fantom | 60b290310f67adb0ae186b4b938ca466a6b55653b2519261fa425127f5500a1f

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03-09-2024 14:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Ransomware/criticalupdate01.exe
Size

261KB
MD5

7d80230df68ccba871815d68f016c282
SHA1

e10874c6108a26ceedfc84f50881824462b5b6b6
SHA256

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
SHA512

64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP

3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi

Score

10^/10

fantom discovery evasion ransomware spyware stealer

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>iSCFjnbUknhngBMYt9/dqypn2IXUndTOuQ8XRV9ic24VfvjaOkYyKybwR/Ho0E9XTOQeKMR73+of8D7dTYti07bkJWPypD/nsGm9VShtK/oUGsdXtdiTtH6VK3UmjMtCLK2QLjZFFv589sUj+IjqLT3YAA6kvT4sTZtqXegsd9Qu7+BubzsONrc/Fm+mEPqWIbLZO+sSFhbCbSK8weOxG8C2mhrU4zwOI433eV4ee3l9N9mt2ocYg7GjvIe41X+4KD34nDi+zo0m+p1eKNRFV9C7+7vmjnn/LOmXGNrzz7adrGpcjKXQxjxqcSQkrlsZmJlVFwfsJl8YvkEVLezaTw==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

[email protected]

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Renames multiple (3060) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
evasion

Drops file in Drivers directory 29 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Executes dropped EXE 1 IoCs

pid	Process
1156	WindowsUpdate.exe

Loads dropped DLL 1 IoCs

pid	Process
2672	criticalupdate01.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\migration\WSMT\rras\dlmanifests\RasServerMigPlugin-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\MUI\dispspec\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_Automatic_Variables.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\eval\HomeBasic\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\eval\StarterN\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\HomeBasic\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\eval\Starter\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\_Default\HomeBasicE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_For.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_Command_Syntax.help.txt	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\en\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\System32\catroot2\edb006C6.log	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\OEM\StarterN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\slmgr\0409\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_remote_requirements.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_scopes.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\HomeBasic\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\UltimateE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_Ref.help.txt	criticalupdate01.exe
File opened for modification	C:\Windows\System32\catroot2\edb006D4.log	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttd6.inf_amd64_neutral_ce587aa61510da51\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp6000nt.vdf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sti.inf_amd64_neutral_9d9a7113099a28a2\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft.Windows.COM.DTC.Setup-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_command_precedence.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\ProfessionalN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\manifeststore\advapi32.amx	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IIS-ASPNET-Deployment-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\Speech\Engines\SR\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_WS-Management_Cmdlets.help.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnbr008.inf_amd64_neutral_0540370b0b1e348e\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx00v.inf_amd64_neutral_86ff307c66080d00\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\feclient-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_logical_operators.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_Break.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_do.help.txt	criticalupdate01.exe
File opened for modification	C:\Windows\System32\catroot2\edb006CB.log	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mstape.inf_amd64_neutral_c2bb3ef1c45cd5a1\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00f.inf_amd64_neutral_777b6911d18869b7\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\icsxml\cmnicfg.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_environment_variables.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\Setup\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_Special_Characters.help.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\faxcn001.inf_amd64_neutral_d23021a1eb548156\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ph3xibc0.inf_amd64_neutral_c24bcc939e6dfc23\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpd7200t.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\_Default\EnterpriseE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\OEM\EnterpriseE\license.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnnr004.inf_amd64_neutral_3319ff2548f89fd8\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migration\WSMT\rras\replacementmanifests\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_Signing.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_Windows_PowerShell_ISE.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\Microsoft.PowerShell.Security.dll-Help.xml	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\com\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wsdprint.inf_amd64_neutral_f91980f20f3112ed\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\_Default\Professional\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\sysprep\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WCN\it-IT\Add_a_device_or_computer_to_a_network_usb.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_prompts.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\EnterpriseN\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\_Default\EnterpriseN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\Microsoft.PowerShell.Security.dll-Help.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_Comment_Based_Help.help.txt	criticalupdate01.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\de-DE\currency.html	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mousedown.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\4.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-disable.png	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\de-DE\js\highDpiImageSwap.js	criticalupdate01.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher_1.3.0.v20140911-0143.jar	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIconMask.bmp	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\2.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\StarterApplicationDescriptors.xml	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_dot.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\ja-JP\js\settings.js	criticalupdate01.exe
File created	C:\Program Files\Windows Media Player\Media Renderer\DMR_120.jpg	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_ja.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_zh_CN.jar	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bs\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Defender\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\highDpiImageSwap.js	criticalupdate01.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_rest.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\masterix.gif	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\search_background.png	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-progress-ui.xml	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_settings.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\stop_collection_data.gif	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Generic.css	criticalupdate01.exe
File created	C:\Program Files\Java\jre7\bin\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\es-ES\gadget.xml	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_zh_4.4.0.v20140623020002.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-api.xml	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ast\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_thunderstorm.png	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\glow.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\settings.html	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-queries.jar	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\ja-JP\js\currency.js	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\de-DE\css\weather.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\ja-JP\css\cpu.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)greenStateIcon.png	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_ja_4.4.0.v20140623020002.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-utilities.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Mozilla Firefox\browser\features\[email protected]	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_settings.png	criticalupdate01.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\880a680b2160130c8cf858a7d2a9067d\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallMembership.sql	criticalupdate01.exe
File created	C:\Windows\PLA\Reports\en-US\Report.System.Disk.xml	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql	criticalupdate01.exe
File created	C:\Windows\PLA\Reports\en-US\Report.System.Diagnostics.xml	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security.Resources\1.0.0.0_en_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\04d794428d635f6a82ac57dd3d6f3628\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio84a7b877#\bc98161a485ea05967844bc0b0c55338\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\security\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\mcstore\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\ee28a075665b6bc23b6dae56903d431d\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\UninstallSqlState.sql	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\3082\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Speech\Common\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a933cd1241698e4d13d80c8cb31d7055\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\50691bdee045a2df00f00ac461844c5f\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\IME\IMEJP10\DICTS\imjptk.dic	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\3082\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.Resources\1.0.0.0_es_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\ASP.NET_4.0.30319\0012\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Cityscape\Windows Balloon.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Handles\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Branding\Basebrd\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\SqlWorkflowInstanceStoreLogic.sql	criticalupdate01.exe
File created	C:\Windows\PLA\Rules\es-ES\Rules.System.NetTrace.xml	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.TypeConverter\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_64\System.EnterpriseServices\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_ja_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_de_b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\diagnostics\index\PrinterDiagnostic.xml	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\98b1fc37038b59eb1fcb89ce6284190e\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\rdyboost\0000\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceProviderSchema.sql	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\MiguiControls.Resources\1.0.0.0_it_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Excel\14.0.0.0__71e9bce111e9429c\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\1041\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\napinit.resources\6.1.0.0_fr_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\system.servicemodel.resources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\e097881a6e1956a4c3f6b8dbb81cb4ee\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Globalization\MCT\MCT-GB\Wallpaper\GB-wp3.jpg	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\0445defa66af3e3548dd3052e8752079\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.188dd00b#\9de2cd2a58c9f19effe0588c17b1714f\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security.SecureString\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC\stdole\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.Services.resources\3.5.0.0_de_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\02d5be8209f0eac6f7725f8d83b87df6\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Installer\5046.msp	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif	criticalupdate01.exe
File created	C:\Windows\PLA\Reports\Report.System.Network.xml	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_32\Policy.1.2.Microsoft.Interop.Security.AzRoles\6.1.7600.16385__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInManager\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	criticalupdate01.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2672	criticalupdate01.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2672	criticalupdate01.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2672 wrote to memory of 1156	2672	criticalupdate01.exe	31
PID 2672 wrote to memory of 1156	2672	criticalupdate01.exe	31
PID 2672 wrote to memory of 1156	2672	criticalupdate01.exe	31
PID 2672 wrote to memory of 1156	2672	criticalupdate01.exe	31

C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe
"C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2672
- C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
  2⤵
  - Executes dropped EXE
  PID:1156

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Filesize
1KB

MD5
c63ee32ab965c727f8588ee0acd63c65

SHA1
980acd0a7f9b04f0690b950b5a382b5e731f5448

SHA256
663169d376d6ea9df5bd34f46579ed6c1301c947489553d63d7b3f33dac7b16d

SHA512
f11af785a7bdf66864b0d3b284d0f449788c328b7f242dc36ff7d4a4b1fc17e40e77fdbfab74096bb58efa677d703e74c0248541064fadb6615361cbc9784d14

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
352B

MD5
bdcbec3eaa6def4b95452ea533cb18e4

SHA1
a5b0dae3a771642b665109e93c6e52e34b6bc9ab

SHA256
ca7250b317380429dd57176d19819526eb52114046219b385f86c6bc865005d1

SHA512
801d48c648ebfc099bd17635576bcfc3ae3a0bc78fdbe44300465062c790178c55036312fbdad95bb472c13dc3ef34a9ee6e69ea95abfb5a04179bb0981ea6c6

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
224B

MD5
3bd3646e064ba54b8637439bc9f2070b

SHA1
e7a0717bcae43b6238e98a9cd2f972a473c241f2

SHA256
da82b3415aada2bcc20240f4eb3a7bb9689183c9b5687a9184305a58a5cfac90

SHA512
11c3de022eb58282928c6763cf178991e9905abb87c21a63b64e9b36fa9f32031f22dfbdf3c73162e98c9dd4136809940d0c8f663a542959e14ef1a6afcfd0cb

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
8f4c3611db293812fbb260842443f7f5

SHA1
4e5727c44beb2910484820497a25efa3613950a3

SHA256
8e6b74b1935fd05cb2dd645a7baf468deffb7e791b47329cee4fa8cf72681f5f

SHA512
df3b1db9c26d56ebe02a1d0cd0377d2196b62defb8c0754a3563862226f3f47b1690095e8f109ad1bbabfb29e5955881122ce9146af875382c3ada4663c7896e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
955be59854d96bb662482b0303766092

SHA1
f7d58e7a86426e2b698c0b8262fb6200156729b0

SHA256
96148c463eb955a7d952e88029e97043badb2661839700ed92ad9fad538c261f

SHA512
f96bf683062dbce1fdcdd1c293244baf211e04576cb6d8b29b16eb84ed15af92c5de47de023daeeb1fdbf9b388d0af006b4e1d37e6f9f5e2cfe972c40d2e0678

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
b14a4615cb49433a227346ac9642bf00

SHA1
81a5791004d3aacae15846f3e6d2b865bb91683f

SHA256
dd9b3dcd3a9506ccb5bd2ecf88ad4023470efadd84c93865145a2573866e79ae

SHA512
b659f49c15b0d85f99f004bfbee30dd2c65beac16027c1cbdd6adb9cc8ca9c03177fb9aebc3da65651bc4628e40a8376d7dda3b635e21279289adfb5f2c8ad57

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
7289785dce23a2cbfab0ca9de5c4f2fb

SHA1
2490383c5e0210829e04e20717a2c8bdcdfb07dd

SHA256
d4d6bcfdfb41bcc97834b19b67ba351c9b8f7ed57e001e3a913c7ecd3deb5ce8

SHA512
57227a8b6f28436c2309485dc68cb9c65c8e4ed233bdb76e28210b8543765fbf9660624bf95c3d4ec9d0d141f625114f72be85fc9383a7adf5dfe1e7c23223d4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
112B

MD5
e6cd28f00804cc6ed083e86249fa379e

SHA1
0f4f761747180b3856b157219142187aa9f3c9ea

SHA256
a6b0b00be90fb3e2d1742ddccc8e8c4a702058ed9cfa06146106132cbdf602c6

SHA512
c9b4a1e01d7c4757e115091dbef8bbb650c87d8b553f0faa4207993a2afbfcc26272f146e24de5ae842cb4a6c51af439b4f1f3a58986dec66d26e30090bbbef5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
eb26cf1a4e7685d73f91e7e9424fe0cb

SHA1
dcb4cd1c76406dd03ee620bab127f127d552de51

SHA256
539cdfd5a4c7958e309edc6c46420e0d9eb08eb29c1d608d230f05fadabf2e2f

SHA512
17c1a85e35d82cf86f025e8147a020a242de8b86cd5cfe8631bd35282e206c7dbe0fcac21e8fb52a47f3fde097b182975a30485c250ca0d0cc27862eb45301b7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
b6904ea94c289de4becf5f5dae0bf608

SHA1
d25abc2d6418e7ce51d8b23e69c273146d9cb7c7

SHA256
fc68fe350f6b1995dd8a062bfe052f11642ed82b04ef2248e3ed360db56fc5f5

SHA512
054ffe16aef7b22c70209661d36779433f5e8709aab7fb1ad3c06817502feb178f121e4bd4ddeb483c78cb4d435acdd03c6e4febe23bb6c10a4d26774d882867

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
81f581f0b07beda4f3127fc6474c43cb

SHA1
dcbf5a283fc2c1f36c23e4cf6fa8dbcedc1a9c58

SHA256
aec3e99072f11111d6c12b4e6ba24520e1b2f5dc146116c34dd2907926a175de

SHA512
fba1a8b35c22cbf09c1ebc70127b08a8f35142878ef19766927f940d723d364ff89ac4809e13da76da9cae988a964ba40542bc277b1708fe8347e2bb2feba18c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
c69a2c44ffda29cec72210553860c1e6

SHA1
e55097f4fc45d90efa1c540ee6f08137cdaf28cf

SHA256
9e3326a1bb60611e9b90e273df4bfe186044d0a0adc8a030723216ba1b6915d2

SHA512
74cb9216ebaa1de6ae8e3ea35cb1f4320fe5b63b3637f59c56c0518205a34f4b9eb82e289cd2eec0da90e14b75f285b88d5ba7715f92f5ab3f03d3dc39438de3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
3ed4da70e0920c29795c4ac6626c4238

SHA1
4cbccf883fae79b9d6999dd4e1f66fe639f3349e

SHA256
a2e7e3658173cd86847477599aca8a4e23b07f04edb7cf39a1ff42b5354a5a31

SHA512
f43fa8e90d7554d8526c512f0951e5c0cf5237b0bd0e204513ae2e2006daab31a780a36029df4ec522602652da1a3a6047157a2322c7e98139764f1fab51bfc3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
086b8987304fcc62d91a564109facba8

SHA1
165888f76910a53b0723bfbd9bdd661adb38b7f0

SHA256
7775c9542ef050e606d9f0d87e793eefc6ad972f4610761995437e3b752db15d

SHA512
d1fb81e644a5ebb78d6cecc05fce0c82e9dad9d1f6569a0f240dc0f707d06721937a745a51a615fa0cbae0ebec8c7ca928ed2b1fa8ba02095dc4230257c9b32e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
0836f3df8c30c4b6f83156ca63d1c212

SHA1
8a1918f6e831ba94a0d5ec056211c35ae7bc0252

SHA256
2bfa86e781e9f92bd38ffda4b7bea0dc3fb4b8883ebfb614f7f627c5cc3cbb85

SHA512
23ee10fcd517bf9d56528ea794c2763bad0977f4de1c0de2ff5802ddfbddaa54c2a304a64226385b033fbc29d736eb27bfe1ac967049e632d55c24443c8fefd7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
5e849af3c19293b9dba180c47c2233b2

SHA1
da0e0f3c8a50f528d32e239847ab640b6c386415

SHA256
13af1b5bf60844770b25ca35c598915dc0b973763183767a06f87c3a53ab1d09

SHA512
da5bea93fbe3949bbb988c771964e99f7dc85673c82756bb099b6ccc0fd3529ad1c21dea884ba6022d268995f7ae9cee0abb6364ec5d593927c078c77f7dbf18

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
7KB

MD5
1eb90f15ae10497b87eb2b2476b2be93

SHA1
f0078930d357ba1f65d61f9db7beff9c4891a8ff

SHA256
f69d1f6853b026caa1a5333209ec57a4bebbc0a69a712e7d1123147d3f49ef4f

SHA512
9c94d5aafb01e7aa0b6368f8ad3c337003bb0201cb56fe40d2b0fdc2394559a7adee58309147f399f718e6e264499c523c6bf3beaf1a29a31168d9c44e94dbba

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
336B

MD5
0e55a04b5aa836c1eff5054fe7b7d705

SHA1
92c3c7d8ec5a2e1f9b508554f5ccbad5acfa75f7

SHA256
7040dff6e069eef916aefad2b8911ac439194e1d10e68ecf66bb8dbe879746c3

SHA512
a7123dd379bb1a511b64f624f15f8ad6f098541b2548f195d88669f10ca934cb2c2856288b27167cae7ecac51e2a121380fbb24494cc6cb15fec1deb4555d425

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
240B

MD5
78bc012f6d43aacf59ed3edf10a64563

SHA1
bebcc33c0e49a8c43f9b5b89f7089dcbcce1ee70

SHA256
655019bf3bcdcf7d38a2032ac4c6f2eb2b690c0b203caa7373257f3cca7c227d

SHA512
8642e2e55a226c95b1b51c4cf0036add02df927e242f7cef959ad6f03e841cf731fef259af950b04196b1ff3225890e31065ffb604cc54ef4a7f7d7c15eb63d8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
69fb70363b9109625b2542e4f53ec664

SHA1
c2903cf960b252abafd01e1b9ed6e273b23436a8

SHA256
22ae6b51f789f2bcbe5f068730780800eee8c860606839aec2769ab04dc92087

SHA512
3e1396e1dc89bb418c014e2814cfd1e555ffaf6506264508685a996ab6a687a0209d812b80ac78c3061bd4e1210040e377df03abce8aa9652cc03ee0a4d4d586

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
816B

MD5
2aa1174d78135098545f80d9a8771744

SHA1
7a6e78f2fb44bb44499f43e1a37c32e9689324dd

SHA256
e9e8952aecb4963d3055a8d32353f0040ccb7f0b2dbb1cdb542b607580280491

SHA512
2fce281abaf9a37bd1ba2848f3ce7f3933bbe2e50fb6c195a687cb0959794f37ff4b2375fee126dc424faf4355ea239fb30235cccd498223c655cb79fedb4371

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
c65f479cd54cfe1bcac11ea7f411e4de

SHA1
6784dfa0f9252c3af1b068528b6f33416d1aac1d

SHA256
6fceca33136721786627b046ee09b83154454489c1f98907122a5403c0dd16cc

SHA512
dae4f5886bb4fc9191d0ccc31ca473294ac32adbf507bf6a1107e7119b4e142aac0c9aef31351dfe74bce9a37c3fe3f2f042a90173856b457338f337968317ac

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
3eaa9ce6f67d52972faf1756321a287d

SHA1
8e8858f551167e1ccd8d92fbc1cc608baec7679a

SHA256
ef1a4384d71f61664dc4d57bf3c2c3e6da91365fab8966d34be520c319e8d0d4

SHA512
0d568a864f779307ee7d96af83ce89ad9a7ba494b82d22b6c862a704ace78b54f85babfa06b972184af06c246984c408c7be394bcd7fed241eab52bd0eab8a65

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
a2a3fb6c5dd9608f104e410f0e53f623

SHA1
cf1999a22c324594b71b791b8e23fec3c3ce6712

SHA256
56e7945e9ea0371f84023c7f39857c39f62a804b86ee0fe7c72639ba13160f6e

SHA512
6db6839c7d273ecb9998ba23b49a8b3558f761ea40fd93c512bf590104339b7d5623b22db3719aca21679f291ef51039b021684c80025142a158eebe167a4ed3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
896B

MD5
3f11dfba43186beb9623acd63778c839

SHA1
567901c817a1663d0de00286ad2994bc94154135

SHA256
441d6c5ecff1f640e9bd0ee0e053b971facb65c0a981bace4b0f2850da0ac511

SHA512
7f42c6d41752aaf5c0d9e5ffd6764ee707f20c2be7d1361966ca4fa40eba32b95f5490faa20cbc1a737bcbac7bafef55bf7a23dc01e179e8e374465b5ff3b136

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
864B

MD5
bc6de540f9cf261ea95a5508de24306b

SHA1
e63433f4fcfaac3cddf325ffd78945514af4c20a

SHA256
2a276781d6e9d9fdba81f439f5ea825cee9f9a028d131404960139dac9871f71

SHA512
20137f7c743bf4afc083ac7ef6a90fe55b4f123676eea0aa39be70809e26f1ec6c7aab63ec64a5f0dfdcc7fcd9deb05ea87f95f9d3f31505ac30ed35510fb74e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
864B

MD5
5247766e75b5ad84ea459bdc13f1e80d

SHA1
fd79dd4d5996a9f61bc4d7b77034a9949e50b908

SHA256
5813fbba2788a524e6445d1db65a1c1b3a29e9603aa2350e16fc1dc4b214e736

SHA512
03498bc210b41cce907289ff48f0888e706342438aebf49bfdb59e211d8e496fe747fd61feeef8031affa6d906d9baebfd993945cea0d7a284439a068bed8c88

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
62b05d54120d0d46332f57959af1d648

SHA1
9ef45af39c86b5c7e76da0f224a4dcc4ec912859

SHA256
3aca3d716d784a43c79daa26770813dff73cebe3fd81f8d7e25a4336c03a27dd

SHA512
d211d89195d9634e56152c67caec3289160ac32ce2c628e87b13535d44eddfde4c5d11ebc2d88db418fb7e32cfe6428e70392e634f7f955593d51b7bc73f8333

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
b11071c87b2418be84f2e1a1afdc1a12

SHA1
a2c3519c8f076b9f3347479d98f55958462e509e

SHA256
ad7b1bf4c22c0eca7abcb45b2ec7c2d0e7cb51e59068c4124239aeafd57f0807

SHA512
62d94bbd7bd009ef7a78f85f2fe86af9bf5caecb949bce279203cb8ffda0e313710b4415fd45013b039cc34b98324476679ce7c5b4f78e0a8e6c67128f1f0ed9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
864B

MD5
5765fbe60dfd4ee6f8b1d2326032dcee

SHA1
de22c5a437b3bb7077678ede85f755f74a1f316d

SHA256
5ebc05c9aec939b6743c50a70bf044f6f0865fc385068ba46f736d1df8f1a8fc

SHA512
6e7595f4ddc0e79ea78f1ace53b441c08d98cf01e71adaabbf2a4b5f1fe97fba5667196d5c482c8c5c3ebb1dc1fef4a551ad5b3fbd6b19fa7fc3d716b11f54b7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
848B

MD5
5b4e49bf6fb0bbb002b41808438d124e

SHA1
0c4f08addbfca4ebbfff4c5571c07aeda3bb564e

SHA256
9fb1b1fa405e9bcccee78bd76eaae55d46fe4a42cb324302bd8115d0cb607fab

SHA512
2efd6e4ece8805e1f71088740baa1eea1074c04c91a5eaa4266a14fc1c379b1021c240ade34508e4ae91091eaa3e7fa659be3a2ad80707e00677877fde064a28

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
880B

MD5
31ca56da14e1de9936f9e1ff9e7ce47c

SHA1
8bc06aee4338a5c7816243d37c3e9d83fab3c750

SHA256
0c810d22a2cbd9d7482f0fa5bf877d02d56953f1c8e6bfccfc8270f62d200abb

SHA512
ec634cb14d5a4824d9cc934f0481bda1ede78e0513cf5351c1f926e46d01a15901c12b67c70fce6c669f7a6bd15e7b1073247c36fef04b8406b00bfb925f01c4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
848B

MD5
0e9fa11bd1fde87476a2341b411fb45a

SHA1
f7c4fbcf1740c3d17d041c7b4a70a899b039f02a

SHA256
516fb65c2436e8d170c440e83ab642d3224f7053ff144fbf4fe1e8270cfec568

SHA512
e8b5c1fb18740859c19bc5ada8c88d64f679b7c7aa95da42d8054a11ebd0f3c892f937530361e2898c7a8774a77aecfc7042d4c7728b4ae0067f0f31f864e656

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
864B

MD5
dc7cf1e3b30f29a2732397470af0656d

SHA1
41a95d6815fedecce73224050fa84fcb03e1981a

SHA256
a3383d3ce83a146f9211041c5c0605a493d4714e208e56753542ad4deee63e1f

SHA512
3c8af8cd90eb8307719fbebdb9d93e1cf6797d7edd1a7bdf61ca71252284282a5dd3f23cd8a5838901dbc278be3a639284e6a09241186ceccf58b1ba17ff0e7e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
864B

MD5
c4863cda81930b7116771bd174b5f2cb

SHA1
9d79fd5f6203f74da384dde3beaa7a07cad709e3

SHA256
1da4f0b6058ab53c2b9b05f0e1513c1a56e43340b954611acc7785fb39a96381

SHA512
2d77433a7e0d16baa49f0f4b14bf8be41c9dc8aa67e342846fed2bec87ceefa97b1b7cc0eb905fe4fe8b66dda5911397915150aec42024443416c61e2b2b92aa

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
864B

MD5
f851d488c4aa8449c7d5e964438ddd72

SHA1
e9fee8c57490a88521833034c77b2269ff5128a6

SHA256
e9437cb33965cf4053efadd8abb1286e5be06ed43c1d118112148ea3f83a1cd1

SHA512
5c926e09c43e5bc24d96a2e587a008ed05894d6da75c3477caad0aeae5c69222ee5f6e6fc73d52a57de78c6e7d597eff6158a57a621593ca2edde7ab61737a06

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
896B

MD5
54ada7032c547f5d1a002b9c2ab8e59f

SHA1
2d6a1d84a9f55c0c30a104546310a9d895aeb58f

SHA256
5d1d6deb49f79434255e198e2a5a87413b4b4f8e00ed7d556d66f53b614903df

SHA512
7dc739cc8770976a5d0c44dcafb537505a291761fa80f5e5934be250f9085af41b4287f95cb04f1cfc2c7553eac971bb73a74585dd72a56c41c30513ae6e771e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml

Filesize
247KB

MD5
c6bccbefbe298b07af6050ae13649747

SHA1
0d8f7323b54e3c0c4dcca95bc546a27a8c525537

SHA256
60841a113a12fe096c3e6fff05708dad41be014c9686df26f5fc277ce2486251

SHA512
d558da1348efa03bb6415bcc11970a3260567038e596f0689140e4a7afaabb816ed291a008faec29fade31268dd148f9b0da27e92ad0cd4f427b7f36b30a76ba

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
713a016eebfa1acd0646aafa177c8f2f

SHA1
8340047c14d81dbc7f071de54e7c5921e83a673d

SHA256
a053c278e9c8b0ab02d3a21c743b26142fc6e21359fa9847b1c4cb7b7859044a

SHA512
824110025801190f6d9103cc2a32514dade1c5950111d410f4ae34aeae3f4481c198b16e4cc32563024f732f99c7b2a111ec1a0447f2fce4caa5b4bcded0bf16

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
dce5b08a066da7242aee17659ed03ad8

SHA1
1e3157a9a2179c841cf7718b9ad7a58e319cdf50

SHA256
8fb32d127a7bffe2f027d28ef45958c93eda9ab3072c3aba824f151a5d211c3e

SHA512
18570115ec36c6f3f44a9b865a915695b539aa1568b331c145185a8391bb0d706793cee06a312f602fe1903723c410b10f7d9fb9d76319f52a3072d8c4e0b5c7

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
d9d022627efd6a8f6de922b0e2e0463f

SHA1
54956b0784f6c7135ee82aa3788cf899a59a0865

SHA256
2a99fae0dba57589bf32f90e86c3fec7a2fe2a5170b4abd010cb7f9f7be8179a

SHA512
415dedcf7edfad1493d04affedb41968be4e1f9b301eb170117fb0b1d8cfa4462a0ad9b393d4beffa29fa303539950e4673d4b796ecdeb1000dff7d0ce2f7913

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
56f990a1e3091056bb5f14e263f7334a

SHA1
9ed8dd1798de1cf030bd4377495620298ea89758

SHA256
d762d4e99028b2ee4d831aaf8acfddbe24a975504e5f09c4e233b70c05802abf

SHA512
eb1c7d72f44862bebaf9fd8fe5719196a29cfd2a3d2977e0dbfcdba5457d59710e5c2c64dc1de059a2ae3c9c30d0a9331cceb1dbad8d26d7c8fa9afd44d924c6

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
1985965027fed0080549a2c09fda258d

SHA1
672b8f689f147b753f166d116a6e2215cdb2b59d

SHA256
aee83215677644c87e95d731cee2718991fa2de0426616603169847e6ad1ad76

SHA512
7f6e02e522dc75d5982447f7976434bf577be4823fdb17a98b71fd314015ad8090f11493a6ee8f1e1d8c7fffade3d6add31c20b7e523b43069600ece1cf2ff63

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
e2b15d91251b3d502318c03b62f648f5

SHA1
d59807c25cadb5077ba3b3ea5b4e6742d88f2b47

SHA256
45485ccc99a01bd2c8170079a8ac6d1fbbfcaa625f793283a2f4c54a8b87856a

SHA512
28fb0eed0bb88bd921a189fc783399c147edf8d4843fa3f5d1eafa939653de8544a6cc456e00b9f31605fa7545f9faf56e86928242be31b05f9eec58db8dff37

Download Submit
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0002.001

Filesize
16B

MD5
00ceb219d89743b7f2510e94bcf389c7

SHA1
acb6550fef6eac49cac7ae7a4326addebdc0cb3c

SHA256
2dfb50cf83cc730f50afd30900341252ee1d7f6a9a3d311cec885fed5ec057f0

SHA512
cb0b0c8e5d28b948509eefbf07b25cbb46895be1f01b644503cbb03443a28b81e9344714b5b5caefdd109b6c557d7300e8d25813b21729dda28cd2d4b994a578

Download Submit
C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240903_051511232.html

Filesize
1.1MB

MD5
3e6b9f1802b63765567beab9bfd2a227

SHA1
dd5cf26036a3c76912209938f8832b059913c02b

SHA256
aa456abaf75db3e92e96252d4e95972adeab8880916afc41dfce1cab37633011

SHA512
52ee7fea07a3d98bb7e79a2e9a1ca5deb79f806d098cae47fb7e33f58d9636aa202edbf816bafa4d9d4cf451099f0dd5c9a879afad06044a471a8e8ef0d97215

Download Submit
C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe

Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
C:\Users\Admin\Desktop\LimitEdit.xlsx

Filesize
10KB

MD5
a5410d9d772e19aade901d377176d27a

SHA1
2918592741b35fd125469e61a05f438484b502f2

SHA256
b2e1f6db0c080e37cf16d6cb74d159661788691792cb80fa6f914e971ad2af73

SHA512
413f27311c5e598a971095792df3ba9391978c36f1d142a501ae720e7ee5a402451228826460a92b9464c418f53690bfc396d708678d9c18a67c93567b7a6cb1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_sml.gif

Filesize
64B

MD5
6c7a14d29f3d396f8f17c94de8f678cb

SHA1
2fb0c7fc3459c1cd3a97e8664aec2ff73072722d

SHA256
1bfc384f788e8184f242b20f5169a4bbfffd9566d0c9b51ec0bcb21efde278b4

SHA512
213589d9cc2a8b9076ea3035471029758e3f21f278967548ed1e5f84a08f5d249fb492e3cbf6e773b277d7b5a20da1274fac26c872fd36782c732afa67bab735

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
80B

MD5
73c0afdd880e94f20d508aae581c8eb8

SHA1
db88f3c198f07e72e3743d1b16516ab0efb3958c

SHA256
61e6ccc972b8b99a12e352d493fa055f9698783149dcdc6aa5a518b72d065ee3

SHA512
fd4fe2e151d2bbd708025455e71f30f6a4b66ad05ec846364b08e88ad71ce800eb6b64d50cddda486bc3d60114d30290acde3157d93cd23b63e2516025cb992f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
80B

MD5
a31fc3c307e882f5c1ffbe5a5bad999c

SHA1
c75ddf253baf6020672d92d4de044ad42e534fe7

SHA256
e00bacddf909ef5d84a80fd2f5bba4dc7f2a239b55ca6b4156d47858b80bd22b

SHA512
8eef509602739970f1fe10ff2ae99df86f5b4c9ed4f7c6aecc9b534c616abc145104ec86b9cd2d0f987efae43e5f32538f879b0ddeaea638fa3bc236710c1453

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

Filesize
6KB

MD5
1b895120f81837c06a2caf39eb766a41

SHA1
6a494e19603b0774861e51cb5cefa65f3a645dc5

SHA256
52e3a9a9dab6d2496c1daaf5051d8e1d15b943ce080f56c8fbcf0eb054c66d7d

SHA512
526a66a0160369f45d39e40ae4f9b1f61e0e0ab130e6fe58ccd47fccb28aa496bf4e1d2a95cfdaf44cccd6bff479d98c6d5c9357be94aafe5489bb3ca1c7825d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

Filesize
13KB

MD5
d95cc7188fa5058d941aa0fe37fb0401

SHA1
63dfb47c67dcf590a528cd8361cf704c7d23ed9a

SHA256
e397dd35d181e0ff3dfaa5354c9f88ded37ece5f698235c25c698d6064d818d5

SHA512
98445220aeb543156d1cc5fb6e5fc55a89c0af5f5a0421dc2105bd5f4bf1619c19457b300b14fd52527da75b6851393aa42ded2e1978780bf46cd6ec81bfe4f8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

Filesize
3KB

MD5
bb7a5f270354212804b8beb657a95b4e

SHA1
4ff73c9524b86bde5fbc8ada452f4e66d285359b

SHA256
7fe1e465546dbf1879611f3290e8ce46a63ff2469093188be426cec7ab0f1892

SHA512
bb6b1e3c1c4e95a6616efe824e00aa276a8f84dc0ef60959ffd41cd376050355573004511432acd4f7fd5a1da32c0571e21b13188543a2e30f5a75f974e46415

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

Filesize
6KB

MD5
68e97045fb52c609f66175f03662de5e

SHA1
fa09afb04c514ae9dcb2c01a7de6e74a0ce1d42c

SHA256
9cdbc0738e760f4293d358d2a3cc52e92c385c2682cb56b96efec14563ec056f

SHA512
d43ee35daac1a2213a341e45d96f2544dbbfe433272018908a49d828bef107ad39767e67e21981fc762236bb919b802ee3d975f61a049e0638d32577864c4991

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

Filesize
10KB

MD5
fd11a4eb65f33dda34dbf6a7ed4aec32

SHA1
4584c6b3c39586aef7854e00f4dc79c7d78fa024

SHA256
360c27e88d39c03642b68e3c00de55f8ef5d851398ec32450cf3e7a9658b923f

SHA512
5cf3078fdfb40887d133788f9aec6c22badcdbf1e1199224c58e156ef5eaf4d6c501c4ad7afb959b3f21b5a52e9d85892d7579001e1b17e70a998871f4b91833

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

Filesize
68KB

MD5
4c41f2fa0c9ed2636c38acc1fb38e4c2

SHA1
bf0ce4fd4f5dbef027837dcb4749d990d1762c1b

SHA256
d7bf47569253153481cc433471871f20a7937811ad691987fbc56efaed2bb242

SHA512
5b8ce4f4df54f39db55aca606a26dd4c6ac4eb7183a8f1db702bf04a2429682455e748295e1ab98256f2ee131143c9062fa62cf89457db45d828ebdb1c2aca43

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
2328348ff94911c5d80d06ca6912b553

SHA1
c8d69028d39343e7015e82b3089b140de04ce88a

SHA256
7f42e87d7feb2666065ed1b2fafb6d66f6b717342ea98886ad7884ce2452968e

SHA512
511b63ed31f931ddfc1cc8218a3ccbe50b073db8eebfe275f3fbad363044b822096a6e07cd8cb305bac956c7ac489b8d214d6f679b12f01d398252870d427243

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
ee8fc44940341d122594a0909b3666ae

SHA1
ad0dc8e34a4e9da31a2b6db59fed5bd50be7be6a

SHA256
3f45178db01ab61c8d6ef4c03170de11ef20a444733c3aa957ecc306c501829d

SHA512
6c497fbbb4de637e832affa0e8a13a44f4c57f1a488d67cec2ee4f424fcc8c493261c3a6061cfb7ebf31a8d1922d911b594e67b9d6a30224799e30c5f62efeb3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
4af91bc5b673ddde6f5e3c5854bcfd98

SHA1
ad73b084bbbd13cb53cd9bdf3a845b4d1a09852e

SHA256
60d4075e2aabfd18484ed0ffc49e92b557b4c68ce05f44a990e7c35cd473ed1b

SHA512
e9b2c1cc0294b12efb79465d429753401d0b6f3cc7b8596977aa755a760497a28fc9abcd2b530fe104b1b53a9f53fbeaf7244e7ae99e1d415ebe66199bfd5eb8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
ccddc5b636e39928c6ef906de12f340d

SHA1
910f7b4e4ce16bbe67b9e6f70a31bc748b141e55

SHA256
310215375f66f47db0c46d27c5aef3ef6f560f96ed527f6b9ab6879bbec3ed26

SHA512
206685c84765c1eac34b4e98cb582b6e819dc16832f1d8da9c3ae89640851b5e35423f678973e30b5ef7e34732bdfeb7f31ae8fe4f44e2959fabe87477d1f999

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
181bf8de15039cd7d9cdbd54f56991bd

SHA1
946a42ab6ba149ecefc973c5282d473dfcb026ea

SHA256
b19ce0429c5cb3894e9dc47274e7721ec58433d983133f51107d517ae2fbe816

SHA512
f53daf140247eee849d505f335fbac808f43e6ae44bb61144bc2a244a10cd99130aa90134365fea7c00a94da3b62f45a71c6c2ec4cdb3a3506b89e77bfe00c24

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
f85fac3a4643b57a589e3addafd94655

SHA1
0320e1fd89ee8b8d390ba3ada8f314aa813f05ec

SHA256
52faaebda6649f372e4aa7443703eb377b93ad01e7ae1d9b4b16abc839116634

SHA512
809696b69e04a35db347b5e71d982f6151bb771526314463e0262b2c4ebc9be5d0452cfd7036f08ae4b9df9d2419ad8e387a583845d1e4d1efa41d172806bfe3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
f2d11121661e37a8c800224543370862

SHA1
2106c911660e305dec7335e69b5e0e9919ebb50b

SHA256
b83775245635c7b460311dff2f00ef33c522ffc3081200263a9d551c74a3ff1b

SHA512
3606adbbed6e9a2eb680156f39472cc44c13cafcb1e9e46b62377e4263722a7158db2acf43c33872aeb8aa517c7a1eb245109ad334917e0de3337d471b736079

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
5c0117d063c55f16f99d187866f8b72d

SHA1
5d6eb3b8903137017c3831cc6e74d83e332eb6c0

SHA256
df7745476d89332adb72439eb507a648fe9fe05e9fe2a9e2154ad2f5cdfe8885

SHA512
1e02a688828fc7d23fa841f9c4cf0d035e18d315655881ce94e3a452119cd422e3b7be5c2b1fbc6d9c538943f5a204e3cb9b74483ca3d02eaef93714b298bb4e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
0eeee957deed991e6d23aae8d3410285

SHA1
a9c0eebd3374053b0c20b1d442c1f1c39d5a81c3

SHA256
39954851344570d74626b17f1416cb05bc5342a44d7a73b824810ec25cd77912

SHA512
aafafb4d73725320d9695713a968cdbc39548c223bf5cb64f8982cbe67f15b6e21ca2f75d30d2ef6adc0d138b0986acd47d2fd2bae1b51b544187513f9f0283d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
25a906d2c4817c33371f5825b739da37

SHA1
4a1712e3bbd7b70060bb04dcd8e08b9ac3b001da

SHA256
7fb7d62cd427b06ec1067bd81f575dd2a384197416acb33e5e6d25f02d76580a

SHA512
4dbc00260d038fff0328366b545f89d731a019552d8d2e389eed10f21f7291421f0ef19486226c9e41be996571228d035d40379683a4b0a552345b42cdaa1ac5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
22a1479d467227f91baa2da754aabf07

SHA1
a5474b0a73487d92f90253fa89807e59fcf0faa3

SHA256
8acced244370e97115ac9f505d843a2877549891224e668f0d530b5a904ddf81

SHA512
72f0b7581daee3bf04033c37f8ad55de642dfa60b695c8f11500e64590abed9849f323c3bf7e571824f42df8ab805844e8eba407f896c0cc1b09ad975d04aa9b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
b81ac03c31fbef6818dea05545d8fdd1

SHA1
b4569aa6d1d3e4ac895e8d0ad7cc5a24357d1e82

SHA256
e2aee675cabe9f4cc106fba915b71d61c777dc075ee46f0fecbee9ef9f7a78fe

SHA512
196171bd2effa50e05c0ea008eae0fd2401a3a7a2e2152a5309c42f06d558cbb3f3acf75ac40d2b84143d0f0099e88e4a95d466b4e226b83c4be0b93ecaa6cf2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
8ba094a684413f83d1e93a9b4e53c7c7

SHA1
adedcc0d9c00d89815ab7dbf4271cbefabb8992a

SHA256
c1efba91656c4918ffae179695529b5cf8f0f5e54554b585ebd5b1623bc4d812

SHA512
6559756d139c36c30565dd6fc8503f237e38399989bb23387a5dfdb8d85ffad8bac00895d4f9067cc9227db3c0ea2e7020163c22721e56d78fd6f9580bc295d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
78433f09ce49395a7c1efcbea2a72ebf

SHA1
8ede5b0143b1c70f69a5352c9cf27090c3d67010

SHA256
93cc30199fed182739c9717cb234bbd93aa4293bc7bac38b68999a87d3dc38b6

SHA512
578de7adc29653f4eb36188a5f40901dd1dc15d5068673b350e390c24c6e89cea4eb57614ec8fbd0fb0a1d1be9be97beef71020abafff32684a16573d8262cf9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
d509a23fd9455906b1c0f95b91996df4

SHA1
fc40d925ce72a09f9b2a4ee526c8cd19e1296b1e

SHA256
6fc0cfec76cd77fb8e8df71409428b224c9ef6cca4764694924f43f6add25e2b

SHA512
341c2484dbe126455c3275cb3fbd15446e6b729eeae93a0e74c67074a165d81fb0adc577459f9a085ac261d2e68caba0df7ef322aa72429ffecf5b636adddeab

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
345d0bfac9e82d282eb0e22eea9221a0

SHA1
db44486dc46b70ce4cb7a10f3d4fbcab8e0224f7

SHA256
8fd36f78b27cb9aac23235c1cdf26b87c5917e0421ba855a6fc1f23bd3e7554e

SHA512
13ff75af122f60550b2108d03d65b9eb4059d639125f613852caa4cfeee7eec5413643240a668b449d53c670f8f14ca26ca5acb36ff85da27b09b4ad6474ea94

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

Filesize
3KB

MD5
75717b80a2a15805f2de20c0c878cf4b

SHA1
1300195bdf23d4888f94733f489287304f7386bc

SHA256
cef692cc04d7833d7ce5d745cb14b737ec5c4edf40c96fa2fd68b010ed3a654f

SHA512
63850f858674029bd06117e554322a9e51ec68e246622d61a9eae959689e0d710144fed1bd0a8725b69e6d6b3e6e5067efa7c25e71b59ecf963bdd17a10e9f79

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

Filesize
2KB

MD5
d850bbb37b2dfbb555524799c5ccae08

SHA1
47c645822f4b219e569f50457b06fc3f1c54a4db

SHA256
02caade6ccbe54835b72444a02e02cc3eaec35ddb4f54e5b316b974b2aae7145

SHA512
253eb42c141eb49382d67cc5351d1df39a2f3e35ce3d70e8498972db515b547c50cf7e4f44240490aabf1509aec9cb46f9363d5f30a5c623da6a15ba34fd2fd4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

Filesize
14KB

MD5
331e4ba626c4724cbc466f8176234ffa

SHA1
98b3ba07f2543a401b229e862eaf08ad3dc7ef9d

SHA256
57e38d7ff4b25d3c7f2f21c5205c4e4d2819309c352173f2279234685992af83

SHA512
7a9b574a7317dab70974de0761e07b36af89de16cff089c4308ddb1ef18f54dd7e36d2b5f748e5fd2a91d65d890bdf61faac694c88c967babbeb29872ce3b2a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

Filesize
320B

MD5
256e6e4467118827689e31336e7f320d

SHA1
037bd86335bbdb556ec2b1a65d0dca56b184cc7c

SHA256
61b78667d0a96744b664599a2ed5f94caa3629112c9c0a39af79befecab0358f

SHA512
e04fa80b00ed18bc920497f5926681b570728eba526994f04b75067cd056623c57beeb6294219596bcd0c46406e947e0b43580e0b6c9c8e0fb4c6dedca7d44f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
3f9a5254098a562a7c947f7f7c36dfad

SHA1
6a3b2251d02f628daae260f4e32d80b902261601

SHA256
8f89eb9c16703c21c0684737f9a2fff694f22a6a29447c183806154da5e75423

SHA512
aef8b8b74d7b6a089aed477bac4bf2c729e9ea4bca4156441762564a76340a116660082321de9e82d3dac58ca634a087f76ea125fdf832740f262801d76b6bc7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
512c1e92c7ec49234a5942a53dde19d7

SHA1
ecdedf4ce4d3d3d4c9784462a129f59a3cd71d0b

SHA256
095dd707d60c7b51ca0b222c4a6cbfa2e0f0104dcaf805589cd2562171a04d47

SHA512
1f2dcff4161f410069191974bc077ef7945dad1766056aece2fbe4e31262da86f901e168d04c0dd0afff40974208531a8623d47896c0166f330c6e2d02f7459f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
960B

MD5
e433ccec20cb284ea631921543ad48c4

SHA1
228cc814c25a755cb0caab43d39aeab525004d55

SHA256
968713cd9cf0bff22ae875c2aefb13e395b49323b40dc1ab6534dc95f2bfccaa

SHA512
10efcb8923865f483e57f0b9f1440a413326542f7393812f7214f66513c6fda3c1a8bc2777d9d9ada97a54584e3809923cd7adf5bba47450f31d2d9c25b8330d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
128B

MD5
8420d4cc2e11a2985784e2f7bd41b532

SHA1
f09094d54db23159f044941bfcecde28f184cfc7

SHA256
1702e0baa84df653c46ec1ba558565c20866dbf18a419d0279857d4971fffeb3

SHA512
1da8ac2662deaff6d32d5833d3e697996c41f4689c41022398da68a3f7b2f7fe73cb15359fbb077322542b27d2f30581c97c83bbb38af3c4b1b82103b9f97184

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
8b2430dec7bbcf901e17ea856154756d

SHA1
2da1a6e4e82ce1fb060d5853a1aa4cfd66f0f694

SHA256
7aed244bdf29b1b9bb434c12ea79d4955ee41502e04859bc065656df2954deff

SHA512
ea24ea27a407a4abe9afc6a859c498ab674482ad20b5ba88294aad74ef1becf67066d8fac56ebd0bd016ddfa199df967eae1348b4bc23a35934686e3e2b7af5b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
0df2c3f955f13d9c707d9d6551b7a60d

SHA1
d8105845456b4e33c75133f7fcdf8785a6fe801b

SHA256
a9220ebbf7eefa1f365ebe9a9e5815d2268c85a7b9337ac6be690f4fe193fff8

SHA512
22ec0f4c1d4191ac3bd73fcaf0dcd68af61a3f4b53aa126e700ac292d97d9e1b1c1818150b2e857c3efa085f0d228fa7029b25d3e61fd3ec8158700a88567c9c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
64B

MD5
dac2c870f5f2f939ac300efde4048250

SHA1
75538d73083e7bd44cb1eaaf0643d60b0afa15fe

SHA256
9af0b04e3784ac3b393176e6a4049c56d42991bad1e232838d07fe519a4ceb4b

SHA512
fdbbbc99c02b246351df1372c99013185e882f2b6e37c30b01f990e9b6f572219afd96518c84cd6eaa7a9bf10d0f547b1e233d64f1c8d0c3a457eb126513b1f8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
928B

MD5
78770e4072c84f7bf226f257efad5e3c

SHA1
737aec1eb2aa6e99d1baa1f415b97c2836b6331d

SHA256
3efb74f26831a5e6a322b4d708c7e8c03cc534ddc9070b70791f7af98a061e6d

SHA512
8fe9f8eebead250ceb9b34ab3f6e8119551ca175147e31545a16b4fe1fd70da2a14cd4149c2dce7281c7d6d5e14b2de36bb78be76b2164aafb6772c798bf937e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
96B

MD5
c79e4ba23e5edecb22622396b940638d

SHA1
a65ab7940c071acb568e5288cf4ff19d889fd898

SHA256
77db71b40d08ee7f167d29f0e1f9a2d02f8903b00891d0a0186d759ad1f2d2e2

SHA512
9cb1b7a9817d9f1fcb2ad672b11b9c804e1aab4529026087807378d2621895bd71e134133efed5d3300632435cd545ce0ac0bb6e570c77477d15364c1c67a341

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
96B

MD5
17ae5b2bec76e45d85555b4eae6a7ad8

SHA1
4c02b469590d2051bd96c229ced120b9db2e60e5

SHA256
76bb975ab000936f9ef729859f8b4c4e4fe6bfebcb56684f8771c4e9f1df6c3d

SHA512
49bb067e419b907d7e0a875e98cb02bc0693683cf8b594cda9b31ae5efa5f50b298fc74782cbf4fa6ac5862a43fc870fdd660d909cf7309259b6852a81dca414

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
336B

MD5
b8beae401b4ac661976cc7c54c1eed40

SHA1
607c82f6f2c1aef8c88b5339d4b11beb71d279f7

SHA256
38a8fcbac2104f563c98b8add91f37fb5002324cb63c672330df4d70fc55f821

SHA512
56c01d6448c642343281dd9fd6ae97a4fa3a3cd6250a612f157bb92e4a428cdbf055ee61d88399ea9c3e4ca1cfd9dbefe38f454ce5e74a84c2fcd0cf6203d9e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
aaf54803bcc060c8329b29c4c020d638

SHA1
cdcf041ae1edd88ea7d6ef22b1279515cccb056e

SHA256
bce8e916c404e9cd9da1a68832b0b43c8534b22cd3f24d43a13c150b1a0931f3

SHA512
184a533be0b6c8a71d41dad3d6611f004483a93719709968ab5b884d39903990ddd4ee6783a32ed64fb888957ffca0ffa8c411e2dfbfa6ba5dc0b7a53d068628

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
176B

MD5
26cecda6a605276a1404d7715650d981

SHA1
8487c9017c5d37da59572490d82cec3e286c7973

SHA256
943f93400b92f3042382f85a701734e400c0eeb517f0fa62eb04b9a461848129

SHA512
6ac881bffd035e0a10c2b50ef780361089726e69443123adfef636ffa7bafc4be0bd0a2860c7bfd0b116ff1ed52d595c5bfda8773cc63817d4073c6178463daf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
592B

MD5
b9232b671a090cf3dfdc5519f84cb3f4

SHA1
be5913f7caf6782e208fd932ba92d4e9f8511b0e

SHA256
2a95a3ec48b925f23bd6751a690dfbf0f53b6d36e615c16eb164ade2aca4aaf8

SHA512
021bee79a2193ef3e69816abc267d761fbbcbcef2badfec61769d9f5c1342f9e06b66fab44357be344930c084b035e34df3da7d9272b085ba5432782ad4460b5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
128B

MD5
b0aa3c16d2a7360c042b1700c353186d

SHA1
687c97202c3fc14129076af5d47dee815c45d1c4

SHA256
44097fe313b45293e83becb2d5e71225f5e6d80d6e5f71947c9a33b405ac76bf

SHA512
424d8d1e9a8c3fbd0c1edbc958137f987416ba6d544ca66f2651ae43d3f37a93a4e0bdcaa2f21ebd8883d721873798b3f13e5d411de1e5146ffc6e17c5b57b91

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
d44147f6d9a95f6bb60e40ae4e6d63b6

SHA1
b0a5d6170f6d2733ade9c8e33dff687cf657d6f3

SHA256
3a96bfb0990e7523b18968c33afa72a90f2b2414280298549fdc696019874341

SHA512
acfef65f93ecb48a72e7937d96583b54b91e7eb3a93908ec913b5401711416915b9687d050b2a83fdb31ff4b5751507a67b56074ad950bb8fa0701a666eb4b43

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
896B

MD5
9aee6f30a5c76a75d01ac198717c9c6b

SHA1
14c08db811cc023bacaad381925b274e8e70b9d7

SHA256
40ea6dfd6b09b15f8256921cde48d30a1291ebb07965209fd6edac89f2459338

SHA512
df103a81c6f99b3b078c16c7e456d0c884e3ebfef35c0440412d671c07bb2c2d8d20dc4406918abf3c8297fdb4f861412adb147f0812008dc67744f44468f65a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

Filesize
12KB

MD5
57869c68e2414ef0420388191720ec1d

SHA1
891b8141db4fe26df1e7180aea24459956c65ee8

SHA256
084becd8bd3356d581a3487521d3860f6a8ccf1fc6600ad0719e11faf9ca4027

SHA512
873bd44bc8325872a18f496cbcacf7cfa747e280d7831809280fe84cbecc789d8154520ebd853ec1418bb7ddab636f56b405f620de5e564b15865a40b61eda0c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

Filesize
9KB

MD5
96cd175e58e59120212cf62892fe3a24

SHA1
89054433fe56a2e91e9bc78489bfde486301de61

SHA256
95fb192cfda0e8e35c758a30fb50c7610b5e43668d302cadee472ebe169244e5

SHA512
59331ecc4484afe5f500e2128fe51b4407fa12d8be83ea65e174b8ec01c252f67bf244782d7756c4f87cc52366f675f77ce5e05f2c60465477c3c754fe919425

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

Filesize
9KB

MD5
4ce8e341fa4e0535b44c81c52f119ce2

SHA1
6dcacfe75e90bbbfd4075530f2081688bd21a479

SHA256
03bca637bb51a162e6a31065dad5b782b94dcf0e47a635842aadc88513515cdf

SHA512
fcfd9fedd5420ecf046906bd67ba1c8cca15cc34af1900983627c56e0a71dc467e2cacedf48bcc405d37904d2455d0ba2a150a2a011c2a9b3ee73b9316f04a4b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

Filesize
2KB

MD5
0d19c66df568dea10e0a886a28ea8132

SHA1
8e06bb08709c46ff9e7298aa0189b198003b8bc2

SHA256
ba3d46c80add9862ce33cb90ba365c333315a9f67efaeb3031c0e90b8a1d50df

SHA512
d24ef920306a5afebe51263b7bc8e24259f9aa5773962bcdbef5e490d04b60cad334f236c6eb16835349cb5d9e561e1a76a735365b96aecd51e2ca7eb9e14716

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

Filesize
10KB

MD5
f1b266338b43e1a2e60491cd77499104

SHA1
0f779910b632571ed58e523886e07234003109b6

SHA256
f9aab514a9800ad215cbad3e02dbeef6e37c70a15ac00c8ac6d16df98889bec7

SHA512
946f3efd91d5c047f0756ad5a6487e2dbac7d55228feb9faeb80216c5874d2dd2a2793db3d84fc6b2c5d543bdc0ff18439ca8c4e1350ac805917dd9c5f5f7d5c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

Filesize
21KB

MD5
dd7fe9ff3c0d0954692a8bdc21fefd08

SHA1
1e2cc07a3eb78614a8d77520bed5cc19296dc022

SHA256
82c083004cd5ac85c2fc04ee6b77dc9dca7f8f5adfb32d9eb4c152d88345fe9a

SHA512
7b9fe1567040699a0a6934b189ff95c10a8fac801c8725aec119ad048d4c55794c41ac96e0d258c32094f4980d5fb68309a4b78c77473d71f981cd5a18c9c590

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

Filesize
11KB

MD5
f9ededc6d7317b3f9521237a96079169

SHA1
01999f0619d68abcad4a608c719de60a5cf2bc3c

SHA256
846bbaa2c41b1d4fb21ec46069b09e7163762155a8a2a5fe0cc92149e986c321

SHA512
ea6d5b7d0e7e23f53cd56b5781cc1e28c0f60b26896ce90c699ac82095812b38bf7293d183bd4405b7acf6300b58ce52a3909fb0b59d1b4246b01a86726860f6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

Filesize
10KB

MD5
637573e2f2353e4461a562eb8f1210a4

SHA1
b6225d3988ca3198c02e54c0f5cd4f5b0d7063dc

SHA256
14555cb8f9ebebc597b2cf7d4e0b7d9fabef230db3965e9f8b01e6ac8368b0e1

SHA512
3b2f847613668aa843b1bb5ce7b76f6e96113eadcfe9a350ec9a4c64926e286dee58b35b7c2e616f06a0e4a8ee9982030e4052f6b2439f61cf6d8cd9fdfe30b7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

Filesize
2KB

MD5
5bccb8e9a5b9278907d7481f43aa2331

SHA1
f3e9389c003413391c421571209230da992ed772

SHA256
1eae882a27f13ac636f713d4bc40b81f0988fc6807a3877af1031a47a9b6d453

SHA512
68d3f6b4976f32bc8c4e3b8b4e11dd25857298d2ce89fcce9021cc7aca334890a40b461069357d8951b638e838e46c2f6fe9511a722d818b4a7beaf8b8f8926a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

Filesize
7KB

MD5
377164aa5c88b187e7ffb810bdbf8a18

SHA1
69f2219ce3bbc59267761033c11f74885fe9019a

SHA256
a97a05221c864abc8c6916640ea5c21a7227310841be9724349e5ddf07cf44b3

SHA512
adb313cdf098c4b479a62c2dadc935960f2af21bdc898ca10ce63ee9c7e94aa9a1499d4255d9a4becc4c976d911d8880da8732305a8f74259fc0b823f345e064

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

Filesize
272B

MD5
3dc8150bbb5dc6b373e8cf433131a510

SHA1
bb8b10d23dc3468d8e59236c09646c2992d37ea0

SHA256
ad8db05df344bcb7ce197d0eb8e24081fa94ee3ba5fdaf27b17b392d4f5a3657

SHA512
00a6d33bb690ab8e2b7393d15459a1efe1664f8efe216c1ba7b2a739addcf301ef689f5dd17c2079cd94d36c8b0afb0ea0168bf1dc4905f0ffbdc7bb7e61f627

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

Filesize
496B

MD5
368be31ff9e98148f97ab3b29eb4fcbc

SHA1
3aa5dfa5a57d5f5c5ecaa31ea53ab03d6de59ff9

SHA256
f478ef51b2d8a9aa3dc228aa616a905809fc25867c12afc81aaccc114eca4d06

SHA512
ee6084fc45fe1459e18bfbc98b9d0ef26d1ee0354b0c884488d88d59e19a43aae6545de4a65cdeff1306359974a8d6b22c99ec7c80c3c50d9cad59f6619afa64

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

Filesize
24KB

MD5
341fffdea3f54a53b36bcdd71563ec3d

SHA1
352ab336dc82555cd5fd4633fb8c4200d698db33

SHA256
60c7228afd0e6af336e070e138a0dca640f201b33291b99666ff1403dab75e5e

SHA512
363f963049d1562251e433fbf282746d02ff3492110db190e56e72adb62bd90794fbbe20bb4edcfc4d8ec42512e61f50d1f94f029d4824ac8024b35b9dc1d6f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

Filesize
1KB

MD5
b815ad14593173970ab7261f608336ba

SHA1
eeeb6988d6b2dec8f0262ee610177168bb14434d

SHA256
121cfbd5a0d3b1506dbb0fe74ea98610a51ed873f98ce99065ae97586ef108eb

SHA512
0df69b40a3580b0e375c5df4c453e3cf24029611ff82a111311b101feeea89bbd49cd7cd661257d7e0b4ba6963946a45307213df7974c98d28fe4f9b0c4ae0fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security.aspx

Filesize
9KB

MD5
579f1d76a8283ef7b946e976d1950e80

SHA1
97869dc8ed13cf825c103c76c7f6421bfda7522f

SHA256
2d055e744f26c215953532547a30dcf3ac0cd95988c13532064d6e0d9d17fcea

SHA512
40cb94c1dcb118e2b18181f15c1ebf0ce418f3195b8aeaaf6c86edb71fea78ad804111ae8859de3a031b4edec5b598eacc47453d1ef0f687099d03c8b00c7204

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx

Filesize
1KB

MD5
cc86664408067ad87dc4c57e4fc2dc82

SHA1
92340f21946827bc31160ff6e50f91aeb1a5da92

SHA256
3b38face8d062e116ca7c48e3db9a101b992ee125dcda7b88136b72dcaf0acb8

SHA512
0b94f4bb5855288f6a9150eda7ac3a19d76e5c9eeb4dc8bf0d48f1db0ca6ed7ce756f119dae6091cecc1265db5d52584c7289c55bb8d4ffe6361b1a53715d118

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

Filesize
2KB

MD5
fc41a109cfa430388b76bc40eaa8df37

SHA1
51bdfd0a72f8f0abc6212af6afbb041377b1a88e

SHA256
00e2f950a03ca85deac7b51200d5c815a939005d5f31fdb3699100a286080194

SHA512
d5a1f68a3bf846874353a1530138b08361a8f51a53a7bfe4952ad83789318274af58a0e94b2c3cfd91700fe04a3c25fb7c432a3a30347126c83998b81ade9734

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx

Filesize
4KB

MD5
5fa3e29c9fd739b9b7f09294a20ac8af

SHA1
eb5f0b40045fa286e56bd3967fa298dadd173e8b

SHA256
81a2a1fa04c8e75f502b28fabfbe78a0b7ad6eaaad89f9e536454743f8842d58

SHA512
e826f34033a7b9c0aa5781ca8ae82e613420be467d24c25b3e98f9388c51763195800aca0e2cc94ad8f82478c6bb5299b71d5d4356868d0d8d99150e7790a4ea

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\error.aspx

Filesize
6KB

MD5
19ae201dedad8cfe708e5ccfa79ed988

SHA1
187f9b32dbdb5c9d237147a19cea1b2847ca6927

SHA256
fe0e9a678debc1cb8d7840af3c6bc4b50fce06130a56da4f6d6176a408d9154e

SHA512
27cf1bb3e13c4e423d5269f0ff03b7b40b669f10cea00170e6ecf91356e6716b8494c317224fdd8927173c9deea65492eb2a4d08be7c3c60081e8a9e536b4565

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx

Filesize
1KB

MD5
eb9acf35482c1bbff40b0d55f70dbc0f

SHA1
74a983930a18aab4b69b55265f1b2fcbcf0fb8a3

SHA256
4239eb54464660a1861701c9fb5e40763c7bb48d6301fb73387169a1b375adb6

SHA512
9fb01822dc468268df7198a9fbe2d411e3e880184499c27c0300c99f43d2608e5e8ed9ad0e90ba1176480b1f023bae49296e39cb7b5505423f2f3afe01c67d30

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx

Filesize
752B

MD5
e660839187320d48bcad38a1a18e92d8

SHA1
b8e823914c2f4005e884e6e7ed14836330fd994e

SHA256
6df75cb745adbdf9db4849a5e8d7e08aadc9a1f1dcad09fe043ec6a49ed3f160

SHA512
681fff8d6e01fd99c7cc404367e47dbc85a215f6c75b62c3604f3cd749655c4c761d2c03a0e4777515482930944adf535821bee76e3469fcb7cb08a5d25eafc5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx

Filesize
1KB

MD5
4173ab11d83db9812f804138deea0e5e

SHA1
deb1edbcfa858f1517ee84321b9563b443dc7773

SHA256
b0a6fcdf2a22db86e54a372bb6480bd578d4eeff82058d5c65bac72ddb2fc816

SHA512
cf7e533049ab3d5d6d537247bb3aa62daa0358d33075b8ec6c19c65ca4832f8cc613a313f0110173aaf02ad283bed073b06ea12919f60cf944e428828f0a3d8d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\navigationBar.ascx

Filesize
8KB

MD5
7fed051825329cde22367b4571126f04

SHA1
f6e1b27a07d925c766ee347ca4cd812a8c29676d

SHA256
43237df88c361812215d9e39ffe4e8ffaa655579867392d8c1b2d07ca1af9361

SHA512
a5ace9f4ce3483284edd41577a8cb11ea9c9967ba0dcafe9e5d1df71273971f1652f0565004fd87f639b9c83100c8ccb3117037c4440254ab5ae805658c320ee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
e86fa343ff8a63b80bb643bcab5f3d8e

SHA1
9b06e8a7bac49f13838d0f03afcc945f174e8e48

SHA256
870ab65e4b8936f97bd0bd15ede9fd9a271c3abbb52d3dafcde6dfe067aa696d

SHA512
f2de5968b072928c616bb03fa57b5d58df120541acf17382bebdffb8aaa30c13e48c3c5291e2be05c2f7225784c895ac0e831b205aedf20933179fc66f73ccb7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
5cd696a945e45fdd01e24076b0a365cc

SHA1
975681cbea9bf23cf0acefb654d43b51ccee3b6f

SHA256
544e173763ba74a2c0d78b0e72c65d2dd88d62982f3476027b92c698d08fddfc

SHA512
927c6252dc2fccfd86f8d1986e154eaa6fe97ff5931cf00a6455163ebe731b59cf767c51c9257b0dd7d7c578e5c5b3ceec47653b0dbc844de9819d2c8438c608

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
55b66e31403042c1abc9ec9e3b088679

SHA1
e364f6b86b8cca01ee5ff3cad023c57006635d34

SHA256
7a5cc3a7063e6fe2e65d6a54d98452972435d6196953a3b267eebbcb8b0e8ffe

SHA512
249a6efda5ad8e24c19ad06d0b0efda9a7f51dc8f329f13348293ffcd2b38009830f5bde60d56105f8fbb665742fe71b05c8a9025e166ac3d66c79c0349f73f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
03dbab879175dcf89cb1c6a1406e3fa2

SHA1
c6d69d2230088f3a8abddd847918d65abe25c68b

SHA256
38cb7ccfba69f2230430c2fc2c8625f85c93e37439df06f31980021f45c96d38

SHA512
03d9d7cc9a13f06718ee69a1cb0adac6fc20f3ad88722713d911629dc970792cb0f06863261631c23ab2e4feb9ac05e6ce38fcc7fdf48bc9e9015bea457f42a4

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
c7670e5ace9b99753f3172d0eb04fe8e

SHA1
02bf94ae146cebd429942544139d51efa131fe69

SHA256
cdd6c7d6b4adcbc4640180f4a04baf7d8e89159753ee6555435c2af3ad2424eb

SHA512
114b615bd7ad9cdf1f77f0e76d5b68fc84e0c6c3b0c9fe9ed4509b1b69c51517a5168d20d56b8f258da5e6606ac3655a1086aae908f2cf5cd49b2e5a621b87b3

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
f29ccd1e68423ae05ed2701ffdc509e4

SHA1
d02e5883b01ec3a1592cfe93ab39e666a802000a

SHA256
33bdb1424ed9815f313f2d9dea42f6526a3837c181019d678eb6f1a8418a0ab4

SHA512
bbdf1befa8b78eb8e6d320ad87bb9cc570b6d8157361b7b515da90b40ff7bc2658caa56392e6773e73142f6de1671e0a446714ca46eab88318ff65d39ebf93e9

Download Submit
memory/1156-652-0x000007FEF6110000-0x000007FEF6AFC000-memory.dmp

Filesize
9.9MB

Download
memory/1156-141-0x0000000001350000-0x000000000135C000-memory.dmp

Filesize
48KB

Download
memory/1156-140-0x000007FEF6113000-0x000007FEF6114000-memory.dmp

Filesize
4KB

Download
memory/1156-142-0x000007FEF6110000-0x000007FEF6AFC000-memory.dmp

Filesize
9.9MB

Download
memory/1156-628-0x000007FEF6113000-0x000007FEF6114000-memory.dmp

Filesize
4KB

Download
memory/2672-36-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-48-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-0-0x00000000748AE000-0x00000000748AF000-memory.dmp

Filesize
4KB

Download
memory/2672-8-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-11-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-12-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-14-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-18-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-20-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-22-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-26-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-28-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-30-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-32-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-34-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-131-0x00000000748AE000-0x00000000748AF000-memory.dmp

Filesize
4KB

Download
memory/2672-38-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-40-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-42-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-45-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-46-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-6-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-50-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-52-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-54-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-56-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-130-0x00000000748A0000-0x0000000074F8E000-memory.dmp

Filesize
6.9MB

Download
memory/2672-129-0x00000000748A0000-0x0000000074F8E000-memory.dmp

Filesize
6.9MB

Download
memory/2672-58-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-60-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-64-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-66-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-68-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-62-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-24-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-16-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-5-0x00000000046A0000-0x00000000046CB000-memory.dmp

Filesize
172KB

Download
memory/2672-4-0x00000000748A0000-0x0000000074F8E000-memory.dmp

Filesize
6.9MB

Download
memory/2672-3-0x00000000748A0000-0x0000000074F8E000-memory.dmp

Filesize
6.9MB

Download
memory/2672-132-0x00000000748A0000-0x0000000074F8E000-memory.dmp

Filesize
6.9MB

Download
memory/2672-133-0x0000000005140000-0x000000000514E000-memory.dmp

Filesize
56KB

Download
memory/2672-2-0x00000000046A0000-0x00000000046D2000-memory.dmp

Filesize
200KB

Download
memory/2672-1-0x0000000004670000-0x00000000046A2000-memory.dmp

Filesize
200KB

Download