xorist | e4d2f2a378d94e261a8379699d8eba2f814afd6b8d4fb75eae9acb8135e245f6

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
11-12-2024 05:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
Size

7KB
MD5

dffc0f2532e126df17e0c34e17a7b35a
SHA1

1ee624026bec1f2bb3b5aa26b19dd59ebd7655ad
SHA256

e4d2f2a378d94e261a8379699d8eba2f814afd6b8d4fb75eae9acb8135e245f6
SHA512

9b3b51e0cd7d8bcc4ca254b1dcc21061a72e95d3501317238ff8b8f766470d574a126b8c7b778a982babea93964debb69a0f94b992503c8085fadab230a94dee
SSDEEP

96:VLZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihExiAiY2lUJbTLIQi9z+L0:1zdrr1FG1WDCgmjPZi1fWTlgzWnMUA

Score

10^/10

xorist adware discovery persistence privilege_escalation ransomware spyware stealer upx

Malware Config

Signatures

Detected Xorist Ransomware 8 IoCs

resource	yara_rule
behavioral1/memory/2360-6765-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral1/memory/2360-6766-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral1/memory/2360-11151-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral1/memory/2360-15050-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral1/memory/2360-15699-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral1/memory/2360-15746-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral1/memory/2360-15747-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral1/memory/2360-15748-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist

Xorist Ransomware
Xorist is a ransomware first seen in 2020.
ransomware xorist
Xorist family
xorist
Renames multiple (5475) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 8 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 5 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msoxmled.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msoxmled.exe\DisableExceptionChainValidation = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msohtmed.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msohtmed.exe\DisableExceptionChainValidation = "0"	msiexec.exe

Manipulates Digital Signatures 2 IoCs

Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wintrust.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Loads dropped DLL 14 IoCs

pid	Process
1148	MsiExec.exe
1148	MsiExec.exe
1148	MsiExec.exe
1148	MsiExec.exe
1148	MsiExec.exe
1148	MsiExec.exe
1148	MsiExec.exe
1300	MsiExec.exe
1148	MsiExec.exe
2336	MsiExec.exe
2336	MsiExec.exe
1344	MsiExec.exe
1148	MsiExec.exe
1212	Process not Found

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\q7YTNmTmY37Q8Dx.exe"	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe

Installs/modifies Browser Helper Object 2 TTPs 3 IoCs

BHOs are DLL modules which act as plugins for Internet Explorer.

stealer adware

Modify Registry

T1112

Browser Extensions

T1176

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\NoExplorer = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\ = "URLRedirectionBHO"	msiexec.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00f.inf_amd64_neutral_777b6911d18869b7\Amd64\CNBJOP84.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\NlsData0009.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\msvcp120_clr0400.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\MUI\0411\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_PSSnapins.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitsTransfer\en-US\about_BITS_Cmdlets.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\ieetwproxystub.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\migwiz\migcore.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_functions_advanced_parameters.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnhp002.inf_amd64_neutral_04d05d1f6a90ea24\Amd64\HPZIDR12.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_Continue.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\migwiz\dlmanifests\Networking-MPSSVC-Svc\icfupgd.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\mpr.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\ProfessionalN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00e.inf_amd64_neutral_651eeed98428be5e\Amd64\CNBP_295.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\NlsData0c1a.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\odtext32.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpsion.inf_amd64_neutral_6e65ea91a16f922a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\OEM\StarterE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpc4600t.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx00z.inf_amd64_neutral_aea50acf04a2db1d\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wer.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_objects.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\HomeBasicN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnca00h.inf_amd64_neutral_96a8e38189e54d71\Amd64\CNBP_287.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00l.inf_amd64_neutral_f1fa021d2221e2c7\Amd64\EP0LVR1X.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\gptext.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sqlwid.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\adprovider.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00l.inf_amd64_neutral_f1fa021d2221e2c7\Amd64\EP0LVPZ0.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\eval\HomeBasic\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\eval\HomePremium\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Magnify.exe	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\mfc140cht.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00l.inf_amd64_neutral_f1fa021d2221e2c7\Amd64\EP0LVR16.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky005.inf_amd64_neutral_8836be987024e6a9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00b.inf_amd64_neutral_2e6b718b2b177506\Amd64\EP0NMF6C.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnhp002.inf_amd64_neutral_04d05d1f6a90ea24\Amd64\HPZSSWN7.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\ProfessionalE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_types.ps1xml.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\appidapi.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\dot4prt.inf_amd64_neutral_e7d3f62d0d4411db\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\dsauth.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\InstallShield\setupdir\001e\_setup.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\KBDROPR.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_do.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnep00a.inf_amd64_neutral_92a4c727cdf4c2f7\Amd64\EP0NAR00.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpz3rw72.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\InstallShield\setupdir\001a\_setup.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_Language_Keywords.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnms002.inf_amd64_neutral_d834e48846616289\Amd64\FXSWZRD.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\HomePremium\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\dskquoui.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\KBDAZE.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\ehstorpwddrv.inf_amd64_neutral_ecd233d7cabbdebf\EhStorPwdDrv.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sbp2.inf_amd64_neutral_332943647e950ada\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpzlaw71.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_aliases.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\about_data_sections.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WMSPDMOE.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\acppage.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmeric.inf_amd64_neutral_27c5b45728cc9ed0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-International-Core-DL\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe

UPX packed file 9 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2360-0-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral1/memory/2360-6765-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral1/memory/2360-6766-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral1/memory/2360-11151-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral1/memory/2360-15050-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral1/memory/2360-15699-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral1/memory/2360-15746-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral1/memory/2360-15747-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral1/memory/2360-15748-0x0000000000400000-0x000000000040C000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImages.bmp	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\fr-FR\js\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_hov.png	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\PREVIEW.GIF	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_ja.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\PREVIEW.GIF	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDownArrow.jpg	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_rest.png	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0289430.JPG	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\lua\extensions\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\OUTLPH.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0315447.JPG	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02749G.GIF	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\MAPISHELL.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_bottom.png	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\ado\msadrh15.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115842.GIF	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0321179.JPG	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\PREVIEW.GIF	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\SEQCHK10.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll	msiexec.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Web.Entity.Resources.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner.png	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\de-DE\css\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACER3X.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02736U.BMP	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files\Windows Media Player\Network Sharing\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\VSTAClientPkgUI.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\eclipse_update_120.jpg	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Games\Purble Place\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\month.png	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178932.JPG	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\fr\System.IO.Log.Resources.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\System\ado\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01332U.BMP	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR48F.GIF	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre7\lib\images\cursors\win32_LinkNoDrop32x32.gif	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_left.png	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\settings.html	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Garden.jpg	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\THMBNAIL.PNG	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImages.jpg	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Visualizer.zip	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Media Player\wmpnssci.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\PortalConnect.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\OFFOWC.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-ddoiproxy_31bf3856ad364e35_6.1.7600.16385_none_3f3f4dd85f6845b7\DDOIProxy.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.Interop.InfoPath.SemiTrust\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.SemiTrust.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.FileSystem.Watcher\v4.0_4.0.0.0__b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v3.5\1033\cscompui.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..icsclient-scheduled_31bf3856ad364e35_6.1.7600.16385_none_60a8c45de10f8eda\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-w..iamanager.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_5323018bc77ad3d1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_ba2335c8bba30fbf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-grpconv.resources_31bf3856ad364e35_6.1.7600.16385_de-de_44419527bfe271a0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-n..orkcenter.resources_31bf3856ad364e35_6.1.7600.16385_de-de_0a0ec7f77e61710c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Calligraphy\Windows User Account Control.wav	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-pnpsysprep.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2d12ac454fb6f8f6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-t..writerqfe.resources_31bf3856ad364e35_6.1.7600.16385_de-de_f3f57f2df0af1c43\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft.backgroun..nt.module.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e0e7b1171f7308f0\about_BITS_Cmdlets.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_wialx004.inf_31bf3856ad364e35_6.1.7600.16385_none_05b60a5c9a9fe11b\lxa3iobj.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\System.Management.Automation.Resources\1.0.0.0_en_31bf3856ad364e35\System.Management.Automation.Resources.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-i..l-keyboard-00000452_31bf3856ad364e35_6.1.7600.16385_none_43a82b387da044dd\KBDUKX.DLL	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_ql40xx2.inf.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0c3b4751804fd072\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\msil_system.data.datasetextensions.resources_b77a5c561934e089_6.1.7601.17514_ja-jp_13b8401e5e1d25a1\System.Data.DataSetExtensions.Resources.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-k..-plug-ins.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bde893cd2bcc71aa\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-s..ndthemes-characters_31bf3856ad364e35_6.1.7600.16385_none_08da32b0fdad9220\Windows Balloon.wav	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\wow64_microsoft-windows-i..uestmonitorbinaries_31bf3856ad364e35_6.1.7600.16385_none_9eb4d5fbb391b282\iisreqs.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_it-it_4a940280a6fac951\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-s..ssmanager.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8346f1c49f501c6f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-sisbkup_31bf3856ad364e35_6.1.7601.17514_none_5eeeae90bbde71fa\sisbkup.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Quirky\Windows Logon Sound.wav	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-e..ebargadgetresources_31bf3856ad364e35_6.1.7600.16385_none_88767a95b8bbf001\button_MCELogo_mousedown.png	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-main.resources_31bf3856ad364e35_6.1.7600.16385_de-de_60a84de90c942afc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-ipconfig_31bf3856ad364e35_6.1.7600.16385_none_4c104723794237c2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_th-th_103f1cd3ad950892\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ComponentModel.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\fr\System.Runtime.Serialization.Formatters.Soap.Resources.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_mdmgen.inf.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_05a824ea7447f385\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-p..l-message.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9c61248adcc9a315\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_nvraid.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_880d3ce75d345caa\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-i..tional-codepage-861_31bf3856ad364e35_6.1.7600.16385_none_cebf7c64fc8468dc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-e..rting-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_d4bae483184c817b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-grouppolicy-script_31bf3856ad364e35_6.1.7600.16385_none_c10c2a29895d4994\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..cy-engine.resources_31bf3856ad364e35_6.1.7600.16385_en-us_21bf86a74f104022\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_prnrc007.inf_31bf3856ad364e35_6.1.7600.16385_none_2382b73cd9ebc32a\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-d..vdsupport.resources_31bf3856ad364e35_6.1.7600.16385_de-de_9d99bada699baa8f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-f..k-service.resources_31bf3856ad364e35_6.1.7600.16385_en-us_deecfefe800d0d7b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-p..ll-preloc.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_c02a16e1ae17ab94\about_WS-Management_Cmdlets.help.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_2dc0ab930d5ebf5a\System.IdentityModel.Resources.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_prnep00d.inf_31bf3856ad364e35_6.1.7600.16385_none_ae3f8d47fad9c2a7\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-g..ets-clock.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7fddcd6a1ab604da\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-v..cprovider.resources_31bf3856ad364e35_6.1.7600.16385_it-it_b0d9ff43083875e3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-mobsync_31bf3856ad364e35_6.1.7601.17514_none_f77710eca7a33df6\SyncCenter.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-n..-security.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4e0c2004a5e71cbd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\DE\aspnet_rc.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Workflow.Compiler.exe	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-help-fax.resources_31bf3856ad364e35_6.1.7600.16385_de-de_771af0c9e6a91df8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_6.1.7601.17514_none_5726e0135925cd59\iasrad.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-d2d.resources_31bf3856ad364e35_7.1.7601.16492_zh-hk_e8c8d75b1c4335e9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-io-l1-1-0.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\system.workflow.activities.resources\3.0.0.0_it_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17514_none_75d78dc0bb37c026\Pine_Lumber.jpg	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\amd64_microsoft-windows-winocr-ocrengines_31bf3856ad364e35_6.1.7600.16385_none_ff3a08834cc21b39\ximage3b.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\winsxs\x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.17514_none_5d772bc73c15dfe5\crypt32.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-i..converter.resources_31bf3856ad364e35_8.0.7600.16385_en-us_659f28693168f6d9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-sysdm.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_d893323239cfae53\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-icm-ui.resources_31bf3856ad364e35_6.1.7600.16385_de-de_9377df51142611e3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-o..tend-apis.resources_31bf3856ad364e35_6.1.7601.17514_de-de_f8fabe8ccc93bd3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
File opened for modification	C:\Windows\AppPatch\AcGenral.dll	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe

Modifies Internet Explorer settings 1 TTPs 26 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\AppName = "onenote.exe"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\AppPath = "C:\\Program Files (x86)\\Microsoft Office\\Office14\\"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FBAF6E6-C64B-49DB-AB1B-F93C607EBC71}\Policy = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\CLSID = "{1FBA04EE-3024-11d2-8F1F-0000F87ABD16}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ButtonText = "Send to OneNote"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ClsidExtension = "{48E73304-E1D6-4330-914C-F5F514E3486C}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\HotIcon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBTTN~1.DLL,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\Icon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBTTN~1.DLL,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\AppName = "IEContentService.exe"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\Default Visible = "Yes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\MenuText = "Se&nd to OneNote"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ToolTip = "Send to OneNote"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\Icon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBttnIE.dll,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ClsidExtension = "{FFFDC614-B694-4AE6-AB38-5D6374584B52}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\HotIcon = "C:\\PROGRA~1\\MICROS~2\\Office14\\ONBttnIE.dll,103"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\CLSID = "{1FBA04EE-3024-11d2-8F1F-0000F87ABD16}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\Default Visible = "Yes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ButtonText = "OneNote Lin&ked Notes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\MenuText = "OneNote Lin&ked Notes"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ToolTip = "OneNote Linked Notes"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\AppPath = "C:\\Program Files (x86)\\Microsoft Office\\Office14\\"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD993BDC-06E0-4131-B889-DD3B9AEBE253}\Policy = "3"	msiexec.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2F	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{506F4668-F13E-4AA1-BB04-B43203AB3CC0}\ProgID	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A394DCA9-3727-11D4-BD85-00C04F6B93A4}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{F09D237B-3FD1-4900-BEF2-3471CA68142D}\InprocServer32\ = "C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.ppsx\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}\ = "{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{AB968F1E-E20B-403A-9EB8-72EB0EB6797E}\Version = "11"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CB3F7806-3CB4-409C-BA3B-12D642BE371A}\Programmable\	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F09D237B-3FD1-4900-BEF2-3471CA68142D}\ = "VSTO CTPHostX"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{F90DFE0C-CBDF-41FF-8598-EDD8F222A2C8}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\ProgID	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{096CD76A-0786-11D1-95FA-0080C78EE3BB}\ProxyStubClsid32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneNote.NoteAnchorCollection\CurVer\ = "OneNote.NoteAnchorCollection.14"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{803EDC90-F4C6-4B8D-BB5F-869EA2AF2B03}\ProxyStubClsid	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\xmlfile	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.vzlom	dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D9230E09-3737-43F5-8C78-BC4C83DC296C}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FFFDC614-B694-4AE6-AB38-5D6374584B52}\ProgID\ = "OneNote.IEAddin.LinkedNotes.14"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{FFFDC614-B694-4AE6-AB38-5D6374584B52}\TypeLib	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{3CA78EDC-E48A-4A21-9562-9245BF90CE3F}\DefaultIcon	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-word.document.12\Extension = ".docx"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{9FBC2D8F-6F52-4CFA-A86F-096F3E9EB4B2}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\xmlfile\shell\edit\command\ = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE\" /verb edit \"%1\""	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-compressed	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.vst\PersistentHandler	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.xlsb\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}\ = "{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BCSLaunch.Launcher\ = "Launcher"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TaskLaunch.TaskLauncher\CLSID	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.ppsm\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.accdt\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{096CD5DE-0786-11D1-95FA-0080C78EE3BB}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OSPPWMI.OSppWmiTokenActivationSigner\CurVer\ = "OSPPWMI.OSppWmiTokenActivationSigner.1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\URLRedirection.URLRedirectionBHO\ = "Office Document Cache Handler"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{FD34A377-115F-43CA-8D6F-BBD45FD6F828}\3.0\HELPDIR	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OneNote.NoteLinkStoreService.14\ = "OneNote NoteLinkStoreService Class"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5554F805-47C0-489D-AAE6-2D11C6E4A3ED}\ = "OneNote NoteLinkStoreService Class"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F5BF6FE9-913F-4117-94C7-5040C7E3A6C1}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{803EDC90-F4C6-4B8D-BB5F-869EA2AF2B03}	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{506F4668-F13E-4AA1-BB04-B43203AB3CC0}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface\{FC8E6CD1-E6F2-4A8F-A99B-2F3BA2B3DE6B}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{096CD6FD-0786-11D1-95FA-0080C78EE3BB}\ = "IOpenXMLDocuments2"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E87ECCF7-3CBA-45CF-B58E-1A6630D39199}\ = "OneNote NoteAnchorCollection Class"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\xmlfile\shell\edit\command	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\URLRedirection.URLRedirectionBHO\CurVer	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C7DFFDF1-BD1F-450A-B98D-96B6D30BA4C1}\ = "Microsoft OneNote Windows Desktop Search Protocol Handler"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{CBBC4772-C9A4-4FE8-B34B-5EFBD68F8E27}\1.0\HELPDIR	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{760681E7-B985-41CE-BCBE-2985A1DFC61C}\InprocServer32\ = "C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-powerpoint.12	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\XEV.GenericApp\EditFlags = 01000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BCSLaunch.Launcher\CLSID\ = "{CB3F7806-3CB4-409C-BA3B-12D642BE371A}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{312AB530-ECC9-496E-AE0E-C9E6C5392499}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9FBC2D8F-6F52-4CFA-A86F-096F3E9EB4B2}\InprocServer32\ = "C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A394DCA9-3727-11D4-BD85-00C04F6B93A4}\VersionIndependentProgID\ = "VisShe.CVisioFileFilter"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\odcdatabase.1\HTML Handler	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{807573E6-5146-11D5-A672-00B0D022E945}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VisShe.IconHandlerShellExt.1\ = "IconHandlerShellExt Class"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}\ShellFolder\Attributes = "538443776"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{E87ECCF7-3CBA-45CF-B58E-1A6630D39199}\TypeLib	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{20E823C2-62F3-4638-96BD-90F4F6784EBC}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A394DCA9-3727-11D4-BD85-00C04F6B93A4}\InprocServer32\ = "C:\\Program Files\\Microsoft Office\\Office14\\VISSHE.DLL"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D66DC78C-4F61-447F-942B-3FB6980118CF}\ProgID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64654B35-A024-4807-89D3-C6FDB5A260C7}\ = "VSTO FormRegionsHostX"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{807573E5-5146-11D5-A672-00B0D022E945}\InprocServer32\ = "C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{48E73304-E1D6-4330-914C-F5F514E3486C}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{3CA78EDC-E48A-4A21-9562-9245BF90CE3F}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{95F35795-64B1-495D-9DE7-390EECC31EC0}\ProgID\ = "TaskLaunch.TaskLauncher.1"	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2148	msiexec.exe
2148	msiexec.exe

Suspicious use of AdjustPrivilegeToken 61 IoCs

description	pid	Process
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeSecurityPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe
Token: SeRestorePrivilege	2148	msiexec.exe
Token: SeTakeOwnershipPrivilege	2148	msiexec.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 2148 wrote to memory of 1148	2148	msiexec.exe	33
PID 2148 wrote to memory of 1148	2148	msiexec.exe	33
PID 2148 wrote to memory of 1148	2148	msiexec.exe	33
PID 2148 wrote to memory of 1148	2148	msiexec.exe	33
PID 2148 wrote to memory of 1148	2148	msiexec.exe	33
PID 2148 wrote to memory of 1148	2148	msiexec.exe	33
PID 2148 wrote to memory of 1148	2148	msiexec.exe	33
PID 2148 wrote to memory of 1300	2148	msiexec.exe	34
PID 2148 wrote to memory of 1300	2148	msiexec.exe	34
PID 2148 wrote to memory of 1300	2148	msiexec.exe	34
PID 2148 wrote to memory of 1300	2148	msiexec.exe	34
PID 2148 wrote to memory of 1300	2148	msiexec.exe	34
PID 2148 wrote to memory of 2336	2148	msiexec.exe	35
PID 2148 wrote to memory of 2336	2148	msiexec.exe	35
PID 2148 wrote to memory of 2336	2148	msiexec.exe	35
PID 2148 wrote to memory of 2336	2148	msiexec.exe	35
PID 2148 wrote to memory of 2336	2148	msiexec.exe	35
PID 2148 wrote to memory of 2336	2148	msiexec.exe	35
PID 2148 wrote to memory of 2336	2148	msiexec.exe	35
PID 2148 wrote to memory of 1344	2148	msiexec.exe	36
PID 2148 wrote to memory of 1344	2148	msiexec.exe	36
PID 2148 wrote to memory of 1344	2148	msiexec.exe	36
PID 2148 wrote to memory of 1344	2148	msiexec.exe	36
PID 2148 wrote to memory of 1344	2148	msiexec.exe	36

C:\Users\Admin\AppData\Local\Temp\dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\dffc0f2532e126df17e0c34e17a7b35a_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2360

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Event Triggered Execution: Image File Execution Options Injection
- Enumerates connected drives
- Installs/modifies Browser Helper Object
- Drops file in Program Files directory
- Modifies Internet Explorer settings
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2148
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 96A7ADBBB1D05FF58C9942DC99891B17
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:1148
- C:\Windows\system32\MsiExec.exe
  C:\Windows\system32\MsiExec.exe -Embedding 788500D05C56CF34DF4EE527C129D5E9
  2⤵
  - Loads dropped DLL
  PID:1300
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 5B990E5403E122D99CAD2927A6D42F0D M Global\MSI0000
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:2336
- C:\Windows\system32\MsiExec.exe
  C:\Windows\system32\MsiExec.exe -Embedding C76C575E1218C4BE3D6D32A603B759F8 M Global\MSI0000
  2⤵
  - Loads dropped DLL
  PID:1344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Browser Extensions

T1176

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\f770320.rbs

Filesize
216KB

MD5
8e26b21f36fa0ce2bb2762d5806abc85

SHA1
ec1c710122fdd0673b0b5fcd05c3ddcea2c9f3a0

SHA256
316fb8cd44ca4d9b7275cdc6e042794fdd588b4c9b5a7733ddd0c24b058842db

SHA512
c74eae453495546ac7b50a50aa5d822d3d38553b49fc7f2ad85d65ac143d5b1ead56807cd7928d2a3b4028b44fc7243b374f86ca3e55fe191079970e13730835

Download Submit
C:\Config.Msi\f770321.rbs

Filesize
198KB

MD5
ce662f116dec454cdac8587c731d6589

SHA1
8eddb89ec1037abc45e5fed2455ee841d022fc4b

SHA256
df399450813076b175cee3d6c6e73f4d8fe15cc451584b2ac1e64226b364d8c4

SHA512
61128f9f14e6e22ea6ba12d0d4146e783541a03081af6ea4374571bc0309d7868acdd580856cc0ffa7779b946d3ab2fe755139e763f346d6bb76f48b6e0c2614

Download Submit
C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
270B

MD5
0cd041f14b14f9e61c211e3cd124cf58

SHA1
dd30ac530b7e998a562acf27b8278822ea6579ef

SHA256
69c9ab35204defd8ecb90bb9280d3ae4df7565e89539e5c7bd2364cbf8880f11

SHA512
687aa7f3e6036fc5bc2973698eb7a840fc6d58e6c5b87a733b9c26bb78061344ae74a89832bd39d58dca7f8eb1892c7bc7fe94320a70cb723fba52b273dbe8cf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF

Filesize
341B

MD5
ebf0c82b59faf0451a3a2a6c6dbf3f9f

SHA1
84201e393016e28d8bd671af3d1660564f9837c0

SHA256
11d8206d3bbfe787b8812a5ea8ec3873bfd37f9cc3a0ec90ba16f8221856d0e8

SHA512
bd83ef30638ed4bfbe3f99e202b4b1dce25089bbbd260e6456598d99a80cd72a4763d6ebde1167334fc9eec1c65a0bedf368b8f052b7d46cee72693590935ada

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF

Filesize
222B

MD5
f2a38f6c0796c8df5e97be70976eb51d

SHA1
1b68d65e33db5661748c89f1ca025b8d02aa9905

SHA256
52cdf7a3b7961eefa7bfd794128b5dc8b7c43928d8c6f28c5b651678c8e56328

SHA512
4558bd3bdae516cbb6968ccdaec3e4f11b9781cb5eb549f3de88d5ef3b8387d114a5d6c8b46e09657d2b67b7ee8aeb375b6d90bdc70d59e57eb9324aed69c71f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF

Filesize
24KB

MD5
808c477adb0ccbbbab62ef1ad6584579

SHA1
8b31055841dd1e0bb8c0833b3464dedc7fccdb27

SHA256
221248574cefef0b787e422517962df5b65fe674cf9203209eacc2f55feb0943

SHA512
4ad25a575a268869c46a7b602d71a130da83146b03aec2219e68f32f28b849e77a91ada4c82cc4c9b2ac0cd2efd985f2fa6f473179f89f462fc6cc36103c33fb

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF

Filesize
185B

MD5
c41edd0968068b89540b7e561c0336ab

SHA1
0afaa0e7fbc940d4460e6453d1eecbce6b0f5055

SHA256
e0725cb3cf72d4c9349b674dc28b43f2232ce2b989c82c323af144752942f842

SHA512
daeb894fac439ae06db6066d5efed11684710547138b999fc54291747f8d1003a3fa43f9586936fb3eec1e9756723b17126d235cefe372dfa86e4ba2ba3b5d7f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF

Filesize
496B

MD5
74d12cfcbc67119c59edf8b23885bb89

SHA1
972603605d5c864062723d9a3566c78c5268465c

SHA256
5bad15c4a80a5f01eb44f9c3fbeab734c715ac6764d3f0921b9fadd059633705

SHA512
57c53c7cb51eee133fd7a8b6ccb95dbb9378c072ca3ab86bd1b0aa1bed28f9ee037b1a58b6b0e8b8cc99df5fe78d9688f3153c331bf22105be8969959797b7c5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF

Filesize
1KB

MD5
a1f16cc274bec02b024cf2cfffa4e227

SHA1
5c57f102961c96105baae657af88cb3091777d59

SHA256
9c900e6cbed89a3222af1e19656df8cff301e1b17a36672ef066a31fc8e823e7

SHA512
28e128028774d65f44e8d3ab8e56dfbbb0ead48ee6ffae5d658b585fa3762d5b9df11df7cd2022e463ccd97e6e75c327f0763e929b81602c45f731106b00b2ab

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
341B

MD5
27f9ba74b786e7037d12538a94b07cfe

SHA1
78e73c471bba968d5dc3f4b23397fcffa56b994b

SHA256
cafd678070b0549f77c0b7803780d63215975ea01f15578c93ba419bcb983203

SHA512
ed3cf1e27c152217a8e47fb93d46cd13e42b904edb054ea9d7ed50dd285f923de54c11b178b703450c41648b2ba8bc993db24a5616ea6d39387a64824d85c5f8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
222B

MD5
c21c34b479f9765e6078ea3d91bfc2d3

SHA1
60d46744b55ccb1c8cb317209cfb51e0dd2eb8e3

SHA256
f4b407b9ebc4e716713731af2b87c73505a19e2e095870cfd21da26f79bedf99

SHA512
819c2140fe629c7da12c72a2583cb559e13b5a0f34df612c60e7cc7ce4298fd20f1c0ef69d91f6f59cbaed6e93a7dddc51e4e44c7786b18ce450e11ff7d9f1ac

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
840849f25bd62acbcf0bf675a5d1ba40

SHA1
34ed53e43667be8970dc81f1ddc3d6e7627b9614

SHA256
28d6d2113dbe941cdb30b6c120bf10e0748e73e82d3ce726a85f4f438c625253

SHA512
ab33ead5fd49e5a31e8515ee2b368464856a38db9d5be869fa840238bd50f7c6d4bc04791ce32939d9b8332b838c5a05bf8ef6398a2f0e504d128ff5edbabf5f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
67183c7a7ac9e4ccb1e551d9cf4b5c87

SHA1
1299870b2739c19a2a7662099ee5661b39d7701c

SHA256
83b4d8a8d8c38d9eb63cff87a1977788e5072f20a36c7e7d9bedd27f3ab5ba2d

SHA512
44d5bfb3d3146de25df447ee48bcb0af560024e3f7bd688a571f1363be162b94a8303acba40668224fb9005f4318a772f4a8a7e57f99c84031f01ab243aeecbc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
f0b53f12f6484f376edeaf85a997da45

SHA1
0ff75a13ce86293aa33e4dabc3b159d0981f6290

SHA256
68485f9ec623e8d462eb14859ed9302874cce43a660689ec93a48250aef36c43

SHA512
d6f8b1a2a8f83f72313de18e3a50967ea61ee9cf6666694548c36eee4031ded75a7ca4f6c54b397befa426573ce3f27782fa871ff95b7d785fb4b4e37fd57ded

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
8c95eeaf1d03baab171ae5ff84c3faf3

SHA1
8358bf08bdc8373ec52668f654428132fc845a12

SHA256
610006f677a538604ed003c3a6b144217e6d1d6690198df8dc4a89ee473486f9

SHA512
3ab37280fee5063bd1ec79f878ccfcc3190d38b0d98d278237ae281b6a71ba55765b50b8fc9d4e3abf95917964bb01f744af1c1ff8c20fe4fdf4858a5d7fdeba

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
106B

MD5
31bd444e3d4d171f17dd004bbab6b79b

SHA1
ed2b57ff36c359a65dbbd63a9b3640ee24e5fabb

SHA256
f8a0d2b50c614ba27340ad5e50886ae0352e3bf5df8c7b33789b2c057649f772

SHA512
3b75af5f45aa0511921c5b369e0078bcf4f857f794e98bbe2cf2cbde5f765ead111279e4544e0bd3d104a952246c3c68ec518b57bf2a8cd8f40d9591c9d3158e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
7eee91dbc05acde9f9ab25d718c6014d

SHA1
46ce1eaa526ef5ea98653e0bb449102c67441b7d

SHA256
4c7c3c5f883b875ea7137a0ad6970fe784b6caf6a94195ee5bff4a161f2bae32

SHA512
a401c4268ebba9280dd7a3364680a11a8eade170d2c4374371d09626738757bbebd816c347ac7ea9ed9b56705e9cbd96af42d8303643bf66c8f8759af0c35bdf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
3348ad410b2742a9a0ca9321834f63fc

SHA1
682959f05d01a1a9aeddeb747eded7dbd116a4d7

SHA256
255faef7ff66a812e290871acfd6e28ad104567aaca8c4b64899e944101f51e4

SHA512
c6704869307fc051129dd3662a14e22e2f7b89cd314deef7e469dd5bff289d2f70f04d87415bcd7c73df0428c40be7d0d09f0a7bbefeefd3eecb06d56adaba98

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
d7bb26173885af7f9cee2bd25ae8ab8a

SHA1
755f6e11197f5cfc7e8e8b0000ff3a9c14a6d9ca

SHA256
d7f45fc8f50709c92ed2fee1f374e72e66068c24a8b3b8872ce2344efbf02bba

SHA512
697fc72e9733e7c186dce2eff029e27e059c92f1ab29969e7934f16744ef855ee3488fb03b57eaebabf426524b53c0f08c13fe822b27572b7e6b7ee69f2f9503

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
bccd10f5532b531ce9b34b91ecb4698a

SHA1
a875441a004d0ca98c0adb9ea09064c4eb7508be

SHA256
8f651d05829875c75290a4e88d6c77a42082e08c0e3be403cd4b6066db411829

SHA512
3bf7dc3f08949d856df70847bf2598f13b35438376ef79254d247aaa0220bdab28222c615e29af36c2acd17e0eb7547d0e086ff7dc0b62f4c907b07471555629

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
f5e7bed327eeddf62c7963861cdd79be

SHA1
843d20b3e6fbfaa8e19f5286a2201008e11820fa

SHA256
06f8fdf1ac1b11475a9873562fc942370513f124260b3b260a3d1558c2e29eaf

SHA512
3f865947b423907c472e1cc44a9f39bb53e6b4288c1fc6f08bea979e264383f03662fae8cc34ca217401978b9cd2568a8b0fdca2acf75f38a7c09362c1b81555

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
eaa2199a86dde15be5a0b29cb3122afa

SHA1
78f0da6432b1939a80d5e935f99209ab812e3b88

SHA256
81790040e783bbedbeba89e105bb2c7c9ec01bee41c1fca28a57372466c4d0c2

SHA512
88ef176c2efa1bce822cfe05b6f3cbacabfaff4320fe5d757a3bd5bd3c06cf7c8cbfaf8a3bac2e4034f8f9c4c1b3ebb048b3d8ad67b10ff0968efb8e6d2553ef

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
f2d0f28f95a991ef8a902443593b0881

SHA1
3425108e34ddc7419e79b9d5d588aeda2ccb714b

SHA256
da6a18564120d60480ba35f0fd1b4d0cb6b352895f9faf9393ba101f478e90fa

SHA512
fe8b8ec61c94917b313200d1bb6aa33bc3ea3b34efb7052438b380d97b3fb3890db7aa54198db37bb19c6ccf3041f6bb0dfd16a4cec6e195363c890683207299

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
230aec35e06252dfb90254fd5d51bfe7

SHA1
b37d010df5d8c45bc1d21225aec8ac22cf18e0b8

SHA256
14becff1023086c06d6dececcc8421a6ba8085fb16b23474d1f5efb3739dacc5

SHA512
b35cc9117931efb6b8ab03133b53a34b15304b84e5d61b7346d4869a34c604d0d434da0801f17ca32d9fd3f3ff2315ce9947f8bd70690b371fe48f9377badbd4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
6KB

MD5
a34b0476549a32f1f3278875380dd203

SHA1
b01033b7cf561fab385a969c09f6e61e34d13230

SHA256
574e4a69e3029d429919039329d1a2e3d42eb48769cb40ce6d7f54bdb5121789

SHA512
0d2631d795536c731da57103a84b7dfcb634d1a7e4797085013e7d7198de3abab707178d452e8bcd525cb1df432aa1375248837fd4a9ca4c2560ce92af6b0159

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF

Filesize
255B

MD5
cd5f7f0469c52e6cfa8752d27aaf8f1d

SHA1
7f1e67741a8c8c54153200c635d7bc3c73245c57

SHA256
beef235afca4a3b47b3c26bea3152403e8b86e6fb4e087c2637f606c7003c1b9

SHA512
509784c1ab9495ea77106f39f8bca02bea1b18771a14868ac0eec034736f744d9b014c57e16f8b05c69e4f0e95359b742d3d29db453f85c5fa131b96dd36bd82

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
323B

MD5
776edce054ab9d8e52c9fd4048b6ef17

SHA1
2d39dccffe6a116275f71b199cfb55cd65f67e99

SHA256
8da9447d8b73330b78b8acf0bf05f192b6f8d2edc94af395e29a02821eafd8f8

SHA512
edcf00d094662576dfe40e3c4ce585fd46b46238222b0d4523d411ce500e5fa5fbade86255021e61f83b74b73e3bbcfbaa370eaabb0124af58819cd3dc96e06c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF

Filesize
367B

MD5
1d6561a6aa676acc3e67c3ec5cedeb5d

SHA1
9289c9630ff54b97eedafe56900efd02569fb491

SHA256
d0d8182361653bceea0f00341aa792964964509a91e34ad9a7abe598981689c4

SHA512
8821d2372a86cc5952e9191d28b33e9703ce9b87d93d408dcba4e67804d3faac7c3882b3a9af80545bf6acbe665ebd1e2e1d00d0c8767b47d01f05f7829db17d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF

Filesize
148B

MD5
c302ff0b702f2642736f957b2124f9f1

SHA1
4a2ea7f41ec0bffa18a852d7ac347e0e0306917e

SHA256
a39992a90304810d99a260310a3324be08f4f50eccd043620742e0ff7cb5012e

SHA512
efe1af417b73bb68efdb3b75eaac6d8a5136371f4212da7c984d4741e05fb1035bdf36af578bd5486b994b6f796ded87fcec7c8447d717f66c119b6aab8a2d48

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF

Filesize
440B

MD5
bc29c10af042fd9ebb309503316a93c2

SHA1
843868c935aa8e22881e731757a2a5c347a7b571

SHA256
b723abeec08837ea0fabcccc38a47fedbfd5f085b30fe2091f9911682577bbbe

SHA512
5d61ac7cd9d9ffa21879a0d5c8ff08243b4ec872a4e95264f3f7fb7ac2eadbf641cf0cbb78194d204a9d0065b713232bd1a1d12ee7cbf1a1099bb922e80e17a9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF

Filesize
462B

MD5
89ca0a6c88483604d2dce9965881e87a

SHA1
a3b6b6183e6f20df7801e9773e4e67321ace01e5

SHA256
6efd465f73661aed802ad82a9ee7053bea89d82bf56de7a534a06590d0531861

SHA512
7dbc6b737eb26e60e0e5333d4a9103a225b9db413dafe63f65c637ea60588ee6c25a459c30078bc185fa9f97d77580ef9daa78e212aece7f167465cdd0ed1a1a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF

Filesize
267B

MD5
cf2a619f141a7656a1e4b04985cb20a4

SHA1
acd8a8b61295e21fbac28256e7917258548fa05a

SHA256
2a3f66c1e8f12a52ac4d3e12a2da9c3b57c6fb491b70ccfb4a2957e22c79cf91

SHA512
0a2fe6b5827edff7e582a71dd2e962b9ad1507fe848815ed76f30e1c12dbd37f7694b1be8fb98786086be09be3db392b934bae389eecfa33dad2299742dc4135

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF

Filesize
2KB

MD5
d3113d974a80622055c3ea45457f4a9d

SHA1
bedac1e3a625653b4cb28742f8c1d535ccc13bcd

SHA256
0c64537ef73dc581827f10bb9bbfb146c78269d0340337e4b03ae9a8273765ef

SHA512
35fd1850383a1f9c12aaba0309a6ee25794e264aa5a17e928d84c0e6459f1d20f1cdc7aa91a49c14c2c2067648dac4f24584411e7dd5c94eaf983bb5a3ca050d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
233B

MD5
0786400d096700fff231739477201820

SHA1
45bcad852f25ce709e229d32e2b81f1287267be1

SHA256
735ed4f97a7227373ae5669b54777ee41bf43b546216d7ff9104030279aa1d5c

SHA512
b649fb5242cf0fb493bc7ba95d94cf66d9169d0bc36a659598eb5128505e521291c4219acf01f7c53e64645b6c95c4eb58d739645191a953cf0d49afedde8ab8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF

Filesize
364B

MD5
5113040f4eb7725cf6ede2c56b5c48dd

SHA1
947aa81e9641f53575495da40daa9117ae9d12a5

SHA256
e41dd656601723c4fbe46207b52ef9ee56c10d2a67201855551c6ee51f5f92ce

SHA512
2a0991a7ae6e86279ba26006f0cf663128356b1aafac9567e4b87692113b2aed4fc4bb47070557d58b6afc93ef04cb1db12e87b3b2a78b939ec4c6605c8fee36

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF

Filesize
364B

MD5
58ef5f5ac34d7e7698e03f49a0d5136e

SHA1
f8539832bd2322f2998e2f2a8a0c75674bbb58cf

SHA256
d9feb734cc8da4074234335505568682364b5030566d3594535a3ac8f1759b20

SHA512
d37f61a1313b2a6cb9226e94e92ebc5d52b958e4a6560ad116ebde7f2c21aa4f0d85e22f0514680cc96a9555f99c2e2067bc285eb590de563be0f559fd4b50d8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
8e9780e5504c5d79a9d7a1b5b87d5b49

SHA1
b2dd0d64abae1eb78eee9899db8253c73a7bf04a

SHA256
c7d6556e0048bd47b233884f8a48492ca9b76d84df04a10c9687a6d3e5f39b26

SHA512
ca69e1b98015d86be0f2748a78fb5afe351259c3519ed59de10949bfddb687257289580a25724421bf538eb14f58c02c56da2932f0ff157f7c6b3daaf3048467

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF

Filesize
428B

MD5
0590934189469c4680cfa855fe3c6fb9

SHA1
606c39c9f8105235b667d13c569594a1d847d8cf

SHA256
71db1c6a88145d2b691dd9d4511338ff1b0beb399689f6c438251a90bf4688c7

SHA512
45676c774568b58ccdf3aa3a9ab82d757c8acbfa28c25adac1425b2080187101ef309f6c4601cbd026e315b0c45fca0f16d5fa34948efcb91d84b3b0d375cb2c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
815B

MD5
e10dd03d0a5d1ee6f74c91b4c144fbd0

SHA1
521b82e21908a7d5520a99510c2138facd39a886

SHA256
533f343b21d2e242eb6b99533feb42ec2945728f488afb856cfae89aeb8aa6d6

SHA512
94645991b514f6a0202342a4b6869cc97b7f6ceb22527fb4a5a6c6ea4c366c3a26ee1742980cb42076dc3c8855d3b4faa46e40a950eaff983824582cfd9547d2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF

Filesize
870B

MD5
1d2dbfe75dd043b05fe71e9907321736

SHA1
7efe00c0513c17572b17437feaf27b79483f56aa

SHA256
184f74fdcbcbc05b0f5cb9f31cad03015520b1e916c85007a6b768a4f95698a3

SHA512
70f996622fcff031de03e299fb865fd1ed3fdd347ac007a2cce0e187f0ece6677aeb1c49b6f87e330f7343acfd7a8d643e153d198bd52fedd6f460df5f198533

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
353d2a6a2d6ba9f149e6fd6e58623a62

SHA1
d0f2b4454ea47bb2e8ce5169863c2d3634b3a5b6

SHA256
c72bec33151b2340b9de926ffeb7bc2ce4f448c5fe36c41cc690e34bfd05f8a3

SHA512
af8b4ea13053b4463396aceb8887ec8d699870a83227b4f2af1098d6294b586a3d1ef0eefc605087a652c1743931479331b2ad261cdaf73e8379ccd7ccd4ed39

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
32548aef1be4c1f87ccfd2baf174d5c5

SHA1
360f838fd15e5d93d1183e3d3b639976dd35f165

SHA256
25085e945c7815b6b68206189509b25e32ee1dc9ce6ee57bdb4c4836ec8e9ee1

SHA512
d36345305d64eebffee2675703d03eef040ce6d75f950f208fd45bcfdb7cc1129c4fe93836f5f796a2394d3df943846ae9b51fffdaf1386ffb55b1ebba9216d4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
7d34c51694d1795737ac98032868b32a

SHA1
65e693b8cbd6fd70e1424edb8787cebdb41870da

SHA256
16071e979fbe8f3ac0e0e81230eabe3f9f9d70fac5c9263acf5613e04f9f4ff9

SHA512
4d801cbec8408b365b26ea32d7640a60d34003c3b2e9229db210f35e6f9798eeff75248fce800c48ce38f861080e548518074fcbfdb78c520450c2026bc0b2bd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
890B

MD5
c27427188e74d48378fe85808c2a29a6

SHA1
fab671f28ea6d5783361c7f48370296eb7d93e2e

SHA256
7de1382358bccc1038cdbbe1866e3b0fa6c2fbe167bbd735adb450e0904486e9

SHA512
e11daeeef3c6f9d301c03c30612e03ca053ab2c1132f7e8bf1196d3a31681d4e04c11f8d1baa00acb6a2b0c3c23fd66678f33b6c959c09ac1fbb2b33e923b64d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
852B

MD5
1f28334b0c1cdb4430850f7152d9b384

SHA1
3335b51e9789d2cf365c26718589d7cd81662cb7

SHA256
c8537d5de5c9970a0ea9158528378d45f84395b34c6f49eeabc9ef6ac31b26cc

SHA512
f94d68da5e5c52b127df7cbd2cda17e13abd0d9ffefeb7e66874cc1b4a6d95aa3a5741f862e285abef7824d7124a8a9728d3b23c4a92c720841a3306a26d537a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
860B

MD5
52e4e350cc028f3900995b4962fe1c37

SHA1
63be067273648076f4c31146500eae6d7eeeec7d

SHA256
b436d82d76518dc938d669cc1fede5a6e88c833cc10739986596064228304bab

SHA512
c96db682ea52a12a9296a388781456bf42f92be77a3c6f7265e1f8fdee229f11197dab29dee91acfe7c0db6c93fadc4ce85cc54ef8b61078b8162f9f044c1e51

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF

Filesize
580B

MD5
cbfa803a703bb968a974603b30a694ab

SHA1
24b7bd42bd8ebb012fcbac3d2f89a7c7f4b16d00

SHA256
4d71d106f62430804a17c469fa231491001f09153597e64dc384b08395e1d6d6

SHA512
0f4d454abfc4f900cc697ffb46dfca6abd13d43f493abc84fbb1244b7c4ba34572f86d0b878721d9f0eff1a507b1d6cde89da50d5056113235ba39ec8385683f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF

Filesize
899B

MD5
2340fea24c07ada44e3a6f184e73530f

SHA1
9fa5278c4acba4335fab33191201f1a8314af825

SHA256
2c2d629c2ba0fdbedfabb6fd1ba2813bc9bad74db633c8277830355d73f4cbde

SHA512
085039adefaf69dd0489f87c5c61624ffe7625c746d47dc091340e9ec9690c0a0d43f43919d95554e900c254d828b59602303f33157684a863039d81b6ad227a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF

Filesize
625B

MD5
05f5839c514decd5eb604144761a019b

SHA1
5849b16a4dd9be5ff38d49ad0dc325139927739d

SHA256
95a7820098fae287f9488303656ce272967cd02e0da55c5c8705f335a49b3346

SHA512
fbe27824c61020af60cc488a6b632132b9cfcf8ac157e01cd8ba78126f8b8740c6b4c5319a8ed2a89174a8738d95799535935162d916adcbba94da2a31d118ae

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF

Filesize
873B

MD5
18dcb42f9cdd271798935be57e415d76

SHA1
42e9e4f0ae167d47dda63462bd919c7d2e1ec8b4

SHA256
d229075f9ff7a001a9529155d901930ef25ad2920b83ae8349342064f4ffa001

SHA512
85217bcef45e119a39edf0604d0cb38bb72c51a53acb5c0ae7d60b50f32cb5b11d0c6ba8ff36e719c14780bdec77861f77b9602a3a05ad7e049a682dc268459d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
5699c939d339c04c09690856f6fb6416

SHA1
2831f338a0484cd5ab1ee2973d7988043e47ba00

SHA256
e12651d7d74dafedca37fe016e5faa4f1a2002d813f9874fe45ad1ca44e9cd4c

SHA512
626b3a2816883e49391639f9b1bc12cf0d55af34cf04479f93de53fc38faec871e86ecb300b499e27e30d781b4a587cb02c88366051436f4601d5a83dd91fdec

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
6806b8282037abd8fb1c929ed52861bf

SHA1
fa1ee1dad7cbc6608a972ec76443e85b385198ec

SHA256
4470ac1c6bb7eef895bd3c2245aa85073dbd993c9f2e36704a5f712a32c5bfd3

SHA512
60f1194d9283871bfc2254ce1700b9eeeb866383a078bb72264b2aad46b21d418dac257cc3649377808ca26fcd0fa15a21e86ad83903cea9817fae78005d7422

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF

Filesize
615B

MD5
43c0bfad17a023b34ecddb1764d61203

SHA1
f46a995f9d056e2ec9dab8bee88fae03f17914a7

SHA256
956c0060e17292061dc4394bfeaee529634561c92c8e28ef573ce45c2d49d401

SHA512
1cd88e2254c024955ccb69b9366c9bf768b9ddc1be8040c0a2595eab2ced0fa6b2fdb22e37f9d0c6d17c391e31070dddd34e9d1deb4f38d9f5de02e867073cf8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
848B

MD5
93823df036bfc5bbe48416349a6ba9c5

SHA1
4a330fd927cce942d75920b896cf7ad0d88e77fe

SHA256
e579917beb0c6d3e9926383b67e9d2118ad0b9b09170e2d985c343e0416141b3

SHA512
66bc2c49583e61b05c747aa9523ce1ef8ca58c13039244364894bc3366d099408ae6630f9223c019b33714205a982493fbef6ee464fa7ce11ac4931833a79146

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
847B

MD5
715f15d7af83b47c9a08d54ef014b022

SHA1
03a768b0444f18ef3b5aab678059a582abf46b70

SHA256
e4c6b986856a96c5ffbf3e714476f09528ee42c652bb305f515346d5d8baa0a9

SHA512
be48d11df2661b0d36d29cd89ffa05e06d3c47056cdcddcdfde2c944334f170853c3637262d0aae1ad1e185866f5d00b37def870548c56c12e1143873ee41226

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
869B

MD5
f5e20f3d56a52c5d71464798b0d3bf9f

SHA1
17ae0cabf0b8f9405ef4f830d0b888f1c3a8920c

SHA256
29066bd06e4033042f9c3a8b4bd5c35208ed64ff75e157e00dfe095c98b92b40

SHA512
cef75dac4f6f2aea721f1c16f12aae5137f89079f8c5d6422ddc9e0dd866d51460e728d86d08f6bdd556e10b256256127aa66cb11740baf8a3e753bf630f40c2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
847B

MD5
1856a2ae7ad2d53b002a55609aa29e25

SHA1
b1af784a78b7023b7f84edaaee6592c5eef672ba

SHA256
d7f9013c2cddd4a8ae72efba000552b3406ee09cf4c9f05747b93d43174d0577

SHA512
be4c252b5ff33525ca9d43988409d61dc7fbbf16980b416545241377d8500168273022837236e7782e9968a6a6202376cfcc9df2866bf2b77de2baf033c192bf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
863B

MD5
350114fde5485bfc3bd0f0927b01538e

SHA1
a9c9db8576944b565e65eb18468a2ffe16b75bf4

SHA256
a073328fd511bd5727b870a0b85c1c92f913bdc52b7923d4bb05297eb413cc51

SHA512
fe1bf8cc20c94801767029ff94f1d7879a55c343b3f555cdccefb05cf4e623a358702c5e1f055d767b1efda4c673a10c6b2cb26f921c30fa7a49db2d6ccd5501

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
861B

MD5
4545de52146fb3cbb97ba38ef3739077

SHA1
c672fb0be797df9b50ee73f2562eb48fb7697adb

SHA256
7135f986a4aab87af5f15cafacfa55ae5eadcfecfecd0c6f200ee19083e1c06a

SHA512
52d81af4c80191d5c8fc11f84e43d927057324f298f14abe6bb9f0cb6d6ea7057444305b126d869fadd68df61afdd6de7e3019b0d3eb8407f1a663a2b03f67b9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
850B

MD5
4a7043adf00608828ee09749d44a59b1

SHA1
4533abbb190142af71be95896c211dbb4aeeef03

SHA256
e6b1ed2cea94abafb8a309d0289bb4600ed5a69f65d85504341fa88642a58174

SHA512
f8280f34542bacdfc9cf833006c91e6d6699f8ab0b5824af31c8de204b94ba7dccc43156da9151458dd17512c10a22ac7cac4fa9956f30fa553634b79c5b92a3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
883B

MD5
e08b5f27449dd1059db320c567254770

SHA1
6fcac2715c923f43f63c8e41ccc5d1604eb497f9

SHA256
25c9a947f57bdb8e19700555d7b79283c457c6e96d5e9b6548e79a0079472c24

SHA512
807e1656c4c190aaf8ef00bd33c4ffbd25c8d8bd497895e829977a3aae66ae8056d3dacabb1cb8a70e1789da1c185957d84fd8d23e6383f832be6bf9d693aee2

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll

Filesize
809KB

MD5
405b6182fa8f9d71b11c8e41587cd6ed

SHA1
95a0d2b64a791fd544839e76daabd4fbe96a5551

SHA256
58728119baa5e385f8e3c8e1af9a1ce60c49fafee079fa1fce1eb6166270b365

SHA512
01bd06cabe6a2319f47754231e7a5d340072f2c7d5082e72d1cd2bd96a7eb757d089b67f5e450722cfeec7d419f681ef70b93792c1c43b7b67e514464f70e56f

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif.vzlom

Filesize
153B

MD5
d9a31439da128966aa82ea0607539ec3

SHA1
9efd7e4b84c05c44515b8d8fcb193f799354a87c

SHA256
e5595fae5426376a88c97250fd0792a8ed5c96c0678579b2a008c4984a3512ba

SHA512
b01d513ea5af119b809da4670da608e41ce130c7b7f3b06b59bcd7602e7cddae181def75beb133bb0aac4df93863aac29d0444fdc23836caaf2a1b04b66c6ecb

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
0c39fceea7319b7df07725597bfdbc5f

SHA1
fbb6e0aa2176b3a49821ed73b79eb31fcbee097a

SHA256
1b854e7461dd7e343b21c9a78846db34b6d55f8ba4d7c415d78779cd287c7f4c

SHA512
244471bb737b094648fe0b73640bb989663bdaecf97d927d30e31819fb6bf00687108c4ee21a208b380f4f5ffe9d808948de56ffb5dad6d67e289cbd99790bb5

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
0077a8e2b1a80e65b4435219f340fc56

SHA1
d695069d013fcb65c093d84e014fc94560f3d2ed

SHA256
25ce4dd701956b1d4d80eaea2b7bea4556ed2994202e7703935615eb531f9e2c

SHA512
d025d393efeb5237e0dff8d11ecf7fe6d6c63014d435576af6c718e794263a09bc12fe28fd38b56aa92594a8d995fa289010af610da5e42199d0db76f37c7973

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
86f5b8e1b6845ab0f66439521cbd659a

SHA1
51f6c889c0c9ad6ae07de35bf522c7f7cfdfa866

SHA256
f2b8209d18cfbd72494386bdeaad2529ecb12390e45f44ea10efd9fbfc0e003d

SHA512
4c74baa9cf63d7844519d5f3a6ce6eca30f8629e0eaaad4a27faa50c615661149291aeec7a55f9a3bb0b1cc29117c1098274c0003feb6b3c01a971e69bffc355

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
428c140f542a0812473a6e011d6a952d

SHA1
52a4af7a403a59a88e46e500805f5173d77d8438

SHA256
a1ce52e73432ad397be410c0c7c9810974d69d6e2d3de3429cb376ee6662f250

SHA512
0a8f3d54867db773dfadeca414fd82e74901e0c3f7d6399fc147ff39534ec4106907d67977e9eb0f19946ae562925048bc2e20aab3a8736cce74594b40458386

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
fe0a41aeb47c6b9bbc0b2fe2c055b64c

SHA1
786ed07131cddef0c5e608f007b6ff6c14192c89

SHA256
5ae261639c04ec11566efae8a30aa5d3bd2b308b6d461cdcd69b7332d21b8dba

SHA512
0e14535ee932071d1b63fb06e0f7eff5080c3ab79c7081b5bc30ff11f159e3a865f25d6fa4e001f8481af5400a1355b1b5de8e8d1a7ea7d0a2cf7bfe9aac27de

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk

Filesize
1KB

MD5
c43828e433d7542838f555ab57a986b4

SHA1
2ba1236aafe06e0b51d8300d3252b0623d7db281

SHA256
f6009f1f088f4e7c36412ffcb9d4a58e21fac1048e3bc2cb20edb4ee4168d2ce

SHA512
02fecdc0d8b31dd416c0d78bac331a6bf4dd8b0fa8fccb39db9a19a4fa0cc1000e598c5c61ed14ff5cda34fd4c1d4bb778038bed4a4b27dc234f98c7c26730fc

Download Submit
C:\Windows\Installer\MSI1552.tmp

Filesize
64KB

MD5
2af7ac092d41bae372787c21a4c81242

SHA1
29f4a6fcc0545682aecda7ed27c0c9580851c3d1

SHA256
174278900dbad135e87318e07c8fbf16b819320bb68ac5d8e9e97f745f9360a6

SHA512
f1390fcd9e08eb30b407e160395a6c6b890a2ce8afafe5c25109af6dd220994efe1b3dc1317db9ec109340e822569661665bbe345f51e7bfba65abaebcaea793

Download Submit
C:\Windows\Installer\MSI1600.tmp

Filesize
68KB

MD5
954c7720c5e88fa690fd1d38dec47347

SHA1
2f5b87593066dac3f5a58272358b1e8e27a9dfe8

SHA256
532343ebbf4572f69673a0adc5d5737fee88aa73c1acb3b15554338c3033cc0f

SHA512
0425dc825eb9389309e73bd545a5904ff9aca9b29605ac70294859bf38abc0f1366fd119d84458f766b81cf7c9fc212d64a2c8faa1d3a84993902d6196f5d51f

Download Submit
C:\Windows\Installer\MSI36A.tmp

Filesize
257KB

MD5
d1f5ce6b23351677e54a245f46a9f8d2

SHA1
0d5c6749401248284767f16df92b726e727718ca

SHA256
57cb8f01cf553c3886760180d1a74839f2f676640115504485aca9692f577acc

SHA512
960e90894e7bedcc89894e77e57e8ee0c99dd2c530d02665e8bbd3a1793eccc1e295c5923d1f37c757fa1158097fbaae70898c16052882d3d210c29ea801b3ba

Download Submit
C:\Windows\Installer\MSI755.tmp

Filesize
28KB

MD5
85221b3bcba8dbe4b4a46581aa49f760

SHA1
746645c92594bfc739f77812d67cfd85f4b92474

SHA256
f6e34a4550e499346f5ab1d245508f16bf765ff24c4988984b89e049ca55737f

SHA512
060e35c4de14a03a2cda313f968e372291866cc4acd59977d7a48ac3745494abc54df83fff63cf30be4e10ff69a3b3c8b6c38f43ebd2a8d23d6c86fbee7ba87d

Download Submit
C:\Windows\Installer\MSI850.tmp

Filesize
148KB

MD5
33908aa43ac0aaabc06a58d51b1c2cca

SHA1
0a0d1ce3435abe2eed635481bac69e1999031291

SHA256
4447faacefaba8f040822101e2a4103031660de9139e70ecff9aa3a89455a783

SHA512
d5216a53df9cfbe1a78629c103286eb17042f639149c46b6a1cd76498531ae82afd265462fbe0ba9baaff275fc95c66504804f107c449f3fc5833b1ed9c3da46

Download Submit
C:\Windows\Installer\MSID61.tmp

Filesize
86KB

MD5
ff58cd07bf4913ef899efd2dfb112553

SHA1
f14c1681de808543071602f17a6299f8b4ba2ae8

SHA256
1afafe9157ff5670bbec8ce622f45d1ce51b3ee77b7348d3a237e232f06c5391

SHA512
23e27444b6cdc17fe56f3a80d6325c2be61ae84213bc7cdaad7bb96daa7e8d2d3defc1b96c3cee4a3f32dc464b0e05720bcf1c0e99626bf83de1b6d5aac000a3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
199af51d820d5296b1fd2659318615e2

SHA1
9c412c1ff2fd88b26496438f284a820130b5affb

SHA256
0c57060c398e38f009b4d5b3ac7217b97159f68773d6609bb35eb121a98f302c

SHA512
54210c09d02dcbed4531f679e1b8d5434a726f0f971ce69d7d503b8522ef27b5648b75f47a4c09d3d62e419156f3513c3199ad9b562c179346873c95a26f65cf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
68e0d1d6d9415b47a56c5c3a6d4073ad

SHA1
c0b72182f24755f15bdec56f807cef6af8c95089

SHA256
1c5d866c2331d056e7a07469e17a9f9d797682081c2a6dbc049344081e2d2403

SHA512
4aa51d0c0e3057e0d69d76b2164d8cdff07961b0e1740d74ec291bf65d4b0473a201505494c531241fae1fe45e9de7f54da033702a522ae4c14879e9aecda088

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
51202394ec04e2141c7cb699fa24efeb

SHA1
ad8191d25a9bd89e6ea060ec99a4660ac0091479

SHA256
9b2e36a23743afc0a85113daa5df2894c2a0b06cbad634877b47ac44dbdd153a

SHA512
ca72f86a8de472f170144a5d52e55d43137f32e347a943df2446d20e73ac0ab7e0d753d9a498f0ff9168609c214e0ee66b0e5bccecd6bc694a40b608f9815161

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
20c8e48a9252b20dabbaae6f3f7fe964

SHA1
a6581121fa114ef0588c355a52c5067cb74a3716

SHA256
6186f7dfef7ee48fe0301ce0353fee05ceed7b850cc3f94126a98e69935c5ade

SHA512
5520ffdc12a8031a2dc36de1c51fa379e725ed67067d219e762da17fd85ea99cde9d37bd783b6772556717cce905191931eae49cfb68bcee0161be6ca9a51c5b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
935296bb2785ec1ef58a3c11cddefbc0

SHA1
ff27dbeb966e13a71a2b095e721c06820ec801ac

SHA256
d12c4d1da11c67b07e710dfc55464c1f1124885658024b96595f944ff195744a

SHA512
796158e180a11d458522400a9b458e6362b6d80a15279e3aa35c4e0075fc227b099ed6d2e0acbd43fcb12324f056ba978a0391358000537bbd313d65a213dea7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
4fd6c33bf786e90af8c39a41c2ead050

SHA1
45e3a496075b02c44cc98c01f8fc16cd57bf1078

SHA256
5f3caf10556e0104353cce87d87ed05d196347da98e719b066b91dc1f8f3a61d

SHA512
d833a0fe72da0134c1b539ab43010578ef7539f9347f369dc600ded04a7bec9bd19d0f668c5490ad0f21e5e819a0d7a338b3ad2cf37b413505a6a075a83fd2d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
3bb3e74879efe4d9708bf46c94edfd35

SHA1
d4c4993b64951e43312d4cdac4c5c312a0fa186e

SHA256
1c259f56059d7fb9a3925a9614c9fd571ce1cf547373c21ea46bd18a53a268dd

SHA512
738a4fdd901e8277fdadce85f02f2a68d3ab097a90a461be25e8cfaeb3123a5c9a4fb5b1951e7d5d0a2bda9472f97a29c40baf878ad3b75cc6b0835e7383058c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
435a7d0a8ffb995138b68ae1b83b0103

SHA1
6d58d94d2588688f35c0eb74c4f5ba7efc50c091

SHA256
eb363739f1a3552750c219cce7c3412ab5f437ae1ed6cac3b53adf5b0620a232

SHA512
1921f0b80bbcc5019cfc4993072bc7878d9399e84cb20614f807e18f45221c7d44d21fdbee1e30df8cceb0d0f68f0091e49bf1865eebb575ed757d820326757d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
a4858bdfc6a8c2f77c7666b9cba76f0c

SHA1
3d6bc50e18d155c41261435546c028e9bfac5d9d

SHA256
524d28a45b8635deaef0e96cbeb656e30e3c2a3089519d3c0b87ebfe1960c4de

SHA512
92d56756f47453801b0645769a4590fcf2e03847f054f65d875c2c6e891c34b7b379719e8096a804a41bb5e9697fa19dd7e2af79ec1430430db5ae9214140b66

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
bc7c7e53bfae48a660394298cc875a8e

SHA1
1f4dd4df23bab796701da467b366e7c808a34334

SHA256
0fa258fa026e8be8f4dcebc8f22157127ccf698a6b2d955aa93d987b057b7b77

SHA512
1e86dbb9b03ea9db0af476b9032d17facd369f557d578e7f2dbf11e00cd3e6b4af670945adaa72f6e65e2eaac1030b403dda998ffbc3a69eb3ca04e2072b9421

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
7436d3608e39cd3d28b067f46b859c6e

SHA1
4214e7a2a7e3199d119099fb4a2840d7c134824e

SHA256
6693b0d6b5831ece3825fdc82e7cfea45cab038db6a974e7ed76a3460a2ef8d9

SHA512
469c32d9bbaff66e88a816fd4b9539ac5fb171e4907d77d24047de002b44b71de2cb367bf2566778964c8acc3f399e617b8cdfb2eb7a4bc37962736d4d58dc99

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
bc5cf9c43378099d0f044a70c42a69ed

SHA1
8aaafa38af5605ad728a19fb1107026677b5abc0

SHA256
d4ea95d73287487a3a125e242f78dff93c1bab95f7f7a4f89db921a76a5eac10

SHA512
b334bcd7e5e3c4f334fd48a2f968b4da0724c0d0037075c940dc4ef4db1bd58ec58b3b0cf0c2010038dbe9f00d66c266ed8c7bd355f63d694aeca0405f169086

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
b0405c101292987cab93a79d356e9095

SHA1
99fb0ca1f5692aaf770a00f4ad8614edf4831441

SHA256
a6cc92603530da40b321c5e6d9f0f339a699c19d550d0775ac8a56d7b1ccc0fd

SHA512
f0f642888d908bb40a199b2f5e0b8104a9d54aecca95502644174b91725cb8f32b81ac937ba776ec91132f0fef6af2bd0e05fd9b7b7dbab43bbaf65d4808e52d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
5a6f634741f69a91b244338cc36ee6c8

SHA1
3516da99e88c6d9985a2a7f1d32a8676e7c866c6

SHA256
605a53c709d4bc4e011481492da730b378536f59e73c00d39be7676f51bf24a3

SHA512
eb52796009b796fa2bdb9b42eca81a806a7bf4f19699e343340bd1002fc850ddad989854b7d5fd38280c7f7182f3855b5df0475903de835b3a4f1b605b42375e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
0a8316794d05ffd1947b5bfd953663e3

SHA1
320e9f674d3578204d73dbf1f4a065d6a560f28e

SHA256
f01afb5b0de2001b8569f01c0da71ac16fc6d364fa3daeca28ab481a1784403c

SHA512
7ca62b4b725f8c0e0c319f20f5e64c25413c1bb136a815a04568def2d90452fa7e7736e32e44db2d0469ffb32e61ee838f5b5cf5303e6641dda2ff336d12652d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
99038dbbfd53ddd09788e38bbdb5ccc1

SHA1
683d98242860ede5b798fe26ce3b65b31a2ed2d3

SHA256
a8c0b16698365a9a7583d222cb8e1f850d89ea8155340375e464b656f3c20cf6

SHA512
5146fed94d560b8a901953b2ba345f017d81c4a5d165574884714adc63e18147fe390e4084bebe774308bd316ff7f27b68c6fce767b0fe1242f54f6a4f2912d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Accessibility.dll

Filesize
35KB

MD5
013191b181e29070bf1938e9ee4bffe1

SHA1
f9d0055d4c58f4417060ed38363eaa643f4256e4

SHA256
252a1c796e9575d0f1328c4f35a42462e957338043db9ed91d92b189b203b20d

SHA512
0d067334111f5048099e7acbf00f568a9bdd1dca8426d8225fc5d32d8b103a2adcaacf82382e5aa50881b1726f035483944957daa14e16ae854fdba5ae89d77d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AspNetMMCExt.dll

Filesize
497KB

MD5
766d8ded6f4b0d238f12894827b7347c

SHA1
a37e800beb7a4c4a44f5cfd7907756b724818533

SHA256
86de7a79e2417b0846cad7b83edd4ec37c1e6674e5f11b0f299640081f4f52d0

SHA512
7c8694a3e41ecfcfe99afce96bcebb4a32e55a3aecf691d97f6516a40f53106cfcbd30e928c68fb05e647efd5a8b2771e5dc87101b9645f44e6a74dfa4d93bcf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Activities.Build.dll

Filesize
52KB

MD5
44675a54c2ae11577ebf8ee39580d64c

SHA1
b25b9322fdff2b4df1d53ad9fd2372ac0125bb40

SHA256
b7ac4ee7f4e78ca57ec94f7314f710692cd7a6cd15685088e4f6cb825cf3b891

SHA512
7a8813dfcc74cd49f3ff224e3481b7dce20e0ff46e3ba0d94c7aec9ed86230b2d3879843eeb47859d5bc98f2eb13513563dce1e886d6dfc20a8ace79a6590ff3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Conversion.v4.0.dll

Filesize
83KB

MD5
f0f49cfc0f4ad68ba0664c70c17ce405

SHA1
a88f39cca24892063830229fd82ca095002f476c

SHA256
f6b2b4a4e1e35b7e515ada2151d79487cb6f896253a4908080d7447fbbd3ecfb

SHA512
8a4831703f58a13088be187220319aa38646e006a7647284fc835035ef3353f2c7c12f2fef131bdbcb435db0d1643d260d693cdb42f4417a6732c5a9f507dc44

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Engine.dll

Filesize
643KB

MD5
497152ef4f59b0a3d4ea3cb7e9382c16

SHA1
059e61344abdded3cc1c6e702e450058a5ba1810

SHA256
c2a1e48549c21c0a0bb87bbc903be7deaaa0f7b30e4299fc09e9f8f92d1a5cec

SHA512
32f5568f08f403f4a90ff1fdc333f4819520178e7a79caf8ac1d112be84e6a07f080c42eade446a9728bdb521a007a3320686edfa4a58831d44410ea3c5aad69

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Framework.dll

Filesize
97KB

MD5
8f2501215b415738881ed1e854a53c66

SHA1
d78d48f260186908c94f04b864481a63313593f8

SHA256
84dbadae985d07c1994b313a872b2c2a96475ed3704b35a07c9d56a738dba1a6

SHA512
a46d63c66f27821dc625af86fbfaf725e8e434ceb5e36f78a25f036262fbfc3a33f11d4d754114048e18ba68355b670b13175e01e5b454e1fbd5ad85c19a3062

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Tasks.v4.0.dll

Filesize
1.1MB

MD5
5bcd7c1fd41b78c4e84f2eeb29a5f026

SHA1
34f2ec55d35f4a04d2b88143084c520e9f4ee9f6

SHA256
c1acb918432a78aa4c221655b0ae7d282f280b5b398d9ca1be4b0cc5f179d8fe

SHA512
d69e8e3da8d4995b919334c2c4b8884fd286879e2c9f2d454279bd8efef3914169e2c100e64b79b830fd2fca666ba9ed9bd2cedf7786ea0e82f69770c26fd415

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Utilities.v4.0.dll

Filesize
263KB

MD5
95220ee04dd7f5d0f779109cf33d7eb1

SHA1
2c16eb5e7e3a5ff2048a28fd95d71dbb596f49e4

SHA256
2e9e829632fe6ac3d48fcda49d11026225c93e0f385d70932d293eba192765b9

SHA512
6a6a3d7467a95efbc207c5b972107fe8a2dc3d21888876b3c83ef94fcf2f0659b6e8d45f32c613040ee6abbf811f4556c573e9ce609ddc2bdcf780bb13b55d87

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.dll

Filesize
1.3MB

MD5
ea0228aa93e3b236223b2066f9043d21

SHA1
403906ee7e58c9328338b20d6bc8b06d879bd218

SHA256
b2dc48cccfec1a061b3030be0bca27ca3cbd6c524bab73eda180950d265d60e0

SHA512
71d715184ac79d0988725403b2672ab7bb42f1d078dd4f04cc0f17d2d12b0847b140fdcb2fe3034bdb2c59c26821af66c756c8de813a8f134f18fa7f3474e1c7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.CSharp.dll

Filesize
475KB

MD5
a5a097bfdbfa0c6c7c3d2cd8316b9d71

SHA1
9eae4b86cf2b271f6f2ab6bc5afee16824801e33

SHA256
4698db07d23189e2669b8b29d58b96cd326e56cba5b9c51ffc58efef99b4309b

SHA512
a4dd894db9b3a439d12f8e473b4fd2c0961bd9a0f047822018e40c9a53f1fb5d1183bd50b9ebe2db773846e037ef120d9ade943f7be368047aa283e9056aa160

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Data.Entity.Build.Tasks.dll

Filesize
51KB

MD5
65b3386559d8bf0ca2b932722feaa9e7

SHA1
678ded535fe7352061cecbeab6272fe1d9a6629b

SHA256
8739f6a1290a23e014e6e4f4dc497ca1bbe546c8cdb25e52faa13c1447d86957

SHA512
05f7176603ff12f01ba5d6c7a9987b744439c609ea7abd1f0bacef800895fb8d6f8c6bd9c33e056f3a598640e2a616ee2f6058d1c7c766293c390e65332fbc76

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Internal.Tasks.Dataflow.dll

Filesize
180KB

MD5
446cf9eb73e2716c1b60748c4803515f

SHA1
6ad6bb0b4c17d73b1d6067b2d8d5c7b40f4972c8

SHA256
9ac76227154c2494bcaeaa8728619f4dec56a6ffd08c42f632bb1e4b33c662bd

SHA512
a337649a43f0a6d8f7e7b5b92d113c6ffcf8842f827e9f0b079888dc264759fb2fd337225fce84ee0fdcb70b71abdef48e56b89ca0efb17dab3df4fe807d4710

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.JScript.dll

Filesize
736KB

MD5
82e6ba471863fc194b498208b3597b83

SHA1
406be9bab2469d8d09204feb891d318a68bd7c10

SHA256
5f0c36770a21d8e9b12bd0d74d5aa061ae3eae30a9a85af87f9287d6dfd6b6e9

SHA512
f4c64b506b8321120ccb0d1953776510d19120511564fa4e77a01e5d487d0112127bca5ef41c7a1a544d0ae1dfdd645cad570cd5a8c616490460a6874df980da

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Transactions.Bridge.dll

Filesize
386KB

MD5
d5668495339e3251b7445dca363f3e7f

SHA1
d95e89553f374e1f0549b6998810252a812eb872

SHA256
4b665744bf8fe8b811544bd9e507a1aee5be35b8ce3e6e45d98549638eff8ac9

SHA512
d02371a3d3565e7179732691cd3c78fc3acbd7f5df446221c92459c573ac21d800355041167f68f32833da7e2974d527b1f8910b7be8741973f06dc24f028c3e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.Data.dll

Filesize
114KB

MD5
b20142b46eddbc29c37c544975a808df

SHA1
af843317a50bb2c8e39f47276325123e8e8a3620

SHA256
c3a32da86f053d622c8da0c71cd50e16279249347087e8121294b1ada6a52862

SHA512
a9c93a6d6902e808fe3763b871442d5046792a662c0dce906490dc924a0fb82eac88ac95ecb7aca736dfeb4c0ab1988cc02a1bcebc250e3a7767260926da51a3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.dll

Filesize
486KB

MD5
aa284a834e6a91a3f26e12c9348015f4

SHA1
59c6ac77748dc3b6743b6c4694ecfe74d6230d22

SHA256
309b490427bd351f4561273c9b4ed8cd3aeba02b4ccb656f54294617141786e1

SHA512
3f0a2a0e96ecf72a3dd23c8d9d368e6b0fc88e9ed208deb9318406c58344f8a82cc0fb22c01875eb1b82d68262b82c54821d24355b4127c2f378fb931523622a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.dll

Filesize
625KB

MD5
46bcbab87eaf476c72137038283330f7

SHA1
f20dc324982dbabd3ba4dbfe4463589f607af5c9

SHA256
5da44cf6772cd224b22932e472d79c0b35be536ddfc4eb67ed558874807e4906

SHA512
d748c0820abcd4a13cb69068ac71ab41678cba314b8b2c8eb392246aa9e343c1bb1a784675b1ce403ffcbcf58737b41187ead1d82779d53d5ceab72424cde5b3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.Dll

Filesize
29KB

MD5
865d10e8d07bda4f3ef5bd62c65f62ca

SHA1
61dc487519e10297e377883eca554d62c74b76f9

SHA256
48239260641ccc07136128c3318ea35c29a22a1ec0c0c2ec000d94eb19137713

SHA512
3c03f8dcc7112eabf75f1510716ddc392c20d37860c81c14309d34ec484e6ee178216560e1a51549ed5b8f92ab45f7e60e5c28d58c1cf73b82805d0c9f032fcb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.STLCLR.dll

Filesize
49KB

MD5
74f55449c60305fb801dca4258b5f98d

SHA1
88dc4adfe4b2a9caca21173fb9069fed2384f8d8

SHA256
adacecf029301006bf85da75b055d6e8b7196858dd0836839145cae67aad241e

SHA512
0aeec0d35b4b323acc7ec40d05757ec327384b529944a59172319386b5facf5c2574f89cc23e8c2d137eae92ac7f483ef0524a12922a66b45f8c0e4c7ee9dc64

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Win32.Primitives.dll

Filesize
28KB

MD5
5c9f7be41550416d8d83eed96468ddce

SHA1
6f40f740945250db5e9a262f840f29c78813009f

SHA256
5ecebff9b98aeaeb527a662ca0456f57e08b5192c0385d6b1d0794cb53b8399b

SHA512
bbd098c8393ed3433ddf0263d14fe4d7e850563008dd3e7cbe5c6564627447826d7c39d41bcfe2324156ca3af692844463f15aa2089e14f3dbe08ea02dff35a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Windows.ApplicationServer.Applications.dll

Filesize
137KB

MD5
98a3ce5f8497a3e9157e3091e2feb1ad

SHA1
c0121385970ade30c6c8123bcfabbb0e3dd67788

SHA256
1789b7e3f462331aaea4d1b07e29bd3062b8005e2eda20077bf6120488990f9d

SHA512
555dad99165950b639be0cc6354735df6c1c7e8258adfeaf582cfc284a9fc1c94fc2a32af261b77d772ac6c5dfbc90319bc01149d176f088b7c8bce7308506bb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Workflow.Compiler.exe

Filesize
32KB

MD5
c894cdd6671aae499b2bd08ad325a077

SHA1
fe4e9e7a7a2c80e6f457f3b550a5aff7f0ccf1a5

SHA256
84fc7c931d835727c07074d00932cfe864173a3789dd5743409b6c4b7b7e885c

SHA512
3ab14f5a5f164fa2a730a6f11d098acbf9a55965dcd5b1713cafa76cd742e445905c5114dc426af55ec83442d8fd915d82c77f58be785c119abd88a0e8429d53

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMDiagnostics.dll

Filesize
72KB

MD5
c29de8460e5cc80ef46ad41bf09cd6b5

SHA1
ad3340784ebe84ce4b2c3b02d2cb972bb50433d0

SHA256
16344b2b1323c272141850bb4ecf765c3ea77677d3c139a6b2715b607f478f22

SHA512
f4795bc032bff8fd8718880bdba3c8a94a0dd0c899c662be9b5c8f193d3d5906c3a04701bb1390b5015a4fe022c753dbb3a840f0dcd483465f5fa6720ef664d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Core.Presentation.dll

Filesize
698KB

MD5
02741de7dcc4af347a78a4ea38c0979e

SHA1
ee5314ce4baede76700ca326fc55cb0655eec403

SHA256
12d35b19d8015114590a6e0d369192e0e6430d96fea5b4157abd34d9958d4692

SHA512
93c80fb70955c3819657615d0c8322e942c8426ef17b10f22c415d1f3f8bd7fed37b00ed368f4563b262ed63538c59e711ca42ab0bfec2e27826bc375bc52bd5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.DurableInstancing.dll

Filesize
138KB

MD5
5c26374224b671fc01c86284c90b0370

SHA1
12733bf6c1ddfe6d22d56519ccafed300013a310

SHA256
d823f2b50f958e78d4dbae92ad504c4eb2c480ec0ce18133d75bc9e860dd3189

SHA512
c3ad4383ff057a6a9eeae0caf1c45ab8dcfcbc497bd12246703085cf74eb5d488507bb66f0f8df918681c32e3e5be87e72ea0ac3f1242df10f14adcac2e01857

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Presentation.dll

Filesize
2.0MB

MD5
9638ddf771026b6b61f9221035ffc965

SHA1
676aa64cf05c1a47b7ed1e26b361123e0b569c38

SHA256
df061f484cf5bc6404fd2f195bc7c0433d0ad6e17de206608ced169369551abf

SHA512
bba014b83a923319dc2b0babc1e361770b8e3c0c906666b40484dcd63b3350ed5419119c9a7f5e7f7ed0409dd8d6017984c7e6ff8a8b91372afac9fc9c29bc8e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.dll

Filesize
1.5MB

MD5
364f19ada095c6f2bbb27b06f8cdc278

SHA1
30a3ac772e6f010fee59be46e05dc1110bc78810

SHA256
3cec63fe6f0d2f9e45fa64d0384c2c7e42f4b27698fea66754a19321b8eb50f0

SHA512
8703e6b1ba7c31f01bbec91a3b9c0e6c42be06da69c406c24dbc9b75b9cb4fe1f73a6fec43e756ebf158e100ab89128637b06d1ddabea7b2be4dadeb15023c8b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.Contract.dll

Filesize
51KB

MD5
adf9c705ecbec1e96c008bb1192b4792

SHA1
450910bbdba80000df5285b28431312409378004

SHA256
bc6eda1b9b782a40e73da8eb68ab55287d41db2e744d5cbfeefbe20348dd3466

SHA512
89f736d3a68e54a65449f2b0699e9a532ac010385e1b9a67358fa0805c20d2cbb7eb9b6ff8275c24c57cd32e610314b598a773b88426eec185e76e6e600c1fdd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll

Filesize
159KB

MD5
99cd57695d68a07bbc08eef576f2696b

SHA1
ab8d00624f6aa0be8de9204ae28f5bf18592d710

SHA256
ad864f7f35225489b8bc0d42a90737ef2c9930f4edd1a5c2f7cf2d1fbdd0758a

SHA512
b3b56370a8c5f49d7e3af960687a42569ab0f75691fb38fc5284e1114bae3fc9e4339b9fc1a7fc9deca1d1b8267ca2883e3b071af87efa9b89181680c23fe1ba

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AppContext.dll

Filesize
28KB

MD5
a127e9417d2858b4d7c33cea315f50f8

SHA1
e82d3283271775e72da1fb81853fa1a53b0c9e86

SHA256
3bd0d7fdb095a086783150acbdb08effc5e23344603fc50e715dbc694483f0fb

SHA512
f98a3cbbdfe45ffce8dee55c13bebf1143708d1f6cf3599b590d2be7da96b99226ec2e82000a24265ea00b06d1d901eb1226c6ad4488e4313b9cc00d82be1ce6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Concurrent.dll

Filesize
28KB

MD5
699946ac283974fe2b8001a4bc0f5fb9

SHA1
09475e16ff13eaefaf7c296bb21b8d5fef0298f1

SHA256
ad6e96ee06f30cc3bcbed3b2b59a1961dc421af50a7f5c7146f3705f3b7765dd

SHA512
2fa749c7e255b4ab2618efce521e3470c9a0f8cc7512dae28799952dbf0e5c6b56a1db509345e531c0f2cd691717aac7c4cec3a6761c10eef7de9833a34db98f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.NonGeneric.dll

Filesize
28KB

MD5
f65a97f78dd14ddb05b6e6931392e7f2

SHA1
39ba3eb379e389e052754e8badfad52dca81fa6c

SHA256
d1d562da7ecf1f901f14352fd153616b6c4e5b0388bfab120a71ade0ba628b71

SHA512
e7b5fc388357fbae47e7f9c429b974801ab9cefc79b89445b8fbeb734eb2a27b762b2163f89e7257b4055d650f76233c910de962d7a33f72b54f33610682665f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Specialized.dll

Filesize
28KB

MD5
ab60be4ebb521fda66730bf7f1b570ff

SHA1
624135f7db1f5f567d17c415d6390403d204c45e

SHA256
9b5696f61cda4827231253181ae11cfa2c2ff9cf6d12edca4a4892cf5307094e

SHA512
a808e2f179e13c206ecc36bdc04d9df28d83332a3c5ba64939607a34e16b6bc20e635123b0b875e29c9659bec20d35fd8657ea1b56580d8764f08fe4ae44630a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.dll

Filesize
29KB

MD5
92ac9c325bf900e1ba268c3e56b98b54

SHA1
f14b46f97d325452c51b39511e09cd2753ec8fc9

SHA256
a2f690f96cc9f59c4c37c2c237e3d111aa2a33cc0517bb75d6de639a2023e35f

SHA512
20b1c6dc6a1c9e59c8d1fb1cd92dea29d8587da8eba64e87400ea4a47a3ebec13f204e2c2719a1eca84d2f5841b7d1d1f5ee5b62f34d993297c905b40f74f400

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Annotations.dll

Filesize
29KB

MD5
629a963868e9879df6e9de7b717a173b

SHA1
9ff4bdb2dad22a48afb76678c89af4b28749f954

SHA256
d2d45c0327b36681b8367d929e757685700f4b493413eeacc14d1babd5c37908

SHA512
4730331e8449dc108ac7dfc3c34bcc804f5ab172bb291c9ccfaa3edd8f3547c998210cca2251ebd6eddb00f168133214c8fa3fe2a9c19436e0755648dd59d572

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Composition.dll

Filesize
298KB

MD5
ac6e628a6beabea87834d6106e3b9d46

SHA1
403fc47341afadef9295c98ca6394a6a2b556948

SHA256
be62111c2e9e70a3f015c4e766f817ffe8037323b1da30c6254c57f823de3e6b

SHA512
42906a1a752af9b6e44b4d73091088e61febffd6265f990672c245a8fdcd3868b5e4780fd69ccf239bebe94eea13938a3e3bf6349fee8c68a8c0480b282a7367

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.DataAnnotations.dll

Filesize
124KB

MD5
8502048e76709dca1b35e5b080055b36

SHA1
865ced031698efe0abfda1e656a3f7135b9a520c

SHA256
08bbcf5c45154b1d7192c3f7895a614de3e4a89dd97ce211312d6b39f5075ad6

SHA512
e405329bb611c21eb77f760c87fdfdad313ae28992207161f69f8946c9c690e4172828945d8cd7b806f6f57d196c07f6382246434f2f11d6118cbdac553acaff

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.EventBasedAsync.dll

Filesize
28KB

MD5
c3f6e1f604841db1a20ac624595df861

SHA1
b8bdec58f37b32cecb7fcae300d9010bd030f537

SHA256
f0ef380abccbddfab321a38e99341bfcc2c7219f64fd5a3c05a83da28ae8319f

SHA512
e10feaf9fa17e9fac724d3286af10e6e4cb729f77b258cb84992a1de2c58f9d766322a4f617a68c93501872fd69880ebd14204eac7ae79e19d5b1473a65077c5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Primitives.dll

Filesize
29KB

MD5
ac628e08b4bd15730c7b34e7e1b00413

SHA1
dd92f7dad70022baed6d21bc52281ca4065a8dbb

SHA256
954ea2c6e6a404c4bd1484941b8b75ecc88b0fbdee904ae07f426a3aefbb3212

SHA512
bb97ba647e9a19cb9a68935b7f96514938bb624b859f8df6cc5409341e0fc4d7e2c46b653347bba5c9e88213242524323b24ed96817556d95b73785cd838658a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.TypeConverter.dll

Filesize
30KB

MD5
78aa2dc03fb0305e04d8fa45efddb6ef

SHA1
273eb8fb959673aad5b4f6ab2e688e5c07f40a02

SHA256
d462fef33f544d997c7f20a3266c18a1bec3432c73838eb4cb17a83a54cd69cd

SHA512
34ec4571b82a98f80ef50533d9cb21a266fcd672aa5ce28f780e69c34b0502505e6a3268bd905a80281828bad499188e782a011db28b729f7fe0b04644bb1be4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.dll

Filesize
28KB

MD5
3d27f7afa1993218a2851e9193e5dc75

SHA1
736c992f0b9da3f08b1f844872be761622053a86

SHA256
74c395cd267a0f6988f5017d160c6a7ce4b636d7496d34944f7b74d4a3cf4646

SHA512
f903720f191fae0e7bc9627c7625a0894ead3fcfa78f6a32378b5a5ab6a17e6ebbce35aa0c91cef1490326c85a03422404fe28d8c945a0d0254430ac528cbbd1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.Install.dll

Filesize
100KB

MD5
6baa52a096a28fa7d2bcb46dfdc91a98

SHA1
ab6a5c4d09627dfdb30b4907bd074c8c9aa8de65

SHA256
3c92d1330cd79aef3ff3a0bf83b3cebd3c7dcba1797ccad7a41406637d468ea7

SHA512
4af4295c69c1bdbdd8e3b54ac190c64b29dc1f604e29a3b786c83e788eed7ce74e719302dacdb3c35631a369919ae05bd6a28b5c6269a9f8ac3fc6feb6fd3c8d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.dll

Filesize
406KB

MD5
7a3e6ff4c1c5682f0e5d0ff1c83c76ed

SHA1
819e21b234e03de3185bad878c765e9028777144

SHA256
8a3a22396d135d8809eb942d7cf153526d8a9ea04fe1caf4e09881d3f228e86a

SHA512
b89a50454655c4a1b3b6877de16efe247a3b15742968b2dda34456f033f10f9319c83cef4d207ccec989619b4aff68166ef68d81079f1dfb8435fe8478d6ebf0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Console.dll

Filesize
28KB

MD5
2a368938d531e84fc4a6e334a2a90813

SHA1
cd5a423fbdc24943635a4258b589e7cf00ae3464

SHA256
c6303efe013f2b3d83d941e0b3281fc967279c790f4c84286b29f7b8682001c8

SHA512
554885323c3fb88d0ee0400d047b4f2c6ac4255cf2ff0bd7bb3f1b7a49884a3e1e7235162e8c8096f3a637fddcfa8c1cdbb27dc104f1c4d99cfe30d5047fd1ba

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Core.dll

Filesize
1.5MB

MD5
1af1d9b81812313748d7c94177709c4f

SHA1
39325a0aa5df43fc61e7a9a44ba4b091833638b9

SHA256
f6883540bd01ae64e399685fef2671ea3a6f21be283c54efc430d7f748da6427

SHA512
a64495249aa5bdbf4733c52b9e859227032b56be6fe2846562479ac57170c46d0971640e78a123b8df15c13e197426540caf91a6a6683e39e431ea8de9438b5e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Common.dll

Filesize
29KB

MD5
def64cd673f0893f734636407c724584

SHA1
a8e3eb80a3130556e540230c4880a3314a68a3e1

SHA256
930c14e9dc7705183a1240c3b0c6371c7e265cfc506777dcec29447e9eb3a43b

SHA512
0c3cdcc84c525ed0e9082822c30f925827ef2784b538ac66d8d8d5fce87ba7dd0fed5d15da86fff33ebdb2c1edb03937bdf135a67cc8fda967c6f9210c728586

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.DataSetExtensions.dll

Filesize
70KB

MD5
e10f14c50d80026b14d37104fcd4e5ea

SHA1
86b1b90c12340e6375cabeb6e991b4d311e4174d

SHA256
a89d15ab43dccdb36750f20e1e7419a7df8153a74abcb2244f3c049c0116e1e1

SHA512
392b47484a8ebaaace16aa0382f6a786eb1a98b9c017eb50acbb5033eab863297d1e51483102f6d24cdb29521d9eac2551d8e8ca3b16ddd6d0d4f0e7f75591ca

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.Design.dll

Filesize
1.0MB

MD5
ec5a3ff70a65ba2cd03f27bf6bf9c4bc

SHA1
3fcf121006f7fa6f1c808686a9abbbb04d0ffe75

SHA256
63722070925a77571c8a9ffdb38d9a6367312255f93ae0dd0a73ee9a1099f179

SHA512
c23edcaad4aa0f842d2f253944fa0b2e6b1612309e88c708fe07624b14208697a8e32bc7fa20340ea8cac3890cb1c491fd9db809afd8a1e5be694175c921bd34

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.dll

Filesize
3.8MB

MD5
01c06e4d4ccbd120709414cc0f9d86f1

SHA1
37e68f682b68d1992d9063b3906095a2bb060825

SHA256
8552e6fad46e18df643824b2a00fb6834122ed96fc32fa1e64ea7db7cf1e085e

SHA512
bfaba521a40e64f3aad83c1d9d9c061031d10d64079de79bfa27d53b39b044a794f39e19f23fa37c2f6d9ac3dfc30da9b0d19e2bd88bc0b0a04a26ecffe9231f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Linq.dll

Filesize
673KB

MD5
5218a1c2a2f47dadaf965ac9a8766e89

SHA1
8451077e166cc41196face12ea88d304d12a3003

SHA256
c50213c26cd74ed2aece48103de9c87323eca4e000fd8508013ea43426c969c7

SHA512
72551b68a7e5d38b814864fe66d3703c09cfe7bc39fd5385fab541778253219bdc02cba4e58aae4bb69b2adf08dc26b8ea9d03300a05787404484fef6c84488c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Client.dll

Filesize
434KB

MD5
7b627bdf0fddcb8c546422dff2f9a581

SHA1
e3c04f27a87bb0dba71ba71c8ff9dd11f179bf7a

SHA256
f2f88f474f87f0b7ce6bf6f94ee256403f918f89b982d728690384e38d07161d

SHA512
977e8dbf18a3be1271b991a13ad229c5c87cb8e7f73e1892be7294bf32e506d81e10d975a4eae872ec0a210338a2c246e92b3990f5eda42391589f32aa0ed0c3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Design.dll

Filesize
170KB

MD5
85393ed417393c4cd2fdd4c9470f4598

SHA1
2eb133531a2711edff8b9cefbdeba1af8cc7f443

SHA256
b56ef546d8f901f737b50ef04dd13f6daf8cf9801e0f4f236919d560ba323483

SHA512
4421a03ac620320f9d5be041e614feeaa257a20c88d0c36795283fc278e93d1c03d9f77ea64af2cd500812b04cdcd0199c96debc00158333b792652312a4ca29

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.dll

Filesize
657KB

MD5
21d458436448719ec95f46b0d2cb4516

SHA1
72ccf3eebfb88948a1bb22f2b3fdae4a8328e840

SHA256
ad1a8cf20dfc542f20e74aa267f6f75766082a031a5b02a98d972665a5f7fe7b

SHA512
ad473b2506454d044cb110a6853d64ededb946a6605605293aaa98cdd0c2406697f38e48cb0eef3ce5493d340e823af86fc2489756206d608a74e5d3c07022ef

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.SqlXml.dll

Filesize
717KB

MD5
3a9278a289c316d721cbe21c595606c5

SHA1
24646f24878f4ee70f408cef2f034b742570925a

SHA256
7182883371c85936910567e0acec8ac10b70ea3293f8949e1c396a887a8c8b8f

SHA512
1e8ac74609ce1ae9f5c1ec282f2418194c690961d9b6ca446f81d93475a23f0c5b583b1e6273f8d55a119e60eb4a0e045b209aec57fbe29567d4157c530f1d2e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Deployment.dll

Filesize
858KB

MD5
3c0a4fc3475a86a8712e96434f2da965

SHA1
c7d5d71abe03bd149e0cd6b9dd33e7e3051f4019

SHA256
3bedf4085d2936ca7745b795dafd78294cd6fe725b7f21069a433e534488e00e

SHA512
5315727269b161da5c15bf56fdb4a5fdf46d11b799c4be59196a8a2da12b37845d394eabefbf44a1a02ccd5be5e29428e0f72a4cf0c310c5e9b42364c92d6bb2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Design.dll

Filesize
4.8MB

MD5
3c263439ae56c51b2653933181a85800

SHA1
d8ff635b615d48a68b290eef8a4fcd176c97dadb

SHA256
fbcd32a09374f443b0c046b6f672a5f9ec30447ace532d66cb1623f5c421458a

SHA512
7553ae6f82bd4afe2bc0d9bd259a085ea5b4352f595b020850a036a292bc398fe65d495613e5456d6f3161f49378f90674aeb881ae8128ab8511d579deb27aaa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Device.dll

Filesize
62KB

MD5
fb6ca31b6fc1dad140c2742814718fa3

SHA1
4547a78ef2e3a5c819c153cd900db3136538f1fa

SHA256
951b6b5bf06d093a41b1989dd4166f2846bda106dea1e3480eb44464b485cc87

SHA512
47507fca54aabbefffbf65b655723c8cea15d7a3c8ac20ea28cb8053520db12ce162c09ac14321c95decab718d29078752f1864edbd04aa5a2de793861f32321

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Contracts.dll

Filesize
29KB

MD5
69078af7a223fbd5c9d934bc11c5f8f3

SHA1
fa8e7f6d5a234539227709de23d55691d1509e5a

SHA256
e02eb9c4a27f66a5a9beb71bac4c2997372182ae1ee92a703def8de4710c0743

SHA512
99c712ecf7195891dda3e816ce0c48b1e2fea5d8fd12c93f9b835be449f7369538d189e78bc6775a3432dd72c2314e547ef3026b7e70d482e6948f07dd41a5b2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Debug.dll

Filesize
28KB

MD5
f93c6a724a9bd79daf3884caeca48737

SHA1
2bf76e016a68d92bffe11dd219fa1c5af28f1044

SHA256
b395c3acbf9ba13fd77f3fbc7663f2d7bb6113b52e88664e8cb50ac37a933439

SHA512
197bdc63269a2c2a47c54adf20a5e781078c844b860ebc41c4f07a5517ecc0adbd13687e4aaa8748dffbd2b5c0b69e28f30d0ee37c00cf28825c0ca46378ca06

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.FileVersionInfo.dll

Filesize
28KB

MD5
b52fff4b7399ff88b55bd8f031f18d3e

SHA1
1dbd2042f4dc414f0c7aa0eb01faa13e509dbe22

SHA256
b976c4748e2eb81b62df3fcd339ad6d91d75fa534408886a10631c5376f7925d

SHA512
5626422acb2afbdaf5575cb7d60ad0e05257004fdcb61cc9b43e267bb477b67a08ed3017c88c4b6a8594f912f2c3f6ceb0a7641360cb7426b1c4a23b53b5b36a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Process.dll

Filesize
28KB

MD5
72bdb8b72ed224c93dec4d52e05d5c4e

SHA1
9fceb24d5bb8e3aa4cc0ddeb0f824c69c0dd1fde

SHA256
7dd4cf27d59201437465aed5a51a2abcc42f4c10b035604d94bfec1fca1eef15

SHA512
ce897f12581671e5ef199b3a5ce5d98f0ca81ac2fc1e8e96c9065146d03d6109d91db6a7f0198604edb70d822d82b01108b5d35e57c10c3aa3a9562a4a9e1835

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.StackTrace.dll

Filesize
28KB

MD5
2a5ee23fb5e1fe2b0f27dfc77e408985

SHA1
7931037967ffc88cf23873ffd424b580bb0b10e0

SHA256
452cf1422900fc3bd38acfd80bba4b194f0b1c8d31b716c77ed02bc6be49a8bb

SHA512
9bf1a92dcfafacd4f81871ad5710d8e07bdda696e265a6a0b30731568727f2ac279f3ad505191e984e4b0ca2a6d94945a6367364974f56d4dd3556fdd2ef03b0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TextWriterTraceListener.dll

Filesize
28KB

MD5
208164c8018599a8198d5fd14f487959

SHA1
b0c9b27c78858a7cc608d298d9ecd2bce6dae46e

SHA256
55d992c9b858f8ad8cadd030dc4484809a90a896c9a98d3b756bb3701f52ef3d

SHA512
c2887a8d9ab36dcb1af779102823479de7a2f88158844755e78651b6fbd192a29d22ec07c1b7c4182df81c14cc30b820e2b456afa9329b2b35a77f4c16aeb9aa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tools.dll

Filesize
28KB

MD5
bcd1d53fb9017834f9db2240fb8f81d7

SHA1
f64c41a082e3d54616c06c08a1a413eb271ae6c9

SHA256
19a7b5284f885da9bcbe962879763af890950a11101db6e4df6ca3e4494c6a05

SHA512
853b8213cab3011078a9353309d2a2f2fd33cd5d4044d46492f8cd3fa81bc12bd5c87b11a255a3a3c6da2c5d382797fcb208af098119250d262a5ee05c07b289

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TraceSource.dll

Filesize
28KB

MD5
60563f7519de54e2d43a66ce05636dac

SHA1
c48a4702df06f9b480ab1e543ea42bf97ccabaa2

SHA256
202a6741db82472431aae65be45928006371dc4e3659950080fc8a624bf7e11b

SHA512
6c5923640297df743b5af50a78b02ab5076d08fb91cd7f800f4f7d9d77605979c275facebce2a5028d338796a8c56e6457d7bce5682f26663d575aaa9c9aa6d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tracing.dll

Filesize
39KB

MD5
4b20fdf84d8ce625e5123b6790b11248

SHA1
5d1c704c1c14fd4621fdc746a75c248337e3269f

SHA256
bd666afb24a53132e998b4b4d1aba9e64d99b755cdd6546e0a14d55172140c34

SHA512
56f569a2c008c7968abfeaab5effbeaebf5fbc84814988fed860ee556f995b1cae290df16985d91327d7acacdf2f7884d361a8c816ea09fa61e2da973c1fe338

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.AccountManagement.dll

Filesize
289KB

MD5
48090502a1674c8ab701d9dc1a01ebb4

SHA1
b3f5f28d89fafcdf9ee6424f25aa8e1789e878d0

SHA256
1fbdda9ecd147dc7dd4c9d9d3984cccf207079b76b0474c8d124e1bed6945437

SHA512
4bccb4f6c315f88a9664dfb41d686bd57247ab282e4a7c5d2e3648aaa2218a753d7b65fdc24c795e6473ddd2b34b7d9a15ec219047c136c761a56ca0188a01ed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.Protocols.dll

Filesize
196KB

MD5
1148e23254c724f5e51475c5550bf4db

SHA1
5518089722afc99a9369eded9665a8209455b9d7

SHA256
4a6b975d54b206ac65c2dd79b26546032c3717403ce03daa576c61c988011719

SHA512
856fd94997b98d38441815297f8bda1a20c3af2c132e1d5d4f1e936f723c03eeedd1b10a0e05979f634af201a830c1e4b34c52d309b39e0bb591b3c382619881

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.dll

Filesize
413KB

MD5
f93826c1d01d98bd39ea9fc4bfa27e6d

SHA1
e92fb60bedce49b31d72788f266c34b282f26f6a

SHA256
6115fbdc185d7ceb56b0adc0a028516ddafede6dadde06d14e8c551bcd15f7e9

SHA512
078e2c1c15313bb6b0df18400979f3397a0c14c932ed86cc0e7efff3c73fd9fc6e0d23a5ac5163f4687022729aeda94746c0cd1988dd8f1e7e043b216e2030bb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Design.dll

Filesize
117KB

MD5
3ba314d55cd52217878723352d7d24c9

SHA1
49c72cad3fa2e1b6e1a55f804afa62299eefc0b7

SHA256
6a8f31a3ff43d6351d20364183242ba9db190f0e63e9f864b6aa1de588582b45

SHA512
da4edef5894655ce7394588902cb3b87460eff0b47477dbe1c1edee29971deadb1ce0a6f6e014810a6dfc6a9a4440de4577868ddc14bb3891efb028ca14715cd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Primitives.dll

Filesize
28KB

MD5
b22d67c5dcbc0b442b0bc7cb3aa7615c

SHA1
c5e3b9e9c3b202ddba1b3b861a22b6f6ebdd61d6

SHA256
e64cfba3d016030d7d290284e8dee15e4d1c1e8fb07e42b6f30a93cd7a5b39da

SHA512
fd1883ae48cedd46af6443eb7d01d4ec07d55468a2b790d5b08f81de13ef24aa8f80063ba5e574d4b7792b85b597bd0fc2a09a4874256527fccd0d1a2fe7d7db

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll

Filesize
586KB

MD5
c266e67fbc3782677c0226057b074b16

SHA1
ab4f5e9abe8034d9ab522717de625c3ba7aed8e3

SHA256
895f3731b320352fb2c50777fc38c291661b964b08c00926e2fad5dcffc9ea3f

SHA512
a142e0f7e0526ce28739f606e693b791a7aed957f0f5bf64cf57a0612a8cac4d0b78773be7a7867a9742edda71e57586990d850f302ce9a1a961991ca72acbe9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.Runtime.dll

Filesize
29KB

MD5
b980f53e9005132e9b98928aa49f9bf4

SHA1
19510a7101526c159f36ef2f66e5d0ce2bb697e5

SHA256
3fae463b41fb4972792628c2def31d6c012b4cce71d25a4840d04edbea2d08d0

SHA512
33846bd194be06ea1071c30114b9f7dbefa25b5b4d02eba8471895d47197ec6cc612e87537a5af994a8e44780614acbb36788d883ffc7aeaf0515e9e7225e7b4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.dll

Filesize
127KB

MD5
cf96a8619d9e311eb50e129e762753bf

SHA1
90cc4b656ffc091f8161a1bd20e8345ac3711826

SHA256
d7986aaa7d940043b457932a93f32dfd31b8f512f2b0f3cae491d23b3603c21d

SHA512
4281b54a30618d40d47be021d6dd2eac36ae374787961daf643e2277cda4d3b3296f526343a17cc9a5397928021339b36063365f985fdc01bc716af1afc5433a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Calendars.dll

Filesize
28KB

MD5
70097bebb0f624f480b3447fc385efab

SHA1
7af4c18e8488332968d14c48cdb6c11ea2f691ee

SHA256
cfeaaaadf6e555f0871f12b10cd51cc1dc7332bc952d050e25f2517639aaa2ad

SHA512
dd0d7161d4841a55d28822f72489186910c9b9a1e947d6b8f84a0c4820b17c2a7c120af4ced1282abd461e614c2007247b8136b45f731d67e370d8cdb8f9437a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Extensions.dll

Filesize
28KB

MD5
8a20b236b6b2490542a31d2c9afc7bfb

SHA1
e1f3f782bb74dfa6e766526c161f2dfffbe7aa99

SHA256
af2919d243170db167fd17e7d471e7b25e016c9f93f0633a08b39f970f207588

SHA512
31f3d68752e98641d86de088368654ccbd74e47f946d3fca52693f25cec7496f23a84fe559a30dcdfd0fccf68e7f528f9603d3b384245907af1a5134d17e69e1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.dll

Filesize
28KB

MD5
3ab3b3d99152394c8b4d92cc768f32d7

SHA1
068f747d11fe40781eb1658a274a0ff659070917

SHA256
5909418960aa073162fd33c1be46ae3bee762f1d4522ef8917d8c264e7d33b62

SHA512
c9edf740cbb1203177885e9c2ee3526730d6c8d0b3fc246445dac700e8285e46cd64e0512129f161fa0031f865753d4a2dae0495c5b711e872fb4b8284f7a593

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.FileSystem.dll

Filesize
32KB

MD5
725590e5bb82d555c32df3c3cffa6831

SHA1
8d09f3c3146e8c5694a8015035ea4bfc51fac2d6

SHA256
e56d5ad011cf5778cdfc0e74fbf78e6e7396c720bfd76d15cd5c225cb243e2bf

SHA512
3a433691cde6ec5927e7804e9fb52f6a46ce9a49033f050d5cdf711a7fad85edc43c7360fbc9d0632e73d830c07c51f4690ae64b0ca1e37ef548b5859801402e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.ZipFile.dll

Filesize
28KB

MD5
584a575be14729a1ab012cff26258783

SHA1
837a60fb4298c10a0dc03176cb01c2a4ccc7a083

SHA256
c344c80d2a9bdccac8340de5bb29dda721ade3fecf6637dd06649955be75b077

SHA512
edfc78f869a282550361ff5795051eb9c651ec0370ba3b7338c7d1d4c590e5a056375b6026460aa101ae1291258765a28096342eb1d1b28d49c0331787eb8f3c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.dll

Filesize
70KB

MD5
71ba31f537b9a8c7ffa886519e1ace7c

SHA1
b0ab7dd42e6bcd46b82deb75a092042e08e20c4d

SHA256
0391b010cb595eb9ca95c567a6350976d4062571666742c76ae4b08739d34431

SHA512
b459bf9c5c53444ea47a70cfeccce7fd8a5393c11e799b783147ac0f65a5467360d6a94ad89c76a05b1446e10b93ccde86be71b7147912f846f12f5cf0108738

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.DriveInfo.dll

Filesize
28KB

MD5
5778c2a0cdb96930fa89e6a5427b25ed

SHA1
502edfa7c2a4fbbb1b8daaabbadfc955a1253381

SHA256
5600b5b069d3d5b9339c6d5fb664dd0ba829ac48dc2f9822f418b19af7487eb6

SHA512
47d72fae459894557c684d4cfeff40e699a01d3261b049c0ebf35e7977a98f470990a455a02925df294a8e2fe29340f7524d7581928a3ab6b819a13943c840dd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Primitives.dll

Filesize
28KB

MD5
4e6b75922d519d538fec053372c09472

SHA1
3a3f6bc9ff20af6559b80c0d5250c6592e1608f2

SHA256
f1f5e0150e310361471e95531edfa239d759dbefc8d845c8b05fb15f7a7abd69

SHA512
26446ec4bc78034f2475727c2ac1cd42a660234f647b5abc29f5d336177a05ac785257d4f54895284abfdb61781c51dd2e1b2abe8498d49a73b13cea801eaac9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Watcher.dll

Filesize
28KB

MD5
d65f0c6d5f16a4b5a3adbc65e5fcaf01

SHA1
8c124db8fb20274a583557b773d3b87af080e706

SHA256
73bd1b69163587e52581a7f9cb635f29ebf322cfbbbef1b4a3e5303395eab7e9

SHA512
f8973791c65c2f8eff33cb2dafe6804e8c3610cc83ab469fc02a203642d8a4d5398b6678c709592ffd456b33a8d3402de8ec7653b72ce9fbb009d5baebf2b95f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.dll

Filesize
28KB

MD5
1d9f8111b3acf205903473aa70e51364

SHA1
ea8b5e2409b6a42b821302cfe69801cd1e97bef5

SHA256
532b9d1609f31144e517cb8b1c525b02f2b46e6f1a34028ac38f6e62efaf2711

SHA512
a923ee58261ebfdc2021fdbd52d26576f2aeb12dd338e52631381e5fa6a59f6e30fd6d73080e42d3ca3349fc5e1077b7ac3d949de0d8ca73fc9caf9a155e0003

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.IsolatedStorage.dll

Filesize
28KB

MD5
40f25e6b03da4411a1235fdc2a7631ec

SHA1
0e4529ea3290559e47f3d0b6e9b01a3ab170d643

SHA256
926deb3ea448bea550ad7dfb541eb755873bb1e077e6bd9f203f5390fec02196

SHA512
225427ce978dc33014de4ea04979e6734dc70ab2283563456ef10d00c03140614de412bb7b922156a0906bb36b9e15f99d4cf0c3ecaa274e7ea0926631be5968

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Log.dll

Filesize
130KB

MD5
622390459a7b16f5209029fd39c85b7d

SHA1
6041c01d92afb2812e91743a80129710e981b521

SHA256
8f30db5aca0f40099a358997b4e7022d6ae6127c56acea8780880419a347e300

SHA512
28ab7f09de56b92a6f00aaae6e4dfd168adedcf4a49f042d6d31062f54f6f6da663d85ba8e1d3a1bfe28f73d6e17456e74e5062682275a3e9ee63c0c0b177899

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.MemoryMappedFiles.dll

Filesize
28KB

MD5
a48de95c5cb28d235d5a4882400a9788

SHA1
7fcc931b3b5177f691680979d805c92aa85c53c8

SHA256
f64a91f1cba61a4bf5c2e1d0237060e7afedc9cdf76ef0ee166653a4f0d00bcc

SHA512
934b75e591538476602f4b4075051daf2c8abd3486cd557d6e872c6ceb7bf77e3343d74d5ce98d940795c3db6137f4508ff1d51bc930aef3077d17b2360e10ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Pipes.dll

Filesize
28KB

MD5
b346109da91b84368a889ae8830e61ab

SHA1
301fcccd41ea4a9afddd3370c67919901f881e7e

SHA256
f9264edf9aa028105b473d2f85bad993508f3340aee26c8090fab890f89bb266

SHA512
7b9489dd9b27e8fbed2524653cc104812fafdaebd68f06263fdb8093c43c731ed9a038dc62d5f3c6227147a378dc68069b4c2b75fbf72751487e7078120b9bec

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.UnmanagedMemoryStream.dll

Filesize
28KB

MD5
4daaa94d108e2f1e25742352f3aea2a1

SHA1
4e07db0620fa9dbbc1fe014fd29e3b7c28592afe

SHA256
218d8479054b23bc10ea909e85343081262725cb8d794cb78cf0224175cf4167

SHA512
e82a4e3cbfaa7287d73f1045771d97a603dddedd9f7d5c738496d944c17456f1ecd301d0579aafcdd07bc4984054db4f1f925f860b65b1e7ba0381636a9245f0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.dll

Filesize
28KB

MD5
4bbb097db2414bf29c97436d1d461785

SHA1
c7ffa0969da64984845dd0c3010465ef414b59b7

SHA256
b9eddae98615abb9b8f5e5f4f665867070d5c3890386ac84494b505ea6c52203

SHA512
f92b4f684897057620a1c4cbd385fc77e267b02304009e72597376991c7aa2f6a4c180eebf438677bfa83bbdd4f709d6b2b0bb6fc16862b27fbe808445c2da3d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Selectors.dll

Filesize
141KB

MD5
d0da258c75785ed9449baf5eaa34cd9e

SHA1
77c7eb34dbac7d5bb697226020bb0227bb1b2be0

SHA256
d5d1eeeb25a6728a456df90f50aee63c56b06609513109d24cd42921d1a194dd

SHA512
cbdc916d412f7a0908fded9f050acc02905d8ef69811d7c7a60cfb7dc7a6c9523fb4075e730a619aad58f98286ed433b42ff6451a86fec7f63d748b373a74959

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Services.dll

Filesize
193KB

MD5
e16b83cb714168c2311b9653526e6de2

SHA1
34b184182cee0fb0f3ad7cedf87708ec8d02a0d8

SHA256
6ee646215c6d234ef8626ec853b5d7c5b0e2114ed31513ec105374920988bf1a

SHA512
837f250a35eb0bc5e483d56b9c056af9d8847a8498b2ea1b8be1cee0a7b5da773cadeec63668cc10d40081612fa2dd7ba5434b44f1439ed18cc34acec14bf696

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.dll

Filesize
1.0MB

MD5
c95103938efa3ffb6e090f5bc8006d92

SHA1
f85590b00d0f60e04ffad81ad2cb18fdd60061f9

SHA256
6089c6fa9aabba89bb7675a6ea68f99ad8b83c25a854097cde8d6ac3a6c469e5

SHA512
28c62999a06442b45cdd49859dbc62404af1700bc780c10b3ee14c8ebb847f211929f45dc1b8e9b5f9b20d9189e7b38a5393a4a74663bf1f2d1839d2d38a8e8d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Expressions.dll

Filesize
29KB

MD5
234ba7caddb72652c24813778b901445

SHA1
c350e4f3a33b953f7a405d3f803c5213ecde94f5

SHA256
a4c762e795845af5977f2f888d78c27fc3fe8f27e54e9c30ab7676ad485db194

SHA512
57661c58fa8d88b93c8d01b654f93b70e1652a97eb62c8edbd11c487c629926cdba0fb6934b6666569e367dd15f689dd0b707ee4d9f27829482b17d0bb6d87a8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Parallel.dll

Filesize
28KB

MD5
1136a507379ce8b42447f74e175bd11e

SHA1
73c091e171a5bf859df0f5b5767f7134a89b9a3e

SHA256
a924d661912422efd7ea12a46d3141c527e3ff9861e35b39edc6aba947b80ba6

SHA512
1890bcff5c29bd834499e543097e9e3cac6041e4ac6bdb3cef085c3ec8583d12c7a685a345747ac862abe6bb6f7b45094c1b8ba1b058543ae23b030eab71d1e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Queryable.dll

Filesize
28KB

MD5
0dfafc83c5ce45196401494fad4bdb21

SHA1
1843f80521cfa77f3b814ad307a44611d4f08845

SHA256
775b1c430b0ba946aa1e52708adae37886518d3fd0d10af550220b74fcfdc8f0

SHA512
45dff9533843b133f82ca356586b591f39dafa8df2758c266c3f4e96f1e3f19e7b52678133a00166ba9024371b868a53795bf3ed731149630e3f1ccdf3029789

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.dll

Filesize
28KB

MD5
50e5786d3d88a975a3715150cabf24ff

SHA1
b6997a3ef2cd6e817ab41a97577e4c90351af3e0

SHA256
0bfee32784833d8afbcfe61ac33af83abd10bcaffa297d7a457c2d1e9c2e331e

SHA512
5a0f156af10e2146c678afb8d49bde66bb364d44665a67a7f01fef7ff4e4ba701f1c5a3ed86b098d18848778fe9e6cab2ff5113a5500c5e2ea86c3fcacb6fe81

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.Instrumentation.dll

Filesize
142KB

MD5
17382ecd6415a98ed5af05c6d350b2af

SHA1
a8dd9a6395bf003a64d978dbf391f5ddcd026d6f

SHA256
20486aaaa25e2c02d94aaf5fa06379962e8d4b74a033c7e3e1cb2fbe96a883c1

SHA512
05619e4735807f39f9dd0dd02de53f8463517914f4902867dedf9930e7ddafccd55fdb9edb338925245c6be4300370285a09d18a039f93ab58da73645f1e2ded

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.dll

Filesize
405KB

MD5
df7561dfc1911b4a73ba9fe853774622

SHA1
e9d4efc6bfe0fd33f7138b1de252382c4f5534d4

SHA256
f394e5df62d23aa9f63f3132059d7cedb44e4ec8a88a51d96aff612431fe176a

SHA512
d9262ff7069699658fbd4d522daf4ef94f130bc5ab4c026b98acfaa7913ce6a3fa26ac5bb4caa2bbe25d132fc7dbe6ad3897fd10ee7641601b36062276095633

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Messaging.dll

Filesize
271KB

MD5
c2e81df27033dd21134da25c4cf218a0

SHA1
0270cee3f03f409ee7765a0695dcdcdb33b53490

SHA256
f60dd3153cb74a0f476d5fbabe2069d1425c1c0a071fecd03b8fca30b382f1e6

SHA512
ab80d07bd10b3bda74e73c9a0ae95c41fe46a49e4c4759b0d16e32008a2eea0d40ad79c4bcef34ede986f2a5bdbb9ba22f01f0f1599bd28493457bcb87924dd2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.Rtc.dll

Filesize
28KB

MD5
cea7d5a40887a37663aedf4086842428

SHA1
48b1cb4cfbdcbd98a908b0351b35668be2c34279

SHA256
a1f066f5258d868b39fbb368af60ec927c90c84f76f219dba0e17843e9287841

SHA512
ed74f747f561182b93e379de6d2f6eece0ba6c177ed3845f3f3c7a8e8f85fdff14b31bf5cadbb5f1a2b977c75ead5358ed6b044b10805d9b8661c30de41095ab

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.WebRequest.dll

Filesize
49KB

MD5
422f60fd8b7e62db88c05ada4fa10a97

SHA1
18fce06213f946c79cf0575bc73aa40bc651e4d3

SHA256
56aa77421cb107f1ed3dcea65463247ad3a59d1fcd452593f309f3555e1352c6

SHA512
d53a7603ec466539bf2dfbfed2178075ba9d8178780c8e36522cfcfc930f800ffd87d73ae92bfcebd2a76990e7545b3d0f92f6d50e763235fad863bb2c666785

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.dll

Filesize
199KB

MD5
6b8e0e3be561458c61b7b26bfdb2c3dc

SHA1
b89b4ac6f21cdf294f5ca99c4b5c45683c3a30df

SHA256
a0bef4bd9206db089a8f2209a256336c176b5e54e9601e9fc0015c7f85776b89

SHA512
e53df22703dc3ea5a7d03878595bf128d18800397cc18c2b6bb533c23217dee3e8ce1b9a7d0c278fd3fe8ca0ac922770d2d4f0aa90c4bd71064bce8a1aed2761

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NameResolution.dll

Filesize
28KB

MD5
0c955ba91d67d8ded288266aeb189deb

SHA1
9bb9b067bb79162105f08d3339a022797baf92cc

SHA256
af07d6dd7251e5e67c1e9305d97f93ac5165afb1f58477599c8407abf0cfdebe

SHA512
c2c1cfa71cd692ee67181428b05d7cbb199046fedcd6e33481e73c208f49df91bac87ab67f1c4a1a8cecb3ccec2bdba7e2a2fbb771cc2706d0f2caf202f10012

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NetworkInformation.dll

Filesize
29KB

MD5
e4bd59169e3337d7faf96c191e14d366

SHA1
4bb06ff8b8ddfbc6449f4e1b6f3a2734b82c1215

SHA256
d4e0118789f81f356056ce051f09897096edd7ae4ac0e39856fedfaeb8672a89

SHA512
949f363e03142525b28f7016b60e2d6729af493c8a4f48119ed39178bce9df60644aaeb9d4cdaeab8f8d7f000d21f0504f9df61382877f7fce820cdb7f4bacb6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Ping.dll

Filesize
28KB

MD5
f198360e51983511b8719c1a171bfbf7

SHA1
e0d4a26986accad981f03f13a5caf584530ad39a

SHA256
d910f75046efdd0760c887ad346f1a220f047f177d1c71666abb24fece89bab9

SHA512
a61c3593390df97225f21709bee8c7474d9078eb779687e8064933aa9e5de72049646e4fc001954c9fb5817e5ce535145bcbc57b528780c4f875e65c9f77b16b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Primitives.dll

Filesize
29KB

MD5
19ea1e6aeebd7c20fb8812ee4cf353f4

SHA1
a832ddb4ea08e6f91aa12b1e105deef323cdf0fa

SHA256
fd0b09dd4d5a3468d596776d12328cedb7fcbdef9dba1473bea94a576cc6d739

SHA512
0050e8ac578082b36da287ad6e4dbc1fbe629d4f49cb9121546aa7f9ba06fad2d347ca2624c0b2ebb4fbb3bc5b15e3235ce9741ea561085b2b894d8803fa1769

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Requests.dll

Filesize
28KB

MD5
6e65f69e9e3d3d254e9a671b4cc7079c

SHA1
e22d39276c09a5f6f24c931397e6515c0a1691b4

SHA256
401d202f30d2e131a4f86841ab599e34aceb6b7fb4d23b36e56baa4412a7e458

SHA512
2a0b9b9bf18ecc24192328ccfc654d4626e4ea50344a17ebc64394c9ff0198732c0d9f355f5825514accf387ce482e0a82fe3453863d429bad2863e61e0ddab1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Security.dll

Filesize
28KB

MD5
8211b7c8a985a4de97f79c7b157679a1

SHA1
88bc2421bc04c3e4a6c3513810a109c7103df319

SHA256
ee5b391b11208bc299ba577e281f1089d92271b1e4d42b82d9aa421f5ab69f4c

SHA512
df52f87383b79f278a49abc106d5bea7bcd55f1f7b3e9aaa9edaab57393cc26cd135bf1f414df26e03c5a311fd1276d35da96a1338f39fcc3085e951368cf729

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Sockets.dll

Filesize
29KB

MD5
1f6abd5739a6eec27cc3a6fc9eb2ca4a

SHA1
3c3fe15ec92ca5ec938bbf5c86c8eb14e4114c11

SHA256
2236b7ba5e6c3907c8812663d245c8111a3f97b984a4d1f7b5b2ee5a2df34425

SHA512
2c482e298506a712eb7ee058515885bf47834b786ea6babf95530225d5bbebc04a4838b0352a940261f8e06a6895d9f9113fa647087027bc54ff647b0796d489

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebHeaderCollection.dll

Filesize
28KB

MD5
4633f7b7cf1c45a51d709bdbd05e77d6

SHA1
20bd06f5c3edb4414cf060086dbdca408095eb6f

SHA256
409d32b31d74c72090ca9768d5f945511b48b982fa3751f9a153e9878f9b209c

SHA512
5855ef9ea768ed2f6d8bae3dd703e24f138eda068e8c024fadf0d0c71857dcf4088f1505ad5f39e9ca70e777f0a150378aa01415b991a48af5ecfcdc33d0a5e9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.Client.dll

Filesize
28KB

MD5
9187266e9946f49e4a0976cf65bbfb3e

SHA1
b2363e3330cba3bea72b8f962a0d5a86b922196a

SHA256
420ac305eed4d486872eeba716d99ee74265fce5964755b336fcbec8c201c41f

SHA512
0af3ffdac75b682e8b07ae557c71bbd6922e8696fc8498beaa9f663df38a0c960424a95501ed3c22f93d2361b79d781dc5e066ede048536f87ee237e52af4242

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.dll

Filesize
28KB

MD5
65ba876a983699d079cfd0a002e6d207

SHA1
4157d3fef26ab71db74151a45d337b7b14c9eb03

SHA256
bdd0e4c21ffccf6a444f623c20e02e249b43ef1cea529ba7f1cc7e2b4ed2415c

SHA512
42aa06105634542dec2e56dca407ef17bca8cc9034ae62816d7a5e60bfbc1ce6e29f01737c5a7bb8f20ee3dd227dd612b4e5d0f7fd5c1ca73e39926d56dc919e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.dll

Filesize
251KB

MD5
0eda8f81a64c5dc4726181cab527f2da

SHA1
518c1c069916e9b9924eff0edc6bc6c27a099530

SHA256
cb46adc59ecf7274f3ca42940ec2a563396bae3fe84b287179566b7f28e8cb35

SHA512
a7b94353686538f20738a0ec06cc66609175f22e528752b8755272b34a54d9f7b44c8057a0df89e5297e293a24049e9ad3c9979aad02643632f6e51dacc1864a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.Vectors.dll

Filesize
30KB

MD5
70162d38d1af21a1a22d9a66b839c3f1

SHA1
16e494538c684598b709f6c40c79bf91913ddbb4

SHA256
eba63de3d68761f021c722c239a041c802d84c67ef17c79e0f418553a543c1d5

SHA512
eeb820e8551773dd186e500bc05e18ee2df617c866bb67703122425849af2ee7ca4b551482150b1d61e69d0a3843ac1a1ff634d8bf52e9f7f8b22851f433ff6f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.dll

Filesize
135KB

MD5
2422a2cd88109036901d385d7611fcf1

SHA1
1df09791646b12f6dd1f831227f01db082316559

SHA256
a380ee74a9a7c56900410ad0c51f00aeb897923e89fe7109aa171e7dfb4f41dc

SHA512
434ef5caf828da795d75212c9a4f53685002f49c2f958569ed77806763629a119c84e81e6f06910c75f3a70759b7ff857ff13a0e6f1bf16bf431df7e555af439

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ObjectModel.dll

Filesize
29KB

MD5
f82529ceda9cb5fb8212e1f02c86ab54

SHA1
a76c40adb1b60673c4cda597e2c4c40c432f4754

SHA256
c107fe77dcca07fb6c7db817c9ad6902a1ef4daf9970959c52ff6953c674ad70

SHA512
2cfa5622121b20da2c06ad4e90d677dcf20cc86162778aa131e9153f828152f8995e3e0a24afd3fdd839fe2f1f8a023646ae32c846f7fd1139b3a999cca010fb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.ILGeneration.dll

Filesize
28KB

MD5
483ee006fe79006ae9d3f36772ae207c

SHA1
752c92ac5632e7ee0afebcd7253346bd09b89c81

SHA256
adc57d521294561df00d3917fd7b82f516727c24880bde030d132cc5591cc56e

SHA512
d099cfc36438f78c2b0c237dc57dc42d1974b11c4c519a8bfcf07098f959405395e404463df456d46c4703d82da30501bcca93354968f5c98819c14b8d1439cd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.Lightweight.dll

Filesize
28KB

MD5
8acf88999d7b5620fcb976233275d424

SHA1
8c4fe334a42099e1b77f731adbb97ec18f661ea6

SHA256
17e4930c106d0ea62df523163853cee0fc84dd38d2e1b1f54cce03c685d7cd94

SHA512
8bcb461a8d825f7b210fea82ed5b423b59430f66be71a0e21e3ba94bda9dee037152b5fd2b0b9dba5e8b9596699b7afb736425837262ae8f7d5833ec9ccecf98

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.dll

Filesize
28KB

MD5
63ff8bf4209027c69a294c8a9d312bb6

SHA1
baf5ffdb13f12db6a1e8ffe41eeab5e7936afa82

SHA256
c05c02fa4e5be3b9ec8ed4fe48994c50f17de732efe5bbcfa9e3477f4569efd7

SHA512
a6d6cfeb939ce84763ba28e65cdcebf4b5ca30f9eb3b6fa027897a06834a368bcec157b7420f4843dcc23b17f435e3b2d391cf030e23738f38646ecd2e9b7b42

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Extensions.dll

Filesize
28KB

MD5
c42d1203f8dca650d960efa59de0b114

SHA1
7d200af7630eedd8ee60f7a547f4f24c2a72d4b5

SHA256
593e9e3f4032ad4a60165c1b3a1d32d83608839b5a9a11de034e8e08dcfe08a3

SHA512
f50d40b087a206e71f8a9b74f68082bc537bdacdb74c636bbaf4ab397e75532081fdff433c360b8bb93b429caba731dd4353b1fe8cd6f2273281e69fa03d50a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Primitives.dll

Filesize
28KB

MD5
45f939a2798a3967426e2c2e7921c03e

SHA1
12c930470ffaab5e0640ce99bcb866267d84562c

SHA256
34b84a885d6c94bea95875a265e9baed514da69e6250c5b3547181add53bc0ff

SHA512
f7d9a37a4eb1deba4d97a87b88aee2e6d4819b1acc8a4718b088097e5b34b7907a848a1e32c9b37aa78940a739eb7515eb6c75b8a8b5e48a4d010ba2e11e1ee2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.context.dll

Filesize
105KB

MD5
67efa04daaec10149ea2b1cbdc0ce2c9

SHA1
43070df460d51d8b3b05a41ff660ee42174d4648

SHA256
b8bf0ac64dc9e30fefb8d75f3af18f7485bbf9de7dbbfcff184bc2a63a2db78b

SHA512
8d6185b481db91e0eeeb1eae437760a7372222defb7754d0174ed713b11ac322c3b6e76b0496474f2fd890e1cc745c3386182147bd905214080e941edd7be6ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.dll

Filesize
29KB

MD5
f47a717a1325652b64dcbd67d2ea3b5c

SHA1
b510e0aa5c364ea7fd950ce67c00fc8a0eee31b9

SHA256
f75135b11d9826de70d743ddac21cbde5587e581d6ad0d69dbc54091c580f9db

SHA512
77eb01e088ada1787de6399e74094c6de468d6486c1c7bf92b36ceec85c233261563ef0fc6ccdc2ee34f8828857ee6126151a8f9f0269c81de1c4d02881ac12d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Reader.dll

Filesize
28KB

MD5
afe835d96ef3e55b7dd5bf607c0b4897

SHA1
2d640664ce7bff68ca0c11b1fbca5c3b90879af7

SHA256
a5cdb69d7eba10c62badb777421c632feba469e2354674fadfb6a75cfa233641

SHA512
5be0ef14de74a146edc0de3aa8c28af2b22286a6af898e5e98821dadd22a410f6b3b7aab9e1cb7885f7267c3d6033de8695fc6899afa9c7b147cd225c44de0b1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.ResourceManager.dll

Filesize
28KB

MD5
8898e754bdbdb1b67ad47d2643e8a08e

SHA1
addbb87ca443da3a2af22f645ad01e0c74a6bfc8

SHA256
6961883aa65636c08f1c533584618fd1bbff1abebbff4dda8a9488e9fcd58a68

SHA512
b0b76cabb7808b4030ebc798c9c984eb5676cb5b9c78b5771bc5ee00e8bdf528c4657970072f8f178578ecab8c62e7c2cb2e5e2eec71c7fb9a21a29653f4aea9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Writer.dll

Filesize
28KB

MD5
2a31bf63f39c5b3dd6a9ad52e515d2f2

SHA1
dec8415a926085e215e41b41bb04e907afad0480

SHA256
0dccdb7d70536217ea2fbea894040cb7a541d8477eb015df21b3f31a9a5b441b

SHA512
b1b9827a0b8e1eedb08ab9a8b2af2ab79ff655ff282308ea774391c28cf4347a60fbf8362154be67c07ca6b1a51b73e467c2bba253891afc6595c067cc475e4c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Caching.dll

Filesize
107KB

MD5
f7b2e2ca06dd894622d1ed2e5c159260

SHA1
d5ccaa94291172a23370162efe6de18a65fa9295

SHA256
a3781b58e584c4b162685909b20b203fc175fdad3f5adb4b5c5479092dfd5e39

SHA512
a595364686d4c6419c5db0f308b9d70878b295c93b0864cc5476ac442b057431dc44a7ecc51c93e7e3be91c78f3b35788632d6c2e7eba2065aa35ca28ee06192

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.CompilerServices.VisualC.dll

Filesize
28KB

MD5
c0e052cf5d5eed17982ec3fa05f81bac

SHA1
3c19476526975200a4898aa1e3ab9ad86687b3a1

SHA256
b2a808f7402e418dd77be1dc036827759cede4f62a9b4a848de0bd2df1f977c5

SHA512
c13d1b70fc8946beb3a453401082bcb1378e2b5c2e163d1d7b91c2013e2a4449a03132947f21e793ceab317a3f1263a5826282df6eae4a758f0e872f7b3991d9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.DurableInstancing.dll

Filesize
168KB

MD5
7628960bd1ce2d69ac574c532563d946

SHA1
d6e1ba94d654fdb45de102ee38124d322cf58ee7

SHA256
eda7812046e8d22ead1b6f09dc70584a8b60384aa9e06ff473ce80ad0be96434

SHA512
f577aab4af49f14343c77b0d1fd75937227844fede1a805b6c70cfc600dba844fa536e9f431e547438432fca9bc7113270bd8b7ce921f737628a600765e57a06

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Extensions.dll

Filesize
28KB

MD5
64060bd02d3b74159d775f4c4ae1e194

SHA1
f543aa47c911188e2be3516605bc358c498a4476

SHA256
e89a816c5058d3e565242aaa2b2c8d42dfa41f1e5dee3ced8faea5ea2ff79418

SHA512
24a2c7bb56fbc1e3bc897b112c44a42789a4de56f2ba1800eb5ee9856cd55d7fe48f65165539d54d0fff2ecd1f1b27f188d406af32aa2abe20e1f3a4b7e4fa7e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Handles.dll

Filesize
28KB

MD5
31917af053b266c1d555374698fe2cf6

SHA1
2d14ba66428dedea123e670aa3abc20a04779efb

SHA256
65de78e2deba1f160f880387d452450c619d45c3a8bdc7a52cc3da537bcf591b

SHA512
cb3909f9d4767af3e8154f377af9664027a7afd8b2aaf39a63b4d0ddc20b0d33e29db64ea613a6324d5d69fbb900f50548ce22807591316480c7f914243dc642

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.RuntimeInformation.dll

Filesize
28KB

MD5
8382796e756a9010171f32b1c9f5405a

SHA1
7353af324d1491258a2bd5681b959d70d55b98c7

SHA256
51653ed971a368e483d78b5c414c8557b7c14a3d6482bd975f578ed6755b62ad

SHA512
73740c84a0dc23f4fda2e753c2d1e447ffee59fbb018788b34299f3aab52b88fd82e1b18987ffe77e0d0a6971181a3b935df354d58484d7d20b9c1c6503a2366

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.WindowsRuntime.dll

Filesize
28KB

MD5
49d1ab1cec601dce222e9c5f2e4f3446

SHA1
968f940bbfb4928ed56c7a3e2dff58e6c4704715

SHA256
256efe195a532cb140a73f315fd5ccffba96a7cbacafdde91f4b3d613bab432c

SHA512
a987d67d10c65028e1135842ca8aebae41000b2423e0995856e47cd6d08e9db3c4987ffdc393ca9c7662182ad5f5f61c00cc380a018c60ba0d72189f01d26ceb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.dll

Filesize
31KB

MD5
97ee172f1f4dbea7ab038fe5b4a4b216

SHA1
6bf9efd1130faa87433cc3b176b3457d4d754238

SHA256
6aa00159ebb667f005ec10e5d977bba3c40797bfa736e7618e1d6dc8b15f49cc

SHA512
1833fc8f6900c0f011c9747eced8532c708c384351a6a205017923a74a4e1ae9a26b6bda6d77769bdc4f48755f7cea1551bb790afcf74913cbdca69e355084bf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Numerics.dll

Filesize
28KB

MD5
6d7852ea286ed0bdec3fe15c86e6e80a

SHA1
00c19a6ee74b7570bbbe9bcf0c2bdc42dfc52b80

SHA256
512cfc7066a8e4d2fdad8ea1a18ca758a9f630ca12ba440d584cc315a29a498f

SHA512
a47ccc1dae802e9da4522556dadadd19a05cd382ad40e688fa6758efa9185ab16018b4b09d9684a77af4cd5d34ca4fa039e4b26febb3e2b4d5edb94f95c5c89b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Remoting.dll

Filesize
339KB

MD5
4014dc0b4a58d55f4c139c628444311e

SHA1
3d8c8d6883972501925bae59b20e44d9552901ef

SHA256
2d93ce26730731ba61920d8201d9341c5be4734df266197d7d8920053e12c864

SHA512
6e00344f96ab007d6f0bba50b7b95d62a848a03e6953b32c2153908ddc865e9cc283097b56486c4df18f11039744c49c38c490228fc4fa20aec94c0da68d158c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll

Filesize
138KB

MD5
ead55734ef36641cbece39142331c303

SHA1
bd27118d05786a482d62cae9468251a393db0941

SHA256
1aaf97641061e5c427eca471cef3395f439c63e996a681b7fbb5b36c3a4e9b72

SHA512
ac1a43346bb2b9c9fe4ac7d75e162d188fad785ab62f2b3dfe50b12ca043cbd3aabcfbe01036ca2b70c06ff6295334aaa740e15e9ef5df8f0cab17ad26a1e7a8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.dll

Filesize
28KB

MD5
744daa153d9a8bf60ed0ca1858416efa

SHA1
c0af73e3e0fab12d5bd42be074b03693b28d2e1b

SHA256
6b878efbd9a453e1d0bd017f9d874d7c9566c69ce81354ec0ca0d22fdc128790

SHA512
b9b163fae462c50c6b948a5a8bfcda948ca439bf45a2ec6954086c204c4bf6356bffec03c04fed437edb96bd90e80c0acb94ba69102edce8df1a840723e09273

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll

Filesize
28KB

MD5
34a32e3542fcad1312e6af3bd416b345

SHA1
4521136cd26bacf262a3dd016933a44cba432889

SHA256
a053957d549f3aec269dc3ec2d07a4cf4262c0be7c4ca9a2d8890ba251a4a947

SHA512
d614cb0a58524852dbfed04460d18cbd67451039f4e5ef3ce1084f56649b02b1660bcc8971bf75c564f0494066dc188a711f0951c15b81670c7224d332bd8ba3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll

Filesize
28KB

MD5
2d57b3241d491af244a8882c3a678461

SHA1
c6cf5a02dd9794d4bf4513e1e63d081bfe304283

SHA256
83523e83146826591a2c35cfdf08d01106c48efca9e8772e9aec9dfca9a2a6ee

SHA512
dcfd775fe74baaf46b30e55e0aee67c3fe373392627f7fa80e3e7e5db6035a4898a386a3cbb0d043c69dcb8efe9ffdd17b7d8a0a72faae083135752f53ab2063

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll

Filesize
29KB

MD5
329dbd985f2c7016ba45fd3f86b493a6

SHA1
2dea8f783c44d41ac21660f6da4b6ae23347ab90

SHA256
22bc740819e6ce8aa6a50175637680c20c4dd3fcc063e901fcda336be00f91a3

SHA512
94814fd157bf7c11b797db91bcd4cad45219eb833d8b87fcf0c46f92fd26eca45be5bd70871eda81ca4ba9a12051840c2f89fd15e2d481af724be236408a2558

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll

Filesize
1.0MB

MD5
e50bb98ea1f54cc305e7f15c60de98bd

SHA1
4220b3c2989b8b2964ea9f2c2129d09ebc799740

SHA256
4373e9fb7d4d8c9fa19186e01198ac9206c06b834c621584793d7ba476974d39

SHA512
5c86d51df2c36730a4d101783faa70dacaa150e9a914bc2d43585256153de6e24c7a58331c11a6ab526d0c4bdaa55945b494981a13f177e68f9cf8f31d419270

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.dll

Filesize
36KB

MD5
a89309e267c598d6ad3c5b1f95a4b3ed

SHA1
2fdc7c1eaf2eafbdd3fdf8e82a51d7a8ee5a31a7

SHA256
d4c2a9665cfea87a94931020fd849434e5d72398fc60520e1eebf881efa4de29

SHA512
dd20fce8d15250341810e6f801157c153db9996cb4e48ce67a9ce5f96b4b4cfac17c9f3a7198b41e35778e86f4bb863afc8d5a8c26a20707772b9f393862e232

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Claims.dll

Filesize
28KB

MD5
2ff8be9c3ba2eac54b50a321fc15ac48

SHA1
ad7966375c93503805b2a0e227c6a844d6ed6bac

SHA256
101a17131634c7d3dc88306cc052e16dfc2cd14f08b870a159e5a338dcc69d08

SHA512
da07abbbf5577a06f15b8153d70024d9b4c2332a36a76778a1cab3efcf552270d34c5f76f68946ce06deacac9b3a3bb3487173f588965d8cca937482d4105895

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Algorithms.dll

Filesize
29KB

MD5
f03c08ff11be954136171a551aa3240a

SHA1
80df438709d51fae2eec840c501ce49fee372b44

SHA256
036f7380a4344ea9c0d49bcc53fba0cb5124c0f3f4c02c3d65199fd2aa4928da

SHA512
5de25c22d02dd5e30099a50b68945c45b0342059d5ab39277aee595bd167fa863636940e152ab1d91955d425ff8dbfa89f41dc829b7bd45269bb345acdd06440

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Csp.dll

Filesize
28KB

MD5
ac140bf354edb99362c88afcb0af201f

SHA1
cade424a04a4a7c73d2707cffaf2178ace40e1ee

SHA256
5026930de9823f8b5107198e892349c7e7a4cbd1d6267f179d618a180e27424d

SHA512
f26c78f5514318716ea2aa88ea7a4ac86d8e816cc5559b3e4eca3fd53fdb8ad2edcc2a36a8271397394d854a5a0999d616033d6cb4cff908624ed94d20a53a09

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Encoding.dll

Filesize
28KB

MD5
6a1a2a9545cf386e5e55ecc60b012395

SHA1
796ac79da6df1d1d9a5a7f8293f5cab8827f84cf

SHA256
7c00f9dfe15b2b0e983d6115c8626bb1a2c4e15027b818b0770ce168a1356a2e

SHA512
dd3e51071599e80d360d2dd18002ab49ed6af696ad6c8436e594b4bc1161b8a0204699919e1839b691fc13f09a6c45c57b91d2f0349d053d6f14c94a9913b3ea

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Primitives.dll

Filesize
28KB

MD5
126e948f2e73e6cb83b3bb82a3c2a633

SHA1
0fdc185e7caf93f7e39644b453c05e97675ba486

SHA256
3db25d47057eb909de6de129616d7249815d4f5c3920f384e97fe631870b1b55

SHA512
f816ef5f1b7a4c9a948f0c2885fe860be3c7506fc5ccdd88b79efbf010fffed842a25887fcca438d2f8dfb55812210216568fe00a219bd09550bbe8dc330f814

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.X509Certificates.dll

Filesize
29KB

MD5
5a8d9728391d33cd3cb3110d5c8e7639

SHA1
1d158113e2e64837907bc4b28e181324080fcf36

SHA256
7dc0092614a45fb21b6fbdbbfadaab33443650545b90820cfcf8ba948ef295c5

SHA512
9b42f3c84a19c5056b46aafe78751214a60270308f8d8c6c6f9d39e2d05d8e358a054f32ad466a7b1bbffe6a633984b1b96e8bb2166de412d0ec803109bb1fca

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Principal.dll

Filesize
28KB

MD5
043779671dda62e3e2fb8291de8f4d77

SHA1
d3ad55c637f5d89d7599950ef5fc44f57f78c2a2

SHA256
491862f2ad5664ec1b3f6a2f3163e79317dab2df8bbce99f5e30e5ad68a81bbc

SHA512
3dd2ff681127ac94d9b9322341d2d8610537e94a27b786fd68e705a9d56aadb840c7929940f0060c290538e1786b0f44741d6de0344ae9c18391c44aa48d09dd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.SecureString.dll

Filesize
28KB

MD5
951a0e05af9a33b66267b8729c974d94

SHA1
5c11b6118a4a91cd56fa513cbf42114b1ea7cf0f

SHA256
cf2943778df4f2c5ed1942bf1bf4d34b22da6797ded433c4aeabd6c5ca6c1161

SHA512
ffebc1610acdab8252b8730602cc5ea40694aa27df2317fe8975dbd0937f8679bf46adc436bf1617e98c18eca2198158540cfcfd5b80bc13cee40d222cfea9af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.dll

Filesize
318KB

MD5
86a21062ccdf9559d4795f6dd50b4cce

SHA1
6cf3583dfa839e3305cfadf77d72b1723d00e170

SHA256
fdc7860d40de6affbda9885ba9a531b6325c56a14b99a3345374bdbd0b2418ef

SHA512
4b764e68a0c4b0edc66ff0512464d3e7723cd3f85981c7da2b9035be13727504b3ce5c4c6529c6dbb63cfe89940d9523f1fdb1216855509fe0e1b9a8703c1ad7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activation.dll

Filesize
197KB

MD5
641d6ae2aec5f498615b34c50349411e

SHA1
1db0e8c4012b03026aa7037097b2ae9c739934c6

SHA256
d076d0cdc6c9b04048350f6433ba3dbe78c9267b7d5480760bce27ebf3b58734

SHA512
b8119729ab5cfdc27a4af82cab6985bcbccda5db5ab458e0c8be8dfe6e0a2593e714066b5aeeb7a55cf7c675e0cee8a8f7cfc74d73003c600f433a7bfce7bb35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activities.dll

Filesize
548KB

MD5
1222e22202e6ecfe289a694908d43530

SHA1
5f0e6a383923067346629ca3913e1ba8563ce504

SHA256
8c00b87c0c827126d1f550ef32871b00f39facf95a2ba450dd3d99bff08c7b8c

SHA512
4bdb63c0ad17dc1f4f095f459d9e41ef59f9e4ac1f6b21d78034fafac0a13581e2a7353f3d80a287ce11332a182b126b35506811f3621611eba54981b0f1ac9e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Channels.dll

Filesize
154KB

MD5
c1a7fa2feedd785be3073006eca75f38

SHA1
c67a2030d9ed8c98f02badb394c2afeb9e52a872

SHA256
3e3891a51f71aeb3e0f88f7dea1bfbcfef1aded5a42f2c13283d597be8f1db0f

SHA512
dadd5f3722de773a999caff346fa0b56d1f68239f93444a4b5c285e84b226a46283608346a80786ae808b6296b04c862381561fb4aa8be4b2454c4625deb06ed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Discovery.dll

Filesize
301KB

MD5
f6b3caefd462a614f9bee72c4b6fc12c

SHA1
1daff8be9c1d58f300df5dfaf8a0d42300d38b12

SHA256
58a4394ed3fdab4c907d0404287056f10bcf37a35ed4683bb016c91248a513dd

SHA512
2d411c953ecac1c029e0e175ca842fdf7913f9a4ef4be62751b574b76b1a62876396d8b2b460ae3a8a2a7aca6f9e96f420d762e33a9ed4d8ef225c54350fec2e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Duplex.dll

Filesize
28KB

MD5
8fe0fb24b60d22fa89269b61202db874

SHA1
cae8bf9e5646467f82000c70d98c8bf7dec5b1ea

SHA256
45c270d9441ec61641502f26cc83adceecfe63fdd151f279e60fc2668f640fd0

SHA512
5712c7dcd8154106607cf84f38daabe3ee79097363c1ab8660dfd8d778bf899cf664dcfd75317a55ce782d01e8ceabafa7e8090199cea82dfb0a0dbcb87a5bf8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Http.dll

Filesize
28KB

MD5
0af8dfa6e652f4028e0845d45e67e41f

SHA1
e83bcea4b82a23ca9645749fed6178f4423c5e96

SHA256
542a58d16583662338868eb16c9e98a7395b1b27f8f8903a2a33a56acad0af24

SHA512
6b11ce0862210e30afa9a80088e727644cdb85c7459c5abf3cb0331602b945279b1b26ce1c809da2603de52a389ec5e3aafb121aad947b1abf34d7827a4dc857

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Internals.dll

Filesize
254KB

MD5
99b7f02c79251f90feb8a9219797f51d

SHA1
31f035dacee6edfafdeba87e4b31a45b9ace21f4

SHA256
20b08c326df206dfe774e46777babf0d78cd498102e9bb5ab0e2edd679141f2d

SHA512
69b184cd803e774f2e1bd7775082634a33bd664524397fa2c132cef7e85d861536507f7ea10fd8dc114a981a50f4f5fb19ce5a76a76027683ff2c7c5a07a65ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.NetTcp.dll

Filesize
28KB

MD5
d2128aa53a410cb67066a2b121505105

SHA1
afcde05ed545f7594510ec699b95da5879753cd1

SHA256
8f6a641da5daf4a45d98923d59573b74e9df6dee0955555455bdb8d0ac1f40e8

SHA512
4d25eead6f6a721dbb0cb2e34cacbde953714bd058e541423b7ea44d7c156267e7bced5a714dc4719062525ec5b5225bf4e2c9758cde3f5a62e32357a7bca294

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Primitives.dll

Filesize
33KB

MD5
649c866ebbbdfbb1dc288e61ac01c479

SHA1
32bce6a9a2fcf45db03256f574e049a6e20b94dc

SHA256
afd303eb26b074f2f141f2cb441b3549ec3ff5eb42ad031b96352f2751698350

SHA512
32e1e73d2d52e2e29273c7aae097146d615a3d7a5a7a680b5ebc62944a96966150061f19d6361fb48dc6cd031f08ffd96b6de4db916093e116a09c3de644464f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Routing.dll

Filesize
127KB

MD5
686d62760792697b9280949a1a42417e

SHA1
5b66221579c9b89c20c06fc35c90f242bf3a2fe3

SHA256
be51ee05f4cef7c2371ddfe1ca155f0579f3a7b189cf0a1bff5619901839c0b7

SHA512
d303f2f88ee4fb0114ee7b04eabcb4ff49c97849b27af4b06edb920d7c787c41c58fb0bda9e3f63ec62f6a688beac0903ff198f4b982bd78561eb2f465bcfa1b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Security.dll

Filesize
29KB

MD5
146399abecbf4a24cc31288bece1ecdf

SHA1
01bf57ffd2a858ce0b77ab18a312770699951f55

SHA256
98e274ff91734b8371ca519d09901cca39adfb91406bd73c937e6cd97c61ae50

SHA512
754e65531335a1c0a15db1902ce1010b753c006f895286408219b818ce8a075f3a6e8adf1ab5aca3b78243728f609084e7f6e706039b423d8402780db7216cb4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.ServiceMoniker40.dll

Filesize
22KB

MD5
04b65e08174f0791e37bf857247f29f1

SHA1
661cdc6600603a07cd4db0af9f2dba646ae1c977

SHA256
c4391b9d3c0d90a2738db52c2c5bce5ea787cd3ad320bd65913ea74d2a333927

SHA512
7a5e38ebe2c2a43ecf84aed1fc2a2b273fa9523d3e04c76e86115f714d2b199961a7b739e694a1908d6ac4a2d8cc6be3bc7b2ec998460e93561bea78ec24c734

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.WasHosting.dll

Filesize
38KB

MD5
93bc88b9d13dbc3afccd5e5aa2dc87e1

SHA1
1d7d8da22c841f592d9999ac3bdb2b44d0e70f81

SHA256
475b28d65e93ad36d76c6e239a0dc179740386efb9d88dad711f98384454ac52

SHA512
19ae5190e9a110b9719fc84f9e4308c6424227f4fd5e7005c4aafed4348025b94e6e673c25d75017b3f323f8b686b6a7b17a07fb39cfdb524ac4e8574ee5ed74

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Web.dll

Filesize
320KB

MD5
11f40c5ff1500939a9bdcec4edf136b7

SHA1
8f158a4f6d8cd58dca6c60067cdae2eef6c8bdec

SHA256
dbc9746642f6da00b81b375bc0e307888fbf17b722a852093038ee27eaafd6b3

SHA512
86917b7ba45a69b1ad544780b1a43e3a72b21451aa4aa9ad9650279ff1c8cff76aeae1bd1bbc599754fc3f171a7fdebe6e21658891b55e7d976493d77de312ec

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.dll

Filesize
6.0MB

MD5
1f3bc9573204fc66ed72cf849483c23e

SHA1
7b8aeba052f802ae83228281cef7e17a50665eec

SHA256
1c30be5db1d8a494f51620c87f2fdf75b3a7cb578b9b61ac7f62d013501699e5

SHA512
648f6822e83a44c2610745282169d5409aff9926968dd8685e7b9a148b7488e88f1f689bbf4fc75ddaa37eb649ddf850a7ccf6d7d9d8741ef49c4df3be309893

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceProcess.dll

Filesize
135KB

MD5
676a78ae8a32deb7c6badc4eac988d4e

SHA1
b06bfc71f877819a436061b6ff01d9633c5e7f3f

SHA256
b0aa97e8f38cf52784884c84283d87b1af681a193b96ba00419b67e86b4ec6a2

SHA512
0dd3518aec2a5d0b467363a5e6e732227fc654346c5200120c00a8f3f1bf63b613cea96afd7ccd6ab82b615198641f29529d29186d9a4f65438c5aaa059e5b01

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.Extensions.dll

Filesize
28KB

MD5
b60688464a391ef55044083483b6727d

SHA1
688881f85c0f008073758412f69ba5171ace1476

SHA256
f3050e43bf84ab9209c3b250e6adf5c014ebb1e55e2758f1be4978e9f3cad005

SHA512
b02fdf5982196b56b8e0df2076ae1638f966795a1edc584a77879a40542d0638ca0f305c17ada02fccccbab1aa9c9b036ece5f81fb89c7bb1d7a3b25bdbe7a79

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.dll

Filesize
28KB

MD5
362168b54c7113a16b4a1e40e9e9add8

SHA1
2c47d984adabf4496f7da3215a49a4520db5adf9

SHA256
d6080579dd23c00b6170d218d9d642ba6bbff7b50068a7b0818f114dcd08e679

SHA512
d4df9759309dcb44977c5bf4a6c0ac7b637dbdf6ff355e4c769ffc9cd4ceb403735c48cf61bf42497c328d41d172fd6736339cc2647339bd92c38fb61ba6d374

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.RegularExpressions.dll

Filesize
28KB

MD5
feb6897207237290fcaf0d25cc7592da

SHA1
389500aff3fe476f297ec91d84b0adbb422dd1e2

SHA256
5524b12d6104143754b35ff8f202358fd8c9f1f4e1fb6167573b84a081e525fe

SHA512
fe06621af714b14e6a28de9c2aa6282ef45da9bc806d38a4dd366f69629a37d675fd74b8a69a88d390da4b9e87f154a3d712ac3d28d26285e6dc3a484e6417b8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Overlapped.dll

Filesize
28KB

MD5
c0c0101dabcdbe440b5e6544cd7c66a0

SHA1
53451b56c96b83bff3bfcbdf839b96f12a195435

SHA256
10b3530c46ca5a1644342e78f52cc295e8f913af0847b05645be67886ca4363d

SHA512
e292f253028ef9b37a9fbb38836dba894174d4e043c6f1e414b32751b306ff987d14ef73c4f1fea190d485bac8a879bf85051e43a98e7ebee42559636c7eed35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.Parallel.dll

Filesize
28KB

MD5
baf9008389ffe218b08cb3997934ce08

SHA1
8acb903735dd85f43f937a8bed461121c18e35e9

SHA256
0267e8fe6714e598aa9da2d8390ca5344d39d4b49b2f97e2181fd9bc26943fe0

SHA512
cad45eb73b07879db973cbf0adddf7ef3db01aef5dda21644a5a464f96d8d5d491ed60f1b86c6bd2e404a9ebcba982904676ca4410f4bbb94a73089491a40962

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.dll

Filesize
29KB

MD5
444c9757e5eba389b7cea18307b50f8c

SHA1
2cf9dd29dae2467fbb2d4ee3d5ee9df1c384728f

SHA256
678bab8843db02f25d6e689cbd20215cc8137a19fcf5b3e68e26e5410a5509d0

SHA512
3d2a9c9d275e4e72f3773f8a500b939d7a49ed56bb160a6f6eb0eceeb8489e965aa8d9bf533b8f7c784738d2ecf865ff408f12efa36d549d3677195846efc812

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Thread.dll

Filesize
28KB

MD5
aa6ccee2b857e599a261f46b0d6a7f14

SHA1
a965b054366ddc5b105cdba4c445350c7dcf8cd4

SHA256
fc8f3a6613bc2925a609dbf6c4eb2ec9735697d8658dd1f3b1fa391a0a0cd5b6

SHA512
47d5d914e97833c93bed93f61819f80c504b15a17545b3c7283069413090bf824c5feb8a7e40b3a5f0b1d60e59b9292a022e32d4888c7721d5ea70c9301fa964

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.ThreadPool.dll

Filesize
28KB

MD5
d14722fc4fe6e839ea750598a7ee5f83

SHA1
181b2df58a424e9e2e3a0f288c4825364a42ac74

SHA256
b7ebb6b226d2b8df047694232c2dfce956815a83652ce695d1c75eeef80379d8

SHA512
2c035228d8170302b133e91cd528b28ca482329ea12fac1e160fef3b2f8da47f3ebe5099736464ba854fd7280f7abc5a507d47bb6e1183eee040695fb03820ac

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Timer.dll

Filesize
28KB

MD5
ea09016efa90517b00c2770857c3e062

SHA1
f5e5532787e322bb6ed23ec59b22546aa9bb64b9

SHA256
9f1934e73d841de37ddb448e2b93dbc77057f3a0ab1aad74a6546e248aa02f08

SHA512
51c99a21e04813869272ec361f3d99c5d7f1e3c1f8e387bafba0df5f51641b22bd70b265586c6529132d404feda2014f211ed49eaba8e4b03c7df56e337b82aa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.dll

Filesize
29KB

MD5
a4ed6ee7b2b33f5d744ff2317fa753a4

SHA1
ef71aba73897469e5bea1f978a19a08e33d6e413

SHA256
65206632fe2adf794590a99f915e1f402748e90b9b26607da6b65444884d40ff

SHA512
ef1b1680cd482dfce5e84205ca51db4238858004f7fc29087ba60577672d7dd40c726a2a0ee7c1462df588b705acd569bd9486e9f360e514e0b5c4e888a35b62

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ValueTuple.dll

Filesize
28KB

MD5
4b0c81295fc1d99d93275148a872c408

SHA1
554869bc0a6d0738b143cf2fae935fd252dc86ff

SHA256
ecd1a7dd644ee3976c2f505d4d7bbe69e6056c2f7bca67e84fed2ef6e671c685

SHA512
d76ba3870d8050739b45b65cd050d74839762c3b25b9f0ae0135e92a6fc3369a6825e62ff658a33e5816d2baff583d0ef6553ae842184c1b40fd51b0c723099c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Abstractions.dll

Filesize
22KB

MD5
ae76d0bdcf324fae841780e7ba76a146

SHA1
7158432ab3913a45bd8c12c54775d6c6fc5761d3

SHA256
4ce1ce560f278cbf168ae83a7b27f3d356b06c2ac2f24365cf2b88231ef2a425

SHA512
8ab168bc7bf78ba26055e30f1b3e36e00c3d0e6401523e3504dca35c0fc09293ec01d71d194eef0b0543fbddaaca67dd1f2e10ad35308a604f84bba7e9f37147

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.ApplicationServices.dll

Filesize
69KB

MD5
ef75dc7211e905d108e75ac19fbd911f

SHA1
144aeb5adc6ffac01cd3c250e25e885d205fe6d6

SHA256
f10c2d13044585fa0f8c128116f20f033f5963f878dfc280d3cb4ed983e2fa60

SHA512
7a8ec2ba37e64eb4708cd3fecf68b8e3a858918b6134434fabdf98ec0456d6dfb8735e08b9b3aa3eb72261321877e42e1faac526640698b29763217986d956d3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.Design.dll

Filesize
103KB

MD5
92fc417834f25473c0699d20f28f7f90

SHA1
e96e9db06e3c8ac838dac61eef7fc138f8908f3d

SHA256
a387c53400ca75f653808967b14cb6a16ea895eec92a31781801c2ceabb21b9f

SHA512
904291607793256febe998d7aa13290b2fbd1e2e5053617d5c988caa6e1a52f2201892c02d3f4ae21d478388ccfce14f86371b93f6c6509b7b36522a517bce20

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.dll

Filesize
1.6MB

MD5
8d3e025bb8670d4dc9b44863018e1532

SHA1
5f64c981cf8c536b6ec48643fcafecdc6d6f1191

SHA256
4826fe2f1c506f3c55da235afdb817db93fa641c7687499a62a0762e37e8891d

SHA512
e3b2c098e0b181b7eaa7339e5681ed746b5f8a6c72ce1bd53c603cc7b6429f19f550264a8380ded815658b9c99d5725e552368aedde32028ed1d0a75025195f0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.Design.dll

Filesize
43KB

MD5
3a7e408178d774e3d451e340edc3c99a

SHA1
aa99a4518b89981a8103111d7a8387fa3c809532

SHA256
488e327e504147defaf1f0ddeea3d8c2760ed3bb7db8a1686ac174f1f58dcbf0

SHA512
b25b73c38c1ead27270ba2a047661fe9775687f64758f66b3b8e86e4d8bada256c93943cbbcd54ddc3c037b8d31f5efdd916f5a224d83eded85be05f3f0dd0ad

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.dll

Filesize
242KB

MD5
e2f98cfe8a40a273caa442f28162c2a2

SHA1
846cd79f6dc4aa934e096ef051915a695ea457ec

SHA256
ddb129229d7d12b53dacb5e77d6d93ae09ff000b8746f4e5d99e43ddf974e2ec

SHA512
153021ac0836384c4d636a37c7c7ec0dc8234bfacc1d06385664fc7a5413f83e6d196508e414b5939f8b5bc89ab37a6cf056df58ed0439f772a65865a9a1eb9b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.Design.dll

Filesize
172KB

MD5
8f71e3f452722fe96df9802dc5c46bd0

SHA1
8b0ca23568250bd8b64336cd62702ec5803afb9a

SHA256
69c582aa03be0286c12d44d86a598d9120ba868ca7c6c99e4c93ebd5f875d13c

SHA512
768cdbc859b741e50d84dee8297122ea2bfa1ef06d00ce7c6cec8595841a862876f547d3258281e5f447636d08fbb14178336ea408c94413d79775183bde6ef7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.dll

Filesize
161KB

MD5
cebd68c0ef40529c94d5827dd0b145cf

SHA1
bfacb1cc76c1786b9b0733575014f42848f914fd

SHA256
fef3beb7713c958c4ca846fad53ecdc0af01cead5181977bee3185087abf0165

SHA512
96295fc1561f259a7dab167b5a44bae79c49d4d30983ef965e3392cf5718e87500881226c8ca36dc60b2c394525a733b82e5632e1bc723dcc6edbccbeb8fc593

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.Design.dll

Filesize
348KB

MD5
9279bf247afa809b60173bfd312b6a5d

SHA1
9731aa8b768c5140c0ca533492a6521f842c1dbf

SHA256
b8ec199fe52dfcf20e93d6e4dab97225b3fd213e28a8126e901dae0fc173fd5b

SHA512
8f212ab00426268b21faf89ed0db95b487f83e4545ba4953380697dd474d1d9562988c4d6bf0456becf980d687959a2fde213595d643ce34272169bb53cd1ce0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll

Filesize
1.8MB

MD5
f73192664fd77803ceab46c9bb52edef

SHA1
5d85d059edf63d075fc7ac336dbe85bd87155adb

SHA256
4d44aff3e881db94105402b7aa48e9a57d912883e58352b5d599c9560d1e9894

SHA512
d90e6154a68b8337d81e046e7fe70b4411f5db1255dd0d597358f5409d50f4116285496c12982da43b4a93cc19acfeaf66dee687d0f6ef8ae8e104cfa9830bdb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Mobile.dll

Filesize
811KB

MD5
6798c50099e28da618cde617f440b0e4

SHA1
8f18689395a7f1ce85aed0397841c82dc878a1df

SHA256
4bbae608491de88c9fc8ff1526bd9242f4a77eb12da325fc32fbebd20afce6df

SHA512
b8501b52621ea53646dd861559d5aacdaaabb2a54cf06853b9d45b0d7177458db53b9c6849a23f689b86d5653e827cee2b7e897b0af5548204f5c86dc066e3ee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.RegularExpressions.dll

Filesize
103KB

MD5
0a2d32a91565d68301f2cdea54598c64

SHA1
09fedf1f572bfbae0339c071ff42e87ab183a64d

SHA256
2502e4ad7e64467f3c621c8256a7b6d85ff31c9dc1323af4fa5faa977d418ab3

SHA512
c360d2fb2b1c29b8317133a8bb8269d1c1c5926a08fde11c2bf95c3edc33ab1bcb4bf5e8ccb123d4b49e1f57bb9aa72bf5f94915acc6a2658bc4062c59cc5074

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Routing.dll

Filesize
22KB

MD5
325630c1a298866e8af7c591f3cde3ba

SHA1
64d8d431a2c0876176d631f8c304cb9b12cccaa7

SHA256
2568b2a4bfeb4b5d5f11b595320b583ea1e64218cdcf19f67df9c8a722a367ff

SHA512
860a23a582eb34d0e2bbb7295e609968ede87586b34c631632ace62125022276ad903f22dd202d08226631b9c0500edafae95d1a81447cb40d8f0535c793c849

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Services.dll

Filesize
827KB

MD5
81fc7704ed82ba6153014490859fc170

SHA1
65b3ef6d0e4f3d1c95ea076d858ae40fd26c3a25

SHA256
e64c1df2d0cefebe7c1d95ac9b8104e64fd3a65ff7bbe8936e6ea208feb5e5b3

SHA512
e3239c9f145241f8fbe16828a25f6688993e225faf1d4b015a2fd7a16c7ff67d0243c3b775fed2b8026536985220389ae7f9702e81978170202e889419263c68

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.Design.dll

Filesize
80KB

MD5
a260c5db59ef6fd757ae4324734c6cc1

SHA1
426b9fdb04cfa147bb4b46461e32a24f8214d0af

SHA256
812e35222fa97fc91550dc2f93adaf6963bafa03b753476a414f3aeb91a33529

SHA512
efc3cfb10c4676fc5c99173f30ffe2b961086f873dc452d44497dc433227712c95e9babfc2b3fa3a84261cdfbde1fd5ed158e3085be09b621be1fe5c8c724a7b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.dll

Filesize
1.6MB

MD5
70c121ed2590266127f1039e200af081

SHA1
a255dcd6b0545a424b3f353076cbf6d9cf9f02cf

SHA256
9d9b59494fdd3d02fced21e74c052dc18cf6ced4fdce10edef1122a626fb3306

SHA512
faaea8485940e9c129abc61a3659221b565dc135f12585b636c1ceb6cc0b91523e07ab325e9eb3baa063ec785d2b8ebc76a95525ee077c63de2d7515283a7e8f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll

Filesize
5.0MB

MD5
738d10f4f549fe15c89ef459c1f47f18

SHA1
d68d9aa3579effe7de1d85ef94e7e79b9ab1ccda

SHA256
67f03203a8979a898efedd589a09c9d80fb91d98007778dab520f53ccbf3bc7b

SHA512
c0b2df37cad18e7b834b0819136bf4378edcbbfed47070346d41abda07922eefd0fa0459e6f77871ae01e152490205397f6c58747126f0123735d84906dc533b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.dll

Filesize
30KB

MD5
1d30967db499125b58b01a6d706ce8e0

SHA1
001760dab08c47ba46e800efe446bf65e74017e2

SHA256
5b26f89ba5ef07c84eba040eacbe643560d691df2add8d0cc015c92b83804bdf

SHA512
dc80d63f2cefb454e187c6a4f3bd5dcb042321941a11c5ea59ade89d50c33a0673977a720649d55bca43c433545d79a1cb0ddebecbd6df4f9eb8eed538471ea0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Activities.dll

Filesize
1.0MB

MD5
487dbaaec71ae28f56d54c4caa156d46

SHA1
c70b929f7d81abd5800bcff0030e2364dcf55471

SHA256
0effe37f447e4f4b6a184819d820c94c917b898464558420035107f4d300ceab

SHA512
42883acf3f67dc3cf5a8b378def9813cd3ffed54aa4bbc184cd364176268d87c61bf1e840f1435aa7a93e90584101998f0f702cc73a4c4a04a31bb79af430926

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.ComponentModel.dll

Filesize
1.5MB

MD5
1c8a7dea71261cb5591300cc0f4d124b

SHA1
488487ec2d2248da848a516a8959491af85fa369

SHA256
26ceb1eca96105137cfe4889007d01d743d358c872d310a792dfe7c2cf195e0f

SHA512
5cbb84ca6e1fbd30fdd52264d6896c79711696ecba1c07f40a6208b0f6daf8eab739d57b5aa3aac5f0dc88406da5dd89316f6d5cbb5f39d9099dc2b25d8fcb1c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Runtime.dll

Filesize
487KB

MD5
a8fd95e6abb9968fd7a3b91964a073b8

SHA1
563eaeda120fe0bc3d28548f794d950f3a3a8bc4

SHA256
a3e21c46a1483d2662b50adf50dafcf9a0c3dcf785395174e4180bee897f7e45

SHA512
edf9c802883943c9e496a30611460982d40e1d74441e9a1c8558dd9d8c98ec55fbe68cf7a9c6ed215fa245cf423c8a39b9735fcd55cb22464ac24d2e91ef1def

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.WorkflowServices.dll

Filesize
440KB

MD5
b43f7869ba1997fc277054b653e806b3

SHA1
90317858d1d216f6c1216b5ea03ef37ad6702da2

SHA256
4d92b85d671b14f36155865b9d1740b5eb69ce04a1d6fef376c6e70566549341

SHA512
0ef472852ca1a4064d290819d5c65067233a55bb93158dfc376c0193f9ca6a041e23d085cc1601d202702d4dfe83373d451812e948cdbcd64e3cb50ed04a4f14

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.XML.dll

Filesize
2.5MB

MD5
990d96d86aaf8dd79b727205a518080e

SHA1
0fa4308f2588443b8ff4a03795e64f3b83d7a154

SHA256
c80e6c58abe92cdfa701c82eae1868e88827f0de9320064e0e7433703b193152

SHA512
191f783576bf2e4765f43f9cb2d19e5f6da85aade40b9aabca7c8c291cbd91aeba4c4ec98c87dab2f16b8de47667f497ba25e35bc55191ea09acfce9467a89e9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.Hosting.dll

Filesize
42KB

MD5
9b1c58af617ed4c9ac7b4bf236c97791

SHA1
5b39bf3561bb81031f005faccee1250a6bbcc64a

SHA256
21d0aaefbd63afaab12eaf064190639936efcced4ca153094538ee7d2cedf968

SHA512
3ce23b646aa139061da9c840df2f94b43b88a31941a81eeaab03c6d40183ba933eabaa6f37ae78e7fbb367f55aee7f31e9cf7a6296a2070ab451678286c590af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.dll

Filesize
618KB

MD5
04eb80883956609f44129147b20593fc

SHA1
8fb580b822a60f68f980ee47e820842d22d0eff6

SHA256
3540d986b846a3c5f69bbcc3b536b42a8849aa789dae9feddc49746c04d990b2

SHA512
5893c06663dade4db954f5b2f868b0444cbc23551be43044d531d477e86959d229433b8f0166c17105872f190c9d69dacb42c79647c4358baf690ae19327b1bc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Linq.dll

Filesize
159KB

MD5
8c95951c727c97aa7eef6a6c839b44c5

SHA1
cab00ce3e92741785b8220db6eede217252fa91c

SHA256
62115f96cb7a18fc1f7ee5a1927ed5566f91b48dd9cf9a623d957f9818f7a25b

SHA512
28b6e937329f2d118f6a042e717d844909dfa81ad6cf4d4c07ab2e98702dfe959df0bfc411ba559a037e47b61ccaa1e8f69a423b44c9c9b58a6064d5f8c91382

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.ReaderWriter.dll

Filesize
29KB

MD5
3f8624c9772625e5c844465f32e83ba0

SHA1
23d8718c62bdbf12350a4ca984da1b650623d2c1

SHA256
79ed4d6eb587f4c354ef968c2b28eecbbfdc1eb11a908e5e0dd46c1ee2ea887d

SHA512
9ccae69106b5e7907cb3670b7318c055a1e94db8f29c02451a465e8cb985bccc86a2a2661ed4ac05e7c033649ec66a5f537ac0e9d862f83053ad53e08e011a9f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll

Filesize
44KB

MD5
99d97980733b4d8fc93ed31079c4147f

SHA1
6c71a59aea2aec4415e9e83994642bbc80a75ea0

SHA256
d0a492625d4def94d720bb95373405731423cb4b5cbe6483fd8688d51d8cba04

SHA512
1a62456710522240e4a4647d6dd6ff9b039766ea897a47fa8d268e5a1b860e8d757c645250bc6844cf0da4ee4b6aa708c05034e1907b7583c495a127572e5527

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XDocument.dll

Filesize
28KB

MD5
cada9b7530ee1f69956e5c5c9c1914ce

SHA1
94602e79b7d0178ccde0a68a57092a4859992907

SHA256
8540f084bb913e92c8d4b942b20a97ed7cc89290ca97e3c18a32dbd83bf4b456

SHA512
d5c05ad38c9048063dcda9e10e1bfed80edab720d96a8f6f17d0517056c2872afe4476cd41657d8d94f3100310e6f383d75fe203682ad38b4638b87b62d48c4a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.XDocument.dll

Filesize
28KB

MD5
31f2ad44991da8f7ae244f175bbe02e4

SHA1
ef9955126fc06a5c5da47303bd4a431b886866ca

SHA256
4fa0a6bc8c9358580bfb9736650c82adac070e10661a416625fff548698f210c

SHA512
8a735c00505a934bb88bfa82231658a8dd23231c6bef7ac35e9164fe469b68bc7321da0229e43351db02e926159acf4a218146b4481083c12b6c66521c144f0f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.dll

Filesize
28KB

MD5
da31ce82373fa7c8992139536b3c554e

SHA1
c508a6b5c125f0eca2355130933e275310345c8f

SHA256
a6a102de1c065094473c662eab925fa32950cfcbe79c895be86f2adbaef32f68

SHA512
3df68bf00d72d4373608a212d2317cfdadeca135171fa6d2f7e13ea3bf61fc31f6fa67c93d6fa62d3ed5a081eb988d0451fae8ab6da7c609ba205d78133776ac

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlDocument.dll

Filesize
29KB

MD5
42dfca7d95662afc3fb589f9c9ce0230

SHA1
6e8b4ec86505e6ddb239ac0e996df640efe9823a

SHA256
03a0492a4e8853fb8251400991f62d8ce167421964835bef88821e69b9d4eb71

SHA512
110463df4db0c116de6e234018974da3dd980a058d182568f68eb184e2b01cf93ea4037914abc775a80bf160e0fbba42b84266e8f7bb243df5e2d424fc312174

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll

Filesize
29KB

MD5
31eba83343185a8b979be5766d791058

SHA1
95d6729bce4d4d46b7477164695e6d4cf6955724

SHA256
e486d8dbf447f650b6836a354c5ab27e847ea5ab4b23f0b8967fb335caf47d3b

SHA512
36dfcc393455d4be390e74e6f086898bb96593d8810e8d6d33ef549283c9512c4671d392bba057ebf8ed6b426f520ccf47b3e5a6ad0ad90b35ed53d6c6ed0693

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.dll

Filesize
3.4MB

MD5
1e2c0d8650530651dc4218813d21bb81

SHA1
2a059873b5238d7d7dc6fd7da07da2c1f993bbed

SHA256
87a69fe6b036b30206a0aae93137e05c565f4c3eadc41699951647c823630901

SHA512
2e234291441dadcd0597c60b4947e3cd581775743f3db029d275338c7739ad9b55ce693f280fc667d39f498b83bbc929b8fc7ea10920de0517d9b5543097f7b5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\NlsLexicons0009.dll

Filesize
18KB

MD5
845a7127811d2ed68f2e08197ef184e7

SHA1
b28c51692fc3b752a44421f557f78a9fa4d44242

SHA256
d451f8bfd5872fac5a830870ec63984bbbdb3b12c41426a3d3698b94e2e42b27

SHA512
39fe324286c2e627e7787c45befd02234aefc913d75ad586dd4b16a51b9256e6a3fd0c7a40d0284356bb690a9a743b8de947a2af2ef67f444f2688dfcea363c7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationBuildTasks.dll

Filesize
597KB

MD5
2f9dab25a90b9fac9f78ec7b78cba5ae

SHA1
9be0472a725941b02691b3fe40ddb21f1b0d1308

SHA256
5f273ddcf3070e8a84d4c0d38d9eb8f8c24749e132c1fea53d87226c92e558ac

SHA512
b3225e3eafa024b59698d5b49c248a9a082c79286b30712ff692b996fbb1a6399d5730d1217cb3f5034ddc7b17ebf9c168ac0619e59d10aba3d4d934e6640d49

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemCore.dll

Filesize
25KB

MD5
8e765998ee039c31b2ab23b8da35cfcf

SHA1
547a7448c3872c8e7eac6a7e36892055f66fbaff

SHA256
631b77fa796c8657bacaa875e15a2b258b2137b713ac6ec47abf72324bd21996

SHA512
2e790937c1abce60f7e2401621ae35e4fcf3a630bf51404c66714a7a6048fd4ea2a6647c78708507d7fbc65af890cbffce4020caa17033cd3e0a475c82a761d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemData.dll

Filesize
23KB

MD5
f7294604e4bda98d7b2c56a667927b0d

SHA1
c69e65f5f519b0bfe8dbebbeca3cb93bf3f4bd34

SHA256
2402988f99953030b238b051f114710ed4124f3efdd8671168a17d5b65927e59

SHA512
eec35721f8da2aceddce2952905842be9d8ff7e05949d509ee59e67fe31af842356cb1410923d6a2f4791301d5ddbbc164f0c7d1c4be4c35f3768f7c479cd602

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemDrawing.dll

Filesize
24KB

MD5
69b647bb47f1384e1bd43b32022b4784

SHA1
98f69aeeca4189c55704d4e2c8973f19087eec29

SHA256
ad7db0873ac41b1fb9407db897b2295ac67991f0843d19fdcadc4f21c3758739

SHA512
ade7c7b2443c957eff3a53646a7fe3f80dc819132933d8e909998c5ebd4c7dc9251b1a3a6741ef0d8794a76f61dcf299c0e43ea2be47bc63eb163916972bb1e1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXml.dll

Filesize
24KB

MD5
224b73b03b966d9f9294f1f58631cb59

SHA1
c3488a1349bdab30d4471c329be7bdfd0ab84c99

SHA256
07fb64447f063f921663b6bb3e69a2fcdd088c5fa8ed93cbf4820041966dd006

SHA512
2618f7688d1692e111ab157c01e4bfd34f9ba9e9385ebe4ec3bfb11b8ad624ceab6777f7361295bef92ef20caddb808690c8f659f38df25d0a06daedc32edacd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXmlLinq.dll

Filesize
22KB

MD5
368c2d8a7f1036d62cbbbcac7cb5dfbc

SHA1
7e262e6693ad1bcafad24c38981c0677964f4c9e

SHA256
91c3c9b7d898e71bd82ff4bf4e5c6f33aa49aef53ac266b6e5e9752dcf283800

SHA512
013e77891248fcea16bdb0bce588ff294c9d74701a1d34338382d19d564058469b001c7ec2c23841f20f767ab380dd9bf4a640cccfce6ff3870f9675ad02783c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Aero.dll

Filesize
245KB

MD5
c98a522816b7bbab60ae06975bdb4fe2

SHA1
eff26e53d2ac366fb5b0ebe3ae0cd66f1c9b2b16

SHA256
85a71d2fc938874c1503e8919477e37f0398c0b49e7493169a8f08a0b58fd9aa

SHA512
84a50bc83ab4cac641539bc3e58a77a05a0792224265566e927d06525b73cc6d9724ee7740032a02472b26757d2334b64a6ecfc2bd91c4692be2a5751a79f8ef

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.AeroLite.dll

Filesize
175KB

MD5
23fee481931f80e7a3da51bf5e55b041

SHA1
10af4e7637993eca7128e523524af0c836a9360b

SHA256
de7f70c06acbd9cadf8987994c89533825106566173bda8d321fa565569ce484

SHA512
c86c9a394e6a8667da9e18d92b7252cabe3482e6b82abe7f2deeb84107cb507353d333bc1bd2e2d802742dd965c7a88207c36c90f0fab5b0d10fe09b51e83850

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Classic.dll

Filesize
184KB

MD5
df91ae39618a5ca2a1997cdab74e3b17

SHA1
0733d83ab88d25bffc836c9b5ac3c3b6929a0396

SHA256
6a4add74e829654f7733e696d93947930cfcf36f856504227cd9d3bac4834d1b

SHA512
8b1bd82faf93b437ff1c3f7a6289ff0f2a00c65721f689a87c174156dcbeed0bbf6d16c85af91be59e399251b2f121c2239c58fda23cfa1ff16bb7c8b460f0e5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Luna.dll

Filesize
482KB

MD5
49428f38bec8ab76de0042973f0b33bf

SHA1
a2035de3e8875a5a1249fee1916cb2efeeb8908c

SHA256
4ebf84069403f802207e4a822bb0f386c806a66d0494ae4d06fdf3adcb567ab5

SHA512
3c231165b6fcf8a8e32c3b1a015add1d48ee117140c117f86e37a98fcbec4d5eed5999d7276f4f4e2736ff517e9760e833e3de9dbf0513fdb214793857e72baa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Royale.dll

Filesize
206KB

MD5
925626b75fe1eb145c745aa0eb5ced09

SHA1
da7fd4d380b317402a9f02f1f569d693a8f84545

SHA256
2b68cc18dd5a7fd16c56496e4da76905f4e765be6d0d3aea467905a67f1581a2

SHA512
9a016a413cec85cd281283860fb370ac7b84a9fe4cfddb6431168fb753d68ef2a7b1613c7de6cddd6939e776f85a334cdf479bede942ef888b172fb409e779ee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll

Filesize
5.9MB

MD5
22b03a6d6b4fbdc0cdef19690610e3c1

SHA1
d5a30e6486280764ae8849dee999322a4f70b5ad

SHA256
f37f80ca4d71928df6a190c5610a37644dc41be8508b88e0d067a14a2045d081

SHA512
e160f85839f059589f127ce8986df67e19a26d1563007f0ffac4e89a9c94002807476a93ede3e3ebed03b54c00b0a3c71d20c66c458f67f60842165c18b2a1e5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationUI.dll

Filesize
837KB

MD5
0c00f3eb892e4c319c46832a9b50b307

SHA1
a42aa662a1d437b5a971ac957f7d4aee3b1f5a4a

SHA256
92542cd8332cee06e98bc2f42921f53d2e47ec88f8d59597e6e7488645123081

SHA512
ad6bda279fed6783388e013c02de9cbc15efbc9664a8e328b2a560463a650d1e0f21322c9320f34610c50b8bf01633a028d548f0bf8934a21082fa4b10576907

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\ReachFramework.dll

Filesize
633KB

MD5
aec83d1a1233df8f102825be94ac5e33

SHA1
08b5da3d07eed5c16e69c0b3f2163504bf805712

SHA256
192ac9046038328615500fb1c1eadb34ad348597ee25d16e42963b3569d19816

SHA512
9ff2b9f7cfb8b6d20a2717cbf4d793572d2a2b4068824c54acd7479c079ec551bdd9dda86503b8fe9201cf8e4c5c028eb618ae79732c9496f0cd63db25dbfe8f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Speech.dll

Filesize
666KB

MD5
27c5c4a171fc94acc8a6532476866d09

SHA1
4cc0251788d2babadbd8ec0849d0842c715adca9

SHA256
f16b653992a104fa450e633c57b4d750951928ec5ff243417221353a08075c7f

SHA512
ec8addc5809dd2b13af206c144694aef331673be90c1e54203b0fb8ed4b3eeb0045bdfa1e6c53ae1a5011ac2726054dea04ce11bdabf67869a9b7eec4272dea7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Controls.Ribbon.dll

Filesize
725KB

MD5
70d64968c8d97140dd85706df90bac7f

SHA1
b16725ed5a1bcf7e094ece8a914dc5fd8efc6b72

SHA256
f54370677f6b30d52ba0595248d001e63a6fbe32010df4744073703b9f03fe68

SHA512
46581a24a8aade12cc55a33ae68bb6f3059f53e1a013dc637973d9b23491b46678b2675db83d79251c8a45a238674e1955c293ad0725b5073185c0f9a55c2ecf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll

Filesize
66KB

MD5
5fd63d1082a7db586e13d160aee50a96

SHA1
ab8c3803ab87643b9d0b05a836955bd668de7858

SHA256
76213bc45051966a176e5e8a2680fc2c06b45ee30abc8da60f9682416a1999dc

SHA512
26426fc5753cf8278fd456219c9bdbccd6e93ae0f1bdb484541b6d316bf732ca769d1389169098ba6ccc68456cd6160a990e331e6972ac4a826dffe3f8d814e1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Presentation.dll

Filesize
28KB

MD5
1020b7b625da6c9c2781418bee15879a

SHA1
3b865a7ed0917eefea5b8e07ed37b1b867406f95

SHA256
296471875bab75cb49447d2121ad8a4d92efa6d6c93ed12203e7a4b46661748f

SHA512
7196323e7c6850c78e16532f1baf9f8c4cdf126a7817d4ca30d307c6635258c8908dc112b1fe5667456c5a547c52e1f561424c0ffbae7b22c770badd681ace71

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClient.dll

Filesize
173KB

MD5
d1b5ff851a093ff0cb60bbc0e15b9e9d

SHA1
ddd885830c728c3a1c9c6e878fda9e8c95c35e43

SHA256
db0e9f088c577dd8377f43267dad0fa4e4fb982291386d406f8e6f39d601a3e4

SHA512
ad2c2ac2fe7e71d6cf2ed93f2ac511c1d2f5a64c292110fb83597e48eb68d999418c37dbcc0a62c67a61b6172a5c9e881994e98feed8d1bc4069829d4ba5e018

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClientsideProviders.dll

Filesize
352KB

MD5
a3daad092956c49176be1cb322e97596

SHA1
664c0fcedc419f0f3991da65d791fa773db39134

SHA256
e1b22ef417a0b64a2df6fcfa9e72b9542a24f851f60f7c369f6fd5bdef5526c6

SHA512
f297ae6b24db9a748c828ee75b04447e0bf98f4c51eee40ff3eaf4b7a1805767c97643087206cfd08d8f57f5d4c16f8c30887a5dee82c01d51fe6881715df3b4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationProvider.dll

Filesize
47KB

MD5
b53b5d984bf6a52c1ab65a5642ac028f

SHA1
7d3fefb1a418d6af2324396f0353ac7eb270ebe1

SHA256
ac99657c070f29c14591ae2b8afeed24e0d0236e806e0df8706c46fa16d1ebfb

SHA512
bed45e18d60e68f95fb181fd95083ce87e45775c8ffdc3d72b513e256df6b433b75770f59ea1fe7854bcfb672abf9578f3aa6a3d2534530fd8d1a622ff4e39f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationTypes.dll

Filesize
215KB

MD5
5d3c957cedc3f28f6e1841de3dac9fff

SHA1
fa96cfa32210ac659185cf6d5d05f3c99f35b8a5

SHA256
ecbfadabf6555764668400825d39e57ef30d6b1bcf37b211e1f6156557127443

SHA512
af4f9b8387e514b847ec888aa4da01dd3eedfa0a76349d1ed229f1b315f864f088e4f6a58efdeaf7f86288c07c2a968486ef6fea36e86eb8f3344dfdc1f706f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll

Filesize
1.2MB

MD5
ed0dba9173b5ff5c87afe8e77e7a017a

SHA1
567e1a3f0715e7dc2d78365828756ddd82996cd5

SHA256
97f0f0f7b944f18c6a35ba6082e4f26c1e5c440fb6a8710bd446771aef111047

SHA512
49bcff0d85ddcd320baf2bb7b8d79d3ebffe4d30e2112f04e20105c86fd8177dcf6e143b098adbcd350c947043b821d9506325a65447477c8445145f6ff824cf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsFormsIntegration.dll

Filesize
101KB

MD5
e850fafbdf8c7c7d5b495b852469a94a

SHA1
69c6a085aeec7dbba2208a248855799133a370cc

SHA256
3ae2df66cfd055d5eb865c5d457d53ed9868d62e7ee2422fbefbcbb751434456

SHA512
8798317d05de0fa0067378682c052527819a38502f74193ac388a01c35f8f539545dbec1676090c2a7d373554649a2632c086d6b8d473be15b89f3f71a13d4e2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XamlBuildTask.dll

Filesize
129KB

MD5
61eff7b4b45ac1e5c76b28c445b3b708

SHA1
d779b545d5153a4e5127fd84c47763de2161c726

SHA256
583b15d11f1fa253fc16d54e903dfa996a38e47c85a72a60ad39ad5f6635eb06

SHA512
aa2eea83f451c4850d6894df229208e158ffee53342d3139f57d928e271d0ce7952780725df23f2819ebac9f99dcd426cfa231832c87450b347ebc162df9b5d4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XsdBuildTask.dll

Filesize
66KB

MD5
5ce8031d7cb89a3dd96ea1759f7826c5

SHA1
4941444be2bc272921551c44b6ae857a8e1c4fef

SHA256
e18d0d9e8fd600daf13c63cb14d8b075e0da9850aae5a6b781218daf76683d95

SHA512
7dfea787960e411fa5bc43735e16c3c581f27e7e8f29762534eb53297741f1fb2490ae02df45fe8a1c610f9902921c4a4e71d47447009d9cfa0d693bebab1e70

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netstandard.dll

Filesize
104KB

MD5
914e9b70b1527fb662c8ac7b497e8874

SHA1
2fcae354d0fac80ca511b237978745fcf1fa6c23

SHA256
125c5d441a2bdbbc04c1e57dc50aa64c596067290c54c9ac84d4daf4cb0b24e8

SHA512
463be7d557414ab60f907f115301123cd76c78c296d8deac8e79a1dfbd5931c1e19b861aff3d412197824fe23e8d0de4876eed1b80699cbfa1788163200aed46

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\sysglobl.dll

Filesize
129KB

MD5
baad0b933c7233776f48c058106a23fd

SHA1
c3d65be930a7750a72bc8f2c1a482c4ca3eb33c5

SHA256
4c44cfa82d77425899a0ccb74f7e3d4ac08e45111d7ada07650a385125d8d47b

SHA512
675953978fcdb6c5d7cc287ea09c93743193529138bc4a7ca2d8894dcf98775d6fd68a28e6dfbc0f0698c418f7d83aa3e1260d3d957b92a2cfb42a4f6b64fa9f

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsLexicons0009.dll

Filesize
18KB

MD5
75e0dac1abe0a58716fc0f97a35dac30

SHA1
2b0ecd1206d1a691fb78ecc12f8ac9a12389b440

SHA256
9682b90cbdd69c118aae6aeaa6a4dd4df937a474655012053ffdd9b4de1f5439

SHA512
074c35b17406438f53c516244ac9db54bf53213d7aa6bedef31de1b0b327c330c0c52c9ce3e3ffd514058c4630201cdffa1cd3b140fa0dcd2e12e923a68c8276

Download Submit
C:\Windows\SysWOW64\msvcr110_clr0400.dll

Filesize
18KB

MD5
15226a64ce5ce8240caba518895e0cd6

SHA1
48b6925431f10a60f8a47bf786f889d799fd239d

SHA256
312304e593bd290c37e640524ad0c0fd8dc4e555171caf13a11c7f613ca03b24

SHA512
d4a97968e219b5384abd1f5a999447c14009789b1eb2e260fc081d6622733a85372eb442e665587ed1346b0eb6b3e79e19b98dfb21acca8dafeea1d8f566ad7a

Download Submit
\Program Files\Microsoft Office\Office14\VISSHE.DLL

Filesize
953KB

MD5
2f4759c23abcd639ac3ca7f8fa9480ac

SHA1
9a3fece585fa01b7b941e124ead0c39c8ce9bc7c

SHA256
6d66fa59407862e0fddfcb36472fe810eb308653321ca0e374ac870f9aa8cec6

SHA512
6ab14d6a8d3e9a751d68133e734cc804de2b50a7ef223d484d0f727cdfbd00d48f6e0666c3b86a0daf9ca42c0b726f6c2a088e5bb32c993748abfea7b5904ec6

Download Submit
\Windows\Installer\MSI417.tmp

Filesize
363KB

MD5
4a843a97ae51c310b573a02ffd2a0e8e

SHA1
063fa914ccb07249123c0d5f4595935487635b20

SHA256
727ecf287fb6f4953ee7748913dd559b4f8d3a022fa2ca55bc51cf5886c52086

SHA512
905c081552d95b523ecf1155b6c7e157652e5ff00cda30c1c21124d266eb7d305c3398d6832316f403dc45d1b639f1a5a67aea29922cd1a032f52e5247ec55d2

Download Submit
memory/2360-11151-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2360-15050-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2360-6766-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2360-6765-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2360-0-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2360-15699-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2360-15746-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2360-15747-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2360-15748-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download