnod002.inf.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_871dd2fab61555c4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_3cf5e466d58070d9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-c..tasp1.res.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_404a75aaa23b4aa7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-tpm-tbs-core.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_83c79be1c765a37c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netmemorycache.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..airingdll.resources_31bf3856ad364e35_6.1.7600.16385_es-es_1b9ded448b012bcd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-i..httptracingbinaries_31bf3856ad364e35_6.1.7601.17514_none_8dacedf8319144f8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-wmi-wdm-provider_31bf3856ad364e35_6.1.7601.17514_none_d858d17478af3bc1\wmiprov.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-a..orecodecs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_43f2d4cd240da13e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-sctasks_31bf3856ad364e35_6.1.7601.17514_none_8c46e17f1398738b\schtasks.exe	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Sports\6.1.0.0__31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\TaskScheduler.Resources\6.1.0.0_fr_31bf3856ad364e35\TaskScheduler.resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-ftp.resources_31bf3856ad364e35_6.1.7600.16385_es-es_6ddf1298b9c25dbf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\msil_system.web.resources_b03f5f7f11d50a3a_6.1.7600.16385_es-es_540bc71955b9409d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_megasr.inf.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0d2208e5ce638932\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-gadgets-weather_31bf3856ad364e35_6.1.7600.16385_none_a9cf548d21b86a2f\docked_black_moon-new_partly-cloudy.png	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.EnterpriseServices.Wrapper.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-bits-perf.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0786042ead1aa38b\bitsctrs.ini	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-networkprojection_31bf3856ad364e35_6.1.7600.16385_none_3fbc74d90a6e33f8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-w..ure-other.resources_31bf3856ad364e35_6.1.7600.16385_it-it_967d26877ca0e4c2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\msil_system.deployment.resources_b03f5f7f11d50a3a_6.1.7600.16385_es-es_d11e5e750ab9fe98\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-tapi2xclient.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e8e4d27156d257c9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-wmvdspa_31bf3856ad364e35_6.1.7600.16385_none_e6522b866608b0b7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.17514_none_fa8534ab236134c4\mf.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..ator-base.resources_31bf3856ad364e35_6.1.7600.16385_it-it_80ac4959a09d7b38\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..cingstack.resources_31bf3856ad364e35_6.1.7600.16385_it-it_75597592789f1a85\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\msil_eventviewer_31bf3856ad364e35_6.1.7601.17514_none_a7c7be940756e915\EventViewer.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-ie-ratings.resources_31bf3856ad364e35_8.0.7600.16385_ja-jp_a31e12271f624cf8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\MMCEx.Resources\3.0.0.0_es_31bf3856ad364e35\MMCEx.Resources.dll	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatiod51afaa5#\867cbe7462b04e2cf1ae39abb576ae2a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-m..utilities.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_83f81bfd004e80b6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.1.7600.16385_none_3e71837ad96d07fd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-xmllite_31bf3856ad364e35_6.1.7600.16385_none_e5307039bcff94de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_netg664.inf.resources_31bf3856ad364e35_6.1.7600.16385_es-es_2682446c93017f7d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IHCSFKNFSOCVCMJ\shell\open	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "IHCSFKNFSOCVCMJ"	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IHCSFKNFSOCVCMJ\ = "CRYPTED!"	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IHCSFKNFSOCVCMJ\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\Ru59MZ442beTeJU.exe,0"	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IHCSFKNFSOCVCMJ\shell	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IHCSFKNFSOCVCMJ\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\Ru59MZ442beTeJU.exe"	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IHCSFKNFSOCVCMJ	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IHCSFKNFSOCVCMJ\DefaultIcon	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IHCSFKNFSOCVCMJ\shell\open\command	cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\cabf8f39ef3d24be4adf8a096bae27ff_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops startup file
- Adds Run key to start application
- Drops desktop.ini file(s)
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2703099537-420551529-3771253338-1000\desktop.ini

Filesize
129B

MD5
ca9aa5bd7274d42da4a38eaff5805a91

SHA1
64be607cef5acf1e4607e3a386019e871591179c

SHA256
0d6191e3e025d1939b62c26fade11d1521201f9320868527a7497bf556b7e694

SHA512
a6fefffd11eac3a8114ffe4cabe16be988f239dbd252e10b38b375bf05a57bcda027ab45a945ef2ff9581d799d1f1636cd08bc4df13c710eee18c55394e07b29

Download Submit
C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
19B

MD5
f460d5b87d924c0e31115f3eba153e5d

SHA1
97f7b67f96b8946da3b2d01bd19fbe502bfef4bf

SHA256
aa804d8fb0ee963c022b36b10dbea6a91f1b33466b05f3e2a3768452e90efa89

SHA512
6dd98d33e049a5f380c5caa36a22da3e070f258630819625a2b6f88e21a7695016a6a558acec5e55b370ebc3ccff9f72734a55d153e686baa1ba7ba9be13562e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
1153f0a892ad7dfa545886c55a8bc82f

SHA1
c8a8085e6cd10107adef33a619d45d5f059d270a

SHA256
53cb9dd1052af65a5d422d77c3dac1454d8decda8555129686ce2ce4ded02e0a

SHA512
ca4c32955b1aa49919621ed45f70be6cea5c180b934e63151629d94be800bd7c646437003476a2c6f8ee9c8d0a99ad31038d1608586a3434eb905420045c4015

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.ICO

Filesize
318B

MD5
d0d249a4c482cb615be24c7bf8985194

SHA1
46c4ae999f3c8a07deca63a6f82e00971c508271

SHA256
d076824c64127c565fb92cd9bc80c050772898ceda6ef643cde45f2437d77c4e

SHA512
dff7ae330c8d4556d09a9f459f8b2d202ce97f7d566247da5786c5c11aec7b24b8295f1f00242d520f2c2733f893fcbbb996820b132607f8c00fcd1a25a0f3a0

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
6KB

MD5
b4a6b83c727c2adf643a10533e209f28

SHA1
c74ceef0140ad8b72f3c6bf8e1a6c63c14152be6

SHA256
d62ffdd28ec63dc8c2b77726563c3d4febbacf50ea6cbd28b53e43a0075a6e66

SHA512
06c20c831862d31ab93078c0277933fa42030057acb4c3354459006337d0fea6597c3047a53c2f1e426ac053a22618923299cb7cfe118f4b4b7d84f268ba7341

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\VIEW.ICO

Filesize
318B

MD5
da4661d58cfac2c52b863790bb71c9b0

SHA1
2fe3ca12ea3b139fcf68badbe07b08bc8b1c2b7f

SHA256
1966e16b32af6eb5502e59905dc7c2e237610aebff91fb4129f6a681aee1b37b

SHA512
5510ac342eb20bad117e5a7346aa97a7a54c942d1d170d131206368644511770dddefe2b58f10307e222a1e3fb4ad4e893bac8239810dd3bab9060598bfc1558

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
43b6f60cada0336d8fb36f1e361a3e6a

SHA1
5f9bcb4c456df82521ebea6b04ad7cfc4319816d

SHA256
072460ddaf51bbd9bf0341949f406dc2d4d047040b1e113cea7ab8d0bbeec10d

SHA512
cbdd9d1976e9f6936d818810d64103cf763ed7f1445ea7e767e9c740bd233d1ad4d780801fea8a65f5d689acc6a710e1a4041e53c5a2ee3e42b0b1765fa9d0a2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
0c169929f8ce6583c9d28cb9295b3d85

SHA1
a11ea6f382e335465ce445a580b598da738ba1cd

SHA256
2a9a8791f9f939236b318b66423f93cdf489d3719b35dab841e101a9ae47c1df

SHA512
5e544ab11f6a3ef8ce1807abeb6c7971051d5ff6cfe97333298d2a37829ba8429316021fba590b5a613d25ba89e140fa94a499bb5e576bbda95bc3113a6c2484

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll

Filesize
809KB

MD5
424dac8ec4e54f998c782afc296fe075

SHA1
e30a2ce5bf8005ac2ec7a330089949c32df53368

SHA256
f209284e300dc72118e840df057478bc8552ca5d82c84553537d20371724ad32

SHA512
0cdaa9a376b6239e7ef7dbab3979cb1d94465ba783e3c97a9a900727ffcc0d4000b654b8f33c5a6f17b4086778506f6b1254e20f546efeae95babd62b7e432f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\desktop.ini

Filesize
67B

MD5
932e6f3ee61312cada5e1e83fc87e8e3

SHA1
5c461f25836c841a288dbdf1ec022908b9450c63

SHA256
da893d196bc8ecdab64e8310939f066725662f3ca00138e3ae4e160ceee61ebb

SHA512
035d70be52b2dab1d0b14fbc4f3f9fd13532c6a03a105d3ec8b4df886b86e4768e95ec4cd4439cc586caa3eb346bb4ae7d425cc43e96af9bca3c074a843f3636

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini

Filesize
645B

MD5
36498987a30b1ee7a4b2e9fcf55064c7

SHA1
876a8116c43fd7c4f2f8420f8eecc9e5da49eeb7

SHA256
b918cc98a78ca8b27c1bcce657a3f9e4868952dfa8f330573c3c001c85984723

SHA512
ca5fc345111293980097527a86ed032ded5aa761aa1916b56f6b7261d8ee52e8a440d3bb9c39cd5c04067e33ca84b144d18d35ccbb3317e8f530ef89258d6583

Download Submit
C:\Windows\Media\Characters\Desktop.ini

Filesize
1KB

MD5
44d6a5a3be97cef623d1ef8c3880e4e2

SHA1
da98722e40c133cebebe36e163da1dd81e75f9c4

SHA256
4a25d6ff1a57365809042c26a549d60f07bd8d2cf79b78a75ca82ff1ed55d101

SHA512
d8ffb0ff33ee6c38e0eef36efd3296ff3328fd889a497c881c6a85565edb0845a32a8a24cdf9958ce4716ced72c9303f375f742fc780056c66b1be426d81718b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
45e2abc360782ced48eea8b62a30be3a

SHA1
657fac630576be8e8f650e87ebd2236fc2486996

SHA256
5e6bda4bc7960ece9e8fd4919660157ff378e3737e0b870391f4fcbfe22cb945

SHA512
7beafe0aab6c3222d306a2b3a3ee60dc5999ebb22e1b5bd4a040a1bccb7a707ef24603cc2b03b3af97869883a0f0110275f6d7f56de092d839c3811e78135efb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
c10b203185d3d877fcb9faa8f419802f

SHA1
f12b6bcdb4a8065ca5e79bd4d14291d226aed41e

SHA256
e963043e9eb7b1afeb2237c6b3bfdb4d5873e83b2347f70829a3d3315986d3ac

SHA512
5961dd250ad06e4f94478ac83fad70c18c0502414b67f0a67c8af7aef0e873a32ed2901d5251106a6ba4da629091a41ee8901947fda7db51df4d1a19298ef37d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
f1a36b96bd8dc02ea5eba5f3a921dac7

SHA1
fbbd7b4dd1653a5945a085aea9d19b7d47e5d170

SHA256
af4eb0838f8733b358690731d6cf6f2bb66c340412f0fea56f10701730600e41

SHA512
90552cb4e4641ef19316ef9ee22b7c4e408291fb9d7f0b8578d546b50fd16049357e66fd3996d7fc58aa9ea8edd4391df3c847338b11b28678fb88cfaa4d9260

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg

Filesize
49B

MD5
341f43517ca1dc51d7ba2beff90158e7

SHA1
e0656670912d4e0d99a297fbcc724c2758a1bb2f

SHA256
2529e54fa0b98f371d0d8a6b6210f083a553bf9a3799d243999c8d24ee288182

SHA512
59721c1048d0d05eee72c0c75f49ecd665920a537fb8ca240cf3b60be55f098d78058694098194feab2805da3e6604f33ee8e5dfb0f6c595b6e6409d1958c86f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
77369e1766f6957643e096ee45cf62b6

SHA1
699eed19afa12e1dfdcc0c192a919432c33c98eb

SHA256
bafeb5d2d044666bd4f38651fc63beb7f18b85421035cde801b65b307a002746

SHA512
5eff613fe6be60261f63698a0f23df03b44aa3760f679f4bd5beca4141a2fcaac05c2a9962d188b445e91f0e4a5168ceee029b984c32d437cec073efbd851eb9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Accessibility.dll

Filesize
35KB

MD5
136cba747bcd797a2b4028d0da76820a

SHA1
3d9d06be4bd0829a128f6b1b2cbefd7476bede9d

SHA256
059810f396222de4dcde6d40038fc7c2c0a25f6d14ddfa95380df877a48708e0

SHA512
b29fdc5039447e101fdc6d1cbbb992f9d9951b554949196e6b18acc3ebbaa5df8dd6937ed586e23708cf10a293e2c94973c7c2eaa8fcdc8fa2a95f62e814da7e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AspNetMMCExt.dll

Filesize
497KB

MD5
0276ab6b08a1b9168a5e62ee3ca0e4e0

SHA1
26068ac445e35289d208519223d7fb8a3db25c3d

SHA256
d15dadf7e65adb11f0eae9c91077975e96544a9afae0e4e1c06e48a17ad7e4b9

SHA512
be278cc60920d6575c1699e0cbe35da3f616d1f99cf307af9d66b83f87492c960bc8fa52b33883e18938376303a017adbdab1728d61bfe32a6dff0160d779982

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Activities.Build.dll

Filesize
52KB

MD5
d8a374d3041dd6028ff5543a3222ee3a

SHA1
333fcbcf7e8a6168833ff950ad75aaece6bf70e9

SHA256
9c93ed77284d8ca86e4944f9edb144b2acdc687aa2dc5c3fbc5065b1a96d5d08

SHA512
4b40c4dfe54bf548684b396779704da44237eb9461f073ee310c7501c5ad3bd2607344e12c7854fd9dce277a2145e851fa3058facf52368f26d87c38e3d970d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Conversion.v4.0.dll

Filesize
83KB

MD5
2d552a4a4380164d50c117ad37cd8afd

SHA1
66ed81c14de5e94b99d644e1b40e7e82fd5966c5

SHA256
e5ebd082c8b751ba94b343a21fc1bfd86c6d8e0b87520662eaec7ea1fab22c26

SHA512
ef1b6e1001de9c4258ae6d7251f67d7acd329a35be65d143f73931f945be554bd4298597577a16da2dd28a3c72b59872e764395b246f930fc8a8bce52c004094

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Engine.dll

Filesize
643KB

MD5
8c2027e06f485bd9f847033c09ecf768

SHA1
11b93304c8a56908a115564f287792fc8a2ec38c

SHA256
055d94caac0410030e58043c20b80c31687f73eb6248021f1b64a8a7bb5b5e99

SHA512
7abd461cef1f53ea98ef2ccdf9aa8e54db384c0529f514037e28e76a685a0b2eb2be1d8ce5bf48e6c440834358771ab512e24efe46f772e94b499172c6b28ab9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Framework.dll

Filesize
97KB

MD5
c68aacc5e47efd2e453b1824f1c3fc45

SHA1
98ad35c84666dfadb6d4f3b4f9a8e20dea95fcbe

SHA256
5a1a9d12694ff115880a204ed2fe085afa6d7315c1afded34c4b0bc9a311789d

SHA512
e98eaa6b1fe75b3309b7775d0b68bdc4c0a767be8942b50266dfd9f1b2e12a15d2c1c70656218f28715afb8242a4ccb2138622ecf36d734502e80ab1bbd13314

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Tasks.v4.0.dll

Filesize
1.1MB

MD5
68647f20bbca08464776971dd461968e

SHA1
8b6c62516e35a5ddba3f8866e16ee138c826c356

SHA256
a76d1fe8a468d4a7563d213ebfa704a9c08c555160fbcf21f893738a4557a69d

SHA512
0fa742783f1fc09b1ad46e3fd3c493892661d121a4ebca0cfcaf7bcb99c6b06ec4b3f89f9175b530b0eba308cd6c5f236e4fad394a303ef57e5bbefe26218921

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Utilities.v4.0.dll

Filesize
263KB

MD5
6f88567a9bd8af65bb7799252278cfbc

SHA1
54974984774be83106790889be6e21ce03969411

SHA256
e0f778784ed21d5e441299f6d6b62c4a961e8d01c886b548351e70427805345a

SHA512
2f6a34ba957c2c8bf5d80fd9acc819558d960d69266237f702dc67aacd2d7994e23ca8f6d59affcda2764e26bd9e0ca76500f7bd8b96e039d373cbcd1eefd36c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.dll

Filesize
1.3MB

MD5
8cf4c4f595f7ff85d00327a18b5212c5

SHA1
704552e2fc0359369d4a6785f8f86768d2fb483e

SHA256
2b9de9d912c078a0b1ffda3dcdeeecc764756cbb81e7e80527cce2fb95feff15

SHA512
e218b734c5a325315e861286c7a5e77d2764cfde7db2988a701f90cd460452fc267cc58a45f85baf346d3ee50b7718c834d35491a90e158c1a792648438738af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.CSharp.dll

Filesize
475KB

MD5
74892d81f834fa23daa03a44a73cb888

SHA1
0335d43ff4b2998e3f235595f8e1575b04b76f04

SHA256
c363248bcf1fd3b7a2fd60ee3aeb389bbf0ebfd4cd80e538b28443580cbcd7d9

SHA512
bbc4e92b3aba4458fc05b1e348229450e5d41a1e4eca5c7b00b66a898d6db9906feab2b52a2014625109432a06cdde40ba6f1650a2a77e7f5047327319fdeb9b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Data.Entity.Build.Tasks.dll

Filesize
51KB

MD5
f54aab996a183e5633069d9b6e2a3708

SHA1
f7bf9a89ef9d60a40e8efccd91f1d724d777aac0

SHA256
32b014c4f0c915a2b08260971d64100452c577b5d8fbc0bf218be2a60c8e213e

SHA512
c448a59a69cb211905c56e109b5072679a0a73b2cecedc9b1089e77ecd85ba7847a0482141869987e91157d6870e434eba6920ea4a859ce92fe1007667b64bed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Internal.Tasks.Dataflow.dll

Filesize
180KB

MD5
b8e75bb6f6ed4cb3a4ec87ce27d3512f

SHA1
909a65fe5294af83aa73528d70c4dec8171fa6f8

SHA256
bd6e22c241fccf8c1350fcbdac9259dcd2501c0cfae00f97228defa994eec76f

SHA512
10216924b1ae4694f03aa597768fc4c184890b267742cedda6e3371575837ad96c90e8a664882701b76c83d33d1891448a2d1d3be2679dc83dc8615db76c8a0f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.JScript.dll

Filesize
736KB

MD5
52885b4fdd4b4662077700f59482d313

SHA1
1dd7b86a606f00b76466d6c072e0c0b8c4c5394c

SHA256
a6a845782c09537139a47ea3de8d1e5cb7a4c14248f1b391573f10e326635818

SHA512
d3a40c392d9806422d15b83f2f1320af634dd8e762c71f079c86df5d9a048fd911057ebc73a98c5b1beef7d126911b657142de603c747638055c76f0ba363cae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Transactions.Bridge.dll

Filesize
386KB

MD5
43984350829a14badfa71c340cc6ef72

SHA1
150c080da159719c5a69e5b04e1eb3e96a130cd2

SHA256
ab575e2544fa941815cef3c550a9661d13cf7724745ed1d9ef7c3137d3f22b3a

SHA512
da12d9560043b61342e0cf3bf3c2c599d6efb86b6ceebacaec2cc87d9f3865e6d1154abf172f2dd29c75003da342eb815746bb223ca29cdfb1351c23590a4bb3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.Data.dll

Filesize
114KB

MD5
238ae585f9af016fb58e3617671f0593

SHA1
6b8006b28bf70ea0d65ee605f35a51ab0c8d2af7

SHA256
74b8a89240fa9e63cb8ec56bab226b55658b001720fdf09df193a7f51d7ae0fc

SHA512
0305833670b42c34160b9576b38b50fef07a0b569571e2ff15d7b49103b857c99354b8b21c098067aa1682dda7f77f9c8817338b407b08ce170e821a7450afbc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.dll

Filesize
486KB

MD5
b8ab7dcbfd2c2aebefccfede08009b31

SHA1
84efc0d8504f557849427aab33cd93e2d683f800

SHA256
2bbadc602691d12b4693e88299217bd21fa757bfe2df3bd8fb7ee9123654bd80

SHA512
9d31cf6efef0ebaf663f597a47f37bbf2c47073cb832d63a7dc25b30989c111fbb14ff42dff03c1f82613a50f9e984897e81e66aa586874fc7b9a90998155520

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.dll

Filesize
625KB

MD5
f38a70232a4400a82518fcb5168701cc

SHA1
53cf9735b7c0c6663fc6de2a987c4cdedb170cbf

SHA256
7b57be6015e9ac899bd53f99d40698cced78ecd582d83f3039689338b738fe2d

SHA512
6b19e89112f9cb85efbcb0b400dd318a6de7e1446b3c8963eaea9751d6b264ae69392d993bee26bb2577ddda71b7edb89ae31ead581abe987c1bb40accc17c48

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.Dll

Filesize
29KB

MD5
69a70beb311c9526450f9e050da8d82e

SHA1
7cd24b6b111268c34b391412cc11bcfa92557b78

SHA256
d0cec7fab855128f25d0de93768308bb373748a35fdb8433d6ee735d9e9a11d2

SHA512
92853593cfd6c83081ed8cc65f1d1a1bb7612c1df8272e3b742d74754d094fd02cfe3b54178efa02a0467455cb560db0940e0e074fd3b3f9211cdbd3e47b96af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.STLCLR.dll

Filesize
49KB

MD5
af06b0154782ad138237d63f26cd4ed2

SHA1
a321202a53c107c91937c103d41ad1bf64bcc6ed

SHA256
5536af09f5e640bc1e8c4ee72eeb5cc8dc62d55502af52b37eeabdebc7b91440

SHA512
f27700d7461f86d8883ef67b913c1ff62897518b5dbac845f78640b530e1c7460270c60f0836a4ab6441bd36f5b76125e91edbe2c185d0174c13f6f3ac5cb262

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Win32.Primitives.dll

Filesize
28KB

MD5
9d8f1570c64dc49fd9158d5e080b9f48

SHA1
0efc77376156627c37c5105ca29fe693c83a3c8e

SHA256
86212b4dd1ae29863cdabae2aa81ad5175b3714c737d28670fa7823c12259d62

SHA512
eb7610ede2ef442c9eda17ff9aef0aa65cc3341c2df5b9154f312fa14d9e33dab591adb911e49478549b3e8d7b6ea99cc0809c5275e2d4db52282cb467c4bfe9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Windows.ApplicationServer.Applications.dll

Filesize
137KB

MD5
fbb6376b62ae94e1c71b6b5759bcb97e

SHA1
28069771ab652fc1acefd6ca3465e67621a49bde

SHA256
18a663af8e8a83abc071e0d28533bdb061fbad448d6222fb30db753d5a69892f

SHA512
49e13467421f3726fd2da23ea7fb6aa31910a535d3121a3e29d42b831dbc76c88d22b10e7051bd35d77dadfccaa35823ec8b1befc18c2957c39c14f2cb67c0be

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Workflow.Compiler.exe

Filesize
32KB

MD5
3392f34555198089852e84f46f0a02b0

SHA1
e8586fdc26a93b53b43b1c53f6fda989fd78daa7

SHA256
2dfe61384e96d7511ccabc593fa1a519eff0bfa3856e9fed0d1230c722b3b2e3

SHA512
407a2dd3746e4c6eb46c85de2350893fc20da22cddf73616efeec47c179e86dff3bab225a0e6cf055cece847b963595e70fa0f16084226a7e2ecc4e5b8d20419

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMDiagnostics.dll

Filesize
72KB

MD5
b14a45dc7739b64002e6866227f8c537

SHA1
6a039458828eda53b0c076d2f21ba876bd3a15a9

SHA256
5026a4ab9f8a2839749389f16bc51f4c899a585c52417d65dc4a3a5e3622174c

SHA512
ce044d8182f54125b12f406f89e99f2dc221e61ac10b09b4cabb3f10dbe154cb4dbe215878dc0ded6b313b805fb2cfda6685c5d1b93a9d7ae27410547d28e1a4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Core.Presentation.dll

Filesize
698KB

MD5
63b1d61bd3aa938e21e8565c375caf81

SHA1
1247e8b413a4084f0621b495ebd3c9e7687b1997

SHA256
584ff0f1278ef5a85e85623e229d16754d98099213ce3804b20391a4b3a0d8b5

SHA512
ca81e224c4943edd5a03f4f0f051a70546910b2b010a53b5e36b5d0615dc6ddd61854a430ed0ce30a3e79521f70bef77dd5829aa07c79ed7823d3b9f403344b3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.DurableInstancing.dll

Filesize
138KB

MD5
625d6d9c3f1acf5a2d23ac99466cfe74

SHA1
9d015a3e5f9cff6ed2a015370eadc6b9be4f84f3

SHA256
0242ea8e54c0279b465429126171dc088d80f034a4d8d645211135b62e246092

SHA512
da4ce6cdc3e1812668fa1de720c60298b1fd9feb41de6482020d9dbd596a91ead2119ecfcfe33942e5c6eff27fc335374b60168c91577693573c5d01dedb01bd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Presentation.dll

Filesize
2.0MB

MD5
6fbb116c844d61494e6b3854d8b4cf93

SHA1
d2c0aaf7dcb1607143ade4987eb12a3df7aaf45e

SHA256
2843d13947cafdf83c8c88339b53617c828d79582329848a563fcf9ba3d1368b

SHA512
6295abe89dbca993930171b13509689c6a8bf3a15e0553165371043555dfb595d1ace565fd1f7702ee4b74d02ac9aaf9553e3ec1658a900be91049a074496137

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.dll

Filesize
1.5MB

MD5
db21860d93db90ad97686d96978d3161

SHA1
fb726bd8231b36879976867ef1038fa3ece246f5

SHA256
d6eb5b83f12441b5dd8e3deb96824935824af917d17e3052e67e99e306c96907

SHA512
e6e7e659d9364659130e16057f2383335cb9a0d3794eade9fc7480b3dc141c5509add622d96173a5bd206f3f9d55a1b6ba78d75a9c8af62957db669f988cdb70

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.Contract.dll

Filesize
51KB

MD5
db4e4c283844f8a2bbb6e02feeaef9cb

SHA1
ef8a8a0399de1dab6b11881187f7c9563c88d7bc

SHA256
f911d09fbf2e921c843770e4c2dca00e22e8a0107710fcd2997d8de9b59e968f

SHA512
528cc171f1e9a6ebbc816143611dac079b35c31e0aeb9329d1387fdf2fc9d3b8f9188fa4e9a4ae35269ea10ba5e42cc310938756e5f32db0c6c231f90867064e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll

Filesize
159KB

MD5
855aa120a62573925ee84936adfa95f1

SHA1
a92380cecb934f6f0d1ac599ce4c4c7d0cf9713f

SHA256
fb59898de36cca63e94b3f81c20b0245b9773368b3f3f457d9bccc51168b898d

SHA512
423394ee062b9b97971bbc3bfe92f2b718ad12e53333a262bfc6626f4803bfb9019b61065a7b8372df050ae5305ebe8e4a18f0b75a36039c452ae3f858aa5f71

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AppContext.dll

Filesize
28KB

MD5
32755d1bebfe487fc096658e98954448

SHA1
79601db7f63f51c1ff5d5302e553f891cdb7f1da

SHA256
54fc8d5f0cd4df6a78b0affabf4c28c852bf6e138e3b322bc9c9454e16b294d4

SHA512
1bacf0d9b31873b37b790db92e7ddaa54d1b737934eb87fd9b06752a94076f56653cb6537450836cc1c15d99884209d6681523ed00700e0a7b22d8dde4a783e7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Concurrent.dll

Filesize
28KB

MD5
df01861a68d7e362ab2c1cb7d31db011

SHA1
9a67ea44246a4d3e9f0566f3f3cb0f7d9d318bf6

SHA256
0970825b7f00b3cc6e676523438db8df8a448788bb2a506044737b16425425c8

SHA512
451adb3361355c511cb239fdc77eae3ab9f97aa24d652326bfe9f288be8519f9d1a0cd66f05677fdd17b1a45898764b0be837c355ee5ae87252eef1796a0397f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.NonGeneric.dll

Filesize
28KB

MD5
3847069536650838d001c0846a8236c6

SHA1
ad3c8688ae9565b38deeff3dc17157c664e93af8

SHA256
a0dd1ba060a08a8cf586d8788415ab784dbaeb190906840b74a46c97b8f1adab

SHA512
8030e9a438c4b950fbeba0ef47130167a0bf76022260a2edea1817d251fc1de7455292e695edbc5d21c90c0fa082d961589ae7b4ab211250055d9ee6b162ae35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Specialized.dll

Filesize
28KB

MD5
7c21ce2c139034b3f4d7195416451e12

SHA1
315be7349ef4857178c2c307372d4ce9fba2f519

SHA256
3474986d7abdf091795c8da9434d6d77616d013a2d99937d942fd3e27425ba6a

SHA512
2d2a4c56864dafebac21257b51f4b924da33a2cfec19e2a8a43e0566d3dd6e5c72ed8b545b7dc2acd306e7c69b39d49b693b6378a466412095f1c7363a78d3f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.dll

Filesize
29KB

MD5
fd217b8be6b2991975df578fb833c721

SHA1
0f40bd265ae616eef17a7faf1d75c16f40c665da

SHA256
75b9a873ac5b27c11a128e6821df24ffddc644905b3c46440da1d3bf4f5d6333

SHA512
720f6efcbdab6d40bf83faf4033a930cdeb71eebed020aea3ac4d26cc138c9b1925a7e78f8aeb936490129e6c996e038443ffa02a57b8178d6259894459799ee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Annotations.dll

Filesize
29KB

MD5
d0b04d783c2e45ad099bc25aab4360fe

SHA1
66e74b4bcf237436825eef4d8f11d3c04c6bf9e0

SHA256
7331c88a5d4f4e470d8f80a3d92842c24b7e32f7adb3a21150d9f4f4ab59daad

SHA512
82a127b81eb889ff2115577f819d06526413de918b27a3dc6855bf06e3daf9670f300dfb6171723db7fa4b07d3a9247027cf1d560e1bb4e1a4190249cdb15565

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Composition.dll

Filesize
298KB

MD5
d31bb41dd91bba175ee5d79e8b4a171d

SHA1
7421ab113f72da343cceb3d82f88224d5fd7f480

SHA256
833edfbdbecdff772a75579bc1cf1a9f95804b214e228c442d5e0ae4d897441d

SHA512
e167b89d4afa9d7937c7a3305af8883574118d50bc5079d4daed7273047486dda88ffc849fe09ce0f2c66396e338b3285357dd05e8ace40a591ae98943e6d0ff

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.DataAnnotations.dll

Filesize
124KB

MD5
b1bf58d199012bf24c4ff2b0fe3813f4

SHA1
d4671a9c2f9408f3564fe5ac09052d5267fd3be6

SHA256
5d39abe6989b221b982ae60b0cb2bcb54e1645edf6caf642fd4b0ffb8d0683a5

SHA512
068ad75f40dbcd8804f0445b9c06232fa06781fd23cb0305575a6b0efdbee4e5cf4a00889360963d454134440e081f174dcbc2a34c15bd45850ef27bdcf17f7f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.EventBasedAsync.dll

Filesize
28KB

MD5
f6cec282af4ffbf0272fe0a629470cde

SHA1
04eab1fbb0c964db4dc85c7a2b7a4b3e901cbd81

SHA256
81239079491df79b482c7ea854717c555f086d833e91bb46fcc2362c07e342b6

SHA512
9ca00bc3f8c3b74b677bea0d89b73438d1a20f7533c67234a7fb47e53c9729fb49a2a05ed07b35ab4bf3bee33cf1cfbdceea193f7aca0e6d2b5dfa92ff5ca4c9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Primitives.dll

Filesize
29KB

MD5
13fac9f77ffbdad29a26a950e0234ce0

SHA1
06e99cc299304dc9db7f2be241dd2ebba9b62b82

SHA256
c60508434f688bd86871668595e70183dd5ed4d4975d0a6d3fee39e65edc3092

SHA512
1082b5d2d2911eadaea641620fffc165b653bad86c2b4f64460801cb6ebdde6aca177dd075aafe8f91660e922d2128a6542e3002fa3bada99b4420c9acfa5894

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.TypeConverter.dll

Filesize
30KB

MD5
f537cf8f8c6e3c25a1338a639fe6a84a

SHA1
b7ee9df145be321284fa7d45ff965cbdc7c770e0

SHA256
0b9413f07e31b51bc7c49e2c5109c82b5b4301ca5f5585697a512f468234cbf9

SHA512
e456d16aefdcd18a6bc14df496763291b84a2a04c5e03a40c4247519ce481724c40e42bfe31630012cd1d03d0efe46e98d54ab0f5e906491b1de57d887579724

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.dll

Filesize
28KB

MD5
17c9141999c3ad50d079e07503baab3d

SHA1
46db14bb6f7f57542e2c073b705df6ea1c8c930a

SHA256
0e39101c299b8dab836ef44eb3ee4975e4c816ce7f81dacc5e0a137ad7abf5eb

SHA512
72e7ba0aa285bf0744341e75f28dca50e55f59e315e99423e219233dfee547013a53e43d98bb53b1fbf4b20ebfc3250dbf703b5860a6dd098ce753026e77af5c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.Install.dll

Filesize
100KB

MD5
9664a699020f9d847f0a9a1465161fd1

SHA1
7405282f1a686a94b6b8c45de029230ad1be83d6

SHA256
7ae5d10ca5afaabb664ed4460ccce5999a3a423440b096375229526622609acb

SHA512
938c196e78feaf8fc7131886df12e958c3a604401d1f0e1298b568b7d46d2ddee93fe6033e537cd4762e0fdbb1b3d0a047c9c945142195ec17fa3781e8fcff81

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.dll

Filesize
406KB

MD5
9b806d9d04a1a0e44e22ed65dd676ded

SHA1
9d48dd0b3a5631c19d17dfa02874a444328cfa75

SHA256
720ac8f1c19e8777aa13cd841ddd6b797c061b29bc5560306ef2e636688baf19

SHA512
2a2c55cee7aa2583bb20a1debcc75f240f7c59cafc488280d0b172a13cda48442816feffff32e0395919318430916a08a108754bf6bf480c702149bbf01756de

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Console.dll

Filesize
28KB

MD5
e08027c7deb129bc56f76acf6f3b455c

SHA1
b768e1a68c526d96bf9f48bf6ab7ca792ff5d72e

SHA256
d162f199f6cf5e788e90609709217b650bb1a9c9db7d2a2accd186abb9602700

SHA512
aa68f84f57b600a86554d6b26f66251c585994ffb4fb4c6279bd1852853c06ef6081028455b5c7b61323758e86c9495db2dbbc0db8ebb5482ec372e8f7ce4478

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Core.dll

Filesize
1.5MB

MD5
485bc14f7496f81c93c34b6b0b08f56a

SHA1
4ef278266d37e23d549d807bdbb3cad39980ffff

SHA256
a916d33563e312176308806a2a3326e26fe7e3d09035acd4660e19b711a38ea5

SHA512
7ca85e0476618ed706fa365e747321e81e3666fa5a2da22bb0b06b02a86dab3d27cdfdbd181ac9f4076f2d72ee833c6fe5ae631cb8f5faa5c6b2945eb46b8b5f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Common.dll

Filesize
29KB

MD5
9a8f0bbd51e377639b83bf4938281733

SHA1
6ecf3e17d5de9a61ead301a95cde6e0f5df4fc6b

SHA256
4a4056efc642175868c365496fb7ce9c4119ae4e46465f4aec63eb395923c3fa

SHA512
02a1c46fe977a23f87eb5ae1098f2205ac1aa8f25b8f0c36c7f74639e8fa1489a1c60d231b4d2315ad9ef8c36b745bec0aa2ba1b9db5d118742ef0f102099296

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.DataSetExtensions.dll

Filesize
70KB

MD5
4226e4392d2044b12bd2f733ad6d3260

SHA1
59ff878f536f961145ca37b9a64e11a45ad0ff31

SHA256
1a55aaa79158f97bc07fc7c761ae0a20650f5a072989742e5d85b9410b2ca741

SHA512
25e47ef6f00dbbc7f6d72c0613ad2bc30790f0779dd1bf87685896a3afc4d92ab63979d1e379eefb59fde9d8c973e0c2f2e56c6d76c9c2caeca43be2866bf59d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.Design.dll

Filesize
1.0MB

MD5
4cf3acb3567eb0667cbbfd4177807a07

SHA1
8e7c1b467f36a92c9e0936ea87712183becc2a86

SHA256
d89d8752ec65c87c0648dcff85507b51062d896e01e082d35cec50f0fc97b4ef

SHA512
8cb1f0ee73e2c32f0fdf9e6aa67c56ad27a278590355458383a5ce3b6ede37c7f5d38da9cc26ab39d8d6b1a47d988a19d3c1512db3005b5e25df719724c6fbd9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.dll

Filesize
3.8MB

MD5
c906b1f405661d038e20e6167f146ec8

SHA1
b2d1118fee521b2da8bcbd2941ede3864260a978

SHA256
0280f97d6f157a1fa298f2635c3b31ca35723aa3752afb493bced105f49ed64e

SHA512
c89cba67466b97c8f7b120e99048645b79ffcba95ab37f96d5d6534092c64b2ba5fec6012f77d0f3c4b38e8a87bb434e3442022557d2bc45c3d83bf0c8e02703

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Linq.dll

Filesize
673KB

MD5
87a481ed6d21bc360ba4451b5ea50c39

SHA1
4a8a00bf13f362849c1ae5b9bf99e8694fff7819

SHA256
653690d616cb90a1621853fce03dd5fc3665c4f1e5a2c3396173470ee60dce90

SHA512
1afdb11c1788e90454ab6a4598eae02321b531d4fc7b530fbca83be40353f429bb678708d7f5689552bc810de67c771d19e011567b3958b21d09a94fbd59c559

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Client.dll

Filesize
434KB

MD5
7935d25819b45d60132af76704c54fb1

SHA1
5d2cfc0264fd3644b325a017fb6ecb6cd60b412e

SHA256
4ff991063d3c09ccadb2c46c6bb749bafea86fa82e07a5ffd13b43d900583462

SHA512
aa2d70202516b22826a9e66cf37cfae1ed88eb1f5b8036f9881e7379d60074c800b55de99c57572101cbd915b185d1b06d9227f84f835d74b82cbdad096189f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Design.dll

Filesize
170KB

MD5
906e67ad83aaa7a1fcf6c9a47d4e7aa6

SHA1
5ea7073c53954242d5056a768c1bb9641102f455

SHA256
e534e885c4bbac0cea82e5c505499a1d3a2c0d4465e373e644fb7a4a7a9a67e4

SHA512
0da479d99e565ef67fc5263fd4777ba632be9dae8fb33346cd9c9ac56552d2e6e15eee6a2f506526156e01c41fd4bc18da428c5c2a0f695b2c63d614d54ec421

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.dll

Filesize
657KB

MD5
868962e98f6649ef617d1ee8bf5acdc2

SHA1
37dc3084c4a1da8c9e4f1f6db68b4021c55995f5

SHA256
ee4f0f0ee6d22310c8aba51c7bd113f9f2b3edfe5b8e38ad82a1c3c1c233d607

SHA512
1c1ac59d71c848f7d2c1abe37c4a3c4005234ea0c7bc80394e3bf76a2ed4f4fb53266710b00d4cf86ea4101fdce2a462ccc0e386690c8b0595aa5c815aab5d3b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.SqlXml.dll

Filesize
717KB

MD5
14cd799ff375081e8f31a3ff2d66c7f3

SHA1
d40921a6d51e2b382f42d35f3b762fb2f38854f8

SHA256
41d10874db47c283fa3497130782097ead936ecb48930157444c33d9e0b3b7fe

SHA512
52e2a40efe32d256bdc8ec474e983125df745b198c453dd33c01fcaeae964c996216811b808c8638d10c1bb2df0b07152d133f402936ed4c967682242470d097

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Deployment.dll

Filesize
858KB

MD5
1295235b4c50a8bf9d62518739feb5a9

SHA1
eb557e98dff1d5b6239d7a335ff7253de319e0fe

SHA256
5f9feb764fbc19447a0d4c3721ca6f6923a22c859c7533c7b4693e8f6a1a3203

SHA512
cae25f35fc02796fa39fa1ab5bb4c152e2468b49696c6321b14bec992f7d9666b95a5f42659f505ea0bbe179d30bd4ba4cc1ed4c051392f13ff630335d5093df

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Design.dll

Filesize
4.8MB

MD5
8dcd98077ff31c83668dd1b4fc7edaa6

SHA1
64103daf4b37103d50c1c28ade0aff0a8fa6b016

SHA256
b97f35da49e2c4ac1eb491b17369cce98cf0fc76e4fc09a4be62f3de045f228f

SHA512
38b832596809816940406e34b171ae323bb8ca49daa9b0261ae7cda2a0dd6c6497ec9a1f3389d05e9c8fa814dcf624f97e080db978bbea6c31cb461d86de11b7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Device.dll

Filesize
62KB

MD5
9e86d2d764642b155761647af298cc4d

SHA1
4e02ce908f7ab3929cbd9c4050ac2e14b2096806

SHA256
5027d61dafbdfe066ae83efb90fd2a3089026d89c1646cbda5a842cf73a2beeb

SHA512
f566d30ddb89cc64729f65f38f70f1f3999782bbbbadd3eca79cb7233cdcb6913b9c5608bde8171a09b32999ef727e27900e55b7c8386c71025f2008e0fed973

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Contracts.dll

Filesize
29KB

MD5
e4aefa6403a530a0bc8922856b9627bd

SHA1
c242531078bc457c90ffc6059f58ae0b596d5c30

SHA256
298d99acb473e21cd5209033862831a6bcdfe596e83ff98475cf89b1980c1011

SHA512
bc17ecef565dd683390cc073e03c98bc95c82f04d8a69be17bcdf3433119413f7930925b4e0ca4c96707fe5c8760850c326a7287e75dd73a52e5beb5199baf7e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Debug.dll

Filesize
28KB

MD5
904455b74bb1e7b0c49cf84c42d7aae1

SHA1
7688f34f2d90540d399c5e989a9f1e5740302093

SHA256
2776b64e4974bce738a7e7af57f4ee8d096588c5f87a41fd3866ba2711d57655

SHA512
5a374930f5ff6370bb7879a6db6117121b314db518c0870ebe7810868275388aa7a44ac94a9c65e3f14df45618f366512bd7e4753d4b74087438de43ef864409

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.FileVersionInfo.dll

Filesize
28KB

MD5
a770aa3f250c02d225fefcdddab1ec4f

SHA1
f01c7d0a371936381139a49f44b69fbfc7ab325c

SHA256
18f80e51fda81b84748c7caff100a884b7d4bc8f20dd9d5b88a395f9b13c35b7

SHA512
debc6eee8fd2e4a850b450bc6f8f268c9f9943251dfc7f1256aa07f1c6beed17b2f965909f8d60c58381d1b742865acd297d3e8b44729d9278c2d3b55ebee566

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Process.dll

Filesize
28KB

MD5
6e2df79e4a4f59f22e9d516e56a1ef71

SHA1
0c5661ab4644fa62bd558d18390a23be6d6fa662

SHA256
f4ea00ea5027ab13a4e8255642753da90c8eabe50f7ee6b43dbc671bd0e02497

SHA512
f1c1cca7ce17e21e2d2def3702a16856cd5f9e7adc2f5ed3640f01f3c6f12167052e0f52d11ebccc1cbbdff24dca9388e9f3083d70d753a41b79b7c1a966f4c1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.StackTrace.dll

Filesize
28KB

MD5
c85accd289a8e64124c93d41cc909c9e

SHA1
0ec417d88851a14e857ba6b2308b7ac55e06dd16

SHA256
e115db6bd785dae03ef0833b30622621b30e8ceb49c26f85778b7b9aa0729b05

SHA512
ea8427112c68ec76900db1184cc28d2cf21f054e53790af362e06026f461f75f4a54eba0e262d1d480b0cc5b81f017745d446c01df86fd4aba0f61c280278c81

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TextWriterTraceListener.dll

Filesize
28KB

MD5
ba48372b47726a3a3f77ae6aee55263b

SHA1
a2e28d4f8529483e071dbcb788ec67c22d3cb905

SHA256
412f5b1aacb7d48c5dfaf5ff64dcb29e7cff3c85fffefb68e14bec73985b7986

SHA512
d003dab992650047433afc28c78e20b6eb057034dc22fc41e6a4129d8e678c2dd0194b4d498da182abab14a8f85f8174f0b3a51377041e20501a4be1b2d093f5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tools.dll

Filesize
28KB

MD5
e7e1e33d92369af532ddac6894b6bb24

SHA1
923e9895542a914004b230a7f234516ca15ef4e2

SHA256
8404e6b130b3cf3970973f26cbc6440fd9587918cc556b02116ccfbdbdcd950f

SHA512
ec63d4b096cfafc3cedf25ad401f4bbb27e659705f834ce38a347e84c06cae4dd7a543904ab1c13edfe5e643c9cea752caae20cbf5b8d487320d858c0e0636d5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TraceSource.dll

Filesize
28KB

MD5
18e3b7369426b375f67796be7b29852f

SHA1
1c658274457f1f35f8bf948b28bce153600bf2bb

SHA256
cc3e6140c951857d7bb0fab0b0ba394a232a3cb01d7d08cc1e204ba85dc253f6

SHA512
3d1dbdf8468a9566bf1d3deafff192d08b933c98439fa3f2af7bffd9434eea244ee20676272a3120cda21d63694260dd24d7207709d667dc80c063258fb50299

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tracing.dll

Filesize
39KB

MD5
2578916723d910c66b4e11a0cd5c89ab

SHA1
3c296d24ff5ec2c15eaba418375fa6fef9103fa3

SHA256
f90f7bad625e238b1ea28756e7d18983653791acd43322a720114eaf7fdf701c

SHA512
2f9f8a76eacd0875e5e9366ab5fe47e7ec98f3c2da2e51ce5c612e04ddc661998730223e3a51e1a5cccedc75fa113b8c049bfcdb236350e123ac8a30eb1e6af6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.AccountManagement.dll

Filesize
289KB

MD5
a08845c8fa3a2a7dfc34933de38213c5

SHA1
ffcdf90fb8f14770a6a99efa2cb524c18a50e2d2

SHA256
64f6d33fad152b6b3939c0972c1b3eb6416baaaa70b666d8e32c5a22098d83b3

SHA512
0f0a977cfb3157a7b2f721a3f20db9c2f3f393eace6513e1593994fe580dec369b1a6302d7a9903d4c404779ff17067e4d3fe0840fe5050d3e268517e98ce3f0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.Protocols.dll

Filesize
196KB

MD5
a005fd0b9b33a8c3977311983f43f009

SHA1
11e1a015254c54a96aac6e7c531951d86bdaabfb

SHA256
27b064c517420b2dc64ff6c91578dd120086a56c476707623219ee4b2a5e6515

SHA512
b6254f1b275c0c25603d9d1058826580ba21b59da4dd16ab48ea04e7dcaac73cca012b1e8bf67aa44ede5782f3f76b4a9b0cbcc473b666ec9974df2085a42a1e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.dll

Filesize
413KB

MD5
18fe362f098208ecadbe9fbf1fbd971d

SHA1
c27d54507c88e4403b2f7e56642f9ab77a1aff0f

SHA256
f80f154f1d29a3ba113f45f40162830b4e073cb04a57cd7ec0a996056765cb9e

SHA512
ad7834cb1c08a46e85788fcfaba5a54240e8c4a14823e2145800cb1e07491baefb55b44ce071b884833f60eca63691de8b9d47e6a8d7ed75c84763212a207296

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Design.dll

Filesize
117KB

MD5
34fa41ab6dcec0ef3ca9527994d88a74

SHA1
baa38aca57ef0ce8d0cab96ce88bb7e7a19cad47

SHA256
fff87eb59027f579cefe4e20f2421f3dd5ede2522f81d6da20413a3fa7899ac2

SHA512
63c194d84fc4f08457b79b5e28de09c7185fe9d4046244ccd2ade1e2248e38a4813051604a9f660dfb953b41d0f913c5db6d0fd873c414b6cfff70731d2ae8dd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Primitives.dll

Filesize
28KB

MD5
a55fa35064ee65922a24451d15b20742

SHA1
25cfe82666468d1f1f80e1f3069526a0aeccb6f3

SHA256
9a5e0a7163ade41d181ecab42426f0bcb637494cc71b0527a8b8a68713389e75

SHA512
2dccd060984346bedb6f5e8c91a1d43beff05bb383f0a38ebccb53e9f3dcad7a27f025755a0689f27dbb59b127253e96c53b3d0ffd2c67ea40b6aee64b4befb4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll

Filesize
586KB

MD5
35faf6d13558709992dc15e30f9dc45b

SHA1
a7f9bca20a681808e3c85ed1e71b21e5565d2c88

SHA256
53daa4f0056d3d1ef9b1e6ed70bfb493c1925f35866f3865052a2cb7bfdca314

SHA512
c790534b816afe4af8597cd4adc02ddee86757912df69a6e9bdba03e56aa981e57d59533ec7ab1629a29033f59fdf402a5cf2c9a5ccc6768b320ea28a0b5a221

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.Runtime.dll

Filesize
29KB

MD5
3039d2dac4c8b6bf779415497bce9182

SHA1
f1260438e9a6748ab89f273b9b6c8bbeacf4d060

SHA256
2f2a12c209c99e1734f63d93c7949787e0f1431e640eb7290ed8bc64c34b5c71

SHA512
54af749cff05c850b67269be92f62c0881792981ede05d167de5db07c5d6ccd9e603fdd4858eaa5d94f8b3aa5df59440d9ff5a9214990e1a9507329ebc1d612e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.dll

Filesize
127KB

MD5
7db3f334ece74cf2af8fc9a7adf3ad95

SHA1
b01ee65af349f53708cb008ec5bd3b8dc1272fbc

SHA256
6ecf9eeb606f567573f117d02c3cb0ea3ca76d55ed7b5cb1c4a3a4893a2e1b92

SHA512
1af9317edc13597e4eb52364a45d45a7ef26376a70c8d1e0e5211e9ff14a73b5e1c5d01076de1de2d785183764614c20595851094ca729e90cf63a598509ffa9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Calendars.dll

Filesize
28KB

MD5
3477c49d5abcf5cd008882adea6964f3

SHA1
a97e8f9294f90fcfdcd0dfc268bd6811263a4872

SHA256
e1d11055bb900d6e26501b9a15a52db48695066ff4462fe6de115803d34aa3dd

SHA512
379dfa848a96b03152a61d98818f9eee0d55f5ab75d80e20cbcda6d07f5139c96405f4302e082754529df418ab1d8dc3a564f86006cdebfac7ad054c0cbd44ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Extensions.dll

Filesize
28KB

MD5
2e5af3086288ac0a3073647e8588274b

SHA1
2b112e18db264600ea4789bb04f8c374c5071692

SHA256
130bb8091312d8a322f619957df55db32ace3c79e100c88711be619e518804fe

SHA512
d039b9154be3c6a1818029a87f114cd0fc42c7127fa9eb655c61a6898c207e89d27e1e5a7e17a9b461034edb437a3a13519e106bde8d28a7c173f18899bd8e4a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.dll

Filesize
28KB

MD5
791c354b145957c75537e21411586ebe

SHA1
cfa5e9c09995027d5c0c37371df98fbffd90938d

SHA256
974bb57af81d6cc6b5045e2ffb2319478c97945fbb9df2bef93b0c69a3bc586a

SHA512
42046b7c005ae5a49be69e3576781b3f0a25ef683af0e1b5859ad0c4c71b51a1a0980e2765936c2503d063c96f726086af0d1edcb639ac3beff18e3859a21ea7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.FileSystem.dll

Filesize
32KB

MD5
3226cf55d5d0f161ff9268f4fde32db7

SHA1
4e4ce5edbffeee5ddedd0a1e98425b0a1b9fb099

SHA256
de331ce2ce9412188773d693b909cab5afc366ea541e72916dad455e377bfd63

SHA512
4c0f2bf72925ef5ed1e004af79758d8f316edc93fef34770ecf17110c6505efe0b3e0861a344b442ade359997eb748084f96482a2881556a72f7d2c41ea8ee8f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.ZipFile.dll

Filesize
28KB

MD5
e9819bbbb695fbc14e7838237e682627

SHA1
7971938204a32c2e72fe0362d61b3650492c19be

SHA256
cb4bcf24c2d551bf589797a7836ad0741488a82db364835a2c2a53bb62be0006

SHA512
1c4047d1052bec731c9a2b7e0333fde4307d110fff08c444367a59aa08b39d755211abbf437f1afcb6aa53a0b8de448566de3c424664aa8a7379dd43cc7d0e30

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.dll

Filesize
70KB

MD5
009d14c7db335a9a3fc1085eb553e4c1

SHA1
741217d77ec25ebfb2ed09e84cd4cf003d40a1d7

SHA256
265c72896d373426bf9b8cea1f6452e360749aff9f6727418cf3de1cb89c4341

SHA512
badd33281b3a36709154096ff4327cdb59ab4df13190d4169f47340f525724611fed3132d9ba7206db74ee5753ee268647e05a1a16185b96a70c4bfbb948be95

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.DriveInfo.dll

Filesize
28KB

MD5
606db4a3eadb4ab22b5f4582fcaee82f

SHA1
2cdd1b51c3e9e2cf7ef644aa2c127c69b402bdec

SHA256
04fad6fe81403c5c2fefe41cdd0b5a93d17b7245c2e008ecb65ff367d0ec6e94

SHA512
f0fd33e0888e577689f03c3142b8945bf80521f57c3a1e354a27716074f4533255abbebbbe6c37fc0f6fcfe3954373716a28aaac0aad0190daac1dc5182e0a01

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Primitives.dll

Filesize
28KB

MD5
3e55e9d686850d8f4f85bcc0287ebf2f

SHA1
cc9c6b04cc030356253b63ffd8995ea962379399

SHA256
7e718400192951fd3933f0826a01dd6447e270c12b0e55c490b13368ec6043e4

SHA512
d5a9df25d47b9d6255c1ef436317a8d0ae94c0d1d7547e45157e6c0791113e8a0ae495d9a0b544afd8f7729f018d7ff7cdd4b67be89963ae4065204b18911279

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Watcher.dll

Filesize
28KB

MD5
5c13b48763cd28e23baf30946302eadc

SHA1
c6bf2ebe79520b4f2bd31a099e0dcfdb1741c6e8

SHA256
f9b64842bdf5c944031b647cc12f1a100a0d16434cfe625dd8d1b3d8d825e8fd

SHA512
15ebd80e74db62b38af1d9fc9c1992ff9be5cc72a94a3392962c024f3eaa1cfdb5529cfcf85343b2ca19c3ea5a9921c868d4d85d46287e8fb44ad3397d18c610

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.dll

Filesize
28KB

MD5
96cc371d3b448a923ad2ebf188796e9c

SHA1
282243e82a6f7ab74b0f469ef2129a6f47a8023d

SHA256
0d34335b59c682eac71344820ccca35798e057692675f3d5772599e49aa8a18f

SHA512
3377362079e3c4c0941da3fb70c3eb409e5f489809afa102fb60e9504d56e033d69e7099594de245ac4f6e6ab9af4962237f6d1ac2f14516c8742f4f803893c4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.IsolatedStorage.dll

Filesize
28KB

MD5
226f91f0fab85140d6d702785132e144

SHA1
711f930d28b27ba027bb94de1a9347dc8a6dca05

SHA256
477138b1beb22c7bf98cc04c235a94f526ecf6880915b831e64f6365ef639c11

SHA512
eeae289eb49ca401bd2e992354532c6915de59cb57d823f93f828a6c1d0ca42d0c0e1b2dee09bf810e894f333c9b1cd45c684040d9329cde23c5eaab392bba82

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Log.dll

Filesize
130KB

MD5
041f52232daed7cc0e0430410b28a125

SHA1
eb50d78aae730d7200f6380fed1f1cf384941d39

SHA256
886ac7a9e37aa801a9c67e4bd7ac48ec804ee6d2dc302d87bd6b70efbbc10be2

SHA512
dccc8db4e5ae5c013772c244cade14f2a3d2e6b4816c475d8d6353ccd25ce40687b8584e0191b32abf684f08ccfc3f3e600f183ac8c771bf291074f8607a7b5e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.MemoryMappedFiles.dll

Filesize
28KB

MD5
ab5f0fb0ea377e2644825c3a7fe3c81d

SHA1
e0a87299722527f300b017bd62779ab7bcb93a34

SHA256
7d658dbd53057d02e324e6feecc4b125fb649658661218356f8aa149a9542513

SHA512
d3bcf1e1edb5f21f8e95410921e4f5fdd7f381f0ac9d50a284c5c30ddcbd02a038697d209050355f5be18b762477d5b46c0e6dbd669b88dbaed652cc987e2c9e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Pipes.dll

Filesize
28KB

MD5
a9eabf83317d5dac41964530ebbcb279

SHA1
7c84303ef8c463713463b9a02182ca144bfba220

SHA256
249f61455012f0dca72dd1fda865aae2d5c61c401a60c05ec1de9ac018356005

SHA512
04276db651fae0dd51783f2cb06d72a68da631a5a69b5ec00fb78908e7d9154415f6e56f14e0efb25c6309b8fdf2ec1527781fc55e6b7006246963c265cec3bb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.UnmanagedMemoryStream.dll

Filesize
28KB

MD5
4418bd89762a5a411d7bb78727d79853

SHA1
dc2d2c6267075555856520be8da351e099d43469

SHA256
15775ac7d6c6a9ca977584c8959ab485316903503edc26e8c736fba0c744d1e4

SHA512
9b6d5f2eb420138ad58922a11d6530d4e257c6350057536d057947f96389aa4da6e3c3068766dbcb499b2affc4826f837921af213b19e1cc4a2ff5bfdc983def

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.dll

Filesize
28KB

MD5
13ad81e91d3c57a263033910aee18cf5

SHA1
21d8d625c557a4d7e594c746b9a3a9f10ed46ff1

SHA256
db86199fcc30dd3d3b96a215fd5f5f844fc6503cf221b738086780fa73e725b6

SHA512
bb7c7f4026150edb9fe96542ab1fa6749cd2792cae951d3384d1a143b69123aa4f44590ec196e8e3b2e80884eb90ab0baa22d20159d2ae02d30ddcb254dec8e5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Selectors.dll

Filesize
141KB

MD5
c613b9810b8270bffbb751559ae84375

SHA1
3beb7234b8f212aaebb7bd9c95dee62f0e452834

SHA256
78cfe59579fc736ec7290206bed523ccfae20405021bd226cde72fce83adfc9d

SHA512
4f543d0f399abcbcaec7959d600d65094c1dcb21d21e655de1180f9840053da4d60efa97b6e1750d483ca748987873785b91159ff1a4a9ce486f0bf8781b8ce7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Services.dll

Filesize
193KB

MD5
4df1980dd66ccb622b19848f06f6d31b

SHA1
dfb61b3536d447e8def83ee3ce17bf3efcc0e35a

SHA256
d3bdf55fbad4d88b55a311a3b878b2bb5cb6c0803aac715b7bc784c31cff719d

SHA512
6b661f8d3bc17201068a5b8f454bb19798db23c2a4072f140cd5f7ab2ec847b09669df8fcff8337c0ee87bec01e4c4f507bee1fda311eb98282e16573cb42f2f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.dll

Filesize
1.0MB

MD5
f5f331343ece8e737bb69f2eb5087016

SHA1
564d760a021a636d1cef98297916776b735f8478

SHA256
362cacb2470bc29cf1d22b2947d0a195058cee2c2edc9f32c1b45541b80c49bd

SHA512
a103bd856a788f3c1d7f37935844a402cec01c48b60b9678cf1cd492fbe0aa9d42e1a481fe0a17792a0f95c9a7fcdaca5770d94b83ee11a06abc5d0e2164b2c2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Expressions.dll

Filesize
29KB

MD5
8c88060cb4bc4dd03e8465b11407faaa

SHA1
f4738510f4e9af45b53457af01cb4c3cc4d63d2d

SHA256
0ab6ce7196e1926e5c201c8f509a4777ce8ad7e6c10fd19a45d16722860cab90

SHA512
2ddfbe6815aa3bea128e2af78980620f47c3986e174d9822b317bcbb0de89541c966f8aa06c83fa3567d1d0769e6c8e5d40cad5360cab804c4087417bb3463d3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Parallel.dll

Filesize
28KB

MD5
350624d1febcb4d8cbfd64eae6306326

SHA1
db629acd0f005b2459f8f4bba307af3f91882635

SHA256
471100c9a1c75f2487bc6700c7cb729d2adde6afd3b557e1fcd8a54a3b496cb4

SHA512
78324c99facf949cde1c34e690c4871a5c998fb5cd1b100593f806b0f1f67bb6f050cf6bb9e151059416922bc9d90c88845073cdf219eafbec4d6b70af5a85c7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Queryable.dll

Filesize
28KB

MD5
41eedb2731b6aa6c5331db9280f8b514

SHA1
f1cb3570331f3d4f9853f745e8657544b86ab954

SHA256
7675cdeff0d1a6c08c5e7f3b5d365ecab257d7d7b66237381b990827edd4d82e

SHA512
83f12314a91054fc374e8bf7faa0c6b769bbc67dae4a87d6200eb94ac8f05096ba306b3c0dcd90ee3c430a9f7d53ba0935a646ecc277b0c20cde48f6dea395b0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.dll

Filesize
28KB

MD5
95b740014b21cd4b8cc3c829817ae671

SHA1
83801855e7f47667a2420a591363aba323afc502

SHA256
977d54efd52a89c92379c33ebf6cc9933d79b71cfc89b1d748c5b08b2ae214c7

SHA512
b18323eecbaf7c7ff858e4fab581ff9819b32b9366911f015d9188f3b2a731637f86b53c4328b67c2e8d65acc7128fc05c6a03e8484e30417dd706da7dfa9287

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.Instrumentation.dll

Filesize
142KB

MD5
4cdb6c24865c65484f541dc3f3cd1e3d

SHA1
f2e20b7db8abef88704febba1b08083c6181cff8

SHA256
52953a642463f16497d0437304ac8c1713cf7e9dcb843b3ac72c803f926a0748

SHA512
b2a3ceb504a2d846aa8139581754549f1b886e718142360816b763b9e8e35b31c8b5e0fa80eca2a79d6a0e032a5ecafe7000850be9c62329f4c34ae395d4f734

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.dll

Filesize
405KB

MD5
4229765ad585cf30d2a31f3f4477b009

SHA1
97fb30b02ce730d52c60cfb5699bdb98a6078c17

SHA256
461a59d2d394e83395d97a436ef8ea4a1875ead980c5ac2680baffa4895efdce

SHA512
9ad5a4c5169a12ab68679ad7ab8307f20846849d7d670b6f3c5e79487bfff5651bf51876686dbf47977f911a515f7db2f47e5093be5a8edcb5b1e358afbd9b0b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Messaging.dll

Filesize
271KB

MD5
4c24ab3499491fb31c65604c295e7f1d

SHA1
903b1de231141d27f8581bd860ebd59450aac267

SHA256
93633adc60aab7e4ca28f7550881742b31922d98adfdc4f677b7baaa34042a13

SHA512
38a8236a17fac7a185355546c9c25bde3e0a4bf6d102b19ed420462d64fd3ad786916c2c64c7072ceaa0841cca1fe9c132b02a7966212962bb9e488d8b1221ed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.Rtc.dll

Filesize
28KB

MD5
258a37b3add2f82889b8fdc6fd557c31

SHA1
d5adeaaed447093b9341c5e449d0a1490e8f3550

SHA256
3f6d788f4e530ad79a3fed4f5eb69c54b63a5589c550a109d087ddff295bcc1e

SHA512
db2e45bfbe6ff0b0ae084c77627259b54f9aa69867e44a492f77c91384b9c53e28fa283a0f184c04055f976804403d4dac513f4d614f5ea88094ba88c37d9b27

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.WebRequest.dll

Filesize
49KB

MD5
c157cb5a9e20e6b16af14e4003de1d3e

SHA1
e0bd36112dc52c387f3168a40903a3b9d08c0b3d

SHA256
c193a1f9d69f44ec344d2e46e53fb5806622519c73e1e6bf8bf1cf287b791515

SHA512
0784c3d1e43c8a7b5fa96e6f078b2c85830375b2165aaf7564e6da8e553a8b1cf5979a122df4ba5fd4554a7118ed53c4694f9c441d8891a71bfd2b68dcbe52db

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.dll

Filesize
199KB

MD5
cb64dda22d3a94d5e5933e61e78b26c6

SHA1
e6726003ba4e649f346769896fe22482b09f986e

SHA256
fda9df9598663c8e9405dbe4ab7fb8d8ab3496aae1889921649619954e6c9cb7

SHA512
64011705d60a7a7f35f7956b766b99d5e6b3661b813456328e4b25af3d78ebc0c2ea50b8598f6899c749e7135ebd9faa2b769634b3121d292f3598d5a13450bf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NameResolution.dll

Filesize
28KB

MD5
24bf21a2fd9d2e7af6a591afb95b6a31

SHA1
94141a217829f6f31e61c5ac33939a25daed7e7b

SHA256
bd1535a52ddaf5243abd93a41dc4c74824a172f593a0b522663f4f43b500a0ea

SHA512
f3cb955133c6dbe619f689a97aea27499cdaa5ca4c3ed6d312ac64df0b98fb034f31339db8e277404ce6b4b5297e51951d8e318e3978326e749e57aecf25a4f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NetworkInformation.dll

Filesize
29KB

MD5
da7b81705b3fc3a4742da9991959f676

SHA1
b4aea6f72683935c887417eb558ff977badc8358

SHA256
25c113e072278abddc8ad53ec56539d5cc4afd161cac91af6003dd94afef0899

SHA512
2dd95a85640658a01e68313bd21d32d03ab9e16aa58aad903f68185498956f429ee706089a201c7cd6730a3480c688a1a2514b9ca6355e2a0099cc196818a84f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Ping.dll

Filesize
28KB

MD5
adafc4b45587e6671a944fc5df9dfaf3

SHA1
d9537f1b40a2b33b112bfde8f7404dc529e83944

SHA256
37f6cebaf250d0a90ee5bd8d86f583b39554518bf64387d1c6886312667fddb7

SHA512
d79570d4bb4586e6157bbe3f2ee6157a3d0c6af4fead66ae2297e67cffeed36185876d22a35d0137d3618182ebee99dd17526b0aa359c0a0dd449cbb196e66e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Primitives.dll

Filesize
29KB

MD5
4e3d9532f81e3540e5ce0edc52825956

SHA1
fe01f09cf8728538e569f829237282d9e28821f7

SHA256
139338f1cdf16100c0116786e2b9c6a4709bf5c73eb0db975916ac0b8b1a2eb7

SHA512
e678a91c56616419c43b887f30519967bfa67117e00cbc1e8e6c31776a0b169284ad06d35c2315868bc70fd23544591d0b5ab6fc8806e734e93566895519eecc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Requests.dll

Filesize
28KB

MD5
4c21ba6eab207669db05b16ff6dfc541

SHA1
a5f3652973f774a96d30923e3ec2a85b9446c41a

SHA256
596bc50977e67e840d09757db7a416941edf42384b11d92f9a7ebc0847f76239

SHA512
1320fbd495f04c4090d1adb7430968631d045f1b242804449a5c181ec4d7b418490f2491f008910f96473ac33a021f4fe23b8296046f2562a2c1e3920ab38f8f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Security.dll

Filesize
28KB

MD5
3a2f73ac855eed5621cb67de2b022070

SHA1
a6d7113d3934a2a94290e16d06db9a05b46a282b

SHA256
e3457666a314b127ba36bc4aa936f0d73a48d637113ebb236f7ab0ca20cb0280

SHA512
2bacd2060d5e6c66174eba264ad1ef71ff0cb19d4bbd29b2379d3c437234f04b72255830d50711c7f8822c9f139f7fad790dd90c1fd39376fd5a54fb4c647078

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Sockets.dll

Filesize
29KB

MD5
382b893964a84b19a622a1d45512baca

SHA1
298c246e1b0a352a6a9dff2189782fd264433790

SHA256
cad04ea39838d625e32fd0dd4d0d8a745a4dd0c311a50d5e3ee385ca99cf1e26

SHA512
0c8f950808fd08a37c9aa58c5c56efd53c894992d3b4d533c6985d4b817b494c4943f0406c9137d66a1fc27170dc792068b22e2d8a8e0a84cdec6e7ac4706585

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebHeaderCollection.dll

Filesize
28KB

MD5
91c84a7f4d6eae641ef58f87103bfc4d

SHA1
c75614018f2138a2a9e744fd97da81257989751f

SHA256
6732a602e2944f053ecdfddf2cb7e56f360d627302bd9760fe9846502570cfa8

SHA512
1e79739054fc86da2f0cbbf5f169cbda030d2f88f806112e2536cdaf64cd5f50ee10079eef16d15bba830cacbc8e9f05ef6e05779693a779b19d5b84d064b819

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.Client.dll

Filesize
28KB

MD5
8e664484b5bacad14fbb503bf6f7cb37

SHA1
700c36abf999e48675d92907525d429e17e1f149

SHA256
c7c3d7d493720f6181c3931f4334df845343140d14d39c597adf743b329df6c9

SHA512
44677c08c6bfc622dcf7faaddc0f8655cfe779b97c6545cece5ab4cadb63d3564d632994b21a810b2c4af5c28423d1a7ededd1b35661e061b6b710ad7d64f67e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.dll

Filesize
28KB

MD5
8a6f679851b9e867b90fac295f8f3338

SHA1
609f5606065178400efa4a869c1cf7c14321aa5b

SHA256
88323091435606806f50ecb0d78b0731c3383cb5b76e1ee82c255de81dcd08c7

SHA512
fde4872798907f05dc21bccb6d43a13e96bdf319a8c984e9c11e6a74c94ed0a4bf9b6b32434c970e0a902f03d2e9c149319c75f5581411a2f25f1cb47cc8385f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.dll

Filesize
251KB

MD5
ff618d59f708c14950e291edf87c3449

SHA1
c1c77adf710c882eaa8ed75464bec81642316d3b

SHA256
4dcbb4a87bc1ffaa23ac12884590a6e24102338cd047340975187e4f9be761c9

SHA512
ca6cfbb23e0e3efbf71609bf59eddf0b7d69dad118774f97a511d2c4ea801b9f5ce5529def03da6b9ae1b4c6d5678e5d76b4e31f961b61fd67f930d3539e9630

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.Vectors.dll

Filesize
30KB

MD5
3b496ef7d99053935b9e8c5a36920a2c

SHA1
401136956c52f36d84e2097b61e6a5f1217d2e30

SHA256
726ab6d50eacec8f6dea3db86bdac58501613fcfb3d7541df7538d916e1d8c75

SHA512
63d396d1801f75fbffafa67dac0ac1622341649bd87ff6c6d6815d97bd80adb4e58172a4847f0604d0e62985e525728565edf16e68e925f4b077dd21903e451e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.dll

Filesize
135KB

MD5
eae405fe9f2ef0e1bb0bbf8ff31605c3

SHA1
0029c03ee7bc2757955598b35d09116233078a68

SHA256
9c437ced622ff9aa2b1c712c204e46fb63082823abf2ae34dfd2d85784eec147

SHA512
acd9431b5e93a80801648fb1d96c29cc8ef44457928cb5e5350bc3e23c131ea85cd1eaf5f7a05717b0a2e0407cbaaa6d6408b2f5f48a9bbe22e1f6633234d41a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ObjectModel.dll

Filesize
29KB

MD5
d262aa8e9a99d6579f2dc6e84c5d7cd0

SHA1
f1fc5ff6f96d3564ef6b802791600e05a8fde11b

SHA256
276693cf2134ed64d9d43b3fcd20da56484fa2a439afae7c5aa755988766eccd

SHA512
7a516e7206c86e41bd3cffa880fd70c0ae162cd0c285e1e263d4d8795ade5178eadfc26f26d4203f3f879bbbeb9797ade77d32253bf706e336f7014014f33b99

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.ILGeneration.dll

Filesize
28KB

MD5
a93256a31b82994ad7cce5389fb503cf

SHA1
632e3f1902aa3efbf68863ba5b0cfad9743f97f9

SHA256
179963f3326eecf85d7377f7547abb9877e340a8f58714b9fa4e699a2446507e

SHA512
c13ef894779eb3e93ff0f18f40d61aa3a38e36789da72c1b8a4bfac674056badd57fea9bac94901b606c07d38350e1bdf9d583060a114587ae1a09687d951bb6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.Lightweight.dll

Filesize
28KB

MD5
33d34992246d48ab3c7acc7d0549c20e

SHA1
4d35f2d6b812c9edf795f8f0369710df29d0fad1

SHA256
1c64ea3e39d26038560a23f53a4493e229938d0d37734a0416606e1eb269f921

SHA512
286c5ba5a57b016e47a57f122d76b8239f5300cc0e87f3cb3bfbafa24168daa9172457b81245b8ed8a6b0c6741a2ff6b7d5792d83ab9a88ceb94f81a4faebbfb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.dll

Filesize
28KB

MD5
2109347e9026d0b39c6eb3df4ef02b27

SHA1
6d6d03c3167addba9de6cd9ff9651923f6d9a8df

SHA256
1b971e14695307bc1e15a63093ea2098ca6e317776132c656e5ee542c5066b36

SHA512
e1301c09cc0b1af577e1713382f23887076fc2108a0d43c943d8ca4499b544bdd20ea33656627d2445b7270b4b5f955d68eb918702003f421f8a19322d8767c7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Extensions.dll

Filesize
28KB

MD5
a5799f5e7b0653c38d910c4c01b46d5a

SHA1
22842f24c751a70bc4dabaa25e81b5697526248d

SHA256
eae8ccb6c07d972bdc83d63ce06261564dc911304033e748799c0a066c86e11f

SHA512
b8cc9ab708eb34a0a6952be2b90fd39c317d4b9cd442847b1b9746035fff35f70f3888c893fff18de27ef72dbbc0cbb630bf09be79ca6ec0a6fd023f4729a96b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Primitives.dll

Filesize
28KB

MD5
07adfa041dd08849cdb2de54d26124da

SHA1
469d84dfac7c81a771f65d137eda4eff17ad71e9

SHA256
b6749628ad26dfcc4b406ebc7124eb0fb5c819af21a85d3133153b58788aa840

SHA512
5f872886ed83b6ed2d4ce261d702866d2e16bd6f434b08a62cce1de7a19160cc64226adc69e4ecedf53c98f2304fd20d05d541ee783173b722cf488c222b9e01

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.context.dll

Filesize
105KB

MD5
8ae7ba843a78821335f3b1f1fd09e6e7

SHA1
f207d66924e98f34c654f3b81395e4f53a49f141

SHA256
27d55414d0e79ae730b0a1e397c40659ef07b6bb903c9d8c1d29ac315884f13b

SHA512
033d4ba396508b819db9a748d610c373e8b994258b002c2ead3a9aafeb55b1247e89747c7e2d94839b05c401288c32c74f758e2e580f8fdf87a4c0ab2712d0a1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.dll

Filesize
29KB

MD5
dd845ea3f2f6f4f410deeb5d34a263d1

SHA1
4e195479ab633d85614ad18bdcf69dddef06b5d6

SHA256
6680854cc60fa1f0c234d67f7eab7d0745320cc97a3302e4c78bed442915ffa8

SHA512
a0292014e22bce93a703744daf9c46d264f827772749452b8ce7220b72445218b475d4399ff88e57b695ca8c4ea411f80129780687802f7247db0aab8de041d0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Reader.dll

Filesize
28KB

MD5
daad3b5a5322c63b3e9243b987d745cf

SHA1
8cd4cb494a926decf7022b16a4d5898d99a23b06

SHA256
8b8118cfea2a9ce78df2c1add62df03af4b974a84d750ec568f2319ea4570dd5

SHA512
7739c3aea7d814fa978297fb5ced6055de40df912a1a0f77d75f2e3de941f917aa62a31dbf3d1b202500c03d2bf057b4edd011729f107b3d48391d0266fd9657

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.ResourceManager.dll

Filesize
28KB

MD5
540597698f25141bf54de10afc7866a2

SHA1
e56b246b91b2a1d611d1dbc5ea4f0e649171d859

SHA256
1282dd0008c7a6684aeb3430c4560aad6df54cd1ac7794722ec188cc8b790186

SHA512
867028ec3864c9d5628f632ca35706e5198444e817080e99de7cba8f00c1f300343f7b34d4786ca61d17c36e9f1beec404999a7a369fa57de9cf437c8e41566b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Writer.dll

Filesize
28KB

MD5
b5bb9304f883c43d995453fa863de5f7

SHA1
a16dc2e973ac745dc58f4ced05930e66dd3ac86b

SHA256
37a86d427acd2bf9786b940d4b554706cfddc6d2a21f719bc26dd2f8ec4b8fdc

SHA512
dcb8fae610fb6c359ed4d0e42ca7ee307cd7be81092c12b62a7132db21652804b881e9abde40a2d2268ecedb3c6dfccb1604f3abf51a6b4d87eb0f221f7e6e28

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Caching.dll

Filesize
107KB

MD5
da60c8a29a24e7a15517948dfb42ff59

SHA1
727550106d74d85fd090e7f370c5c7762dd1734f

SHA256
714c38b780f08d30fb4adb0e76d109024b296b8b5c87d551e54a489c17895991

SHA512
3445fba1eefa3caf2e14c0b635938b660569a428ab3709e36d110c3d2d90a3312a36568c52a2d49358b150bbd9ef8d7099265a794353ce6dbb7d5ed15fcf91d4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.CompilerServices.VisualC.dll

Filesize
28KB

MD5
8b5506487ef2818eeb6ed361d36ad175

SHA1
85b3d63461f4c9dc18ad3e92e7484b74f220ed9b

SHA256
cf96ac0d5b243d0807de59be4642161f44d830086e8f2b0bdf7415ecc9683ec9

SHA512
7f378e8d62e92aa9fdad25b5c6b99aaafe8dbb903b7f8f61bc5d1c64dd02da2e0ce8acbaa0fa7ea1957befed508fcfd993f24bcc070fb95453beba76a7fd0cb9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.DurableInstancing.dll

Filesize
168KB

MD5
8b7820c8d5771a4782007638b0036bbe

SHA1
167b6c688380ceadb86a64cb0e3abf477d6a592b

SHA256
842038ec94affb258bba1fd9ee9eceff676d088a58eaf78de5e9cb5498e98d24

SHA512
d2c5f6dc5e4bf6bbb02a43740d98298f6b808f700bea0ec52ab0645a25579950d65f7f1389c9abc4dfe96ead28e346e35eeeeadfd6bceef745e94cb6b8bae82f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Extensions.dll

Filesize
28KB

MD5
b2b590f2f20c343ea41c9c1283bd9bbe

SHA1
5ce607b715b4e982cd917536b581dcb3f4fba8c3

SHA256
465d73046928100036514cce8bf919a65316c373ed9afee14aadab3c9cb66110

SHA512
69bddb74220527c6fb96eda8ad77c64925ebad8c5b36a1bdecac080ece8d7c7685d801dcbc20043ead18d2251faa9fe5a3725ce52c2f70a032d886016cb2e44e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Handles.dll

Filesize
28KB

MD5
87442fa9b971d670829b0df92a4a31b0

SHA1
b6eb809ed05feb30538fb853aa85c42d7ac9252c

SHA256
6f432376567393e4e3699a7094b7a914d293f3ae64b45a8706bb98a420b52bc9

SHA512
8277ef60cbba7f6837e4158070c777a3524aeedf966c6775f9aa0ad8ab8a54ff78b8a3ed9f70dc49439a132f3a595c3c62c04abb369ca0aaceabb1ee9d884362

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.RuntimeInformation.dll

Filesize
28KB

MD5
73ef89314086a0a4b0651baf9139292c

SHA1
78143803cb120399dd25a829d60f2276882cc5fb

SHA256
193126ea7de1afd549d6ac6e0548ba31e197936d35970c950110291bbd4d44a9

SHA512
6d5a37284f716f3d2313060d7ed36011344612fca803b241ed6966d635b659dc41b4bb48f6b8a79f2a14b433a92dc056df5077ca8dacb69bb85c46e04aa48f40

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.WindowsRuntime.dll

Filesize
28KB

MD5
a8c3cee1535b5d568ff837a5206b48a9

SHA1
7bb615e18b801d89f218d8869ee38669ab90133a

SHA256
2842bad771388a685204f70fabc110916de350ac411f63fe20967a320e85298e

SHA512
4f2d0fdbc1d3f209ce1a463313c2c391b1b3e9f7865ba8e41bb23d6b3d754e938eb820ccd94c94c561f26929fdf7e1be971672b4a897ca8e890b621115a0972b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.dll

Filesize
31KB

MD5
144a02fa813e18c67e94a36bd0998ff0

SHA1
a157304a84598f2ab7b5a14f60b31a040c2f0301

SHA256
013f8cfcbc1dfbe1654d9a7e65a1e04220f771d6ac1b293922edd127a58d4db9

SHA512
6de5eeea68ff30541326e2cdb11a1b06786fa982f361e90c928012fb7a1c45f8633f2edebc0cf2143081d45bb67fc041db946b75ac9db912bc7a52de38210829

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Numerics.dll

Filesize
28KB

MD5
280c83605081baa6679bb6e7b026c804

SHA1
ac59cb90964e4a2ddf70d77c91f08e69b3bd8130

SHA256
c0314ac9e1a3366f5aafd3cc5428a6c0c3035b3059a7b0f09ee1e7e551d26d53

SHA512
599518707bd430cc10ecd1e5b74968f64ab3e3dc3949e27368259b2e13fa79cf1baeb691058664aa12b82b1f6099f41819b1512a985ded9ddfa711a2e553329b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Remoting.dll

Filesize
339KB

MD5
f5e9a650713f4e23d9e968fbd0ffb3a8

SHA1
4bcf994aa3653b3af5a190dd3422555e51721c34

SHA256
210600071dc0e8a3774969da9411bf6765dc169afb00e9e800571e366514e29a

SHA512
1aff901727360ed4c5b7f4c1acdbcae8fffd40a6905bafd63c53e45c9e9ae8a1fed53a51744970e2156c107f28d6733d3d1bcfc0728338f8a57d903d0fec26f3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll

Filesize
138KB

MD5
29454b69e82c782e69ce1e9c4615f95d

SHA1
931927fa6ba73d6f0dc38bfa4f742acec697581f

SHA256
84f9eb0be1623fd6a0cfb9a8a20d476a03094655db347981d8d19d51f2d633a0

SHA512
9bb274cd684385c09b49ab7116cd1032ebdb8e57334924550f0c28eb06413e6da4db294aa3dd74fc976935692b7ad6f88e72ed74ed2725428432b66b30aa8821

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.dll

Filesize
28KB

MD5
11e902b5a457e1cacebfd054b8a27316

SHA1
18f3f70cda9fcfb2b716cef9599723113c8355b3

SHA256
76157507714371c31adcab04de337b36114038962be1b12fac3e4c159363f9f1

SHA512
66e621ec5c0885e9fc6b3014331ad9590fefa506e0737ed5732f8f0cd5a240ee1f3301b525d27deae7b8e8e1a669bc0680ff55127ec91ef0d52ba9cc9b670db3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll

Filesize
28KB

MD5
d727a295c7ee38a0bc74e94fac28c2b8

SHA1
5611d214c8408fee54d40c3072f455f26713ba76

SHA256
28f373155fd80984c85665fdd7355ada26706311cd4c122c3a3801a04be47b92

SHA512
17e46a7d75c3a0e92a39a2dd05a7c6c1d3dcdfc0e76b32f9235ef3314640123e779161a12537f07e6bb2cadc36c0cc9e132efda5c634ad0f2230bff3d75179f6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll

Filesize
28KB

MD5
d5e2b8da2740d8505472ed775f83dbc1

SHA1
cdc1b47a2b05addec9ea3fd4c8131ff2da9c098f

SHA256
b354f8fb1fde3ba77d7591fc38725f465e202a80742dfd071c0e7e444469a572

SHA512
67a971b76e782d7a52080bdaef69d8898d0413fd5435a7af1127fe9d37e21bfaab2bc81d60f50a05e1a519f1198512deff006400893c249a7bfeca3def226660

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll

Filesize
29KB

MD5
83b72d7d7c2023b4aebd7c7dc450e238

SHA1
0b0dfd805e240249503664e90e1bd40e3337d66f

SHA256
a257d3f6005f1ed6c0c3f66d5a0d658e6572bbefaa5181c0aa9e008ed91714c1

SHA512
603c936ddf743994f791624a1876dcd5a1c261acdef387033c07d3c7ed086db5aa8417a1b630a608654ab2f85d4bf112181ca08d6d6fd11c38d474324abbe2ce

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll

Filesize
1.0MB

MD5
fa5a643a57c9bb5ae9b4526b150d121e

SHA1
9a7b47c31fad3194f807b9b2e4e054516fc0c375

SHA256
c9b5935a4d167655e07b6b7ccf4b802cb0912de3e432df658daef33448e2b5c1

SHA512
f998265084daada467fc2c5714fc27360a8fc5499a7564a21987aba05f105a4b991feac53de718538093e1daa301f7db1cf064d2231035f072801f3f2f14696f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.dll

Filesize
36KB

MD5
6af16d2646e07c2890cd80fdd374ae2b

SHA1
986280abccf9b5b69563600addef3b9cca4be142

SHA256
e79b5a854c3ad4b7e88287386a9a341f1618ea4717c439db76d6abe5af8df098

SHA512
2766aab91c09ec328eba68701cdd3c180af278af261fccdf08b617396ed9ddc706957435b761aba4d61c7b568d0c5b70d0bdcb80b989601cbf72c01e4f8f147d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Claims.dll

Filesize
28KB

MD5
e4f88076bb3e831dc5814ccd93a34d95

SHA1
2dce8124b6e038ee70f7d37e15778cbfb2cc53f0

SHA256
1e5ebac5235fe4120327de2805d2cd5a6cdd7b3b7e67ffede8c16877fbddb01e

SHA512
cea94a7a8321a6eeb4b47a245998b9bc19b103a17aae539db5c78f638047763c4a2990d1e7fbb4cdc9628b7b5afd7ffc311fed166f5209402a7d61fce8c64284

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Algorithms.dll

Filesize
29KB

MD5
e2b2a8875968ba7e62316930bbe0cc2c

SHA1
c0c4e983c385a880598fa7e4decbd085dabd4d60

SHA256
fb85139a680f197d29dd155bd850d72bdba9306ac8cb9bf57decb75a9ea3b153

SHA512
91a466b75c0283e35b64c81e84d6bde905899681363b1fd2ba5fbb8c3ab904d9c552c22cd603cca62d273730272aeb9855ed7e4a9e3a43c61f76d6e665744896

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Csp.dll

Filesize
28KB

MD5
9c8754c8eaa5ee00739ff2e268de2fbe

SHA1
27305ff383499bdb15333c81ea4c82b072ac763a

SHA256
b5c01749120fe1113757837021631129ae23dba4c360954bf920409cc2aea18d

SHA512
820c06d6ee230ac73af06d223b7f62a62de6c6b111a0c0d4c7e9230416c607c9052d8cf63f21d24f134dc0fadd84789ae89520b305b064072938a23b22804a62

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Encoding.dll

Filesize
28KB

MD5
213832e025eaac6bef4e87f2554bef57

SHA1
25cdd11d2f15c90a6ff7e9054f3c3bc61265c2e4

SHA256
3930c9968100c6cea00848161e084ea9b37364c60654d0ed33dbd94d34dbf55d

SHA512
d05e40eb74bcea443794944985244c835c5464ddd04917d3923c928dae9e075f94a9e08b0137afa7b611b510862beedc356c99efb06fe7678a6a3d44db739002

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Primitives.dll

Filesize
28KB

MD5
87d2ed7f0e223be9a97c9fd740aa4edc

SHA1
3629041ee175c8b8ec9df87a9aad21af06b6202b

SHA256
9fb07115f697d77f87b001253b6682f39fcba1bffd5f1cc7fffd20b8b0930c05

SHA512
85b133cf4cf6d45559cdb62e54f7fef5ac21fbbe1912a9b0b41577f7048ae0e7c16a87ff0d30fc6251cc31e79ac9fa5d84d82b835119ac8d03991890c6a65cff

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.X509Certificates.dll

Filesize
29KB

MD5
4ca1d24d1ea90b1bdf77441e2513d6e6

SHA1
bdd4627d65a145f6457ffa0b2e42cf34b13f5a56

SHA256
7e19481f6d0ea0e8f581324fbbf60f6866ef1ffe013bec8113bc4ea971f82c05

SHA512
2b49308c43068cf7c684a50b6e66341318841248b51ae958f0654b2fce6936b496f44204f5513fef2ce5c47f407d9b71015f7d3b8e7a0e171ce57de135e7db7c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Principal.dll

Filesize
28KB

MD5
511ed8a57682b6873aa1e3d37db3483d

SHA1
0db0ffa83abad169b40efccb5fc75ca40f76235d

SHA256
28c38bac4365e188db53c4d68d9cec64c892c345f94d57d379f27acab046021f

SHA512
1dc493fd5347b46b5703044f8b078ef84aa5805a88d5e6a844981b668fe6f31f3fc06319d106fbe8e235372da9dfe9f151a709cb69f4e3c33ef957de5f48b876

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.SecureString.dll

Filesize
28KB

MD5
210672751fd418d7c7dd0c6df707c8a2

SHA1
e16df41e466aa091d27ce2a12258a1a58c6033ae

SHA256
7a4b45a96d7ad0d762f648c1d67d29a5b1db58dda5f1b6a978d412fb42aa138f

SHA512
4b86195897d53e9c06e1f271089152c8e1536526a8c168ee34a1868f1be701376faadc60e1578c7ee8c1440e4a679644827ee2474c8edfd36ac73629ba87e26d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.dll

Filesize
318KB

MD5
504c39bbff1dade8b95550f6ef9af4e0

SHA1
7bc939ed1694b411478a9f276360308b829b4a34

SHA256
52a67d620fd46fb920c536a8651bc9755d6bd560544836c0887f6ee5af1a5b1f

SHA512
4af64487c5f5ad0893539371e9d12ed5aa78d9fb9fd76bd9eeb7c3fa95a91b349f22d2b3692dccee30de4b84599036334a9579a75acc592e5d3547994f00ed1b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activation.dll

Filesize
197KB

MD5
d324c42598d5b8cd8e9260be4ad907ea

SHA1
40794db36476235c6d0f95776bb341090dd258e2

SHA256
0e14e73887a827f0cd7a2e441262c40202284bc086426bee508f6d318246a3ef

SHA512
14b2c656d8a30a2861d4e13a91ecafca0548fcb22f0e144756fd1025429e5c4b9b21369a22b4abec1d7edec1a23a7abb630f8092d76942ca0a066d81e442c19c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activities.dll

Filesize
548KB

MD5
3a002c0486cfba7327f49959f307f6d8

SHA1
69e8094692a3a706f2be454ffe9a4d7337b9c7b8

SHA256
f6e8d64c20e4bd3981e914e258cc8d696ac3ba2348fff7eca3efff9e0ec62902

SHA512
8aa623cd26e230d2260dda5ff9f7cecabd5821df33446ccc4cf4bbe4189b030fd4f73973a09d915e77f8040791651270bcfd32f08977ccfa3a8842ef63d3eb6f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Channels.dll

Filesize
154KB

MD5
4a45cb43a1ccf3e846afb9d44cae0751

SHA1
7c98a7aa1d16fbbca39cf24d4c4fcc585b2d04b5

SHA256
8066cec0681336ee80dbdea92c4a583f294aab277334872d6d4e3416405ea43f

SHA512
5b0fb070aa4f7f915d68e4a658f11630b96357e6f444e7d993506aac5a3814a102c0b745a48d65b54b184ad1c8c6ade2a620d8b45089ae38373852c9860bec90

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Discovery.dll

Filesize
301KB

MD5
e2ff78eedd5bfda1a0eb5f085291c918

SHA1
c7a9701c5b6fa7b430284d96cecc70b67dfda8c6

SHA256
b12f1f0ee4ff3977972f1420dae36b28a9db57a4fb337666df13cc2ef897bcf9

SHA512
7fd71ce4ca9704ac70b0e03026c0fb469453d32e33c203003d69f23ad478edf4b8efdc672850413795cb01b82ff7a027fad5d2385dbfa732d093394bc85085df

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Duplex.dll

Filesize
28KB

MD5
50a6d2789b7d7aa2e36d8ed864b3e945

SHA1
c8f195d7e90fac150f505524762f3bb5c47d95e7

SHA256
a89516966aecf5153f55c14afac795cac8630050dae7367d923633727a1faf5e

SHA512
201d87b732c0ce6d3c6572e8c3244e6c4750dde132a9defd2121384648d12faa9f38c03ae6c1499679177c73f4d461bebd0cdba3a512745d8b3980fda14ec0d1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Http.dll

Filesize
28KB

MD5
c7d3cc492d8e22d3e932734c966316d3

SHA1
9beab5911349ec7f1c2f30ca9bfb0a44692b633c

SHA256
d9a5396ce12f427cfd5d25949295ea2167d774758a0745d27558a4a3a66f2044

SHA512
b8013fd0a38d3cada4ffacdf9726e665d7aedc1540ab655eca7dbbe39b0212bc7a96fa51404d35bde953ac8546e3e4a286520ab7aa1d234b130c85ed9e3c7893

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Internals.dll

Filesize
254KB

MD5
da368838dea53b30166a188c365ffa9c

SHA1
a4f10e1b4fc97a550984429762faeea23f360d11

SHA256
cf3125323c868a0e32920ca32512ece357200a23f1d6e8b819b1c091fb50f474

SHA512
6361e9236366c01547e3ebe265b99f50ad62efb611499c043d877f6e617853d49352ef4f4f41427ef76dc1dc969db88fe9ee70dab5a4499ff69b780840e2850d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.NetTcp.dll

Filesize
28KB

MD5
1bb6ab17dae13bd7644551a7ba7750d1

SHA1
7bd2864bec59c0ee04dfc081fcfff23282eee0a5

SHA256
8d543cefaeccb170e2e62fad1165a1cae06fb8dc55f39d57adeff09ba4d532e6

SHA512
e4d84d32b2086b8b3a436785e2494201efd77231b4129ca3a4dfe1af59a865d05ca89186396ba63655ff25591fc237c12c71eb182bb3c09b6110e5eb3bb303da

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Primitives.dll

Filesize
33KB

MD5
61d78477f72316f942e0036772c9d562

SHA1
8b8caed1d33c0df477931193e985099b58715d46

SHA256
f11442b75dbf9a5b6857799070d3095a977058fa104384be89bdfc39c1bbb040

SHA512
f99db342e7a5da5dab4c4c5d3f0d00cf78f72cfb0a75dcf49b90c0ecddba81609a1ea9b321aa32c9ce80bcb344fc3c7fdbfeda404669013403b0dbedd2e40dba

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Routing.dll

Filesize
127KB

MD5
9fae0da4ab77e30ebdc1267dbd00f5c9

SHA1
b4d1b4e22994afdb7b44f136d1575dab8e19e532

SHA256
10a00a656a4c62664b4d09ff11a96fa793d3508b8b5b79751f297c2942326a47

SHA512
54ee53409533e5a7cdc2bd8765049fdcb38b1a516d2ffe6c1f8ee40f96e0f0fd0898a292583d5062a9f1ca4cf49847ed8822597a17a9e090fd5fd3da5af17f7a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Security.dll

Filesize
29KB

MD5
9581624009c3efe3842cadfb95870ae9

SHA1
b681412297889442c8c1f37742ecf1f11e2b5c95

SHA256
b5b2742c6c1f15b88e36674054c60c0fb529c86eb721e801248918ad7cecd4e1

SHA512
980ef36778b772440ab8762b41df82bf192203c8b3c521ecec3d93b2e581a6a4ae144aa1709cbc150c8691709b206cf7e13b253054fda1fc3c3e76afae828581

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.ServiceMoniker40.dll

Filesize
22KB

MD5
e27a7610f63c29ad29d58c885d8422a5

SHA1
ebee1a3ac8aad19913d50e0e71b8a124a99bbcf9

SHA256
592f9196ed692c9c0896471bbf884a8979c558c747db3be180481854aff7caf7

SHA512
ae813f71384cd9631d366842d06d508c620ba2b3cbf661308febd2e569e99499b42957c5332c61f6d28a01729db97df4cf6bbb6d1661db3e0548f1d2c85daf4f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.WasHosting.dll

Filesize
38KB

MD5
9903a39a8dc276e558a92de263236b76

SHA1
58e2c6780cb65c97ec172383504932a5a610e6fb

SHA256
daafe8a6926a3f306a216a6e5030141f45fe723f1925c46f336001022886d7ee

SHA512
94b512df66995916c8f1eafbfe5d91babf2d84dd26a815de1f067d8a3149830972b8307b3b340acca86190f5e2a6e2f60d0413349dfb364edafd0a5dadce7eeb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Web.dll

Filesize
320KB

MD5
1c0f18c2fb5d9394e65861dc35653f27

SHA1
6a50782dbbac09537911c5639ffda44341a2cdcd

SHA256
594a14caa2c2889406599e8e9d81e0368edf8880458353eae3b2e6a74ecf22c4

SHA512
bd522f7097807aab72126989b2c436baf78282f573607993ade91a3369e43a91130064ef554db8e9afdc5a9dc409443613f7323646dac19da5768661a43c9667

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.dll

Filesize
6.0MB

MD5
2ccbd7882a7a4022151de212a4ebc05c

SHA1
95359d1e04f87b86ecd97ede371cbf1b17b07a62

SHA256
96e40d1d2dea8f021274d65eb92727f7c05e23b8bbe54a87df3acdc0ece6c6b0

SHA512
0505739bcf881f9f05b31c7c4e8ca5ac98dbdee120da47ddc44e1d0801293491711cecb72fe12c6d63da197d3b6ead1a27f302124051764f315a65c640d9a329

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceProcess.dll

Filesize
135KB

MD5
d8a2f419145983d532d9181c1e99695f

SHA1
e01ea069ae0457a991bd2531d83267178d95dccd

SHA256
dfa501c0efa735f43f4e899b5d594f083765dd38008bbd71e80cc92a532dacf6

SHA512
847da8541853044d1cafc1a1c2c3d92d431e7669095d094f38084836be60041ba2c6429bcf7cfe76f68739509ccd5c69ed55a40b442752b43e7e8a93a3bd3b61

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.Extensions.dll

Filesize
28KB

MD5
7ac9b9a04fcea3babcd5be82ab00f0ee

SHA1
9c6ebc416815815d5bb1ccb76a5d7abe5fa1e9d4

SHA256
451f9ee786b69131191b73b7929eba224b0469d3a55818421355adae16cd7788

SHA512
67423ef5cbaa71f28a5811e11184e27285672c0087ad5da336132c58888fdbd008f0778bc143c35fe4f544f85cff9bf03839f8436eafd2a92d964f057ac6715f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.dll

Filesize
28KB

MD5
be4565c86dbaa95ed0be27911171c942

SHA1
9d32196e7788e7615fd6110cd458ab02489daae0

SHA256
837fca9ecf3c198cbf7cf9233b14ae0fd7ae012b53d5b8e6a140c1730ae39677

SHA512
4dbfc4f3da3e46115002b12d7deac9000cd74cc619cc57c23235f5eca9905551a9b9f6e1be35d59083332dd514df60feb746b3d3c89e8383e91ac8f55002ebde

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.RegularExpressions.dll

Filesize
28KB

MD5
19a09fbb2fbfb710f8e1aeab4fcc353a

SHA1
2d8dcf61dc629af3b56a5e421e99e68ccd48997a

SHA256
7b0bcf1db9a74902065a9e8816ea711190a9a4d8338d51938602984ec95a16b7

SHA512
d6102e4c94408a8bd2950f67bfdf2603b587dd60627b6487994f5296372b8981c9477f8b9b61619a7885883f18f45eca8a5ced1682bdd6feccfc789b7e73b5fb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Overlapped.dll

Filesize
28KB

MD5
44cd3d87839441378237b6743a1dfad8

SHA1
0554ed1b88e608736fd4511efdf07d4372339de0

SHA256
ad9c8f06224fa3dfac7f245ba845e9e52042f4a55486b253ca89f048c93312ae

SHA512
8222ab8d8a0f726dda813ee3754b557b7b2b6166c1c54ae82b42c3924f93913ca0f17abd5c5e900ce827428c69d0aacc45ce3c6932105a4e1074de5460cceb4f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.Parallel.dll

Filesize
28KB

MD5
3a978eebac7221705628a3b545f21fff

SHA1
7ccf1a5277e7ef03e302c93e855b929fa01d8fd3

SHA256
952b55b1825bf18c770e14aa4a7f9a3e939f03ef76727bb2c5c13fa08cbd23e7

SHA512
c8c5f2cac4ed941531cdb756a29037ff381a6a147f8410caae309f58cba6d7e47349cb1990eec037b6c63de74c9f01b3d14e43c2104d7dc711c7801425ff2b63

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.dll

Filesize
29KB

MD5
8088641468fcc43de4d972de392308bf

SHA1
84e6f90e6d1ac820c5477d640013aa2b0e98be24

SHA256
110482ca75f3633c2f590652783757ffae390b25263ac6f765239add03d6d6dc

SHA512
e043312e456c8536d078c0e6fa76f0e5e2210dd583b8e47285eb8ea9a382262e9891702feac0ae7529af0b44c67a91c446c30e9638aa3813f9d3474a03f80fed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Thread.dll

Filesize
28KB

MD5
d58ce3de04fb56f7b7aa719187601a2e

SHA1
0d664b5a1ade859a06f57f527d9769be4745990d

SHA256
cb7fa31412566797acf44b2ba1530393416a19e1e8d68a0eed7bfe2bff382d75

SHA512
de199480499c244d8f8a41de553b31aa02f5a724450bbeafbb571e4644084559aaac91c69900fcbdf01c118b9f1450d0f10d8194468a2e7167d9b61e15610612

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.ThreadPool.dll

Filesize
28KB

MD5
29b71f1f3dc37a69fa69e873039c3313

SHA1
021f0ee877580c6f46c7df2804a9f7e966ff46ea

SHA256
b46ab250fe65248b2966aa18640d082dc07cb720c5602cdb18b7ed1fa3ddafb6

SHA512
932a2e5e10b63015ff6cf0b8da6a738e9fa523ceb65d2b9890d9fbc833b62ed7811ad7459713c3542e0808f3702db718460a4d6d501d0a1a929e908909f0f234

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Timer.dll

Filesize
28KB

MD5
962a19a042658035e51f623485d51ff6

SHA1
38c56474c9c845acc3d966c3877272aa4b1de82a

SHA256
b52817d085fd0c27c49f731cf067ec843d86ec83f23379fb805f9a59cc66dcfc

SHA512
59ebdfea3a44ce9e9ef2aa54287038fbe44ba2d2acb542a79e3079589aa6d7c860d65f5e47285a4e03788c6864cd7d0f966f9633eee6a97a2cef38b6aea55295

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.dll

Filesize
29KB

MD5
92cd1f93f2384125d85ac192c3627454

SHA1
65cf7763cebde3e92938a762e12c29e24fa984e3

SHA256
f1526218e02c6342053d09b72590c77e220e88035d0e32f24acf860955f61898

SHA512
e33fa9fa1fbd46f73eee6e6567ffb3e2df98931f1d5f6151c274a7a57722f00afe3b6a3f3d5eaf43e5753f4d3e13fe8fdfb719d26777cedec372f2b1eed148d7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ValueTuple.dll

Filesize
28KB

MD5
e8f9ec862c8d9e63815af207067fd745

SHA1
08e8f6372dc2a14b9a6ea2fd5593f9d7219934fd

SHA256
e23e5a3e97f141bbd682f3a28cdfe1e5e1fc2f5fecdb48585053366808191579

SHA512
1f7a1c57c42356db5b003bab8e2a19997bbc6bcc708422a685424bb90f279fad7c7bc4a452c7c146ef8fcc3ac7e49b26cb82565b225b1da8430e4db03efc17a5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Abstractions.dll

Filesize
22KB

MD5
4e19bb76af94eeb1cafe7fbf6e6dcabc

SHA1
5d494d8e3f0bcfd24f1542812d29cb46ecfec44c

SHA256
8c4891313b83bd58230f9d2c2dc63b2cdc0f868f89282a92052a7067f9665854

SHA512
4f95d7aa55e6f8abbbb4c031ab168de04d658e96f33dce64b086ce71c7dda0d8674adf1398020ed8e409e45deccd7dcd3c6e18c9e2ae17f45900d78057ca0aa1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.ApplicationServices.dll

Filesize
69KB

MD5
b4ba4f9e4a849199e5bf2117e7d6483b

SHA1
44aedc6cf3baf0100de7e4c5a9a8111349ce810a

SHA256
78388d3590dfe5efbfae941f98263300c9e3aa690318282ae990ea5107f2f1a7

SHA512
cca9b8e1098e4600d946fc61d529b278392330fdcc4cb8bebad09949a1e710ba2ba09169b0adb93701df0f5caa66ab9a936e1a5880cf382c6b64c0d887740193

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.Design.dll

Filesize
103KB

MD5
1c1a4cba8a2ee5273a0c329dcdeb70a0

SHA1
c2c59092a7631258641fd6180b0e4793afb7e089

SHA256
8ca5aa7f183ddfc9ceadb27036cda81d5c64e43251e5974dac31b7da946d928b

SHA512
a77646cb6e1ec21b85a9ce7bee11e59c30f17379f29ad0df638f72c32fa0beab338178fd561392cf46db059cd28d34e46d101692af139908147dc156ab722675

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.dll

Filesize
1.6MB

MD5
465a1966c0d95fe200221b377aec3f80

SHA1
80ff38ea792f6d682aa1adcacc80012b89e6e33b

SHA256
1c2937b5c0c277adb961b9519c0263e340a08748969c9d5e8064fa6de5e23989

SHA512
74ceeb2a07105924ec277717ba9d7a55286b771a45747d585692aba483de0b8e980c62eaf171730e4d374b06a02426d4e339df97edf91c09186a6212badc04b3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.Design.dll

Filesize
43KB

MD5
c587e59bbafab1627e2e96390175968c

SHA1
5016e2bf475315ce5708b16db2f8574ab016396b

SHA256
5ef3a6807df97fe1bae44c1f016c086f6a8cce0976403ca5d4efc6f3dd82ec0d

SHA512
ff8850d4d8ac1787716026688fbce9bb799c22d127eee43d8470dc4ed976a9e87d8c5ec1dacb635a8e844ccad6953135d63d246d30e2d80f03d49b530a92168a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.dll

Filesize
242KB

MD5
0d3ae633b973321df04d79e261c9c81d

SHA1
afa1f3bf777927c053c30d0dd72794f33468feb8

SHA256
2e5bf656f57f57ec7d6e586e67f8ee508080046de853d064007a03c8d8dc5b6a

SHA512
aeda61710af35dd8b8f68a59b489c1ee175b0de2e7bc2b7c4b8c1369da899eaf2f99b0994f169d69f721f337946093de517b0cc894055f2488667949e0b64765

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.Design.dll

Filesize
172KB

MD5
b707882f19ba40defef33ff544b20b6b

SHA1
a7164b15bbc466354655c7356172832374bc98fb

SHA256
7720bf3cda9950d0af64e7f4d5db6f5b86788586a4ef7595d5baf352a2ed0f2f

SHA512
53c3d9f606955fc7768b0b9903a7d10200a8603bee34f775f4d55006e7f764b95d17a6d32d7fb941c5b0becbf7bfdc63ad9bef763f77c2b2249175f580982a2e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.dll

Filesize
161KB

MD5
d4ea463fc18e4811ec020ac320d856e1

SHA1
3c40a360ba6b590578ac1aeaa6ffe0bf437bb40a

SHA256
1f21f057e08bf701c5dea0dd597061e415695ad111d527d1639f6c8c92baa985

SHA512
e20b1b70e76486fee4c523dd5e4fbbaaba7fbe8058bc519bdc741ed90aca0a3d45ce30e40d4905fa694e1c898222a2d1abec703462bf6319c84ee648dbf6b752

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.Design.dll

Filesize
348KB

MD5
534185deba8b1c629c43e541872689b1

SHA1
72b1f3d9539faf006bff369126e2ae30c48831cc

SHA256
85b971bad2fd1e24163b4e5fb3c5aaa08ecf4a982b65758e9cc083b5861a08cc

SHA512
b77d7b63f467b93060342ecc05bb0f0d0e38ffae57ae5b7845c50d3f94f803e66c5b2ca61168188372440e2b8f3ccc557d13ad6494ce1e8c5a3371281563bd2b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll

Filesize
1.8MB

MD5
2d296262ed4ea25b4694156e12dbcd8b

SHA1
c6b8c4c558d0abc6e1dd15bea18529cd62911424

SHA256
3e2e5a908224f9d97a53913db6620ba2b0181be5d6cf39b03087afc079f6ab57

SHA512
7920256dcabf2e0b5da7699868a45903d424dd3c1ac06e10f5b0fe8ae9d5063b712cb1e00af5444c783354eb0dae496d78edbc22163d37b6c7552bbd61484aa5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Mobile.dll

Filesize
811KB

MD5
ba6137556ae7936154aeb2e6e599fa9e

SHA1
65e2548545912ed466dea5cb7d43d13182b8ef48

SHA256
6ca733aa9b9dfe0a08f8c2189d9a4bece5e92cf6b4c2c9c1b372671f99f3a72a

SHA512
5892f439468cc9f14860896b479f1b9310863e1f562b54525f39ee64526285cddf6c99bffe21c9d7cf2009bc788d3d4f1c1f2fd28dc2742e66859441f05f24d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.RegularExpressions.dll

Filesize
103KB

MD5
922ec98829d087cddd66d345af03d36e

SHA1
f7074d20d635a6bc334dcb3c70d73d23a00d4d5e

SHA256
354261cae2d02f626e05206b710cee4c9570857a16df88159602b0d860a394da

SHA512
d300dce53e070842d80b8e57a6fb065c12d535e31f1d3f5b164e4bf28fe0a4a3ce5778d1f18dd605114d3b3b662cadee6f15d42f437cd1958c1b6f2431cd46cf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Routing.dll

Filesize
22KB

MD5
666c1df2ae929a52365c37e4a9bc261b

SHA1
707d6fe1ee828c779544d4db91a824fa68c6ab64

SHA256
6a21313353fc7a6191f20712c4c6f7979d3aed176c78a96b2936c8cce870ece3

SHA512
8ee8d92bd954cd5bd4b9b6b620762b97b1549030da5c6a2f27297d4c082f5eebc3bff312a343ac4c162562a2c08b5f8bcd332a1a04063a2939e06321713ac3d0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Services.dll

Filesize
827KB

MD5
67b12b01fd45b98cf36a31dbcddc0af2

SHA1
09913977a12f9151f814846ed216b5417ba0014c

SHA256
099353e5f57df19c8c9263df9a6d363791167dad8049fdf99655d93d9a9a455a

SHA512
cab0f2af45e7b4cfdd54df0b58064395fb21a44f017ded9403311efa0a02f063468ec242dc975fbf9f6768874becce5313ac93ff3982e2bc3a5a790277cbf0a1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.Design.dll

Filesize
80KB

MD5
43969f7257d50fd8b0687bc96c8b6f74

SHA1
a7e9a792befbef63c4662a11b966f9c17e3717f0

SHA256
a01b40f4b9a97afa7cee5c446f95c285482daa17ddd4e7d67266e2153bbf69e5

SHA512
d2ae916036c8c6a30b2a412b2ad86cab19b893e5facf7ced02735bcc305008b0f75275782ceff117eb857426b7face1ae43d2a41d2e8b54792e86faf18434fb6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.dll

Filesize
1.6MB

MD5
568f927e031e43f997955526bb4e9512

SHA1
12fe9217a79f141552b5f6c3cddeb4ab5ab626e7

SHA256
d3cdf58ead242bb5ecb3258017ccb41f82e49c2f5d7c698532f2534e1f5a258a

SHA512
db8eba642b05539c51ba051bea6455be8a835c9c2d18ddf231f9c5628835dee5be55daa6795470bdf9943bda7c0ffcf36efe7f3c2cb7f21be07fffda76db896b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll

Filesize
5.0MB

MD5
f180603019569cce656c0c0145cfcce8

SHA1
70dcb0fee63eebc045c1f13ca01abecfd205e466

SHA256
dcfd58c1aec0a13221cfd3c84148633070dba83031396c3d57adae0b42b71f82

SHA512
364c361d26ceed2d5137cdb418a40272f9e88a09856d2b8895cf32120f8fbbf0220a9e75a513cbc4779abb5d61551d386ceb30850a891bdab72b8d950e2dc703

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.dll

Filesize
30KB

MD5
f92b7a8111460382bd6c9fb36c709279

SHA1
ce154aed91d36c13ec2467577593c27a7def83ce

SHA256
8c7b70cf2ba6fe8b64db280cd09a7c6ce76c636e5f32fa949a76a1f683b25137

SHA512
0a33b67e20361f2ad72fc1822e019832b44172b5eff6b7cc773ccc8e232dd27bf6e88d4e9d54427d9fc0553684c3b8e14592ce66a266b80ceccdd8e1d2dddc94

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Activities.dll

Filesize
1.0MB

MD5
2118fb009727c97540e46ad31f58353f

SHA1
7763e0828d08e09c7e6a7e8646ac3833a38ac33f

SHA256
3f30ab0f118c6c588769940d9bb430d2052fbf91a48603b9c1201798adbaa055

SHA512
cd83f13e0ad8256615a0c873c0c8388daf31b9fe8c6cbd1b53bf9b937dbb8059e132873a90bf7504a66efe31a091fbf510e8f6034e3e5475484ddf4ddb142c57

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.ComponentModel.dll

Filesize
1.5MB

MD5
3e138d6f1a01a84db24beab6283ae512

SHA1
6a74e33b10610000060b771b410549b5439da10a

SHA256
ddeb999d7066a3ad116fe185138b7d85d0a7979a74dbc89addc6b3bd126104a2

SHA512
bce99eca1d4a4881f70b8c6f4e5aea4e3fcdf2c76f60c78d9acb8a1112465e5ffabf85b55e517906a1be6a3449ad88e5b5f9d98ab582a1483de5d51555723db3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Runtime.dll

Filesize
487KB

MD5
efef1f471a59bb1f8af495d5614cb43a

SHA1
78abc25a3f745c026da2f2370bb536dfd0c3d5cf

SHA256
04f73657b508f98ac1269366468c579f36aaa7ee5f5d0cd20a2a8ed697c305bb

SHA512
1338d54803315c247d0ef73c36a8e39b85ca86d4953e84e784347984f00a03addc55c02e36d53b2fdd23f71902fe16820461cdc3832ae9d8697021e9c6b9644e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.WorkflowServices.dll

Filesize
440KB

MD5
21e29032e7360ce10c7e99e838e22738

SHA1
a3b1f5e9a1dd7900ddef00d2c0e30da2415f0558

SHA256
dd4058b825abcb4ffda3407003af3a4117fc6b7096b809b623e6471898207a34

SHA512
329bd1b3e044cf222daddd293007ee470d842cc6d13dfe322b0117650115cde8f89a8225dbdf3f6830c2ec90d9c4289682ea4f36ed454f9e3c277fb9f2669c8e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.XML.dll

Filesize
2.5MB

MD5
58efa9b1088237b3a86c0461fec272f4

SHA1
74ce0e660fdea499cd505f4bfba3291dd8abcdd6

SHA256
d8d7385a92afe929289ec7059d2ad861ad075460b136104b7944f68240c565af

SHA512
dd8154e6d5f8ebb7b91378013bfe154033d2f60759b1b56cd1c20b7c3d055b8e918841f06a51e112380e880ea2e1fcc139a47aefc1abfbd50fc023e8017c406a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.Hosting.dll

Filesize
42KB

MD5
7c161f1389ee705529494aeee28798eb

SHA1
9a12bbd3d8f5fcd8b0218a3b4dd3028de4d496f4

SHA256
e374070f747609cae77eb5fecca8454fc9b23ae6c59835c10da28d098882faff

SHA512
5b88f16163e69717334f11426143290335328b3873d8bd5228b3284fca4cb0fd212a2e102a3f64560a33a5a91d9384a886ac6072d579af8be1f1f32fa3641a0e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.dll

Filesize
618KB

MD5
03d67f85e5d6315a6e13a843c9289204

SHA1
ece716fd32d02d473edcd3c14338b7886cc4e9de

SHA256
ca25a90cdec5c9ac5bf2706ba87ce0242a862701b6fc27d67564d0cad7563bfa

SHA512
51ab32daa68ecb584860f2c20f18e86e71ef6efde9d1dbfa2f3780356e240a7efdb957324b7a267187b084636c0757f2e75ec1c2cd944925055c5f784c7b544e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Linq.dll

Filesize
159KB

MD5
435bef82e9e267d2f4c876e580db5132

SHA1
387b75f51e6b0539e99f7b4d6cde3a560da2b768

SHA256
25fd03780548916d8735c9160dbba0a87438ac564bf0f6f519211be60bd980b2

SHA512
16cb30cc8333609d2265bd46897e1c874fc9753b0257872e98d99b118832f93e13b0ad688673efe1d3cce65247be6bbf0c2faba40ac40aa0ce81753a0f073772

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.ReaderWriter.dll

Filesize
29KB

MD5
d4530d93c421ea7b3c0874a14a8d5e5e

SHA1
d82dd61598aefa752cac9a646ff71ca5d3dd8ad9

SHA256
8efd1ad91a4380ab6669151c8e3122ab9152720af4bec6e45b46f65810cdd9e2

SHA512
2bd11554e25ad18d1e9b2b779b4f02c1b4f45efabbb49f6a91a746ea28e1ea0b494dc4ba34a6bbecb6c54a7281f36ae72621c4703eea40d685b5283da2207ca7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll

Filesize
44KB

MD5
636e95428dca890184f35f6c7c692455

SHA1
46c8824a7956ab0faa7d8d34f85de329fc1968bf

SHA256
dd0f37329846d287e67ead9efa5e95f629f2c6388deca146ef7c6cacc7997a24

SHA512
d5edaea2b2536354346b3322ea94b70ebcdcc12273a9fa0b65d997ab4573f6a72afd5b133a581ceeaa70d2b93985596419e6e3b60e91cd5e55c81386df068396

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XDocument.dll

Filesize
28KB

MD5
1fc2ab077fb91c6277d557378689af0f

SHA1
4a46fcfe67aaa4db49cffe3307784798fdd4ac38

SHA256
4dab3ffa4abb3eb4c2d4f3adbcfe36e75051a838fb08ac41b4e2422e736c1bd2

SHA512
f5704d15aa216c8712626975039fba793b86950a70f3c24f1a1ce5d68fce1082f11dcdcce8fe09956968094e2511e82520e9c6802ca917248e9687f7798e7dde

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.XDocument.dll

Filesize
28KB

MD5
6754bc2bf9cbb46e9662da6147e189ad

SHA1
ccceb9615456b683839debc55db4b2632e54d3a0

SHA256
349838346254e6c8090a1ecb7243181853f291ca7d00f7323a4a3a5f3d29fb22

SHA512
e49d4bb076082b0c011e10154e4e37f4eb7e3fef3a2e37b5f9b824342f8f73bc33f26052ef858d01641dc576c645587330cd89daff5767b886e26f38a256612a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.dll

Filesize
28KB

MD5
aed64f576de4378f6047090d94832a73

SHA1
e876b2b70c9c4f656144000322b8e7cd6ac50c37

SHA256
5f505a18c0ca2974141977af70a1f743c2967faa42629b805b1acd8d1c89d9dc

SHA512
026d239e65782d9e3e9b4201f9583a46f3079458e15be9a50052cc5f4ec1ae07f06c568fa0b830e97e2202e5ce497421f505157181c0f67d2f3975105d317ff1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlDocument.dll

Filesize
29KB

MD5
0ad108d98b70b73f123382ed4a4e2eaa

SHA1
4182eca7a5baa3e789c90aa3588bf3b88d46f4a0

SHA256
ca5f21f9aa8e6bd92b14ea04cd7cc011f6e665479c142cd6a64202dc3abc5317

SHA512
0eed7d6b567eecf068cd606c068e094aeaa203ec53464dabe6111d25e8d913153bd80849d78b244cebfd1d8fcc51b2585e1e5b67144c6978ad72bdc99ec45e29

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll

Filesize
29KB

MD5
9bb4da8d570043ef91711ebd57811434

SHA1
80cc27390846672b8ee42695fb1795e8f6f0d0e3

SHA256
db29923c9a76f13f51fb08cee718f4b1732fe9d5fc929b8a4b0d72a7a0dd0fe3

SHA512
8ed3c597442cb941199d335927bf3a3c587af0268368e9677b4c30e77c5974b5c2517fa2c563b72c273b437208b2b36afd663782c41e49d27e673634456a6641

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.dll

Filesize
3.4MB

MD5
ca704c2acd1d71aba8842067b92323c6

SHA1
1f75119f97de83a2b06c2dd6687048a293534137

SHA256
ba92bdd7d2547f06fe19301ddebb74796471ff818b0d60317dbb1db59151eeb2

SHA512
9a87c7bbec666129d16dc90cd288b34ce1f00e12cd4c6c2d6ed6287b02b019e47185b0c330e999b3793e0833a595da24e17e59251754e3a941ac451d8c864968

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\NlsLexicons0009.dll

Filesize
18KB

MD5
c3f056a92903a7d89a0adc33c16aa38f

SHA1
1da0720e78b7798c5939d60683bbf25086f301a8

SHA256
f6454b91eeaf28e858035d8bf597c84080a01b5c1c44991a0ee5a2aa7bf0067f

SHA512
7e9fe20a709fa4a886ae3fc8d90a8a0460fed915b81373cc4a36996a6675b3b67dca3c47369302aa208698a349d75dae99f9589d97e9632bc030870a90c201bf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationBuildTasks.dll

Filesize
597KB

MD5
f041b991cec615c397e3dc0244c98844

SHA1
14fbf65a17e34910737d2f3c430cb21dac499e19

SHA256
7c6ab215bd05dd7c764408708efca73bdb1b4fbd91ee8831350fd2ade59691f6

SHA512
cb12da0be02ba647938b8bd40da5491f7e67ec71dfca684b23c2e817b511805ca77006cf614ccc71a72da8f0f3dbbbf9f6e3dd12c7099d8f4214652d07c22148

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemCore.dll

Filesize
25KB

MD5
34e3050ff94be37507ddd76f27319321

SHA1
c7ca955c449f7dd07c71b3dc379c9ecae00715fe

SHA256
d8a9ed8503d9da90d03c420d226b89837d1ce47d6e86524bed871586cae2ed65

SHA512
2e585152422a55d942b77b537aaab2f86814d94659c972eac05ddc6bfb6c8cef9b9a7137d0191fb4cd417d9560a13ee43e427b13eb0dcbb3565151f355e2d67c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemData.dll

Filesize
23KB

MD5
b98a7297d9c804ff153338930e95379d

SHA1
613d47741baa9c65694235fbd8320f45352df867

SHA256
23eeb655512804e7f3b5c088763e89bf74a4a541ec4bdd8fdee175103af50638

SHA512
cbfc9649e5dfa36cd380fab52d7c4757723c5e463d021153ff62b0216eb24f8749d182b2e4344dcfc0661af3af44c5694042faf8b8bb5a715be3f6833a1c9563

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemDrawing.dll

Filesize
24KB

MD5
301687cbf1234c3bc9297637e3abbca8

SHA1
4672f8bcded0e3818e698f41debe2c17a77cc41e

SHA256
928facaa8f0212bfbc7f5f77bf762bd560ff92ce112dbe69caaef9bfa78eada9

SHA512
d2404285cf9a8ee7e8f47b92176c96a14c60a025a60c9a998b9ff789fd1b5bfad57e074cd495b6c1909c0e5ec7ffeac8f9aff645c53a89f59e6c9100d5dd6834

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXml.dll

Filesize
24KB

MD5
82fb77f0d92f5a70e8eb667470415843

SHA1
9702001507c3844b23a0780ce5ddfa4375a0f4ab

SHA256
f3338479ce2948fd5f3eeb982395df0e7748b00d99ecb7fbb6bf250e8fa2d542

SHA512
ec2a76bc1cce7b9e918e7d61ed4bd5da58e0c5560bdd3f2ce4e84d007da3dcdf0a01c9043f9f5a8fe9e267621d8f00adcb9392fc8f77e60d02d9e9aeeeda2f75

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXmlLinq.dll

Filesize
22KB

MD5
abe467c647060192886b4ddd154f835f

SHA1
3db9e9694518fcbe2e11ab7a98f697c788570d17

SHA256
4873de7a2427e14d2d96bfa76175560da4f0f2f7cb2f41b8ca606223cdab3130

SHA512
0fc1c95e3c79707397ed07d1e2c730be2566266e97917b165d5444a1749023dc78193ec63ac1940b3fb76a29c5a657474b426e3bb4bb4d5711d32e24f9d554ef

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Aero.dll

Filesize
245KB

MD5
7bb63390e0a211e3a5470c4e0a6f0014

SHA1
9b3a4ef8e16188b6af0ca33da6dee009d2f44ad6

SHA256
5088ebd8bd88ec1efb1abfb9f41443b3fbc6b9ba7a44917fbd16b327395559bd

SHA512
07d9d9cbcf8c9e6c9979e39fca9c9d679b35f1e21bb9dec4fbf838980feb030c9576b8cdfbf652ac3da821017dab1574a5cc63d612de2fa29432e8354fe99740

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.AeroLite.dll

Filesize
175KB

MD5
e4a1e84c6477f3d62a1fc1761dbb90d1

SHA1
00bb26373c935ab89aea9b2b64050681440409d7

SHA256
3cc0ba2d5a44a0dbb403438f1af413948190a01db3029fc320a9e8ea4d9431b8

SHA512
97d78a64e54cc14788c739442ac242e6bf4ef0f063375f398be1d1369f7923f78a4c5b2b491f2151dbbf017e8e608743d869e5fa3ecc79c557736ec3cef8474a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Classic.dll

Filesize
184KB

MD5
6e9575b695eaa610be66a2ff045b93bf

SHA1
419050e5d1dc6848c98e345c3dde50e8f0bb9771

SHA256
2228de3473a05ca1d30eedb472fb9c65b95ea86cc4e206a8b85cdaf05030f50f

SHA512
f3b735cb2e63eb2b397bc8856d4287c724d06413598014a0fc1434069c997a4c1c224ec302a3d725084b6a6ef7d565ed3fd159866faad0c668c95a85a16fc16a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Luna.dll

Filesize
482KB

MD5
0bd0f59f5fd6218e8b02f94dac941671

SHA1
b58298ba7303882d397727567d0ee76058fa5358

SHA256
ab31a2b131544438a94b405f25f19cf82d42070477a2f4ab804740449c3c7946

SHA512
36e34e609bd3f50ccc41152778316c1e20774f73fd563baf1e4a28355c1f914345c0c0c938e3d6fe1cc84d1f9a13e9601e7a44d19e4102892ed0d72d78f19f1d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Royale.dll

Filesize
206KB

MD5
263862293c055f2e46b6596b0026de2f

SHA1
d54ef95fd02a380a81905b06b68b63606b6a3755

SHA256
70dfb5f2a9d10b0908d2e7e2076a2448e0de175120b66383ad9a8bebd8ea99e6

SHA512
79b075d99f1ef97d863e34692fa30ea7d65a20d08a3de468b716e17681cebbea99ff8f1a5e43cebc9b850f86694ec5b56aac11583101f401f20c310677be2064

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll

Filesize
5.9MB

MD5
ca9ae108e1c76b3a330e6b0d96a9a7e5

SHA1
ab8d94184018186d035dd83481575de31ebcfdf3

SHA256
235d87d4406f4cffc50ce0b8d8c23a61122bb58586bee6eb8a2f10b46ef99957

SHA512
bb1a952d8f931c44cbc02c3cc798169bad8b1a131d37694e6ec143c60534dfccd4be176dbcd59761f7e61e1331e7287bf513dcc482d8cc1a51cc417a7f33cf9b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationUI.dll

Filesize
837KB

MD5
2ee941eab9f9dc3271c1ecd38b2fd484

SHA1
a82a4dd367ffe987c213132234fb1d8c860d06e2

SHA256
db69fcddaf57465a6cded3e7527d15d58d27ce6a97ce4c6bb3bf8f269d97571b

SHA512
40e55f3e3cad8ac09ba3ca656ed8acca8bd933046a07a8d92cc2a611c658ecc2c982c97b141e656913352b586ce78d1f7a1cabfd131fcb19062d3cadc3fa43c8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\ReachFramework.dll

Filesize
633KB

MD5
83f68f12a0e1bcb396a0904e32329036

SHA1
fb26ee1db7d14d032aab71e83605a4939f0b297c

SHA256
7eb4c5a1c075b926ec1425ae727c83978cfe26ddc9f24f1ac10c394405364576

SHA512
d4db19ddcd9e2af9ef9dd2b7d78c49f2936a8061db1dd2920883aa54444c99b07fe201d357335837e6e03d93325c3fb12a1ad7b88beb0a976aadcc38510721c1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Speech.dll

Filesize
666KB

MD5
6b5b79280e7b94f3278412a444fed6c1

SHA1
29b5d973dbb0c06a33ff48daef83cb615970aabf

SHA256
a32cdb5488e737f081b9748f6948d929623016ab6eaa57e1e5ce372458afbbca

SHA512
4bb7020eb5824dee897e64f55fad2b607d4d9bdf07f2218dfa34feffe64d874b14041e7c3481289625d8cbb52963256a9d650fc4d059ec9b6dc70bdbbacc2e89

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Controls.Ribbon.dll

Filesize
725KB

MD5
41ee2f0f5291e22f01a49d198d52758a

SHA1
dcea86a0d6f58fe9de62b854668ff75b07988cf9

SHA256
ba0d437f399a68e62350d1a3aa59c1e01bfacc1e4384d9f06d2c47e288ad2908

SHA512
7b82d260c6c82917f183edf30e2fe9ce33ffeeb46e23a4e6c729d3f1a29ee04402d0209a2b8a1836e3ef00a3b9efe159a152532774914132b32759ba860cf187

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll

Filesize
66KB

MD5
af5ff15d730839575224ead3d5260837

SHA1
3c23b8cb233023535b910048558fdc84e8a65be3

SHA256
49551326e715dff3a7686d3564c19dc41f6aacb68e34fb24a74d0d6a1f2ed7f4

SHA512
3f47a515ff3587ae4bdbda7a4d563f3bb1cc2927220ca7755f9afb902da67dcca197c61d6ed000fa4a9e6accab251b8f73d2d2cc5c5fef966299cafe133a5b49

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Presentation.dll

Filesize
28KB

MD5
d7c5b3f29265db284aebf3c00c023257

SHA1
6b4a5620bc24689291c1c2824071574e26815471

SHA256
1f5ee5fab6aa293a117ee3ffde6ab6e72629b0fc248abf8168d13646793308a7

SHA512
6f32331180f572be2e413c6bb95aac4d75a40584c3c12fa441d94007110902c20e4456072b011fdabde6e6d5f27631c7a190a423f58e8dedad0ee5ef025ffd50

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClient.dll

Filesize
173KB

MD5
eaf1e75cd64d0cb4d686d2656a077e38

SHA1
b3435d14bce7267d021b793bf9b924ad5c576b0b

SHA256
115adc3083039755c044b76f87b2942771136f3f48029fbc3b96d652423d17fa

SHA512
3f805a44acf81ee07ad16b5a16e7f45d97611d74997c008f2924541c02e4267616215daaf976022ccc6f0f8816ca8ebec7fbb43f96ccd9406f44efe21fbe673c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClientsideProviders.dll

Filesize
352KB

MD5
9aa7deb308e37b4d80217dde916698cf

SHA1
58292078146e8fb331744980495f11df22af1915

SHA256
a48ea0a6d0a468bd38319a3a6fc4025ba63d06dd4325d660ddcbb4df5883dcc0

SHA512
14cc7bd7e98e64990bb428634be6cb8e310d472414f45f49243bb5635f194d9383a71fa6d8899903bb4015a74556101fa6a7060cbe28e7d10c549563282ef71b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationProvider.dll

Filesize
47KB

MD5
01f6a4b974568f191ba2295b5c58f994

SHA1
2a4bf77d99038c62568c7a0d73c05a60a7a040b2

SHA256
b3d452e504a8790618f699a61242ff45e7809d425eebeb3f2b1c1581d61ac84e

SHA512
f70da9dbd0810be0d49363e1b65e347120c96eb6e0648f2e021a4fe2d1602dce06df731c04f651fd1f3791db4975480e7109c62f9517ebcbb3b004d0cd9f83f1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationTypes.dll

Filesize
215KB

MD5
c1d638371424cbf2606fe200257499ca

SHA1
86e2e791382ad2c37cdc74d40676d5e3466a532a

SHA256
6dafafb7475e9ead63a4d533820a246176774fd4f1cef53aa5ae6e7b5f722cf6

SHA512
f30793527dc6daabd609cee694b13334efd73eb0b11ca15827853af0a1ffbe05e16dd4bffaf06832e1be9a5751bc075c6954b104f337c12a588c2ef0fd740d6b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll

Filesize
1.2MB

MD5
57ac8653eb23af732b11e8c22d7db083

SHA1
82e8ee98528a30c3fbbba0a0c19eaf9365d4d9d0

SHA256
97e10e1f1c1371445e04d90c5a66d0c7482ddc25e0c471ba25289d38a4760dd4

SHA512
da8140fb2421cce684fe71821f41f837266bf7cb9de6fbc6f22d2bc7b4bc7bcd52c84f94c48ce138529a9f001fd39434557583ce689f729d1f3174b6b73664e6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsFormsIntegration.dll

Filesize
101KB

MD5
18a13739d28057b00f9db343f22cb2cc

SHA1
2c364280bb0edaf45e810684b172564a5073d1c7

SHA256
8b8d1a4c0714a6969725b237651d7a78783946ef5d419941b645d599afe7fe41

SHA512
f62406c63fbe139b0ee153d4dcbeb4eca4ccaf62db930705b6393edbb1e35a4a0d55cc192c2e11191cb96a88f01c47248b56376a208e70794b64bfdd3bbd9156

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XamlBuildTask.dll

Filesize
129KB

MD5
30c66286a71197e5082c7e58974b3a4c

SHA1
dfd37c5e6ce429febc780cfe25a3f01c400832ba

SHA256
19e7d5cb4c3380ba03bcce1eebb14e865411f457441527aacdbf7d04ec7a4d40

SHA512
6c479b7bf6ff6629048a89433bb6021d8430e266fe143c424bda94cfe19e6657db471eee1be865d3a599be8cb7ab3ee4ee5911aadd90782b25cda970babd4fc2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XsdBuildTask.dll

Filesize
66KB

MD5
0c6f9cbd182b32875dccaab8737ffea0

SHA1
70a3a5517e48873ec0827c7a63c3c6b16b36b3f2

SHA256
fd9c2afb181684e0419e5d69b08a13ea01b307831cfda116b30f40857154c1a2

SHA512
9a0eb5f00d8738f1fca54471ea47115aafb81ce3df0695ebca99dd40e82f6d6cb72a238097fd7e29a656c1529876dc656282ef19da8aee7fb40d9c708217fbe1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netmemorycache.ini

Filesize
1KB

MD5
c9920ee5d61763b7c9178e7635ddedee

SHA1
9baf3b44ed016741cbba24a5052271e876727969

SHA256
6d1685098d6c38eb1211ac7f75036f0193b0cadeb43d10d8149a50728f12a9c6

SHA512
78fb427ec3cb53c86b3481b237bcbbacf9e732bc9dcf07bb04f92b2d99506b7ce32c622d6ed712cb5aa90ff75a5fef8ad1c5107e7ddb5d878a6d6d18c3566134

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netstandard.dll

Filesize
104KB

MD5
4dd229acd0dd79d15bf837b098ae937d

SHA1
0cccafc55af04d942eb6336560c7b83fd783f46f

SHA256
575d4d9279863aab638d67616c47e22a8d520f21293533a0d26e6f575dc57df1

SHA512
c35e9777b5029745522746e31c173b997233b4ea11875d2cf29f60f9a28013bb1d305241b28816f101586591694b720fb0404f3d29c87c12946563e274fcaf55

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\sysglobl.dll

Filesize
129KB

MD5
722b11fc5a4a5c85934889d07a5b3a1e

SHA1
9494b308b45c05beb0c8d8762426765cd14037eb

SHA256
1c0a7ad349cff5b13ddd5d40ca2640ed0258c3175e50f82cfc8fe0fd82cc3212

SHA512
e369c070d0aca07a355d0138dfdda793cb3028e6f86d43ef9b83e8ef4e68140267a54a292542ad116c84df01533a4efa5efd738c598ebe18a91403734361bd2e

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsLexicons0009.dll

Filesize
18KB

MD5
611ec56f4356cacd800612f210637704

SHA1
1e39491a8ec3a26f89a2b6b596f018e02b15882c

SHA256
bbbcada158fa7a939dee0737fb0428e7dd340033492968fe14348023e415f30b

SHA512
53dc64b4a4805f175da039402018bddad8abdac72c0f98774348fafc67779dc05b5d2c4c7f856176fc580520f676e0fea2fd33c21159ef31044c812779eb6512

Download Submit
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\desktop.ini

Filesize
145B

MD5
06b88037d08b99aba34a61a950f8a038

SHA1
ddd531abac7d5ed5be7e10beb065bc0605d8044b

SHA256
6bbc77f47ac1cdef1daefcd6c3f9ea69b894db524770cc783738d44b4ce101c8

SHA512
b4fd57d472a822692ee09e3aa0a238df4c45c3e86c514bdb4291d54b276daa37f946e99a122c7d3ee98572207296e16b3680d204cfb96ab55b2623753d580d33

Download Submit
C:\Windows\SysWOW64\msvcr110_clr0400.dll

Filesize
18KB

MD5
f6eec510d98463d17aecd98ec98f4961

SHA1
aaa04352d8a432f258fe9e94187383a7389a93a2

SHA256
badcc3de97dd90c3d3952b87e9cec77461770f0d7fa022165bf245e9e5d798cc

SHA512
d76c4f9bba72c19b14cb0bd355cad87487f7db755a54daa84b5c33198772b03932b61f1c30c0eae5c8037c02564ab5d57321a248d1bdd04445d253fe8b59a68b

Download Submit
C:\Windows\inf\.NET CLR Networking 4.0.0.0\0006\_Networkingperfcounters.ini

Filesize
162KB

MD5
3f0e0b52600d1d532d781515a65c2cd1

SHA1
e669252fa5e00d7b729e1655efd20cc07475c58f

SHA256
44de74f8d460a8ad2c411f240db9e8ced4f5bc9382ae28d06e7ec108f6ecfd4f

SHA512
3a44c06e5c4caaea64f41db62641f391f6c9e2b6ffe735e034cb0d851f501f125da734f591b7ff5d3550aeeb7698e395d3e1e5d788852d0d45a1f9c8b9b3506c

Download Submit
C:\Windows\inf\ASP.NET\0005\aspnet_perf2.ini

Filesize
972KB

MD5
fbfa5cb36d7ff9114978aa7527f7a715

SHA1
b0a6af71310f17db94ce7399af1e63330c460233

SHA256
e37a9cec4cac9b4df692af7509e43b34c0f8581633a5c8869ebae2324052596f

SHA512
c9b424f4b429b3bbfd8d7f7e67bafe60ca913f4bd5f6a59ab66a400080613a5f8d24a159c7981d0b95ebb593a69c893f23da4d049d2777f46d499b2555108723

Download Submit
C:\Windows\inf\ASP.NET_4.0.30319\0005\aspnet_perf.ini

Filesize
974KB

MD5
700a4cbfedc1473b100f11d244f34c48

SHA1
b0b57289609f626dfac2836b16e34de2a1cdf321

SHA256
a51fffa4ef73a4810fb0ff5965468e7251cba7eb943da70c8a1ca89cc2ff3b7c

SHA512
aa8fa2bb54b9cbf5f94f3d6cf90fa09a517996b8adca66aece7239cc2a7a2bd8543216718041a44a0fba7663c5b24a153b173eeae70a531d8abdb6146c7f5a62

Download Submit
C:\Windows\inf\MSDTC Bridge 4.0.0.0\0006\_TransactionBridgePerfCounters.ini

Filesize
132KB

MD5
78a87148048cb247a3040197c8d3bdea

SHA1
a4ad2fe4bf4d1569c7bf454761566ab52f810cad

SHA256
6002a047a591e2b380a3e248d4ded9e7478d1af5946d16a5985b863f2121c3f2

SHA512
97b0896d13df1be135b60604c682a7e86cac1203dbb84d75d4af45514e531051b6d88003c34d8ca48307723d2bce8305e0acc983a41030125e2439fbd901c848

Download Submit
C:\Windows\inf\SMSvcHost 4.0.0.0\0006\_SMSvcHostPerfCounters.ini

Filesize
130KB

MD5
9e7d4a8b02f81da913683c624e4407f2

SHA1
63091e9fd9e3788a34bb83343bb6119648b4cefa

SHA256
227cfa86069c286e2ae1f0e479528373344095c01e18b2b57ccb4fe590e85436

SHA512
203a8d5304df7f44744e88e80dd3aca26ae6b36ecec4c4df664305f0a56d6d87d44f80cd536ed3963d5e678147b9176ee83bef8a8d9e88b8b6a46ce08ecf12df

Download Submit
C:\Windows\inf\Windows Workflow Foundation 4.0.0.0\0006\PerfCounters.ini

Filesize
150KB

MD5
89e2c01ba9570eb63328f0c431ec4003

SHA1
e517c92b5657f5c103e228e52ff36e9a033bbaf9

SHA256
1bf8c2ef489481860aea24dc6fb24cf89310f6db8a3be4eeed627e451bb3b6ab

SHA512
6ee158eb608063a4beb17d4baaf2ec057dabeef80c5a88f624f492a2ac0ab0fd54268e1210f02876bf1e597325c183ae7664aadbebece6138860f1d52d6966f0

Download Submit
C:\Windows\inf\aspnet_state\0005\aspnet_state_perf.ini

Filesize
41KB

MD5
4d4937d710812530ee0720e982c12391

SHA1
3926594701e9f8e79b71a149282e655b6d0d3182

SHA256
f4f1b3122ac9db8b42cc0094aef0f0fc5f2734768b4aee7475174eb5b729549b

SHA512
c440009a9f84b7c5269eba13d843be580a66da4abc89d2c6365d3a08d9f669a9910ba3d84016d0ae260f92e198815a863512e3b1b253dcc616d8bd409593ba29

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads