fantom | 60b290310f67adb0ae186b4b938ca466a6b55653b2519261fa425127f5500a1f

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
02-09-2024 19:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Ransomware/criticalupdate01.exe
Size

261KB
MD5

7d80230df68ccba871815d68f016c282
SHA1

e10874c6108a26ceedfc84f50881824462b5b6b6
SHA256

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
SHA512

64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP

3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi

Score

10^/10

fantom discovery evasion ransomware spyware stealer

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>Wm/N47tfGR7knUBbv09eCZgzC0fqkYmP0yhe2c1dMa/Kh1UhON4rC3nfB79FV+eWxn+3vX2hzi7LORglOKz0vnNiOSETrqxI/LDpuB6/1tGhpnsCXFpMWbyxiL/ixcZi+jG5CVuJQ/a+RqxNzanrTO+xE1WC/tU/VAMd/V7tA+v3jRKQVT/04onxQu92YkbtyGh2p12d6lYoWrI+G3F5v+yVAQCOC1Qf4AzuFPtxPuw2FWteHj/wPctGWhZnJTt/jbQP64P5SKV4czByHneo8gM5OUguFyvT40m6u+gkJ0OoZLE6Y7j66Sy9SOLWwkcIfakL2h3P+8ssHL20Kl2b3w==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

[email protected]

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Renames multiple (3031) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
evasion

Drops file in Drivers directory 15 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Executes dropped EXE 1 IoCs

pid	Process
1168	WindowsUpdate.exe

Loads dropped DLL 1 IoCs

pid	Process
772	criticalupdate01.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdk.inf_amd64_neutral_e567adb271831b5d\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00b.inf_amd64_neutral_4412894f52d39895\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\_Default\StarterE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnkm005.inf_amd64_neutral_c03c9e328608873e\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\OEM\ProfessionalN\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_Comment_Based_Help.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_job_details.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_logical_operators.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_jobs.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\erofflps.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00z.inf_amd64_neutral_27f402ce616c3ebc\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\ProfessionalN\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-ndis\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_regular_expressions.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\Microsoft.PowerShell.ConsoleHost.dll-Help.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_transactions.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\Dism\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\OEM\EnterpriseN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\_Default\StarterE\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Fonts-Type1-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-International-Core-DL\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\eval\HomePremiumE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\srm-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-PerformanceCounterInfrastructure-DL\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\oobe\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttte.inf_amd64_neutral_16d100fb6ba2e40f\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\net8187se64.inf_amd64_neutral_c239ab5d36a3b3e9\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnep304.inf_amd64_ja-jp_27c560b15d9928c0\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\MUISettings-DL.man	criticalupdate01.exe
File opened for modification	C:\Windows\System32\catroot2\edb006C2.log	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmusrf.inf_amd64_neutral_439e7d1dcac00aca\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\image.inf_amd64_neutral_4a983035eaabe2f4\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpb8500t.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0816\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_objects.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmarch.inf_amd64_neutral_4261401e3170ebfb\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_join.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_parameters.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_Path_Syntax.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\eval\EnterpriseE\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Rights-Management-Client-v1-API-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-RasApi\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-StorageMigration\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\HomePremium\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\Enterprise\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky003.inf_amd64_neutral_fe7ea176f20ab839\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnso002.inf_amd64_neutral_c3b7ce4e6f71641f\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\UltimateN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WCN\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\ProfessionalE\license.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpj3500t.xml	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wd.inf_amd64_neutral_759109899b486d47\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\Starter\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-TerminalServices-AppServer-Licensing\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\net1yx64.inf_amd64_neutral_ed16756f950857e8\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnep003.inf_amd64_neutral_92ed2d842e0dd4ea\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\LogFiles\Firewall\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\Rasppp-Repl.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\TerminalServices-RAPWebPart-Replacement.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\ADFS-WebAgentToken-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\TerminalServices-LicenseServer-Replacement.man	criticalupdate01.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\VideoLAN\VLC\New_Skins.url	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Media Player\Media Renderer\avtransport.xml	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_drop_shadow.png	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\it-IT\gadget.xml	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\css\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\icon.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\System\MSMAPI\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Composite.thmx	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Casual.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\settings.html	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs_5.5.0.165303.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-charts.jar	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Mail\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp	criticalupdate01.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\Audio-48.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Mozilla Firefox\browser\VisualElements\PrivateBrowsing_150.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\create_form.gif	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_thunderstorm.png	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macHandle.png	criticalupdate01.exe
File created	C:\Program Files\Microsoft Games\Minesweeper\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_windy.png	criticalupdate01.exe
File opened for modification	C:\Program Files\ConvertSearch.asf	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_zh_4.4.0.v20140623020002.jar	criticalupdate01.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\it\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbytools.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-explorer.xml	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\de-DE\js\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\flyoutBack.png	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\ja-JP\css\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sl\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Media Player\Visualizations\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\es-ES\css\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Internet Explorer\en-US\eula.rtf	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Adobe.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\it-IT\settings.html	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\library.js	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\TexturedBlue.css	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Templates\1033\ExpenseReport.xltx	criticalupdate01.exe
File opened for modification	C:\Program Files\7-Zip\Lang\sr-spc.txt	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\RELEASE-NOTES.html	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\license.html	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-uihandler.xml	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\ja-JP\gadget.xml	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImagesMask.bmp	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\de-DE\css\calendar.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24ImagesMask.bmp	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png	criticalupdate01.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\Prefetch\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.SmartTag\14.0.0.0__71e9bce111e9429c\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Security\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\IME\imekr8\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\ASP.NET\0008\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Reflection.Emit\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v3.5\SQL\it\DropSqlPersistenceProviderLogic.sql	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\6.1.0.0_es_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Web.Entity.Design.resources\3.5.0.0_fr_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\diagnostics\system\WindowsUpdate\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallPersonalization.sql	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_32\Policy.1.7.Microsoft.Ink\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Globalization\MCT\MCT-CA\Wallpaper\CA-wp3.jpg	criticalupdate01.exe
File created	C:\Windows\inf\UGTHRSVC\040C\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Diagnostics.FileVersionInfo\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Resources.Writer\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.Resources\1.0.0.0_de_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData.Intl\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.XML.resources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servb00a6512#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\ehome\ja-JP\playReady_eula_oem.txt	criticalupdate01.exe
File created	C:\Windows\RemotePackages\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.Interop.PowerPoint\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Web.Extensions.resources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\.NET CLR Networking 4.0.0.0\0005\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_it_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\0728af1479c3388cadf85ccfc2b12582\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\IME\imekr8\dicts\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.FileSystem\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\ServiceProfiles\NetworkService\Documents\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Draw0a54d252#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\AuditPolicyGPManage#\a0a453714c9ec8d6954490f711f5158a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\MSBuild\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\5cae93d923c8378370758489e5535820\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\dcf1d740ffae84572215588047a59861\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.28b9ef5a#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Globalization\MCT\MCT-ZA\Wallpaper\ZA-wp1.jpg	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\v3.5\1033\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Jscript.resources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\de\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\UninstallCommon.sql	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.7.03062\1037\LocalizedData.xml	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.7.03062\1038\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\ed852e32514b415cfb4ac81aef9ac0fd\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	criticalupdate01.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
772	criticalupdate01.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	772	criticalupdate01.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 772 wrote to memory of 1168	772	criticalupdate01.exe	31
PID 772 wrote to memory of 1168	772	criticalupdate01.exe	31
PID 772 wrote to memory of 1168	772	criticalupdate01.exe	31
PID 772 wrote to memory of 1168	772	criticalupdate01.exe	31

C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe
"C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:772
- C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
  2⤵
  - Executes dropped EXE
  PID:1168

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Filesize
1KB

MD5
52b7a4d8afb30c4ac7811e5840ed8637

SHA1
5573ad44264cc77f3aa4b0998d5df98df3b21763

SHA256
e9524c89a7179e6e0452e89be84cc24fe8f4b559607af95d568e6c4a4d0dc3e9

SHA512
3796f616774b3e5f410fa7e05194b5d2e364941389d2c782246705ae793575ffa1475670cbf69e182ae70a398b7d87e7bb18cc0b8cca762ad5416b36e92e43cc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
352B

MD5
b4fbb31f1423d5fd908dc06e9518f2cc

SHA1
a54f471a7282cbeb220155fdde0190e61badc093

SHA256
71c0bbae621f2cb05661626e99d30fbd4bf5f7d208766fcb5364022f32bdf4a1

SHA512
3cc9bc052576fb2d94088963502c16bd1ba4a5a1fe0bf7382c9016c6b688a3584e60b6ade421158646fac387e9f0a3566516c5f1919afa7a3e248552ea6d8823

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
224B

MD5
32a728b1d6c69deac267d0faf1a29d72

SHA1
43ffbc530db42d1aaf421e1b877bbc027af7ac09

SHA256
87d64a6bde48d885e48f05540b17d36639a1f85240b2359ee6d4e829c080bb33

SHA512
53e53345ce74a6f9c219d820cabdd4b4dfdaecb7c84424df7a5036e1531f10f71f1ec82705416d3a3975472142652903202eded868b69f171dbc295ce8345f0b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
ffbc1731904856ff6f787913f3938e13

SHA1
5708ecc2b6f75552381980d01a9412aa94399914

SHA256
240a1b7454afd0a165b75e31f0466a432b6c3184c0799f7220a3e7e04457a45f

SHA512
524989626b252d7cb7e1afa70d769fd146884739bf6f90564960c201b19f27ac5a42718a418251f0734914063990aebb43089a1c040b369494c20d7fdd99b9da

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
86c604800dbea746291ac5de1ae3a0e7

SHA1
a468928d8baed1a652df62f006739deb81eae027

SHA256
7f5964f1a4432a30fd6693979402b7611c42dd1569dc5255145ff011bebd3548

SHA512
e32afe480ee5575f4569ca5e29c288060aee2ed52e557962ff248d1d591b55027e1950518e969eb449021820bc87ba671dc75f29f4a1ef6d25f3a5512c4a554b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
00a8fe994fc7e7607bdfeaea3bd33e45

SHA1
b4f90f4d5bdbc776d67b7afc31e6c6f80a341eaf

SHA256
aa9eafd1c38fd812e2a2157d2db093ff25fd1c6b24136399edff3d70fda28022

SHA512
0902d9fd6ccc199c2b9749811f00399807c50866b09cc5fee88eee125adddc70c9e6b55d1fd772c78046ea225fcca0f72082da06ececc0acdf11daa20e63c264

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
4ff3ec97f733fbaf9176a1d9bd6a3b66

SHA1
a60eacb77cf76039dfb9b3ce603cb4094fd76c94

SHA256
aae01c750978c20d2030287e31d3f8b2c1d3af4d45ed3c7cea54b9fc8fc3b4ca

SHA512
eccf2ec557644161231206dc39df895f31bda546bd5231bc868956ce3efbc743d05e65ae7aef9e2f4d67468f9bdf9931b92486754361f7179260d258f6e78253

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
112B

MD5
c6a5d65dbb42c398bfd2b4bb84a59493

SHA1
f098e1601f1a0f0251e63fcf72a56872b010c709

SHA256
bbe27680cfd923ff725e6944967c1c5310194a874622bb16caccf1b30fb35661

SHA512
15b3a49f50949c511fec4a71b6d70b19d4a75844215a03e0036962ec777a4b73b5397b48af714f51feb06c8babe8b4fc055d63beb092c824cc22a3ea9b7533ff

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
5fe0097a6419e02cd14716f5bc308a42

SHA1
630d1d4cfd1da51e3b7d7fec5aeac0ab46fad865

SHA256
61dca6d347fc055e6aa15fe356cd3e3ba27c5b69939350d4d23adb894bcde620

SHA512
bd2c2f50ed68a7cfb71ea5a0303dc9daca7fe156f59dc17be9cb504687e6c631685bc00ac37c5122c14907a210ea8606bdf1ba4aecab879f3f831a898320f045

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
88b3b7879276c9319ad701555c1377f4

SHA1
6661d1d36bca47cb27efd52e996aacbb40deb7be

SHA256
a4bd4e34c2202aa0a4c3bab871603f42751bddb8500cd19bede043c5a8ad2302

SHA512
28dc7496c8328b59224bae9cd53b52dacbeebdabf45b9a2198f1da9844a894b480f34dbef65da254d5a9b2d6059df740adac43c79da50dfd51e25be608109052

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
62b615022e2199f52c591c1f2cec9f56

SHA1
6d72480dbfdec923a63d07ae30b7703856518558

SHA256
048a97da08c851bfb0f477d2b24dd298a7889e6993214f5b9984640e394966ef

SHA512
129a00e167898b9236fbe2a9988f0fa679386d306e397d185d71a245971ea8e21ce91e2f17471e8fcac53c33f17356a5a19d1aed1468497c63e689a42021c060

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
6b3910f79c1a0371cc57cdcd4673965b

SHA1
f3003d380507b4943601f907a41ed276a7f5b530

SHA256
dbe841713218515fab979d06da3893176479c0730b0ec12c28c44d1d56333d30

SHA512
c462d8beabdda49bd6590a2b6602cdf5c201fc186444dcf311c0c03e1bd618c43e695a311482be2da4326b3d7b4604d6072ac1b9facf101cead608e9cc6d9416

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
e1a7e259fcc31778af3a6bc08d653a8d

SHA1
da58f67e347934213cf381807ea9675761efa123

SHA256
12c7f39f471eb40b72c33e245e1236dc19701c60717a357d65059d1f93d0d2fd

SHA512
f6be3320b9f3e6e0c1f27bc63b4c5dade31c7e5f6b7e1e40dfb510e6989f2f171f71e15e43cfef2a00713c803ef40c19e1396071722fdf1f772d177f6ac7ddfa

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
51a0103223ba17df7f3b4417faca5f6c

SHA1
afa3b6327138d9403fa9075c59a3e027e8d9308f

SHA256
676595259b6269ec2762ac77d54c11a20f925d359c527c10252a186fecfff21c

SHA512
caa83ddfe1a046d203c8d2e59a7ee1afa1bf9cddfc6caa4d6c657420ac6c358d05c0dc3a65d10f8dc07bedccd5102c6af8495741a375ab0bef5fe472ff68369c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
243356552fc377cb4beee4bdfeeb7324

SHA1
9952200d2dfe6a5c8784a460692a9f261f5065c8

SHA256
1b8262d2429a441956573c8ad610a863ccd9fb0b0e79e4b59a80222c0b48fa3e

SHA512
272e540c0d8c6605359bee5f750d3f6802f6b9175ae8db9368411cc30045bea64d45ce65586cfd204bbd3910a7f35a14f84f6c4f0b6c78352d5ba62ccab9dded

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
af96e213bffc00abeea3016044a3d25e

SHA1
df7beb34cf016784a0f3daede943cf0b26d4cefe

SHA256
88c0eb1d34d14140d5cf3d83af12edf2ab4058189f11a6e8d2e4cbdcee8d117b

SHA512
fe4ae3b922db820b3a663c3f152bd2db6b17b6a79ebc307b889fa6260c5ac0dba9af8d387a039f8aab222b8fc40c8c29b47e13fce8895621cf140520e9b4ec43

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
7KB

MD5
c970f70b319957528f24fb725db656bb

SHA1
ce2f08ff65aa1d3a4226477cf951b9364d80878a

SHA256
adba29eb8a0e98bcc20ec6f0c6fbbe7d5ae798fa0e120ef50517936ec86fcae5

SHA512
5caaf6eedf3934bd3b9701244e6e36b29f09d3c56a1929068cd46e45a7ef7fc9db020eaceaab12c11e11d1e17aa2c91dbea6f4dd9903283a52a93dd931c48f77

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif.fantom

Filesize
336B

MD5
56395e3eb70af46a8eb7629dc00fee56

SHA1
65e2a9843e14a95521d7f9bebca037dc867e0440

SHA256
a891ddd66f6d5ed93c8fdbb653ee68a37ec2ccfca011744a3c1bc752f3f58f52

SHA512
0b7d470cecc3ece66c5a889246a3f9e633b9c1f1e6e37974a5681b2f42dc3e50b0f20d851d7a4ee5a264ce5b970783caec11e9ccacb1839890ba91472a8f8092

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
240B

MD5
bc5a9325e24704480e06abf08442678b

SHA1
efceb4889e9c8ed4836b0d9b0bb8b10ff1d206df

SHA256
837eee2d2d2ad975bdb93501b6eb5f81e06e9299535fa055670aea62497982f9

SHA512
7e8c34f92b05ebde7efcefdf593fd14dea04531cb9bd646c4f06f97db587b99f88fadca808613dfdb319b1dbc2637b760d822ade46848a43808e38fca47b8bc5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
bd96e0951b49f5fe09c68d1e1e5bef1c

SHA1
29485efaa932782549142f80773d8d7d9870ff5e

SHA256
24797dd01bf571a5952d7490149659b438f3eeefcb201d0261622c8073899c88

SHA512
8ba5066e82f0db668cdfa3662acbd405fc97d1f9a3d12156adf1637c86662990ae34fefba6fe1e87f7c7e27a366ae20c007c4dd2b1d4d010a644e47b4950ec3e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
816B

MD5
247c6f4761a06a23f7bd920cc9af470d

SHA1
3369971ffb078bb7bd0564c42fad6f7749b9d613

SHA256
75b28154aa0d6b2e6fefcd8c98428417be7d70943b2853d37fef6386425b5f55

SHA512
a10fd38ae15df251275b1189aecd7be0af57d26294dc221552bc7bbcba4b7646deed3a1dd36b2e44e916741625ec1fdb3728b024fd68a6b767c6a453772bee29

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
fc63b80467bca86528773e32a76e6f54

SHA1
92298ce757aebc480231b3197d9da61a67be7089

SHA256
9e2782aab66428dc7cca9ba50e950e8066eac51c6ad3572245652f44c8afae85

SHA512
fd14b607be91457163a2c8396f1894f94add7ecf285d106ecb4e54a0d2632487a9f82b6b1935643a8f824c96d413b6baf8105de39308861ee9304c0a45c3f416

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
82708d21354fde97c4d3e5e6181534f1

SHA1
1a63adcb657bf1799ba6a77e329e2e2adf27a9a8

SHA256
daa0a45dcdd96c670c2a3cc5f1b53e46d127e9bdb0f4a45b1518c8a3876831c7

SHA512
d8f4e6f34703298e2e78211c4ca4ba71be260c92b1b54fa393d4c19f849310aca7e1601d6af07be8575d4ce4629fc44d35d9b6010bb0e6b9eec7001beadda44d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
f021239b75850375354929354ce856b4

SHA1
f1f90a3d38cbdec308b53269c36f6e872dd920b6

SHA256
43488f007481d4ccfb87c82fdd8c965f91e6fae5bfeb2d385d2cea923f1f6c1d

SHA512
eaec029d1f024e8ae852b85044f945e84e3fa48b1d4512d961ac8f0a4946213362e84a6ba5e812f74aa47c638380955acab6c4529a8003aefbec76a8a269766f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
896B

MD5
188e5c1f809242c7519153e177666920

SHA1
82721ce7aef66cb99b193222c56378aa13470b45

SHA256
46444c939198446b3c383dd6516931feaee11360f86ef48f63e68b434bad6e12

SHA512
d060ddbf4a6a85ba42e072ce13e662ccc9ae89e83a43a4f467b9eb18443712a683811b9ffbe522adfdd88289dbf34870c5e0831a64dbc15f879d5877055a808d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
864B

MD5
86894c53ee34f99137f8f86dc622fe54

SHA1
809e4c6b4bb02ecf8c93e6a2b29a038f4834d871

SHA256
5cecc28aa1980e1266e223a6c4b9a6126ea2162c0746fe1f10b0002afc4b63bc

SHA512
c2bfc4c76a73823357e36bcb34f9bda3fd3eaf33ff4a67bae0c18720499160f0eae88d4c1e442e7981daaea111734e23f732e7f2480c7a05d6a2d179e528cbf4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
864B

MD5
4c5722d46b8ded5b8b243fb3004f21dd

SHA1
a33d5503a4f41da150fcdb3fe96ec34a4a9205b2

SHA256
39053fef8a6901dc57ef7a163971f5668dc852293824bdb004f488dd2133de52

SHA512
c64378d8c2ec515dd49e07eb92877d208ea0b35baecbe4af97045adbd22bdb42bd68144bf957e77d0c1bebabf4c63138a09698074ea27f5f8f8d7205a8c60662

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
9a04795e21e45d384683f833dec1ffc1

SHA1
0ddc79faba9585df0695665ddc542f2bc884a83a

SHA256
55a0552725f90e87dcd5aa4ae6febccca8c56e9965f133461741d24cfe29fee4

SHA512
215b2dce538d0b9e5b32a192704ba3b8c39a32c89cb1087af517be346954200879eaeb4fde294db6ceabebc23f800137a056e234f9c8416be395895f77b4ed2d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
0b230039837c40c55066ba054ea63b80

SHA1
01451c3165b7e99d4f41ccbbc1c7044b0812aac8

SHA256
f4886d8e9d1849607c0a385148b07f91fdbbadd697b4ea87d7d40b95f0f8836a

SHA512
25ef85d997c7f36800c2e816b8624574f0ea41d00d693109b96a0e3aac8a91c30049e811fc69536b2bbdebbc2f87850f0a82cfbc94c644a5bf23a5f32dc77c30

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
864B

MD5
ea4cd5f4ef801cffe00ce9541f72d4ad

SHA1
7b57962e06af93ae4fc30e96b613c836dcd4e183

SHA256
19ac65ecc7a20fb2f315fb4e1c03d42404f72cd824878c064c6d4d79c0e15828

SHA512
5d5952f7251c138b59b2f922920881c6ec06a65f0a8f9d0c6b5479d38f31e14c91f788f403720e6706399865a9483f778697b78c3880f7350c0a20ab245fc8b4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
848B

MD5
1a29ab7005ebfb58b8dfe065a97f88b7

SHA1
67f45acd6151e839ab636d0cd2ab766e4bae8a3b

SHA256
80cd380c1027a700f4a239c6205f006b0667b7d20759890f88a23c4b704c71f8

SHA512
134a9033ac7a39aae1a40e2295191bdb256ef94aad32e67b8344169f2a8817b66a8eee73ae399927ce8d8c9b1dc6104380a4ae37f53820fd374dc2f1d659f37c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
880B

MD5
d0299ef185d07f1b1fa3b8e8d6689a0c

SHA1
35fa19f6f6dc9e5c0c7c419820c41b08c2a6ca10

SHA256
94cb07c5c3e78dad8f3134cf14f26da2fe0d3a0b42f641d40556037c952707da

SHA512
484921d47b43537a1e40ea7c8de48aa075c1f153436a2fccfdfc1003c71860242583c5e881a8dfc85398aca4d519ae5d38de6b59a05cd9af79f4ddc30cf48f8f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
848B

MD5
e7c9b3fcadf5c1d98b7e7c9ec099b3e9

SHA1
bbff286b89faa871481f0204ec9ee064852d59c5

SHA256
22d34f5572825d16815efedeb79373f0180ff05e4ba56573566ac4be0d5ccd08

SHA512
8c7fe25bee1194d31e702bb8a846c5562b37a053af3254c11d885edd14b5c434ac693894399b6f690f845ec55abb56ae0b75ca9adf5b23e9366e27c73c3de78c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
864B

MD5
f90cf6ae1c856f2a64496eae25e56120

SHA1
f4e717898233d4fca484fad5d64448505bdf6fa1

SHA256
eb725e70c056c84ce17a2921a1003f10494ff27fb00461145cebae8da1cab89a

SHA512
0f33a9c7f0c28a512812bee68873a90046b264306f0fedfc781987b5b865155beddf0051c74cdfee2d039d6116ffed7104c4ad4e85555fcc29d84a7c89c28853

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
864B

MD5
846bc6ab2167524a9b4c51e021e24808

SHA1
a28b9bdcfd8886d226b477f64bfd0ce16ebb8d49

SHA256
2818654209faa7a5c61ffefd56b4e2d4b28c7e8999891c031a646bff7e76c0e1

SHA512
7895b884db37acf95f3d308cb4acc412872f02347ddfb95ad0cea8fd31a4346b724b8b52bb11f401750a43f1eb54003376fe1cb86e3bd39263cd6b72e89e5cbf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
864B

MD5
99984b6607d1c5d6c0e5229c9894961e

SHA1
2d52715552f1986e1d44924a065c15dcc58df9c4

SHA256
efbe9b5917fa225e60e8d7d73866c2a1cff5ea7726b0389e8144c8f437988908

SHA512
255bd39a706954fb507585bed985af2c8a133e2e81e6b0a19bfd60f8c993cb14f4dbbc14b24134844e6eb0d3600eae746742505a2d5e2b68be2818618602317f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
896B

MD5
52b928b0bd4060602eb17631c6ace389

SHA1
081ab022f3df42384a9a59123f2bdcc376ef0590

SHA256
e91feb9663c0c16fa6a2aabc67df42a04bd6b7477306ed4c54890204977f5753

SHA512
c13f1073e73e5b45c5c58e1d06ebd7c7d1ed13671a92553d9011e620a255dc643ee72153472516baef7c42f8bb2b19f0d153fae9e697d7d1e35a0659740a5511

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml

Filesize
247KB

MD5
bbb9fe8df77a39df60f833786c77d0c4

SHA1
a69fdbb50281bb27cfa8e4b85264ca6836615891

SHA256
daf1c01ffe3dfb14f3e42edf93ff0acf7982a9c8bc1c2ce816089f3dc3ad033e

SHA512
0f791dabc116084848cd0fdeb7a00b02678a9d20ecda4be037101c2d76ecc97be5f6de59ba90a8b0876d22bf75d0b272d28c9264ec8bba55f64c8e59fad9e37c

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
2ceafedc1d1518ee12813cabd5c28d1d

SHA1
36b026759836f9130079e87f2346468e98ec5565

SHA256
0ec61917a9d1196f64cfce50bb3f55c4f852f395acd53a9db01c8fb922ef7113

SHA512
a9f1e848d86a6176f5f9d72482e9c076b556d9e525f32ca9b498fae3ad5687c9d48304e071fe1ba909fa3cdd4abd343dbe8051867aef3602ce24bdb46ffbab97

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
dec6684ff436cc542c06202311e97651

SHA1
dc810bb6797ae549fe979f913db0c27f31a061d1

SHA256
5d7b74defb91e81ef842c42e429d52a70ea83aa63cc497502dae3350d69908d4

SHA512
95c11a1c45ed8792136361a719e7e24c97cafa343cbf88b3a0f74d3cf766c1a4f4704dd54f65a0463f6b050bc79b64611b69495b8eb7a18527791f98add93c3d

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
1102a473921f9e00bbc448d710f2bf77

SHA1
02c4f54aa981aa4d25371b584908a08c8737dab2

SHA256
1c7a9babadb9b0aa890dbd0ffd36564b253a6853f0efe69d7e89b85cc081cbcc

SHA512
fd3e4e3ccd79eeae0774baeecb700683992b32010dad3fed5d7ef1a959a30da4793d448ba1cd05f3378b40a8dd770c3d995cb0255d3456f3ad5e41fc0282f638

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
0f861b0ed8c2d0fa7121d22692e412e6

SHA1
af18a6f994532d353293ae5146b385d5f6b1c651

SHA256
103591f107da1efe8b2b032ad2e7412e31f84205540233b021aa47aade03584e

SHA512
b6f1c4431065ef14f454a54a6711fc48a640d0713888d6b10b0df7d0514d6e961433e480f9ba5c3046a7bf6244f4d085e782eef638328aab424443444e56a204

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
0aac13b235e8628fe7afb8796e502407

SHA1
0d0289e9eb3e0513948e4f4ce1370e575233d928

SHA256
089bc175557aabdd67a6b2856a82adee1a33d1d28e0d09b2fe085250d1df7935

SHA512
b98b9522bf0c76bb7e2be7ea33cddc921c23729198e88289dc0d3bba04a1647037b27c73cf781616c944957ce2a6ad1e022a411e3e69c4d8c66c222a98eb432b

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
3398e33b71689a385aace47f22a6d18c

SHA1
5d058639bbb9182278dcde12601adf07c7188ce9

SHA256
e05f9eb3ac091f8a8facee084aa0b4f6d8a81bec6da9186615fbc86830aeaaaf

SHA512
ef6f09ed8c8504a22d595e6f6f095a020aa8789b1688b06ccf09426cf701a03a6d9deb2ba4e60130a81cb0aa2bb76e3f0cfa5a920f32d844b0635af412e12eb6

Download Submit
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0002.001

Filesize
16B

MD5
8d167548b32258e67ae3c91a53113e42

SHA1
4aeb7ad4c872ea47565c634c3a188e5b9d9b2124

SHA256
1213094301d9b7cc9d9c168cc07d9ac83ebf32ea095ecaebe66bf07dfe0dd938

SHA512
0078e8f545b3bff0d70b2ba188c44e7334e7d57c5bd836acbf7e386118143443c7393bd8c59fd9f9c519275a3f19eb80b53bf1b7f669314159c6c075de69bdf6

Download Submit
C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240729_161328437.html

Filesize
1.1MB

MD5
e7cd369691cb86a95b38bad71397cf23

SHA1
6cdad0cb3745547119ac53cab4d86f3504f5b93b

SHA256
ca22b14f24ff545dd819df271a8114cd61f9191aa3a4deb82ca27cec4b570d5e

SHA512
57ed846bda8e6d6e37ee2cd7b2bd628750eeaa651eb5f9dfd45aa9e9384ddafd863b15ef4f398299fdce2424d8ee1dd6d7aacbbf7325dbc0038b20d926cc3fce

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_sml.gif

Filesize
64B

MD5
4f91c5ec2251878b21e49445f8e224c0

SHA1
f05490323ec04bf7b763bc289b8757e6fa4c0b96

SHA256
d069d04f77aa0e0392dadfec06ff6863df34b3e4feea1368176ec972fcada91b

SHA512
2c06aabf42ab554c5eaab8618636d72fefff7b7107540201f491301ab92d771b2d820afae35a9194d0281f9f03bff132c6622a3d52bfb2b14a03ec6dc155f307

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
80B

MD5
31f3c382d37e2193b9676f563e85aca2

SHA1
a0c8a3554a4c53854ad82db01152d6be96220dc6

SHA256
c1a222871a0c78a5f95d4b0c227f780a5e421199d96a24b1f219bacaed7edb7a

SHA512
2f451e8ef363994899d84d0b1b4dbb5a1df8a39e05d215ffe2996436fa41ea8a50dd2782067e3c2fd65dfebb6d365e7a64015f8bad05f3dd35924f9ae2bfd20e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
80B

MD5
726c2348ccef1e0dd3a6ed159f15ea18

SHA1
e89bba1111aa31d3e18c498c817cd9f55bf40eac

SHA256
7d0629ff0d9ebaf9dc8e3c622497af8f27bbfdc7e1a25e18a43d2c10f330464a

SHA512
eaf2e4adad73dc9c50057f84ed091f322f4bfbba1c2f63fe3576ffc146dab807227d81f9daeef86acc864ff330ea1620ab6d79f0e0f31cea9510a19c3699b174

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

Filesize
6KB

MD5
d27e8b7bd731869c11fb44d16134f690

SHA1
2264ef1f3eb24581f2880d2e90d2d0605a2eeb09

SHA256
965646dbcaf79286183bcc50bf39fd496c2a2a22ba38165f6f816bdd4ad4b240

SHA512
0aec200cd6993156b77736a1d33fd99748fbbc3f3c0ce272a53cf1f2afbcc47cf70a20b15410bf537755769c97ae0f6b16f53e4a44fe40f103527700e53acb86

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

Filesize
13KB

MD5
ec4c59f601bcc4cbf5718a02c4eeb856

SHA1
2ac6a019f94d511ded38adcadea3dd90085366ae

SHA256
3b7c9597284382e2a02536f20720c496039bfa087dfe96a7f7b79fb4aa5aa5a8

SHA512
3a2f3a65e07f8ba34ad889c88875474096cf50ad64b7502e0c8554516e4856b9eddbdb5ac141b8f3262e95fbb32f2f7b69bd4ee8643e83edcce34a594824330d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

Filesize
3KB

MD5
6e61c3d2652fe80f01fd15ddfd73a1c1

SHA1
524e805dd6e934297500ffd7997178b6692c4ad7

SHA256
eaff5ab6b03efcd5ead94a899d4a6ccaf8933357f71e0be6123658f06ed8c6ac

SHA512
afef35e6d75d1c4569621edf912167a6d30ab453758d38a14f5f3852b98a39c2ace4e2000829091ad17b4b0d8281926557fd52c0d2ff6e2af1a4deecbdfc8687

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

Filesize
6KB

MD5
c6940dae3af38656806928cd8e79c581

SHA1
8cfa43971049de2861590a7380955a5e61cd0c11

SHA256
2ea7b4dc090786b622ba9ff6fd30140aa549e73b30b4d6c644710ae76dfc16e8

SHA512
b44f0bf392ca742a02a7fb356ff168bf346b738f07cc90be34a08f58db4833ae145aedaffd13a3f5d4543fefdf3bbc8542107606132b056a6c86a1f4b3a00ff3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

Filesize
10KB

MD5
60802f516f47f3f0fd0a228856fe2921

SHA1
ac05b7ef4877c12580958d1ced58414fc0cc1b52

SHA256
f82cb4e6816a0c3e110c1b4ecc5ef9a3c1f93b4dcf02959fe3948977c9da11c1

SHA512
c3d5c43c2553132ba5113ea42b01fdbcab0d03e07153207273cc620e75f88bdf2cf77e13bfd034c00073d6329755cd78513aef788359d64a56ef05ad064725e8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

Filesize
68KB

MD5
cd0de58e343d5758fcb0c5cdc7575cbf

SHA1
c180a5450191cc613e6355bd1273251f08e38e29

SHA256
29a3f26ca77dcb60352153a38610cf3bfc0a704cb759f22173483d9f5ab0da52

SHA512
30095c6755dfd2c480c0175a38ce7f16b08a0d59f8062ba42e4cb164f4710e57ac82755b3413f3fb2da768bc67e0616a574ffb71faa500212df10f5f09d17729

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
fe82f5487fe594f424520a8a9cfe8902

SHA1
bad52c588079c556bc0a361c1e973488e3e08f40

SHA256
d9e6207b6835d69fa560beac68259f407af1cfed5140f687b1f2275c30a7c02f

SHA512
d0378d4338d5b5b5ac8c2c9599bdfc2896f4c6b05a09effd3f60d3e26b5cf1001de56d8305dde1ac107cc18fecfb5b86e3b581025bfb42d74602c75a1454e06b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
11df30b9fb6ae9e49b21cab6c3692713

SHA1
9bcf1eacda1aa20f02b5292d4f8a2ec1003b809a

SHA256
7e0674c673554556a2dd80f55ed61e9825bad18daa3e5490a74d32409bbbe2dd

SHA512
3515ff2d94ce765a7f46a1425c99587e13620dd8e937f5bdf3d379c9b77e3973a69e8a8e1a9727bbd5a3ec3ce58bb30236618d9cf572af5c9e7e2f1a937c8081

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
058d11039cacea03d8f194f4df36de5e

SHA1
905102290cac14a7e0a8363fe5bfe2406b400a2c

SHA256
9c05cbd0989fbfd4535c36047b84c9e1e7324e8cc98d3fd70af87095b5897dc6

SHA512
f37cae0ed6298874b56b8e8a0badaca4adc84843bf096eba8da050f906b3a510c5d37d1b80ed6bf050700b7ae27d4d549a696c29b7ef4b60024d8492b84d4efc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
8c4f45f646a84946e0fb8cabe580a8df

SHA1
5406e46dac98db16c58c291a0aecfca0360f4900

SHA256
a3fe6bcc3533f90d53aab1d2a35d59b6ea4c6e3c770722f51088f2ade571e7ee

SHA512
b0a61a02b23f3fbf86ebc1b6d0217a731ba1168a7a0a7f7cb13c78bea7621caad1274e7519dd46d62cd8c253bc2bd54939bee9ad7a3ed7bca828d2cc68d3a1e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
a1e701e8bd8c85bd153d65da226b01b3

SHA1
ee5eae53ee9a0b78f9ae46c7ed0e41b4d3bac69e

SHA256
9374d7d131e485d696e69fff8555d85e918408ee848763b59b13063a08bb8be9

SHA512
4d4de31df20b10a1170f413a9d3f86c2fcc7a6a7edceb098f338dd1bd6fd4bbd5ec19cb8a5f9133b054ff6b000687c0076d1795998f83449397ef3cedd69f39d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
4ff8adc2aa195e695182d73710592205

SHA1
cc059bc179b30b790db2652b37d510ee1010ae20

SHA256
55a7f96bb950b029f033a5420e167c437a207f455a394ac5faafb48377883abf

SHA512
beced6e0be917da351c370124ea2fa2200161a1476e654559e24f376679bc9995276f6f8f13e847210e23530162778de7f78064eedec89b795eddf4c29a08d13

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
112e8a8c2fcc35cc4a86b7c2cd0f8b52

SHA1
cb8bc5cc8313c2ba901dd9592f13670e9fd24b2e

SHA256
1770429ac2b3123b35d8f8d413e111251b81516731171ad237b1855a7e2f073a

SHA512
1f755ef39e7d4485fe898cc19dbb882e879b765e245f730da49b782a26d1196f11e07a5861ac95f626ca708947c2e2e88f065f365dd9683ee063d95161b9c292

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
cf6aa3da132080650c3a1b3b1c06a13f

SHA1
432f95d28e5354970194e79955a92a04aa6f2eb5

SHA256
60d5116709b958b9d2068be96ac62d27e12d0abb9c0f417df6d07dbcd1809beb

SHA512
7b47a142714b0ff30adaaf20b26a7e9f549aabbb6fbe242a55d9474c7e65d807f72688535221ee7288cd6e5039c2fafbef15d86a648583c99689bbe633c7a505

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
216e674b749b49cdf454942bc2d58191

SHA1
965bd2c3b6e9a425092a867fa59369aec7e81d20

SHA256
d9ef290eded4a24c07f2af180262255145ef1f0af2aa013d380c3598f96fa7bf

SHA512
eb620d6e88fcf596cb5dcfa4700678b9da2de1c27f94b6d0c6ba29ef54bf37f510b6b794ed1fcdebcafd6c596c9505bbe4a7d9cb1201b5f52e1bdd048b92d62f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
69a4da60caaeaad99438db409766ee86

SHA1
77e53583628e88b7f982e37557e888ebf48d60c3

SHA256
ae0b1f4b2fbd0bc6b019ef069efc1fb527668e6ddd6bac8a808b971fc4eeb989

SHA512
108fc2e2b30726a688207f8a6d8a62f3af2a253289fcdeeb680055c743f13083baf7e738c91b00db66596441f471c4d05fee55a151b630891564d727f825400c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
9fd0ca3cb6ab1e963149e209a4f06ebf

SHA1
ceec78e9a370d8a27f4d6e6e8904b91e35b58142

SHA256
50a8ff5c84edecd0778a56375c44fa2e19112782468a07e73a27d60a14eee081

SHA512
426f4278d306a5325868963f3a1890e2bfb7b13742160ca427934280d981162d9b581eef791ee9e92cf922ce3c398bda9b275e485202990e6b700c167b830822

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
233a007d7e946c95dc570603a60e5252

SHA1
9e704eca30db541f1bec266cc09e031f6b563150

SHA256
438e1745bf6054ca20f6f13afa87898c159ca113928c1e44cb7794bb2ba413fc

SHA512
c6ae5490017039d31c9179c2cd3ef0c96283dd2b3c1dccfb33c3353b87cf3f92a6a9eccff128fb87924bf9cbe3e42e898088f514c149950dca2f553a91fbd609

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
4cae4eea75cfae74f813a33d5d986545

SHA1
4865120ab3a76be5c693de3ab89bafcdd42c33c3

SHA256
aaf8709f0f45e2bdc00bb625d33ca40b0731ca1b1ca589a179a8e412c85b956e

SHA512
17592e4d0b42e5f5d8e4487cb7e3524c28667b2ee4392f2a6e789c7402642ee79a4447e998302aadfa34e5b9266eba59e82ea845431cca43bd6043a443455287

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
1c9c27e417fbe8791643cceeb8f2d3a0

SHA1
a6d857e0112866940222112fc9eba6d8c765476e

SHA256
6c59a77a087141b0b99e83887659f59a16fcb1f1e9e18265fe914908ca5e9d94

SHA512
b4c76f241830488f49f1aa00f2565f81437e53579b8047c37a65761182cc1233a848a5ef327a8a4fe8bbbdc53079c68a6ca314ed4bd7162524be1efbddab7fe8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
9e3253da71cb3bc1f5e878e3473704b0

SHA1
6cd0a129b291bce337581da43d5c3f8a0f0da57d

SHA256
c74c16b53d3b62af10c499e549f822226e701e86e48fbdefe29359f7b7ee3182

SHA512
79f7c825826776f49791bae98065f84cb87d103d851c2730c8ee774323a9c17929aa394768c2c64b3b0b3acd0685e9d2617e3eff99b3d4c205b97bbdec34453d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
8bfac1d8d306c6e0879d96f0b0aa36c2

SHA1
76b119322a62b6172e13b1233a80ca858da510b2

SHA256
fe9eb21025dac2987aff83963ebb11b2e30ace116b38f0640ba2d4f62d9347ec

SHA512
1538a88840eb8dc844dbb1f8108c2c9b2977672b1f4351c3c749f6b9eab9a4d3380df3bc33754d04f40fcf870fa368a8620b0d6451e402151975828d57fa579c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

Filesize
3KB

MD5
16917a561acd2d733cfc5381c42425a0

SHA1
b4fc728ebf3e49e175b544b6e282b78ef1a3c587

SHA256
a11dcefb2cdae1c7e37c48d637158fee98b26009ba06f3e9e68d3eb1b123304a

SHA512
04fac6d97b0599c418b45e0f5b1a38cb5a8b5754e0fdbe46c6589aea8f1ed9e48e401e66b0cacd399bbac62d701180c49636ec9e7e369a8b16e07c3112510253

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

Filesize
2KB

MD5
20aa45c40988b8424f8706b9506ce04d

SHA1
24d7190949ee3a42e12c59116373854fdc5cf7fe

SHA256
3de25c80af090eb7c8edc7fd42a0a3a4b600a0a235ebc74277c494b94d165507

SHA512
240d2678d12c66f1d963e9f23f0de2301422b52f81e793c4e204a149bd93b74d1c06754adea08d89f166feb48bdae11445f7576b60c2fcd5fe09340cbd6d8276

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

Filesize
14KB

MD5
9cdf1a456b209a2ccc8cbe2f280300bf

SHA1
7db63564d8ccf866d843a93bca76a47b05ef9759

SHA256
89a3ac2f21d6ac865ebc0b77f83bbcd169181c913d2a5c00a6653ce7c62d487b

SHA512
859f97aa8aa23488a357e4f06b5536be1166d1bef354e7a3d6b3ad9586c3b9914d7b0e972b0ce4c3933287c5dc142f6277d325cc3bedffb114263118aada16c7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

Filesize
320B

MD5
557a7b9541dc85e298cae2fa1bcf8115

SHA1
8fa7327a4c1e86a3a12a5630cb50f324ed739817

SHA256
48cf8ea6b61c213ad5cc1e0b7eccec9f56fab2d6ab34d1e86ac8ad53e74c1c03

SHA512
7eb5b0ec588ac0d482efbddfe9754f396e5e1e66045f2602b480626272922d411786807d80fa93fb117fd46f30f6128b6527d9cf60b2549952d36edece4e37c0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
3e1d653757f1e6174decaaa5ff65e516

SHA1
347d580c336aa90eac2feac6599625fb164a608c

SHA256
7b7884f290fc2f55521425cf5685932d60de4fd4734ca53bba718108566d9c44

SHA512
fb3b3825373fcb46666c5ae4a8af7a91b7022eb156781257df715046220f7a19efb529c2bdd74bed77c472e3972a7a1d6d86d141f6891ba5e13135228aec106a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
a91a18ddf99790c4f13e0751009f8b48

SHA1
c5fe73e86ead58adefe06750d12940efff0db074

SHA256
dabe5db2cbc970d7944edde45889f2bb2b2846f632bf7810b597004b764ba2b5

SHA512
94324e3b11e8245213f27b46f5f399b5d40c43b7d0580c2d721190ea75ec3711f9b14444cbd7a1325195448ece2fd44fef0ff15e81996a34e0b18272847bece7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
960B

MD5
5fda7255ea5f3c5b880861fc8bedda2e

SHA1
187676438cc55b3b22fccf4bb41b910aeccf34d6

SHA256
b782490f9491832f726c4cbbd6834012d51d62d873d7619fd48f50bce0f95aa8

SHA512
3cfcdacced00c6411f1d3cf2b13d265d3f13de8b95d82e847a82bf9a547573edbd65ce806442ae14380e2c787072a4e377d28adedd1aa127b004dc1fc5550ad5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
128B

MD5
a329f35ab3635552615795f0cc3fb4e0

SHA1
a557daa6052db6dc5a522c5b26010b93831ded0a

SHA256
f6020eadc97074c027588cb942fce0bb63b782f000665736c25d6d996154967a

SHA512
8acae9501c22dc82a1b3d42b797d31f1614ec5e67fdf344a62860001115d7c65460a833c0ef6eae10af78b0c62412f67a0ed497224143a2cb34c8ee1a80b3467

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
695edfd0c13895d68d51de78ae710b38

SHA1
9e5545efb5695aa2f09980ea0e8481496b94f93c

SHA256
472e089369acf93fe661432de37c110fc814486a979599b4f9e4bf91853fe080

SHA512
399c5603830f0dab55610dc3f0b909157e029033674a5cd54fa3fb224504acc761dc6e7ef57300562eb30b4229c36ebb2c6def24475e5c3fb6a1e2661bcbea72

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
0826b36251f85632466d86e30c700ac2

SHA1
e206706570b8d2b0985aced4f75f7142f29e5499

SHA256
c3a56af86ea62b78feb0590e5216c3e308f22caa92d6a8371bcdadcf107c1fef

SHA512
7cfa412f5b65a7e12006c054ee0651366c787f182be5a612f039425c27f95ef754c531ebbaf692af37245866eb8195a5142056ff39fa4ffa24a4178450975af6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
64B

MD5
99c2263fc6414d0f3ee571861f2e8aa0

SHA1
5272ce00d34548cfe5571362a31b944d248d5f9a

SHA256
7016dbf738fdd0debb296b0b6bf573cce3b62b51683a06743dac3c4a7d2c5b78

SHA512
b0cb4ca7e52399e396fa7e2059e69730d106d185f4d934e822cbd31587be4eece660cb77fa4f49e3252585f4eb4a90a40cc0b1f10e3c43a809532b76e294c0e8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
928B

MD5
dd739eb0563989fb1c745f55395002b8

SHA1
b97067eea5c56afa4067e9e8878b4b59df34d1a9

SHA256
1499f01f6dd4eaeda51afb1a9bebc82675f8600abb7a1fbc5a26f7b0eb302252

SHA512
21be132e4e37efe6186ae21292b8f196ce3749ec7533ea1982e5db25e56952905565119d22b9ecc765f70f71e9c14212ccf26098ccabbc86000895512a6db45a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
96B

MD5
3afe5f2529ce6abb2f25796096c944e0

SHA1
a22cdcd9784c950625e60ebaee8c5e5abcad448d

SHA256
ff3cfd9c7a07121e9bc1b5967d4a18d04acfabfaed8b89bce07717154a19438a

SHA512
d189980f9f5655128e35ca4f558a6e230b0e5dda52a86c525493585c75b843aa1b4cb9f65959be91bbb908dff8b2ca603c90628d9153082ccd8a3228f71aa4f1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
96B

MD5
c1c91420ad0732551b45a9b832b37fd6

SHA1
586fb23338aabd2738d1e5d6039f1d17a022097a

SHA256
b6e46026d6b81f8ba5ff4fe903cb526048e6bd900fb9d6dc027417d27be59f08

SHA512
ad89925e2f2ba9a71f22727760e6fba8649e673d7b8114d897b2e8186ac93df899a955820bd344e117205eb591d86b1563df049fc5a821e7378965fc92f3b494

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
336B

MD5
465f5b067684a1674038b1069ab6f833

SHA1
8bc07f1e804adb2e8984da9831a95e65c4241870

SHA256
fb67ade29aff1c76f90abe661069a6b557d36e77cfd231ac9d95615518d4fa16

SHA512
b39831b62dfc140b0a2f4e1921f5dccbfbbeddc49eb0214cb5ea184a3d8b3869f8bd89efb0e9e9b69ad4e3d6558b6dbca2f0dbd9acda69249cafb989e0c0aa6c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
0015fd61643141888fad52320e64c62b

SHA1
582f14c7482014759dd18ef7c9b09f8300cc326b

SHA256
fd470155b320b1af946c5300b7103e11caf35f1382f87b85bc16fcdf321d0fdf

SHA512
844081561afda876b57956878e729ff471cb9e3c7373fae730c0517337ca66e6f27e3e86bf47dbdb50cc53b978825661fbe21c9b6e7b5ffc806b06185c06b8d0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
176B

MD5
d3aaffe98c76e646c588f613fa6d0c43

SHA1
ef5f87946a372439666a505c16b72fbaca20bee2

SHA256
139c4c3ab28277d2959ab0096965d785dcdd8ed48981912cef833b7b05ccfa62

SHA512
f07ae32fc435b1c53003caa107388a963b31b8bfbbefe93986cb37b6a1ccce67e573827597fa1f93010458578f261b9d7aa16397712016da74ed67f22aacac56

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
592B

MD5
cb5eaf4c9dbeb3c90c11e81606f2489d

SHA1
0d0b036682fbeb0ce49b9cccd5decb9b5fc6899f

SHA256
024473b7bf26cb1346b105d75b0e67cb8219751eb5c62aca41eedb50356fac68

SHA512
77a1d9c3cb0fbbce0834f564397698f73509e9a8c7cb0fcbbb7a3226b09aeb72f5056220f309e8b935a5c99afa2b534770060111d8983787a3a56a09ebecf9aa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
128B

MD5
a9f11067e426f98feb3c5878fde0bf08

SHA1
8ded5d3379c1f9df2c947e635869bc9d5777f8a7

SHA256
00592f88066cc52cf49c69e2dcff8ef7549a84f4622754b8f2452dca176125c2

SHA512
7611a6c50f608832661c792b6083e534cbe2eeb630550462f73256a4bac199cc53f17499c7acb79ba567a8b3b385b4fee920e63bbee7ced073998cc4ebe5c0ef

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
1ec3662a4d58555ad836b2fd107a23d6

SHA1
b4cd62a4da0b4bd2da05bd8292fce3f5865f1f6c

SHA256
9666d15832d0c0612db088215f5d34b7d107c4de787519fab4c26bbbf67cf00b

SHA512
8e96cee5d5be9bb6c554d20e356cc1ad4c5bc6a23c18fdda6201b48c6295907974504bb3cc17f2181ec76f1d71baaa28c2f306ba906a298b5c9f48a1859f01cc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
896B

MD5
0894237ac9ab76a26e6989a51c823c70

SHA1
789be0513adc017e78c85b33d96e32daec087348

SHA256
501d06406f354258a62e64a9f706627e3a047e7ead82d37795dea59fa2c630f5

SHA512
fa7b6cbf99579f3eb18892fa8da537677d1572432deb92ed3f13ae37ccaae77b238acac0feb7c797132da28cbbc33fa4deefc5a21293a6cc7cd1bf6d055328fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

Filesize
12KB

MD5
d4f0bb80df2972fe578948ce6e6b1bc9

SHA1
9f0f86ce23ae9036971800eec3174e25a4b7116a

SHA256
179d745e2072a63a129946cd9a0181c74f937803824781a1fb20a3915a936e9f

SHA512
3b643ef54da29ce8b61de36f72e6af72cad4191ea06c8c930d4a3f797dec6f1ff8461d0b35ed76ce490c2f197fe93a9dd480efbf70265176ac2fc9fb1e389081

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

Filesize
9KB

MD5
3fc7f4066ab1971639ab9703f8f04420

SHA1
a77adc1a4838990f3e91a36e6eb5de037cb217de

SHA256
8b726ceaf9968b8afcfd88a03fb8be7fa7807b3c08ff34614a3ae8cbc35fa6d8

SHA512
99bde5fa58e48a75534b7b31131df6ee997cfe0485193e74033e82c696407bc13d90c3c3523ed6086de21d4d16e1f4afaa107f9372804c42de4fab1d060148a1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

Filesize
9KB

MD5
1d26430b2a971c55c7a2c697884a5a2d

SHA1
e53575aa76a70d0aa6fd6b8292a67ff11e0dd5d2

SHA256
a3ceb0471545eefb7a5f79804b3b8b78672286ca7b17f552450f249575d75e65

SHA512
eedc809ba7daf03e9715fdb83f79547176ac8d7fbdc5169ef80be2ba54345c981fba3adab1c44066fe3d0ab0846369e301b72514970d2a015ee5b39b934bb806

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

Filesize
2KB

MD5
90e8cd67ab20ca2fb207dcdca90e4c74

SHA1
fc23b035149037ed549c580bf985e8906cc8d761

SHA256
e173cb273ca7aae2df12256d8722403f5b519a93d8d001708de3b8299e242978

SHA512
bbead028de57c953cb721d00dfb463afc771141e76a1895a876b2ffbba6118c8152697b141ed45ce65f53ada5b49116f33e0062bccd915e3c73c85cb95fd459e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

Filesize
10KB

MD5
1c29aaa6c8b3e1e40cf04deed8896170

SHA1
b90bf6a7ba782f139bcfb78c83e7e05c58f9f582

SHA256
1e822aa21b2d431515d5dc61e136586234653aed71c80a5ffaa3b62c2fbb9c44

SHA512
9ca8cf534d076128bc17908efcea18b4e1146cc4e547ee6adfb9b5c4342905044063b1bb470b9bfaf57657f26e75a8316812e4a558494136688d8807c5d87f5a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

Filesize
21KB

MD5
60a0c231779f3b43b490dc3728b9d0d2

SHA1
57597cd0791e542740f78f8f3b5cc58766ff9d6b

SHA256
1e22abaa0da18cbaa8cccf55d900218b89ada1a836f0d254fbb9b0558c25f6c7

SHA512
707edefec0b50f67ae95d11bbd01417076c42cd90948b6561b00e846b1e19ad1c11312a371449179c59c6ada26375e6c6829d576140744c2b29f191733fdc7a3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

Filesize
11KB

MD5
9cb9a7108f314abdddba6d0fb3892d6f

SHA1
80d5f71f9d8e5c0814a4b3d4f60bf630f2e71e89

SHA256
dfdbd4140cd20630c78666114636817b5288afac924600ce25ad6d146c4a0a6d

SHA512
9674089726ea22eda9c2890951ee598f1e0c72bdd8e3949dfc5de214475f381dc548ce865d27914764e4159fc5be47fe0b8d4d14b7ccaf9b231009b4b3379ca5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

Filesize
10KB

MD5
c822cc439a984600765b2dc87dbce82b

SHA1
e35d21560e7ba0314c7785043ac335f1d56a8c86

SHA256
67500bc33fcdc5b9841afbef376226f72a938b98da7cf8cc2c88ff54c58e5746

SHA512
9705799a6d5676429fd11e7e22007de36c8193721d99b48b3b9613cb4d27ca465718b163b914f33f9b536e4aa1eff5350c7b0f15640be14fcbb9270d23bd59cd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

Filesize
2KB

MD5
7540e06c98e1a623ad25a304ea4a79f2

SHA1
4c9d68ae9294524ade33921d9c17b5c0eabb4d8c

SHA256
c2b6427161778e98510c9938f63eab75e575abed4f7616b1ff8ee188c3c8fc81

SHA512
2c3b195e88d861ce3c704e020d7aeb0a174549c8fce6206f338123f34c64b4193dc2aade4a6ba4adfca378682435d64ea7b278c1d1f1d4dece6272716c8125af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

Filesize
7KB

MD5
3575caa56ea317907f2a2b7887d129b0

SHA1
ee384774fb1fe0a88dfbc3130f7e04d0d55bb099

SHA256
6ee7508a2944e4d2e47d5782ba5997331c71e19ec3ba2b70fea2993656b9415d

SHA512
3e618baf1f1dbb1e2d2c417e720efac1acd9886959852a7f2fc6162751e79685da0906b614e2c2a3b1345cd1a3a0f09f2b616318c5a9030fc13ea24689c4af51

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

Filesize
272B

MD5
af91b35a6282b35187647dea8b24b775

SHA1
1f53aafd03752682fa74ff058093f7839907b2ac

SHA256
85f278d5370a8b6ffcea2dc36134532557171b60280488e98865feff1fbab852

SHA512
9c7b37ba74be9ed73493a420649855fcd1fa4448c0c68415e3ba6d1d0b767d8ed00927f00e655e21ce1390eb20628a770ff7d9cb244f2042d58e12006413c7e9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

Filesize
496B

MD5
44ba18910653d434fe08dac1d6f90592

SHA1
e8a05c6deb87ffabaadbf0762c3695ab77728dc1

SHA256
f822a3f486389a40a66607d4ccb0fda6b3c545e6eecf23018b5af72a119c92f5

SHA512
313a22e22a55f3ff9fdd09d86efe9abf65d02e6267d1d363c0722692ad655dcbd03baa1917a2e8c559f3646d1cf65fc4e2ca198a919ebb06db4820ef5324e96e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

Filesize
24KB

MD5
ce57979f8700202bbd7634a996e7f306

SHA1
98a8c8b02a50a906cb19e615cec8398451cacfe0

SHA256
ea445b6267743eee415127742c0eececcfb3bb268118e20cef336c406d42fe37

SHA512
292107253b646e802bad3cfb792272c91969b2185e215cbc8b7a62130ffd1b599095bcdcb8bdf23ca0e232530c2b23c67abc8a35f7b96e695ff55e5048b24c21

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

Filesize
1KB

MD5
7a4ad70f0495c5e8011b1358ef35197c

SHA1
93d8bbbfe103fb04668540a0325793d24893f802

SHA256
ad54cdd81581aefa8190ece27f3646653b69bdc22df3aacb4f7fa5d2aad3fe91

SHA512
6efd5eaf0f86448dc2c8dd41ce4bdcb4c6b9a4834a810af1253d1b935a9a70e93128123eed44adb60c4effac394cdd9eb507bb5b68ad3054bdf0fffca385946c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security.aspx

Filesize
9KB

MD5
a9a7bddc8a8dd2a5a5c7689d38475967

SHA1
5a261fac9a993d0dedd62c0287735dd45bf89306

SHA256
e1042f65672978fbb68f801654c383b11509b76ee123b9a7984dad8066d16b76

SHA512
108037196fc6efad1b90c55b2cc1c84d7cd779ff58d685ba984684421784d5cad3282424e01029664eda746721253ca110210ca5f18da14e49d8a24c2ca1a721

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx

Filesize
1KB

MD5
75f6663a4f3b27c07841d75336f34fe3

SHA1
55d534f8325f8ed179a73ff81d3c4f4646a7ee0b

SHA256
1b550a9f45b3489238b6a0573e99d63bfe159176ec995751e51529caa69f76bb

SHA512
47afb7542a2828a2decd2114f623060b426c94997cdbba73292a4146032a906e457be305bc6aa3bbc5e5ef7b71257c97a1362e3984aab9ad429497f9a701c368

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

Filesize
2KB

MD5
86e48a0c2f601eeabcd56af6b5277b8f

SHA1
036e1e40f7eb59756f3196955b19df6416e8fa56

SHA256
3010d5fe37e32b8836748390bd034091284f36cddfd247fd2a535561d876d48d

SHA512
d4dbcf5bc7e0fa138e75de7771fec6168daad390e5f1b70d0e296cbc993c3cd3e5ff68d4201d10b1376f3bbb9f73bfe5b12154d3e689b1c47bc4e685c01449f8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx

Filesize
4KB

MD5
e157ce576a3c380269c909c8ff1c7213

SHA1
589fc1ca82a110d3190f1fc23d2e1cfde68e86f1

SHA256
c95ca16ebd33b5e78fae9d345996cd03628c4b860cde2faf21de3032bc9c48f3

SHA512
c475ed18250cd301f81e4b928a2a308dc21fc7491a24eca1e8f727962b21ae34b38b0133843427126cf7c910f6f0948dcf4acdf9e66969eb45fe26389c6f5fb7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\error.aspx

Filesize
6KB

MD5
2591b008ac9842610f77e0c6f61fb310

SHA1
dc870a54068a21d2d1b5796fd21c6bc058a8cadf

SHA256
704941c4ad21a497139a4ef62d1e9b87ffee1c75fbef2605e7b0e1d2dd54690a

SHA512
b4f51e48c3e4652a5e72e3369facc478f443e83e1d96b117dffc3cadcb28a5716f341be1f738ef78c15192b7a753f1e05a852ebaf8fb15298a95e120976f211a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx

Filesize
1KB

MD5
c433c7270013c13e19619c5f5bcc8cfd

SHA1
6e00fa401b1c7775c6ff29de9a15a9eda9c4f4d8

SHA256
38c6302090ea66b18ad25ed60cc6d22e039782f2719f0c1f9605d4c6a7bb88a8

SHA512
a53b00710c1dc7eac097b791dd596b15bb826e711a33e59139ede22b11b86648d927252cbecce9f2fdddef65950c3c705905ae05ab7319e759fecf1406aa089c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx

Filesize
752B

MD5
bd121e5e40a8437071189372bd25f532

SHA1
3e5265d7c96afa39cd684cf301bdce92f217708f

SHA256
965a90a877b88ea132069062921ba2dc0d0684bb7fb42ce9720770c560a43a9d

SHA512
95f7932eea3012e1e481d573a5e023ebe1457523b25d05a7c129f326041a199c01e5869164f6420ef2d7fbb447a16504881bddeaf31eaa5387c377e775591ce4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx

Filesize
1KB

MD5
39a3668b094d53f40186e790aeb6b78f

SHA1
2397186f8899fc2974ef75648e1bf7dc03e0477e

SHA256
85f391d0f8bf4d390066b5bef334d053ddbf13a69f41544c68550c2e1eba336e

SHA512
6067cdd7084c0c77f5ebba7e948a348ab8abb04ccdaac4c6e44d5ff419ede9c89bca7d19306e9a569aaf7355234bc1a7c48d3cba50456358946f5168f621ad69

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\navigationBar.ascx

Filesize
8KB

MD5
3666aa719bcc6025fb5c1d7df7afe99c

SHA1
f208d58a1c85dbefcb3afe6f0c1fffe43e90118c

SHA256
3ed46756e60c73dc54eb487fa7361e2b0c9b4aa09c672c565777b4271e19a0d8

SHA512
8a8f1ac9a0e4e035d3258fd371335848ee90420a723b35e6a1f0d8e06e41e2c0a3110cc50f2968fc5da11ed62766fb13282fd688bdb9c8b2adab2da868d96a2b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
51218037590e38dbaf04a3a2fff20c89

SHA1
dc9040760c0dd140519b0f45a7bec09ea86e1183

SHA256
f59364348fba51096fef53e5eb4178e87b4861205be65f2c24ba0f74bbb9ca30

SHA512
788403cc2fb823678986f87b823aa539f8eac4ca37262e24aa006c614f965c709ad0829d73eaf57e5d092eb6cd556b6fbd768385d5d93167cf036dcce74fc561

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
9705b190863b47dc080009870e32ac86

SHA1
acc55de0d0ebb1ffd25dd4c8085f34fb4c1c0979

SHA256
8f81dcaf26545fe9764f6cee28f400618e49f26762b1cf18273a50ec7fe82e60

SHA512
72aee91b313068af08de8d6d60df3dcba5d6ea6c28b31f1d1df97ed55246afd7e9a2e2d406ded3b6006e05fd333ee661b9147d5789a4bd3484c2e734cef9be53

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
be58292c708c631ae68adaae0615eeb0

SHA1
efc4487cf6d6a31ddccc7190f55e1e8ae376b639

SHA256
c1c57110141ec0e7f7c321a5144fc734712b6a3f3ad00d1d2e12cff46245ddfb

SHA512
8ed0ed705eeb3355d78a5ba3703f74e5cb8b2790d1d2f8e074dbf4452eb749bcfb2d8ca765a14d07594608e4aae45ef0ea17868623f363a2585273830ffcded1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
c94536199c91f410a534b94278ce08ee

SHA1
48c8a570adefbe9a4aeae8da4f0f6bacda49a02f

SHA256
c9882095dc73f53b55cd92187903d3e64e9d7bcf8a8a1dbccfee99f9a827e806

SHA512
8d05371fd161de4a458c060b4129e3fc1d8a0cce4ff0871f2e85c456ea8610be4f7024918901ae1b1f3a7375d1e4cdff2b76c0c0db7fdf489715f2365a295c9f

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
c799c35850eecce3788c5c609ee63a05

SHA1
268066501ec45b152a5ade50469257a569bc1899

SHA256
f2d881faa0a68d7548bad86d8a6db43569cc5f01867dbd69f7446b49b6425c4d

SHA512
dd3e0956020511ca478d134c76fe9f324d11af73ad500a29ef44ecf4765e5f1a492ea6dc284576b0aa704d784c26dbff6989c536b3d27678f12ff86d5770c7d3

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
6a700eac6ff2c72dac859da37736866b

SHA1
ecf6eed2211326df968c300938dbce1840df034c

SHA256
1546bb88f3634bd5a7fc46da7d2739b6c2a6634f57e7d4fceb5ecf2b78776841

SHA512
f4ea2a9531e1c1d18f7775e927c74799d8b86badf868ece2589141d3e414ad379b227be06ad97cdb89f664b785dea8350413270062c11b97fb0bb6f21063e3fa

Download Submit
\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe

Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
memory/772-32-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-49-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-4-0x0000000074910000-0x0000000074FFE000-memory.dmp

Filesize
6.9MB

Download
memory/772-5-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-0-0x000000007491E000-0x000000007491F000-memory.dmp

Filesize
4KB

Download
memory/772-132-0x000000007491E000-0x000000007491F000-memory.dmp

Filesize
4KB

Download
memory/772-134-0x00000000020A0000-0x00000000020AE000-memory.dmp

Filesize
56KB

Download
memory/772-6-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-8-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-10-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-12-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-14-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-16-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-18-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-20-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-22-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-24-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-26-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-33-0x0000000074910000-0x0000000074FFE000-memory.dmp

Filesize
6.9MB

Download
memory/772-1-0x00000000003D0000-0x0000000000402000-memory.dmp

Filesize
200KB

Download
memory/772-35-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-37-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-39-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-41-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-43-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-133-0x0000000074910000-0x0000000074FFE000-memory.dmp

Filesize
6.9MB

Download
memory/772-51-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-53-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-55-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-59-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-131-0x0000000074910000-0x0000000074FFE000-memory.dmp

Filesize
6.9MB

Download
memory/772-61-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-63-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-130-0x0000000074910000-0x0000000074FFE000-memory.dmp

Filesize
6.9MB

Download
memory/772-65-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-67-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-69-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-57-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-45-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-47-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-28-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-30-0x0000000001FF0000-0x000000000201B000-memory.dmp

Filesize
172KB

Download
memory/772-3-0x0000000074910000-0x0000000074FFE000-memory.dmp

Filesize
6.9MB

Download
memory/772-2-0x0000000001FF0000-0x0000000002022000-memory.dmp

Filesize
200KB

Download
memory/1168-141-0x000007FEF5AC3000-0x000007FEF5AC4000-memory.dmp

Filesize
4KB

Download
memory/1168-142-0x0000000000180000-0x000000000018C000-memory.dmp

Filesize
48KB

Download
memory/1168-143-0x000007FEF5AC0000-0x000007FEF64AC000-memory.dmp

Filesize
9.9MB

Download
memory/1168-642-0x000007FEF5AC3000-0x000007FEF5AC4000-memory.dmp

Filesize
4KB

Download
memory/1168-663-0x000007FEF5AC0000-0x000007FEF64AC000-memory.dmp

Filesize
9.9MB

Download