fantom | 60b290310f67adb0ae186b4b938ca466a6b55653b2519261fa425127f5500a1f

max time kernel
149s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 16:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Ransomware/criticalupdate01.exe
Size

261KB
MD5

7d80230df68ccba871815d68f016c282
SHA1

e10874c6108a26ceedfc84f50881824462b5b6b6
SHA256

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
SHA512

64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP

3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi

Score

10^/10

fantom evasion ransomware spyware stealer

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>PMIrmqj4yzx7LDoxfYJaZ5DO9Yihx5d2VLvOyh0uWus68cCV2W7dlB9Slrbm0hkG+VCu6iSh9WuF4WHV5cSuhaqKwzFPVIgAyV3GJPZk41rEFBiDrwE+FtaQEULZXoIGrzXMb5gYNpamqcPL/JmUhmYrPgG7pXk2Hm4jEFCxYclDZmmr6BGxRjD0KDND8BOUCiNifmvpwam9cFMcXh2czQaFcBO4iwpvFWpTNCBWErnL5ojpJMG7vStBzzEZnX8W0aLU3J27Ww/BBY+0+l5LtKhN4XJVWQTMqEAVMmm2K2RfKkQCKJwVmdTHt4YjGd45vF4EhBh/Mj8ZCLO7hJ0SXQ==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

[email protected]

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Renames multiple (3024) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
evasion

Drops file in Drivers directory 15 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Drops startup file 1 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Executes dropped EXE 1 IoCs

Processes:

WindowsUpdate.exe

pid process

2176 WindowsUpdate.exe
Loads dropped DLL 1 IoCs

Processes:

criticalupdate01.exe

pid process

1908 criticalupdate01.exe
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

pid	process
2176	WindowsUpdate.exe

pid	process
1908	criticalupdate01.exe

Drops file in System32 directory 64 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File created	C:\Windows\System32\DriverStore\FileRepository\prnin003.inf_amd64_neutral_3a3c6293d0cda862\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\eval\HomeBasicE\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\UltimateE\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\OEM\StarterE\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migration\WSMT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\iis-ftpsvc-rm.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\EnterpriseN\license.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx00c.inf_amd64_neutral_79ebe29715d2fa47\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\ProfessionalN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\shmig-replacement.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\sppui\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_WMI_Cmdlets.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_types.ps1xml.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\default.help.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00e.inf_amd64_neutral_651eeed98428be5e\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\MUI\0410\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\acpi.inf_amd64_neutral_aed2e7a487803437\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\ETW-core-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_data_sections.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IIS-HttpErrors-Deployment-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\HomePremiumE\license.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdminfot.inf_amd64_neutral_fc6bcd80e9e6a3c3\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpin.inf_amd64_neutral_2415474b9db0a888\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prngt004.inf_amd64_neutral_f5bf8a7ba9dfff55\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\PostMigRes\Web\base_images\ClickDownNormal.gif	criticalupdate01.exe
File opened for modification	C:\Windows\System32\catroot2\dberr.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netl1e64.inf_amd64_neutral_22118b1072f57433\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpj3500t.xml	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wiaky002.inf_amd64_neutral_b898f5982403f3cb\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\eval\StarterN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\da-DK\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky002.inf_amd64_neutral_525d9740c77e325f\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0009\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\eval\HomePremiumE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WCN\es-ES\Add_a_device_or_computer_to_a_network_usb.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\dot4prt.inf_amd64_neutral_e7d3f62d0d4411db\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\_Default\UltimateE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnbr003.inf_amd64_neutral_dff45d1d0df04caf\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\OEM\Enterprise\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Networking-MPSSVC-Svc\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WCN\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_trap.help.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpj4500t.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\TerminalServices-RemoteConnectionManager-DL.man	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msclmd.inf_amd64_neutral_413d17c790177eef\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnrc003.inf_amd64_neutral_47e09b7cc0d9e993\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnts002.inf_amd64_neutral_ad2aa922aa11af2c\Amd64\tsmpc002.ppd	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\UltimateE\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\HomePremiumE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\IasMigPlugin-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\dhcpclientdll-repl.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_modules.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\RacRules.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_remote_FAQ.help.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\amdsata.inf_amd64_neutral_67db50590108ebd9\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmboca.inf_amd64_neutral_cc532ed7b3b5b5a9\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\EnterpriseN\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\Speech\SpeechUX\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcxhv6.inf_amd64_neutral_81ba64c5b6150dd3\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prngt002.inf_amd64_neutral_df2060d80de9ff13\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpc6300t.vdf	criticalupdate01.exe

Drops file in Program Files directory 64 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Photo Viewer\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-ui.xml	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)redStateIcon.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Google\Update\Install\{0CE5CC7E-EAA3-4562-A781-DCB0067BB36A}\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\speaker-32.png	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImages.jpg	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\bg_sidebar.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\mailapi.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-queries.jar	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_left.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\navBack.png	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\gd\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Grid.thmx	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\de-DE\gadget.xml	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\15.png	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif	criticalupdate01.exe
File created	C:\Program Files\Internet Explorer\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\de-DE\css\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WhiteboxMask.bmp	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ml\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\fr-FR\gadget.xml	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_left.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\css\settings.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\SDK\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_disabled.png	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-attach.xml	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-ui.xml	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_s.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_h.png	criticalupdate01.exe
File created	C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\indxicon.gif	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl-hot.png	criticalupdate01.exe
File created	C:\Program Files\Microsoft Games\Mahjong\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\drag.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\ja-JP\js\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_dot.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_settings.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\activity16v.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\System\ado\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\fr-FR\gadget.xml	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiling.xml	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_s.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\de-DE\gadget.xml	criticalupdate01.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Mozilla Firefox\browser\features\[email protected]	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full_partly-cloudy.png	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Hardcover.xml	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader_icd.json	criticalupdate01.exe

Drops file in Windows directory 64 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices\14.0.0.0__71e9bce111e9429c\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\b357f35e860204c5b74e1388f97db058\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Afternoon\Windows Logoff Sound.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v3.5\SQL\fr\DropSqlPersistenceProviderSchema.sql	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.7.03062\1049\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_de_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Cityscape\Windows Information Bar.wav	criticalupdate01.exe
File created	C:\Windows\Media\Landscape\Windows Error.wav	criticalupdate01.exe
File created	C:\Windows\Media\Raga\Windows Hardware Remove.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\EventViewer.Resources\6.1.0.0_en_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.Services\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Design\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Workfffcbcd8#\8e020cc06c4052a50083fa7eb060e92c\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Boot\EFI\ru-RU\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Landscape\Windows Logon Sound.wav	criticalupdate01.exe
File created	C:\Windows\Media\Sonata\Windows Logon Sound.wav	criticalupdate01.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\WindowsFormsIntegration.resources\3.0.0.0_es_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Afternoon\Windows Hardware Remove.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Threading.Timer\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\InstallPersonalization.sql	criticalupdate01.exe
File created	C:\Windows\schemas\AvailableNetwork\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.RuleWizard\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\1f517ecba89b0f399021bdbc8fb3db82\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Http\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\ModemLogs\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Graph\14.0.0.0__71e9bce111e9429c\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\diagnostics\system\DeviceCenter\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\WindowsFormsIntegration.resources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Device\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\74de34cd518bf49352c8346149ddfbc1\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\.NET CLR Networking 4.0.0.0\0012\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\83e2f6909980da7347e7806d8c26670e\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\f730acee6c31ccae8256d0abbe9728ae\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Iden1fe87377#\2a8d6efe5a99d9e6b03587df841c2087\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servf73e6522#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\rdyboost\0411\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\system.identitymodel.resources\3.0.0.0_fr_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\findUsers.aspx	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\1040\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallWebEventSqlProvider.sql	criticalupdate01.exe
File created	C:\Windows\PLA\Reports\Report.System.NetTrace.xml	criticalupdate01.exe
File created	C:\Windows\PLA\Reports\de-DE\Report.System.Diagnostics.xml	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\system.servicemodel.install.resources\3.0.0.0_de_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\2823d3be9334fea94dce8001b247589b\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\Windows Workflow Foundation 3.0.0.0\0410\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\PLA\Rules\en-US\Rules.System.Finale.xml	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\ehRecObj\6.1.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\SecurityAuditPoliciesSnapIn.resources\6.1.0.0_ja_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

criticalupdate01.exe

pid process

1908 criticalupdate01.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

criticalupdate01.exe

description pid process

Token: SeDebugPrivilege 1908 criticalupdate01.exe

pid	process
1908	criticalupdate01.exe

description	pid	process
Token: SeDebugPrivilege	1908	criticalupdate01.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

criticalupdate01.exe

description	pid	process	target process
PID 1908 wrote to memory of 2176	1908	criticalupdate01.exe	WindowsUpdate.exe
PID 1908 wrote to memory of 2176	1908	criticalupdate01.exe	WindowsUpdate.exe
PID 1908 wrote to memory of 2176	1908	criticalupdate01.exe	WindowsUpdate.exe
PID 1908 wrote to memory of 2176	1908	criticalupdate01.exe	WindowsUpdate.exe

C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe
"C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1908
- C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
  2⤵
  - Executes dropped EXE
  PID:2176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Filesize
1KB

MD5
08a3706bc567797d8a7412b28b8e2de9

SHA1
bc874e40e3218a2cf366ef9df780464804d80657

SHA256
28880682f1e22ed9098e7db27ee43161fe06cd41ece7b258814d25305c3c138d

SHA512
9ab5bfa4a4e3b1709f08df0622e4f0c9a7424e66ed34f5de687986d5a7085ff3eed511e282a9e6f6bb7f5c23b06b38d73ff657e8444c22644ecf6b742a086df1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
352B

MD5
fd949fe5873536cef3a2039626d4adf3

SHA1
1970ae7e47e96a86ca4d7980efffe35e1564719c

SHA256
c7e028b5e8b57b4481ff11a833b09bd53adc9b2b59cb449257d8f31b9d81507f

SHA512
ad0f23a357feb7a81d53a7f205b1833601182e08e73423fcd1e4a9d72ca15ac7ac16d666fd415a22af386e64e23a4c6a86292d2e69aea3108ae7b5d81fd9cc41

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
224B

MD5
26ccb4dcdbce95cd8afc09547c8156f8

SHA1
514025940894b87c7dabae5c4ab1f0b177480034

SHA256
3457522a0afb15a0f1a9a3bf173a3bccb6de74cc570b5aaac4a6abc208060b0b

SHA512
b5d29cd3e180f5478b56f4e9037131f9644abb99e5f2156bf8a1faad4b1b95077d058fa7a86d9c1a60c588219a30f284dbdac177bd20e996f94d8d9843a316ff

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
5a093f75ecfbdf609025b6ad3435b5c0

SHA1
9c7fefbe94ea225dd0edead1133f255c3d04efd9

SHA256
1cd14e2952af7271cef8469765b4b3af4ecd75fb49502a1f0dc80c205f1fd70e

SHA512
213c955f20047228218c3a90d494cc1f976c16476e5f93b79665366b6b339076c49914d9131c3a40cdc2937e73f0edb24d4fff5e5ee2b965a98e6f56aa72d1b9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
3a8d49c16cb4aae2279c6c71c43ec176

SHA1
86da40b5e7b008b204a1f17e3fc82e8b2aa6f130

SHA256
b9213f2d23f437346b91ca2c7434f0faca934819c5aaa72cdc0e84c3381af59b

SHA512
00923601371268db7a9623907c33332cde9cfcfdfba7a1ad967ab2d7d7fc7c8d923072ba879d4fa54720dd11250acb7bfbf5013d70bf0cb53cc269267a40d6c4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
0ede90b7dbdabdb6aac7239bbd195577

SHA1
0ef3c497e39aebed70ed2f9496e8daae028c381b

SHA256
1dc6eb7d0ac7e05aa0c2ba82ef72605795f003a9291aa8855cf345ca85d2a8cb

SHA512
c567672920dd73f5905d03cb9019cb81e58ce20925551f363101b97051ae8c672786ab9d8c9056a328f2191324f2b7af998f4d331bcc2fafdae0ecc65f534748

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
1cf8e567746605c249e98a212ba90035

SHA1
22b8971480675af6d573c9bdbf0e87065d19e677

SHA256
2c62e8189fb32201eec89cd3c6ec4d518a5351e6825c1b1bc8d0477564ce115e

SHA512
2d5989dd8eaf628978940533891901abc856cd88dfadecbc768c9849c848d1331c912e99cf4981fb9f7f685ca4f081cbf6c3d5dd1f798a6fbb3554c301c804bd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
112B

MD5
346dc7a50cf18cb507f3b7ada3ee3389

SHA1
c35aac1881d1dbeeeeb619078eb01b1c21fc3620

SHA256
da354b21fa06d56a53a1d6df7282abc10cf0cd851b9d476a22cbcb80247e237f

SHA512
992f97ab4f32d8e8aa1ffe0e86f22aeb151f1447c35d3b676e779359c8138d1299b8dd62a84be9f357a56e5dbdd1af365665ecb54f3283f22d3143e8a49f05cc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
b9c3fd3a97562559bf86eb67dfecfd70

SHA1
025c47f1b51d4147b0f335d635c46feab144f9ef

SHA256
aa64a18389810bf23c4abbb8943e9d763989a1b257b0fadf3ed90caa0ad64735

SHA512
279ab72925ad97be970ac3e2c5878e76cf6649cf2f7ca7144e802c4745f6f6723f90c55fd61de2b870ab8449ba9d57fb0c4c2b70eeb55f0d34d0dbaf8ba5fff0

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
a7fae888959e9353a0971970a04603b3

SHA1
4110e81a70fdd9efd0d52e12e1c4e21e76d75a4e

SHA256
151b9ec18b5e46574e1a4ff50c0ef0139429573d7624d176803603b39e03b9cc

SHA512
465ff19b41d676d317b26a8162d0bd0cf7d93d5d1a85d0c384e8f60c6eba3f6ee1f4cbbcc6afe3852ee6b58ec857fb73793602f8cf6d39763e01747ca5e296ed

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
cd056bf0f552b58b664e28fdc9d44b83

SHA1
eb30bdb9213472ed1887fd5abc032e3637ea08a0

SHA256
b2d62b48a5c6bdeb3e022ce0248d11d6a82bdcc349db4ae28cb34dd0a75e2c74

SHA512
2b316011dd3f3659802317e7d2aba7e856a15b6badadb2322dadd44b9d82e28a8bacb133b7d3b3e5cb43a95b59a6d0e342d1da4d3abd1e3e28a6c854e75d0aad

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
b2245736ba3873f972a02cc87aa965c1

SHA1
55f98a2963455711fbb90eef13a3d7b810a5d169

SHA256
6203a6f5a684452936b98d4575c5d5aa5226624bf593f4f137bef5a89a65a1da

SHA512
edd37def91e659aced89d35994b4c8915509fe247c5cadcb6c8ba42350d90c4d3ca9a1fa4b5d7559ae28486cbb1e49da1ade3c4702b3fcca6d271521ea06c637

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
84a97268edd13bd60421124049864014

SHA1
46618df37a1099e941e75716df522b02025ccf36

SHA256
9dd019dfdfe88b2dab2d930746475cd895ecad1d996782859e22c682ab256573

SHA512
76072be6330ed8d3843667756582722dc80d22495e843473e9e6a3ffb0182c24794e43b39776111393a71af7449a5b1be7db1e5e38707c0567812b5c5ab799bc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
ce0444d8afaff727c41337a63179f9f5

SHA1
0a446956331c96140df7a02fd37189a4cef701ac

SHA256
002fbaaa7c7f4f9a3acad35c9cd3bf77eda20c0a7ec184b5719de26458a9274f

SHA512
40ae457f837ca245065da38c1619d315a9ff94457678978a323184ec6c6d8e1bed7edcf48f9ffeacd3cb9659fd821befb9a529b0123c6cbd35a342fcf84dcb43

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
a41ceba8294fa39bbb2e394b8c7d7c3b

SHA1
a8a7d99308b2dd87c10883896eb05a2b6fd3a761

SHA256
448b928d3e4fe45d70d5eb44dafd5c64b3b3a8e28aabc533735f578b52580e26

SHA512
56a8e1ad064ac1e09b4a6d36863fab892a0701a113a236def893302c99cab6591efe199f7c354d3f3cdbec2998f1da5b7f43000cadc94b0b7132040bf7b711e5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
deb912b79db521576656e31a31c9255f

SHA1
6d97691ca20d8ea042091edf34a0dbb07081c20d

SHA256
97c961c0fb50cf412664e515a4fe1b0aee730b7a0bacd4934fc111f5f387e2b6

SHA512
3a12fa7bf1e36566c2c886ab9c3194ec01ff87a31eb3b2392c192726c6cfc6f3e2e9af67f782bac7b5a115d3d6d7399305d775e40c1cfa5100599c40e0684dbc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
7KB

MD5
559b22ebfadfd0c7ecaec3a4cff3c927

SHA1
b12b182507b1ceb4302d18877ac4aa49daf9e47d

SHA256
04f2f824d0ee52dba657a05f2b3681448f0dd8ae9193d03f43fea8c3af542ea3

SHA512
c6c6385ace945781995ac95a99b99706c69b58e2207de2b46225f089525d68d43cace4c18bff7e218bc6df837241b741b213552b4a847e01e32075092d7b734c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
336B

MD5
4c054882a076fd5e82d3794b388d5f07

SHA1
324ac31e76a8f6e6468850959c9ae23e03677c9e

SHA256
dbcb5feb0338929d37f52f14a00606ad0554d5546c4fef8766e67bb56b4bc4c0

SHA512
689401d31e2387ba6b79da40adfe387c099bbdff08818e8b3173a506ec758372f6cf5948d108d32b1a6f5ffc30e579aa6528be5dcbd935c3a3da1e7e9f9b2caf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
240B

MD5
a1becaf7a77e135cf4831a4eb88f2191

SHA1
a6790176613977bdf687197dd5d4764339c743b6

SHA256
f483a00620b50351cafe59591f856a66bc8efb2367717a838ba53bf270d90d28

SHA512
4caf992eac3b131d57bcf6facf65292c60a87a6e4caed6bae33daa3fffff9fc8b2cacb16aba9c18a98574852add18f6588d4c745b14b85c0c0bf130efb474730

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
ce940c55b716225d084d15c199496e46

SHA1
aa4ff347f98b4f557e7445af5be1d7144949fe89

SHA256
2c2606d1f434c2a13679d23e0f37502594a3c03beb176a34e7dbe71d7ac73454

SHA512
6588de0a99c42e3f41b6d05a1175155308ae13895ff80ebf895fcc5e4fc2d90a2e69051e2735b92b7039a08cb0bcac1b7d07cef641c138bf65dc97a95c0c20cf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
816B

MD5
4d90779f3c01a86b2b5f5489ef020b84

SHA1
3d251997905a264f24663af241b90b7b27eb9055

SHA256
ea18657c056fa62b89ab36c72792d58471e91a41c9c5d7a8fbe177607e7ea08c

SHA512
5d3ff8c41c05a92f2cdc3f9b1bd5098f42c17b1b93d0f9ad9fc0f498695bccc4b5cee72a807fe5126fbd94723fdf765613e7ca5e0d156ee563c22f5b2eeb6d83

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
29f6125fa1e056a29ba0525ef9fc3b76

SHA1
707c8e754ade6e2b18bc74c195f5eb935ce8fbbf

SHA256
9f331316b8750d5dae2a7538fbbc35a823078fd19a680c95feddf7ca39d88a4d

SHA512
ce5ba2f96731c040233cf3d689014b360c92245bc7377d43846bd104d8b4d4d1967dba39c13881dddf6a7504efafa9b375cf4671c5285793d155ba2631fbb3b2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
f4851ae6afaa8ca15ea5aade79845b42

SHA1
be835e643348b0b0a99ea46bc1887980146a6e82

SHA256
c4c8e23dcd95de4b63d6e2e4accc3596572b848e6ecbbf61d2245c9a8af96015

SHA512
068ce3ba028c823d3653731b7a3d170581be9c36003fd3f955822af2a98196f2db46336ccc27a012abfea16d1164434435bb901f847044abde85b8ec69929973

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
4a126699c670c28c3913e11a61139e39

SHA1
66047e5487689d56ddc08c5dc33355307febdd72

SHA256
0af7fcdcfac87e79a9473634b590478490f7699bcd617a31f4d3da05696ddcde

SHA512
8b6bf737f7c56ff535f3b3c90d5d9ffdebd418ca85d711a991a09bf9fa54b803bc7d5d6fd64d2ab81c766c7326fd69a9094df67fb6d790d454fae9cf08f0ea5b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
896B

MD5
18e3f7c20948c7383c389db696e4f634

SHA1
8bda0e442691e972d3cceb205cd06b71a9019217

SHA256
a3c9204ac66fea3f98d51c7fdefdc8b195fd2285fd6544f9b082b814657cc6c4

SHA512
79705799fdb1ac1f3aa234ccf4d3f507380584fe822db6050fa1e98e3fefeaa35b842231d10a0f6a8e61b98770d559bf95156f38652b78bebf017ec8ce9624de

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
864B

MD5
c4e794ce2e7b4fc7b4dbe03f2edd7d66

SHA1
85616540391a4a8e3292b233f2f0caf85621e201

SHA256
9895cd82526cdc139ccd62dbccb7b2bc9f4617fcfa721a33e04101021f740a59

SHA512
487357d03d2b41e5128791493dea0a3775cedc02e9dcf33d35653f8bd3b459c2558ff624c6cf68676ce6c3a882828ea7debeb6891ba8a457aae55cd9b982cbd4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
864B

MD5
251b2b975f266f4e88d4d07806d86738

SHA1
eea71c808789a3b0cf6f1ef4194841fdde7efd48

SHA256
3cca57c9081f33c14d9b5320f275268432ad59d1057b2816f43f1ebf44bad984

SHA512
57fd37b38b50b354ce61fcdb705fb5cc4ed36b21112a357db49cc3940dfbf154475cb699ef1943dd2e09be48d52053472dcf5d4eb86f8ee01875483c4667ee84

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
317ffca3a904230870d8fa35281f2359

SHA1
72766d245d1084f87598cbda01d6c15353fd6a06

SHA256
6f38be74aa21f0fa2d1e3b198466afbae2bfbd30617aa8604da8c8c3d5049ec2

SHA512
71b28e3d8174966534fceb4040af4a3456a507300586b7b20997607e4030249a69f2c55ca22e6384e19fceacb7de71be603ef8d28e3bfd68de21fe0527a50c63

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
b4ca31b9fb6af6e124bff0f315279ef0

SHA1
e1143553c9b53f502f81b41ec02125e369a2a74d

SHA256
ada194abf953506a281af4ee5191b11a789313c58823d963596828d01e6609b2

SHA512
9ead7b92bf33b3118c86dc3f9c31f53a9a6df5734c62dd32c45d3d199332425bb4b0f3f61eb4c0378b2a72cddb85a0844fccddf360b31ae487c6791f4bdca360

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
864B

MD5
1974a20f3e89d3762625a9fa5a4129fb

SHA1
493174a3b0d3b4e01c44d16d598f88c37ba829dd

SHA256
4c0e383d4dabb40d8eac151edff3fa785df5ebfec39967ebc6f17c85ba6e18af

SHA512
0f407af631cc2bc2e6495b361f8a94352a482cd29e32c1570ebe640b031de9f4130f00e75fc1ff40fde72b252268161212478d23090c24789b318cce1961cf25

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
848B

MD5
929475ffe34ff184b6832380e6a6b926

SHA1
75998f5d5a98fa3e8c86ed8e440ae038fed98474

SHA256
df2797efd1d8b3fe7a6199bf02cef67ae7e9edd78a1e5ceee5093a1c860d1b9e

SHA512
764639339044f8a7e6c78a8a33c9e85fc46cab4685708a4f2285f4f6721add7ddc26ba5fa3bef12606af2987bc510aff11c46f78cd31fb806f9a7e3ad10f03ca

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
880B

MD5
c68c769a3489a5eb2a41e1fa11da73a5

SHA1
b24d6719e27cef84ed937714e30a3266201d4fc2

SHA256
ad264bc50a32d8577e1ca05b2c02247451d1676c3d15ec35a7520cb724e7eeab

SHA512
01ade2e8c4683cc4512e688e207814043454d2109d8d3042dc8b90abf0addcedfc3998d41035e5acf173511cf8c9ee863d67c4e38610a421c4723a76a891ae37

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
848B

MD5
1f78abde0815932b4c602b65335aef34

SHA1
498735090637157eec12873d6c5233447e27d8fc

SHA256
09cea30f1d904d2119979ea095e17fb60ccd085e0c14dad3447ecc5af53b2ad2

SHA512
b3b5b2d333cf1f627b031479aa11c4bf25178df8593373bd7a88b1315616b2631b890787472c5bcb18520bae5ecdd95bed36a973d90b604e89bd00fd98480b0f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
864B

MD5
b5609f03aa43dd7a6926b7557994c5bf

SHA1
d836c67c82c806b006aae56ab0219f4db0b116c6

SHA256
58cda2cfffe622b3e1afc4c995d7b5847beb6794cbda91b0978e123bc6748c34

SHA512
2ee354d8473e006b8fc602c4c902d40c47d71b6c89492eb5e4462f86d78d19f8dd16b4271b4678e31a064c78130f9c49d114deb2570f3aae38f4a53033551ff5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
864B

MD5
23c74834f683092a6e90559d9000474f

SHA1
4b1957eb27b080da8e2c007bc9b0352ee5b674a4

SHA256
4458deae509389049583846ceb8b7263d33cf2417c2e361266bc474389eef30b

SHA512
abac5f683fe566ac892a9b2e47487269a5b1f134194f5a7085f9dc54126a95bbd452f59e35fc37847f876ce2c475435fd5af5e051c8758073cd7f18bb46d4e8f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
864B

MD5
b286efb89e23567f72b6b7c4fbd7dd91

SHA1
f0ffdd42fb68ce7cdb76aa3906d63a50b78814d0

SHA256
884ed957c43ab5e2b31d4c29568dba03a9fd6a4e651d73f621efd2720d184cef

SHA512
8fd3035fd48994461124dc9f4546a1c3ee3a723092db3bfc15a4f32b9cb020dbcf76379ef7ab119d84e6ab9a247a7c26ff8ab94e6b720f6a6925707470ccbffa

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
896B

MD5
1c115a45ff37121c30ca6e574a551325

SHA1
8c6595b3fbd47ebc7ac0caa2f97e869f2b03d684

SHA256
3427dffd31323a7632c3ab9d99d56b653d90e3f3f7a308b03f1cb90562b4f92b

SHA512
299950dce3390c6102d8c3a1af2a120001dabbf6cea74bc7b073706d6d78d611d757ec6b22770a99912e2f304692bfa76787e8ef3fb9d3a9a2962829ab489b7f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml

Filesize
247KB

MD5
fa9fcdb4f3e492c846bf2921d773d40c

SHA1
d2df37e1b16e40a47175c60f7a7d8f0036d130d7

SHA256
0b75dd84f0d5a09338f076b426e31e07ca77a5a1022c5d73f84cd60762e1f5b4

SHA512
d028b80c333994bca77f0b54b673501f781bfca5e7ba8a3fea11bb7bbcc7f6350e80a0054c50886c644430bc74fcc79043b8b850a436954963c19c2eaa57bf34

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
d2b0287353c56c14c25b99768ebd74c1

SHA1
77246f4a55a71b9f7c4a3a653a985d758b89a8d4

SHA256
5e9c2664a66cc647242331d6c96acfc5b10b9ced6d0560eeb7a250dfe245cad2

SHA512
f8a262c78cdbc4e686d87f537b1d549f6cd7715b71ccc343a73d5e7ff5a9d7d383a4e00a274da8b701294495503627ce6ae6f7fd55932dd37c89cf6ce4e44ed2

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
6acc7c520ec92c62b5e64276d87841a0

SHA1
ea366e397f4d1c778be084f190519188e8d7f5c9

SHA256
45fc99b50c93534331f921496fc714d671131b3429204fc6dbd59d41284cb575

SHA512
86d127a8e5d83b9e229e631c3df804fc5eb6495627c8c7ed24e3ed36cc7c993567b8f56b8e44ca9980d997c4498e7a45f791d2f7d85ba9af03c98ab32fb38e40

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
38caf7427c7f6886dd5a4c00f54b282e

SHA1
4b27600dd995394f35ad0a3020da298c8603c433

SHA256
232ca867a949ad2e4eef87f7b00abdff47091dd016a64e57007867037f1b7bba

SHA512
b2eae09b095d9b98c3803b36604907dc12fecf6228c5b1a7cae352ab99b7bf17f48e240c2808bde86808da3300a5956ed77d64e8e3a227b95479f22ee41dbd63

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
1dd657526fb937d72fe690b2268e1304

SHA1
0e01a8ec79f543b5ed3eac75dbafce9f2970a67e

SHA256
592f58a2fb53a7d52ef66c156017b3690a1f6e396b0a3c2c0541640a19e050e0

SHA512
a109022b507e25fd0979d72006754dd7efb3f4b4dbc260cd15389bc422f2299c1261b8a25a93e8530cb5e741e92a58f0e54d5da9e705ddbe93067cb8eff3cf14

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
322d06da7fbfc460caea69c39c2d3691

SHA1
d8c3903b15c4ecc116e5a380b353e91581969ad6

SHA256
a4fc7492abd2814813127abedc31ecb3daba07eba4d1971c69b8bb8328706510

SHA512
a3a063a71b3211a73113de70f4bf9589c520dcc3273b96edbe3d5d4918ab21266df3b4bc303695f7acb035d2b56889c0ce5ec708e4afa373df2ef7f1f15eaf3f

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
02f619bdbd1dd07fe305fd19c4b9a834

SHA1
e6c27903c271cc535c7a3618d65ff680c7cc2a53

SHA256
fa613652e8e0968b0a8830c7652abdae7a11085b7001338b4d8c92bfb264c526

SHA512
fc5810e95e27379f0e24f0167600ae9eb5063c647b7e52fa2e33a2ad022df8faa0d2f5650fea4f5a909b38c622d971eab0628df107f58db67bf1e46c098964a9

Download Submit
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0002.001

Filesize
16B

MD5
054c05f79100447a3f12986f353caba0

SHA1
e25c0c87f9c5c7eb739352d326e9f978fac8d71e

SHA256
4636c952c9a582e651bed2626802affd9992d354a2c66265ba449200f0f3ef99

SHA512
cde01687d30762ed1c6100160c0297e0e36533319b0a93297dd79959beec2853a14c1cb9a7dfe82ad9e19ffa623b13d7895fd9e91f35400e689c54c9ae1f5582

Download Submit
C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240221_140554752.html

Filesize
1.1MB

MD5
66e77a777efd6bbb32cba9c31aa30795

SHA1
0d7bf1c2f3ea735e030914f46870d85bd70612dd

SHA256
5c29e7deee51511c14d6e3ecfc65401e15eedd0a2c072fae52ccee399167d832

SHA512
778966da194ba96c4a6af3c8051ae6fe0c5c1219ab8c608ee2234f86658aa1275ceb2f0c4a451651e64832ec7b9d77fe6df5edf83b80bd83b03badf5c431fb51

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_sml.gif

Filesize
64B

MD5
9f2d0cc3594b68d8474a33d250b6f354

SHA1
95d5d56a74c6254e0477b828c386931e45b393dd

SHA256
f108c1bb5a9d9475f2215a47d8fe5179ab7722677b4b9ed7ca7c778810fdc905

SHA512
a39bea925355fc39db3486e0fb3c7e1b7e9f5f255dd094cc478d09cd87c9367e6917475d2f73de865a2432a6c8643fa23d806f5cea40c9f58091ba8d9753b2a1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
80B

MD5
0550c2c2b1fecc4521f60cf4dc2dd645

SHA1
b9c9da1c1d2dee9c5db36528944a73d554208caa

SHA256
a2a48e3f024c3fc78119ebb5e74b49c3a58f4137958253396a9c51404725cad7

SHA512
95961a1dba26c68ae01739b0f31c5d54b6a3822eb7b730afc0f053555a61945b1627c50132b9ae7c4c51e3e243febafd82783102c67234921dceb6ee20a32f7c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
80B

MD5
ae898383fe081dd79853c20cdc23188f

SHA1
2d3fbaa1a892c38aff07a07b51ece774727aea22

SHA256
323168560c4f21d7aa33f485158fbca65a7b2f9805ea6ea690685ece0a5cd723

SHA512
dcbab37044aee02d4304acb262d630cc33fa3b413840835f0e66cf2f6a61a2c3e48cd2b5048fb86004b64489d53c0a9e94a86a822b8e24489b89b3bf87c51dcc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

Filesize
6KB

MD5
5589e1473447c5ae5144bda8382c7ec1

SHA1
7ed76c30e1b1b259ebfbb0178a1c507c791ea232

SHA256
4a5335a5015e74fc6cdd62da49c09d87c4d1adbbfd3abea472d459bd21041a05

SHA512
519ae49ea3de153520f838da606d2a7bb066672eb5a5c93db0f7067ab0ffc88063e06c933e0cd3252ae03965a2f82b036678c35b9de1c1a9de5bb9976468bcc8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

Filesize
13KB

MD5
523f45f77232fefc7f87adcec7c51505

SHA1
e17ea3b9821b583c932b89f148f29280623eab16

SHA256
4816bc0074bd32a26f5ae6bab589620812aa35bcb17e4dd84f5d59f6eb3c1058

SHA512
c9ec365c1e6c8fa98d34ae45bcfa6d69409e0df1007061ccc24788e7dbf6a9724fd1ab722335258e080ef86e2313b70a3f1ee74664abf21856491ba2e47090a5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

Filesize
3KB

MD5
c8002f078b7f5f0dca236f8ceea2f102

SHA1
c07a7b13390bfba07b4caeb6460a2127d9fae603

SHA256
4cd8d2966c360095607557d75de585fc8c4d2c52b924695deb0fc59f3ad68c1b

SHA512
5bdf77868131bd499e632581e1469fd94f0d9c608926184098726c3e4700782416a6f5b7c21c02e5b3e4f2602f9b7d43107e4c89b672fb6b0f833a4c1e19ffbb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

Filesize
6KB

MD5
d9cdfa5ffe07bfd0e7cb2373130bc06d

SHA1
910956a2cd4a314387a81ac500ffa795f52ce300

SHA256
6496a179f789ceb218331bfb6570fb6bbe6dc5af5d69d87a9174b930caddf02f

SHA512
2c4e890f8bd18de7e1fd060d087cc80077d466e77105edfafaa45d63aa438745b29899a0e0e8560cc89a304bc74dfaa9d54b1697d3d0ae2d3971bb60d3023319

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

Filesize
10KB

MD5
42889895f0e4848b2a2d672b310d7876

SHA1
16bda4adc767801047adc50a74ccc4c5bad222e1

SHA256
35e7c544d1023a4ea0e9d98703235f085bbf2b31da657f0235116610ccc25043

SHA512
a250a58f435acae9578f3b08c4292c0bdcb5acf840a4005bd789a1dbeb60c75941bf60c631c45576507f28e9f8c38b4803ba26423fd40d07cf785629f7c56ac2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

Filesize
68KB

MD5
a4002730857c6fb68159678cf02dfd81

SHA1
c993ab64c7a2d977a17c588510174ecff6f8bf01

SHA256
a8c983cf7f1144a54d8f463a61fa18f5d011d03517f1a38ade18a8865c81bb91

SHA512
b5f4e6e1dc6b768ac17797916cab6bea96b21726af83472d0ac96189b2cfdc1eb7253352bb3a22ee57ecdcd7a58081996799a2bda82f186f699d1ffe2246eecf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
e410b4d4da49537228b69fabae403586

SHA1
9c89a206a6182a1df2cc76393cacf10682b00b1b

SHA256
ef8b85bf9a31405d2d02253550bf6de8aff4ed6612a5ba876418a1978fc01145

SHA512
6aba8a775ffbdb793ba2c601a33d63fa82b002da36102eb0359e86a6b9f5743b9d4af7ca5bd369351abe99240064c1839259c5f72a1301120dd0093ee1862507

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
c64579379440d6f478cd113892a2030d

SHA1
74bd6f99c8dd5338864e3338478d0341c072a438

SHA256
569ae0492bfdd9a70b807f26257ca192584feafff3be759b3781db8ec67d66a2

SHA512
f84a649b85ae7cad36163a9143c2a82bcbbd34f0d1915d94f3678bc8cd5f59e797063be650533c968e40d807e94be53010bed39a35730327db638440c21bdc5d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
cfe6c2cd38a098d7d2fe7900ef443c59

SHA1
0b6e8c939a4fed60efe06b9cd4e019da6c5af715

SHA256
e0fa23aaa312f96755bd6e5fda9fc5a0e144b005098762dd51547a891d2f9557

SHA512
28b397cf499111bc0240481bda73c48c324fa4b04163bed352bbcc469d0459627c622e5638008e908ce65266217e2b1254e48e2ff52c9dcf1a4a638e00ea2471

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
ecd021b5b464f7dbf8a09511b1b32f8b

SHA1
499dd86606fcd7ab8fee1ab0bdfd775ce15058f8

SHA256
f5cc0e3e56afd2fd912469dc42e6a4821cf79bb5da45c108176508552cca10de

SHA512
6f00c66abad07d2adca65ccb0ae7a19744ab7f1c79741a48b27a51abb120dc90cfad42a0412bbfbcd4586ead4131c4a855c5762d3e206b5f58d291ea961fe604

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
95e761b22cf86bcd65f6d61f83c87a02

SHA1
042c38ee4eafd90cb42fd8f9f42c16f6d8507c85

SHA256
458206742878c4d71641d97d7cf69b614c85a04e68216ea3221f2e0ddc6ebe6a

SHA512
ec5886acf85fe0c93476ad14c2ff6bc4afa9aafc2669f4dee92f9f4c578610b0f0ca227c1f011c7e7283725fd98176ed2f0602d7e27ef0ce2b22fcf6457b38ba

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
e8c793b71bc1a0c07174810c0fef1577

SHA1
ed0ad9d49bff186e4dd7c4c2c030e76289ff56b5

SHA256
99bc14cc6b203f721fdbc94e36c0e6133b63eaaf701935ee82cca11dfdfb20b9

SHA512
c3f6fd69c766924a5f6b08364c57b6ffdd7fccb6480ca8b6cc889f2377abc93df7938266d3f4280765fac6dd088d76e085ee7472875a2944e1b371d1dcb80cce

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
66645f6ce540c6bffacc2cd33ff4df10

SHA1
0e59a5f09a920f2c036a62928d263829bb6d22bc

SHA256
1a1c043da3fe0ddeac83b4e2254bf7c15a968710c8b2317a6b93795f01b7d18e

SHA512
d7a0dd58fdf92acfa96ada0ebfa8afe1ea6bca881fba087a55118130eb07a825c3158b58a32da91776c4cc0dc3a810ed9b77e681ea162ff409ccd34de53349e0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
a7e656ccce9ca09a0620ee3042fbbf5f

SHA1
57b3badfe531a35ca287efb7a70009f6eb2f6721

SHA256
445475732c2c9ac7c0cfa59c87a4da557795b3f8e8930ce0332f55369bc2a657

SHA512
87b2aa1d88e361790c6b0984e9edca34fc16ffcdcef53a5667738c3b4ef10212662652a9218c96f244c693ac7a10d1bf684794ca5b97f7f9702e1c01c9189162

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
fe435301ff0ca99f34bc77ec134bfe72

SHA1
061faea69aaee3cf2f6f34f403fd496feaffe038

SHA256
79ce664e31e8c5a1351e12cd703d039ceabec37e068489517a2c74eb75da0220

SHA512
77b6abe04a137f8514b42592a513482f92dd6ef49f48f38cc0bc1c557d703e02865bb17407fe3719af87b5b9647d7a88866ca3cc453dc12a6b1554bce0e8a4e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
aa0fd9f1a6b8241a504ea5c02e0bea90

SHA1
26c319ee217c15627f5448963878bc60f56dc7a9

SHA256
5dde5a4e41dac49bf3b10ab5444cfeb27857564345141edfe0175c247f393d6b

SHA512
1b3e36a47a07644005d54449715e197ea7d385e04cddabf5801d931ff502d6b98ab961a86937de60c42d49f460efb11f6695843d8d007b8c533f4be7669d00a1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
fc238acc69aa00af1f2c77b5741b92db

SHA1
800dbb005826d6fcbec862407910f8f8260f9c51

SHA256
e31d58d2b9e3494d1b01705b68ec2eb06c5d47d52adb2e67a8e3574c6f02a889

SHA512
491ffbcb469f1e59dfe1ece3c2e6f355b2beade0efa31dbe015f48f879cb86e89eb7ccc085ad9247070ed66483ef92e8a6c59af20ee2a7f6c01d731188cf7dff

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
efa1b8d0f27179b5354b3c1c0a113e2f

SHA1
9062d706c394eb8d75bb2d4941a4aa40196f396b

SHA256
ff0daba87ecee7195d3fa3309cd5d467b96e681771d8bf768b7a03ab6645e3a0

SHA512
34966a5c5d39910c8f056478f84423ca357c1593ca4514f4881bd12b07019db189f7d9f800912950eb0640f5f35b00746d350d0790772b36397fb061d926e7cb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
434b15b85caa0478dd800fcdc8d36669

SHA1
e957424e0f0bc6bf23c1b184968ba57f5da0bc9a

SHA256
053aaf0013966f5f9d97d0670b02b2ca4af1fead0305dceb88f8a04b35e7ac3b

SHA512
c0db4633cd657f94920014b7112618d69b6e37d98735ce3044234c5257dc713cb3c772998581c1a233b73786568866a743a802ab01801457277ca1e25ea4024c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
d842fd80bb3b780bb92e96b729711c69

SHA1
e5d87139d2f13622d28c493d6dd6f297ce3d53d2

SHA256
1643892af981902deb200ed9e72a76bd539d573f50a473be014f4d868e15bed9

SHA512
9b835ca4a9bbbe94a773644c667611fbfd330a7ebc0306802b78901bf05f3838dc2d4d2e24d0fd1014b9cdb1c51c6e5356b3f2d5c0bee0a47c18d05222ccb34a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
666a47b362d43b9a1090998063c47a98

SHA1
ef7ec99a943bd6aa08f95db566b86f294317040e

SHA256
9dfe210096215eba8d5c9908b543b887628ee2035c6621845d48def0827cb0d5

SHA512
93a2142709da0b7c47e3837ff3831e4253b36ecd84dd7bf5a973ea4df9e632ba9d457c2df6497591c18a7da7d9b2fc0f9b4361d0eba6949bc21a652eb12909bd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
a2a7ecb46c583b591a04b23846888429

SHA1
7ed445f757eb3dc06b1775350689ae03e85090d3

SHA256
d467f90fb005f9ffe69e210cd53143bf111e25010cb0fac12ff83edeb311bd0c

SHA512
5b1f6d9ab9e674eabfd395533cf9bb97145b9d51a2b183fe826819f41e0b4f9ea26b31068eb01e541697dc22bce1969494d4cd9efaf1f0233416083b56dbe9d9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

Filesize
3KB

MD5
ce13abe5aabe4ecec66927223cd75440

SHA1
3a0ef31a0047f2d195a987cf3b00092f3932e96e

SHA256
e4efdf90c0cd2b5fec86344de0005d20dec418976c13e0372ddd5bd9482d8f21

SHA512
1e69a941d79cb8197e55a1a4904bc9128647aab74363d8f3a5e684f93a3a244cc27bf8d5ed6226da17c871c58fd0d68ffc7fc8dc27abcbe4d346f472641d1c44

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

Filesize
2KB

MD5
6204c8220370adab8957f9f47fc4464b

SHA1
7a69592e9517bb7f59a4158b1f39bb3454f15b6c

SHA256
3defe817fdfb42c59ee1985500d0fd9d3c4d0d8b759c19c61708bb5f57c7bed2

SHA512
54a0966bb7c5d3536e351e15b11b663fb74bcc009ba49673efce4b083e1de8bd26abd98025071ddce49718c28d90941f444dfd1a20e72f7a794666afd3015037

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

Filesize
14KB

MD5
2ebcee306738fc8c702ce0f7b765470b

SHA1
192b41c7215977f25e6429ddf04f92fc0db90317

SHA256
ea69f3f32f8a730d921031ce9cc461c09892f81642c0742a1dffb8f342664c33

SHA512
ab492e28a0ffae7563b86f50049a202dcbeeee9a345b8ae4c06f1e4cf6f82c51158b8b64032c68b6d41baf1e007a1e21d088611e88dd1792e6751a655e9f1104

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

Filesize
320B

MD5
206cfedce5ca2b1a8188856739b704b8

SHA1
8855e13b157475a540e0326e6bc1d5f5d42fa967

SHA256
82b3d89192b8ab9be2cdae37ea963f1ec40152bed6c6b2d54ee7814e814f0e20

SHA512
104fee020588404d172b67061a34b18f7a55d0b22b8f73b99fac48873a2482c57131cd602068cbd228eed65ef8ab1c2762928d6c499fb698fb76be1923ce8c51

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
e0647b44ca806a14b5cb69d013d114ce

SHA1
92e477cf5a827ce5fb1bc25fb5d1c5ba4a38744c

SHA256
a699669adecde74c6b06a0ef3dc5733728824b16903686d6d5eb752e4392eeb9

SHA512
a6d66e95984a86b4dc8f5d48908d5c88310ab97367788d130ae4b6c97f1f32cfce4035de29f4313681162eadc9852a7531aefe98ad92046d067919dbbf61a148

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
d2dc9edef002ff98871452c3f1f24664

SHA1
bf792df23ce3a433d8e25fb00634d85a22490f13

SHA256
11409a9ff51a8aec55a6baab2bf92b49c21e57995dfe91b6b994f6a137c70221

SHA512
57557fe7b247a41358387d4731a818ab7cacffb6cf13a855d775b585d7ac395ddc64f609530b49744709916689199fa63e61c5cfab4a9e51b85b8ac7e15bc8c7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
960B

MD5
bac3de1440ae0621aa4205a76d9752f0

SHA1
4f2db1ffd90d964bbc9095f795621568004a3953

SHA256
374340abaa6a0619ccad690d1ac4b56ce0c411b8562bfffa27ea8dadd50e6a56

SHA512
608789710bfcd64e63bb9be706f343e57dde17fa36be76393b070218ae03d381a766d413057a6adf9f3b3e2ca40950de0daeeb013ac998e614f45dc5b4c0da7b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
128B

MD5
7bbb7b67e0efd37af81b6475254b18d6

SHA1
f3df4e49e7cac5a8e92dcb3ade5c0737cca4c260

SHA256
d2ee4a2813f21963b0449928d6db6165b2b7495abe6c5315c10ec0f83a58a6ec

SHA512
57c1654c2953ff59cf8dc6bc9c9f73767a608ea8960981714e305c878aecd84cc44b4f82c1b191d730998f66b6e6dcbed32c63b8bd65f4d1e6a448a72cc6afd8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
2de38be722c23fe5950f25ba39534d06

SHA1
6d8d85095bb1181168a197e7c63e1e26b48d6b6c

SHA256
2294230a41d1d84f1bdb7308f7bbebd273ae02502b5d919b6690a6dec9d58880

SHA512
ee762c90b3cb1a438fc1aab7cfe72e7975247c5e7f0cc14fc5e433e68e0698bf2da01a5b8c73322c07a1fa225cc6d20ed2b2479d5901a14cdbbde2dc242090c6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
935fb8cd8d5d4a6a1b283a6c28123324

SHA1
f9fae1944bb24bb1d777020fb6583773c78457ae

SHA256
2f4b5799f9b22c224121733f86ba830fe4b9b5bfa926dbf4771270687a0cb41a

SHA512
72579a7b39c85e68f44b6b784f1820f0e3b3e98f6249b0b399b270c2d2bd2332825bb01fc916e62f0f21f40e93c0b04ab37e9c3023c53edcbce18fe82043cdc6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
64B

MD5
ff69dc1562cac7f0edf3d0d67f08159d

SHA1
3f49913b3d8e2c8ebefa0b3418e468f6c696fe00

SHA256
b28280793e521533e8dd3d6b8a8e9833dafa2a1195b02b3b2b958e2252fbcb10

SHA512
d30d5416019780ee4829cbef25eeabba7aeac7c2956d809f4683c471f9e3883d64cefbb8f024ff440a536018c845890c0f526ac54d8874591fede6c0b6077ade

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
928B

MD5
e45b96d6e25104c9fd03850bda44bab0

SHA1
1134f59c7614eb044917874f7831abcce8b49ff8

SHA256
988ab2d75662e0c0e15259331d708d5764541fb60b7a6e6acac4b65c9adf9898

SHA512
b0294f62f4f78535394858878d4479c4983880ce9ad297d62dbba1f4cc467f45f35448d1df12c76a449d6dd1f523a3f654733bc2fe77af368d4fc24334de743f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
96B

MD5
0cf92b51e49967d791ecb38bde6218f9

SHA1
1e919c0f57dc9757254cc2d9637cd72e2a0ca273

SHA256
717955146209e271d420d50e55b8f4aa89f42eaec88d0e019cbdd4c3edf238a3

SHA512
3ed4824bd628fedd005a194142e9a427b9588d7a2d1323d4b362e00fb922c3b6b7036ee8fce05f0c1144ac8a8f10e4be9f4141ad8a90967c0a70295e1a141edf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
96B

MD5
d5d030edecf89935075c09527e7d62ba

SHA1
2bd91dff055ca4cb1956f37cce81f5f75b0c3a3a

SHA256
ce94e76f85050d47f5832f63be41e3b9cd7279b0aba77dcbb290996f0fb2de5f

SHA512
43cdb219029d58dfcb40eae2fffdc94c8e8df7292999c85c253d40dfb1da9a3b3af296a4d3740acc04b9f14f5bd75e53d7c4fefdea2848df980a7b3ac8a26e7a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
336B

MD5
d7c98c30cd5a4ddbf4cd3439453ef71b

SHA1
e173740839c84b3412d4097af897e08c0577b3b3

SHA256
63589536ca43130f1c549a7520c52746e7ad688339315b1d450aed357fc5b9bf

SHA512
7c861ba24b349b7d914bbb3a544ba66b76227012a98b0ed89a402bb5e0b3563cb0a822811a5f5444db9974a62aabbbfd60d5276f6dc578c2fa42737cc0563327

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
c7934a6350176065490ef02c450b0ece

SHA1
c16bc7f479dac230fdb28af6e5e468fc374726fb

SHA256
157ea334a7e11a24a34875f1b975cd86203e1554004f23f32b80a917aa458cbf

SHA512
3105463807e911090c18d1e7facb5d06a96ca97b93745cc15a3b51887c6504536d5fbbbaaaf3f5162c324fc5dc7c2b1435ae2f2c8f5e165364fbedbdd579e2ca

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
176B

MD5
c8e7eca38e39f2a436e7b4701d3fee66

SHA1
6385ab93cb38f2ac5bb7a7a4511e6e4ee4816693

SHA256
1cfc080bf2e53ed2e3577573506bef9342a01944eae770bcc67dd2cead03e313

SHA512
cecea91beb2a8958e0398de46805c30fbab428ed24d2d288620bb094bbd67a56f03d509ea160b14e75e0946f106d5456da1bf5befb3bb21a4dc39dfb77823481

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
592B

MD5
87b243ee2361ead2298138a490ae6f50

SHA1
6415c90696c21c57a4125d553d9f8e09beb37ea4

SHA256
ba82cbfc71de17b913a3f32c5ddce9a8a480ba72f50e2c0fe1c96baefa0c370e

SHA512
231475339942bf1d17af333b4edda70bf2c723cec5baf867cb18ede33f5d459061a7e9d8c048efb77786673460238b8bf329e3adc6887299a02ba5c795f51de6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
128B

MD5
9bab4c231b1f48a78366a40c39ef0acb

SHA1
a3305813cbbcaa722809bd625312f2898150e394

SHA256
aec7b5c54cab62fb1d610128e829e28dde543ef385f51761f4380f7dc1208742

SHA512
df0050726b1cb1316295fd57c448707a3c04545a0434ea2ecc4362c0ed22f08961483a7973d6f659a3a5fb379c9d73717fd3a2518ba329948b3604539548e160

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
320cfa85661ee2b67a3903f6759252f9

SHA1
c093f6a7ea29b7042d632a1a1d5a1115791dc0a9

SHA256
1cabcf3455df16c00548f6a8ec4a066fc6d3b381401771e7ac9894bb1fbb776f

SHA512
685c138bcdd4f76b60c14ff84b9049280cf31f648a8aaac8efaa11983f02fbc3fdce8de748e83e255caee6dff041c49dbf2e54ca93a0d27a0f634678461ffe66

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
896B

MD5
227957cbd8888a618d149938fed6f78b

SHA1
56737a8aa7900b0cdacac0e8c522c65b8b7568e7

SHA256
a42d737240fc9bc5c7f345334614e6baf4272b9a6c68dbd87a6f0fa66d477b16

SHA512
0b484844704ecf7ecfa3b3a2e77e16cf79c413a857d7965434d75476707a0ff0e4dd0e89b84552ba750ceee54130523109e805a5e5a7c2854737bb794d4e056b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

Filesize
12KB

MD5
1fc44fa9a4fb87dd79016650a8ee7a30

SHA1
d2a134c34ea4128226714d1db71f4d361395c0eb

SHA256
e143d5ae83c8ecba2296956eefd2a1eeb0de4163218e3ebbec00d832097caa0c

SHA512
144ee7f31d4254d354db51479cd7b1253bc39580edd340eeeb861d267025332b37c379c464974a863b61c31c2fb6206f6de99b0b892c1427f148b9a9c1c7c554

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

Filesize
9KB

MD5
be08315b3a944541321df14102cbfb43

SHA1
ee3df16e0af020ad459f8e7188f24abe16743725

SHA256
a06d852c4aa1a3c60ed43596b583d04bb131b497948009f0be0b87c13909c456

SHA512
e0d4dd49ca62d017b8d868476d95f412c5307fef34ef883b075e34f0aa643bf170b41b3066f5dddf69deb611a7225a181a5c9dc599107764ae5dcb0f8693b968

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

Filesize
9KB

MD5
dc4c7a8b1f0c46a0bdad37798da07ee1

SHA1
f94cabf91292b9c52ce798459695581067de89cf

SHA256
d9ccebbd312dd2cc3120315e1209dbd7682637c6b2038be102a00487e9dce43a

SHA512
f7d7cdfc4a8f77d0050a958f5e429e566ff211fe2226fa400901d0539aab0b3c3101fffc8ac63c474b8f2c53291e37caaea50b68456f6e02f011aea4d12a7811

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

Filesize
2KB

MD5
029b94cefdc753ed0598b68aac4b7aeb

SHA1
a5457dd266ea81d3bd4c3ab28eeaac633953ec8f

SHA256
e749d17f3fc8473884dd18259756fc6bfd19d7a29fa7166db44f09b7c50bc5f9

SHA512
bee944d78bf5d4fb27746795093bd9caf70b826a7bca2c46694bb727cb9ec257af9096b78c473623cd65e67ccd88522ba84afa63a906c3db01bfd4a8f3fe5cac

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

Filesize
10KB

MD5
91e301861633e175cee75d811b3e3109

SHA1
36cbedc8a56418299ecf800fe344be39b59c0a6e

SHA256
19bd2a271432821170e176b7f95893014cc6b82048751d1b554114141a513e16

SHA512
013e4bb732c569e89e073d8875f00f73c56af4d4882387e940b3070d964adc9c7323e7e821d7702cdd3c4d09e8133ebdcae2e4b6c94517325ebfe59a555c3ce5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

Filesize
21KB

MD5
0a4672bfe1eb317a2b41c98761be3f33

SHA1
5687877bd03c20f75a26a595fbbb54a6087ee798

SHA256
b254b7490dba936a1edbfc48a5b7dc70fdc88e0cedf2726d6755b55598f058d2

SHA512
575293bd8cb2f4de66d0659bb55d371402740966a6fab4745a4643afb895a309de51c82f231a9f361981f45eacb72ce351a4abd56ad873ad8c663201972b7536

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

Filesize
11KB

MD5
a0058463511bac7f519e6f47596965f7

SHA1
aa0d1b69c3eb818e05a550f6a64521cb1655e346

SHA256
adaade8cd0f6a67a12aedd1a37c66ef5c0e1b92f89e14fcd2ba04c3ce872499a

SHA512
077a54411c694fa913a251f5b4f1e34721ae6a191686e6ea8536155605f3184c7150489a337d2a3331a0823dd796515c4a5410b40a8ead5a2b9f6d6d51752b48

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

Filesize
10KB

MD5
107d75555e0ead467ae30e0a0626efd7

SHA1
28144d9924cb5eb8d2fe5b3ce9d0f7ac74e4a29a

SHA256
9d56151ee9ccf6898b1ccef80a308204211a897acae57d902d5bcccc30d6f7da

SHA512
2013886d809eab8365e1090aaa868a6163b39537a394edef93b0cb7c53d0c1f9f9851b5efe6a03b72023a456c9eabdf896e2cbdd9d6adfe81b2ec3bd1bd38dd9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

Filesize
2KB

MD5
4af30d8bd14b260c7ab904d0afa8ce4e

SHA1
42c0892f2d467437c25c8e34f1c26c6039fa2704

SHA256
517c0778ad5b8711d61bf3056faddae98c0b32b300b253dcc794b19751e4f398

SHA512
b4225b4d0c60a05a7b6591e64b6743b2bf3ac2a2901e6a16dd3fafd27938dad2172deb168560893871a53b99c3cf4240797c749c1a9c12021cada2be7878e46f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

Filesize
7KB

MD5
e8f1c5c21ee8fa56481374c68e709f97

SHA1
719231d01e950be818b4198afdd5c96e07c37f12

SHA256
2101f4f743bf891c52a1330131305c1b385d94c94b8bab9bd1cc9b614d78ac1c

SHA512
5fb93a1e48037ee135e0e0ea0541692f46950b50d6efddabb7a8fad56ce5b955d4e0963bfb6ee4433a998f5ebf2798a96a56f15a6c0775b92abbc7fd10d7df3c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

Filesize
272B

MD5
cba3593acc817dc74e271efa70f3fee4

SHA1
89f01b6bb72246fd583afaa134fb78abcdd808dc

SHA256
6b3040ce988668fbb035c3e515b7ec91ccd96a766e1fd32dbe85233df4e48d2e

SHA512
fe65585e64730c645c92fdb310fe08f0e6bff84b7c2a9ddea94a076f5ac2459a3d64304984c89b1f9f6b41f7ec914f852259df7814d124ed1684dd73196138af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

Filesize
496B

MD5
33db4625debe7ff2bfceed00bc6331f6

SHA1
3097f38274916cd523ab22aa3772a5b8d53607a6

SHA256
d8ec3d8580d59af2d19f35932c5e8b2ced4fa89f2a0d8f243f19a25a3ebd4f40

SHA512
e29248a90f06d52ea3d4bd32dc2247f45c86b5e4c633a1c97b3a16e73b30ae1234138af88103d60ed8e56c33fa889c9dd2f5e0f6413bad34f4b0ef55ccf069ec

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

Filesize
24KB

MD5
c113446134e04d13a699fe97d4010fe6

SHA1
2f71d586f994c0d63a11a8528e04e9ca4e48726e

SHA256
2bbfb92596b01a1a2f6707170614b966e6924752052e89dc55d0436132f8cabc

SHA512
ecf025c7582829fb35c1029ab62955bd5f6b5d2940bce047fb94fdf6b77e8fa3e6c9a5e1249a82372f70be695bed367717fe8dce1ac03a722e1be821f6450dad

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

Filesize
1KB

MD5
f17d8fd08ed9423b1278184099c2825a

SHA1
be9fa6899f21fbf34101aa7e55397d51a45eeb1f

SHA256
7d2df00e947d239777b840f9d334eced6a51a88a173331ea33309fc917d66a89

SHA512
262f2aafb9594afe10df5dfc37e52b9882768848ff1dc2acaeb894e7bc5c36dca04a9c2cb8fc4bd38e0e4451831a3fb3a5f23e35c9fa3df95ed658ea717da968

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security.aspx

Filesize
9KB

MD5
405157ede67233012cda9313c5f98039

SHA1
88a18dc1ababa2f8a1af525559b64b036cf57db9

SHA256
0216f3130ef46f54cf7b7c18fe871d2f138e767f3998530a897768d06d716b4c

SHA512
28ab58ce6126c81cfd10e178ef0e7aff4f17d9733074d7ac04a9297e0d077258fa5ab72adbf7f92a58188ce1d750b1246e35c531877714ef97829eaa02f04316

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx

Filesize
1KB

MD5
4c948683a4c5807d185ce9916f939ba5

SHA1
cf04801180ccab226702e5854213db3057eff7d0

SHA256
89ff90b97f64de4acbc11285d4777f1d916378acc315d00aad6c32dd84b17367

SHA512
f774d8ecdec78abf8a46f5a6be705b67566372467e3e99a0a9d7e08d99162e9e674e8d63fbac09bf01326feb47b5edf5ef3beb747cb87ffa1bde6fcbc95adb42

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

Filesize
2KB

MD5
8b0c5c9dc16e415d863755c1bd1ce02f

SHA1
50bc3d96b77a2c5605d61b5d0fdc55bd3b9a7c93

SHA256
8250fa50281c32340c66d6b1e9fc07586aff10386bf166fcdfc373586f2a0a97

SHA512
d15a2100041233d13f3812529e79eba9eb9ef9660ffe5a86b0e86971d5b586728390ac2821d3fef1dc9cfa17b1cf04e5a4153b483d705ad467e8f9be5ae773a4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx

Filesize
4KB

MD5
3c94ac68fcc4a04ecd4cdf01b2cbfbb9

SHA1
aaf969218e3464f3eb48b6d0264abaf1a1c6196c

SHA256
56d04acba1a202d7b04a0c03a472ebea50c944812fc7e644f35ff2120e0ef4d3

SHA512
9cacb0b6012f9432454a04156eb6676c5255c120a43c4c8ff7f94af4d7667e27ce27b9f6b924abcc71d32a945502d4eafbf3581f1b98256b0b4f4fc7c002357a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\error.aspx

Filesize
6KB

MD5
543e40fe79e16831e1f30ec48053d13b

SHA1
e22d8347a6275438b161a33b732775de7f1c8291

SHA256
e6276d66c205cc1b7e89cee1aefa78906fcf0be2bcf8be87eba869e58fd82b05

SHA512
8bb7392cc61894af84b70cd870014bafa6fddd62955fb8abfb3b1739f463945ee6e6a60960ba5393699057c757f60cee49ca362e837e2bd2a653f791abefd60c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx

Filesize
1KB

MD5
d9d403496ae6f3e6078c9da65ba0f9d2

SHA1
a2ff5666e9b765849feaeb8a262c592591c7c855

SHA256
ffa882c45e732421a2435276d02e60d1904aaeba4d09df023cf8a035ce036f23

SHA512
9e66a21cb14f24ef8a342492884aa02a27cca55813b31f0fd9e45e4e37c17c5d64984e7fa19749e4bfc30494778f57e3d206021a8593f1949546751851681dfa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx

Filesize
752B

MD5
448cfe903e7bfc04e8bf83b582b00f19

SHA1
91d41084e757c2c84d10237b8d839cc2fd9744f3

SHA256
7a4e7465bcd6ca964e7551e29526067e9fe710fb6ab8fbb11a6e0bf876ea6e46

SHA512
08b7d14f058b613defee8ca485964eb022eea85788ad45d431f204a140f5595754d14033ea753a3a8a59e6afc9d221e889ae72ee25a91d0fdd21dc1a49d57405

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx

Filesize
1KB

MD5
673f95452bd1ee76136af88e60545eda

SHA1
1b6ad5cbf04ef7301087ca97f5d5b8e4696d702e

SHA256
e8fbfd3b385933ec73e2f131c3add35530e39b76b4635838e490a94a8daa6035

SHA512
448a3dd23b47deb2247394cb7e1919a5dd1625fe674cc2cb9b332fd6c86463c6fcd31c1ab28c53bf47adddd0786f30d3d31f9b077f71e65f52340c137ac4290f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\navigationBar.ascx

Filesize
8KB

MD5
f8b12f77f5b65c9596e0e7b6ef858c5a

SHA1
5b24eb5d3208998add1e37477b12d4f22ebebd0d

SHA256
1675ace975e034c4532f8b85c4c4db8c44e89b2e6f72e6ba914e3ac23ba68cb2

SHA512
bbf89f96a509bad3ea591bbf182223d8843cc07d447634b7f9cc9efbfbfdbe4d3885357438392b9351461873bd0f80a900cd5f2f8b10c4b8676f0956653dbc00

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
79ef2b531c9b5e14449637a7d8809962

SHA1
bcbdf2ab93c6761882df4ce6e99fe1d2991117b3

SHA256
3161d144b5d73cb706299eb11248f5e437675aaa7c7d1beae6a447631aa5bfbe

SHA512
55f7b65a754a94c4f3e949d592034122355ceba969729dd2d5858ce57a23a241701ee37ba49fa859980435573cb147851652f177c18a489e59a49a8fadfdef5d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
b110c5f1170ac94e7885a5f579fcc6ec

SHA1
625ba71d7be31901d56fd3080152950238decf95

SHA256
7f716e53c51775bd0bdaa099aca84c8b585b3dec25e93b255e9fcc412629382a

SHA512
f3ac3f005383279ca83c837b4d5ee7934b22707c3a6c499773fb881db0b144ade27bf029e2ba9a9804be1a227c10fdf4d7532fdc6627352c89c23767fab956a5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
6d8b82bbf7c7fc885c36e95a12a073dd

SHA1
5a030995ab65e1a007d247492d316ac9a06e93cb

SHA256
7a75d44943edb65ce7f9c2bd923b41db27568388ae0dc4bf361b520516d1bb3f

SHA512
a0ff921e931c2dd0eae494d998457b5343f663f1c8a01544795221ea3cf0d0be3029ac3c53dd12d8d77d6e4805af4acc3b5286528a98b2c4c11e05cd99f5d6cc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
e4a64780b3cfee22b2ef5b94982fc347

SHA1
fc40b7fd30f3b60b37d0e8408d61d895cecb8925

SHA256
82b38361182308cbbee1afabe0c6517f587b76566f3cc13969b85a17b793e864

SHA512
2bda186b97af07d5b884b5f87d96f64b07d94d8b3fb458eae39e4a95d5fcd6b716b5f7da837b07bc3d2d12e3715d90889d51fc82296777125e17f10fcca7036f

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
a4ed82a5b56f938da191b5d261cbe24f

SHA1
37e51da989efe69cb0a3232dd2eff49a261e7835

SHA256
fc7fbc519475e1f5754a2d617b922356f2307fd0ca05f75920a89bf174ccd92c

SHA512
0c96421ab54dd9eae7103653119fb070fa60ee3640d85439ea2353d3fc191581c8bbd6fe116c4e8e03ae750e5dda39b22f174af0a4e38dd272299240b227ab2a

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
1c8a4700fc849ed9443ff625ce5786e3

SHA1
f740e4a61d8a14b1f8650bbeca77bb1fc704a54c

SHA256
176fadb9dc0c3bda518376d9ca5d15f62f44fa1b39bf81392924112fad89cd4c

SHA512
1202c1a02639404706cc4faf8d829d2f6d768bcc4a9a5068c4f851b773c104b2454f3ed740581ce3c025f489f0d6f125b8bb72d252c7e71b9d1d46d795cb2c8f

Download Submit
\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe

Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
memory/1908-49-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-55-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-61-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-19-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-63-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-65-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-67-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-69-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-21-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-27-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-29-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-31-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-34-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-35-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-37-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-39-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-42-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-43-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-45-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-48-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-17-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-51-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-54-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-0-0x000000007471E000-0x000000007471F000-memory.dmp

Filesize
4KB

Download
memory/1908-57-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-130-0x0000000074710000-0x0000000074DFE000-memory.dmp

Filesize
6.9MB

Download
memory/1908-59-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-23-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-25-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-15-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-13-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-11-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-9-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-6-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-7-0x0000000001F60000-0x0000000001F8B000-memory.dmp

Filesize
172KB

Download
memory/1908-5-0x0000000074710000-0x0000000074DFE000-memory.dmp

Filesize
6.9MB

Download
memory/1908-4-0x0000000074710000-0x0000000074DFE000-memory.dmp

Filesize
6.9MB

Download
memory/1908-3-0x0000000074710000-0x0000000074DFE000-memory.dmp

Filesize
6.9MB

Download
memory/1908-2-0x0000000001F60000-0x0000000001F92000-memory.dmp

Filesize
200KB

Download
memory/1908-1-0x0000000001EE0000-0x0000000001F12000-memory.dmp

Filesize
200KB

Download
memory/1908-133-0x0000000004770000-0x000000000477E000-memory.dmp

Filesize
56KB

Download
memory/1908-131-0x000000007471E000-0x000000007471F000-memory.dmp

Filesize
4KB

Download
memory/1908-132-0x0000000074710000-0x0000000074DFE000-memory.dmp

Filesize
6.9MB

Download
memory/2176-1834-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

Filesize
9.9MB

Download
memory/2176-1383-0x000007FEF5B03000-0x000007FEF5B04000-memory.dmp

Filesize
4KB

Download
memory/2176-142-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

Filesize
9.9MB

Download
memory/2176-141-0x00000000001E0000-0x00000000001EC000-memory.dmp

Filesize
48KB

Download
memory/2176-140-0x000007FEF5B03000-0x000007FEF5B04000-memory.dmp

Filesize
4KB

Download