fantom | 60b290310f67adb0ae186b4b938ca466a6b55653b2519261fa425127f5500a1f

Resubmissions

12-09-2024 02:23

240912-cvfznswere 10

04-09-2024 00:09

240904-afvheascla 10

03-09-2024 18:57

240903-xl8csavfrb 10

03-09-2024 18:12

240903-ws828asgnm 10

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03-09-2024 18:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Ransomware/criticalupdate01.exe
Size

261KB
MD5

7d80230df68ccba871815d68f016c282
SHA1

e10874c6108a26ceedfc84f50881824462b5b6b6
SHA256

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
SHA512

64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP

3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi

Score

10^/10

fantom discovery evasion ransomware spyware stealer

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>HptiXnPCAN2UHN3G433aL0bNL7fiSHkAV+C8o5zZU++/tMcS4knerx+GNlSxo5Sn3fPG9/MQKWlvotxCITelv48nZxaK7lzU8nAHcqOTbU4TsjHHrXByza4WmuVHVfWhxejGZ+m5tiFOz8IWRmsD9jniuBdhJdoRdYiFiVXaJ/FIZv0FqwaitVq4OGd9cVxfueQ7sziWPpYWXN/Iu4Gde50hAyXGhGoPxVYLjj7PUdNgotGRma8iVR6bCJTv3Y1wcN0TJTp4i8cI4fejie1g1d1k/6FXy7aJeTxBPbWeHD+8xbKl/hEOsTjwbl5IPX3Ga+49nGHa5rVi13k3nr7Txg==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

[email protected]

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Renames multiple (3053) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
evasion

Drops file in Drivers directory 15 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Drops startup file 2 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Executes dropped EXE 1 IoCs

Processes:

WindowsUpdate.exe

pid process

548 WindowsUpdate.exe
Loads dropped DLL 1 IoCs

Processes:

criticalupdate01.exe

pid process

276 criticalupdate01.exe
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

pid	process
548	WindowsUpdate.exe

pid	process
276	criticalupdate01.exe

Drops file in System32 directory 64 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File opened for modification	C:\Windows\System32\catroot2\edb006D5.log	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpd6100t.xml	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky006.inf_amd64_neutral_522043c34551b0c0\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_objects.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_Parsing.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\about_format.ps1xml.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\HomeBasicE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmrock5.inf_amd64_neutral_cadd97421d121ebb\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpc4300t.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\nl-NL\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_Variables.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\HomePremiumN\license.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky004.inf_amd64_neutral_5db759db19acd3ae\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\eval\EnterpriseN\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\Rasppp-Repl.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_Throw.help.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp8000at.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\manifeststore\kernel32.amx	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_Break.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_remote_output.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_requires.help.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmdyna.inf_amd64_neutral_7e4d690d07ee94c1\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\stexstor.inf_amd64_neutral_80ee226e29362f51\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\_Default\EnterpriseN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\OEM\Ultimate\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\evntagnt-dl.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\HomePremiumE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\_Default\EnterpriseE\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\jetcore-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\de-DE\erofflps.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\sml405.ppd	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\xnacc.inf_amd64_neutral_13c4e272a96185a1\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\_Default\Professional\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\eval\Starter\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_escape_characters.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migration\WSMT\rras\replacementmanifests\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\System32\catroot2\edb006C1.log	criticalupdate01.exe
File created	C:\Windows\SysWOW64\com\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttte.inf_amd64_neutral_16d100fb6ba2e40f\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\icsxml\pppcfg.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\_Default\UltimateN\license.rtf	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\atiilhag.inf_amd64_neutral_0a660e899f5038a2\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnin002.inf_amd64_neutral_977d40799168c216\Amd64\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft.Windows.COM.DTC.Setup-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_type_operators.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\about_Continue.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_try_catch_finally.help.txt	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmusrf.inf_amd64_neutral_439e7d1dcac00aca\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx00b.inf_amd64_neutral_89b555703683b583\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\OEM\HomeBasicN\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\DirectoryServices-ISM-Smtp-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\WindowsSearchEngine\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\OEM\HomeBasic\license.rtf	criticalupdate01.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\Professional\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IIS-URLAuthorization-Deployment-DL.man	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\about_prompts.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_Throw.help.txt	criticalupdate01.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\about_Variables.help.txt	criticalupdate01.exe
File opened for modification	C:\Windows\System32\catroot2\edb006C0.log	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hdaudss.inf_amd64_neutral_330a593eb888237c\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnep003.inf_amd64_neutral_92ed2d842e0dd4ea\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpc6300t.xml	criticalupdate01.exe
File created	C:\Windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-SecureStartup-FilterDriver-Replacement.man	criticalupdate01.exe
File opened for modification	C:\Windows\System32\catroot2\edb006D4.log	criticalupdate01.exe

Drops file in Program Files directory 64 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\access-bridge-64.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.xml	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-remote.xml	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sr\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\fr-FR\css\settings.css	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\flyoutBack.png	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\gadget.xml	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\9.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\ja-JP\js\localizedStrings.js	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-coredump.xml	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_ja.jar	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\lo\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_down.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Media Player\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\7-Zip\Lang\kab.txt	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\epl-v10.html	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-ui.xml	criticalupdate01.exe
File created	C:\Program Files\Microsoft Games\Mahjong\de-DE\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_settings.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\activity16v.png	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Common Files\System\msadc\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\logo.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\TextConv\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help_3.6.0.v20130326-1254.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jre7\lib\jce.jar	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\it-IT\currency.html	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\it-IT\css\currency.css	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mouseover.png	criticalupdate01.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Java\jre7\lib\zi\Indian\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Microsoft Games\Purble Place\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Mozilla Firefox\defaults\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\de-DE\js\init.js	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\flyout.html	criticalupdate01.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\7-Zip\Lang\bn.txt	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\calendar.css	criticalupdate01.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\weather.js	criticalupdate01.exe
File opened for modification	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\EmptyDatabase.zip	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Tulip.jpg	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.el_2.2.0.v201303151357.jar	criticalupdate01.exe
File created	C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.jpg	criticalupdate01.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png	criticalupdate01.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_zh_4.4.0.v20140623020002.jar	criticalupdate01.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-execution.xml	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\flyout.css	criticalupdate01.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\it-IT\js\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml	criticalupdate01.exe

Drops file in Windows directory 64 IoCs

Processes:

criticalupdate01.exe

description	ioc	process
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\bbbbd997a1621cf1e739f922fe653459\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\PLA\Rules\Rules.System.CPU.xml	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\DigitalLocker\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\DefaultWsdlHelpGenerator.aspx	criticalupdate01.exe
File created	C:\Windows\inf\PNRPSvc\0409\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\PNRPSvc\0410\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\rdyboost\0409\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\4bfa36696bef033cf7e33b1a092c8a0f\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\diagnostics\system\Networking\fr-FR\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Globalization\MCT\MCT-CA\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\aspnet_state\0011\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.XmlSerializer\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\inf\Windows Workflow Foundation 3.0.0.0\040C\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Windows Balloon.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition.Registration\v4.0_4.0.0.0__b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\495f263cbca8e7d0462ee309a634e115\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\0a637affd530a4ee90f0ed36c3febc79\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\9744e094346545d417a938174608d0ad\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\AppPatch\Custom\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Workfffcbcd8#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_it_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\PLA\Reports\ja-JP\Report.System.Wireless.xml	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.UI\6.1.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data.Server\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4f68cd04686e5dc5a55070d112d44bdf\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.Services.Client.resources\3.5.0.0_es_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\v1.0.3705\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\UninstallSqlStateTemplate.sql	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\MUI\040C\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\PLA\Rules\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost.Resources\1.0.0.0_de_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\8b62ac3a8cfd55c530052c79253d25c8\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Calligraphy\Windows Print complete.wav	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\a94b0e3f1bf00abf7e3630e666aaf10a\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Boot\DVD\PCAT\it-IT\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Characters\Windows Battery Low.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.RuntimeUi.Intl\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.Resources\6.1.0.0_fr_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv14259fd9#\a0401c16e342af1d26406c93706acb15\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv43e0ae6e#\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v3.5\SQL\it\SqlPersistenceProviderSchema.sql	criticalupdate01.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx	criticalupdate01.exe
File created	C:\Windows\PLA\Rules\Rules.System.Wired.xml	criticalupdate01.exe
File created	C:\Windows\Media\Festival\Windows Exclamation.wav	criticalupdate01.exe
File created	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File opened for modification	C:\Windows\Panther\setuperr.log	criticalupdate01.exe
File created	C:\Windows\Globalization\MCT\MCT-ZA\Wallpaper\ZA-wp2.jpg	criticalupdate01.exe
File created	C:\Windows\inf\PERFLIB\0409\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\Media\Windows Recycle.wav	criticalupdate01.exe
File created	C:\Windows\Media\Cityscape\Windows Hardware Remove.wav	criticalupdate01.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\09ca6fe45ec9d8c535413b0dfa7d2075\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe
File created	C:\Windows\diagnostics\scheduled\Maintenance\ja-JP\DECRYPT_YOUR_FILES.HTML	criticalupdate01.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

criticalupdate01.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language criticalupdate01.exe
Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

criticalupdate01.exe

pid process

276 criticalupdate01.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

criticalupdate01.exe

description pid process

Token: SeDebugPrivilege 276 criticalupdate01.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	criticalupdate01.exe

pid	process
276	criticalupdate01.exe

description	pid	process
Token: SeDebugPrivilege	276	criticalupdate01.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

criticalupdate01.exe

description	pid	process	target process
PID 276 wrote to memory of 548	276	criticalupdate01.exe	WindowsUpdate.exe
PID 276 wrote to memory of 548	276	criticalupdate01.exe	WindowsUpdate.exe
PID 276 wrote to memory of 548	276	criticalupdate01.exe	WindowsUpdate.exe
PID 276 wrote to memory of 548	276	criticalupdate01.exe	WindowsUpdate.exe

C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe
"C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:276

C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
"C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
2⤵
- Executes dropped EXE
PID:548

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Filesize
1KB

MD5
b931b5ec14bf6062c9bd9aff9fa76580

SHA1
fe3b5e1c2209287cf1ffa6ddb5855c7ba860e20c

SHA256
526798b5e112c718c50dd628fd6ba7a3d110644a02531ce8d37de1c1d8a59303

SHA512
b552e150f66cfff5a35222f396d3deeab4cae137ac9529a34dee829d9c06d562d2c330a5721ed13218a8ce48136bbdfb70a4d053df9a634a774343bab89fa16d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
352B

MD5
dc5ed2737413bb3d02abbee5d7e9922c

SHA1
76481ab184a3d73cc2ea9c3220e3ab4a5a8140d8

SHA256
3851f1ed9c51d6cb5b4f3b629aac8c67b6483b4ee9710cfb26d9c1d16f80df7f

SHA512
8ac13ff6e62b6a347c8cb48465fde13eb7cbaa0030d7a1c7da1e498c7ea3a07f247ddedfec3364787db0cd83c5c8af8ca3cf75c79aa9b29ef6338f956cc1faca

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
224B

MD5
171f6e84d5fe7062626fbc1cdf3c0c9b

SHA1
dd973db9dd86ed9f8fd73d2b00a588edff464f8d

SHA256
1eb7cac9941711fb8cb570ed492ee530e73586e62df44397107212221e4ccb1d

SHA512
8c6dfc43ac68488e2f33179700b0212b47afb32540053cb436c9e33218de2ffc8071d3f42c0c50cff0d3c622d6da663adf6109e1550a1f1681bd3d1e0a29f791

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
30b519119caf98454351dc9893461424

SHA1
581ddb7921627b5ed429151bfdcfc95711e6b298

SHA256
317556bccff3de3d2b5db71848775c0e8c8874a26856836a0697ad3f635e40e7

SHA512
cca1a5ca7e9b412fc8b33912f7ac15f3e21dc7c386b2f8592e7af275c9e96d422fb21cb52db00638b21119b46abde9ca77c1b0195dba78c990508a880ea6248f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
b5fc98d37fb33218f7d79cb3d47c33d2

SHA1
7bff17e88e458c073aae1db5acc9504eb49bf3c0

SHA256
406263b58842fcdb4050c948e1014ee7e0a23d321ffcf6dfc1d15ccc980a7fc3

SHA512
4965e915158b344baf02acafbd5cab6b72cb4db8050968b53f3f142b46eef46237153b1c608e79f2b7bc00013ab89c7251be6c83382942f512b0ff1b329b3dc8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
1a19fec88a9ff3c86db432800709dda9

SHA1
df59d00af34ab932fb56ad7e9548ba89206d0886

SHA256
914c37fcc8d6f4cc55c561c52d53618ab49095d1db2dcb4cacbc682aa70fbb0f

SHA512
86db5be121d2b67969e8fa25ec4e1d44fef6b9a859ce3c2209ed4c837f7fcb610ed7951ac292d611a7f787e5944c2bb242d9e69ee064cc5c1d20c67a8fbf506c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
a221bed82282f55bbe5c3e16c5a6b44c

SHA1
5a72b5c471eab4b551738898aaf82621944033ff

SHA256
a54a67fb72025b66a8189a80325c88a2e731a8f1f401d713a9c062c712d81b9c

SHA512
10911d412a2ec8f1775a4363fda16f021e6c7ea3898178773f2b471fcbd149790dbad4111890c9f7b2c6bc020e91ae97ba25f7ce55d347abf2ab7a50ef5d0a03

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
112B

MD5
a258fb47e06f63b0aa275eaa9a5bb929

SHA1
81c77921956737cd7f0b629f665fab74ff622348

SHA256
17034e20db8f3a5b22a7cff54ddc0e4e7fd5867bd92583b665b1e8ceed6a3b3b

SHA512
af5e3e1ff7e8ac61de31a2c80122f178cf6ef5c92ccf8803aa43bbea85a0d27f1a350c42cc49c8230191df66de37063f9a461261e3cc9e06bbaa7c72b77c23a9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
43269e0f9b8f89bb1952a1ea7c05170a

SHA1
119ffdc0d4c2bb19183c7797c66d30cf532d0fad

SHA256
bb6119f5d26c9410c85df30e92cc2ce189d10aa4e43a43cf2cd36fba60e65fd7

SHA512
fcd2727029691910939b20b00d8bec206fe5ca1242d07863402e931caa681b979bff5839da2380dd1d67fe29f3d3925ac7a58992571ede503d95b74e328bcb51

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
425014fb3f886b7265208e3d4730cbbe

SHA1
1b1fc38dc08e26fa0825205528286b65b6f2b556

SHA256
b08662b0ea9c555221f4142d9599bcea6db55a770e7733a1c7d085951f83db1c

SHA512
a293454482fde0966a35b640e8901f9e5c36d9ce2a39be9974c16f45df4083b1dee4aae4931432e58e22ee37cfae3cc4787846eaa9f41c1bacbbbfd035ca248f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
26eff0ca55d10442c1d61776d406ee7c

SHA1
f93397d27ea634c12fa057233601b25b6c089ba0

SHA256
57231cc60c0b2fc69b69edb535d5406b459fcfddadd2f3599238c4088add9b94

SHA512
429263e9de2781870ab6419deede8e63c4423538ea0231b85b878edd55f97ceae1b809ebbc031557353781d95639bd7adb17a9a13193942d27fb96e96c4e033c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
ad25164e0bd9e92694983629837b6f8e

SHA1
347c73293a6650600679bd7e25a10385107f89fa

SHA256
9764be03c7df68d0d18955bb2f1b9297107c91fe790b877fc0df11588f334991

SHA512
6477ab9d41d7d152ff6c43f1470a2ce420a43c0b59b4a58cde08b05df5925035ba6f883da698f5eca1025c544461541e47bb9d3310e48d673164e78298352f81

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
17beabae597d06a1b3a20e42d319dc85

SHA1
233a239b72038bf19f108d0d21e832d2d0e10fba

SHA256
85d50b77b4bf9b34592e77bfa74d92e56e961185de532cae0cd649038c0447f9

SHA512
8396ae4faa86706235d0fb7e64c84ce78ee9430b383f4aa8bf1340e76489351d0d38f296a759a07674c3ea1872afbe6e540e740230d8a7a560cb7dcc64a74bbf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
5d757c000d1c13ad3e172b9d8d31c48d

SHA1
492d96a4fe422b882f82b2257515a8c51ad9a85f

SHA256
ced06cb1e91b08b7d42d8d635eb9a23b3f160d96357643f15784b5d681f04a67

SHA512
8e51e29d3b23a9484ff950bf0b9823a19a27979d14ed1ae91679d85ffe6eea77ea6a8107f283e0c3baf7eeb381eadc5371af08278881a2fd221c4f6326344155

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
0214a27c6e9418fb26479a2865775a75

SHA1
2b0f68012f73a3c6ff76f661a114e7ce7af6a2f6

SHA256
e320ce80a4ec33bffd7074a8dfdf5790806112c410608d7f440b82f304ef9d50

SHA512
a8d0f510eea781533b20cc902aecb551172c4f2153f1ef05c17da6cf00f7e67fff2c1cf4e076d3dced8b1a08ff9d49cfa5a7a9b17d76afa52573363825e1db6e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
81756292204976c021e35d615b6a425c

SHA1
3b82265e6c238d16374705b397951bc6ece7ec16

SHA256
cd11c9cec74da16acfc986a41dda9fc4d74a33df7597a6777f3236c5840f97ef

SHA512
d6057902b3b68a2245dc3b78372d5da2201ade096ac0927c8c8a6cfa21055452da35e6c8d7d6045cfaa2515f7884e4ab89b6c8577523b21e86e81a0d87622e29

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
7KB

MD5
5cb9723e7094dbfb1ae72b9c01a6af02

SHA1
66defd0ec18d4e2b8cd4bb88edd4071db409810d

SHA256
a17fceafcbbc7a15011e0d8f9fb7a5194e956b28c449f5c5a4b841b9da76bd16

SHA512
ceb9e039666e4ba6e40eda55e1375797ae1267787192a5fa5d7ced6154e9bf7e7f10c67ef1ee2c7fec3ccf5f4e58ff358f69b5087553c0030f040037a9b02514

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
336B

MD5
9411d8624593fbf5b84685af1c8f7aae

SHA1
cb19ce8376e661d186ecba4028aa2bd736d6dae6

SHA256
fc43bdf2eb0bc0432107ed690c8bc507c106dc409a16f02eb8684c486454638a

SHA512
7e368cf79130295aab1099a5e3203122045eea135fcc73c73234949f351039e626ac71c061ed07cdfc6045666f22fc43c851a1a7eaadc8d626e96f363436ba4d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif.fantom

Filesize
240B

MD5
239944013f1059537e133f5177300de7

SHA1
b0e30a490b490409a7accd0ac4430bcf5ae54415

SHA256
404961dfe097f63e4b9850191943176fbfcd4dc8e2a5218c96a44f64522620a2

SHA512
4f7c342601fbe3801b22957db517ee58a80b9c6974f2626ab078819fd495f9a436b8ee8284ea69f6bc06f5ec4fffea35281ded01043ca0870828b5c8df1d5e0c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
bbd1173fa2ddbe9583f3f1d64742b36d

SHA1
dd056f1b5b2a3cba4036c4bbdcdeecd033c0e453

SHA256
0e1c5638140225ffc42473ed9697cdd1e52e1061e35e8f9631f2392f408635e5

SHA512
d8bc21d96aa15e545cf677a74a7e8d2f1e4ee52b6eea394bfa6caeaf3a3eeebe722bf0935a60f9881f5aac336c85fa2cd14fcbb55b25686a87cbaaecb45671ff

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif.fantom

Filesize
816B

MD5
8952f3e863a78bd0dbc3229ad69f9aae

SHA1
219bffc02758248c7572ba01325ea58b41c41d78

SHA256
7d8a463e56d3cec641f7fb66a05e82b77d01b51ce95442c103289eee68f57eb1

SHA512
f4e7ba6bd26a1bcd636634171b0d178e32737b31cba5e21091df795a16785cb6508e9236ebc4b44839193c04b55e4db631057a22b9400821d4a81acf088946ba

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
110a6e8f1a3745dfa25d7c7f017e48ee

SHA1
a1c9d4f182d423d47e288d4b071af25d47bc1d05

SHA256
f7cbb7d7c07987792cfc88b0117b174830b9fda99c7cbb9e859f0cd1531b9cad

SHA512
38eabebde202891fb97622486f375e1eb81e4934ce10fdb2913aefeca803bf9ef29cfbb7b8d7b796f0c596d61473f278efcc0151dabc7df9068c3d7a0a0fd7dd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
0d5c7f0013b495f01203721b0536195d

SHA1
b9889814cce832295939a815ee649a99a7eb775d

SHA256
a839d7287120d887dd89969e7ca0586179d5b0d6473f479554a4b886a260ac91

SHA512
a07abb4caf824b2be819f526a92fd345d23d7689ba3c6a6d201917abd7f7fbf21cfde6438a36565dbc85d1388338aba4738f366e04d0eda43f5052c9bca0ffe2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
a268b8a197e83e2883556a0e2bd83f85

SHA1
214f0ddda6fcc2f2331f533bed64c63956dfa59e

SHA256
e1a524490f9e954f9a0a3bd4fd4401a97d1cd1eac5e366332afe2d8f5ae12dbf

SHA512
717c254ff6bfb7351440c3f7fe984a9a9c96bb511f55c83a76ca4e10b6385854e0cd69d4301d53390b8f166a5df4d3fdfca5c169c40e5f3a1ced6d789db06ab1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
896B

MD5
1d5f1afcb087d5516c663d71fff506a0

SHA1
6753666c6a4657e8bff9bd445c2011ecd372e65c

SHA256
e4c8a00ae2dce1bb65bbc4ec9030e6d889160422685cc09b10818650078585f6

SHA512
befb7fc718fb4184b3cdacc922c68d33db94a71d24171eebcd917df79c44780fb8e8e3132ae6467b6367885015d98a9e500e5f1c26a753bae6b9699c213ac790

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
864B

MD5
5444651da87fbc71ca4dd88702560db3

SHA1
86951115b6ad339f24720266abcef400b6e4cea8

SHA256
d7338b5d9c6887c2e8ffa98acb6e75174de64a2cb60da30b5d8c4d1baf7ca8d6

SHA512
2e2a64a2e51eb275aafdbbd3223b582f1ed8aab2e44e30289dc6d2d59f3e5afce2d7123dc781b1118afea654f07ae63ac88c666262e5f54a83fe58befabe78b5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
864B

MD5
e805af9af766a326193b789075b688f1

SHA1
33daf231be3eefe59e61aae56c93c8fc705d8cdf

SHA256
da395449953b99d487a7050f24cdcc067451e184ebd555af122a802d241f2b6f

SHA512
42dd032f635b3ae2a909d020d79f9695e5189109133fcbc62d5e820f338b0c7337ff14d58cc925ab3249914154bb979afcc80ea9b63607631b6e507c9a2cff71

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg.fantom

Filesize
5KB

MD5
98e03120c6346b1159862de4102eef65

SHA1
68dc6aa21a621317341e5f158309a0c03e831fe4

SHA256
d3edb44ae1e19f786f0627602ca15986a44714965a91f4214cfb26eb94d8c16f

SHA512
94fba767b76ecf9f82ff130507d7ccb8957ad8e8f832337cfca94ffadf6ee1374ec777359ea129db85cdf16830a3e6b118b4447870f1db95eb27d78d0a3776f9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
923e7c7c6c190851f4cc283270259d47

SHA1
935635555f8c6cee04619c0d76e533c38d7dd15c

SHA256
721f6bf96789cf1e87ac876bd1487768210e459eead573d9602755a47e18bc8b

SHA512
17838791129b95dce4aa72086942b1dbfd6a6a58cda54164d24d53a95ffcebfb0bf283956d5b653bc5977915b1051fa80cb83698af261760988060d22390af51

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
864B

MD5
78cd12402217249a9532fa367e8b19d8

SHA1
9ca8b5b6557218e898811a27d86cef14f17a6651

SHA256
c8a44a6d003305726aa965df5e2a5e76fb4daa594255eff17837ef4d0fd9e8f2

SHA512
c5cdf8b979b8fbc7e146a382c85063c1309306a0678bfe79aa4a62a9ee7152a31bfb3f6a3582822b3b106e51b1508c224f1fc5ddc305052fafaaaa77d4b26609

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
848B

MD5
e44bc82fd0425d3afab25fc8a9a8c4fd

SHA1
1acfa208294db359ea2c22c21ac7298633d9758b

SHA256
8d2b06bc043281f75808640a088ce13b18fac2e90bfaf5ba7ca07230e467fc2c

SHA512
d8f8eb7e9653792c4449503f929a56fc5e72a0100835d889696b81f397611ff5731962caab012f810896cdc12e45e9c494b26f39c621c5c68a92d21724e8b44b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
880B

MD5
88bc3da533ed664695491ce1ebeff172

SHA1
74edf61860cfe4225cd2dac653bd28b812e53f0c

SHA256
cd89fba7c2a80ab4344fe6e959b68508787dc16e09f2c276cb1f40963bf1a4c4

SHA512
28396c4121b0417a33c62b73587065982e458da69f74033f998592e609e1720f4ea68bcc3fcfb7117474879c822e9b994df7edec115c4a228628594d07740177

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
848B

MD5
a2ce4463786f770c4293b10499f15418

SHA1
6a05f2fbd065fb6774fec8f4de20de626d0ecfea

SHA256
3889fce47851477dd08397836a00631b57c41a200370a45cdfbba7286f3acc68

SHA512
45e51a41c3e888803242cfbf2e7997f10c5190839963c0ffda25f7659cf868099ac534431beddc36ff6eaee08f00cf35f0e7e3359805568b7239c617bc069ec8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
864B

MD5
86db9437ed86ae9a5914fc24751eab95

SHA1
36764e27f64fce69d4b41e97b15a01f60e61d5f2

SHA256
e188f4b1d29cfcb199c822b38a13e136bbb1e5aad80c0392eff9f332426d7212

SHA512
c8a632777829f648cf01784fee1610192183a4803c7ad3c7bb463bf9d77c8ea0278eaa6d2e7a9c9945d56130123a22f752a2d67f5ab86bc68ea5d42086f55283

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
864B

MD5
b49a6af7927834152636f985ad51d51e

SHA1
646450a1b7f31a5fd15c3c1ca8d3512ee5e170fa

SHA256
c0cae3f955f5b5dcf61ff789f594fe7a0a30fb17e69f083aa7a52161f2019a80

SHA512
63e070f7626b4e267485b347d11eb05a7a56f9094a1190aa08c0cf53caedcb480bfe2f9b6ba94947599444a023e730e0e193f22d456efea6e15498386a8a2b5b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
864B

MD5
5adce35a71d7b8c2432acbf117d85cb2

SHA1
f7058246d40a72e0deee5a386f4ba151b28d9ba9

SHA256
6c91cd7df557413e1842d814c968db28eed5296479f76b3a088cb4b1aac10bbe

SHA512
f351163111ebcf9da192e8234866c7486df8de795beef72b8e5dab5e8c02468f379b85b0cb9d4116dc4080c7150654c2cd7d19e5bb42bacee14f8f27985aa00c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
896B

MD5
3da95e60ce6b1841592a1424cace1a01

SHA1
e1b76275cb02f2bac1799ee34ee3dcc3a0e05732

SHA256
a8b8bd567d3fda6b17f184f703199667de680dc134589726c2bdf74c49b0d839

SHA512
ad86421f7cd85f8966c0128e475988ae1b1e8d4894156d7df90ba0c38c345b61bbdc18e0e11ac3194eca60d40ae9a38a0cfb776f5ede483c54d943324c8f249a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml

Filesize
247KB

MD5
d1b0c004e2befe79bb6e5a66879f9440

SHA1
7a6471f83de87ff9f283e86d19f7aeb9626b0352

SHA256
54d4dead8d87e75e2a16dfb518c8499e13aebe080b272eb55318a19d4263c889

SHA512
82768959077c67b16d9510a75f39e49ea4e2f0b1cf0c24ddee450831cadbfc170fa878adaeae51df006854946ec2c2ddae57fce7d30135eba5320f5fe0b0254a

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
4e57cf9321d46cc3b6833b20220a592b

SHA1
1d1ab1c946bad61d97ef4423b9fc799385489473

SHA256
8a77f8d88a7e14a2929ff40d47bfa36ae293347d6dc7db7fdca1654ccea71c8a

SHA512
b94742363968e2e2f7fe9eced103a2af5cf47149a079eeba858b55c00db59d19a6da55dbb34f1cc86ea9bdd82aa9cab6de5340fb017449de408fd5ee8e927d67

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
c2e206d36b2d6d6bdf9513f6a050f188

SHA1
7c87f623642daa46646ed64ef11c59cfcbb0f46e

SHA256
888593d461da41657d550d813c1697da7c67663ca3a2a43b8c58052106ecb2f4

SHA512
e7593336080e6dad59f91c07e12020dd2939921a9012d77f595dc3e439e625e63cb0abd8f8b33583513e38cfc236b8a6dfe405b9ea56a972e715453f2d533cd2

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
3773963a87cc607b21013062cd66064e

SHA1
0b86080b7ce14ea2c796a5782ad825da00594aec

SHA256
94d729356351529937be9310306150e4333340c8daac4fc5e2394d2f7b961adb

SHA512
3cf2ab4c630ea670aaad14a7b2775c62b33cda718d69d5e330e75d46953e609a16cf022a2115b4f50e011d7e877c308fe48a08c4558dc45f6d48ff866e00d8fb

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
92714fd8879063cb45d7da4aaad92ee4

SHA1
4b8cf7a603c1196ddeb65b49d175f3a5c6ab22b7

SHA256
044c0b5868462b30180d17f1394f80e267747bd35c6aec620ba0337e8860bc3e

SHA512
55301e3221a5a00296655cb42aa5982689b418ab25fa5b66a3f9269351e25a106f4724ac9f6973846dcd76d45ae5812148a798dadcdbc1e2b89eb3a02f6f41b1

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
a02d30339a7c03cff6463678707da373

SHA1
0ac7d6b7d7c1fda75af33695a3933d37610bcb65

SHA256
19ecece6b1717c07b5f6f4c9779094791a4b2eb6da6573badd53b0b93b1d0970

SHA512
7608d96cc78fa6f0acbd620adabe4bb32bd95c02af44b0b82680dea68d4981431f1881eca8ee81e97579464f1078c0fe23b7e43a20d1eb35cd7c62d5cbe056c9

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
275679d94770f8036fc96ea36c5c8a9f

SHA1
73e54517a9cc16f0a452216688b0c12119d795ad

SHA256
0b5511ab6bbd55c7231ff70036b4b8847c4ea5f075260d46a9d805911c0d6af7

SHA512
b8ac8f3dc3cf344ffe8a269cc3b8c818d3f8a9f1fbca7b146064467b695eb3ea0fc44950e6394e6221a2c257452eb1300451d8698a3922d821a7e04740c4d5db

Download Submit
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0002.001

Filesize
16B

MD5
63f71b1af11a9383c94e4bd6e3aee46a

SHA1
667e3854f91ed2236c374c2259e3cd2f1d2d08ea

SHA256
7521f9707ea284c1f640fd3a589880b355078c6ef13d90ee205ed7b6332872a2

SHA512
7b2e27eecce282886184bdfd62921ad5977876e3accf7b7d7afae983a671d8271164576e4305f22cd27cc6d5ad1bdb1f01f966ee2f293c485c8102d2f1855a9f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240903_051533888.html

Filesize
1.1MB

MD5
d5b3509e74be7b2deeaebf0d6d9d56d6

SHA1
8174df7ab8e404493f239e825a988e9c095a29ef

SHA256
b1cf4e0b71a413fa642360850296005e4c43a4c7a2cdd500f90a468480134f07

SHA512
c55261880a246e5f1ce7b44956e65f5bdd57b63a957a34ee3486e56380c1f3ba3081124c77766e8244bea18ab816ca75cfb006b3cc3baa56c7b2451ccd3a11d2

Download Submit
C:\Users\Admin\Documents\BlockFind.xlsx

Filesize
9KB

MD5
0f16838a49a73c37853759e266cb4d0a

SHA1
f5a394f4f55b6198eb92cf5d14edbb05b7406c5a

SHA256
b3ebaff7fa336e6db0e4bff017c13fbddf77ff242f97fd794f60ec6619147d48

SHA512
e93dbafaef131e583a75b56f8b48ab5c56c626c18709377c41564a5f9f8f9a5d988cd72e9760c761accdf31e6ceb26eeff44e1d312cca77693919133edc2c409

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_sml.gif

Filesize
64B

MD5
9466c90df21d0a51aa8fecea509468c1

SHA1
b699962367941fd9bde9866facee755f5e743d0c

SHA256
d14284b7022d9c95525c51a463985dedd67ff6ac19c34ebafca0ecd536038006

SHA512
8978565a261e69f1bcee99cfc9f6322a5d62f598399f889e87b893434a0e350628fc595d9696b04ed3e8b8d564c3018894383af109a58dce576e41737d28b223

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
80B

MD5
0b7c42763a4d78cd8a78d367f2e218dc

SHA1
7f856e917a1d667634ba8552f53dbdeb0d30a3cb

SHA256
1c510ffc333b8b4aca9dc9b848b9af72c7ba457387518666d69d436d17632cc7

SHA512
2a2695930bc3da41ce464aafed1dcc76832fd972b8298dc6f9fe5615d975fd56dd5fd50d25e0033174528e994967b786475ae35140ef3fe88852e0543b9b02a3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
80B

MD5
bc8dc94b06b77c5695cb5de29da0ccb9

SHA1
e666a3a50502c340a8be6fdc56eb8e2c453d59a6

SHA256
94d198e1b5300dba1ae086e78c7fdd65f728183ae6b30a82659978492a7660c5

SHA512
862ee0d0318c3f1596f59495d56ef583bd9bb42696566fe90a46380ffdeac749a3ccc21e2f94f7abb8e1611c959fd1cfc1d10dcb7c37e81d950a97064b08dacf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

Filesize
6KB

MD5
e3efa49ec50579484d62bfdccc4a1719

SHA1
34b1ef6e11bae0d1e875db8e8a3dc4a98dde7f9e

SHA256
879629d8bcfb8e4da358245084500a79e18a4a886037dbde80a467bad6796d15

SHA512
e267dcdb60d597aa3b19a6cff150ba47f4faa41023fc72f8a014100c2c2bf5ea7fae55e03af807a1b743317bbea4568e4f234b211e1a28ff9ad6433092a0c8c8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

Filesize
13KB

MD5
a849f0c060f6486b1cf4c385a7fba490

SHA1
676a9a668c8ed8a4d7acc2ec186c3958f4c62494

SHA256
28a25505b391c17aeb055fd6fbcf4016c663e905f84b230a3a36efae07b154e3

SHA512
7cf77a4970784b367de9700a5b9672f655fbc4e8c13108a64ee5732d3730594507d5fbd9be855324c5494584a30e573eb6a69854df26f90505aade98e4f9a35f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

Filesize
3KB

MD5
6387b72c914468013c57f9d193c8aed3

SHA1
11c95623af2bc05634abc91f0d5aeb07d458cf7f

SHA256
200033975bd40200973e0aadb7bd9945599d037e66850176745f4fef37db3b61

SHA512
8196ac4f0da1f568073cfd7778c462d64cf50c75323fcd2078444fef7a3eff71713370a0abe04236d875636cfeee94da8354b84c7752fc997ff89002d6535341

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

Filesize
6KB

MD5
17ce81c6e21a81f776456708def9eff2

SHA1
0af416946167f29fb5ada2b733cd5187abc451fd

SHA256
f34e10c690e0c21b0f294154142f4aea5b49d7bc1bcf9d8279cda3cdf860bb68

SHA512
6c93eaf5a173f3b7c2592690f28ced91436207bea522fe159870b04f4c93d2705a28dc52bcdb32a48a23136e9ff809c9e2d78b077e9d539bba5afb5ce0fce430

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

Filesize
10KB

MD5
564d6911ceca5cbf4348babcbddf30b5

SHA1
98733f13a7e6c335d7e38ceea3b6762f00c7e7d3

SHA256
4324dbc029a75e4152515e4896cff3db3b95cfccfd160037bf9c6c2d748eff60

SHA512
301d3c7c077a9f75c46893467e0115024a25cf3032de30532fe410aba093704cbfb920ff69344a5467094d18c9115959187fe3d41769bd6f762b5f402926c3a4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

Filesize
68KB

MD5
08ab7db71445521842e3de938187954a

SHA1
074e917b7fa43a7d43753776f9f345509a16b843

SHA256
559ea3c6196b7cc5a37a42f9ab67140a3b6d95d7fbf9fb252692068cce20bde9

SHA512
0bad3ea18245640723a5072224d3e398c280023f80060b81ce4e5a29d6054be3a4dad03739fd92587eeff8ea6ce8de558e7ec4237150c97d5db9053dbbabd57a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
5b9064d62fb75a44291d1deccbcd101d

SHA1
e5fa868784af2f0576bfbdc843906b754d62c606

SHA256
7db0990a36b175ea1249e9b78f8bcf0226c42381ee3d75134088e6e0b4aaa7be

SHA512
cce9a27112c89611423195ebf6438bce398d79d30fb0f343f3e4e2f4cb6b529b7d246448457b9acd20356dc0eb4684634484ac25d5eff675fa446f0d10334608

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
6250192570551bc0814e480c205cbc93

SHA1
99b4c23ddc75947b34834eafa33e55a52724de3b

SHA256
3e09006746d0ccbba127cdae1795a6c046d29aa3ebf6f15b9a225b38d9268685

SHA512
f409a7e5ede2d6d164c183a3d95d2b72a1957558fe7f1b2367d70d94c8534cca714affe8d7e9ec8283f593102257dca698391061c27120b2e228d1b8ae27d342

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
6df4acf9ffe60644c618abb6b0198795

SHA1
59e4c6823f56e578f197ad6019ca1df2632d24b9

SHA256
866207a9472d613166e111d656a09c6eb8a49131fd6ae7b720dc5dae48d50e08

SHA512
499b7a51a6df5e9adb92fd1016cc805770d00acd81ab7a7ffe72ca9ce997f74171f809c53a028925df1972ef84700007c8fc0be2c645669d15e1a7bab35b9f9a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
554bbc10b98a2efccb20599fac573545

SHA1
8c7b9475580e8dc06a5fcdf6c8b6a998a079495c

SHA256
8274aaa8f28056b86962232b1ea4e5d92d00f64a1f658959992880a61de8a441

SHA512
d732b51135addcc4d8c72ae375c4cb09d11230750cd1972203a874fa6fe001366ce1ec046659fb5848b9b8dfbf6a6863a5a88dfee00f74b309a23a1052037c5f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
713de2be3ef1e7a8a4ffb6b0817b85dc

SHA1
022a2fbe5839fcab15864381112e32e5d0a9000f

SHA256
5f8f0ba3893701c63a58eafdc26146cb045332c40685b4f5e2a3a410bab70f54

SHA512
31d6946eb8d2078e8885d71d12ab548e01130063fd53558b619ce397eb330f9efada15619eb7ec49e76c8df27d34e514261a674da59004b43b21403976a3d0f5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
06b868b133e727b89fe606fc9d7c4caf

SHA1
798f4f519b4db123e3c1b7949aa2c0b6a6240ab1

SHA256
5c5e7c7cc13ae40c9266a29a68ac5862e2855d509a611d21c50b056547006fb6

SHA512
ac33937611baec9e608b74e21491e486deea2fdbadb541d5a99ec37f695a16d5bb93e8389fd9251c3528c787385152bd544713c955f2973874c576f5164b6e71

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
daa253e5428e810d4dbdf848572f1f5b

SHA1
1e1b81bd40f480e0672f1a50677973a00bf201b7

SHA256
64e804c3904adbab5a62d277ba675c0b62a27329109f40b86c78d47adce05a24

SHA512
5f0883c2b0b41a4a3c83924ef8178ebb574c061b2730d66cc3e37a4a0e364b9ff5314fe880081b5e08b295159f89bf4969064b59d4c0eaaf3b56d1e42e65228e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
3effed56b22460d8c88d135075b7da8f

SHA1
cde7bf2e27f98177e197a746d145645fb744a081

SHA256
7ccc5e6adb5f1424a51749887f9472fccae39c7f2476051d5ba1b4b4cb8a74c2

SHA512
2726a46c706581ed6a5b3c25a35375ca49ce6199d9aaaf967a29eb45163b11aab12ec4430fb66ab53e4d7c71385537b401ccabb3b671e6d8dd8b7f9f84ad997c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
5b3627a671e82a4a09becdad4d12a4f7

SHA1
46ad167d54e7839cf36618890c2ea464758a0e18

SHA256
1afc10f707a953b0c9e171ecf8fe682ba8925fe57679a2b660fd4786999dd892

SHA512
3f3c18812d8d695cff98536d8af92d0532b757e9e221952e6e7ed6451bf416f589eeb0980e8e4bb56e3d5a9b47d7fbe3bba1eb9486166402b2a7fd05aeeb08ea

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
d723c0b26beb28eeb717a7b66bc23f81

SHA1
eafcdbb2f098501546b8002280280761bdfbbcce

SHA256
33ecd010e0592e96cc28fc124116f46e31a3f3569ff50f354df5881b92dc0b06

SHA512
01ccb56bfa4d6281883ac35465ea7b5a022b8eed4f65c5b850788f81b8bdf6e077541fc14d4ebbb172f5e117a3109264f3305a12a24b7ef6b0b96bbcdf54f3bb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
ce9bc3ada8fb4a2d1c690a6a35ed79f2

SHA1
c92bcf6cc99d73a2afff1bfe12fce0fd40f46eae

SHA256
3518625f5f3b2a158bf0ccdbb4cda5c902e8469eee6765b343a1bd06cd1e6544

SHA512
003cfaed2371ebe62dfaa8cdbe64e093a874eaf5391449d4f79e6d9f1d474cbd9eeced9916179acc9de7c0daf9e507b557131a76809659dfef9cae9f2a8a6b21

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
d99b16d6fb3b59db9a483570085994d7

SHA1
6dabaf7a79471e22bf26147fda66e9b3f2ee1773

SHA256
33354fcc8d965d309ebf837972e87fb7b0616768d5cacbc619b00ee5a30c8a61

SHA512
1de5722d63646c49506f64a0c56aceecd96e19de8c4a30159690942dacaa15ac67842d9263e43f02f683a9cd3077ae9abe42cf258335399ba6e416d6e9f6a159

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
2961e5b5f0ea73b5970ecde7e575c7ff

SHA1
b59151bc3fc2079ff38011f01ec56ebfe04d6a42

SHA256
c939c7902b0c02b9816bb87e153bdae91feae4e6ec12b92afb4fa34f2154deac

SHA512
8e2c79b35438823ad3c346d2d8772e43b9c5b1f2b3348229880186f9fcc9acc2a4406f8693f0c4b4e375b1c53726e0558eb16acda5b57c153370934548f2cc03

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
48e3e08bab195679a7080fbd2cb2ac3b

SHA1
a91a719180fd3bdf121cf317e7de75b6a64d2de3

SHA256
0619a38744e4e30d99fe48b433f422510ac659f7255d67f806c828a7095c5b3d

SHA512
1e345799ed403da16502a0f625879adc9b2af66401159db0dbf456d640a5e53c4aad341bc33208d5538863bff6365888851fbedddd6b19a502dd5e36a3ae7fca

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
8d6bd2aea1d1ec648d34dc0b3565ef41

SHA1
67e189bc1e05edc07ad64fee9b3eeaa4106a164e

SHA256
0363eae04d96331f4e64755b5ce62c39a21ddd7cd47aa72349e7e05ff2855716

SHA512
f0e68d0e34d3dab399ba7f03410878d0cf1a48cba93d99e710679024bf2003620a66a9b74cbac8bf5a5cafd6ceddad347991310321eadbb3307718130e9bbd0f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
a1e10a5a2cc87f3c8c8de08e17469283

SHA1
6fa99a4e172679c475a68358644928d488ce08e6

SHA256
69ca0ea2f229499b28cd3c3c5a0d6e62700281f11e71deaf60fc00205ca00c41

SHA512
b94078909c4807a8acc7393b19b764dcc8cfa28cccebde816c53ba6881a6a37708c0103ebbff35e87d0c7dcd6711eee775b53c3907ad4655c7973df92253754b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

Filesize
3KB

MD5
b0333a3824e9c87fc1168135f86039d0

SHA1
7c6a9828e521352ec4072a5fe7214fd9100a0a5d

SHA256
b49b6494aed9de0ffc1dd87898cc7deeab08f983fd9d9c56b9d4d01732c0026c

SHA512
99d3815db25eae4ac361388b8cb48b13c8d0861371f8675817cc5b131fd6671bd8f36d40c32bad0db015beddd64eb4e33e143fe5770c091ce15d49d995800497

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

Filesize
2KB

MD5
503c2baaf60866f3909536cd38a772f6

SHA1
f31570516c6cd0a2f695da7cafc1a27496e1f3a2

SHA256
15c29c75a1933a730f1641f980af6753d1343f641e27c8a024c902917e319226

SHA512
c7f76bb34ac557d6bac72efffd26c9d1f10efc28da5bb4a48b8e641a1c40151298ef87ed2a642e5d777fc78f3bf89ff0ab9378e6635fc7562702a1f0be946aa2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

Filesize
14KB

MD5
1930e2179f280b2962fc71ac2d540ff2

SHA1
5aa93bff858be781cb4401d3bdaac9a1794bc249

SHA256
36b9c0b22712f99d6f984faa592832cf13496c053b5167db99750903091ba0a2

SHA512
1fe3e4426a48e931ad8130ecf9b3888f4a7ef27a3b9acb72898c5bd9dc1dcccfcf795b518a2908529bc38deeff8528db32019222ca9a42bec6a5f4e32fcaa6f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

Filesize
320B

MD5
17db63a69da600edc21ac3dc48136c7d

SHA1
1128f7b56f99852ff9c5494e7b1d9dc0351aa317

SHA256
5f8aa717f1fcb4777bb2d5629f436198ba5ebfc4aac1294020080a31782ea249

SHA512
db52c51f1c3b4388766f9606e4fff41abfebe4e2c90c2cb5a99dd18bdc55f8d11005d6bc0d7a240c1007f8e637bea734615f91f01d3478b951c133d2cf8ab174

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
166f011be9f36d4dbed5b0f8944d1864

SHA1
9d209b89a4a3cc471cf5af50c678a772625c6681

SHA256
981760272be56ec2fa4b6873ad00509dcda0b228d3c74c067fc9201e0da1c7b9

SHA512
9475d765855d279a57a1dacf593f19733ed3330e88957091a19a909dbcdbe7ec23a2a63755fff9140073e3d193934c227646dd977112d49eb297e71f8155ce0c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
c354929b7ab3c119d68e8c4c2d963c12

SHA1
f6e842470ca7aee6f0cd2b24850176e7fc487463

SHA256
4e4b018ef4981fe5795fa0c6a1259d7fd9676d33cf7f5ca8c97dc950e0cf67ee

SHA512
e4b8dd7ce177fc74a9c617a7776bb5c257e0bbdb3ed1ce43f65e511fc8e397fece9aded8fbc451410cc8609f56614c4556c286c7a51c80409787d994f389f85f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
960B

MD5
d5cdf9a2e47efae2201328e9fd21ef71

SHA1
d91914493314c8892ddc2e98a09a32f283a3e57a

SHA256
86135805382937158583fde60ab89ded1070bf441a4a1fb1e3c5efdf731244f5

SHA512
ad755e2e8040138287b67856e9c8b080e907db03a04a0572f108b626a84862d241873ca19cdd61de01551e335699c2f53d50da30bd1ca95d0d2ecff2b02fc473

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
128B

MD5
e979cb780816e5b20de29afa6c655175

SHA1
5380e5e6c22f1568f571f8c86e8150b137250352

SHA256
57b85e340b7e0ed3a1523cabfa7fb7a77dfab313ff0a550d7b29c915f22bc613

SHA512
3aba632c2439a7e1a56abf4f0af1fe915c39aba270ce8e78bc713c6a747c44963aa4cccda7ad51d25614c53d288848f93f31ab38127ca138b76eb4a7945387b5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
a33a7d7dfa059d50cfbaa23f08c80982

SHA1
ebae2783b280d9da294ea8fb38032d5899480ca6

SHA256
753b66a4a3ea493375c9b8f51960a23dd6f38dd1d0f4b069365838a7317ca053

SHA512
e7b795d3c8a3f1ab6bdd67d4d08919fa873c038e1ddbddfebfb926a8497fb9115dbc066fe69b758c363a641bf2926536d4fd6e025e9c5753f0a2c2a29d9479b1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
9939bec14e319abae8942cb0752a719e

SHA1
8636a51f6eef17ff47c3e901d130c4781544fd2f

SHA256
3545f1fb57303837ecab65bfd3844b10b58545fa6cde0f125982d8601e632448

SHA512
99158c850e6866e3bd0f51c1eca8a7f94a4d9ea46bc9aaa68148ee26a9685d493d96759c8d9b638678c9f4d8f1a6e4a81e8e044653920ead0385498f4ac47322

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
64B

MD5
aa2ec1d7aa9be576bea9185d7a8ed658

SHA1
47522f2a9b216bd4a3bbdf08643b2705f9cb3cdf

SHA256
59ae9c2e92d37a1bddb513e39268dc8c8eea25ea24a4d4650b24d602085e68d5

SHA512
431217649ef310a62f0a5a83adc46bf5a395847cda231983b28cbe817e4d34e70f39b14ee6004417eb3c3b93d96edbfb8733ed463ca7940e1a8605fa1eff74c9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
928B

MD5
9024058cd52ef3f3b4806d320beecad0

SHA1
ea7ad7a49e91e01dcb3d08ca2e2e64da2b3918e2

SHA256
0e161e24e8fa89902665b0374a5aba6c30beff36b5d0d35e40352c3cefb54df4

SHA512
85aa747c97aa105d2e498b46eafe13eafa59724809c2e014a94d574501ffb997a5b707cddde106663520776b9c0b7ccbb4d4415a96418320cb41a7637f297929

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
96B

MD5
aaf60d92dd3af610fbd91f80df7646d3

SHA1
943f2f4ad64a76cc3994fffacc43cb982b4bb5b9

SHA256
13d4f7ab8845de5c3a014e026ce3d03e046252bd219c36f434273af25317c1af

SHA512
2427d55d6067e1eb20be86234c40f17dfe546d25e6cd0059119cb896e9ea1ef6915281da17b53d738059ca6546d5d32d2159057f881a66ce1c7f444df11077e8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
96B

MD5
7fe31956ceca7860309694aaa1352849

SHA1
d3a157c281fc669c89b1434e7ad9d4d398c5c6f5

SHA256
9681a5f7dfe38f1b61dbc23244fcb09669a58a63ffcc13613fb55a2d41cfcb75

SHA512
f3102d342214f261d196173555d84a92021e614ecc4f4e1ac04a7645e0a6f02faaba7f3d0d20e65e3c38236a6a16de13e5444bbfee744e7ea26a23cd111c0ee8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
336B

MD5
beba1dc96d7bcabdc8d5b9e29a3e5830

SHA1
dddc249891a645e9ac04cb4fb46dcc7911cbb9d9

SHA256
ba04b0abec3e846b3c7b458d04acc3b45830b56dfe4b3464edee89753fb5fb61

SHA512
9fba1881be60d39e76da20b19bf21b64bb1f03f7015ba281a0a6d01ae791086728083372344c128b8760ef0cf366fd46e302faddfce2645a13b8aeb747e528d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
5e384f2e9e6f9e86925cae2076e72460

SHA1
ba7dece82bdaff228f669aa2ddb983902b4a2d7a

SHA256
d3e84014b8da70a9765fcbd3c883e2a7711f324c66ade8f42328d0d4620970e9

SHA512
74588219a5119831e6d5718a37cab5a92506d7a07039413aa5de9411122d45914bc9c157c6cf9fc203141aae77db271d7809ada421ba1153db28a6d8c1114e3b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
176B

MD5
0e7a2a2e3ea92df67ac31e0456718f26

SHA1
ae8f8a0f1308c68b411ee9d9505848218661781d

SHA256
ba75ec72616437b63f11a50f2a9deaa09042fffa10d3e4aa2b210be25bc3ae2e

SHA512
2395009b1f6d81f7f4523173cf181145251ea51699726cbfd93c2ea8de7c4da7247809b7ea99819bfd728074d096e17f8685593f265eadc2e8f73a1c79691fe7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
592B

MD5
79e11dec7633c3f27b0bded079b7b613

SHA1
a14f6fb798ead75fb49f373737e766e2299281ef

SHA256
1a1445766cc36736d9700a76279b82d261195af4ddd1c722279ac48bde21ecc0

SHA512
a59259d01f0079daa2c8dfc81fcce7dcca512dd217594d814702ce8a29c87cdc6834464eaf6558075ed96a845b2750612a592f4d66834535ec9a3ec5fabf34c1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
128B

MD5
8dea05452b4fcf8ec1b1289d31f45e15

SHA1
689890c73d5d46e1e93fcd6dd34162fecefb7c3e

SHA256
b9d96c66fc8e8ab7a521efb05de10b42045bd16c617115df79879de816e093b3

SHA512
55c6da4412df9efa5ba5ceca0f753807eed4e453bcc643aa377e145cbcbe408a65bf67b46416ae22de74acbc98db554603a358ecb0d83eea819a2a4dcaf819b4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
2d0059f1cad91cce9e3ca5573dbda811

SHA1
81bff164983a0d5bed8b4e3149ef6c22bbd00028

SHA256
ca325e7bd4405e07431bac16273f2dc1ba7c56823d1f6184432712dbf1e61b28

SHA512
abf79e1b21a4cd4c1da1ea45ca8a19e13af6b35f0ecf023104ebb5afdae1c8a65c48999768927e4766fad3f6dc9b0e18fdac70f152ac462a1b0752ead1ce2ce3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
896B

MD5
e1cb762fed409b69eb03ccda0a75b8a2

SHA1
aa88acfcadfd736f7678353cbdbe77c2e6cd24a4

SHA256
48df1c57601a932109a83cce30e741d85537e646dbe0cefc46c2d2ebf3f322aa

SHA512
926e683166624fca2bc52c15593ce53471ef6342c30115bed5a4b02cbae193b0784043dc6b038c977b98426105417a73cb9c959e752b67c10032627eb139cb82

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

Filesize
12KB

MD5
fe785411a3f91d06d0159451eaf86f5e

SHA1
c93515b0353d17617d9fd532e5d33d6b05641f15

SHA256
7e84193834ec1d6c92758e8b75e1c6893476006abdc53126e55cd76fe43fc730

SHA512
17260803dc2c31d912e029b867cbff5db286c3a09797adc724607feacd2339f0d3717d1e94e7ebbc8b94d3013b3579d110d92f9cf87f82ee362a96f6f493b50c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

Filesize
9KB

MD5
0f94de7317412816cd2e0cb0ed14f3c8

SHA1
6dd28025432ff468612a7904e279c10f8ee723bb

SHA256
0a70206808b9484438f171ecbe0cefdaef9274a45d7560a312b6454ad0cbda84

SHA512
b2e95e7a4d679f468e8d61cc0aa5a59a4caa8303c81101012b78d842369313143ae4a00e9d8663aa130f323af40e3ceb207129325dc4445faf09ce6604f23ab6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

Filesize
9KB

MD5
6270a9264802b669b552960bca5c2423

SHA1
1698d3b793de01b137dd997303afd0f5490de024

SHA256
86da8a5fa5a0bf594b4afcbf2d4033147a779dbacc028893ddfb9a1fa42f099a

SHA512
2e4e06c50d2c307024d80705a53773b3cca5f98cc0812818855050dc170361eba1b6991e2d64cb17116d5480461ac45ec8130a3ef5810e3ef37c974c510f5f0d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

Filesize
2KB

MD5
506434e3ed592134d1c52e592ec0dc47

SHA1
72e5ff4f71562f88715a86866f3f1b1f96737533

SHA256
6d05a281501987744f44fd9552f1066fbfa11bc41a8120a15f97130abe1ae20c

SHA512
0ce9f1095775995178ed284a2a5ae291a43e15ae39cf1a05ed1975fade01dace29d375d0eda9f4514c92e6587f7a6157d2fe3893dc67df95bc2332e07221d709

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

Filesize
10KB

MD5
5c18bf49b2916ea3e300d8dd32093430

SHA1
47059c495688afe251155c064136d6cf4a76fc96

SHA256
b8302b498f907252497cd370b8171c20e6fdf9347148c095e2f31127375bf0aa

SHA512
7e4a3c66976b1ecc285fa444b0c9179c9d12cb80d3b23e4c7e9aca43a94b871cf62bc9e4c44444a2becbbbc4f3af927d00b23fc91d7cd85564a73783896af889

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

Filesize
21KB

MD5
e64917f64d7ef97d4139e0dfa40459d7

SHA1
f93f3c18b6cf5239117847a85809d57094c35abb

SHA256
151f4721502e5b1b042557b0712614c23d0eac5646adbf491641eea82040c8ee

SHA512
efbda82de4f6dd33ef6f861b04d006f39315c6da3ed33050c7709f46879e8f734c67d2a213388442df0b47e02690ab8f22938fa504b1bb3cd20f16f7043d8b44

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

Filesize
11KB

MD5
72ef2b989de133697fdc17b7fe0a8dce

SHA1
68f3f91afc010adc641f59895b2193ce8ca9d3d7

SHA256
aaef3ba01264683b339468063991b979ef84866973e2fb2f3065815644a04ce9

SHA512
8dd38006fb7300133b2f8d316e93ff96b95ff28d4ea01c85801878163c95483a5a2d419df6a741926674db818828d8003fe29cc7e1b36837678d749b13a91d7a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

Filesize
10KB

MD5
40faf09567222c8846d4ea1b337e1674

SHA1
0c47e225cd18e27312a10aa054dd4cc9faf4fbc3

SHA256
10d058c44fb4f05875ae7945e22595c8340980cb29f644ea055892f77e6a95c9

SHA512
2ee142309901a44021f4913d2f03486ceaf32d866509ad5ca66d3c2d316e366046908f6a83f5ecaa354e4c64ae4e2d7513d91b02105bcbf39a91dff07214652f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

Filesize
2KB

MD5
a66552a4dbdc5782263eff83e3535e48

SHA1
8ca36cfac88f05ed43016fde49cf00361afe9cda

SHA256
4cc0839c1e7af7a036e81fdaa7fbccab718ec32f14e761b30c7cf741300080c2

SHA512
c9e89b72ea3c07111ce8383cca56f6b23fa9fe82978819ba74e995a2f7d6a4da8bb78af737dde8150db65067cd51339f6529444774ea11d1cf359cb5206aba9d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

Filesize
7KB

MD5
67e1a2dc36d28eccb8f7d4baec5b1e7d

SHA1
aef4114f66216a8356f8afecb5de4507f572f755

SHA256
c2381caccb97e280df46b2600257360046f47184eb37a3569350964acfc30f26

SHA512
7de7b51576447b47460f655f6b3b77ce787116acfb1ebe5261290b636ca7919f4422d041309ce5dffa4ac968ace646946f2d4267f1e11099b87391ab77250631

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

Filesize
272B

MD5
cea91559c258652f868ab09d943db632

SHA1
57a9a68442aa24c72c003ebb194ff6dfb7e05fd2

SHA256
7b2cb43c55389a8c19be78c1f8e4c60c9b21f9c703cd8ead4112720c684f3996

SHA512
35fa1b532acb9805abb07383d758da91b78eed6bdd35d6bec3fe7d472bcb009e297b229759db071b5628d62a7eab96b9bf6092ef71bf372cc94d1763ac0f075f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

Filesize
496B

MD5
eb4c3cc7800c8c58b017351078fba545

SHA1
cb9a2d8a14ae0b90ee4373291f7c43129b328ff9

SHA256
ecbad0140f00634b04b0efbdc393fdb24933816cc302cdbcecb874d10e18d7f6

SHA512
f0f7f6ce39ff3604a83e5380b30df386b7235a463e1b9fef252706dbfdfcea35cc4148e32d453f9a359caada1bf452947fa2cc1660f05a12505a18d34a653a78

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

Filesize
24KB

MD5
ee14d1745caac0f277d696b3eb58835f

SHA1
bab7c98ae47211fe9ef7f3f08d8371989297075d

SHA256
872bc056fdd7f1a33cca9bd460ec7fa89138cd7cd72c1ccf96550ea22000a842

SHA512
2c6aac191f0186d5e7434dcb8be2dd22201b5f8ebf21e7d3543340b952c62d332a034abc09010774d66e30fc7754a6442dbd3bb4b5a364a5f3d6613e67292796

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

Filesize
1KB

MD5
e9204bfcabe8a2b90adf74937a9a79b9

SHA1
fe898eb91382f5f5eb0063e9592b3aa625b51a74

SHA256
eb85b13c8d5eee408579433ff12f2aea2685c5f4f4a481fa805fe2637cbf4523

SHA512
8397c230cab3225be3a5adc345a23915afdcaad7659b6672531a1265688befb1ab71de0370c4bd19076a88db0c8582b51d8491238db3a34388aaba116cdaf568

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security.aspx

Filesize
9KB

MD5
e83bc4379e709aa8d60da1a8d7949563

SHA1
41181d690fc5f2bd8db24b98ffd2b0e0b0ebb240

SHA256
329c902ba18c01296173da6dbf8def031e24bfccdaff870d63ede2a85b39c259

SHA512
e51ec9598720c25b4452850928ebbb93854edc02e08d87c4755859123dc8b3bdd875d41d326c08a349e21ede814506e1ebe5bbd4f16afead49aa464f43c7c1a6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx

Filesize
1KB

MD5
ab7c124aa4cc2fd909790bec0c6ffd83

SHA1
e52dde209e2de9068741d68d173c68caa984df34

SHA256
ff3ce5bed2eb817f0c8f4597c805e2b667138d9e452b0aba4a48bf19bc866a93

SHA512
23bce5ec10f10f0f0d8bb9417638d92ea3d3056d75c1bec7ca24f921d90ccbf643976ba3a30aeafd5fb0e68697e6b8a3ea4f53ebb50133f447fdca41e5fdc87e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

Filesize
2KB

MD5
42881e66fb855645eff5b6dd6a7ec470

SHA1
27de9f7e368697e457b4347eec42d4c669090c87

SHA256
e664abb281de884f20e4215549967a569b6072cc5b3e3defefa11259fd6bc776

SHA512
26fe31a3413200d0305353ea631632e574a861732812c2d3bf2385c4e1e800a607c90b63c5fafc274c69cf5e4a07f33b3cd000f1c86b0cf123147a8547da4e53

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx

Filesize
4KB

MD5
a81bbb96db4459812deba21b875dbff2

SHA1
95df0cf9c9e4a4d6c923e93168eb8eabfc0f1211

SHA256
983326516c50d0330a4671e2bc76dda7bca04f224d9d250264fe4c4283fe8892

SHA512
26cc26b8330723bda15ffdf2b655fd4494a425ae5ff4f2a6019c9a12044e338efe4f14027baaae997b72182ed3858692da2f4e7ab21577eb371157f5e1ad30e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\error.aspx

Filesize
6KB

MD5
d1e7821cbf92f9d50441af785f24b91b

SHA1
46d896e578d054f2fe19f08a3aefc794dd110e32

SHA256
5cc2aa2c5a4f94aeca7728e3d8a16f9a3453ef712db991f4e6eea09593be706b

SHA512
a0ea80b1c18bf74f7f229df09200f9dbd91b81ff06d9afe0d87543889d9179c963956be64117829a59252a0c80f7d304e9265b8cd6485c04ea125058334b73c3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx

Filesize
1KB

MD5
77f4deb40f714a4b559892f9ab1a0e5f

SHA1
a2c213f3191b3ac0da35dcf1c556b9f9b841ee8b

SHA256
684da59f167b0a3a9ca179d06b9c5ad0210f7ea5cbb3c369154a2ab02a4ec566

SHA512
7b8854780a2ae44a1bb066008e675e4976a7c486aa5f1d49df78deaeb1b29785ce616eeedd6a228f5ad3ead41cb7d07304255ce791c5589c2c05c00aa7403370

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx

Filesize
752B

MD5
2d57deec7d169f5f0d064b923c690ce5

SHA1
290b666320b62c9129584f12c084548f6c96566f

SHA256
e2872ee052379bbdc2284c83a9a417ac8059d83417d00ccfacef19d0f95be480

SHA512
97823682b799cbc5d79743cf63c86eb26d6e420b0074f1b35c04cd41109842c44dbdae139a1dc90899dbd5a135307958ef8d4803ea72978070db25de382c324c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx

Filesize
1KB

MD5
d47a82b57e63a0d495423939a1d43763

SHA1
e4dc8596103bae8044c5867aa90b255b70ee39c9

SHA256
d2125dd56aaf85bd181241c17eb133b8dda3245264bf641b45c2ab54eb7a946a

SHA512
fd0ab78a98e606b1819911c4edb9855feb3641a36ad1082e786558950f5402b2f272395ebdf0ab906d95ad5297b3c99f3cb7514f8dc8cb426f88185924d509e9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\navigationBar.ascx

Filesize
8KB

MD5
b115828cd7192161f7040e6ce5f44bf8

SHA1
3a0741f0d0155d9d092d8f492f53f37ab1674339

SHA256
caf7b396c1df708c2cc68618141a3193733ed14fe7fff3e8ea024c2aabab34ca

SHA512
eb96931fb438bc0d3e40ddccab90da7be42ca744d67468fbc72ae0841737f9eb7d80d08ac1733c10337606106bef06c0e3f53c6011c285e31c00941f4123eed2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
91b98ed61918c6b2ff5a901adee13e45

SHA1
165e6de144ac1c730ec691c69a8c6e18e4c8aee6

SHA256
934e61da11cfe1f485f0359bece3b43b362c59ddc8b7d0dd84ec86544a0cbf0e

SHA512
36ba604c2b570fac35ce46df3b5e502684698cb06842e6d3d6b88449647ef526c4774f524e89650fb57cd700293954956d4db08779579a849a3f8eb6dce31f0f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
38a900e2bb78f19304823fe4d455eef2

SHA1
56728db8d5b1df9a6624eae5fe782b81535152c0

SHA256
c520e42a0dd38676c17416be8216b3b4fa7f45c506516180e5e300875515ee8f

SHA512
5c17a25437ddd65812c973d964e7bda35bbec8686dad05c18d39fa3554064c827fefc85885f6449ba8a18a39d7ee835d56d8569a3ccdbccd8e4712d91068c36e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
e27cbab25f5f1d5d370212852eb17e65

SHA1
c837cafcc4cdf9017e3912bf3d81523380e92170

SHA256
cfe5d49afb2c994d179d66fb371978163600d1f3fa44db16acd03140ad420385

SHA512
491a32c862397ffb451006f86843dfb2b99d5a9ea30f93f81e4a46ab93c20576707154dc778d34ff77e5d19496d1ec179ecbfa78f8c691344233b6084d573d70

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
0bc4774a7e646487408ef2012670f6cd

SHA1
d5eeeeaeac578ca307b813247f2806653ca75140

SHA256
8c49722665a35b06fcc9f35e61ac0374f87d8c124afc9b5837bd1fb0f0355b9f

SHA512
e308bb01b5a1bb4f22ba32234b16c82c30fc17e0e8ffcd38586c5edc76c1fc3df6272d4e5f9f3872b9ac8f089f8776f075d6cca99cb778df158d744c1f737126

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
d42005e79085e25353dfbf67f616188d

SHA1
b0a8ec11314976292654777d035b084dc510ef4d

SHA256
24d71423c8a5c52d99efaf1da9127821b5f4cbd8806e6cd5d541b226bdf1a8ae

SHA512
3c98672d4358574642a697126afaed7d7302aa16d95ad0b15d2c957aa3d661d4d82a1c5f2690e953d197f831e5703463133d692da7d57dbdbf598be7ae467b3d

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
bad457e189134c8420a02c4f41909c5a

SHA1
36249d554ea72ee3f1a165e4240cd12479dead01

SHA256
3efa7d2840b4a534f8bebc9261d23ed547302d67e2c1f84a165589b00f7e4389

SHA512
2d4e580ca48bfb2fbad2f5ec4b6201bc5665ce37230638319afb8f3922b472b9e1db35a5b91809c0c7e9ce26350113958f6024ab39df96e4ed738f0ff20c267d

Download Submit
\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe

Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
memory/276-43-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-53-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-132-0x00000000743AE000-0x00000000743AF000-memory.dmp

Filesize
4KB

Download
memory/276-7-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-9-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-0-0x00000000743AE000-0x00000000743AF000-memory.dmp

Filesize
4KB

Download
memory/276-134-0x00000000047B0000-0x00000000047BE000-memory.dmp

Filesize
56KB

Download
memory/276-13-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-15-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-17-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-19-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-21-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-25-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-27-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-29-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-31-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-33-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-35-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-37-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-41-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-1-0x0000000001F90000-0x0000000001FC2000-memory.dmp

Filesize
200KB

Download
memory/276-45-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-47-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-49-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-51-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-133-0x00000000743A0000-0x0000000074A8E000-memory.dmp

Filesize
6.9MB

Download
memory/276-57-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-131-0x00000000743A0000-0x0000000074A8E000-memory.dmp

Filesize
6.9MB

Download
memory/276-130-0x00000000743A0000-0x0000000074A8E000-memory.dmp

Filesize
6.9MB

Download
memory/276-59-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-61-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-63-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-65-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-67-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-69-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-11-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-55-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-39-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-23-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-6-0x0000000001FC0000-0x0000000001FEB000-memory.dmp

Filesize
172KB

Download
memory/276-5-0x00000000743A0000-0x0000000074A8E000-memory.dmp

Filesize
6.9MB

Download
memory/276-4-0x00000000743A0000-0x0000000074A8E000-memory.dmp

Filesize
6.9MB

Download
memory/276-3-0x00000000743A0000-0x0000000074A8E000-memory.dmp

Filesize
6.9MB

Download
memory/276-2-0x0000000001FC0000-0x0000000001FF2000-memory.dmp

Filesize
200KB

Download
memory/548-141-0x000007FEF55F3000-0x000007FEF55F4000-memory.dmp

Filesize
4KB

Download
memory/548-142-0x00000000002B0000-0x00000000002BC000-memory.dmp

Filesize
48KB

Download
memory/548-143-0x000007FEF55F0000-0x000007FEF5FDC000-memory.dmp

Filesize
9.9MB

Download
memory/548-616-0x000007FEF55F3000-0x000007FEF55F4000-memory.dmp

Filesize
4KB

Download
memory/548-639-0x000007FEF55F0000-0x000007FEF5FDC000-memory.dmp

Filesize
9.9MB

Download