fantom | 60b290310f67adb0ae186b4b938ca466a6b55653b2519261fa425127f5500a1f

max time kernel
150s
max time network
132s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03/09/2024, 13:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Ransomware/criticalupdate01.exe
Size

261KB
MD5

7d80230df68ccba871815d68f016c282
SHA1

e10874c6108a26ceedfc84f50881824462b5b6b6
SHA256

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
SHA512

64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP

3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi

Score

10^/10

fantom discovery evasion ransomware spyware stealer

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>EmBasx8Zp/HpVorD4DkOg3xAvERMHeDh4sQYTFHe2URs2uzkttWUfyhRQ4D2ws7cZn0LqX7E4AeWVCQbr5g+bEMpLIZkDVdldDDtTdyRC4QtHlaF8twfK99Mkam1cxREkPYka6iGK3EeLnU3FXDKv0vBVpygMjHcSKD5PR5qRkG5bWhVCKwMJyXAzM5ZZ3jra4MJD4PLHLW+QU8CX6M2o8isPZLvi+HM7a5j0EmfB2qay/seMNE0rseq1M/bzTUCnJil7yChdw7H7jPiZBRYI9AnYPH0r4dXXKFGFaGnmkx6PsgrfT4ZeK/O/90AK0NrhBVk+wPptSRUMKxslgSRbQ==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

[email protected]

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Renames multiple (3033) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
evasion

Drops file in Drivers directory 15 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Executes dropped EXE 1 IoCs

pid	Process
3000	WindowsUpdate.exe

Loads dropped DLL 1 IoCs

pid	Process
2700	criticalupdate01.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hcw85c64.inf_amd64_neutral_96b71557b416d04a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmvv.inf_amd64_neutral_14cb440c800fe9fe\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00y.inf_amd64_neutral_64560c72e81f6ad7\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpf4400t.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\HomePremium\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\eaphost.inf_amd64_neutral_4506dea11740c089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmzyxlg.inf_amd64_neutral_14f9249844f1cf17\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnep003.inf_amd64_neutral_92ed2d842e0dd4ea\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky004.inf_amd64_neutral_5db759db19acd3ae\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx00v.inf_amd64_neutral_86ff307c66080d00\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpf4100t.xml	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpc5500t.vdf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\UltimateE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\tsprint.inf_amd64_neutral_c48d421ad2c1e3e3\amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\1394.inf_amd64_neutral_0b11366838152a76\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttd2.inf_amd64_neutral_9dcd97ab7a913b7a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmusrgl.inf_amd64_neutral_d42522943de68905\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ph6xib64c0.inf_amd64_neutral_a43df8f7441e1c61\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00d.inf_amd64_neutral_0600b2ba575729f4\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnnr003.inf_amd64_neutral_c07c33bfb5764bdb\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\smc610u.xml	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wiabr008.inf_amd64_neutral_27d1c9a28eac4eed\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\HomeBasic\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp002.inf_amd64_neutral_04d05d1f6a90ea24\Amd64\hpmcpdp6.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\eval\Starter\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\HomeBasicE\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\StarterN\license.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmdsi.inf_amd64_neutral_e77f438012239042\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsier.inf_amd64_neutral_622ad8125bbeeda8\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\lipeula.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\eval\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx008.inf_amd64_neutral_75545721835fd863\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\EnterpriseN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmhaeu.inf_amd64_neutral_6611a858035bf482\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmti.inf_amd64_neutral_4443b423d18c3ffc\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnkm005.inf_amd64_neutral_c03c9e328608873e\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnts003.inf_amd64_neutral_33a68664c7e7ae4b\Amd64\tsmxu003.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\_Default\HomeBasicN\license.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmbr002.inf_amd64_neutral_ce2134188ab21f59\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mf.inf_amd64_neutral_b263d46928b97a9b\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netnvma.inf_amd64_neutral_99bb33c9a5bedaea\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky304.inf_amd64_ja-jp_1b1a158086a263a4\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky306.inf_amd64_ja-jp_97f0de39317f6837\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnsv002.inf_amd64_neutral_6ca80563d6148ee5\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wsdscdrv.inf_amd64_neutral_47406488f9e8d5b8\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\UltimateE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmx5560.inf_amd64_neutral_e853cea0022c059a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp8500gt.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\Ultimate\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx008.inf_amd64_neutral_75545721835fd863\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\_Default\Enterprise\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\megasr.inf_amd64_neutral_30b367f92ca46598\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp6500at.vdf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgcs.inf_amd64_neutral_aafcd45e4e890862\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnsv004.inf_amd64_neutral_fc4526bbfbd5feb1\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\xnacc.inf_amd64_neutral_13c4e272a96185a1\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidbth.inf_amd64_neutral_8a1323fc68ad84af\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmeric.inf_amd64_neutral_27c5b45728cc9ed0\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00f.inf_amd64_neutral_777b6911d18869b7\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpD5400t.xml	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx00v.inf_amd64_neutral_86ff307c66080d00\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\_Default\EnterpriseE\license.rtf	criticalupdate01.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\slideShow.js	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\js\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBlankPage.html	criticalupdate01.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_cloudy.png	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Templates\1033\SalesReport.xltx	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_ja_4.4.0.v20140623020002.jar	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\css\RSSFeeds.css	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_down.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\helpmap.txt	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_italic.gif	criticalupdate01.exe
File created	C:\Program Files (x86)\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_zh_4.4.0.v20140623020002.jar	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\fr-FR\js\picturePuzzle.js	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_hover.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\es-ES\js\weather.js	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_hail.png	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanPhotoAlbum.potx	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\es-ES\gadget.xml	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImages.jpg	criticalupdate01.exe
File created	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\requests\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\es-ES\gadget.xml	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\9.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_zh_4.4.0.v20140623020002.jar	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\gadget.xml	criticalupdate01.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_sent.gif	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageSlice.gif	criticalupdate01.exe
File created	C:\Program Files\MSBuild\Microsoft\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\flyout.css	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\greenStateIcon.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-remote.xml	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fy\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\vlc-48.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\de-DE\js\cpu.js	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\localizedSettings.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_zh_4.4.0.v20140623020002.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_docked.png	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\5.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\topnav.gif	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-charts.xml	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\d3d11\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_SlateBlue.gif	criticalupdate01.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.SDHost\6.1.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Design\52873358b397c328168f0a5be7f3b9ae\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\8ce46e3ffce2d37b9c50762a641c57ee\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Afternoon\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4c0fa9d495ac562afcb136f3e9a87cb9\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\047c9c4a6b9dcd9d1985b95e0f4f1daa\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\mcstore\67c2902f53638a9056174f6130a8bde7\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Speech\160c2dad0a0b481f8ed2c4462dd95618\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\diagnostics\system\WindowsMediaPlayerConfiguration\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v3.5\SQL\de\SqlPersistenceProviderSchema.sql	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\ehiActivScp\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Management.Automation.Resources\1.0.0.0_en_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\de64901e4cd2074f5c70733ab5d7787a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\cdf48153115fc0bb466f37b7dcad9ac5\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\.NET CLR Networking 4.0.0.0\0001\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Savanna\Windows Hardware Remove.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\fr\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\AppPatch\drvmain.sdb	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_32\CustomMarshalers\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.Windows.Diagnosis.SDEngine\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Te49ad7d9#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\MSDTC\0C0A\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Delta\Windows Feed Discovered.wav	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\DropSqlWorkflowInstanceStoreSchema.sql	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home2.aspx	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\XsdBuildTask\c9c1aec84139cedbfe3731aa316c0ad1\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\diagnostics\system\Printer\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\ServiceModelService 3.0.0.0\0C0A\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Landscape\Windows Exclamation.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemData\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\v3.5\MSBuild\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.5\SQL\EN\SqlPersistenceProviderSchema.sql	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx	criticalupdate01.exe
File created	C:\Windows\ehome\CreateDisc\SFXPlugins\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\PLA\Rules\ja-JP\Rules.System.Common.xml	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Blueprints\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\diagnostics\system\WindowsMediaPlayerConfiguration\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\bde9665f643d6e82b36b401d38f07fc8\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data86569bbf#\668443fd7a2b8ee0c9d813bba224cb32\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Wind5abb17e9#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\IME\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.7.03062\Strings.xml	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\6.1.0.0_ja_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\napinit.resources\6.1.0.0_ja_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Logs\DPX\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Win32.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.Entity.resources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\Fonts\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SoftwareDistribution\DataStore\Logs\edb00001.log	criticalupdate01.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	criticalupdate01.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2700	criticalupdate01.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2700	criticalupdate01.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2700 wrote to memory of 3000	2700	criticalupdate01.exe	31
PID 2700 wrote to memory of 3000	2700	criticalupdate01.exe	31
PID 2700 wrote to memory of 3000	2700	criticalupdate01.exe	31
PID 2700 wrote to memory of 3000	2700	criticalupdate01.exe	31

C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe
"C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2700
- C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
  2⤵
  - Executes dropped EXE
  PID:3000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Filesize
1KB

MD5
6448f43bca29f96cc82c4ddde4c7d34f

SHA1
90286cbf4b34445a4b6bcc702b30f16fba505e13

SHA256
df383538c42c4e2cc7982d0d44d6528ac7e07411cd9165256c462bb8f19ea3c5

SHA512
9bb5c24a735f12665778238b02d9cbdbb0bae4c23a2958a2bdac0791494ef5001a946726698caed07a1a5016684bfe72acf37b973bf64cede33ef9a4c67b462d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
352B

MD5
95b436c75e6e3047dc2240810342f1a4

SHA1
fe321622449f3c0f2fbe4010a072880e045c9080

SHA256
ba3785e9f8f473008940d7a1535d1d9bb87c3e3df76c0973ca67fd6d51f7674c

SHA512
ad1025d2b2290ffe8c0b5afa5bd5b591fbf36027a74dfd33913541fb3c3dce3bf406a0d48d835b9911c8140a7430d30d895901a197ad71f87ca4fe3adc2007cc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
224B

MD5
90a1dad37f9878e40daab67d5de68ee5

SHA1
f6adf1bb321340af588cd5ff8b1798300e75ab7f

SHA256
6ccb5c47658d94ecb6125895d54c1bc22b6973e0c6c3df2b86f619be4cd96d90

SHA512
a1d0bf592bae1515f6ead08a72bd9ab76846d150171a3d71e581ad4840c45cb94b535a85720e0aa5d70cc4711c01c21dd8181adac23c635441c5ce8730276c59

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
f0342a2e54b94656ed86be73f9f638f8

SHA1
32cc3ea7e1d76ce081db1fbd17e9d383aaed67dd

SHA256
24d3343eed828d24f248bc5618a657a3a561017b4abc072416cc2b5672faa74f

SHA512
b8e48c40ae2ca1337fac976c97b63979599414b75289f93aed35243449d08fb14b2b0c7a59a32c2408f4dbafbc05e3f28df6e799ae1a0dad5009f7fb92ab722f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
b6c818c82c11e2fc419a15222922f106

SHA1
39077855648e57d7dbd5fb36245b77b37345420c

SHA256
e6e46243598343a29fc101e0d169aa5d5a76f5d027265bcf2794e1e9bc83206c

SHA512
b5e7724c8567ccd479a058e753cb0ca63624f3109897219c3a53d76c1f19b50396c4f3cff465978f8e1f672e2f237ef4ac2628746881c81de02152f06ec28949

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
578849b2f7a99aee2ccc45e2ce859523

SHA1
32de4610716f5dd1e9e875ed797a0b9af0a88b1e

SHA256
aab76de824c46a49fb1fa2872b5a7b2932215524c2e2777b88271f28b2a0cb6b

SHA512
e9e34fa18e7626a4a57ee30465bc5cad0c01468dc7f3d2e9a5fe5603f2e3bc7dbaa2f92ba40219ce2adb1b9adb77883de85426d5643170877ae4b6c66e35ba56

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
54bf5f87f178622aec0a768095a1d85e

SHA1
072d98caa06bc9119c0ae96c00758d1714da9562

SHA256
5ddfcc6df01c46dda2fe64d664d422da9b9950a841e3ae4b13eabc30f1acfc76

SHA512
cfa77556329129c0b64074a44977bc326f3797e68826260d52c03fcda587ebdd108b1c8b5e85d9f2e806f27f3e730c7dcac50dfb4d5bc8c393477527bf44f8db

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
112B

MD5
5fc50dfedb92e65cf769c52136897311

SHA1
300e39365594e926834efbde56c8d9de70695b79

SHA256
000b5e77d81944b3a9c4cee3d016652bda6432017bc257fdab89e5aa6da7b7ce

SHA512
b32f0a52678ed4a1fec9f50988c38a3dc8cd1e247954380694112b695bc2642a74d7a686335cc7838b5cd5abe8b20111765e70d30af381d12be4689c6554ad91

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
cd66982f912c6e6bdb1da027dddeecc0

SHA1
3fe30fc46143f175e271c06b77535c7417787f23

SHA256
9b086240c14c97dcaf943fbc5044c99a14751d22fbb4331b751c2e131725b91e

SHA512
41ab81d3cb143d98c8113536155940927981bffa212c6356e00e5ed476426de0ea9f1bbd35354bf6be49bd063480f1ee91c0a3cc3b3df1f4329a7d13e3c2c3c3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
e7ecfb8c0d4d8af0a9fd0ec9beb035d6

SHA1
dc5dba495309aa1f7e8ed554a6ee666330acc7db

SHA256
e8996b59aaa3d8c26609056706128fc33d1d2dc387c1f3f2ec7dbf311ab966b4

SHA512
ea1e703c6ee8a364283bed818072a0bc4d442dc991129b16b5699df467dc2ab68398fa7d794e5b75aa7dd1495fe3c8ba661758a36c99949327076397daea9e67

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
7fc658c45f3688f4ac7841aa5fbf6282

SHA1
97d2e52ba076173c60e1a1c2dcffcb5fb7f461d4

SHA256
fc0ae8e54b49057ae227a837261d12411d5aef4991c7123584d242e81787691a

SHA512
64afe30f5a5d623d01afef821d5edba24ab3e8153133de6a6092c0896e487ed2b2677bb7232efc485555ab14a59989c3b4e7145a3914ae356deb074a3181c51d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
cff30255f8881a65af6e045ca1d67312

SHA1
f317296ab4f326b33d280c40fb4423180886f34d

SHA256
4731eac8dc2bca24ca029208fbd62a478714292d78bbc3e30d0ffebc70da9414

SHA512
2339f3e349a58384c0f015f3a14a2bba15358e5872c859038bb4ebc7e2f0431440e50946e23a158945dc82f549825c0c9f34b24a5064e4cdcf63ff4361a8a22e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
baecb90425bf27522c75f2bac7796c58

SHA1
75dfbde972a2ef31ab96e194038fd46b6e6a24b8

SHA256
db4e23e9350986f8e0f54a256a375c15082a7577cd8235f2a7470474568f2908

SHA512
a629447aef56d7ec3e979d2a97a931b4ecb00c14a4c28fe374d308770db726d80fa32b63f1879dfeb900db11db1f0764d4668507a62a908043e1a2be4646c4e8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
6ee94a0a7dd3fed8757dfe43dc207ac6

SHA1
c6cf4b0ff61821d5d8068dd9a5d7bef870b1b8a7

SHA256
18ec113001af34c948ce73fab72c5d4b9a2911feb6f6b7a2281c2a320a218371

SHA512
bd86599fc1de9e5809cbed91d80ef22c0b4ff6af3aae0e5feb98470ab0f91ef1a50383896d0e51b2add02db702c09cc076b61fc472ef469d1afd4f378a110795

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
45d017f350ec2c49b0cda31207882b6e

SHA1
3f37398240997afc06bf2c88e7474e69957348c7

SHA256
b5358cdc4eea912d882480bd4cfc84c4b28cf9e4cfeb3bc4f6904fc4f8ec876d

SHA512
760f170c33a7716129bfed9f4c18e6ab0c26459a9ee56a65611522fa4b07e1df9ab28ac8296d03c34b5437d4e5c4070fc15e4c26c20729ad0b7f0d85c255d4f1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
b9b4f575710903751fb661eebb173e91

SHA1
ea206bddb3fd8d5bb7dab09ef6938d747d388c37

SHA256
0dc3df870b63b5464d151ea10350838cbfa1b9cdade98da75941c2b74469ba95

SHA512
3705a2d366b00d2c1a50a31d4141941b420c99630d453e7c298bc574ef964bd2ea6ea3d3cea88941ac4e99515649d52fda9e04e0c8e418634b6affbcaa684dbf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
7KB

MD5
991272b143e939a99fdb3abe96fb35fd

SHA1
b65dc2797e50c90e8206af20b9afd8e8cbe71a10

SHA256
28625692c694e8929859e527e52bc2cece7a499567af8caeb57516f1dd3234dc

SHA512
c402f06e291950801c41d83d68457c54febf1cd1f81c8eefb9423bde48596694dd2047addd1a4275164a504049e19b99cd2d5d604dde11301ea502b3f469789e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
336B

MD5
55ebb15451f6239a93ab37cc1c3fe362

SHA1
8444154d0f2c063b317715353ba57c6615de2196

SHA256
336cc96ae3e50037717f9405a464a56435f774ac362d0aa213c42a16dee8020f

SHA512
286cef1381addbebcc7e175f52c719c7d68176e25af09027de98c852a652c38ba4203cd5071347987bfa24f789c822cacf0ef38e0aec0639fc1d5b3515efe827

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
240B

MD5
d70dfe846bbccdf37a663bd49ce1cdd2

SHA1
addcea720dceefd5327e13e207254021909e42b8

SHA256
fb61debebff0c4a1e47cb266cd22ae2de5374a805005c784e84c6a7235daf48c

SHA512
1a0b13e775098ecd2b2180a71d68e75320ef6472515b5aeb99b34d5c04a811755244a09ef698275dffd49b9a4876859ab537da05464383be07a9745761f3ade8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
1a8763c5c076d3fa4b67a701caf4d33d

SHA1
6ac63061fce2089824d88858c79d6e7e1000c841

SHA256
08afdfb8abc4f54691b17d33884888a719930cfb40e1be6ddd5963a046b1f259

SHA512
372e0f41bdb7b00782d01b9468809c1b3325ed9d82d4ab24f8e0001775b2c42e9bcc450ade44fcc96c80b4c367df2a3524d9fe3b52ff84207a2ca6af3d46870b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
816B

MD5
af943bebe4b553d5713aaaaec0d7f4fd

SHA1
3fd53580a97244a344b8f8065aecabd527c54ba5

SHA256
4fe48afa2bb1b383bb2ec9a6fab714778164e32f2afd7cce4bd4bad65f3ac535

SHA512
c22412f50983aeb4848006dd6a779633c0500db43e3d7a070b453ed504906073d144b680cf3a17e0ebe148d70d531563289715bd86e60b7c4d1ad271672ac0b0

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
883b9463fd04f0338bf7a45c5410b960

SHA1
694fb77af6440f6bcdffd40fa72798e66cb7e83f

SHA256
8852a81c03a80c0cab8859bba58a36775a59bdae5194c3177f711cfecb75bd1e

SHA512
58c5f740b0e04e2916c9967415f67680ff0d7742054f78029c6b5353ce685b9addef116035f052835255372d1b5222d3d268cc9f9a8b94b64cea14e5ac9c4976

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
6b984e04208398a6bf62913f724ab7a9

SHA1
38c2a7173c039fad77162d02d428363394c1ee4f

SHA256
aaf6af93774e33e0377c574dbca7e4414e7b91d2c7f3e7b3722e466f347e6f6b

SHA512
bb4eb6924ccf0df59b1e4fab65a929ffb8c30c859242169079583bb1f39843d04cedf5be21b794b010ff05d4577603111c28b4c36017573143cb26d1424d84c4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
6423d8660f1dda1d08af26c352499d5b

SHA1
4d42b43eb20e89d50443ed2f00339bb094730fbe

SHA256
c0f17ffbb0d91c641405b24965ff6c18ff71b5556e02000304377fec01f03469

SHA512
68237ce02779d442c557b368d75491ff64c846207f24100395f1ad2947f1bf01935715726238fe70b6e1a7b9a0cb0803c6b02250111f0031eb5962f29328957e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
896B

MD5
965ac33de74cb341238841c7d0ba6596

SHA1
507ce24ade57daf93166745316a88612e4ce5021

SHA256
01a84c6c11a6ef47b9de3c144dab553f0932cc9d751fad43ed1b82389fc262f7

SHA512
7a71e0231889ce5394aa3d73ad12300fd5b2e94b012b6db0f3f137974b8f07890e07d0c4121b2a244c2284cb92978834bb5f6c8633778fe7cb5db3d14920409e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
864B

MD5
ba11e13dea7647bec913cd80e86078ab

SHA1
25d7bd742ed480c96d7cbc5cc68f3e21aeb9b8b6

SHA256
0b4a78e53a617696fc8c998c2cf2d29002b658a1e86df2c1883ba111e745efe1

SHA512
1cf5e46ec70be9907f1c4fa78aa64a25647cf01f3571ed674dabe1e00108c0faf0bfe43f8b2e7e3e3efdaef3ab55f09506afa18e888d09450d5719e885f26de7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
864B

MD5
0d481856ff488bb07d419a8d51c87ecf

SHA1
d114d4298f95ee7082d7f113e7e3a3933130a0a2

SHA256
b1d6eae1e876cbe61916bbc384435081871205dbe835ca408ddffa48fc57889f

SHA512
9bd9c917c149c84877f734db3dc5e1281e72fab76bccad122b1a1762cbd5157a4a86913512e44b900d461e86cb6c4ce68a694d9e55b9e1f78d99b6a99b7c2cfd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
73bb8958c5ba62595e2dbedcce4bec12

SHA1
e0390c0e6d63e86935333cf4306e17ad4a1a6718

SHA256
96ee24757a24ade9688bf29773ff7c2ab94abc16cde6dc78163afdc035d7e028

SHA512
2f560ade103b6b9d35f19a2eb957223ff88c9f16d1176c7b57122c00e6bbbb789c6a422b7b16e139c0a294df48f34ced01b7ad42d2f63519575c9ad3c350a792

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
95e32c201c198dc51c6e73679eb88b8d

SHA1
2fd8a8ad9a858864d0bc6ca21482c5c0f3c69d4e

SHA256
8fcee94ac886bcef38d471d02dce8f41aae839b5a741376ebe7300ea5d11f652

SHA512
ea5ba1d3e95587025efc153976e0956e24eb6060a8e006a62cbbd41ff1cc0cb34db7cc86a6a17ab2933bbdd0864c0b1b8608045190e010b95eddc9b0ad4ac4e8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
864B

MD5
bc26cd5f48b1f3dc5c22cf53cad232b7

SHA1
8b8bdd45cea0073ef50ed56341c2f4c75707a375

SHA256
b3646fd8eddb8689b212d64677bec08b6d2d9b0b6cad3f8c9feccbc8811a1771

SHA512
a131bf67872654a3308a59590a0e306a5df9c59e7bc965a91ffba38d23058fa7df43bdb219fd953cebfaec91f13174394a7a61aaaf6223ee8273f796248fba8f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
848B

MD5
b058d95b17d51592bcbe34b95545fbfa

SHA1
f63a596da8bbc937ecc7254ac70ffecf2b795e1b

SHA256
22ec601a02ab2f4bcc294e727ac70c63b1e1ba1708f367b0717b095f30739e41

SHA512
6352f1937d05fe8f7bfb38d63b79ff672ac5212a0f7b80e2f2619fcfbf4beeec4fd01dd5e32833acad6aa39ed9b81258d04adbec53f88a4f83ac9fe88c7769c6

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
880B

MD5
24958e2b8c736ddf0cdb654b8aeeb3fe

SHA1
0e3eebeebd642735349ee924201c8b7198b5410c

SHA256
e45d923228cffd3d84bccd85dba61aaab72aecfdcf05a184a24e4326ed58d29c

SHA512
7d600732ae52e7aa5456e712b296ef308bf2718bd09b5ec0d9757a8e41f10e91965a6728cbd60c2d1a7e0e1d268716c8510e9cb25bda5ffbcb2353026b9d12d2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
848B

MD5
2b9251072fc3458bd1d45d8bf24556ff

SHA1
0b7d9f98575e14c95909b77ea8836b2c09c14343

SHA256
a25e9a02a69dd6d5c1ff9a73cdd4a193a835e5d01e37cae5df3afd09ddb45642

SHA512
68e63a53345535cde5bdc434676f5310298bee0460d12d870d1b14c530bebf3e1512d3adb7f2d818da32e1138ecc2a02bb2b965922d2137ed300953fcad4ac6a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
864B

MD5
f951935e4d71109fc7f68b122409279c

SHA1
d7ea76b7e6e496bcfb75c930cc9f9723bf162c87

SHA256
3d27303c371a4c704e1e88ca6c6ce7f85151076c1faf2d3dfcd6aaf08c7cb53c

SHA512
8884f7013b93900228b9906e665f1444924b856875d91d860912d6937ef695732632516b7f5862ceff9fbcbc2bcc7aa76ab2ec651dd978899e0439de93a9d4e6

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
864B

MD5
f1e5d3fa40b2ccae4050374076420d31

SHA1
ddc44716ad3e27efe9ccfdb62789cb2119ffc550

SHA256
ca1f9d80bcf3b8d34da53799b16d9b3a8029804662570c4bf8b79cd6acda9b40

SHA512
2af7901b51bf3b35e96d617550d4a810b5b684314c0d1f058d27c325fa5eb3a979a9547f071221f80933828b1e3bfdcd9153681cfca647b891a90b0883704016

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
864B

MD5
c8535652a0c5a6cb003541891a955bba

SHA1
f1eade4a27db760987e08512e001ea4030a8d74d

SHA256
d33c221ec605a1011257cc95c0ff00217b34e9eba95f03a478f2cbf3454c807e

SHA512
8c37d825402b639f40b154b1a574ce41660db9b1c7f1ab6fcbdf6a20ef8224206f6ebf57880108d2701a158407b585976cd10060a5ccfffb81ac078f0ed801e4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
896B

MD5
327c0ca20491b2a5f2a7742ec111de33

SHA1
ccffa1afe23e0f09edfc383a4ea5de2739b52bd1

SHA256
1da909b25c02a53970261f7a2fcc3672811db30e0b62e4d8f4197cc2453a59f1

SHA512
25370a2e0841d666a8d7259cc325b0166a960faf03804b836e839f24db188c2554f116d41dbf5d76555f838678e7fe532949545c8c8e24a28ada4709bd95623b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml

Filesize
247KB

MD5
4aa424a27cf5a324fd41e4f4df5a0d16

SHA1
8b8e7055b53307573453d596f62daefe053789b7

SHA256
c30113814c91269ed79b27a8abd3607f00dfde0b6466d149b541f9a1b0db5ef9

SHA512
fe39fd1e4a5542c70a443a8e42f37ab945a848b871c2c8fbaba875ebc3ec0a3847d182887ad59b0a76902b37a8a1ab2e0d967150f65538aa4b694f5bc406dd22

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
7bd65f3ddeba95262b8395aadd608051

SHA1
8992279d62854169e61de4ac163d48bdaf97b931

SHA256
d4aaf1751b54f1048b32b8b6e44992aca9f40da62a30408a46cf970080158e4c

SHA512
98d5ac402881a4e70b0ed32ef8224eeaa38b9d1a18c17c03a2aeaf532039c22c3f68014c4cad373a5c089bba9f4a1a72ecfa699199a7f12fb803d9727646e758

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
7fa6ae3de3966aa894d65b028f6841f5

SHA1
5a0a33d559799167cee601bf254475f3ed3d4520

SHA256
e3d5f0efeda96bed596ec529f5e5ef940b3b89317bf5e485762674a4d022a460

SHA512
f7fa8f2f188a9090bb0d75764c7433986ea9f7707430c6ccf61c336834bab11166ffff22f95ea3893fe94fc859e7a203fa64569e34c1c4cff894b434555a590a

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
078098b6f9e8243f8e789ab50390c768

SHA1
ef11e6ae9c18555580240fb26519159d99af0e2c

SHA256
0abc7d91bab95c45768e9937abe4afbf905af16bd464fda4759a5c10ff41292c

SHA512
6378a79a3b9c9e140505b645d383607ef3d011bf29e7dba0775774bf243a99497f0a90d60789e93064ebcc12282c0c08a67141dd947a2afbaf1cd80e6e0130f2

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
9efc4a1b5aafe92a1976da5f86b43869

SHA1
bb3a04c2b7be8348d217d0a574af2bcdc5ba3016

SHA256
e6866da018510fb242799d5b7d49d6bebb0bc3423b74edc37442859960d0d636

SHA512
ed88439b2d772aed39a5bbdc3fc5a70170b67757b09fe62a16e8ecbb05438474822cdb8a9f908671ebb1c69e37ccc1395a3b4cd765c17c0e4f82d63643d04293

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
955055ea769856c16dfbde218634bcdf

SHA1
838b7671eccb253f7a95d7b873bc5e83c4950703

SHA256
cfcba0834cc709c333228bf93e6b30c29f9686b103e2e6cbb17460b61c72ff43

SHA512
91b75bb51aaeda88cb0f6705d763302a7f7ef2341fe862f2b15adeb1cfaa97cbc27112b08f9f9eed58ee33b53b184463b4ba4933b74686671289102089b07ce7

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
a36d5f6b20894917531d5f87e730c555

SHA1
183c1910e8c95ebc277bc0dbec80e040fe3d5f15

SHA256
feb012fadbe4fbacb15b4fa28701bf584b32c6a46f81290b0d29bab5c3b3749d

SHA512
55565e69a97526808a5e26d33f7f19f2a91eef1d923c293446f6cb3cffe6765f3e00568cc033ba455453a4b16995f141b3260fc697f551e6f8bfc8109134cb77

Download Submit
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0002.001

Filesize
16B

MD5
da3402dab2718b48e5d90686bb279fdf

SHA1
7186ccd6da2e816100d45f3cb6cb05822c2091a6

SHA256
3e24ec3ea20d7c928bb6700915860c79be8c666176111e6ac7bbe1ff135435af

SHA512
701726ae243a634059383805688cd7fe1daaa77a33bdd090044cd3ea7ba1f2815452bca89fc5f7deb9965f0c5780a3df09ef1f053412e3c858abfdca0d37f55b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240903_051533842.html

Filesize
1.1MB

MD5
6b31cc2a81aa7a9c49b201f42aacb586

SHA1
b8b5642efe2c85e7bb5d64bb641fa2b342a49998

SHA256
e8b71f26588482d69cd874ad3479eddcb7c08f380d9f2e7b1e9b6ca8ceb4cfcb

SHA512
06fa209b4c1ecdc4b8b2cf81acf17843ccef150ca2a856468914a21d69e33dd021dbad515a817d656bef0821ff186591d76f27761dfab0a553bb6843422dca24

Download Submit
C:\Users\Admin\Documents\SetStep.xlsx

Filesize
10KB

MD5
1d99b160d01e3993e6693fd9314ed3d2

SHA1
544821474e5fdef34ba2874df4df28b696b9ee45

SHA256
701da4ac9b5eb7c398edf68ecea41ccabb6bdf8d3c95caabd18175c0cd752957

SHA512
be84cde3357d1368ae8e7aca7939687b072d9edaad5a26fb562f488d91c89e59836f6cac32b49e9796fe0ff959168bc371dd3b6d957c6c9e7283db77791f73bf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_sml.gif

Filesize
64B

MD5
1f17344338e53d86948a6b47507737ed

SHA1
106bacf08b5d067654b836d06113571ec2dddbf7

SHA256
7f72713ef153a130334fbf099d27139e77ba8850fa7bd6b43322142ce6e61ee9

SHA512
a09ebdae647a145a9aab3e303366f4f1a2c7462ab8780041562a7ca3bd56bb386a8317ab79957d89163c78c60327697bb92b5784e164b279e158210d24682316

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
80B

MD5
dac3f72658d0d83569746f349acd4a12

SHA1
b5aefdf5e7c18710881d398055104a0b9fa448a3

SHA256
4013824cecf156981f957b6bbc5654679266fe225174465d242ec42a72642372

SHA512
39244f5554aa7894864591b82602f4f7360cb0640b4aeaea70bfcb350312307936ed25df4e12fda44a1346a1303c778dcd5151a7ee3efaf6e598068e43a57abc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
80B

MD5
6fe4c944e4e64fd0c3dc274fa9159472

SHA1
4741d5ff284a19463e9a86ee1395782e1184b8a6

SHA256
07d7e467aae9753a6173cb02de3459e5f5353c36921acb1fb000d48511a2266c

SHA512
7062f224a04630fb8a75f5a29da44b63150a431d8e58602f5b702e7494577e876b111a960fc1b6428def6080dc34a22fbcdb518b3ce348d37148cd05817f1364

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

Filesize
6KB

MD5
c1bb87559ced94feda182cd6bba36171

SHA1
61c96d5a5eff6c13d2ad813ed0de404cd2cc2807

SHA256
b715898151b8918b8f9291340dc430bd606eaa2cec8eb02dbaba9b558972417d

SHA512
3405ba6ee41c1ab73538c12290cc28f52e10d551869e5b3f6b6963b5ab2f76f1c1a4222a3007f1b69a6543a8e00fd0d0f6157ab8bdd80e64e3fe59e1d5cc98bf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

Filesize
13KB

MD5
660073bc4577b05dc07c4954657dbb6b

SHA1
fbf449293d0f1c5f49536abba4f1f055a749f3a0

SHA256
e4dbeeb4a1abc65e0a728a23c3feb9dbf0587ae35eab7bf4b3b45dc82508a3ca

SHA512
9127f091cd7d2cb82fe5c2da25e2a79606defb7eb7028cdcbb41a84e39377d01124571b1daea6eb1c04c1573ad85330fa82ae7c17299eac3983f0e3c6386e8fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

Filesize
3KB

MD5
81d87f94552afa79154877f5876ee733

SHA1
99594b190512e9564638964cb0f0e97d1af0529f

SHA256
68d48887d55fd13fe394677d72692c6b29b4a35de8164a0e383c9954d19bb6f8

SHA512
593d1effb9e92fb46b262bf80ed4721599ffdcc88b018eae3d0e25d680ea6871147abef47f30bdfe441a8c76941fd10d6c7d214c9dc9aa43e46e82a3991aa8cc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

Filesize
6KB

MD5
c0c53351536ad5b28e13384a58e2c6de

SHA1
55c0fa674406b85ee460a5f05199b58783d9833e

SHA256
bfd7bf92e5f53a466da0810b17c2a91f7b1d9cb2b9d81b58a266639d1738f3db

SHA512
bf18614052ede42fb12062904d90a01198cdd6f2deedfd6f32ac83a83729378b105a0f0a90fd5efc431aed3d8b2341052347ebf5fcaba2a5954637051f8a7769

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

Filesize
10KB

MD5
cc88d35a884dd4a5b515c07712a29e6d

SHA1
083685327d9c6531d607efe8daf72820c1a15d7b

SHA256
ec43c6b81fb950f3ec686af79da1bffd404f4210a22f82785c3fd67e03057689

SHA512
bf81eab6198792ea2e11215712dfe7e1d751b22e17208d679478e897e5c147cf7e2163f6681c10c9ff002d97b34f6afde903c2da703a1aeb697cab3d2636ccf7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

Filesize
68KB

MD5
70f41e320ab4a21658a643de3c38b633

SHA1
cb565d29d1c1774fac8cfa1281057de6206cc811

SHA256
8ac2d40e20aae7becd4a89423eabc1b20880b921e80cffa0f4a069ad87e59e39

SHA512
7436766b8face9d2f5eb2b58551870e812c1d48347f9666e2af015c095be8c1e526b4d55d8d9d0f9be8349498e3529fff2be2ed075337d4f877800f3f5c0c61d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
da80f6de21282145da87b3a0edc076d8

SHA1
d211f27ff6fb0659751dc8ef1ceb415c8bf6b6e1

SHA256
8ffbb0b2ae96ac295a32402ffa82ed5f20706253b357891880cbd37496ab31db

SHA512
2df41fc3c700a0caac38ba68a3b5be77316cd7406a823f7342c5e06e69430c0a94e23272aa5a178ec16343da00f947b70530c7a0d30f2cc1f886da9f31878795

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
cce4af02aa38e1ae048104fc1c594ca6

SHA1
1f4dec21ad1181e88b3b93e7d4472bf9102527bf

SHA256
bb93d56506175370d9dd9942023d16be61cab3a89cb084cab0d9aab6cf4a3ba1

SHA512
934d78ccede150ebc472fb5ec89453b85057ffdf1d124fa22a43eba0040d0c397a90f27fe5a13eb741f163cbdfa02e23f45d8a46067a923c2fa0f91d3c5a5e51

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
0ab7d1311ad76b943f019d719afdbf2b

SHA1
c6ba8b194fbfde6568ccee88e3493afb4a10b25c

SHA256
c1fb5d54f7a2de9c3aba629feaf56d6e2428a08a6c15cdc0b90e8ee5c2e6fe84

SHA512
27266c0ec9c36fb5a73f3b8733ece4135b4fb49f3ee088607691f6fd4bfeafb046137c0a678b190cfb468f8943338a4f8dcf8100e32a8654d112e65525b8a02e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
4ce977cdfb3ae1ee3d2c7b9f02da90d4

SHA1
8170f48a6290142ff712c8afb5125ebb45518cb4

SHA256
5dc947bd6fe3cec5f75c34c7c09a4123c7e23ec80e7ea9a5e1003b9cfb116eb1

SHA512
93ea4a27022901469f646d88009971519de5b86fa8f0e08e2dfa5bf50f706182fdca5ca7cc5c5f57d27a4b6bd8bad434fa09376e1ee2b6d5549d4ee2b6e7acbc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
05a1513a7c2644f12bafd39934f59266

SHA1
8964d51cde0aa7e47874a8769ffe750ffdf12768

SHA256
d70e8dc96ef450fae0ba56f8056085e52183957f71478d7f48161d01769571da

SHA512
d9c56e4c58c6d1ef3c5946f5b488703d06d72363fd1f0a38f6464bdff87d1aeeb3316d5dbced6e49b862e38523d5eff3c61c7831e8c24f2765228eb31be7025f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
af656a2909749de0f1547386e54e84c0

SHA1
a675a2d8e18b49d76968da8cce35929c5a5758c8

SHA256
644aa93c9ba369ed38887fcda52fada3df7677f0afa6419034cf12b21355c79e

SHA512
ba65e63ac284d877698b1b2bcf47a4e3062ce17c1f4f87bf39e12f8366507d1f84be3c6a54b4a8941f2c34a752097e8c8084d3b3a00d738c65a1feef8927d6f6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
20dc30b6da0db6899bec03aa69e403ad

SHA1
e27f7507c564269d28e3378d8ecfbd528e42bd22

SHA256
01599c51161c8f01aff77f0dbe4df60a1249fd13ce410fdd55a06f529b34bad2

SHA512
d9e0b8a8ab30d7b0d39e6cfb6994bd4e57823b589de91433ae57b52fe05dc24ee38685d812c0cd28246c00028a74ad8334a448e3b5abed11d8eb9391e544fe1c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
ac08bf289158df0a1d7625430b7c93c7

SHA1
af1f042cdf8fe6ff871af23ebea7330990f935f0

SHA256
dd25d19f277b9f3b8433ae6347a9d4e12234cc5a54377f9e00fe90ffa41ba758

SHA512
2bff943d8f2bd503511e43f0e95c7f3d3d7fc6424fcda4a746c4aa219218fb4cb7d47855f7582b67a64993578e8eb0a055de1a188b71f48e3fdb7b84e3f97f83

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
0d515eb95134606cddc11844682a4633

SHA1
8832d8a85daeea1dbe63efb70c39f4e8fa87ad77

SHA256
a819f2b6993b239ed6d7b7de6b51d4cfe6eec8953c8c2ac9336e1c8ed0bcfa2d

SHA512
2036f729cc57c794cc188ebd879c95e004eb9f0a3ecc595fe6766451c4823646845e298a549b0645041914ca6353f014b0f234e01f3ab4f4619febe91c281d56

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
b5c279d8e51a886aed2f0ed24be02931

SHA1
65a19ea314a0ed839b23d0d1f8c1e6ed53298ecb

SHA256
cbc238ee121a723108d7859cb001dc8640c48a6fd2e0009cf91c5c5e83d04a44

SHA512
a440a35aad157f3d32d6a89924addb4e06eaefe2808b32184fa0c0849ae626b70198612b401a153afffb4d2f88762dd0e5ab2142d3d29da7448f232935e55342

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
46ff289ce199333c5651dde1f5d6f8f6

SHA1
d1b603526b7d2529477cf388239e584c110aabc3

SHA256
4f94f47bf0fad75f2eb947b0bdee9ef7abe4725b2f36a003b58e87e1d721ead0

SHA512
d0840481adf1937888fb6ebf83d4069c11550d8157c9783f069cb1140a85cfb521e2387256bba9e7eef36e6532602320951f9e33b28be9bdf2ea30babba4d765

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
279f14245b5d50793c707252580e2fcd

SHA1
4e5c03be8c46635c18ef42dcb21bc3f219052151

SHA256
0c8be78f6e5cf8d53802da2ee27ea8ad5d7b49479edb0bffafe0a4b1a02ef17a

SHA512
05e305e2a6a39338ef2a3bfccc9a3d37ed6a52bab013fb06ec9d1c38b34d0bb22c158ba2f18ca370638b18688ce140d3bd048f5360290a5beb31d00905672014

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
e709342cb63f01de32a7df1c3d43dcaf

SHA1
4d7dd5078ffa7a5d504401f2f874104e8a7fd289

SHA256
694e92201a52e0b88e615c5c5eb63ed7c4303e29b1bfc6c505c8b5e1812782cc

SHA512
2fb5de06a08a8d2ed1105dd7c9247fa5d0165183632e370d52d56de643430940755b97a5ba59fb0e78f26c6df240677748d26da7ca26cacbcbb6d1d5b852aea8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
f8ab223f9231058917fe2874a647f82f

SHA1
680343f341403a4069e6bc56624581042f3c3974

SHA256
5278e247e019aac7ac82d963bf5f697d74952b6924a4aeb8e47134a34a285556

SHA512
40e02eef826a1ee2646eb3236200fdcc06f44017ded6e99dd654be7fec6df68f03ed8c39056ed60c25b3643e4a4cda7e95cf0085f0daa223690f1bdd7df3cf74

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
a2e698ac757c072c7f442c8aead5ccd1

SHA1
fd09ee2ca4d2b8a5d3cd67d8a2943e5698b96e8c

SHA256
789a6f51ce7ad57044e951e1a2ad330661c6f0f800f14369ce3e636312e097d4

SHA512
1bef74d69d6bcd590c254246d64acd8036e9f4e72dd0a723458d065a1b0e1fb4c2539e9677a47509122d246859d8ac150dfde1be6f2f27a41cc8f415e2cc3144

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
6b21a20b231be6f060187dd366f30769

SHA1
1e7f10d195e8826692e017e35899948b0ba6841d

SHA256
6acff77ad099de0f544b8380275e580b685b7caf2fe242f552fe5a5af8e0c998

SHA512
2d3481bb52a9ada7430e672762bc6b78a4f5aca022a588af94d985f61cc247b7218b554dc00bd96fd6d043299edc51669c04669aafa031911bd74427e48a1b56

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

Filesize
3KB

MD5
585b6bb728b79f09ebb519111b2c8c71

SHA1
73228492516d6b71e48f26427cf43b95c07ded57

SHA256
c4be297ce9452061e39956572adfd52013e3a68d8a12eb01d50ecc43ef182775

SHA512
5c67afe98b4ff9ba2405c3cef297983f76f6627a6be8b95aec025c45c58e2d68f968588071c7454c1d6abd88c0f5b17121dc10006c697d0c6378f027f2b5357c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

Filesize
2KB

MD5
4c4a9996eda0be4b95ad2ddf80197c04

SHA1
463f551dd27d8dc2ba149b40ec19a674e398e65c

SHA256
e7b3983c4541b26e65ff179dc5515047a49f477493e95b84102bba460b884c95

SHA512
b49a07317410c84822119d7644d50cfde261970bfc67ad93addf21aab7993d965df76be60cc7567ada255a73d831f77860985f6ce1e590d541880fad6e324f47

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

Filesize
14KB

MD5
3fb1d166ee3f2f6c7f12bfccb5394b7e

SHA1
e0269007689fcd4fb13f093ab23bf7fbbc58f634

SHA256
b69d487ba82b16b6e0d5f2a2e928735f5d6d836df922a83e76af35e171e6e7d3

SHA512
473e58af1d955dc64cf370e42967162a991eb8056a7e4d90df4120bea65d6e024510c99e45a046237f687f6aa6066bae7bf483c90cf1eb3170bf7ab03d7c895e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

Filesize
320B

MD5
f5f1b5cfb8cc961ad2d7b673de5516ab

SHA1
44835d5cacbc51a46362426d3b080d2144a4ddfa

SHA256
2d3aba7b14afbbc573ebc522b0a8ce98fefeea1a4d8e881ee38eac95f610cbc1

SHA512
7349382871b9c5725b29029c113f23543dab27bf0f7ab03b1a82529debbf2a60f746e4f5b2909f911b7377a47a896845bdc3cf7d712b2f2b62e2fb618c2de3a8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
34d33f78532c31c042fefa26194a46b9

SHA1
b2e1f05e0e561c7b049d79d10bc7b699bb159a60

SHA256
1467d1abe8fab3e00d711e1b3ef77d59f3a20d5ef709b6e4e23ef901d3903532

SHA512
8458cabc4ac8a0ee30f7670778419b54f27b809638299c7b726790be4513c621962dd2709cc63a43e65487ad22f74fab6b24ac21f2f7539f0de0a02019cba28e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
36afe089936a0f2742f8eabfbc39baf2

SHA1
962f4cc6b8efbe5e31e139097039756ed24de348

SHA256
075fb71530b5d644f562c96a6388cd1298ffa2b854c012b29eba32d36293fca5

SHA512
cf7a870e8af32a2b7beb753d227572d685bf419e018679ac00a48eea05f01406991b4117afb5ba50317f95d849c5f5b64c0a48586af5d0c58f4eec3848102411

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
960B

MD5
66a0d2aae37382f9876ae835c1ee1261

SHA1
6b88749850850238549abfae7071a7fbbcde43fc

SHA256
ea501a8b274d1fd9365c6057bef25b5f9cce74932286f8846ea0eedeb5fe884f

SHA512
594353b1b87c8ff1d91693720fd4838c8538080920394cec8144a5586e6480a4fac96e45b9b80fc500915b313ef7337ec24af3c1aeeefa75f5506c1e7daf9b16

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
128B

MD5
418502f1a4ec97c2c8a6c4c5e3cea23f

SHA1
e985143f86db368b11fd2b6b117a2d6932f91e59

SHA256
907ed98069e61f2bc1062a18b9403f423b6462d40bcd8b86d7f73c302b224694

SHA512
6de9a278ab36ddf5639e22cdeb776526b9992e0ba3de6a3db637ef9f22ed9729e8c025e871ac36479046f16b3fcf67757cfc67d482a111a3108552322ee210f0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
c1626c55a3212129d214186161987f21

SHA1
304a6727fbb233e7fd21494ba20ba03012e9b8ad

SHA256
cc0767abceae8932c07e14060f6f2b7e247047bb32c72a6b8aff357d0ab94352

SHA512
6cecc19fda1564a50684617c32c29f87209a856bf180c2d5c2439c249c09498faef205eb41858a941e8be14c4fb42b216c6dc93e4d871f9c065ec842fcd26114

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
e7790713dce8ff84b939d23f0e6b882a

SHA1
1595775d1ce54e1aaf95646fc491402d5dd419dd

SHA256
104101066b5c5964c37ded1a458abd3fe0b11373fa8756f45cb8a1403c5771b1

SHA512
f83252ced017a16bba8093d2ca2cbd96f2d31f02bea4852ab07ac1a4758532618fa570ddbfc5e2136741829374fee92dadd0c68d5b08e752fa12bc35279969fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
64B

MD5
df8c25de5378a3e9ea08e5be1e15c302

SHA1
82dafbf19cc0b5ba00865ede0b82749e5adb963d

SHA256
6e56d9cd3307f5e6c65187c97b35b1cc10e4f854ec9669e5d25ddef8e4cbaea9

SHA512
2c0a3902b005772965cce8934e66d959429350f0a7c63db9a4da677a9b803add0e28f63e9cdaae8fbb0d03c0c303fe31b10696783ec19253844318b5ae7c53bf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
928B

MD5
d7053bc92153e81403f358e9f06b6f32

SHA1
01816c08e3cceff132baa53b96cbf4981b294de5

SHA256
15a9f0e9444349c40769090ed4b8355622938ec1a6461c9e010924590c3760e3

SHA512
fa77b84c82e4ff5f488eae6fdd404304280d428d201d1a6d30dadd7fecc1cc1e4a2a1e27d92d2ef03f4b1dd5e0bec76b827ae6fbba53086b6e4495e8583d18c6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
96B

MD5
2a451acf3e9e57ea351bba0a5a2a0945

SHA1
3eefa41773b19759868f75ea783a8bbac07a4ec7

SHA256
0cbe0e9e68f73225a7e0bb2ddfebbeeb24693b0209aa533970b2ef839d2a63a6

SHA512
d1c2d77832c5a276729e5b511dee90e13d29a8ad6490dbec249d1e7771dddf1e3df52ea30d2e1c718e947f56e27bd524a78c0167086d150261a14ba0bcc900f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
96B

MD5
e80d9c0dc61d17c0678c0853ac09252f

SHA1
2ab3cce235b1a8009ad978e5af1e6e0637306387

SHA256
51d61bbc8d0bbd145d7c63bab0356d3ea0c2fc8a9f1892658ea24342d9969861

SHA512
be1618f0a0de5f3bcc66a578a02ec7df1cb15c813bee07a4910ea41ca63b8da84205abfb2daee4c679c93db533ae14f9bdaa7fcd4313124a390f850c3e4675fb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
336B

MD5
7c419dd151fd10c326db24bb2ee5b468

SHA1
c0f64ad9ea8e636fb4bc981b476c2ced6be095ba

SHA256
176a68e940a168fbc433a2b23cf089385ce6debdf9c48b7d069abd9d2384f8a4

SHA512
2f0af0480946300d02093f6473d9045c76361e797b739d4e203def5e0c13d788d6541818ff68f94338476e89a3a2f4ad6833c8479d8353b76fb3ca68ed4baad3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
ccb055893970f4a94ee498c8cb514c7b

SHA1
fcb0f98876c7183c4ce3b66635ab58e00d1134aa

SHA256
472b142e3245241c72602983fc945eed6f9f6a28305b31663733083989cb8f21

SHA512
4e1d05397c3d5dba0e4d4270d2962a6c3c5bb240ae25a590fb9d573a02e2eb953f3e70d9dbb302e3cfe69ee4b67db2cf2ad2b7fdbb0196836274035133dffc51

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
176B

MD5
68c7a2be50df84b665a45fd5a8bd51f2

SHA1
d697f36a719df527771f258724d677fe0e27a5f3

SHA256
cc77b5dce30ef8887010c7e76dc75f5dab72e7d40766b54db2a6373bed250861

SHA512
bb43645d400c035f67abd2c6b59371423527458a41fb6ac00864f6c85d5b1c186e4367d617e68144e70871a6dd413eeccfdf6eda3fd85c18d8d8c9f2d437d52f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
592B

MD5
ee20afc890cbccb1c462aeaa3f3fb58a

SHA1
97aac56024a5feab9a4882b5af65d3b6df16c56a

SHA256
ed7b26199377172b2ade7824ecd50b754ac1031be5b3a131a8209eece24e35ce

SHA512
b47e8e8a4c4c2cb843a27ee9af8fb9af4293a6f845828251f7c41db2c98057521ed590f48737006c68b72c673f2549585059f834094a4a760cf8cf833da0b83b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
128B

MD5
de18e6e35a077a1650bc520c2287f683

SHA1
979a107e868ff094bf572440b5a896bc306efb87

SHA256
2d0cad776c19ba1d7b8959839e2885fd9f05c5f6902d9282956168b31f295cb2

SHA512
10fec9e1d71b33260017db6108bcc96d5a4590be64d126c96bbddb93636743f791a9ea6b5b7c96c97f2d58a902be1946af0fb89686aaf9467223120e49afde4e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
6e45b61d5eaf61de1edf94d83ca3fb78

SHA1
fca4eb10044d5c6614c9a46c8e47622ec6a365f6

SHA256
92f47ef80311ba07b70d1dbeb0c64fa171becf2b1eecc4346e0c588971c2702f

SHA512
a4613c9368f98f8b7d4eb2154d17780d0ff973ca55825422dda6a029b5485ec7cbee989645345ac320a6230c9bc9aa5f190c6fcb9ce0bb9f0f15406d2d91eb3e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
896B

MD5
0f0293958e167c37d16ad11aec9ccedc

SHA1
8970231f8abf559fdfda98b1d817879c6f71c92d

SHA256
c6893722a5ea7c6fbd1e714ddc91b4755c1123027b701bdc5b5128d52b11b496

SHA512
cee632892059c51c0824f59d6416fc9b4593816204588c19df4583e1eaf6b3bd9a134cd1e74bbc6857302235191312c1038523a112617182ea3a9c311ee6384a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

Filesize
12KB

MD5
00c5c70e5e10f855b7867776db0a974a

SHA1
823e1a7ae6cb830a24d1c4da93dfd8639f07b372

SHA256
ecf440ce850f9a982a0cb47874467a316b6cd8c0691af0f841fa1a0948f37939

SHA512
5959f494df7bd5a0495683269101086e2b38074ca41270f427806aff9a504866c1873526231a5f5363c1ebb8b94b3fbe924ef81fd5112bb91f7ecb564979eec4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

Filesize
9KB

MD5
b0308507aa1565a748b833796792f3b7

SHA1
2e8f4b8e1cf7c22c17309c114f6d3376addbc7de

SHA256
3e4cab4ce7f95119789fb0c180c2ac9f8d5d4eb5df918af2574c41a263879b62

SHA512
2909a368a16f1c9627ba4ec14756024bfec81b81a526c6b127bcaf2300d517c554b464433f27cb8dba717d0f0d2e0807530902979dc0a835863d2d946a431e24

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

Filesize
9KB

MD5
1ef015100b5b43d2244cb4b888c30083

SHA1
d8a4abd151506172fcb13c263f7260c2717ee44b

SHA256
bd0a62bcfcccadfac14a0683d93257e214f972a6ceceec06a09828f3e16cd970

SHA512
5e48085f54b16f99b076213d8b604bd97feef07dd5d66eb591d96e5d035f9a852a336d1b6a1344f759df6e375850ac3791480ebfa5e64b6bce8a4711dc6962b8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

Filesize
2KB

MD5
c2f530c27166d4ae4ae6adfee6db27ec

SHA1
1a1f0560150da0eb1e45715b6a104dc79fc634a2

SHA256
f245280e6b13931e26d2515e5417c2e4d95aace605d8eda77a19be0949708ff8

SHA512
b15640e01b39ab692ff5c7b950f0dc2dd421955f65f4923416d9710ece9a849403dbd42f79eac953aa8c859bd389674b7d295d1ae815f3122f0b951c35f11015

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

Filesize
10KB

MD5
e24f6e5633f635c11f9b1bd0f2a95374

SHA1
5008b01f569f177b4d894f6aec83d018a628bcc8

SHA256
a5b90473bc7d31e0fec0a5e7cbf31c4854cde1da928a7e308ff7f06b784dda1c

SHA512
05e4b05df966c2ffa5b121d3d9762b99b4f2ea09aab2c04dd5b173d2fad15460ee55c38dab1f179388b03ab36ce0749c47190f68d732b8a779610c16dfc24961

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

Filesize
21KB

MD5
e125f732ee7a55728fd5a68607bff6a8

SHA1
d77d5f44d0cd71aea2cb7825fc1877320207e648

SHA256
e5886d2cd1a59c17e9f7a5aec3030ccdcd643c29a7187cdf8440d28529a3ab30

SHA512
3926711e4832543d1336aaf17f00a1b97a1957e7d5faa4cbd11fc44e09a056653ab9e4061796d9e390ccd7fabfbddc1527fdbe58f6e520007facf1c201d2e144

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

Filesize
11KB

MD5
371db42129da342a9d241449fe49b247

SHA1
9d75c1493d683754797647fd80d505e4dccb1813

SHA256
1fd628b00fe037976b158d6a9386df93ffdfb7c73259e3501aa3cb517d9b74df

SHA512
63f0305639acfc436a2a2b1f8ee55fa80482ef62c535216753687d8c0262463fcb541b3652be95394f9dc60b5182238ebe8c4975d1b57b8308412ea1ecaa4fe8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

Filesize
10KB

MD5
34390f8d22ceba6186a41a318853cfe9

SHA1
1a9e67d106dd0b05abf9a486e1e12690d76e6db5

SHA256
bb41ec27b7def1a2bdb14329d6bc5d9234de02846473f04aa8cae2c997b56500

SHA512
6e1e06c895c5ea09d1004840706876e5f56c220fa6a9f77ab4ad5d769004ffa25b59b0c85198660ee540e28e7b3cac9c3d84eb82bce435bfa297354fdc1112e5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

Filesize
2KB

MD5
8c4759bd02c7847e75ef6f08e08fb61e

SHA1
31f254f34e81c2e4ee3800261afc495382a9ff85

SHA256
f383bf4710810ccc22cd363ce74b12ee5fd5e27d68c80b828e7e0932f24cc450

SHA512
ee0f196a8c1c4e5388a0d89dff270292186d3f990f9d50c4668c466c63ebc936d31c30d46fc2b6533583cc463ca4722019c34fe9d4327fc3530792061d8c9974

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

Filesize
7KB

MD5
ac14941784c70703ae80cc3bea18739e

SHA1
7c0c10e5163b9e38431409a779f2bc148eab2052

SHA256
0a8ef722354dae926e7b02271f7154b6e070750838d67308706d044b385bd6ad

SHA512
217795a396ba3a236c0413deec462e4b8f1b803bcf08afe3d21ebc0e24df1157474d39a818769195b46f65ad73f59fc9b1e303cde453458aacb5d6b5d9fc9580

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

Filesize
272B

MD5
58e06f19a30559bba8eb84a962ec9cdd

SHA1
f7c7ca39c7cf4617c2d7108b55ebbad303873cb0

SHA256
bc9f80f4fb940e7643e8284e55a6496f9bcd3134b324f798765f08ba16cb25bd

SHA512
f1a52a744515200277c3d0aad99b0f8b20e9b8e98d448dbc61bdd7a6732a2fda0bf4dd290b7cf2d67d6b5e847637cc7976f189dc9409a7b2a32b7c98d76fdc7b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

Filesize
496B

MD5
ee680cccf0bed6976ef841367182b6d7

SHA1
8447b7510e4c6cb2c2b3c26d9a5682f615be689c

SHA256
6e92d6b524c37170de04571a01b1d62d94b91c9fd0b5329289c5426a8db68904

SHA512
00ab47e5784d0ea3bdf8b30dc0a451e2aaee6d09355227c9444ac78fc64513aae9820ea3ced124c2f243cf985ffd3953b63b34a1e666ddd1d359a94f6e60de7c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

Filesize
24KB

MD5
976f68c03330ff47be0561937fd75218

SHA1
72bee097b927be396691a41344385aa0cb1a5513

SHA256
2864661c7502219eb10b76f077f9213e485733e2f9553dd097489a4d47b548e3

SHA512
f75c8a9b3e036b6fe697085e552d29a2a38d89053c933cd87702d6a04a3413df47f0b29d350c02bf4b75d709e4b2ed67a7100e03eae4fe261f8c132637b3aa5e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

Filesize
1KB

MD5
ee503f72b6d90d72b31c8da7310f5056

SHA1
46e6b1559f0ca57b74de239c9592b05157fab107

SHA256
ab77274183702aace77c68e2006fbab36f711370abd6465b37f22dc7ba71cfc1

SHA512
3f467792deff25003ed2a9729280428189b6dca6a3f55d565ee979f3881a0e323c1e6bae2c64fdb894f2b0980ef77411eea9203529053c753f4d49e63aa53d6e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security.aspx

Filesize
9KB

MD5
681a23ae0c90d59e58fcdcb15533d094

SHA1
82a32928e2a7af33658ac1b0e3f3dd5b39ec951e

SHA256
8c6616d59a76a1129bc037c4478313a61a60a9f312cc0be4c48f8b07ae23427d

SHA512
a4572bf55ac478debc42e08376c54f71a283b877c3e0f53d1acddb51b2047f89a4954057655b1f397895136b7c14575f2a8b344fb67aaa582e5c766864f9aedf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx

Filesize
1KB

MD5
36de622f0626b361541c86a62dcf64a7

SHA1
580ce2949061fbf491866d105bd5660435147c79

SHA256
ccb5539b882322036a5229d68e5262ab3df825b5a4282629fc554ce48e28a8d2

SHA512
c74a93477f017c470dfe2abfa2966792d784891da80927d802111a377f401b44abf26e01633ea30f1a48046619115cbd8f1297de9660728a3636dc459e92842a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

Filesize
2KB

MD5
ef558667bceb10d1e131da76b35d00bc

SHA1
7284558d1534d7b87c949855f1bbb53e6b050034

SHA256
ec70d2181e1d7147aca83fb64423fa3f7168cb84157ce9146497d29d7d5373ba

SHA512
173b50c7511f09bbd9ec07fde35aa8dd3e9c0797bdf9e8afd50a40726f98915d2b109ff25b90d687147538d424448efc4d723928d02222747e60629d94ad2c8a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx

Filesize
4KB

MD5
619408b9b6040e7871331e4f0ba3b420

SHA1
474b20e61fa91ce55fcb82aa65f9b09f509255e3

SHA256
2fd02d214c8057a67bc856100dab66924640b16a197ff1fbd5ff01f1205dc778

SHA512
a7fc102dbffaadb2302edccdacb95d4a2da0499ce176dafd0d0d12ca7f95b72d7a26f1fbfab14d15f41f7c0952b1d2f01a09fdb23f1c87a4da12ed32efd71e12

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\error.aspx

Filesize
6KB

MD5
ef112a7b78fea308ae3165288316799c

SHA1
ee72a6bd53d8d26a39b3abb3a470bbb6a381014f

SHA256
516d306f7244ee32392667d25d127b9501e32e206be466e149bea150b03d3a0c

SHA512
401fab01d01898106ccc9ab3c87e50f79c3227311df5f9780a76543e0591de23d9ba06203768a0187d2764a1a5e3358e67744dceea5b50944b05fdd652b5bf27

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx

Filesize
1KB

MD5
0874c039f4804d5d37ebd9072e5b943b

SHA1
1dc0d46c915449176f22d5e724471f2c4744a9b3

SHA256
e2cd98742384221c6135599ee6f421bbe27a4df9c0b186e5ac556b27e81bf260

SHA512
d4dc317391d925621489f1933d83f21b7b051c97854221093beab1f7ab781db3ec3218a390d177ad907e7a21282f2acf468ff593919cf926826f915a67811c65

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx

Filesize
752B

MD5
ff0ca30552f84e9d01c452960edeffc3

SHA1
07744b59e27bcc75c8fd910cde3128a28e8e19de

SHA256
06245c410b22c555d325615d1f9c55eccf0f5fab309c37f8b5505295beb98d4c

SHA512
2d8091e90911581d89e8519554b85f86ba175c052c4953cdb1b37ebd02c6098276a0fa1abb083afa1f20409bb67987364570d27832ff30b61420b9db8c44a522

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx

Filesize
1KB

MD5
aa032c278da65d21b73e87b3e5e2f180

SHA1
85054b2c6c376e00681eee78d1325f72dbfc794b

SHA256
c46db3ea1054f7df93655a4e94338177c3c77ffc161b2ba9175360b2cee0028b

SHA512
1f56030a309e58bf41f87222991450ca0b6106fdf7ad2766d766fd9b7a986e251b28282f5f97000a511bfb89532b98fea72747c07d057f768e4fa59499796def

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\navigationBar.ascx

Filesize
8KB

MD5
35989852412314f5fe109effc88a4420

SHA1
15dc7ecdaf8b30100b7b9fbea00ccb0fc901ce17

SHA256
4be25d922d2930b8c72a8855b96c0b7149682b1d4ade7bdcd76f5d5a752c9f94

SHA512
2b6702a88e348ae5f2e5a7a24e6ac905c40047d4d92e1bcdb08fa2d3813ae1a50006c40919fcc7c051bafb5c43ea1ba90816426e7c3b53447f999e5e0b5eda92

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
99019a943387bf48c03ae7d99a5b35a9

SHA1
29595a83576f529d8457cbe779609b02688d380d

SHA256
3428aaa3aa72e910ad803f28ff3684f6cb63456312ee1b92b5992f259034eaff

SHA512
16beececa67b89018e3ae0689eed43606261b7ed2957314a9d7c831b91a640fd637fab56d7384ae74b4807ea85e0dacf072aad95b175db2d9439e08a4a2e229e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
d9ac51a0453b9527303c64fc671529f4

SHA1
d942a57fe16ed57f31200271380e7cb8638125fd

SHA256
5e06c2a71f72ec3c5910ce7068c985ad4b819091341a1e568a5f388491166915

SHA512
12d8065af8619ce11f2c59db49c7d032632987c713f33a4696ad0be8e03fdbb81c100f51ee39a0a8b1e122c838ba6069e9737f09c63b4a082f7930a09ec25a1a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
6ba9baceffbc566073f46121cc9b5bb9

SHA1
7c3a1dbd8761b5030055a190964b9d8009c0929a

SHA256
dd456083068ab6c2833f3bd970fa282f10c66579147064e755a507771b44ca6d

SHA512
b7580ac5e988b814022d58f15bc84ff129198992cdcba7025a1a7504ef8c3e9c18bdd9c8bf89f5d573b314f87ef0d10db8bc78bb8f0bb914eb9c14c8f50495b7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
ec293acf18754fcbe4908d810f1644df

SHA1
f2489215997316d4e39bb0bb979ba72338c71bed

SHA256
acfa81bf4fbf5b3ab5b7258710afe59a6f6f9280bc2332929aa1fc49cea3f0a8

SHA512
71ac63621c9b8b7ad207b68eae42490109889e2f3cb1d73552950da774efb907dde0b7e37532194be99bda576069e80334a6271d59644f5640649eb393945acf

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
ff1ff0fb7cce57b79e491e0103a536c7

SHA1
392b2cb6613142dcc65c3287e6aee8c5473963ab

SHA256
834d9b987d1540523572da6c5467f83d8e793002fc251590cb94751f006426aa

SHA512
861e3d86ea36cc800e2a8e49c105efce3597dd3d2028e14ea3d4d15fe98cbb7c508be56f6c9d4b7676c98413e91007453ff6f002d5bdf5fa19b8fb48afd44509

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
d1fdecde4388f2d3e5b8959819d3ba0d

SHA1
a14c1e5e8f56537427372b6fad41406c7789fde7

SHA256
7b79ca30602b90ad491fbdc26c62a39d1ecc55040f6c59eeab574bbb3c07db00

SHA512
08659f6f3221a22f665e297401662d7a77d870f459766faf318679bc01554331afb62eb52d4472cd2852a70418254e0a3d8fe757a79f87f8e0affcd3a2daea55

Download Submit
\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe

Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
memory/2700-33-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-43-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-132-0x0000000074220000-0x000000007490E000-memory.dmp

Filesize
6.9MB

Download
memory/2700-4-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-5-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-0-0x000000007422E000-0x000000007422F000-memory.dmp

Filesize
4KB

Download
memory/2700-134-0x0000000004770000-0x000000000477E000-memory.dmp

Filesize
56KB

Download
memory/2700-7-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-9-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-11-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-13-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-15-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-17-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-19-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-21-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-23-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-25-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-27-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-29-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-31-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-1-0x0000000000530000-0x0000000000562000-memory.dmp

Filesize
200KB

Download
memory/2700-35-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-37-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-39-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-41-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-133-0x000000007422E000-0x000000007422F000-memory.dmp

Filesize
4KB

Download
memory/2700-131-0x0000000074220000-0x000000007490E000-memory.dmp

Filesize
6.9MB

Download
memory/2700-45-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-47-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-49-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-130-0x0000000074220000-0x000000007490E000-memory.dmp

Filesize
6.9MB

Download
memory/2700-51-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-53-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-55-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-57-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-59-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-66-0x0000000074220000-0x000000007490E000-memory.dmp

Filesize
6.9MB

Download
memory/2700-65-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-129-0x0000000074220000-0x000000007490E000-memory.dmp

Filesize
6.9MB

Download
memory/2700-68-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-61-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-63-0x0000000004660000-0x000000000468B000-memory.dmp

Filesize
172KB

Download
memory/2700-3-0x0000000074220000-0x000000007490E000-memory.dmp

Filesize
6.9MB

Download
memory/2700-2-0x0000000004660000-0x0000000004692000-memory.dmp

Filesize
200KB

Download
memory/3000-141-0x000007FEF5473000-0x000007FEF5474000-memory.dmp

Filesize
4KB

Download
memory/3000-142-0x00000000012B0000-0x00000000012BC000-memory.dmp

Filesize
48KB

Download
memory/3000-252-0x000007FEF5470000-0x000007FEF5E5C000-memory.dmp

Filesize
9.9MB

Download
memory/3000-642-0x000007FEF5473000-0x000007FEF5474000-memory.dmp

Filesize
4KB

Download
memory/3000-643-0x000007FEF5470000-0x000007FEF5E5C000-memory.dmp

Filesize
9.9MB

Download