fantom | b8c1f3abe165e1bab5616f0b739f1cb53c642c40ffc92f9f26aec1a73eaf0de2

Analysis

max time kernel
301s
max time network
129s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
20-11-2024 00:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Tear.exe
Size

261KB
MD5

7d80230df68ccba871815d68f016c282
SHA1

e10874c6108a26ceedfc84f50881824462b5b6b6
SHA256

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
SHA512

64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP

3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi

Score

10^/10

fantom discovery evasion ransomware spyware stealer

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>JrC8ycIm5St3j9mFvs5X9wUvmIFDhHXFCiGDbw6b0j7WX/LEMVYnWiSXRm9IOI+S4bxaTorMwTf6DCgqASo09TY4TW1Xoxb+e+iJYxkhyh8oqnUnHWUcEWR/ugw93fVUQuXwdxRjlwwh89KUUPUTZAw8AmwkRDReZTPOe3fiND0BuNjHgi8eCIb9BKH1kBUJfI74VQbMzAfxVo3WMSolegI2n/p2440MhbBTtDjfHApOHD4g0FWt8g7PMNXRp2+NQeIh2uClqHAKYZ2wEzszC2s8qJ3o+dXxCLQ4fzQnlEJQIRXaQuwW+5RhdYHkiZ2Zk/ALTbJ/29DE3S3/fH5wDg==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

[email protected]

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Fantom family
fantom
Renames multiple (3001) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
evasion

Drops file in Drivers directory 15 IoCs

Processes:

Tear.exe

description	ioc	process
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\ja-JP\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\es-ES\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\it-IT\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\de-DE\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	Tear.exe
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\fr-FR\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	Tear.exe

Drops startup file 2 IoCs

Processes:

Tear.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\DECRYPT_YOUR_FILES.HTML	Tear.exe

Executes dropped EXE 1 IoCs

Processes:

WindowsUpdate.exe

pid process

2588 WindowsUpdate.exe
Loads dropped DLL 1 IoCs

Processes:

Tear.exe

pid process

2748 Tear.exe
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

pid	process
2588	WindowsUpdate.exe

pid	process
2748	Tear.exe

Drops file in System32 directory 64 IoCs

Processes:

Tear.exe

description	ioc	process
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsupr3.inf_amd64_neutral_8416bd6e64a8e858\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpj4500t.xml	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnkm003.inf_amd64_neutral_48652cda3bb15180\Amd64\kom4650X.xml	Tear.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\_Default\ProfessionalN\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\HomePremiumN\license.rtf	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prngt004.inf_amd64_neutral_f5bf8a7ba9dfff55\Amd64\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx007.inf_amd64_neutral_0b796ee4978458e2\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wiasa002.inf_amd64_neutral_6429a42f1243419a\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\ProfessionalN\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\OEM\HomeBasic\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\net8185.inf_amd64_neutral_4ab014d645098f5f\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmod.inf_amd64_neutral_5766736c47b90fff\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00e.inf_amd64_neutral_651eeed98428be5e\Amd64\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnca00y.inf_amd64_neutral_64560c72e81f6ad7\Amd64\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\smc660u.xml	Tear.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\eval\HomePremiumN\license.rtf	Tear.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\_Default\EnterpriseE\license.rtf	Tear.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\Enterprise\license.rtf	Tear.exe
File created	C:\Windows\SysWOW64\de-DE\erofflps.txt	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\avc.inf_amd64_neutral_3ef33c750e6308ce\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmwhql0.inf_amd64_neutral_23613e3dd9401f10\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnle004.inf_amd64_neutral_beb9bf23b7202bff\Amd64\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\HomePremiumE\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\cs-CZ\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\EnterpriseE\license.rtf	Tear.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\_Default\Starter\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnbr006.inf_amd64_neutral_f156853def526447\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnin002.inf_amd64_neutral_977d40799168c216\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\_Default\HomeBasic\license.rtf	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\Enterprise\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\UltimateN\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\faxcn001.inf_amd64_neutral_d23021a1eb548156\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\net8187se64.inf_amd64_neutral_c239ab5d36a3b3e9\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnbr009.inf_amd64_neutral_fd2ac5b9c40bd465\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\eval\Enterprise\license.rtf	Tear.exe
File opened for modification	C:\Windows\SysWOW64\license.rtf	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\HomePremiumE\license.rtf	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\ProfessionalN\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmvv.inf_amd64_neutral_14cb440c800fe9fe\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpD5400t.xml	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp6000at.vdf	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnlx008.inf_amd64_neutral_75545721835fd863\Amd64\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\eval\UltimateE\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\OEM\ProfessionalN\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\eval\HomeBasicE\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmatm2k.inf_amd64_neutral_64a8fb018ead55a7\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpc7100t.xml	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnkm003.inf_amd64_neutral_48652cda3bb15180\Amd64\koc650X.xml	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnky004.inf_amd64_neutral_5db759db19acd3ae\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms002.inf_amd64_neutral_d834e48846616289\Amd64\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wd.inf_amd64_neutral_759109899b486d47\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\1394.inf_amd64_neutral_0b11366838152a76\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\StarterE\license.rtf	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpk7100t.xml	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wpdfs.inf_amd64_neutral_fc4ebadff3a40ae4\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\_Default\HomePremiumN\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmrock.inf_amd64_neutral_2ec26aaad7a9d419\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmbr002.inf_amd64_neutral_ce2134188ab21f59\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgl009.inf_amd64_neutral_bed6224f27f5c478\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmrock3.inf_amd64_neutral_9fdc5d710dd63e80\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnkm004.inf_amd64_neutral_d2aee42dc9c393ea\Amd64\DECRYPT_YOUR_FILES.HTML	Tear.exe

Drops file in Program Files directory 64 IoCs

Processes:

Tear.exe

description	ioc	process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv	Tear.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\background.png	Tear.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\TextConv\es-ES\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Program Files\7-Zip\Lang\lij.txt	Tear.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml	Tear.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv	Tear.exe
File created	C:\Program Files (x86)\Windows Media Player\Media Renderer\RenderingControl.xml	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\ja-JP\js\currency.js	Tear.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\gu.pak	Tear.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\StarterApplicationDescriptors.xml	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\js\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\TextConv\fr-FR\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Groove.gif	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\8.png	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.xml	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_win.css	Tear.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\js\ui.js	Tear.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\settings.html	Tear.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\js\localizedStrings.js	Tear.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupicons.jpg	Tear.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImages.jpg	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\fr-FR\js\calendar.js	Tear.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\US_export_policy.jar	Tear.exe
File created	C:\Program Files\Microsoft Office\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_up.png	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf	Tear.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Groove.gif	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\de-DE\currency.html	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_zh_4.4.0.v20140623020002.jar	Tear.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\ja-JP\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\init.js	Tear.exe
File created	C:\Program Files\DVD Maker\Shared\DissolveNoise.png	Tear.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\2.png	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_ring_docked.png	Tear.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_spellcheck.gif	Tear.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sk.pak	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_zh_4.4.0.v20140623020002.jar	Tear.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.ja_5.5.0.165303.jar	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_ja.jar	Tear.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_dot.png	Tear.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_m.png	Tear.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\validation.js	Tear.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml	Tear.exe
File created	C:\Program Files\Common Files\SpeechEngines\Microsoft\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png	Tear.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageSlice.gif	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-lookup.xml	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-api.jar	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicHandle.png	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs.xml	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-queries.xml	Tear.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\currency.html	Tear.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\ja-JP\settings.html	Tear.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_ja_4.4.0.v20140623020002.jar	Tear.exe

Drops file in Windows directory 64 IoCs

Processes:

Tear.exe

description	ioc	process
File created	C:\Windows\assembly\GAC_MSIL\System.WorkflowServices.resources\3.5.0.0_es_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Media\Cityscape\Windows Logon Sound.wav	Tear.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif	Tear.exe
File created	C:\Windows\PLA\Rules\ja-JP\Rules.System.Wired.xml	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations.resources\3.5.0.0_fr_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement.resources\3.5.0.0_fr_b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\MUI\0409\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\SrpUxSnapIn\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\diagnostics\scheduled\Maintenance\en-US\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx	Tear.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\addins\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4c0fa9d495ac562afcb136f3e9a87cb9\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\e998eeb1548ffd53b39dcde50d196ab7\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\PLA\Rules\fr-FR\Rules.System.Finale.xml	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\005810b5e7d8802575d07878997d434d\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Boot\DVD\PCAT\ja-JP\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Boot\PCAT\ja-JP\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\diagnostics\system\Power\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\a5947a9c77b884b9e06c54f38ff3c4d7\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\9744e094346545d417a938174608d0ad\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\inf\aspnet_state\000B\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\inf\.NET Data Provider for Oracle\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx	Tear.exe
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Comp7dda8007#\4233efbee3de5f702340b1088df01439\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Comp46f2b404#\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Globalization\MCT\MCT-AU\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Setup\State\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\SoftwareDistribution\AuthCabs\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Media\Characters\Windows Print complete.wav	Tear.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml	Tear.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security.aspx	Tear.exe
File created	C:\Windows\PLA\Rules\es-ES\Rules.System.Wireless.xml	Tear.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Services\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\ServiceProfiles\NetworkService\Favorites\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\policy.3.5.System.Data.SqlServerCe\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\TaskScheduler.Resources\6.1.0.0_en_31bf3856ad364e35\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\267f03b78a9514be8c1ebd278f03e3ff\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\a7bc3b42b60c8eaa28b5b62900c9027f\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\System.IdentityModel\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\inf\ESENT\0C0A\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Microsoft.NET\Framework\v3.0\WPF\de-DE\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.7.03062\2070\eula.rtf	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Web.Entity.Design\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Web.Mobile\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\naphlpr\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\Globalization\MCT\MCT-CA\Wallpaper\CA-wp1.jpg	Tear.exe
File created	C:\Windows\inf\aspnet_state\000C\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\ja\Tracking_Schema.sql	Tear.exe
File created	C:\Windows\assembly\GAC_MSIL\SMSvcHost\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\36ca2928b2191011831ab673861c6ac6\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\977f15ee0b5a52f67316e2bee95ab444\DECRYPT_YOUR_FILES.HTML	Tear.exe
File created	C:\Windows\diagnostics\system\WindowsMediaPlayerConfiguration\en-US\DECRYPT_YOUR_FILES.HTML	Tear.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\UninstallCommon.sql	Tear.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

Tear.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Tear.exe
Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

Tear.exe

pid process

2748 Tear.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

Tear.exe

description pid process

Token: SeDebugPrivilege 2748 Tear.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Tear.exe

pid	process
2748	Tear.exe

description	pid	process
Token: SeDebugPrivilege	2748	Tear.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

Tear.exe

description	pid	process	target process
PID 2748 wrote to memory of 2588	2748	Tear.exe	WindowsUpdate.exe
PID 2748 wrote to memory of 2588	2748	Tear.exe	WindowsUpdate.exe
PID 2748 wrote to memory of 2588	2748	Tear.exe	WindowsUpdate.exe
PID 2748 wrote to memory of 2588	2748	Tear.exe	WindowsUpdate.exe

C:\Users\Admin\AppData\Local\Temp\Tear.exe
"C:\Users\Admin\AppData\Local\Temp\Tear.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2748
- C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
  2⤵
  - Executes dropped EXE
  PID:2588

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\DECRYPT_YOUR_FILES.HTML

Filesize
1KB

MD5
80b73612163a4878713a0748c1e28fa7

SHA1
35d191ad6cddf5df8b09ca2fc452f17f50b66437

SHA256
f3aae1f7a12d8bd9cf7c75c53f86d2733f649f39c5957a3660054aa04172d689

SHA512
a7bfd196a25478e7fef4a41b35aadfc638956fe73922553fe2da4939457a3aa69a47478a5ede7949b3fea6c7473273787128f2bb9cbef28c401d069c888fc899

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

Filesize
352B

MD5
f7caa7aa65b01d078ed1e42ec95e5c2a

SHA1
ecd5ddd57697571001d744cbe032f1940f99e7e9

SHA256
3219600f1450dac189ee68228d0a996135da84b0a5654769e7baca74d1b6886c

SHA512
cd1c26eae5ae20ed3f8aeff2583ad7a6c6240a8b56c4c1a374128241faf73ece572f252b3aa1d7768434c6327367cd830125b0ee2fb2118a9df293d7479f2b10

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

Filesize
224B

MD5
5e331a87512984afdbe8f6d5d78bde80

SHA1
4105af4ebdb987988f762502427d83ee4f402ae9

SHA256
f61d78af6b3acea6fc9b52bd01913898ed7180672340c98b2abcd9f496766827

SHA512
0a9a0abf879edd64b30f917ed8474cc1b855a81e5b03dfc617afe035cfd792543949301e0f706ff1a92f6a40fa4e736a5b83b28d6b436cebe04d6af6892da9d2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
01bc95fe1e9908bf332db86d6ed94dee

SHA1
ea829c85f16ab32a1d85a66576772b8c69b8fb46

SHA256
95acb1b380548c9a5d228eed43d7fd65b60c679ce185b8070442db46bce0396e

SHA512
bf79c15030e843bd5d68d9edddb4f315d87a356facc923e6d763dd5adab2465f1ff529a124ee4db9bc325e4c82c2ed6a2c1ef99a83e56fde0dfb5834f5e6ccf9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
903fe3f4213fedb71bddce42dca4093c

SHA1
45fd55a051e7f216a11b42abad4712a918c2bec0

SHA256
1be4d327379ad4acee457db10fe287d78f1e0c540df4730249797ce1ba9bd5be

SHA512
5eb17f69e8e6f104c14767fbc732c6094385771beae13cc0f91c18c293c5e98951f91b3db9ec981cf80c012f21b2da96977325db1c261ee3fd5fb09eea417d88

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
3ee82296a07028e6eeb6bee09f7530ba

SHA1
09aae6036ac30a7bf476d96a33228336af5bf0f9

SHA256
95367d2f3d9352829c96db0ef733a5d18a1ad0af568084bfe4ea5e513c990c06

SHA512
9d1094f8008879981d2d4ab04e50af3667eb68ce705b6ea6a3d290791cc419e2b57498fff41495196454b907cebe18095da3bbb49f5ce7825fd0a04fa54ee8da

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
4030b72a9803e0af8d6cf76085962a6b

SHA1
449dd588b8f8a1d24a33c9af1d144a7615c281cf

SHA256
7571663df9d9fa6e22e639417ed619b935660cf123be39a7ac3a9a101e22cf6d

SHA512
55f9361d2fa90d38fac3af7fdf820a5bbc3964447d49df115d8d84fbb85ba7da9bfae7612555a957bf8e8f2f15aaf32256af3fdbe4092daff05c344ef5c0f136

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
112B

MD5
80c320f2f2433d477c7efb7b0c4c7572

SHA1
7443538fc0312a63592a97f15eceb6cd516cd338

SHA256
72bd275784f0e61682119a109fc91549875af769e1fe64dee7f592f84dd9388e

SHA512
6a0269b41c39711d7eb6a4320d383a9ff9913f3fbcd1689ab7b97859efd656a222345bd264bec705107d4f61e7973e2c4176b9699bb585d6faab91ed1c4a1526

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
00150bde275c3476cf8f8bea776c316b

SHA1
c72f696987f0154f8fa368ae254c4242f34b0a4a

SHA256
f0f8086c0c435021d4e9f50bb97acd4c61f138eb32847d2f74924065ee382a13

SHA512
df3ca3987454e9f80ef49848d0a5fceb85971051215ef895c0baba2618a3d9ed8ed505ef07cdd3eecc0c8421395e4b02806094ec4c88905afc67e1c4b8396b03

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
03252fd50ee494b4c014713a5c9921c9

SHA1
34ed9750e01ccdf8d3de47c57b5a7ac27e782558

SHA256
a879ab643f64cfa568985d1beb27605f28c1a0c0a761cc07d4fd3324b217a765

SHA512
6f82df1296f1d7ee691e094f8f9387f2e6aa19323a05afdefef5e60f855c3c3e974eb18661c71857e2d90ae401f96f054105dbf5e7b21e5df66aa0a634719c97

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
d823a330d3d26e1f1a9015fa2926d7de

SHA1
b4fdb8be567ed2af07c81b57ab82221e36a61992

SHA256
1265a77b23e164721dbc8e63357317f7ca8e4ec1aad980ced8ce97a58bf00f46

SHA512
657d43aa72c9326fe92ea712743cf7be0f3e1bc60d10555612baa26d9f8f99c64734ca71f389ba20d8867e5f4d966e4f0f4e272dcda894109c2fc03548033b9e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
513fdd0d48ce8a4744497ca655a0ca23

SHA1
5f3357ea083eccf7cfdb1410cb8aae4c6d929a44

SHA256
56e62ac69616a65c665ca6832f30c93d399028d8ffeece612ecbd072481f8823

SHA512
2f82f899214ac5416fb28a83806136713029deeb011cbca9ea205a9fa39c72833dba6e75b2f33dc9a76abd8a0649337c6f2ba5961479d18d4c58859166a0aa80

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
10495acf37d3a413001eaa6a0b83ff6b

SHA1
3778ec5f6819cfac043eefd9d0ec0a3efe0b2549

SHA256
d0c0cbca3bc76e74be887ad4b1dbd587487f7ab8e575fad3358b811d3b5ba482

SHA512
a3faef6d60dbc5526ddb9f5d2f041fcc44a519898bde9a9bfb522fa8f11ff96035c728a51166674eb3a83d47037d38bbce5833f68a141d1fbfbb96af9ec72ccb

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
a89d7cf9e0cafd705abb31623636deba

SHA1
cf1fb63bc2cfc1ea7d252aa0382c0c5e79d7ca86

SHA256
6a4a2d95d2b13c4914fde1be913014f2a5018219dc1358d8410e740d92db4ccd

SHA512
ea59ee8efcb957752d7bda91fa3e225fdca33730de8bb82c7a897b200e5f130ac590bb7fccb6fed8990359d50110f4d499d99bcc9ba7c1300fea1d69d9d4100b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
96c56c95b181ad6866e8ff8b073aa411

SHA1
66df64e8d15425509a0e9357a600ad23715c8a34

SHA256
5544dd4ae77e6979089e832cf480b3059101d7f0ab47eda3a3414120abc539a8

SHA512
264a8db1626c5557a6f002e199764e4578397ced3be1e960ce583f77d6e18b65cafe00f6963b586fda7025bcd4efdf0a758750eed592ccaf84e8ba88286ba58c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
5fe50c9b1d44d141029147f320cf9c35

SHA1
1e9e06232f61d5af0177bdcc0718320b4d0d9c47

SHA256
c996fa625246d76ce230a6c2655489325e616979bb30ea95c3400ba0377068fb

SHA512
2a55e573d3b2d004b73610249830fe1e69126d8cd533ac273da8bac3da1bc6830936bf24a8228d179cac737c542b5a3b38df7f67f74554c60d0908e24aa6b4ad

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
7KB

MD5
26f1a91425ba8b8586a6bec351712c76

SHA1
93d017ece36a6654adb5f149266dbc18cb1bb231

SHA256
ce7cf49854d592dc065ac52c7e70532b54c29e571288106cc642cb4af8de6e61

SHA512
bb95d1c8bfa7bdddf524b23d64639f2f07fbfeb9f5a419761056a58a59578cfbce187260301097d998cff7875b74cf62d32f0058ccff17f0100a3ff2330c2bcd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
336B

MD5
75d7880df50df737d7e5dbe7d6394241

SHA1
4306d34119b38f83394d77e60e97755a39246837

SHA256
b8fae4f35e649d749c5e9bc4d70aa78316a8c8b92a2df0b7706150ead88cf734

SHA512
00e5ae2f9088186869203607382a6b1c1fe39801754c69faf562dad797fc8322d7bcd0c91fabfcb0b7de7071f1455129fa60c8ed6cb6e6895551411c199e26ef

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
240B

MD5
33d83f36885ff1f3818eec552e447541

SHA1
cdb76eeac39f0353ace3c663a589aff949232323

SHA256
f0ece5d47675c50547564461c02bf95d1ee3398b260da76c8b359382a7128bf6

SHA512
fc6e3e57c308294527eb7484362497d1377e294c73637a3edff9c9a18f88703cf4f9047b5dc9f1d81103ca2015b12d481ca3158bf692bbf938422d7da82ee31f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
ca12acd6e814bae2d586658693c8470f

SHA1
77705522de0db93c75d7d40968d3a29422a863fc

SHA256
46d5f6fc0b2711f4c00698a1658726054d8109b51eceb408311a1c7187b76fa3

SHA512
73fd4e53a5f5ad0ee36b91033d3ccfd4f5582a7fa1ea7543852a9ec97066ffbf802e4bcdfe3a68179180213345e694590bc2c0a2130eb899d0944626d5b6f76e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
816B

MD5
6dc80b23556a897c81e4d22f793cf67d

SHA1
9c1ca3e5b354e61da6ef2bda1ed3adbde50d7468

SHA256
fddda0ba9064feebd42d4db63f557904dd8da9154fa3268739925a0b499c063f

SHA512
de118027db65c6219235a252ae604aeec455adf5ec432d1e3cb85cd3ef437e7c10a41deebccec08bd79776867d68748bde01fefb67689823770de77546fc70e9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
886e49504f1879089359fe22fcf8b340

SHA1
fa639f9762ae2ab099b5c8ec06cebc00e06c4212

SHA256
f9c29faadbae1262680770db9f38ad43a7c89b2ecf9ad014dbd16d89710777e4

SHA512
ef9f560a8b2d0df0befab13561f7bd44c35403f314c2988706f1c5e02e31641a3f84513b66991a51f0806c8f338ed43653ef8884fdc5e311347dd13aefd1278a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
409789b725bdefffffed3f55863103e5

SHA1
ad99508c2e5713ad62b31d6d3e729781175b6767

SHA256
c1a6445dd38fb6ff23abcd106d845408751e4d6c827fe4166c3d176b9279e090

SHA512
23c45e911017e72bff95639aeb4ec85c9bf7b720806e3b594fe1cef1f24aecc8697b9e1ac220228d08bd5cb52c062b36bd319684aa126d6f7a29923340f99412

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif.fantom

Filesize
19KB

MD5
ab0665adb9c717fd18f4d720e90dc122

SHA1
352201170749e56df4fedd5e44aeb5bc5d586ab4

SHA256
95dfd13f3d11c9bae0024099688b94ceaa7b93e8c4123617229a891e485a15f6

SHA512
639067e200dbc94fa88ae55045bcdb0c56e2ef32ae6611a3c4bf3f74a4c73d2da29c490c30d52d4f4204457e38d4a13ff8caf97f0f4f8faf3367f365e43136d2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
896B

MD5
abd20caa87383848a7db8b8710a67647

SHA1
0ce3bd8c1237563d8c23e1b24d764a4d3a08187b

SHA256
c0b6ebd136a430ef5a7df6c4ab439df3c7046d4b5a9b07d2d95dd39a2e6eac71

SHA512
3d1dcc716351eeb3bea2317b028692e809fc8aafe89e7d781b9fdfe449dc04dbcc4e1f6e1f240c269fefb113017f26c7e360d9b716a9748536a5b86b34211344

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
864B

MD5
a5f08bbbe657a2fae39416087a3b0c39

SHA1
ef354a8d5b9ae30bce083adcfc6fd1857c6ce8cd

SHA256
01bfa3d6d5c523fd97c4baa10034c8ee3462fe590f58f7405e7ba5dd9e6f8dec

SHA512
d45bfac6c7bebc6ee7f805eadf1ae7b5c5af7110dcde7f1286f6541a001f91e972fea5c408ab104fd60fd392ee36b0950f556696d264bc8752b1755976eac78c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
864B

MD5
cd197c99112549b02c70f66c5d98eafc

SHA1
ff330bb47c3156c6f82d7bc691262ed8b5cc722e

SHA256
a1eca193b2a693dac1272a5a2f8dcc2b70708dcca3d7ac6cc552a3c026332acb

SHA512
928315509f1383b496002b1d042ab1160532a56cfed9e9622cdbffe0a1d2c2633513af6761d82bb82907d8ff3cda0c0e9d498b96e7dcab41c683798adf2e47cd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
a2868d7186444e8de6730b70e25bf0e2

SHA1
5affe7327f2b2a90ce50894606486c5447d1ae9f

SHA256
9a0e1d1496517fc3cc7516ffe675a0f1965a83bfc45f242cff6adbfe2d63cdbb

SHA512
2babb9d4793d83087f3d1418b5dd7376837f9f47de3795a5002eb8956675be72aa91d36d2c9b0c7ed0c4013a56d711763ffedc25fa0a705a41869b8e0878e5f4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
a8331d9a525625839f06c19394960a6f

SHA1
13e10f640eb38328db1ea2d8174aba0bad9e986c

SHA256
adc51be469c4ac4f9fe6eb0d773a605b3a62d0d433197c3fdb58469c9452937b

SHA512
639026923257a4631e47893bce5a7b89e3fa148a1f10dc9e21c98f9362938ba9f34916b71b7e8e1d0bb6d8beb03159750886a36a74dd0a80667977d977f9347f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
864B

MD5
1c6fccc172540158e6818916610e331d

SHA1
a6231e2ad203c69779618d6f4bf2ec276a286222

SHA256
7460999a8c9116e2d4fed0b6ad447121c826b52a961a9392aaf8568b21a713c5

SHA512
99455038a4f155015ad8350181a1eb573d7d24231fdd3f59c4a257b04ed5d45cf1eb55199a93a8cac8ae2042d81c4e705f66de0198a27269148da12f3624a65b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
848B

MD5
4b804b3f8c872ca6ec0eb48c4ee9a9f3

SHA1
6f07dce468c3a4ecc6faaf71ca213415cd2d4e72

SHA256
9572f89e58a219aa4f76f37a27140da2bab7292d72c2e8c7c08d9bbff8d4d6ed

SHA512
72a4036c93dd03cf60542a4052ef0c763fcd5a8f08930ba97a3473e2acb4c2292f5a21cdf9c951bfb8eb979f79700d6515b5426966e58900c1f8f9b813d2ff19

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
880B

MD5
8aba176845963c98b104301b4fb2202a

SHA1
e2e5ad63c8e61ad0b06c2d413873f0c582192a44

SHA256
c3d92d1d479fe30141eee79a8986db009d70eed57bdbac483651f85dee410bab

SHA512
3d13be21e84ce4a79b532a832bbb9557f73cc1c98cafc3eb362fbcc154b5737a0fadf0748e63607d2f5917090eab61def4724a92bd95e1ff8dd997841103f48a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
848B

MD5
fe9b9b85b7b49ed0c0625c2f6c4718ee

SHA1
2daa3499736fd316496e73fa58ce4a58d4fad86d

SHA256
6d4957f58ece5c51fbecc79010834d5a8fed165b79dd5621f939467966f888c0

SHA512
182364c9850269fdfe4f04618687405b836862c8276176feb1e232360e769ae869351c409e9fc5c0579b857c63481f1eb5cbe9e56e397a8cf50924f4c5d9fa4e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
864B

MD5
01b2da0cceb6c56a6df39e2dcaa8146a

SHA1
cf5ebd402f01147cc07787f4987fb6ea73a88f66

SHA256
077415edabf589ac4dadf8036d75d859397913a472057100a152d0c92bc2ab41

SHA512
6b8329d0b60b147599f553bc4f07e12f84878182eea28feb3a27cc6ae19e6f0264d4a487ef03f2205a81857048195ee7a55d533f56bd3047c2d1283d4b15025d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
864B

MD5
b8b558de69c8d42cbe0d91ee3c152bbf

SHA1
0aeb18eddbbfe43a46f2d773ab88fa391367b1df

SHA256
53f0808373356eeccd97f2b6e791ab09bd7722e4f079f1b4d404d46171160d1e

SHA512
c21a8a49e9c5346e97c89d02209b77e8297cc3aac19adb52c66af99d4f40a6e84dd0207a577956c6814df71f8288dc48a17b74ebad592f06bb676026d0fd5748

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
864B

MD5
4cef56bf6591a602679c9febe8866135

SHA1
8ef68110599cb2ed80bac2085cce6c7214217c5d

SHA256
f7af21d3826d3f367b5a22815ffc1d1060f120c77cc21e66e95402fdc6eb0ca0

SHA512
d4bc752d939a6e7a10d931940f1fd4158d15af573f015db9f475465ee9ed99831616bb6b51aca6183a8b3c15922d3e624396d53e988c98efc533d0713f73bdcb

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
896B

MD5
ff7aef6c02a36d173dd03eaef9792d1c

SHA1
06a0c5ea54e3900e53934271f55386d3cc034b6b

SHA256
84b21d589267f7a4253b52498a32b27dcb856912c9c26f63e174016ebe471201

SHA512
a9689eee811e543150caa1e1c504bb839b1a9ed76d90a6b4b62d3dc8d6389bbb1e0712f335a0122a6f7680a7f340116ae70899d3e9e08ec12dc250cb32f937c5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml

Filesize
247KB

MD5
48eb9b0b48e09f97677f111cf6a25cc3

SHA1
f0e331067b5a23d9d09d88cbbfbeb3238d64a68f

SHA256
1fedebbf99836034335dfb888605401519d02905bbac144bb775a8ad95b2ab29

SHA512
c4f586989b02b8c161a09691fc67e91900e6bfd84d43f3865936d717328a5b8844652c1ba9aee028c654c8da6091f0b162471faba0bb4ea462b84197e17e3ad5

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
47242d8e35415638c1172c11da100e01

SHA1
480f0a036a4f7365f0378ba93971aaf85ae2f565

SHA256
c3904f390528908d2967ed64f07a1bf65207d5c6447a9a95d6b3bf08754bb7fb

SHA512
ab13c2f96fc6a7299e6267b12b922c3664916cfa508b3634ecb8af17092ae7261fbda7864a5fc8a0295b5f30c70186dd10c3570e714edf257bb640b6cb4b83f2

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
88f7b63a14287569395e8f4787322367

SHA1
733b40f47729148b4014424196bb92f7a909cdcb

SHA256
9c7ead5f6ad124b14768388ce741fc6a344c578a2643bd38921f3b532ed0045b

SHA512
f9ce5a33e5108965cd6dddc00705cd3d33c473ca8880bfeb2d7e3039359f238122a31b38564b6463a9766955279301fd9a2190a8266c4c404a72fab7ca7d7035

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
d4e9ca5952fc4532c0f1c096e1418938

SHA1
613ee7c457b5d4f0a5d4d401f26b151936b62642

SHA256
7a7703ace866aab68d708a1b71a1d6b85da688957a2e247ba6154e48c11c3ab8

SHA512
8192d809dafaf13513685e549d8c3a714b9ce2c4c40094ffe1ed8f4ac92214ca90a1321f91d6c94cc6cdd29e73890507227944273b8275aa7ec2358921b7e304

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
25c8650ae9e0c72b6c2f14b5abf9fe71

SHA1
3b96a90c05452e9c66c65a653df95362a36cd1ae

SHA256
c9f6e97dbeb39144e39e7649ebb85e098db597b3cfeccb4f395e9a8bd22a8787

SHA512
a58ceaf0a6943b020c3d069d6b4e9ba1a4e59db5b671a38016a4ff66f3021ff07e9ddea07471cc9fa6ac8aba9bbc48a77d2830f7d72851792e1e71623f63c3d1

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
e0c47766a91fc634a9f904f7aba570a9

SHA1
2b786bab3ebf4a7f7cae6c433f714b6420769ea6

SHA256
008431aef791ba2657d72f7c77f64345038f6eb84a9e10a32975720a5ce8198d

SHA512
2eb1042c13939f8beec7c31f0127c9f88176113c84d65ddb51724205aab93b48d2d12373ba2849c601158ffcc92e8230a016d5b731c3f65c67fd804bc6ec06d9

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
1074ba3b7596191fa7297675b5d51934

SHA1
98c1d19a2b9370789d070e7b2f20c455e9097565

SHA256
eee4f6fe1b04751846af1c8e3d1963c76908b9ff97a8fb37533ffded7c929ac7

SHA512
61e0f5007198660265571d2fc7b06ca2cc53907f8541de3985f08c8841ab23ea6032fbb5f78fc26ab6de1b64a668237618dfba2be411d2b12b4f02f3c9259242

Download Submit
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0002.001

Filesize
16B

MD5
35eea0c116c0151f492076e44a112b05

SHA1
d34261c86be2225ee6e8ab65769532cf06844b1b

SHA256
a12acf81eee88fd2e4db511f596abd81294c0dce57931050ab7b65e91eb63e2f

SHA512
e1918e35a19fd3a8ecb60730adff2789c9d003318ad5d15f5d25f196edbde1a3bc97c0319f28c2ff916553e67a7d5e3d3c1ec453a947df3e7e2150f238c0e789

Download Submit
C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20241010_084439937.html

Filesize
1.1MB

MD5
d68117c1b09db1dfd90f2af0b1eb833f

SHA1
1409932e01bd7919cc2c5935b8f109b074fde0e4

SHA256
cfab3d9267b81a749377630e021eabe04f625debc6a46eb50208374b0b873205

SHA512
e538e56452ff85f3a5d86c45ba1381d2a8f767885cd22280dcb4334455026e3d80423dc9b98e8656e481b3bbf0f978ea867c2fcc2b9b068a8f10de11654d4a00

Download Submit
C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe

Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_sml.gif

Filesize
64B

MD5
a4484fd6e6e4eb96a199db1bc85f8f5c

SHA1
8bfc6a1ac8c1b626e68dba57e728f50f3feabf3e

SHA256
e51f7baa12fad2fe6c0add1a071becb17cd3df065ee9efca331b999d53a91814

SHA512
50fb398834f2d4d4da2890a622eb1f08db3a5fd9e0b229e60dc1bc3a47cf037f01f2685fe0da414860c670e8eb4d9e93c7b46ef80f8b80c99bd2ce3be5942c92

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
80B

MD5
ffe7966eeb91594c508fc988984c9caf

SHA1
206abd9b5d8cca6db5f7540085e77428bb08fda4

SHA256
dfad0535399289661ccfec7e504852ccb17f6d4964cf2d74dc0268c32d5ea4f5

SHA512
f513c6240118a64f4da3f2727e827c6dc2898009b8ec406ff084b9bdf115fc4e7b36258909fdf8d54f032440a8064cd4f06abf8a2437fbc5a9359eb8558eee11

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
80B

MD5
534d57d2c32d8862447e104025272182

SHA1
7f5430a39d62901774d2373c9dbfdbb9a5ac34e5

SHA256
0b7cec48e525bfcf9377d27366b70633186ebcc84b29e603c80a66139d1fc72b

SHA512
4d4bea5fc6b96989eb4bd71037c3e014e62c816bc97fdcab0be550299081c3c7576bc6b47da868c05874beea86de1239aa68fcd19f4c260445ae16f4bfae9f6d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

Filesize
6KB

MD5
26c03dad35f7fffd55412129381502bb

SHA1
944f45e5def056693df5776219d2d538892f1306

SHA256
83f32b433878f5ae93600d05a4ac1a66511d7cbb88ba8d20ae0998914e7fb759

SHA512
6f0e2a0504d20cdabdd750d1b620b9c921ca5db9dced33e3c7d380ecb82e80f3adb969062acf246136587b27d9627cf752f1106741b50008464d280758754a7e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

Filesize
13KB

MD5
659b4087c966b19f8692324aa0f69a8a

SHA1
209c02fc8e2d75be867acf0a378921cd6eab1ec5

SHA256
1005c29a0c96b8f791b1e684d8c1277d854d60122ae829fdbb8453162c2b097c

SHA512
9caca1163529250ba9f1d251a28f212eb38b6c2dac72c15423b5d2bbb99fe0a1e016f651bcb0dfd8229b47a7b80c7e1ba57165f3b981998934b9dc2f00994b72

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

Filesize
3KB

MD5
a1370db041305e4dbd7d164272f46a75

SHA1
d9a9bd1e95dc1e697ff1a14c4106fb208f87228a

SHA256
704d53f8e21f5e8ae894fb39789cbd317bbe378b4714393c2ddd0b63e1901d58

SHA512
10f17d47c8b059e3a8127cb018e6e64bd3d5ab739f2045ae02104a27fce9885a0880e486d6bb8d07b217a300c116d2b92dfd3d8ccb39f5e1a607aad4b837a991

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

Filesize
6KB

MD5
136d031e4f37ab19ddd9db0b46c1441c

SHA1
4969dbd36a56e33e6c44f9c1670be730f37841bf

SHA256
37fd344f5f77adb625cb43575cd2fab92d466bb3c9f6e66aac2fb7b4be230f04

SHA512
80a69f550eb11de7d7c85bdff5fdc002b999902ad27f7382e879c7b2e14ab49d9e6d9abadcba395288299ebb0fa572fa2803726d201f50b989407106b77fdcf2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

Filesize
10KB

MD5
94eef8cb1e50124cb1f80859c3f458d7

SHA1
e271472fe40f7074e96e5078d32e2036a8e4235f

SHA256
8f19177c206483f130821046f905b3b76d89571d68d8a8e409ca8300f291d701

SHA512
f5438a8cc4ca20568cbd48233fe99e2e8c90ebe4cd798e672850e2f075d7734f099d147eda60e7b858afd35f3ab603f8d1925c6944d797db40880c89185486b4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

Filesize
68KB

MD5
062c1fe1faf543af0a1260cb63821648

SHA1
dfe84f05ac24b88655b72df3236907f436e71cc1

SHA256
d66a5d3dbce4f3eea11f9eeed8f7d36f19199ec718b0dc8bbed3ba8e3ad596df

SHA512
36797688fe7bf86f34434c059730ed5dd17d64dbca4ddc7e828e94fd0b3c7f489d0d4a8d4785c7466d71e0310dcc0812a6f3033128aa95237f33c3f580c7a140

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
38bb3417ca1e12a956ad320dc93f057a

SHA1
3bf15230416848c9774ae1215e5b739c56bce3ff

SHA256
e00e45a529b23ef0c2f7bd201dc2503802bb5b714a8fa61add9c454e43f3351a

SHA512
fd14c3ddc9a03e30df613a1980a0276991df394f9c07bc7bf54db7b16cc9499954e15212576e434e54a83ef1ab645e090c42df7ddf5cd50b4d249d0dfd3a085c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
36bff7ccd4519bbe2c1a68ea71cb62b4

SHA1
948060e803feef8896bde1b8ab71c9a6cc8987f8

SHA256
e856ce198b4ffa76167772f76d8be2b958ab7291b596e99bb5ce24f48ffc6944

SHA512
95d226e1babbda9284bf96d7e8318b8eca32f102d6f96918426219306d2fe30b7cc246876635ef4685cca6874e3beca187c649e2553c689f5f02f676ffa51c54

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
e7e8863f7a8d5fb6e025876fad1bdf23

SHA1
4e461b7c1972d7d2779576a8fc1901ce3a00cae1

SHA256
c3e454a045fea4d6130f5adcbe428454f539d80a5b0c44f4cc9f08396b536bcb

SHA512
f3540e5f2cfefc5f52eb4e0f0fec18b729c52c6580919958894653d7e5a996ee9e943fc52cc091a5bac9bc7e03a891de5ecf4cf7310a4cc2d8122f42a022bbf1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
db5529b58cdbaa2b3aa29825ec9397c9

SHA1
5097ac322c98c4111af07fdbebe7640e3b06e64b

SHA256
7b79e14e5e8ffb73b741ab16c55b3c9f4d6888703311c9e1e264fd86a9bec9a4

SHA512
10055be1c301fbd2c600b2cf20f4c42d90120930782fbb33404945dc598b00cdfc99d58003172cebbd6d596266f4748d6e17d8ae9514ce666f9c3625aa8ece7f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
7484155f5ce68fb38a78bd21cce445d7

SHA1
d0fe5c8cd99141c2ac25bc27972b0161b6534f36

SHA256
7d56e8aa6d931f8be92b4c63419fcbfe44a92becd055e40dca88c6eef8471dae

SHA512
c00f4d20b20717a7916ddc507ba016cc886cb7d4cfcb770c41cd4a4eed5d410a305656ad505c0d3c90c186d678d97694160d0f96a6540ac1f49ce9835a813664

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
ef22afa7228d58827bfe9d2fc6a7c7ea

SHA1
1d409851c6913aea676764610a8f14887cb648c1

SHA256
e511a2f71bfed71962fcccf7ba2ca6a370bddf19b15b0608d4825dd4c33278ef

SHA512
b53f05b31da92a9248565df02ecc77f624abbcbecd735d5ab53cb4562b8a52a8aa7f18d890d6f427923a7c03d8be2643f96e0c7790ca797c0ca0beaae3ba3009

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
5e52748a552a244134696fa13f5dee08

SHA1
12aa35c23e068b15dd651e994a048e717dd7fc0f

SHA256
fd93c9b446eca421b64833e7166958eb7f6b2692857bb2596338ecabf3773895

SHA512
5e8d16d271c45c8aa39e740e8dd3545fdd9fd65c452d852950ecd93a229c29edfbace76270c74775434a77aa76b9e9e6cfcaab78d3db8e8e1b324ee7a28d5855

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
203728397f70da710f56d31e0199426a

SHA1
a0e475c8fbb866383e1955a943153b696aece47b

SHA256
f42eaa4a7e07effe0bc0bcf8e13d0c708e6f8018982b6b6576c7495ff31df6cd

SHA512
168d2215caa455c7c2e4ca2c32e3f54f0e2df9d5efb6d42d00f8c0b7159a1104dd652dcd69afedff6f4f2fd7f862563cf2e1d2c77fe3af18dc8db61bf0165d3b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
55aba661693e33e3c440bc64ea70c37d

SHA1
724a397b0d3ebb8b45224f7fdcee619f6553b512

SHA256
d2027ac88e34b742b915df86c468afeaa18376768d6cb081fa58b7b456dd19e6

SHA512
b6592d27f83af17414ec7db1199429be0f4ed2112ed8c3d0e62d4c7df3ac95f9476d2260c4caed4e6fb7a55769b7ec487a1bb62fd04de6629d6a005ff39d3b4c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
540c4029ce05c47d2a80991434af0e07

SHA1
fef8b600e96e692c93e221d1b6f7d79830e0f9f5

SHA256
32988d39d42b2ea1267efe63240e1289777bf542818331866bffa6fc4f89e043

SHA512
e58a4564b9b19e40167ae8108ad019e997e5fd908600834a20aa4958d9e8eb84ff8d73b5771c4e520ff735a349a8f4a26aa92edc3e256a0d45ab2c5a0baee4ab

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
16b99ce1f10e0a8a93801a09ccc0a78e

SHA1
6f7d4b44f3096edfa9b4fec176a0b7e736e8f729

SHA256
71adc6c45c7a199503848f347fce94df28d8032478800cba6aeb69c7854ed2bc

SHA512
8c81100d16813b3dc1fbd4061b9757d555a2d9d6c0428868d2c5fe5d5c28ec9e81616694ec798f4096e6287f99461d8a3295af7f4ebec3fa79e3d6b569c33f35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
1b354f95a83d752eeae45762ac96daff

SHA1
5726cab24e8afcfe5767a2d9bbf9b0c09094ec48

SHA256
d351d2b5b9e8655b77d34e57fa52202939e4f9fe9ffed15c95ee87cf122dab6b

SHA512
63b0402e64b1ff51fb005f92ba36f2b25975d902f3245623d8421623639ee1414eebe52b385f89c7aef4d7dd6f0f4edde7e65431f3c826030da0e2dc6f8f6a85

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
25656ba019198cf8cafd66b04809147b

SHA1
78ba8376f40672ce8abee3cffbb3945decffb37b

SHA256
78062351f91c3c16e66dd81e7d8fcb8febe1afdcd8c2a461b7d9b19cc593cd1b

SHA512
d983fd05906bbf44b0e2f2074f343141d5f0d8360c2739902eff9a8a6d327b7e0e72d32d488d44718e94b8af196a9ed9e147dc75a9354573cfb80f7a44ef52d0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
b72c9666d93fca56d49c7b42a8cb4863

SHA1
a66efe34a5d2b43ece9131a6c17fa4182e4bb68e

SHA256
1b181e0b00596c1b3201329e9246581e9fe93f7bb40d9ccab8bed2de19af3c0a

SHA512
334328b34f8b571fa5026eddf468ce1b2d15933cb3cefc22b600c3ac88de7832ee650309bbeba651ceb6babfababed714044aaac70860f67dadbaf722d8bd682

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
21409f49ae7a064324eef40f1c7a7972

SHA1
ddf2e00a87fffdfb56cf3f49c01943b7404738ad

SHA256
2ff975580c060153d74da49f3b4146bc94644b3fa73c93ecc98e916cf5a5bd03

SHA512
506fb254dd9c844948585b95a0d45cfbfd8f483e1d0068268165e548363842052e46f93341c4ffa5643efa9cd882deffd731e55898028e93ae1c785bcdb53758

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
591e7b9c2b37b5fadf0289d955a1b1ec

SHA1
e923f216ece3b2c2252f7fd46bb98cf3471dd18f

SHA256
f4b24919823864b4bf122f83243026154860d58b6ec3fc3acb055462a78dba67

SHA512
89dc509d765621a0c39755aa774482292afb260d4eeaf28478978687d499c88e8d39199d4bc76b7ef2926202629c4f7bf7a96c511e6461b9788ea5a9f262d9e4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

Filesize
3KB

MD5
aa4541cfc2d395ffab96d8be44c0cc24

SHA1
d1df4669ca75f6d244ed41ac639a9319c5f7c270

SHA256
14a68ff897710715cc1665c840913756584820ab9e6f6d48615d3430fe3377fe

SHA512
60a5b8a6e901ff298c310faa960399c56adf7cf7925b892fbceeba22e1fe96a39a5c626d4a26d9bda0fb3bc955ee9313539a61f18f990a93c46ced2e4a10a3ac

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

Filesize
2KB

MD5
cc9bcc0886b4c088beaac7605ba86031

SHA1
4a22ada4f827c4f4f6bb3f90516e39e2756d4ea3

SHA256
93c580b4776a504b7f1977833bb3a178f5b79dd5a58822b691606acc9eb15605

SHA512
6eaa60c85711065f851c5b8a5c88d46017379e83bfb43a2f13bfd2457173247d878b610cff2b63d0688ad780753b1065ad6278d5bb9255acab68809c090774db

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

Filesize
14KB

MD5
7b7273bbb10bc4a3dafdf92f9e46f41a

SHA1
ca80c6bb4d9b4e31a269489535252487a1e8f8bd

SHA256
a2362f9231b1989a58ccfc6bb5c3a651585fb1c7c07442eb7ce9fc6f2b8c9728

SHA512
bc383c771e21bc10fa695556549eac554c4abb831924d877b7a221af64144c096f6a8823080a6b244a213be598e3863e1241cdb1f0692ec8207f7f918164976c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

Filesize
320B

MD5
7314f4b958d3463a6a6fe24646696428

SHA1
6132db81069c4b80ef8742acd5d291b1963a9fba

SHA256
acc518d02738b903d7df6410935b1d14d87fb23961cd5581c61a393616c3428c

SHA512
9366cff391fb3fc33a936a87d13c5e8b4428d4b4dfab5a282a9cf1eb7ba06ea0862810bf143bcc2d895965118378d8414fbafd5e7a59be6fc77570f655ec1821

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
c0ffb095f164fe6254b3def1b7b45a60

SHA1
19d991d445fe6cdd5310d20ef20bc87095bc4a7a

SHA256
26cf87e1aa9b5bd7b0b93ec9be31f0d264f313875580996c42ab6399fcce1b08

SHA512
70ebbdd00ce38cb650216d7982396a8673a772310177bdf05a84456018bb7c365b6e60a3351ad3e3ff5cbbe344da0d143eff8a2e8eb710c385f97082000a7cb3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
b86f9379dbc0f699ad0cf8a5fcd9b936

SHA1
c361ea03da5329f4ea763759eed1c030430f5074

SHA256
8ba7c27a05f1367a2522cab8a3910ee85e4e9d3ab1a6d4bc46b690119fe4ef9b

SHA512
f833a979bb128f459f7601dbe07501033d0dea97fec5a48c6aa5c2144150b09aaabb675f556c22558871b0f44226a9c76630b8bc9627636b24864682576b2dfc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
960B

MD5
ef1b3fede7560d5c7cff50713232ca64

SHA1
7766fc5c661b400f0ed8c04edd702e228d30b023

SHA256
b06ebb696baa14ccb2efd65bb357549535f1187507f2b83ed3587e94f7ebe1d5

SHA512
bfd50625364cbffe51af1a395460c94e1c21f3057ed9d3b1cdf49d1bc4581383673e1fb6950bfa5e0d9c09b0ae43b0299e432363cfdd3c7f9c3ccef407207ffc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
128B

MD5
ee5815a94f33666dba6fb4cb810f09da

SHA1
93febc6eb2f523ebe4a47a1504bc27912ecb8111

SHA256
6e91e8e18827c8488ffd70f1255bde4b50cb19ef6ccd56c3bc85c69631ff6ecb

SHA512
d98b59951ef67170373805b9f105128768d280a958150554f9ab881806b4bea50f04b8e6331016c9d8415c4ecbef89d6ccfb64372e84b8ed9bbe921e987eabbf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
46577f4586bbd7c1920c472f87b964aa

SHA1
db86434b8c0ffa648c61ec55a2d7408b77608f29

SHA256
2715871875a29c085a350011258c6a81532357e53509dff8a99629da7a9329d3

SHA512
57d340e61976093602379d0b59e9284f5dca759d8c21b0f9ffa15c5eacd35fc520f631a73c4b1ba7fb3b3e1ed3d03511b63dc26de547658b4b17941066b65a83

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
70ccfc5f9665c0291d16bb895e83a138

SHA1
5709603a662ec06f66b9a8d032b8abd517885b9f

SHA256
4ddb6b140bde8963aadb3294b9d41ed54bb7473a8baf4702366329cd86fec7a4

SHA512
47130bcbf090197749ed1569f254764faabfa7a19eec75a87ff4d724cc125d59214a4ff880275778ace9a12ae706d2ace97dfce1898c37f6287fbf59c31154b5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
64B

MD5
6039dd2925b590802a76211fba9f4b0c

SHA1
04c1fc68bed2c549cb86e6c6b37587b168d35df7

SHA256
2f66c642701e0b82aadd4466da1ad67ba6eda5d5f8133b83be2ba908dc9b47f5

SHA512
6bdf5804b0f32db7038fd4fa32ffe44685cf6b62d50197d03c8a73c8f9a22c7472fc1c071cc3e8a14a550ddfcd345d2e399a19f00aa031c1442c2350537f2deb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
928B

MD5
d73b06902a26d8a5828d67c16b2f280c

SHA1
14f09e70f1751684120ae3b48d2ae69f899bf836

SHA256
6afbb20eabc2769b83fb099cdc8aa86ee875a08355d50e6a11393e8d6f07ed3c

SHA512
a62461ddfb3b6e4724982bea2f2e1728b47513cc606dce9398cf6222562a894990ecad5b96616cb9f2ecc0dd7c6d8c6450bfaa94cd39eae0c5176bce52153040

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
96B

MD5
335ab6d294845d90a67ff39b93f09985

SHA1
7914935dd919d658727f54f66297245ff65ffba5

SHA256
402b6decc309da5cb5c02b0e7f6598fe09fafaa2f6153e43a13be3e2fb1d2337

SHA512
dbfaffb276c07e78af71a982d8fa8f8f5a3375b7e0b6aea0c2b5376f0d1472677d9de0aa1657567b086e28b5dd7a2e0b74cdb21b631e9983670f050afabfcc5e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
96B

MD5
9c2b10d8c2a7badc115767a51a6040dc

SHA1
bd458f0eb983c659358f78a788edaa3a4c9d62e4

SHA256
4d12da96ea109f8d412d373a5c957dd98eb01a2962e76da236d7e83ded54250b

SHA512
debee774962aef3952ec39ed4d9cb82e09af45aa2cabafc32263bc2a22901e2118e6bc676085e6431bdd01930d2d46644fc070bd60cb8fd150df9c50e5d19552

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
336B

MD5
6588c76e2496b2dec3bb479b37384045

SHA1
a385d68224a73970d1add426d3db5bb77d10948c

SHA256
5c9b8587409795f14125c6869b288a34ecad7954d31cc9007e3d4df950cf88f6

SHA512
2296b0a197430026a8e2f3b12bb158a0322bb0b1f2f13b4f13452d52feaa16b9d941857b450c3bf01c2a5ac8c09833eefb0eefc89f8dd589be193c93927f853e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
7b396ab626aa3f49e6fd7f79a63ef4c6

SHA1
2de09cfdd206a63d75c5a29b4e86b881404187b1

SHA256
baeaa348eba370bc4c2240a634c9803a154903277044b8c5b3c0694bf7e7d8b0

SHA512
ecc4ba969a3878e8676b82c20ed729b7d2d7ee656cf9c19337bc86ede88ceab56b2b2e3703b9b1cbdde4e3bb4dac30e9ca07f30a814cfef8dbec62472b45063f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
176B

MD5
6f081ae5a05ae7e41a94ced672bdb503

SHA1
531fd430a2ceccb957bc7dc2492f5b0c1db3c79f

SHA256
5c09c9ce49e7f412cd11188845a7fd04326d6b67c33fed2fb1dfeae1202ed084

SHA512
7563e919db5e8486180feff9d99cb92235917ec09ab1f6197fdee409ad9a051890dccc0fbfe90747c50c93a19ead6a4dc15ba150fc4c78750a8943cde4f368af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
592B

MD5
304c09f865795e24aa7ec83478d95fea

SHA1
55c128f0dcf5543b1599bf83c2b8afeebc152447

SHA256
984985916be977128a662cf629a7e440f079191b45093bcee3aadcec367fdd99

SHA512
3fb3623c25c05b218c7307ca72084e57fd9b8eaa20aa4b9d28b1fa9c33a48aa1c4468e2f84adcb68c03ad703c35b2e6bdbb481c60304cba8fcaab78841caa2d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
128B

MD5
64d92668ccb15c120b2fad78f8d30b11

SHA1
e640eb96d5cf039fadd49158271689e38f12b4e3

SHA256
285770ee34904e0de6d4972f0c27cafe35009c32daf509811a7356bd7ab6fbfa

SHA512
11f01d117986d0be67852b2d1d76579f0bd2cc33d609ac204885fde5883103d360a3040ec7128caafe3066951cd9d248b9aeb3ab5bc0dcefdeea254c47e4ca39

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
e90f44ee1069bc4b35b8a41ca2198443

SHA1
259411944787a9ad6582ad1ed725796094a737db

SHA256
4dbf2e1cec067ca845cf0ae2b82ef597b590e77022c9cc3af8f39b05b9d0b404

SHA512
cf856ce26b3fada733d07bb2f0d583af262fbb70fc800ad42b7fb8d119bba7e8733c90ff679918a5767d81bef87bc36d8060dd9a5b1c0972975e9ed1de81d1f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
896B

MD5
f7136dc6b08d7ac25e09ea801db96f38

SHA1
2a0bbc5938ed1ab6c9394449b603bff0094468ea

SHA256
92463022ee6cfb1092ac969def84581931d9b1822e3ea12c4e252effff49f423

SHA512
52cd58e87355467f0d3715e901ae244e6c4ff795ec27d1fd0f5a123d16fa75dd62781dea8edbe6e01ace27f6b833036cf44907026b86c3a7a850fdb5f2b597fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

Filesize
12KB

MD5
a4d0eb6e5f068e701b85b606c2690d52

SHA1
3626907a86362b65eb75f2a5fd9fcc6b3368864c

SHA256
a94ba72747b5ccf4dbb610d459601189eb994f8c6693623311221cb55b6252f4

SHA512
a3ed277287599a05c29fb6ba0ad2356e966b72db8a6cf6984ad3ac4d42032db4eb0bc78f3fb2759755b009cda6bd81ddca1969b9ee01c34d7093b42c1979ae97

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

Filesize
9KB

MD5
831f36ba2f55a357322a541bf89b4474

SHA1
0dc8c87e70fc72276503107854649be74dd8ed7e

SHA256
834514cb6ae00b301220c0bda6242742960540e408f5e33f5d2c8f2c8f0e66c8

SHA512
e7a87768579fc11ada6094042f1dfa16f6d798c03f0fc1b887ec236e69b580998a7313da7200b657e74166824a17fe65660b695138f9751c6376d668b788a5fc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

Filesize
9KB

MD5
36c5680a7a6e32fb4badf4c2e64faea1

SHA1
72ed582566c5b3dc7db84fc0a77637de7eeafea4

SHA256
4a26ab0f4ca53fa5bbde423f5bd747442e08e2b35e3ee71c1059bfc0c68089a5

SHA512
d96a2437e540c1a89940ec42ab160969bdfde455fad309ea5db3595c2f161e21cda4c5ec76e53de31fe51c6aa24f976fe02ac5106f506f4be93b6ed67a424297

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

Filesize
2KB

MD5
952d5df626d689ac9c714e82f6585480

SHA1
db7cff8e687ab6ac44ba47a8663a67a8311bb8da

SHA256
4df6139d61dc40de8cc761ccce563ad769de1d42f5ffdf8c110938d493adf6e5

SHA512
aca849507d1028889153f6b0e2406b770bd9412654f26b78896799711df327f6316c4bbfff0fef9445d8b41b394f67d0b72977ff76aa4c4e90e779646b76d03b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

Filesize
10KB

MD5
c6f00e7fdd49485534cf0039b1089e6d

SHA1
53846df1db6ea48842e3519b99568ddd1b038fe2

SHA256
e09e989671ca0a2a2cbc30b5c3156210584dff28050626a84bdac2b8fa6d2408

SHA512
b476faf6da1227df4ceac3a8a29ae5cbee8e8a02867a5b09c2a2c6f30ca06892e09fc8cd89c6c132b16b83baa4dc2f312cca26dd77758caad678b0788f695a4d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

Filesize
21KB

MD5
9a6deb48b6a9f987212b8e4547ec7285

SHA1
9a402cac82a40b8caac47c753c8d1c3d98afe6e5

SHA256
9d71ca5260f89c8daa5e2efd3a7bf7bd25bddbd4e165687dee8c5ecd8bdcef1d

SHA512
5a0899fccaa7e800cf28f200c20e9beaec19fc59271c89e9da1a0a17b29df574e1d136f41f340f8847d0c09f7be6e20268196b22a2ed2e883081927e55085c8f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

Filesize
11KB

MD5
ad5370711f8184c76e62cc69d73ea12b

SHA1
3539719883990598ff1ba7cf745e3b2df8c1ed23

SHA256
294330250a968232bdf30d4770592894761da97838cde403b6ce35dad08caf89

SHA512
869969e904b1247dbd702e67543ddf02c5ae9c6f02e3890b9658c7a6178b14c854ad59ce7d31006e4691d0ea423ca37b42470ed46c44e99de97ff2cd1adc4db4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

Filesize
10KB

MD5
a1c7e71a3e4e319ed8b37c45aa6afdbd

SHA1
a38b72b84bd2289412e456105fe4de1095bfd2ec

SHA256
17e24483d2a7444474012882ae301eac15d5d770916e85c84c2e7b34fad98078

SHA512
4b5040188ad542b29083b4fdaa4ad63be507c4777333d9a65cb2bf78d5a2bea88d37474a957deeec7850894773db54c5eff367aafec8ddb4202d1cd189f71f4a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

Filesize
2KB

MD5
d97671fb5115bf8e8f40e81eb0ac0564

SHA1
9a32b233e6094ca665dee867eddf9fab1613b82f

SHA256
5b1d8b79e70ebcf455e83461d9e40895e779bcf7fa7df9dfe07817debd6b1dc7

SHA512
bcb4ead90a555ac5c78e2a56e2577d415a362ba6bfc7b51a281b6563a64c1400bafc54353392b5daed8e9d8c80f3d493bac71ea6e8fab22653d0a9490a67f715

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

Filesize
7KB

MD5
6a0803bf433209c5f483d03ee34ba00f

SHA1
43a88c30eaee3f94198d6ba4dfde42aae2c23a7a

SHA256
0781737fefd69592a2a1b32be660dd96e8e88857d29d2a3695dc81a4ea7c54cb

SHA512
ce8d2ed5ed8edd4f870b5e45d593230211d3aa1240f5cdf43dc6da466117131cbecb81fbfd1101684796fd2608f16156279c36e8f8f0a6eebcb6f2b5c0130a20

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

Filesize
272B

MD5
edf61ba4daff3ae5903177fc3e9910a5

SHA1
b430b2a1620d2f6b6c39e31e112c1cecc2ce6b37

SHA256
374aa0f601ae84434e78e512ead06ab3bff9e53482ef742efc4496bf87ebcfa9

SHA512
f45a574d5ab561113dca895e24656849527d1a5411623f2c167b3e812922748cd79a741cb82dea82fab8d77e21611ecde90261f82876899d35c542fbe34a10f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

Filesize
496B

MD5
c907b25edf5c37a8b5d4b6a96113f2cb

SHA1
eb07b9853fc8a3bdd724fd1e21a1b6f6e2a8251f

SHA256
a1ad343a5abec94ba7c98bd512a86154cf89a34664bce1509b8582fd9242b84f

SHA512
304e1146e5d5361b258e50b32e0bf1e34f24894c66c5d608c3f8099192668cd23d72480f0769f53909359d5352c82f3008b8c045f84f0f74acd092c6fcca69a2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

Filesize
24KB

MD5
6d48ad93ea12f4fd8fc72fc063c68192

SHA1
9cf4c0c6109b5ca88dce7b5781e4ccb8382d3b18

SHA256
6ed52052c91f46eab7fe068c9e55e7e36b7beec30681c0787d74c9b318979aab

SHA512
9b7e6cc8cbbdb5f1b2417f00e8020cc078aef0af9e5a0abb68a10c43652ee79a30f0113219fca0cdec8504be48b2763d0d58fcd686114e37d7098ba7e089506b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

Filesize
1KB

MD5
aea0b70a33e77bd7ae950bbe3528cbcd

SHA1
2e626905306db0ad53930221482245aebb9c6888

SHA256
79bbbfe1ddec9e7d373d34d7870df94a9170d8da9419c180052018aec0bd6a1e

SHA512
49e2ce2ea3923fb79855e677d05c158f068d0d17d50a58530c917cfd1ea7a99d269831b27f71358f07c1204cfa58a11686269bcd320b8a5dcc45946c04cc5a8d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security.aspx

Filesize
9KB

MD5
d7d757797d557f83897215aa813441eb

SHA1
6891a4062d7f9a83cf11223ef881e172d59eed78

SHA256
deaebd4d268ac6ed78fa1066b2d1fbad1c501bf5553e5c7461078c9d6247f501

SHA512
d7415645676dd8bd032731102cb495acbf4bb6cee8089ddfe346ca53150ea1433ec1a040229ca0b4ed0cc569856267f16b6210462572fa2dcfffe7da0eedaae6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx

Filesize
1KB

MD5
455107d53234666889e2a2d028188a9b

SHA1
7119601cb2db890c37678bd8faad2f371ebd43c1

SHA256
d46d1f2e0a5d938a2637a792995eb56de54d9d162db43e76c0cc34ea71fbdba0

SHA512
3f300206906820eba0a0fbebc0b458f2785e97954c0f429f7d59f4a69cfadaa2c90fd4336f6d891b950745562f757a1f8be2d6ea1afa0a8e43e43766b7f07532

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

Filesize
2KB

MD5
c4f6797b42c0e2dfcf31cbca32f0e37a

SHA1
6f5bdab5d4d03155a38d80fd39afdcc10660eef7

SHA256
978485bc32d619c6ba644183fa92e726fccae99ef2206d24a866de337fabb1d2

SHA512
7960c52eb2aa57acc676394222354b7db4d8b775d897bd286c92274ba8661bfec12f19bda84d590f2bcffc18f8f0196eb9c7c0336543e855332e8e826ab1c599

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx

Filesize
4KB

MD5
99b70afe7910e38a38840cad6b6b7bc4

SHA1
33ca88da40068893eff105138bdfa3fa5ed3d067

SHA256
0343aae47764eb0fb66b0ee751716f2499934c94cffa912e3425c91e7e67cf82

SHA512
070ec0441a33d59d51d398cdc7fa2c6f2804be58c18f6add7680c8b9717be224c00382c61a721e1d50eb940a72326544e06d28d46e772047a3c934278774bbee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\error.aspx

Filesize
6KB

MD5
e6c06bd0b083f8116bae6fa63daf8ddd

SHA1
056c2233b9d021733456ab8bb236b4db366709d1

SHA256
d8b0af67d304ad587b0a09d53d1c3ef8d6fa50e69ed0bc11820b8b93b67fd55b

SHA512
255c8e361585718b20f9a706b0ea1cfbc84dc5984133808598e7f2aa1b7542467fd15a101bd1aa27e00e95e18ba5251d73f379c4353b13a9121ea18aabde0959

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx

Filesize
1KB

MD5
25f347f77d4ad2beb4ab8acc78ae2359

SHA1
948bf970416d888f548413cf3e0e2e1dd13e607f

SHA256
612d3aeb6b796f8fccd926e281fa6fa34275ad3afbd383b4b35d6b3dbc94b55f

SHA512
16df99a84b881294eaeddcd10725762c006b12038f1ba911e8314710a1bf8d5af60c5ee3280371b7e93e5bc5e20801cc821ddd2c012fda3499777c2f9e9b2f83

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx

Filesize
752B

MD5
9cf118ea261fea282c178d67de3b50f1

SHA1
b275139fcbb9649ad68af37bd1cf312cf575f1cd

SHA256
80a242678f240540e97d36ca15e9ccd0d8c435af01255096a8740d0fe86bb114

SHA512
b1d5600e65fc33c701dc842b147299a9e3fd5553760fa45c5fb4535f877c23b6a27a4d453aa411c47628eab455eb31c58e6eb9c4aa6cf3f117eda30964e794c3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx

Filesize
1KB

MD5
8f48bc9bda7bfa49bad32dcefb68486e

SHA1
de956e86ff0ab26d1297c99d231903ad8a52d2ac

SHA256
6260bb25ffe86becb3a9925cfa380d2c6e066c1457b7e0a4f2a0b51bdc3af3fd

SHA512
70947a545557ff2e7ec2441e8b56cb1e0273a986d76c35caa7a98a9f529c005d0aee1f89e31bd4782fa80e82e660a6ecd879a4338f15200607b880929e14a4d9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\navigationBar.ascx

Filesize
8KB

MD5
6a8e1311cb9441f7f51bd9444741f605

SHA1
29ab405c117f19145c47895d0d4f4fde8d321ab4

SHA256
dfa02af736fbc1a801b9b35b91987acdde4af656475819b2a1bbf79119a12902

SHA512
dd454364c5e351a15b083febee5634523a7dbb4dc468d9b07d18a97506b180f6d6a1f4f7e834a65fc067cba32ce412a7543047dc705301a87b52a7e81c3e4f22

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
415e4d5e105aef6fced8598853a3c5fd

SHA1
df1018edeee06d620eae1af4d5d09c9c8b024216

SHA256
2348d30adaa3c8b1b9922f6504a3e6e253d50b45fda54e1056ce4f377fdf4235

SHA512
f27476fb4ca15c3e0a3721d51818abf375d3a7daf9176cae4196430fe5314c30a8440b1b13e3d873ad6f536f68c251fc57d6a85c0a782292da2b0de860a356c7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
067e96d39f334f90ba546c7a98b8b27c

SHA1
bdd8b328a8c6d8391fa4ee6824d0c2148e33fae0

SHA256
739ec883d57dd4a3147b4be216733fd108fc2ce881ccbdc4b0c95140478a70de

SHA512
2b3008621eabb52cb4608a8e90e7ea43fa00ad3bc40e17a0bbe1e398ea5c85b05e39431e48d8bde421b9498ad1ba9ca0ad2cf4720b080984d3f003b2e0f79625

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
100cea33200fa1806cbdae8356e4fe69

SHA1
d986e2757c847dd6134ee722631e732cf7fa0073

SHA256
f641ad49f9735fa001dca943d1436d38aa8c12423daa77327440ea637b1012e7

SHA512
f9384c1e979ecaa4988cd7d3f65f757e2135b7974547294b3413b9ce4fabb94a9dabd6ad9df7b49ff6ab3230cf82179f6b8ab9abc3fbf7dade30b59b3c08ef56

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
4a003e83dbdeeb9d0c6e8af06ee598e7

SHA1
da4423d31f48ab91995372f5952f055d7fe050cc

SHA256
1b3b3a967113ea81df6c25263603d40f5172a12a508c2ee0317d969d4c0f776a

SHA512
64b1b2f199b7fa0988a08c3cfc538705c6fd43d155798d35d110775bda6e0bb714e09538a0b80244c4ff1e5b0c22d96098a9f06f8258f42430774a375f7a23ad

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
1b9a3f1cebd2bea3d144f6eea79557e7

SHA1
caf0561ee3c2b2db7efdf7e7c89d792fd5d975b2

SHA256
82b888ab1119f4a44c0772bda8c7040ef490492150935a75bdd8ddc8f30d0692

SHA512
e8fb20c8ddd14f88652a5cc3aecd8db5b76f736a5d30135f4de7730f3f10c3df6aa27c3cba220e73784dbf27fc8e6b3ab76b67d2294b657f0ae819f4dedceff5

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
3a53f145f45d3cd884aed31505451df6

SHA1
37ac38a4ef31ca649f1f7ad329e771c51ecff8dd

SHA256
fdc46a8e1717793fc46c7c4f7c2411c54cff2dfabeb636f18e70042bb8e6f0c6

SHA512
729e7e6860d7d5b0086596be9e140b5633c659c9b28e99a23b5cf484a83be8f978a565bf8f86a83a7c6ba0d736ac5a3891039b9b546a4ba42768480ec39ad0c9

Download Submit
memory/2588-521-0x000000001B130000-0x000000001B1B0000-memory.dmp

Filesize
512KB

Download
memory/2588-141-0x000007FEF5F63000-0x000007FEF5F64000-memory.dmp

Filesize
4KB

Download
memory/2588-142-0x0000000000D40000-0x0000000000D4C000-memory.dmp

Filesize
48KB

Download
memory/2588-144-0x000000001B130000-0x000000001B1B0000-memory.dmp

Filesize
512KB

Download
memory/2588-145-0x000000001B130000-0x000000001B1B0000-memory.dmp

Filesize
512KB

Download
memory/2588-483-0x000007FEF5F63000-0x000007FEF5F64000-memory.dmp

Filesize
4KB

Download
memory/2588-574-0x000000001B130000-0x000000001B1B0000-memory.dmp

Filesize
512KB

Download
memory/2748-131-0x0000000074560000-0x0000000074C4E000-memory.dmp

Filesize
6.9MB

Download
memory/2748-65-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-19-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-0-0x000000007456E000-0x000000007456F000-memory.dmp

Filesize
4KB

Download
memory/2748-25-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-29-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-31-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-33-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-35-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-37-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-39-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-43-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-45-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-47-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-132-0x000000007456E000-0x000000007456F000-memory.dmp

Filesize
4KB

Download
memory/2748-130-0x0000000074560000-0x0000000074C4E000-memory.dmp

Filesize
6.9MB

Download
memory/2748-49-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-51-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-53-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-55-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-59-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-61-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-63-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-23-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-67-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-69-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-27-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-15-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-13-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-11-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-9-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-57-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-7-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-41-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-6-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-21-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-17-0x00000000046F0000-0x000000000471B000-memory.dmp

Filesize
172KB

Download
memory/2748-5-0x0000000074560000-0x0000000074C4E000-memory.dmp

Filesize
6.9MB

Download
memory/2748-4-0x0000000074560000-0x0000000074C4E000-memory.dmp

Filesize
6.9MB

Download
memory/2748-3-0x0000000074560000-0x0000000074C4E000-memory.dmp

Filesize
6.9MB

Download
memory/2748-2-0x00000000046F0000-0x0000000004722000-memory.dmp

Filesize
200KB

Download
memory/2748-1-0x0000000001D90000-0x0000000001DC2000-memory.dmp

Filesize
200KB

Download
memory/2748-133-0x0000000074560000-0x0000000074C4E000-memory.dmp

Filesize
6.9MB

Download
memory/2748-134-0x0000000004D00000-0x0000000004D0E000-memory.dmp

Filesize
56KB

Download
memory/2748-143-0x00000000020E0000-0x0000000002120000-memory.dmp

Filesize
256KB

Download
memory/2748-495-0x00000000020E0000-0x0000000002120000-memory.dmp

Filesize
256KB

Download