Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce] '{69a28bd2-b8bd-491a-a39d-5bcb13678463}' = '"%ALLUSERSPROFILE%\Package Cache\{69a28bd2-b8bd-491a-a39d-5bcb13678463}\windowsd...
Modifies file system
Creates the following files
- %TEMP%\dotnet8.exe
- %WINDIR%\temp\{03ae8fce-4b53-4954-a691-d81976d02c02}\.cr\dotnet8.exe
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\wixstdba.dll
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\thm.xml
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\bg.png
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1028\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1029\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1031\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1033\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1036\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1040\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1041\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1042\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1045\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1046\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1049\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1055\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\2052\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\3082\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\eula.rtf
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\bootstrapperapplicationdata.xml
- %TEMP%\microsoft_windows_desktop_runtime_-_8.0.21_(x64)_20251104154336.log
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.be\windowsdesktop-runtime-8.0.21-win-x64.exe
- %ALLUSERSPROFILE%\package cache\{69a28bd2-b8bd-491a-a39d-5bcb13678463}\windowsdesktop-runtime-8.0.21-win-x64.exe
- %ProgramFiles%\dotnet\swidtag\microsoft windows desktop runtime - 8.0.21 (x64).swidtag
- %ALLUSERSPROFILE%\package cache\{69a28bd2-b8bd-491a-a39d-5bcb13678463}\state.rsm
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\dotnet_runtime_8.0.21_win_x64.msi
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\dotnet_hostfxr_8.0.21_win_x64.msi
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\dotnet_host_8.0.21_win_x64.msi
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\windowsdesktop_runtime_8.0.21_win_x64.msi
- %TEMP%\microsoft_windows_desktop_runtime_-_8.0.21_(x64)_20251104154336_000_dotnet_runtime_8.0.21_win_x64.msi.log
- %WINDIR%\temp\~dfa35ce6e9e80016b0.tmp
- %WINDIR%\installer\sourcehash{eefb29a5-3e62-4dce-8527-0df45d780126}
- %WINDIR%\temp\~df7451969b83f00767.tmp
- %WINDIR%\temp\~dfdd0595a647b6534e.tmp
- %WINDIR%\temp\~df7bf567362d6fabc1.tmp
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.tasks.dataflow.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\microsoft.visualbasic.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.contracts.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.collections.specialized.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.xpath.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.formats.asn1.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.filesystem.driveinfo.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\clretwrc.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.threadpool.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.text.encoding.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.private.xml.linq.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\microsoft.visualbasic.core.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.thread.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.memorymappedfiles.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.xdocument.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.servicemodel.web.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.linq.parallel.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.dynamic.runtime.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.dispatchproxy.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.componentmodel.typeconverter.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.console.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.globalization.calendars.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\mscorrc.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.drawing.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.componentmodel.annotations.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.intrinsics.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.process.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.mail.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\.version
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\microsoft.netcore.app.deps.json
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.filesystem.accesscontrol.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.private.uri.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.componentmodel.eventbasedasync.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.serialization.json.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.collections.nongeneric.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.httplistener.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.resources.writer.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.fileversioninfo.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.componentmodel.dataannotations.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.cryptography.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.typeextensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.serialization.formatters.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.cryptography.algorithms.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.compression.filesystem.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.accesscontrol.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.compression.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.cryptography.csp.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.webproxy.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.webheadercollection.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.collections.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.nameresolution.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.serviceprocess.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.resources.resourcemanager.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.linq.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.pipes.accesscontrol.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.cryptography.x509certificates.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.interopservices.javascript.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.collections.concurrent.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.cryptography.openssl.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.channels.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.filesystem.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.core.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.handles.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.resources.reader.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\mscorlib.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\clrjit.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.linq.queryable.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.networkinformation.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.stacktrace.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\microsoft.diasymreader.native.amd64.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.cryptography.cng.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\hostpolicy.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.data.datasetextensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.data.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.windows.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.xmlserializer.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.loader.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\microsoft.netcore.app.runtimeconfig.json
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.text.encodings.web.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.unmanagedmemorystream.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.serialization.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.linq.expressions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.http.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.componentmodel.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.interopservices.runtimeinformation.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.websockets.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.xpath.xdocument.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.linq.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.tracing.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.filesystem.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.data.common.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.security.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\windowsbase.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\microsoft.win32.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.web.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.emit.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.sockets.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.extensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.textwritertracelistener.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.emit.lightweight.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.principal.windows.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.valuetuple.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.objectmodel.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.compression.zipfile.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.tasks.extensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\mscordaccore_amd64_amd64_8.0.2125.47513.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\mscordbi.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\clrgc.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.xmldocument.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\mscordaccore.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.ping.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.tasks.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.serialization.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.numerics.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\createdump.exe
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.componentmodel.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.serialization.xml.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.private.corelib.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.tracesource.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.diagnosticsource.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.tasks.parallel.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.serialization.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.timer.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.configuration.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.cryptography.encoding.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\netstandard.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.principal.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.pipes.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.formats.tar.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.websockets.client.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.text.regularexpressions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.tools.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.isolatedstorage.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.globalization.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.compilerservices.unsafe.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\microsoft.csharp.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.compression.brotli.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.numerics.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.appcontext.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.webclient.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.cryptography.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.transactions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.compilerservices.visualc.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.filesystem.watcher.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.text.encoding.codepages.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.io.compression.native.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.transactions.local.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.text.encoding.extensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\coreclr.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.private.xml.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.securestring.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.xml.readerwriter.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.web.httputility.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.requests.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.diagnostics.debug.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.threading.overlapped.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.private.datacontractserialization.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\microsoft.win32.registry.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\msquic.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.memory.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.security.claims.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.globalization.extensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.emit.ilgeneration.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.quic.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.text.json.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.drawing.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.servicepoint.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.collections.immutable.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.runtime.interopservices.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.extensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.numerics.vectors.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.net.http.json.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.reflection.metadata.dll
- %ProgramFiles%\dotnet\shared\microsoft.netcore.app\8.0.21\system.buffers.dll
- %WINDIR%\temp\~df4f6265ff726d94bd.tmp
- %WINDIR%\temp\~dfc3e361695cbd46ca.tmp
- %WINDIR%\temp\~df8cde06aae0e5f6da.tmp
- %WINDIR%\temp\~df4ac26bc51adc5022.tmp
- %WINDIR%\temp\~df629fa66d1ca2e15d.tmp
- %WINDIR%\temp\~dfd031bec6bb61ae19.tmp
- %WINDIR%\temp\~df6721be31244bfbf5.tmp
- %WINDIR%\temp\~dfe274a7408be59d0e.tmp
- %TEMP%\microsoft_windows_desktop_runtime_-_8.0.21_(x64)_20251104154336_001_dotnet_hostfxr_8.0.21_win_x64.msi.log
- %WINDIR%\temp\~dfe4e870d14f16085a.tmp
- %WINDIR%\installer\sourcehash{b382d796-20d3-45da-ab94-e98d99668b10}
- %WINDIR%\temp\~dfbc5b45dd2762684d.tmp
- %WINDIR%\temp\~df3cd15318ff5e7971.tmp
- %WINDIR%\temp\~dfa1f3701de2f3b390.tmp
- %ProgramFiles%\dotnet\host\fxr\8.0.21\hostfxr.dll
- %WINDIR%\temp\~df9ffcfcbfc1cedf43.tmp
- %WINDIR%\temp\~df40fab8327a652d26.tmp
- %WINDIR%\temp\~df85945b7b6f5d738e.tmp
- %WINDIR%\temp\~df984d6401197be35a.tmp
- %WINDIR%\temp\~df0554010a0121637f.tmp
- %WINDIR%\temp\~dfac4468a287cff3f0.tmp
- %WINDIR%\temp\~dfc14abbb1ed32eff5.tmp
- %WINDIR%\temp\~df58f5e4107a8e3f73.tmp
- %TEMP%\microsoft_windows_desktop_runtime_-_8.0.21_(x64)_20251104154336_002_dotnet_host_8.0.21_win_x64.msi.log
- %WINDIR%\temp\~dfa6fef2a7350057ba.tmp
- %WINDIR%\installer\sourcehash{72357746-b194-485c-a161-fb80f419dc20}
- %WINDIR%\temp\~dfc2efc0de3c580093.tmp
- %WINDIR%\temp\~df6118db3fbb54f917.tmp
- %WINDIR%\temp\~dfca7ebda1037853fc.tmp
- %ProgramFiles%\dotnet\dotnet.exe
- %ProgramFiles%\dotnet\license.txt
- %ProgramFiles%\dotnet\thirdpartynotices.txt
- %WINDIR%\temp\~df5968015e4e150b60.tmp
- %WINDIR%\temp\~df65bc7edf0305d628.tmp
- %WINDIR%\temp\~df4b2a83025d506ae6.tmp
- %WINDIR%\temp\~dff708707e68671cd8.tmp
- %WINDIR%\temp\~dfa9aa92ca7ebc9289.tmp
- %WINDIR%\temp\~df8320cef565d40b5d.tmp
- %WINDIR%\temp\~df0c5cc1fa9594a153.tmp
- %WINDIR%\temp\~df4ee2a5b955d2fa4b.tmp
- %TEMP%\microsoft_windows_desktop_runtime_-_8.0.21_(x64)_20251104154336_003_windowsdesktop_runtime_8.0.21_win_x64.msi.log
- %WINDIR%\temp\~dfc4d817e2db0c8cc9.tmp
- %WINDIR%\installer\sourcehash{a32777ad-f93a-4f26-bee6-9c5961ea71d6}
- %WINDIR%\temp\~dfbeab7d4606e84213.tmp
- %WINDIR%\temp\~dfbfbbba0bfbefdbba.tmp
- %WINDIR%\temp\~df6f3eb48bf398ab00.tmp
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.directoryservices.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\microsoft.visualbasic.forms.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.windows.presentation.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework-systemdata.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\d3dcompiler_47_cor3.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\microsoft.windowsdesktop.app.deps.json
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\wpfgfx_cor3.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.windows.input.manipulations.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\windowsbase.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.windows.forms.design.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.io.packaging.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.xaml.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.design.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework.luna.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.drawing.design.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.windows.forms.design.editors.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework-systemdrawing.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework-systemxml.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.windows.extensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.security.cryptography.xml.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.security.permissions.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationui.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\microsoft.win32.registry.accesscontrol.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationcore.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.diagnostics.eventlog.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\accessibility.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.windows.forms.primitives.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\uiautomationclient.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationnative_cor3.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework.classic.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\microsoft.win32.systemevents.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework-systemxmllinq.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework.royale.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.diagnostics.eventlog.messages.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.codedom.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework-systemcore.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.resources.extensions.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.security.cryptography.pkcs.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.configuration.configurationmanager.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\es\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\uiautomationprovider.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.security.cryptography.protecteddata.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\reachframework.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\de\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hant\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.windows.forms.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.windows.controls.ribbon.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\presentationui.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\microsoft.visualbasic.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.drawing.common.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\uiautomationprovider.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\uiautomationclientsideproviders.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\windowsbase.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework.aero.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.threading.accesscontrol.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\system.windows.input.manipulations.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\vcruntime140_cor3.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework.aerolite.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.diagnostics.performancecounter.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\microsoft.windowsdesktop.app.runtimeconfig.json
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\tr\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\windowsformsintegration.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\windowsformsintegration.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pt-br\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\presentationcore.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\system.windows.controls.ribbon.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\fr\system.windows.forms.design.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\presentationframework.aero2.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\uiautomationtypes.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\microsoft.visualbasic.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\presentationframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.printing.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ja\reachframework.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\directwriteforwarder.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\penimc_cor3.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\system.drawing.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ru\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\system.windows.forms.primitives.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\uiautomationclient.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\system.windows.forms.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\pl\uiautomationtypes.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\cs\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\it\uiautomationclientsideproviders.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\zh-hans\system.xaml.resources.dll
- %ProgramFiles%\dotnet\shared\microsoft.windowsdesktop.app\8.0.21\ko\windowsbase.resources.dll
- %WINDIR%\temp\~dfbb0141aa1efda90c.tmp
- %WINDIR%\temp\~df5663f97fcf9221e3.tmp
- %WINDIR%\temp\~df9e5a57877c5bb721.tmp
- %WINDIR%\temp\~df06788f429b111fa1.tmp
- %WINDIR%\temp\~dffaa756b1c37d1a3f.tmp
- %WINDIR%\temp\~df14c3bad9123758e7.tmp
- %WINDIR%\temp\~df278e4f2bb4802781.tmp
- %WINDIR%\temp\~df66909ad92d8d34a2.tmp
- %ProgramFiles%\latite injector\latite injector.exe
Deletes following files that it created itself
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1028\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1029\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1031\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1033\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1036\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1040\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1041\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1042\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1045\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1046\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1049\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\1055\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\2052\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\3082\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\bg.png
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\bootstrapperapplicationdata.xml
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\eula.rtf
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\thm.wxl
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\thm.xml
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.ba\wixstdba.dll
- %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.be\windowsdesktop-runtime-8.0.21-win-x64.exe
- %WINDIR%\temp\{03ae8fce-4b53-4954-a691-d81976d02c02}\.cr\dotnet8.exe
- %TEMP%\dotnet8.exe
Moves the following files
- from %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\dotnet_runtime_8.0.21_win_x64.msi to %ALLUSERSPROFILE%\package cache\.unverified\dotnet_runtime_8.0.21_win_x64.msi
- from %ALLUSERSPROFILE%\package cache\.unverified\dotnet_runtime_8.0.21_win_x64.msi to %ALLUSERSPROFILE%\package cache\{eefb29a5-3e62-4dce-8527-0df45d780126}v64.84.40925\dotnet-runtime-8.0.21-win-x64.msi
- from %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\dotnet_hostfxr_8.0.21_win_x64.msi to %ALLUSERSPROFILE%\package cache\.unverified\dotnet_hostfxr_8.0.21_win_x64.msi
- from %ALLUSERSPROFILE%\package cache\.unverified\dotnet_hostfxr_8.0.21_win_x64.msi to %ALLUSERSPROFILE%\package cache\{b382d796-20d3-45da-ab94-e98d99668b10}v64.84.40925\dotnet-hostfxr-8.0.21-win-x64.msi
- from %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\dotnet_host_8.0.21_win_x64.msi to %ALLUSERSPROFILE%\package cache\.unverified\dotnet_host_8.0.21_win_x64.msi
- from %ALLUSERSPROFILE%\package cache\.unverified\dotnet_host_8.0.21_win_x64.msi to %ALLUSERSPROFILE%\package cache\{72357746-b194-485c-a161-fb80f419dc20}v64.84.40925\dotnet-host-8.0.21-win-x64.msi
- from %WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\windowsdesktop_runtime_8.0.21_win_x64.msi to %ALLUSERSPROFILE%\package cache\.unverified\windowsdesktop_runtime_8.0.21_win_x64.msi
- from %ALLUSERSPROFILE%\package cache\.unverified\windowsdesktop_runtime_8.0.21_win_x64.msi to %ALLUSERSPROFILE%\package cache\{a32777ad-f93a-4f26-bee6-9c5961ea71d6}v64.84.40919\windowsdesktop-runtime-8.0.21-win-x64.msi
Network activity
Connects to
- 'ak#.ms':443
- 'builds.dotnet.microsoft.com':443
- 'gi##ub.com':443
- 'ra#.####ubusercontent.com':443
TCP
Other
- '15#.#01.129.91':443
- 'ak#.ms':443
- 'builds.dotnet.microsoft.com':443
- 'gi##ub.com':443
- 'ra#.####ubusercontent.com':443
UDP
- DNS ASK ak#.ms
- DNS ASK builds.dotnet.microsoft.com
- DNS ASK gi##ub.com
- DNS ASK ra#.####ubusercontent.com
Miscellaneous
Creates and executes the following
- '%TEMP%\dotnet8.exe' /passive /norestart
- '%WINDIR%\temp\{03ae8fce-4b53-4954-a691-d81976d02c02}\.cr\dotnet8.exe' -burn.clean.room="%TEMP%\dotnet8.exe" -burn.filehandle.attached=688 -burn.filehandle.self=692 /passive /norestart
- '%WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.be\windowsdesktop-runtime-8.0.21-win-x64.exe' -q -burn.elevated BurnPipe.{8E6DB464-BC5E-4ACE-B0DF-4A87CF99E732} {38012C8F-BF50-4B2A-8835-4E1888AD1FC9} 688
Executes the following
- '%WINDIR%\temp\{3a127826-00dd-472a-9516-2d7dce266e3f}\.be\windowsdesktop-runtime-8.0.21-win-x64.exe' -q -burn.elevated BurnPipe.{8E6DB464-BC5E-4ACE-B0DF-4A87CF99E732} {38012C8F-BF50-4B2A-8835-4E1888AD1FC9} 688' (with hidden window)
