fantom | f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b

Analysis

max time kernel
1563s
max time network
1564s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
22-06-2024 12:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Fantom.exe
Size

261KB
MD5

7d80230df68ccba871815d68f016c282
SHA1

e10874c6108a26ceedfc84f50881824462b5b6b6
SHA256

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
SHA512

64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP

3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi

Score

10^/10

fantom defense_evasion evasion execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>XLwCI6pFGJF6soTws7ssC3aCt4KY4Sq/elm6DxkGVq2YsK614DCjH3nGw+9VNNBvRa5Xgp4tIMx5aC7sIsCVn3BvlzIPTCiXUe7HmZdBZhY2S4by8h8wmPqgH1LoYKES4U+m5TqXDgNk1ml8h7X+LPVOXaAC3zCmISRTPf8Xr+EZZlY+BuRMho/if8gAClciBU2hd3l10TPSXkaJQBd2nKMKLCt0Z3GBoRLCcCFLoaq8cZEcKll/QJLKlvUtP1gKOVvz4fCN8i9W0+E7fsfxp4b04L0mRuN0WnVwCyhIajZ/W2fc7LawcrPCxsKqjeXpJj7ocpYzK7McYHJO7n059A==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

[email protected]

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (3022) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
evasion

Drops file in Drivers directory 29 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Executes dropped EXE 1 IoCs

pid	Process
2628	WindowsUpdate.exe

Loads dropped DLL 1 IoCs

pid	Process
2444	Fantom.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\InstallShield\setupdir\001a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\Printing_Admin_Scripts\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\wbem\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wialx005.inf_amd64_neutral_5304c93e2193f237\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\Microsoft.PowerShell.Commands.Diagnostics.dll-Help.xml	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\TroubleshootingPack\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\hr-HR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\migration\WSMT\rras\replacementmanifests\RasDdm-Repl.man	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_Arithmetic_Operators.help.txt	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\TroubleshootingPack\en-US\Microsoft.Windows.Diagnosis.TroubleshootingPack.dll-Help.xml	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\lsi_fc.inf_amd64_neutral_a7088f3644ca646a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\DHCPServerMigPlugin-DL.man	Fantom.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IIS-RequestFiltering-Deployment-DL.man	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\0411\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\MUI\0411\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0804\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_script_blocks.help.txt	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpj5500t.xml	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_Break.help.txt	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcrtix.inf_amd64_neutral_e91a5dc0655e200a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmetri.inf_amd64_neutral_f89b8a357327f615\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdkj2.inf_amd64_neutral_0cf7696e2236ca4e\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\OEM\Professional\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\HomePremiumE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IE-ESC\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_Comparison_Operators.help.txt	Fantom.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Bluetooth-Config\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\migration\WSMT\rras\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgatew.inf_amd64_neutral_84eee4cc19fd00dc\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ph3xibc12.inf_amd64_neutral_ff7295ba5a46d63f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\_Default\HomePremium\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\eudcedit-replacement.man	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_Comparison_Operators.help.txt	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\spp\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcpv.inf_amd64_neutral_5667cca434e3a6b7\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\TerminalServices-RemoteConnectionManager-DL.man	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_Foreach.help.txt	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\sysprep\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\HomeBasic\license.rtf	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasApi-MigPlugin\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmhzel.inf_amd64_neutral_1292ec506cfc26db\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_functions_advanced_methods.help.txt	Fantom.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\_Default\StarterE\license.rtf	Fantom.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\eval\HomeBasicE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_pssessions.help.txt	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_join.help.txt	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\Tasks\Microsoft\Windows\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\System32\catroot2\edb006D2.log	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmisdn.inf_amd64_neutral_061c61abd3904560\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\tdibth.inf_amd64_neutral_6ad685957123daf1\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\sysprep\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_locations.help.txt	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_Core_Commands.help.txt	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netr28x.inf_amd64_neutral_c86d6d5c3810fc04\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpd4200t.xml	Fantom.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\_Default\HomePremiumN\license.rtf	Fantom.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\NetworkLoadBalancingFullServer-DL.man	Fantom.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-CertificateServices-CAManagement-DL.man	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-shmig-DL\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnrc303.inf_amd64_ja-jp_b0dcc6693f67451a\Amd64\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\System.Management.Automation.dll-Help.xml	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\zh-TW\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Median.xml	Fantom.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\de.pak	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar	Fantom.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\5.png	Fantom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_disable.gif	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_zh_4.4.0.v20140623020002.jar	Fantom.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sw\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\gui\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\de-DE\gadget.xml	Fantom.exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdate.cer	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkTSFrame.png	Fantom.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\gadget.xml	Fantom.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\es-ES\clock.html	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861240389.profile.gz	Fantom.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\Microsoft Games\Hearts\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\fr-FR\js\slideShow.js	Fantom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Module.xml	Fantom.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_zh_CN.jar	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jmx.xml	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_left.png	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\alt-rt.jar	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.zh_CN_5.5.0.165303.jar	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_ja_4.4.0.v20140623020002.jar	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_ring_docked.png	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\ja-JP\gadget.xml	Fantom.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\it-IT\css\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\drag.png	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-awt.xml	Fantom.exe
File opened for modification	C:\Program Files\Java\jre7\lib\javaws.jar	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\calendar.css	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\12.png	Fantom.exe
File created	C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Country.gif	Fantom.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\es-ES\js\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\js\library.js	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\38.png	Fantom.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv	Fantom.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security_1.2.0.v20130424-1801.jar	Fantom.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_top.png	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_down.png	Fantom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp	Fantom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml	Fantom.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\settings.html	Fantom.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)alertIcon.png	Fantom.exe
File opened for modification	C:\Program Files\7-Zip\Lang\lt.txt	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\diagnostic-command-16.png	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png	Fantom.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent_partly-cloudy.png	Fantom.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\RSSFeeds.html	Fantom.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\winsxs\x86_microsoft-windows-cryptdlg-dll.resources_31bf3856ad364e35_6.1.7600.16385_it-it_d1cb4fa22dbd270b\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-g..in-gpedit.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5c13fcd17ccda4c6\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\ja\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-iis-adm.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_694251cdd3880849\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_netfx-msbuild_core_schema__b03f5f7f11d50a3a_6.1.7600.16385_none_41170ef266aac7f4\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-u..re-atmini.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_9422725564603052\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..ets-clock.resources_31bf3856ad364e35_6.1.7600.16385_es-es_dbc7c5d1d33a67b5\clock.js	Fantom.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.0\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-p..-printbrm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_d409e8ebcba50ca0\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-w..ement-adm.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ff3a99847667f8fe\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-wlangpclient.resources_31bf3856ad364e35_6.1.7601.17514_it-it_c213cd424035da8f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-efs-rekeywiz.resources_31bf3856ad364e35_6.1.7600.16385_es-es_b8f611b09bd8a464\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-printing-printcache_31bf3856ad364e35_6.1.7601.17514_none_af4d5367890eb1fc\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\75913bbaf1bee617a94dcd6b5df12a5d\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Media\Cityscape\Windows Notify.wav	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-m..ttheme-ca-component_31bf3856ad364e35_6.1.7601.17514_none_fae061a2e0ae5019\CA-wp6.jpg	Fantom.exe
File created	C:\Windows\winsxs\msil_system.addin.contract_b03f5f7f11d50a3a_6.1.7601.17514_none_46152da9482ca76c\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-themeui.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_404d4df1c1fba452\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\90cd177df2fc13d88c401b6b53a121b8\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Design\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-winsock-core.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_d6adfa39555da0ee\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_prnca00a.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0b1f851a342db2ad\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_prnhp004.inf.resources_31bf3856ad364e35_6.1.7600.16385_de-de_9d18ffaa16564c75\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-c..ng-common.resources_31bf3856ad364e35_6.1.7600.16385_it-it_57a3c6b4de8dd577\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-g..howgadget.resources_31bf3856ad364e35_6.1.7600.16385_de-de_c48c8af135e074d7\settings.html	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-m..readwrite.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_f876f13bcf4fb1ff\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-t..languages.resources_31bf3856ad364e35_6.1.7601.17514_de-de_68123a74207f1157\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_netfx-aspnet_webadmin_wizard_b03f5f7f11d50a3a_6.1.7600.16385_none_f3ab6fef34443b5c\confirmation.ascx	Fantom.exe
File created	C:\Windows\winsxs\amd64_prnbr005.inf_31bf3856ad364e35_6.1.7600.16385_none_4b6471420f8b03d9\Amd64\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-m..qlxml-rll.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_2266cb07209bd947\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-t..unddriver.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6ddfa16ff354bb02\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..l-soundthemes-delta_31bf3856ad364e35_6.1.7600.16385_none_fbf7e0678b64a4b8\Windows Critical Stop.wav	Fantom.exe
File created	C:\Windows\winsxs\msil_aspnet_compiler.resources_b03f5f7f11d50a3a_6.1.7600.16385_de-de_eb85d64a5a9a2793\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\wow64_microsoft-windows-i..l-keyboard-0000041c_31bf3856ad364e35_6.1.7600.16385_none_63b81078a4087e2b\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-l..omebasicn.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_4aaa328f358b43b5\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-m..b-odbc-provider-dll_31bf3856ad364e35_6.1.7601.17514_none_25b6ad6b6f64d102\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-help-fstexp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_97c71811a7874322\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..re-server.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e7be835328ef2a06\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-driververifier_31bf3856ad364e35_6.1.7600.16385_none_1660ccbeb66c6cf1\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_da-dk_ff2b8a4884ab92de\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.17514_none_698fc88e65b943d6\DMR_48.png	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-p..ll-preloc.resources_31bf3856ad364e35_6.1.7600.16385_es-es_1d72a0e2bb459532\about_prompts.help.txt	Fantom.exe
File created	C:\Windows\winsxs\amd64_prnhp003.inf_31bf3856ad364e35_6.1.7600.16385_none_2fd781a76c9dcc13\Amd64\hpj4680t.xml	Fantom.exe
File created	C:\Windows\winsxs\msil_system.management.i..mentation.resources_b77a5c561934e089_6.1.7601.17514_fr-fr_2b9541dfcd6e2e47\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_brmfcumd.inf_31bf3856ad364e35_6.1.7600.16385_none_82533c9760ae3cbc\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-g..ets-clock.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_aeae15a0d7fc043a\timeZones.js	Fantom.exe
File created	C:\Windows\winsxs\wow64_microsoft-windows-p..ll-preloc.resources_31bf3856ad364e35_6.1.7600.16385_de-de_7f0b185800a159c3\Microsoft.PowerShell.ConsoleHost.dll-Help.xml	Fantom.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_acpipmi.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ac73b2c5fc356f15\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-msdt-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_82d797884407f8e9\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-p..ll-preloc.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_4c778c357864a2ed\about_Switch.help.txt	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-tpm-tbs-core.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ca0e2dac56f4fa30\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.Resources\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-s..ls-setspn.resources_31bf3856ad364e35_6.1.7600.16385_en-us_adb4f52a67bb8d62\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_netfx-aspnet_webadmin_appcfg_res_b03f5f7f11d50a3a_6.1.7600.16385_none_dbcd81fadebda0bf\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-p..ndprintui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d2c8fba0badc8a46\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-i..rolviewer.resources_31bf3856ad364e35_8.0.7600.16385_es-es_18eeaea74d77eb05\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\SqlWorkflowInstanceStoreSchema.sql	Fantom.exe
File created	C:\Windows\winsxs\amd64_mdmaiwa5.inf_31bf3856ad364e35_6.1.7600.16385_none_0ad53f58a992b8e3\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-a..core-base.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_f4f0ae70cac9cfaf\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-directwrite.resources_31bf3856ad364e35_7.1.7601.16492_cs-cz_9d6a12eb890b31cb\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-e..rtingcore.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a56cb41c8b19254a\erofflps.txt	Fantom.exe
File created	C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.1.7601.17514_none_04801f69e1dbd8e6\ETW-core-DL.man	Fantom.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Interacts with shadow copies 3 TTPs 1 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
1476	vssadmin.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2444	Fantom.exe
2444	Fantom.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	2444	Fantom.exe
Token: SeBackupPrivilege	408	vssvc.exe
Token: SeRestorePrivilege	408	vssvc.exe
Token: SeAuditPrivilege	408	vssvc.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2444 wrote to memory of 2628	2444	Fantom.exe	30
PID 2444 wrote to memory of 2628	2444	Fantom.exe	30
PID 2444 wrote to memory of 2628	2444	Fantom.exe	30
PID 2444 wrote to memory of 2628	2444	Fantom.exe	30
PID 2444 wrote to memory of 2328	2444	Fantom.exe	31
PID 2444 wrote to memory of 2328	2444	Fantom.exe	31
PID 2444 wrote to memory of 2328	2444	Fantom.exe	31
PID 2444 wrote to memory of 2328	2444	Fantom.exe	31
PID 2444 wrote to memory of 2456	2444	Fantom.exe	32
PID 2444 wrote to memory of 2456	2444	Fantom.exe	32
PID 2444 wrote to memory of 2456	2444	Fantom.exe	32
PID 2444 wrote to memory of 2456	2444	Fantom.exe	32
PID 2444 wrote to memory of 2456	2444	Fantom.exe	32
PID 2444 wrote to memory of 2456	2444	Fantom.exe	32
PID 2444 wrote to memory of 2456	2444	Fantom.exe	32
PID 2444 wrote to memory of 1276	2444	Fantom.exe	36
PID 2444 wrote to memory of 1276	2444	Fantom.exe	36
PID 2444 wrote to memory of 1276	2444	Fantom.exe	36
PID 2444 wrote to memory of 1276	2444	Fantom.exe	36
PID 2444 wrote to memory of 1276	2444	Fantom.exe	36
PID 2444 wrote to memory of 1276	2444	Fantom.exe	36
PID 2444 wrote to memory of 1276	2444	Fantom.exe	36
PID 2328 wrote to memory of 1476	2328	cmd.exe	38
PID 2328 wrote to memory of 1476	2328	cmd.exe	38
PID 2328 wrote to memory of 1476	2328	cmd.exe	38
PID 2328 wrote to memory of 1476	2328	cmd.exe	38

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Fantom.exe
"C:\Users\Admin\AppData\Local\Temp\Fantom.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2444
- C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
  2⤵
  - Executes dropped EXE
  PID:2628
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Roaming\delback.bat"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2328
- - C:\Windows\SysWOW64\vssadmin.exe
    vssadmin delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1476
- C:\Windows\SysWOW64\cmd.exe
  cmd /c ""C:\Users\Admin\AppData\Local\Temp\update0.bat" "
  2⤵
  PID:2456
- C:\Windows\SysWOW64\cmd.exe
  cmd /c ""C:\Users\Admin\AppData\Local\Temp\update.bat" "
  2⤵
  PID:1276

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:408

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Filesize
1KB

MD5
0f26381d0402ffbe4f55f588b26f9968

SHA1
f9308b1ea681b6dd073d2ecc2cc4bd2ebfcac514

SHA256
098a4816ac7ef399def0ba00c9305fca2ecb44e47e2b585262de7f89bb908539

SHA512
3fdc82771c62cea98c4aee86a6c93bac68d3a53fbb7ef82d05ccf62a8888e52e1a325cd1683caf790dabebf538999d2cfa378a0f702ba6c7ebe3e8ea05cd3a62

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
352B

MD5
54044b1067816a75a8d0fb087e929791

SHA1
a2195e6ca70fd6177fb1731514afe532d67cd430

SHA256
f3fbfc4a76425180c5bb92dda3acc8bf88804675bea161b3d0ef525bf9a11f64

SHA512
5d13493e8bbd290c12afd3066db6b02ba1d5f9f0cf4aa0b84b6351e7ce9fe3beaf8bb8e934eb7a2496b908956e7a94b9dc5b0b485dce12222aeef871d61181c9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
224B

MD5
8caa1094bb1ed69e80951680a0e28bd4

SHA1
abce7674b4c5f435b21a8b93724ea512032ae991

SHA256
550588488eaccb31d055bc7349ffdb1c96112a6d34ba4b4d7f259aad60310697

SHA512
240a63a56b4e3511117ceb526831f70fe03f2b88827fb674d3c7136aefdd97638a40564f45fe381f9e4d2db56870fa2379b7062c0d66282c46880e5496d176de

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
53fa9330de7e675dadbdd0ec7e11e7f9

SHA1
ed738f3e274db771c1fd8316b2c4786cea877b12

SHA256
96951b1d9cc9bb4b9c02c6180cf62b87612563630352b78b7dded7ce99790917

SHA512
51910015b2333c2cbc48b245bb56b5231c8adb5c5e2dc18ebe96abcb1d08f84e36a04fab5f6de0730ccca722860eab6a4724f058240ad617e1a82d622eea9ae3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
65e4a2080b0819ddfef74facf9981933

SHA1
df03ab2b9f851ab1f9d0218afa001642d9ed65ba

SHA256
d1a48cf683ee903048e487c2d97db06d461506220e8612687fe92acfc32ecb2a

SHA512
f9ae9f2edd298a8d1b6144cffb7a76e7e4a048f47c2665b80d0327c66e4178c76920a91cbf6d45c5d8338b227c6dd3183331c3e2c303b5c24a0599504d284d75

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
18d2a6cdd8df96e8538d7ea9a9f28aec

SHA1
e2398d73e8bbd6623b0bbd7e5f6f2146614db5b8

SHA256
00f4cc37377efeae39f9f38428392745ba05c7dad21d3bb786d208dda0c6059d

SHA512
a06708f85b3fb41fe2bc1f15003af52894c2a3cb983ce442d178a632c37e29faf63fc8c63aa428d69380a6d5032ebee752873abc47182fdabe9d8a3475b20fe2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
5d52ed065c5ebf0e5a4af90c2dcadd93

SHA1
9bc63ef693e814e71b34a7b3fe7c0bc57a58535c

SHA256
6cea1fb78ef800c9083c296c711a17109176fd3a9d420956a201b4ce4b28a283

SHA512
fc67c935e76f4fdf1f8e8040ec92306467570bb88e9222051a3d51a59c6c549522ef5ecc45d52526b1ad4b763f0e006ec55dc28ff77e04ce729d89ba94a27583

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
112B

MD5
482f66e46431ceb9e46a40f99f4f9418

SHA1
770f78adc88341400228f0aa1810fa1385f1c4a8

SHA256
853583f5e0a6ade1060462d11e2c7d52a6d7557f8484b853601608a3eb5afddf

SHA512
0386ee53d669f8e64a55fdaccc0229502946599b4fe21f0d9901923d3744f785f4f85e840f13cee418f3766c510e5019f585a2145070b9964d422dc467ac3cb7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
5ff8f808cc59fc95db802fe6d13ae073

SHA1
72d01b239f43a050b3e026ce27869012d52a432a

SHA256
9da9d66240130cf74e0c82279274113f8070ff65dfb1b03100827acaf774107b

SHA512
b05ffee923564cb1b26e5d4af15b74912917cec4538c6afb6a0227130eaf03c18755effa71cae51253600a04e4474b1094821669b557e7abd1f152b33921da2d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
aa54924134168342b4f2c7069662ae10

SHA1
59cf4f2c500f5d98352769ef550d5b8ade1acc5c

SHA256
53db362207dc798495934bedcd5689d89a877c504bc3240a6542cb847c365784

SHA512
8d7056cd6d339dffe52126f8dd39e290ea521c35a0b7206bed5fda1910187490e4536f4383431836c97a2a3eec7540c39e2f12cc4fa97d489c932f2b4706e2eb

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
fa2837463a504caad6e5cc467fea11ed

SHA1
568b73ebeb08fa667cc9af1d225c715d32711fc2

SHA256
221c3b49be2a49ccf398738752850d6fc9eacd3c94be36b289ab26ed2fb0472e

SHA512
1c6efb62a46c9b93ea4df2e63f4392467f94124416f3272061be254baf36129f96fa65037f0a98aa9ef25bfc92a63f8b58173637d653f9e8850e40d455d9eb78

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
b29878ac2e43fb17670a79fba43f93b8

SHA1
7f3c6430d234419e3b5aad8d18f99d9dffadc720

SHA256
27635fcb1c85a71549afd6ffff313fa445f7c44419940e7212d85079d22ace37

SHA512
b3c6d052d8d22d40e953239d8e9eafb14525684857cbbe53357b88d8cced132a15f12c6e331da48b6fa3910df74c9becda160af091499947f0f91de05a8a63b1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
6738268737c046bd2a0562950d31e0e7

SHA1
6fa55644b897ce17f1987bf202a47194d51b127d

SHA256
4a917c3db2c1140542c39399a1c9547f490e150deb1275f13e3f3c3d62b483ad

SHA512
effecd6c1c96b319b84268691ebb3c16e7d0ae428385e52f5386562f3a51a5ca840eb63a5eaa234d32471e1e77fc2ee2097da0ebb797397df76ff4b0bc07fbc0

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
93cb47b3f568c3e87c8863e6577e8f48

SHA1
8c3d292cdc8f82151c1f678d2f49980d33f9e112

SHA256
e8fcfb99907295b7adafa8b65788fd335d3932dcbee1bde10d012ca28fb2884b

SHA512
697bd37caec75fa5fd3d644c7ec5f6d3e78245d9304ee59eb8508978aae84a80d30f2b8f3f61f0f496a9f209c256278f29fdb65331558d3934d8317e2280592c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
71a5b677df5be845502696ccc6ef012e

SHA1
e0f200f9a06ffc4a0d9991c1b4e1f326262ba0d6

SHA256
f8470dc0cc68e79f08e959ac28076d38cbe4971f8dca7a544817483b911fca33

SHA512
715ba1090fc0fa42916da90c28c5848107c7f1f2c8a4243a008d892d0754d7ce148ce9f65d49c0f6c523e0b9bc67a76536c738c2ecd7ed25e4ecab59655f1ec5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
99901f40c3e15509bd558eac661b8b97

SHA1
8d61a2e009f38c5d77f6e1f0c9f3a0ca7fc0fb3f

SHA256
5ea8435d621164eb536082938329a667d2083602cc64a5593fcce5aadc06dd15

SHA512
b886a470c5bd1db680c4995dfc0d0c68e52937d218b07408062d709c76b3dbb83c9115a88912178123e8f4cbe17f35d59bf4ce8a3bc98b85bf9145dd0062538f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
7KB

MD5
d425f891dd20f99de5e3defe499bcc13

SHA1
2d55945ba0695a778677a5c668e479d6c6c22884

SHA256
527cb1f93637670c105734df74b2177bb50d69b7469c94f833fa9af5abdb9318

SHA512
622bb87b8e6af983fa5a47b5e0a0e8c9127f540f1adc75cfd1a85165424848205f205a18cfd2c0591535088907925d97e827f8847fd9d5f3c23618c5e299fc33

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
336B

MD5
7b59448198f06d3071827715efb5eb4d

SHA1
b7c6d8333a6f37e79ca1312694cc07107027f91e

SHA256
3b24b920035101abbe55e4f837a33f299425716df1631d1c9efb1d1bc9f381b2

SHA512
dc473f5e52e16a3c41c22bcc3ecff1ef07db1f7b245fd07e385cc6d123afd02231d9442f64822d2b8ae3f51a63ef2dcd2d756f203e2e52eac10ecd275b4b1f20

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
240B

MD5
5b4f1f15f8c68aaf94210dfb8d075b53

SHA1
ac3dbd8997d14b026a6a06da803e933309dc0ccb

SHA256
17123c7303995b36cfca5e1b7f0436dfb1ba1b0786b585d54b5d478319d77fd0

SHA512
8f76be3be6a278e5f04d24324a2e65bc9dad299fa73334d705a1161887d6c51c304eacdaf8011b7ebded1d890e8c0e04c466686ae37645285f5d862036164f5d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
21e2466df65f284347c2b4f814ca3e20

SHA1
730804bfb3477476a86c44b6f14c451aa2395746

SHA256
2ade4a29cac7521fe70a9156f23d18668b50f67e715e5f60ad9d4e95ca977721

SHA512
19113e39867ead74b304753aa2ad8aac14bcd6e893dcad79a9a8b8748fb9bbf569b68e060e3f6014e80445e0c8942aa386673d810e0e9e05eb4a1ab8b2508995

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
816B

MD5
e85f9e471314470030b4ab96373e1e53

SHA1
29d89bd998fd24edc2a2289a1057e7417062b511

SHA256
26338ba8bb5bffab9404671fa9d370787c2dae45760d1e9cf3ec6688dd8a60a9

SHA512
64458d727b934d7cd54c50cd002186d47e3a2e1562056ec6094cd07258c366a04d105ed5da0093606bf23928901a8de9be364fe252eb5a25c2398d9ebdceab6e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
a8fcb1471cd0bb8b1e7579766574addc

SHA1
ae4316b293250b84b96651304189797f09a19030

SHA256
de48b9111c25b3dce00fd7a4d5999d4edd8328c1e825c5cffd40f63a6a7ecabc

SHA512
f1fb161c567f332d758c1f7771dec1c61d1a8f77aff21e91f9c4f1fe09c2ba7bed3b144815aa142e4453d201d51b44928efc4ef8cd86a8588b595bb4a2483c71

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
796b687693584ca89ac9b58a588b9981

SHA1
ebfaa52f064d8c2bf7e581f0ba0894caa6d5532c

SHA256
ed6a6b3c2dfd428b332ae7e26fdd2f271bb90912a68aa7960110d1bcf468c8d4

SHA512
db009d4683f04f6e8d50dd2909d7ad4226e914efad0b48212540f65ee1d727ce78c4920be5c3c29d4236cff982e2f2bf0055e5df3dc89458095d52817fffa80f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
d295f1c5444199b6c5b3340c1c5232d4

SHA1
90ed3dcf70b34a46184686328b909a49819b4315

SHA256
fcfe592aadff720154d2d66435cdac915537570b548a35f2fc51b3c16acbc6fe

SHA512
f1e9bbf0563bd94a41c3f6dc6b18ff69152acc60853c6ad938dc67a1759c476598a278dd243de79c6c1516c0d913947c0b097d0b2dc2aea78f2b9fb8c9baf8cc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
896B

MD5
291307dad3300d154c997974dc97640c

SHA1
9e39d3b2cd818da2f7efb86693b38b7924dee330

SHA256
845d4d2bc0de5efbd54ae315f8b0af26ddb2e5b21c2e9c480913d8e6f47ad459

SHA512
e5619fce0ba74bc20d20297320c23d6d8422f4419cbd600ebbf964901031a03b0e011deaa7db5384fc7bd5e168b67e14d2c5e04ffb9d3b4c32e462fbeea0cee4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
864B

MD5
16596eab8ad38cac49581e6402db1e1e

SHA1
7802c117819cde0c8be7373f1eadd9adccb772ee

SHA256
f32d0952567c32735eb11360baf7f039ec1f559d7558530cf1d0a6f05c79ff8c

SHA512
ce4efef707ed6bc4c6e43b8492000d086009bec47c8c6de5b8256b79c4b2fefc04149ccf38ec559e8858d32af8c5661b2a55925effacf772fec95cdad4199ef8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
864B

MD5
721307dac6bc2ae495807d9641c6c401

SHA1
001ac3cc091fa4bf095f31ac88710727f387423a

SHA256
32637d8210e88d709e599cdbfa89fb6479fa2b8352dc976b2cd8b135350a5732

SHA512
a3c8e92a77e6eca70bd23e633b3200b03d2fd4e9fd78102a44462c51ecb88e5a1d54726d8ef118038d7af1ee177cc84cb7db786ddc5bbd94153b0bb4d351c0fc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
0b271a6dc21031b3963b66de1886bf0b

SHA1
e7252b6937e6a88c0fc4384f9b9ea705149a48a3

SHA256
b8c39baa4710c11dfd089bb1588f83e152aa139ef93162ef347ee5409eac1932

SHA512
47f8527080ed7db43cd21bf0e60ca83629bd879945790251fdcdd561b564ce062367170464e590a35d2d95a55be03f38754e935d990bfacce182166799e08350

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
21fa8438c179305522f19e882845b59f

SHA1
f23c3aa1d7e41b6c1fada90a6d9b8188be34261e

SHA256
7301a345cd5906390877b01223f0416eb55cee6ab814bbbf8b873ddc3d6a204c

SHA512
11ca979006791a17e8f84b7c7fa11b07c052d8f15adea16051083ef086386e558b643f12d6664e18c95fd39ee4bd1c72295d5bdfadb10467456649c9a0a09b36

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
864B

MD5
c51a542c7d92a515e5a951f981925beb

SHA1
577b57c7e012a8660ba88d37d286ed61b7994b34

SHA256
fd16f286eafa67bc242213eb95862138a3bfedd6be460d2014daa32551a7d9b2

SHA512
b3bb889191041801084f8a8c92f86c78a30d5284bcb40475c48b64a22247b9822aec3e0059a685ff39ebebea76b7376656a8dbd3b2a713dbcd4b8d96975ecc8f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
848B

MD5
45b78d25e8b451346c38373d4ec0b129

SHA1
4df0978163af6e5066518335af54bc977caa04c5

SHA256
b3d4a3ed33ab8be527b09605d9504ebb1bd1a91ea0e38e44b609cac097f125c3

SHA512
25d67311aaf69050a3cb8272bcc546f6ade013699bb12b678a19b9c0a3132656bafac3df3cbe1fa6038d1249299545f9106c9c0832cf4435abe343a68dec0336

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
880B

MD5
1a384ac19740e60e279d283acecc0481

SHA1
5224369c3688f2b44cb922f014053e56ee33f368

SHA256
8732d6f55c7aabeac18f7f1d8b4772726e26505adbfb0dfda294523270742103

SHA512
cffe49fe2a3203ce272a293ee8bbd1c39e0fe13fd7e9f446860fdedc18bd67719a439efe06276e755922c6bd47f2440bf862d0abe27ba1d30fc2c1cffd4240c4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
848B

MD5
c5d1633133f52cafdc8dffe4eaa8591e

SHA1
acde9c7ba303c13941a177da232e92e69aa7f96c

SHA256
6ecc1762bf9d4f7a01276e1de6d92fca2379a26854f635274512a7f812e0452d

SHA512
3b6fa9310e8dbf543764897a4cc7692d87a4d6aeb3b5487c4d9797299dafd9004d8bbff806d6dd43fb1fd6c9bf0491565ac78366863c644a58681641b2d3a9cc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
864B

MD5
8b0767db96010dc539bc50b5856c7c06

SHA1
ebd1d0d475596f29aa0ee9ad86e80ba052f68d00

SHA256
33c1caa9552b1e008d4870ea67e8282af62413512c72bad61db3f1e30537e673

SHA512
a0b40ddde78fbaf712e93599075b4183ed0a8e68c52fa1f9e28adf8299d11bb83aa3cfc0f29c0646b24f43aebde0789f1b46fdac4c4513bad2d83d13dcca85ea

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
864B

MD5
3081cbc107e37864e89834712c299974

SHA1
9d642a1b3a3d40e019d07419864dc4fff8bb9726

SHA256
7b11093881377b6df9aea11b5c19e5a9e1c97a71d4b97bb29e9b0404a4ef886e

SHA512
214f89c0e2ecb11995cb77edb7b06c80a3a03fc9f414c68b11b5df588edfb3b0751e9115ef738ee53fd0f6e9cd9635c7548885c56747001f4013ae2c14696f11

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
864B

MD5
623f9e0fa18e1a0f9f71a561945177ab

SHA1
8182f63c1e401543577890970d06bdd20191134b

SHA256
33e2544b6202d13783282308bf8cece26d8e14f45c16ec445577895831b298f5

SHA512
2fe7cc792bc6214a91f1a4e574c01bcb6d7951a540672d05213810a4f1c343010d941844f4250f1a616ae76f36e55e48bff76b96cfc5f38f72366732aaf002f1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
896B

MD5
9abefbcedbcef274b269d787bfa09821

SHA1
b5a904859d7490d49ee69be6c240637f95c13b33

SHA256
2d42b3132f43f0988fc93ce6eaa7cbbe2f578239a0d4c0d6874aded4305dc5e8

SHA512
a0298d1c4f2c3e57c2db8b16bcacf4165417a1315c6144bd4280bed61fc94403e2a0839cf23163c47193fa483b815b90b2c7c24978efa979b82fce50c2828108

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml

Filesize
247KB

MD5
68dc384d25e89991bd623b69ff226631

SHA1
808f9e79ed0878ecfb572a30effb2a3d7bcbc96f

SHA256
67e8be181771f76b6e66b2ca24b88426c9f05c43fffd3045e4dd04516674397c

SHA512
2b156ea8fcf4aff5fbcea445e2fa2bbff41027150347e4e695d7110528512d2be235eda1414050a0a9747bbe0aadc056c35dffc19cc8281370d1bd734fb9f014

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
97fc699ec9155456bf2f96cea1a91690

SHA1
a1d887cd37551e34eccfffbeff85ab5facf0b261

SHA256
5d26165e14ce0c3a4d12d773af0c715c7af9153a1c1733fd7ace3662779dd115

SHA512
83424b5c687d401bdc0cf26e8cc1125712e79a85a23541c527e0a810f30b0382b92f01a332d4e1a93fdae1e015c79e8762a220d43866c400b173a7a163abffd5

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
fb85fb5a3518dc2320b7601ec96df86f

SHA1
278133c80469a42f3f0eb7c4f4c402cebe6fcb12

SHA256
89aa95391bd3b2b86c0ad70c6fb33b1a240dd466497bcd18cbc59deeca5fab9c

SHA512
b354467a6ea3a12cb42600b00457f7fbe6309b0a2f9b091ddc3766ec66ced4be208548b67eccabecb0e08d14d036b4379364694d1a20d8dc44cc1bedb01b651b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
1e1592e6cd0783aec4511fa4ca2dd62a

SHA1
75790cb12c6e4101e65f086532fbca934aec4c7d

SHA256
31510ae3730e5e5fd0cc807d9d70fd0da766de741bd56a73de9fe82f1d8ce5d0

SHA512
dc36f42eebee08bc7bea8f469ea7feb65f2cb6323af405bcd9a1d51c9a11307e4aad77bbf667a8494fa8512111ae4fc8ce294874558e448b65a3130fa69e8041

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
470baa56fca63b0a1beb53b01921279d

SHA1
d939661c3dfb14f04ec57a5387dcffede1ed15ac

SHA256
51b1b3e9a81bf6c1b20224e4efa4d460cc9d88d4ff76d46ac3254ae0d440451f

SHA512
53c98617bcfb5573c1452e78caa7b8ae6e6e1c846a6ba8bb9fc6518082b44d903cf1b30b9f9249960cb4d7f7d0b3be1f42c198bd8c99f250dc8f1b8b5b3d7cdf

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
48b27691e8aaee05b80c0c6549a5b3ef

SHA1
37e3c3e4097537cd014b4b94f392ab48bd4b9c3d

SHA256
255379acf1f25c0ad89d7178724080ee08f5dec704340676b9b082aa4e301024

SHA512
f668e0ce8330018c4e3a6eec327017aaf9748541113c852e387c3b1dc14a939ed911a982d2e4cc52b6c986c13b4fcf8574e0d1450a78a2798d9558f0c8b3f7e0

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
3db7c24c6fd5e76d8e8a66c29ae29430

SHA1
405bec783fffd7465fe469835059f9c31e222572

SHA256
303a66b1f5bb855c29764f54571373be9dafedaa3fa4dcec86c8e4836ed1caf5

SHA512
837fd86b6da71fbaed5fccd9776e0d84d5332b56cfff97d712acef8d84e43fce3f5904cd877a2fb1759e648739cb3f27a71721fbaf5eb98a9d1b4d32c820ff43

Download Submit
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0002.001

Filesize
16B

MD5
9b64524af0f8cf18b76cad8b8cac9530

SHA1
cfc210775a3e9b3c48b3c5152f14b22d0c7b0310

SHA256
6243abef4c1c8a60eb6c28cb074f2b09b19c96a0c62bfa8426acdb64919dfefd

SHA512
d834b4e22416846e63c0992a15977bb08e5078d0bf5af5dc9bf02e162e45e2c4fea19526078e32865c3eade0d85cd411517ce1e8cfc20654de9d256a0a73fccd

Download Submit
C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240419_125759045.html

Filesize
1.1MB

MD5
6c319e742b438ac33aad47662974f8c4

SHA1
403eae8909af23b88bb4d6e6c33f98465462dc2e

SHA256
3515ead9776584a47a06106fa9f197fcb398593e8c54b1f20fcf92d8ca45f6d6

SHA512
78fa469e0eb3626099202375e0567bfef7bac3ad675921d8dff3bf0402902a975d6ddb3b9d17b270cc73571bfff0ba23b161951e44de6ce38ed82a2f4a58e6ae

Download Submit
C:\Users\Admin\AppData\Local\Temp\update.bat

Filesize
71B

MD5
b132f4472ca04d3aa18bb37aaa230630

SHA1
fe549c6c96c7d9341fd13e12fc24d3551b0c1f67

SHA256
75ffe7befe62da3753a0c83c65e269ad159a6083ae893acf2651557f9f1a3c2c

SHA512
c11ea34e3c696dffd66acf2353cbe12796fef417bccacdeaede500a3222fac4b8efc18747d8c726212623cf8cf99046527978686ebd329e40592837688f54605

Download Submit
C:\Users\Admin\AppData\Local\Temp\update0.bat

Filesize
78B

MD5
397dc7373e23f1980ecf849a29708041

SHA1
6c91608ebe57a3d9375f646ff287e46a9f18c861

SHA256
3ffedf213b18d61561cdbdf3de6946284c7b0541a69a89ebda74add1aff7fd5a

SHA512
9c8cf8355cde0402b71fb4e713d14ed12a1031c3120b4a1af6e10ce02dd5828b8d27345ef28f40c34da329e47b36f4f0da74c7cd4cf3d3964d004a16e72096fb

Download Submit
C:\Users\Admin\AppData\Roaming\delback.bat

Filesize
35B

MD5
d41ac96c53b4fe0dfbe1b080649141c1

SHA1
b4d75213c61646b5bd48eadf723542fa9aef8b00

SHA256
325de85e48afabcc0d53d5f6d9371314d0ed6e46d91c271abceccca58cbbd238

SHA512
a65c10d4face73078643ebc99c022a19a5944cef222c27739bc94456bd7601b5f118d4f2738fbc8374b8ad86c927fa0dcca7177fc936409f3000b7b58a6c1563

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_sml.gif

Filesize
64B

MD5
18ee768ea9979a2d1510e573c635f9a9

SHA1
edf9b3c929b9d01dce22c3ee912ac4b269daa8fe

SHA256
105a5a3adc66a56566b73039f2317dc49c221110ffa40224dd825ca0c7e350e8

SHA512
779547048c0f1738b19faa8c992428de7ad663ecf411006043b702b9ee93d35b8c99e70fb62c4d54dc87c70ac1290fa453c531d56ac91c08e4910f66bfb5dc24

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
80B

MD5
6a3e0b084fc1da3df8a67b9248a86afe

SHA1
234995f074eb83192820b23b9641e87ac2979bce

SHA256
615afb942cce27c5ee33265c86d3db536421d0fc6790fbee518759df55f07e11

SHA512
58d00bbfa46fcec51b105513b9cec9a69e94b0a598600178f762ea7762836dcc38815f88d5cabf6e2cec5eb22577602989d5c4c297c0c3aa2ce5f20205aad095

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
80B

MD5
c7d4f22e507659f261c33360d63d2fa5

SHA1
98090086db929bd5e51059a8e354e0ca524a383a

SHA256
cb887b466e7159520729ab5517c6745464ac565dd528be1bf6c33613c629f198

SHA512
536f84feb97dedc05f31206ecb51921c29dce1822093eea53acbb855af0aa548dd0ccf2eca4c3a0a1d1f1eeb4e8f5e60cb912d8cbf2d974e9be4bf505ec7854c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

Filesize
6KB

MD5
73d1fd6f5d8dc30ea1ae60c8f218b79f

SHA1
64e88565eee44dd929a82fd369019e68ed3b7c44

SHA256
82b568dedd1e82c309ecd752daa6eaf7574716eb2a8d144fb0d562b42eeb743a

SHA512
42a2a411cbee86522a7e92c4548222787e43ea00d13bfa81052a4faf270ed0175f1530c77af8384545baf8a8b79f21c671dd8571040b224bf87c18f799c6c0a3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

Filesize
13KB

MD5
bb71a62c534136673f6fc4cece03686b

SHA1
dab15621ed311efbafcc0636ab401d1e60cea6eb

SHA256
c0b53d48685d3603e5f5fcb75b68ead0eeb5e7e470124158f4a2da9cd8ee525b

SHA512
619991dc3f384632e8a56a1f95c0e241c59538ddc235ac2bc69555db1f68ab74a707dca257f66ec185e31e27855305aa3287c65e96a623f15ce997779fd5da1c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

Filesize
3KB

MD5
1d97b1d5f37fd892dda41076af397162

SHA1
c86a38a168b7c7219ae8fad2965858e6e5f629b7

SHA256
cf8771e41f738b44e50f3dab025b258b011edf22d1bcec678c8a385aa9096bbe

SHA512
797102cd89c3979f32b90e3442387106a3f2d40a6118180e819c278dfc2395b33da6173e8b864f1bc0d54d37d89ecacdcb346aab1d3bb844312b4404a8a6e365

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

Filesize
6KB

MD5
4066a1fe17f4aee4f6ce4e786378200d

SHA1
d091689986fc391a59f9508c26181a81a6d33df4

SHA256
fe80069e56286d1bee3df5efae2d50574352014b7e720f3ca66f5fc22b4b1beb

SHA512
e74f778c01dc662b284e17faddf03dba1c32d545516430837d71c473afb210cd31d7a9747eba3c1049897cf4f6c25c01150cb65d34a48e9b775cb696eeb97d5f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

Filesize
10KB

MD5
f393a9a42c486de943c82e382e76e164

SHA1
03897e674e2f1f3c29eb94d8ba44a45be2413e5e

SHA256
1201ab2000f4e86ed247c71c93ee76f5d459bd8e73d85d5d2a8491eb6eb9c33a

SHA512
dd11e792d64d1ddd1edf6803305c6224498e05febced2cdf263e38807a254dcf3677b8b20599e1736407a0efc9a04ebbc218e9d919c1a5c64e7aab57b1afc146

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

Filesize
68KB

MD5
da7584fd2557bf85ea897731de18a2c3

SHA1
015ab5873f408babd56d8a866d1074aa78f4ed62

SHA256
23ec9c36cf182dc35468ac5fb32625603ac4d96eeb3a6ddaa2952258a9a4188a

SHA512
82ab9a5e02b578a893c8bee54ecebb4cb8f6acf8cdf3e78190960ab8482a7620ca9ed6e323d68094d0ad2cfa3f9dc0ec38f280536f06517fa13aefcc9e764381

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
70e65481074bfa481a541f273b8c1cbd

SHA1
3f0812cf3c68b4d9db5fcd8fb342ce1933d22cef

SHA256
0a7c178826c267adb26e382bf8a03dd3840259c67fe8dba6725b366ca99d2554

SHA512
37ef7ca645081698ebce7d0eacd704a37b7e913f1acdf03a7839e98891e2b63bb606f39f90a0892bd9cec9f4dd88bb2d283c847426d5a5ef66a25d030aa714ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
63bcc59fa9a0a80b7889de03294db439

SHA1
8741ebc241462cab03e8f9452527cc2f29b4e572

SHA256
b556a501a171a31d14a4446e5915621e2c32db82d7efbbe53322cde32a07bd7d

SHA512
896e40e088ca274e75fb88b4483cd6575e3638a3362db80e3fb9deaf40eae05f8f1a79060a1e61242c80d4988d12ebeecd5a75bd9ae23cc5b37c2d69db845134

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
cc74b5c96fd5a49c9a0655003bd2aab3

SHA1
f6423046c4b162883a87e4eb129f573dd275eeca

SHA256
20cb3377048b00a333998c58bf8d3b92f26b0ec4ef6eccb4666d57794fcd96da

SHA512
d87a33b26377956d3add0245943e2d0a9e1f4d4f0f6c3948ffdd8adc7e1a85a85d2ff26c20d692963b902eae108b027cd59dd18196589385c3aa10a3df663b0b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
5d287cfa47c08ecb0fcfdf69d6e67f5f

SHA1
fd9f22b1a8106572dd9065a87c7033ae365c8e55

SHA256
72e5e2f06045bafbcbdb7c8ebc850762ab9ccb1ed0c8c1ee191326399cd06796

SHA512
b704093a36f874709dc4acb293d67e57fba3db9f9b38517d53a3adecced8938f1f2740c63adaa097274a49fe9dec522425f29575ad7b813926807dfad21b35f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
b34991362631168920159e9fd3ffb1b9

SHA1
a1adb042b5e4bd87b9f583b895fcfcc6d89a3021

SHA256
6a9b864e53ff88ae5e31b6777a4ce14f11eecd81fdb894acbf23a99d892d84d8

SHA512
ff24d4aa9bf8a579acd67489717b0cb5c79cab09767c54b0ab65abd853148cc67f2d0d10ee6bb7479370f680429474e9aee816859c65ea1dec8d3edd32fc2371

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
c9559ae884921ddfffc5923eedb07f4c

SHA1
11e1b932286f1f4eafce911c2bbcc0d1837fa360

SHA256
c1346536e2d389acc9aed49f59a9ba4c42b1cc0d91e2fcca5cf4aafa96146faf

SHA512
6b7d58193fab189d8c6554056e522ff3466cc8b33caf9bb772680ba5087d84d524183635ab81643b02402fb05990c0fbcad214327d8486c291cd8ee507333fe7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
5e5df50773d7b5d4fefbd4305b9e50f3

SHA1
b806f958f88f71512fd69b349743f4f139f5b0d6

SHA256
b33c64905a9d2e917012a8d3bb37b564eeb0ca9eb5bcdfaa1c12da39a41e8005

SHA512
1dfb10a8ae97253a6eef15b7837927d8534d5c0fe9b1fc9947d666e0aa44d3b9ad01a99c1e3f86c886fe041ebb93473b9f69ea8b05e9bc19c6917d195795065d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
469189b7b4b2994bf0a2f8452a03c295

SHA1
c9f074dc03b71af5c8336c56daf3343fe23d6a9e

SHA256
cd06da35b34f4920fa61953cc0b4d038792c7dca3d49697c1c7107d08e812bed

SHA512
38bb1bdba3fed8fe74f27744f4ce27bba42bb11c15b9283e6fd7bd056129a1407945c8ea0535d3ed2b533389e7059145aa2fac8a49522094c5122fdfc07e767f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
fde497d9ffb03b152b6aa8d953086067

SHA1
93d1bd255041b2351b5c6d111a4efd710ab651f2

SHA256
b91445fcd93ca94475e3a2c706a07cea116221eb200fa3cf75c538875b6e1bbc

SHA512
fbbd9fc3d2eb15bbde10f1e7aa47d8a67b2a9d5c84e9bafa52146958e87da8ea0b52a6f87b3799ec68e92ef32110dfa8b6293235f6909c7824e9398d9ead97db

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
dbae9d6c125e8b8d8260f7af6cb1a109

SHA1
87281c8b3cffc1c87ceb1083ce4ed688a55e3866

SHA256
6c1b4f0ee539089b7cbeb1ccb571ac7c780cecc60b5c4dd1b23d26ead45ec6bb

SHA512
405e7c4618d6fe2fe10b86c8c5da323f7dbf1ab578bf47e3cc4a2fc77605a606d0522e54a9d1c1776ae33b6d81ce72cae0c3883e7432b79c482f71652e942af2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
ae5cce8e7e71540f9c21b16b8d7873e4

SHA1
057b28742016b9426bca3ce95139b7a2ff1d1c9f

SHA256
896df9bda0d751209846fa5ed7b4e9489274ccbafc1ba2040bd01c8c42159afe

SHA512
9a1e18e1f76d7b0c3e02884b244efee94c2edc48ce5311a777c28351227842dc9db1c6d73921b4f1499628938ded9d47035d2938c11d3911ba77128de8a07d1a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
debf872fe4b4e3def381d2367535c652

SHA1
8fb819adeb52b4d72c8caee1cecd18bc72218ca1

SHA256
4c47ba412bf1b190824f509593e5a4c6abe9b949a0cbcf657b6c2391b18c6d07

SHA512
87b9a5a49055023f13573d029b45008e48fb692f5242c3146746ea23a5c0afdb326aec10adb758f901bd25448b3d45841a811ce816e8c6e9c81e8d547e0a8219

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
01e1e223ddc02d6c2629c054dae7423c

SHA1
2ea7cda49a717bc8146993e6ae376316361aca4b

SHA256
adea1527e0cdb3a158df0a37edbe1a9905e0d1c788ebae4d2977ad8f4d333e8b

SHA512
39be73fe4997a5ea8ae9f661f48edddf4491e981393cbfaabc159665707ba3fbde9ff296dbdb539ab089df4be822e37f5b4600dff7430aa4e2b63c570adc80cb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
4944fd9f8b7c60d0e328ddfb7e949d24

SHA1
85dc5c4c0d4e783ab86b40fc745879de19aa99dd

SHA256
885d690abf12f3995fee928592c19d93658d97ff2349b43f30b9bb5b7ba23f29

SHA512
33ec03e0685396d017e26f611bd1d8e50bcf99da288b7fcad293cec681115d134feb60a5cc048de695534449cd4d812c1ff9a2c537311cb57dc319f0c82f021f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
ea39353e768b30ed4e0763099653b149

SHA1
652edcaeeb684acb9eda1b037e1fcb6cd90a568d

SHA256
12937c49a4fecf4b862cfe5eda02326d97881e9498d8d94004ec4c5bccf434f7

SHA512
5e18c86c2751685475571d7fd3ee1799b24d02a78baf9d29aa44f1a5912919681638e00a7e00e41da0d298b5e9259bceb28b0c9b6229613e7f2402f4a0d4e455

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
c42fb90d78e4796852353f4cc47d4e2e

SHA1
12e3f2867fbefae0c00d3b40385de441e9c11826

SHA256
4129d0bb3614a34170acd38635a927476cfcb7fefa1833503357f52925b78795

SHA512
519fb3216760cb400be88fe1a7c7f804bcba81b65617320773fd6b356a04cc7321b0f885f5b5e0806a53747050040f48f8843e41fdb962497e9adbdf518979fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

Filesize
3KB

MD5
42ba71cdd7820dc268f51f2f651eacef

SHA1
68d1dd6c051b205f4dd53e72a8e7afa7d5561a22

SHA256
694107dc15d89dfa2afcb5b79e5800f21e137cf55e23b9b94961450b18561f47

SHA512
d49d38f80608878ada56c95191fe6cf8b4d654b285c28e2575de54d3c7fc9f24d19095375631f989dd8978785fa746ca609bea3307238b2f8f05bbdd819f21a2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

Filesize
2KB

MD5
74c6052d04b03088a4fe264abdd7ac5b

SHA1
3ac4772b1c583cbdaed14b2bef183ba6d33883c5

SHA256
9c8c7be558068286922deb9c1f79dc26f1567dfe695dace4b8c63362ad5c7661

SHA512
ae98d22d7892c532e22bef4a28be399fd98ce44159ac69930f5e75dc6344d5d7a7a6e2a9e14bc69b6db2b8d32e4855fe4d35b0886aad4b049dab0d0a97b51224

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

Filesize
14KB

MD5
e99b33e7dd82f067a21ab86a5db91c9e

SHA1
85f0e80d6c22a15b7fe95ba1c91515a2ac187aa7

SHA256
3cd16ed7426fbc3f49a8d5b3afe60822e1de15a41cd601b6e0d371bc017b80ef

SHA512
ba0ece93a5880c44956e3995bf4df6e0581a530e14960f6b40db94178615653070682441208b27783bda0be87e9e6d6dd22732c54670512c454a84158f59f0ed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

Filesize
320B

MD5
b47ca6e2aa37b165de15b3ff8d1575ca

SHA1
a48d3045d2f67550ad5a69a51a581320eaa4c600

SHA256
af6ce5d4f34463f1143384c13916577beebe021a45d605da1dea1e9369f99abb

SHA512
4706ea876c3b92290af2fc3f8dd3dd3b74c7348870391a90235f66f8780af674c00f0b22027137ff1043ee78a10e62cff87bf7adc8ef77e421773bb312ed12a5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
934fe10e50854cb060a728247e6b4625

SHA1
2b66e557ca46b2d96f99576264777477628ab74e

SHA256
28591e465473aeec52f2b4e74021c80216ff91f96c8f06eab60c28b2ad05144b

SHA512
a1f64adbde41abefa6adceb40b6f89a2b6380ef40713c8d33cfe6685b9b1a7c71c9267f5f8f33ac663f312f687c35be3500dba7ed490c20ebbf4ca3c62e5ac75

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
99a64d3da27cd8a82db37b502b02b77e

SHA1
dc493d5fe9ce80462da291fc3ffeb7e893b8d255

SHA256
782988aef62d5ba2313e6627a2522309cb879c402ead30dd0f625f794513911a

SHA512
5eb8e3e479dacf29e485b3dc45e397d8374c27d96a17fcadc946b2e554708f55572845b7371fd49c38e5659ae37ce98a3e3053005ed1cc6d16adbe4fc0aff47f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
960B

MD5
ace641352f1c6e0542b74219c6a4bbf3

SHA1
5a1d4ab4661e00752c60d007599e49e43ae01575

SHA256
91b7532ac802ca0f87c5096eb19269e9a6ecb85a85f330bf2b5308b223fe0963

SHA512
137750c74ade2d9474bb64a57e26a2b867efcfcd1e0b446199c705beb20313fd39d00a15ec9b1d2080376c730031b8b67a6fc5c718e349948bd0af7c84b0d48c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
128B

MD5
40654ad65730ba204163c5840b959c91

SHA1
3b8c07585bd1ad5bab6492cf1011ce55fe1b3350

SHA256
906cc266d0ddf8c536bd8c129d8b568e4a3b0c44aec8930d73e52e107f2baa45

SHA512
c56742e42f62d629523068aa95eac8e42dde6e9ba6a85559c642d050326a0a1585bdf19d297b06dc53f3972d8aecd80facdade433ff05c2f368960531d34d146

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
4589437a63d2aa5d34d97a77eba3f9fc

SHA1
49a94085dd313b6bf44672063f467f8ac6c553e8

SHA256
6ccca4ee63fd3c6c0bea824fcc3ea75171553df4b14b8cf36ca969a98dd2464e

SHA512
6dfac11e60e276804552cbc2b9cc89a5ec3a20cdd0c2ef1eb660f1530c6e97192883a63b24fdaab233ac456b8c14940654226515fcfecfe454d994e84dfe9115

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
a7d5252e716a2202fbf5aa04e28f3b36

SHA1
aa9b1e4df330335599131f031a7b4a41987a60a8

SHA256
fa00fc0fdc65b8dd6dde318110d189efa9b3df0c299d62f81c8084cee95c63e9

SHA512
715e5d6ea5131d77f2bb887c374eede73f0c10a51ab779f93ef51d04563e1682fd2547cc78e95ccf8842b7acb44404c36a32176f7c763d83095146c373c88f58

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
64B

MD5
d968c298c0586f660cd7fcd3a5c2d15a

SHA1
6fe310cfafd5ef501e83ee9b3094ffc7ce5d6a15

SHA256
e1b8386a33cd97f1f6315a99228fd5cb79fd392583c255f40f701537fb326088

SHA512
20451d23c2ffa970e8df4c426f32afc61c3bb65a20367e6969c33a8180f6b3a0df23d437d418613a21ba5c724b8ad79fe6422f2a96f2e4e7551c70773da4b835

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
928B

MD5
8deb408fede0ca7957daae111a32ea1c

SHA1
0ecc4e642c285244648b89d63e0f7fdf20a73338

SHA256
a568cd00a227df79553d0684821600e7d120c9f77fe4a73275d9b844f0d32530

SHA512
7175d5f08028288acdd3e5759f4f2ba8fee21d25c36cc9f31f78debaa6b1b6406c116841f1f1fd41cdc308809092d25121e54b8d8413732df042764178893074

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
96B

MD5
ac572a237f0c540518e8c05fb18489a4

SHA1
21c8f1c14f8d4406ca4523aa8f7673d7d5356adf

SHA256
cfbcbf8f0dd7ed1c5e4f6de3ec9d86af1973068952fc92c724be9aaba4c0abfc

SHA512
50cafb7efc1a58bcb954fec464b1f93e4db4e586c226eb607fd9aad9f5fc2837e90fe0bb2ea125c4a93b6700d9b04e9f28d7498be88178c44770b5411e5bebad

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
96B

MD5
96fd25ab0041ab44864d1ebf03a374bc

SHA1
cb0179821d0b39cdeb1dc7705aae8e2b0756219f

SHA256
c75f1d0832a873ca3330a4810853587abe2a46c6ac270802c76541df9ffd78ba

SHA512
deaca8298671b9158613e36bd94e8a801b5a7c9842e2c9e515c0eb83936545af2138f8d71dc8d3c79a8d57045dab490638a18580213bf80d33784ab09cb3529f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif.fantom

Filesize
336B

MD5
f0b6268f9759ccecb36a91f5529fc948

SHA1
892e47d3bd1f68616d0ec14bdeb325c2dd1b7fc7

SHA256
0220b99f434709dd536e8350b8c9e04e3751792e870e133cea17992da66b1286

SHA512
b9f281312ff25942679c997ba702e9ab3284f2536f5ba51709f58e82f2afc547dc158fa62200807f5bbc5d824d019edccd1819b84f020dfdfa997c97cfa9c000

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
1a1a800d90df48e8cecc0fa7eaa72ba7

SHA1
e500f02a1b4edc1c79d85be8c4a10d8de73c6f08

SHA256
2b38ffbeeefefc73d673cebecb78ff21522b561177d9c6abc6c0ecf0f79ad261

SHA512
4eb89a89796091ca476e3dca5d9d554c1ef9608b50bd80ab2c26dc9b7a1f90587dd76901f610b50e253cc71f20d12da45ce8e0a0f88416c5430131388b2b6508

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
176B

MD5
babef37e1b7a3c330917888fa47727bf

SHA1
eb8e8a306dafa1701c9023a55c3b603f9bace89c

SHA256
ea513ccb2d5c382875f76edf3f0b7ca9432e850d9cd1b8853e416228e3feb15d

SHA512
30e438388f44f79686c51fc57e941b281f6413ad4a281d63e3163cae6ad070826f520f7b8d7e13c1bb7e5ce28e664cfbcbc95b0db76f9a69d714dcbc412181e0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
592B

MD5
7a8c770af33c9178390e5b7a36888a04

SHA1
803237928036a857ebd7e11e71b87365f781d0c5

SHA256
4e665da8f78c4c6ece6ca1551395ea01b75350214203e4dac03be4906f5bed86

SHA512
ceff62cc39851e96e4b1031bd4364506cf088de6954e0656db6045434b15cca7b11ab632d5b3e9b40fb4b62cb8457b7a8ebd1cbace2e7d3dc82a1e5d839e0277

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
128B

MD5
c16f305675efd18bfd768c4c87109dd3

SHA1
590674f8ec9aeb84e3e11962e12a5c1155789464

SHA256
4e3679a2ccc0ec8e91ce2684b11b51472c75e73abdff54b802051cac5fe33ad0

SHA512
334da17f129c208ccdfffb4732b8ed74fd57f6ad8e2a640b6cb10d6d4477538143c54c1eb751c86fb680983dd2b8f727695d5c4dfaf2fdc6f8c5b1dc59cce22b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
f57f02c431c67530d5c0b182430bbc49

SHA1
d0124f90e889f513cf90d5e79863d52c8d3eea13

SHA256
d6ff08673111899026df723b424734be0b928a5114db1c2566ecbf475eb82ab8

SHA512
feb7935a3296f3246d741a1563481bc9806690389062e2bf49938079de9a2efd4fe24f0d810318a40680252fd1cad1452471850b6f38353450d13c7c384d64fc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
896B

MD5
b2506622c86acb6df849bf2ab7d45dc9

SHA1
76277e2b8af8fb796fac0de66f69cd3c072faef8

SHA256
8be4fd73a93ff5d230397184c3d8c24ca6ce04cd9f48214a9d52cde64c5b14f4

SHA512
c6bf7f9114bd3b16fe3362b9d9499c633ff59a87ff863c56e651e986572cd75e0239113484f47d68bf7582dc38ff7d001e263aa12d20c042b8be83ce699b938f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

Filesize
12KB

MD5
c3f59d40b094e5dd0cad716d6d8f837e

SHA1
ac036154e02ba50cd717b2a9bc58752acb934103

SHA256
c765abc661031e7122cd2bd5c7fbebdd30065898974ea034db99b105e43f2167

SHA512
96596e641952cb3bea42d2c59dc64cc697d3e1e8cf7312037238aaa13c11d30ba34970ccaaa2e079748760bf98744a8e962cbac7c18eb41f6be43139810c1180

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

Filesize
9KB

MD5
9b1ac8146f763c418b592653e4d656fc

SHA1
fb57d8832b77f1deec057c0ea9b62b3d97c47dd3

SHA256
400e7273955d94acc2966a6ad554ffbf27e9e3aa94eb9fceb2c316281129ac50

SHA512
6b4d9f72b2c8e5e7d09df5ce4808862f99f0766fd6ed4c60fd14a5d0a3bcc132c01f59ee3c9828922a724fbab8eeb1c9c1141157e3c5a91422805a75191bfa93

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

Filesize
9KB

MD5
6db2f0d1b4718db8621683c54ff17033

SHA1
3c294cec28b08550803f36261f4e0b2bd3f51388

SHA256
aa531061c63ef0ea96752aa82ed0a1a7ad36ab95bb3f38facc0248862277f805

SHA512
dd29eec70fd5e143f41ea1d593aa65a36a21ac1909402d0b8b37bb3da2aa2be83721e8f175aa55ed5167001370e7684ed6083be9f8af899d060a24b231ecba45

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

Filesize
2KB

MD5
61ddefa01319ef9a474af9a4fcf320cc

SHA1
0109e50bf88db61c80e805569d229e77a6b022af

SHA256
54fbf6a59477c3fad4601dab05051ccf6626f2d43c24c4a451bda67ef76edfb6

SHA512
0ba4aa9120ec7f6010ca3d98f8b7b6e9cf63f71771ddfbffb9231e257e80aad5e2e39df8f9abbb172f9610ce57d95faa9924dc543bf3fc6cf27b1c0fffdb9717

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

Filesize
10KB

MD5
92d99bf5ab5a8f10b82b4b537b8d87dc

SHA1
06c57144b7d3950ad531fff1875579470bcab329

SHA256
c684f3812a4d0514f6e56c4929fae777781add0717c08025633ff2a96bd32f97

SHA512
e3cff4b5469feaeb2e1d91a99e06f317cd7c8be716612facb5ea4e5717f10b7a71cf700981951239ddae1a369692f0a611999cb1ee428620fc23d236490381c2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

Filesize
21KB

MD5
0ed33f9ed8b35ef537cb8c43c1d73fc1

SHA1
b8dce9c4343a160f95ec3ed43c6218556ed0387e

SHA256
708cbc1f1421092d178c933c04e568d26ba8f5a855bc7aee055aa310e4a52cad

SHA512
e1f989cce6959acdb4638d2f74cd06fcd500ed34af15afa482569fe21e91af72615f32b557627bffa11215bbb249ea9059dde296cd79d7feb6101bd8d0f4d9f3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

Filesize
11KB

MD5
be2a454320ab575957463fde30e0f084

SHA1
23192f9fc28ce9f6ac8f86cfd6ca2e5424def810

SHA256
86b4a671fe19bdb0e976e56c93c0f92eb2a694a6451cc6b2ff1ecf556c2cac73

SHA512
6e0a9ef400ffae07146b616990b556f8d41f1ebea23ff8c0205be991aa5aac4e7ef636183ab799cbcaf8be60c5773dff411e3a1de75ede068cde7617d1439e57

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

Filesize
10KB

MD5
21854b0cb9babbb7e7e89139a0cce335

SHA1
73a5748e32148f047b62e9275d63a5c005d0e7d2

SHA256
154a4b0782ccf61e597c61ef3edbd05149805471d1196f4e2d16bdcbb881847d

SHA512
494cb5b4b6b492d5db07690297fde5ab9881b98f88be47f4142eaaa2520de983bd9f2e72fcf45072c88940f1a1720990d00dd0ed3614a99503e686f806b8d74a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

Filesize
2KB

MD5
8bf070142d25e38b5775732992ecbbd9

SHA1
d506042234e26008b7a569991022d32b45ef28c9

SHA256
34e0a998a8b07b429a0195976a034ae000875e409b0350f81656546a6d7a72e8

SHA512
c3a5b00791eced9100f0cf069ee1128af2026ed2d00d0463db5039a049cd8fe74af692b5a841b85a96bd8752e159e0c0a31fc947447e1cc0afcb90ac3410d544

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

Filesize
7KB

MD5
9ebf1f9a15c5976c61f505a644bdb230

SHA1
0ed3cbab94cd4a16fc06374f1781800763e6ec3e

SHA256
4b3b1a144a183393ed01f480d0ed8670a0b4c1dc4307c791bbb10bc175387c1d

SHA512
08ba3ece26fc7d466dc1f96026761c7431e8ce5a836f28532a777255019f259d637129ee0ad87099b48f2d20c705395ff356af21889d59159a7d131debc00cc0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

Filesize
272B

MD5
3f8646259dd75b3a3cb3b8a22852557c

SHA1
1cdceab42fae0fb23d0e576409289183165f078c

SHA256
d0398ab5683432cc485d430007a91b6b0d0b654c2843a0dc71ae21d0f5feb482

SHA512
35039a1434a628da3aab674e040c0f8be6d8cb1061e0c16caba1eb82c485698390ce07cf4e3e77e92db6632ce7f2298a58ba8d77cb35a43b700763b9dd8099ef

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

Filesize
496B

MD5
9dd3ae2a4ae860c6a832dbde5eddd190

SHA1
ed3d95cd9e8e621efa846c291dcff1c53feacb78

SHA256
7751aab728e793487c6a3b9462bcd654e18d860e47575503fb0699335b2bb261

SHA512
d8d0807dfc521039bda552ffa92e25b42dc931d4c3b42d147c6fb17cb377d9ef7401800b734416d6ab357ec3492fd1f1c2bbb7017727a8a73cbc90bf32cb4d1f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

Filesize
24KB

MD5
646230acbc99c83593845b7e89199247

SHA1
ffdf88e3ef60c153385b49b8adcdd82a8dbdc5b1

SHA256
3de4bfd0c0fad032426c4944e8a5740c81706069b2249caaa11a110c7acc6c46

SHA512
66e1f45e4a4aed6192c4734141d5ae5b05e9aa824e856cdcd9162185bd7f8d33f7ad68e39eade07b380c5583762fcd440e04ddcedf30a2b8ddd163365eb1f19f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

Filesize
1KB

MD5
67387a92bb9ed7a6f186eb05069974ee

SHA1
4ba825a40e988c2e7a8a6884d770d95dfcd7e364

SHA256
2617b32c36f8b5144d88af4480540d2b7e99d93e742996fef0d0e53fa8228a1b

SHA512
c4221fabe453d5655df5eb667537dce32dc92b5dbceff461785c16b9ff0ebdcfcd97ececcd442b13a5345990e206a004918eef9a401e21be4453d0660362ebc4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security.aspx

Filesize
9KB

MD5
06683f2bccc8bed887a5a05b3cc2bd94

SHA1
b0b80a86abb74084d58423a23ad23435fc51ffa4

SHA256
f159cd1f3dd39b43bf149ea69c232c4bfa2a19ed30544f2f2d14035d42b42351

SHA512
22e9f8497478d8c41ae83516cea77db40ff4e6854fc53e0876d9849a59e3985f846f3d1e12c4d3bc6efae61d6ea012f45caaca1cb04a66d2f87b3305804e00dc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx

Filesize
1KB

MD5
b14615c2dfdf3fbe0c17fbf8d31e7211

SHA1
22bba0991048de953df50d6b63f7b2cd10c9176a

SHA256
6ca23a9f41a376510f104f1153946f63764efc7fb108679de848015fec95710f

SHA512
0504e5d5ab2bcae2f947c544fb22e00c317509cd1fc47f90e6e43df75fd6a8048a12fbff93d915082134589f592b120bfc506ed741d04180e67eee9fc555d3d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

Filesize
2KB

MD5
bec77fbb50d562f9cdc59c4ac4c2cad6

SHA1
167e04b760ddc8a30f5b283e86cfc864aa6b571d

SHA256
6d1f9a1000ff4cef95fb083db67d0022685ee24a633e9330df1e937e8e9c34b2

SHA512
ab03c969a7fd71a4ce9787f4d7281caa4452314f7db58e93373ee610fc43b96b1abf31421457029034f8fa77d67d5c661a72e2854d749416857d77e6edf24227

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx

Filesize
4KB

MD5
07aa6aa815d52ef3517877ad8250d8f1

SHA1
f888c27aa3fce00384d7760d2e776804771a4dd6

SHA256
dc7f678d5ca2ffdec4604ec72fab8b4f2c37098dc1a1f44094b5feca4c7ab4f5

SHA512
bd7916144f48600712e2775286f8c8906cc8b0708319f3c2cb2f66b207412da895d06ffa619f2366a4b8a24b2ce5c9bd581c5d2089933b81447a19c5ea467258

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\error.aspx

Filesize
6KB

MD5
b58ebf12171c16f107553153258c4e08

SHA1
3379b48d34288a49ed43f31de8c848daf4d44f91

SHA256
b8758b6dfbfd40b68a29f69b0b9f20532655ebc4b9cdcb12f45a802bad1b2f1e

SHA512
4009fb5543b4f3c8fa1c206d0d0fbe90a9465bed9f3bc8386f986974b8305846cdc958f704ea9e2ad5a3e241acc7f2d004af10037b07d52b96b62adf29ca1fda

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx

Filesize
1KB

MD5
62c2a1ab90acc97cb8e3ba6a0b8d1245

SHA1
8ba28e30142139c9569371f0d30e84639dc3a320

SHA256
d16d32142d28b9c8595f7f6e34256bc1d5cb02596c425a6630f36f0e4961a176

SHA512
e5a2eee9bfb12adcd367014870f9714b864d5d32a5fbf535a37a296b5fb818bc0898ef93a320be23ae5c5dbbcd915daf7c05fbea3b5497bb4cd743d45d62b9d7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx

Filesize
752B

MD5
2e8b4f36e931f145bfb7a208efcf4bca

SHA1
55ba27a1bcc3ce5329d5330ff7fa250483bafec3

SHA256
d881b124c357cca771b5a3b2a8023f838a1d860927964fd4d2e0889860789912

SHA512
2cec67bb94d323af74668db12231b9f83e714f0915e955ca1d8e9b7c4877b916c115bbc3ed3a2b9079032d68a29ae6cf1e40c9d23618d88708192dd68714ff12

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx

Filesize
1KB

MD5
42d5c49cd3f7add12d99049a6703832f

SHA1
a63de08e43a2bb70d8af266c9a3e4f1e62442586

SHA256
27f247063e365c8137e08b7e35638a9e9ee6de9320ae7b6c7fef3c33e7697763

SHA512
b3a8c6eeb056e09f103a120e258041642a249a3ae4322559081599eaba47bcf103c57cccc2ffc7c4dbdcea0f5754d879dcbb123b10993f4383ce342d31b8eec2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\navigationBar.ascx

Filesize
8KB

MD5
70e8ecd2e2dd2f0d9b8faea8eb05dcbc

SHA1
48ff310e3563ab04621ff6d0dad0bdad7c87400d

SHA256
7f272c24ed89715a22d4a72da7ac34f8a13bb366eff7d3d43025dd704b2a97a1

SHA512
5664406d8ac2216c750069563c1322e8f427c1605d4c484539ed83aea76d618f3aba692cac91f09e3990ce18de02804c5ce85e849ddf705852b83b6feaf2fb08

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
673fa0a4bc2f628ce707806ddc803942

SHA1
e93a8f0863e5ff5819e16d5328a720c091d4069e

SHA256
83a934b71e7a12dfa45ccda7182524e6e1169011168eec8229bb1ba15ff5513c

SHA512
088a9a5dff3b71202769db4ae672a6fd13182b006616019ee0cdfdd4e93005c55443d2d944678c3dc8227b203cea560327182bc0b145b915df4110fa098474da

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
8d8ad935bb4077772cc4fd151e2ca064

SHA1
c3abd2ef57f75c2421baaa02ce9b43c5f0b3c617

SHA256
74a64831e7e5512b140347f75c818a4e50095be7727b57ca38bd3d689b5e0fef

SHA512
d116337475443affba9b1e2976eea66565e751e1a290e2a71eb3c1f391ba7ec40119556d4e9e87f34ff100b0fc14a6ce35bdadb329c8e2859f917eaa868b691b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
0eaae606f8f249a2f7c726a43ebd5173

SHA1
6da4745c8d5403cfb1131401e4f8727715583233

SHA256
25c7867c56ec6b011178535d162db3d684c5769d3e531ee26da2514a530fccd2

SHA512
c4b9c1e030945872f93bb565f026a56b65be2733c896bc50c1f25d21d211d862c6e803baad1137fe0414f6dbca2a46fdaddd89167c59c6d1a96dfa3eb142560d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
080d055fc5712caa6536a605b5586652

SHA1
07475cb6783ae16d75f7f757d965c3740a397104

SHA256
078a8516fc12d91b24da69c9acb02e5943f413825baa66ad00db4c1904ae43d7

SHA512
0f2f5f93c72cb98a4a65656e43659b452052a1e3058c4dc6b74ccf4b0499a64ed6609ef4911f20d1aec5eb64434c290a10368e02c7285c271c38767c17c3b54f

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
582a3f248fa4826713d89a8c604bc458

SHA1
b1fa88cb0701d288e3467d9ff90b527ba1bdae2c

SHA256
c82a5dac9d06357578b9c4e4b0684e083a21e55b34dc37bcfb93edad764cc059

SHA512
43479544331ca0ba55d97547711a21dab0caa6a7feabfed6b56ccb51fe657cd1ad2d680c163c384ca4b06a3d7e14f04cf4b40077bcdfe04f39874fcc7e47fb62

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
f8f3a1f7c03c96cf5ceaad4337277857

SHA1
7c032e595deaa4b9c7e8258ca9824e5ab0bb7c73

SHA256
c091bf66174830cc94bd0847412208133aee17f36f74b52baf65a6096c6c3ce0

SHA512
1f3049528feb556aa287f9e7d0430d25fae43b81154cff8b6c2eaee2ab8a2248452a784c418f570e4607815f1b1002acf1799cea37ae761cbaba4d7983dede3f

Download Submit
\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe

Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
memory/2444-52-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-42-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-16-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-4-0x0000000074DC0000-0x00000000754AE000-memory.dmp

Filesize
6.9MB

Download
memory/2444-0-0x0000000074DCE000-0x0000000074DCF000-memory.dmp

Filesize
4KB

Download
memory/2444-14-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-54-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-24-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-26-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-50-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-68-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-130-0x0000000074DC0000-0x00000000754AE000-memory.dmp

Filesize
6.9MB

Download
memory/2444-129-0x0000000074DC0000-0x00000000754AE000-memory.dmp

Filesize
6.9MB

Download
memory/2444-67-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-64-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-62-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-60-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-58-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-57-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-20-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-48-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-18-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-5-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-46-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-44-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-13830-0x0000000074DC0000-0x00000000754AE000-memory.dmp

Filesize
6.9MB

Download
memory/2444-40-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-38-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-36-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-34-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-32-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-30-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-28-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-131-0x0000000074DCE000-0x0000000074DCF000-memory.dmp

Filesize
4KB

Download
memory/2444-132-0x0000000074DC0000-0x00000000754AE000-memory.dmp

Filesize
6.9MB

Download
memory/2444-133-0x0000000001F30000-0x0000000001F3E000-memory.dmp

Filesize
56KB

Download
memory/2444-6-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-1-0x0000000000490000-0x00000000004C2000-memory.dmp

Filesize
200KB

Download
memory/2444-2-0x0000000000520000-0x0000000000552000-memory.dmp

Filesize
200KB

Download
memory/2444-3-0x0000000074DC0000-0x00000000754AE000-memory.dmp

Filesize
6.9MB

Download
memory/2444-22-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-8-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-10-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2444-12-0x0000000000520000-0x000000000054B000-memory.dmp

Filesize
172KB

Download
memory/2628-631-0x000007FEF6283000-0x000007FEF6284000-memory.dmp

Filesize
4KB

Download
memory/2628-142-0x000007FEF6280000-0x000007FEF6C6C000-memory.dmp

Filesize
9.9MB

Download
memory/2628-13811-0x000007FEF6280000-0x000007FEF6C6C000-memory.dmp

Filesize
9.9MB

Download
memory/2628-141-0x00000000012F0000-0x00000000012FC000-memory.dmp

Filesize
48KB

Download
memory/2628-140-0x000007FEF6283000-0x000007FEF6284000-memory.dmp

Filesize
4KB

Download
memory/2628-632-0x000007FEF6280000-0x000007FEF6C6C000-memory.dmp

Filesize
9.9MB

Download