105912c9995a1d718c5442349d2cc4bb99426f75ff34554cdfd9a7272eeca398

Analysis

max time kernel
107s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05-09-2024 11:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Size

146KB
MD5

a5f2eeb4c5cbb2c2ff3b103e304c4a37
SHA1

604025da6efc564ae2b3b92c33eb3a2995ca81a4
SHA256

105912c9995a1d718c5442349d2cc4bb99426f75ff34554cdfd9a7272eeca398
SHA512

96e766e4f3aefacada98a5336320db9d26c5d7d5d150125183e5415786b57d46b3383880910cfbdcd0928960d4abcaeba19c0854b0fb4a863391f0b13617bf4e
SSDEEP

1536:NzICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDrZ5bKzpnSPyZxedH4UnFgDXv0R:eqJogYkcSNm9V7DmSPNHnFsvCT

Score

10^/10

defense_evasion discovery ransomware spyware stealer

Malware Config

Extracted

Path

C:\RCl10Ol9q.README.txt

Ransom Note

~~~ LockBit Black Ransomware Since 2024~~~ >>>> Your data are stolen and encrypted Price = 2000 $ Bitcoin = 328N9mKT6xFe6uTvtpxeKSymgWCbbTGbK2 Email = [email protected] Email = [email protected] >>>> What guarantees that we will not deceive you? We are not a politically motivated group and we do not need anything other than your money. If you pay, we will provide you the programs for decryption and we will delete your data. Life is too short to be sad. Be not sad, money, it is only paper. If we do not give you decrypters, or we do not delete your data after payment, then nobody will pay us in the future. Therefore to us our reputation is very important. We attack the companies worldwide and there is no dissatisfied victim after payment. >>>> Your personal DECRYPTION ID: WERTYFG34A48MK4D6D525F3F372263313 + ID Number.README.txt >>>> Warning! Do not DELETE or MODIFY any files, it can lead to recovery problems! >>>> Warning! If you do not pay the ransom we will attack your company repeatedly again!

Emails

[email protected]

Wallets

328N9mKT6xFe6uTvtpxeKSymgWCbbTGbK2

Signatures

Renames multiple (11197) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

6955.tmp

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000\Control Panel\International\Geo\Nation	6955.tmp

Deletes itself 1 IoCs

Processes:

6955.tmp

pid	Process
4788	6955.tmp

Executes dropped EXE 1 IoCs

Processes:

6955.tmp

pid	Process
4788	6955.tmp

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Drops desktop.ini file(s) 2 IoCs

Processes:

2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

description	ioc	Process
File opened for modification	C:\$Recycle.Bin\S-1-5-21-2392887640-1187051047-2909758433-1000\desktop.ini	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	F:\$RECYCLE.BIN\S-1-5-21-2392887640-1187051047-2909758433-1000\desktop.ini	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

Indicator Removal: File Deletion 1 TTPs
Adversaries may delete files left behind by the actions of their intrusion activity.
defense_evasion

File Deletion
T1070.004

Drops file in System32 directory 4 IoCs

Processes:

splwow64.exeprintfilterpipelinesvc.exe

description	ioc	Process
File created	C:\Windows\system32\spool\PRINTERS\00002.SPL	splwow64.exe
File created	C:\Windows\system32\spool\PRINTERS\PPef66fq5qc_0suyo7a0wqatvpb.TMP	printfilterpipelinesvc.exe
File created	C:\Windows\system32\spool\PRINTERS\PPl0brcjbubjw8l0izqeyojhloc.TMP	printfilterpipelinesvc.exe
File created	C:\Windows\system32\spool\PRINTERS\PPa_2bw7lm3184pnivaynuwmpj.TMP	printfilterpipelinesvc.exe

Sets desktop wallpaper using registry 2 TTPs 2 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

Processes:

2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\RCl10Ol9q.bmp"	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\RCl10Ol9q.bmp"	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes:

6955.tmp

pid	Process
4788	6955.tmp

Drops file in Program Files directory 64 IoCs

Processes:

2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

description	ioc	Process
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\ko-kr\RCl10Ol9q.README.txt	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\VoiceRecorderMedTile.contrast-white_scale-125.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\OutlookPromoTile.scale-200.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\clrcompression.dll	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\Assets\Store\AppIcon.altform-unplated_targetsize-256.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\ja-jp\ui-strings.js	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubWideTile.scale-125_contrast-high.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Windows Security\BrowserCore\manifest.json.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\ReachFramework.resources.dll	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\msoimm.dll	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\SpreadsheetIQ.Diagram.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-ppd.xrm-ms	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\bg-BG\RCl10Ol9q.README.txt	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\MatchExactly.Tests.ps1.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\StoreLargeTile.scale-200.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\complete.contrast-white.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\System.ServiceModel.Duplex.dll	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-48_altform-unplated_contrast-black.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-sl\ui-strings.js	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ms\RCl10Ol9q.README.txt	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-pl.xrm-ms.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\hwrenclm.dat.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\AppStore_icon.svg	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Images\SkypeLogo.scale-200.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EVRGREEN\PREVIEW.GIF	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.Interfaces.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\images\cursors\invalid32x32.gif.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Globalization.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\Match.ps1.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-48.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\WideLogo.scale-125_contrast-white.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\123.0.6312.123\Locales\ko.pak.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\Microsoft.VisualBasic.Forms.resources.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\da-dk\ui-strings.js	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\et_get.svg	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-20.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\IACOM2.DLL	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2019.19071.19011.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x64__8wekyb3d8bbwe\AppxBlockMap.xml	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-ul-phn.xrm-ms	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_2x.png.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Generic-Dark.scale-100.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\es_MX\LC_MESSAGES\vlc.mo.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\COPYRIGHT	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\eu-es\RCl10Ol9q.README.txt	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\es-ES\MSFT_PackageManagementSource.schema.mfl.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ARCTIC\ARCTIC.INF	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\PROFILE\PROFILE.INF.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ja-jp\ui-strings.js	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailSplashLogo.scale-150.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Audio\Skype_Dtmf_6.m4a	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\System.Globalization.Extensions.dll	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GamesXboxHubMedTile.scale-200_contrast-white.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Templates\1033\LoanAmortization.xltx.RCl10Ol9q	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File created	C:\Program Files\WindowsApps\Mutable\RCl10Ol9q.README.txt	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Assets\tinytile.targetsize-256_altform-unplated_contrast-white.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-black\WideTile.scale-125.png	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\es-ES\MSFT_PackageManagementSource.schema.mfl	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

Processes:

cmd.exe2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe6955.tmp

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6955.tmp

Modifies Control Panel 2 IoCs

evasion

Processes:

2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000\Control Panel\Desktop	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000\Control Panel\Desktop\WallpaperStyle = "10"	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

Modifies registry class 1 IoCs

Processes:

StartMenuExperienceHost.exe

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

pid	Process
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

Suspicious behavior: RenamesItself 26 IoCs

Processes:

6955.tmp

pid	Process
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp
4788	6955.tmp

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

description	pid	Process
Token: SeAssignPrimaryTokenPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeDebugPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: 36	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeImpersonatePrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeIncBasePriorityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeIncreaseQuotaPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: 33	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeManageVolumePrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeProfSingleProcessPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeRestorePrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSystemProfilePrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeTakeOwnershipPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeShutdownPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeDebugPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeBackupPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
Token: SeSecurityPrivilege	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

StartMenuExperienceHost.exe

pid	Process
3672	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 11 IoCs

Processes:

2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exeprintfilterpipelinesvc.exe6955.tmp

description	pid	Process	procid_target
PID 4052 wrote to memory of 1436	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe	99
PID 4052 wrote to memory of 1436	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe	99
PID 3588 wrote to memory of 4720	3588	printfilterpipelinesvc.exe	102
PID 3588 wrote to memory of 4720	3588	printfilterpipelinesvc.exe	102
PID 4052 wrote to memory of 4788	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe	103
PID 4052 wrote to memory of 4788	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe	103
PID 4052 wrote to memory of 4788	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe	103
PID 4052 wrote to memory of 4788	4052	2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe	103
PID 4788 wrote to memory of 1464	4788	6955.tmp	104
PID 4788 wrote to memory of 1464	4788	6955.tmp	104
PID 4788 wrote to memory of 1464	4788	6955.tmp	104

C:\Users\Admin\AppData\Local\Temp\2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe
"C:\Users\Admin\AppData\Local\Temp\2024-09-05_a5f2eeb4c5cbb2c2ff3b103e304c4a37_darkside.exe"
1⤵
- Drops desktop.ini file(s)
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4052
- C:\Windows\splwow64.exe
  C:\Windows\splwow64.exe 12288
  2⤵
  - Drops file in System32 directory
  PID:1436
- C:\ProgramData\6955.tmp
  "C:\ProgramData\6955.tmp"
  2⤵
  - Checks computer location settings
  - Deletes itself
  - Executes dropped EXE
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: RenamesItself
  - Suspicious use of WriteProcessMemory
  PID:4788
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\6955.tmp >> NUL
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1464

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3672

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:4812

C:\Windows\system32\printfilterpipelinesvc.exe
C:\Windows\system32\printfilterpipelinesvc.exe -Embedding
1⤵
- Drops file in System32 directory
- Suspicious use of WriteProcessMemory
PID:3588
- C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE
  /insertdoc "C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\{AD6F81CF-A3AE-4003-B26B-5153D65DCAC5}.xps" 133700081193220000
  2⤵
  PID:4720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2392887640-1187051047-2909758433-1000\desktop.ini

Filesize
129B

MD5
ede320bed5af86c0098109d40fee668d

SHA1
f4665e6a5419b1e483db23fcfaaaed25317efc2e

SHA256
3eff68cb980c452cc598cb24e832f9a796e46c3b9a81d0a4fe628b6f9df2dd0b

SHA512
0c0690cb1e37fd134b247d64c4459bb0bf50d39a2ab1233576a21870329f336935107b4b578d013690fb920eb5d15eb5b14d1354641893b12afdac192273445b

Download Submit
C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
bc2a6a8f2b0f28942ce6bb3836ba4278

SHA1
765e8a285fa32c2a6865637334c067f98f84afbc

SHA256
0133719cc2882c24a573def095eea3db6478677911c982bf6f7f074bcadcfbac

SHA512
38d3114a297c0c5f8dbe093b15bd83cd8a087a1e7c330710f170496984de2f2e7faad37d28d5bd7c8d42a871254b291fb3b2440b194c5119497c78296057f43e

Download Submit
C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
a1357507989ac77b0fe9816e093356dd

SHA1
ee409d8840ee9b65a268e7dc7ab048b817ecaf6f

SHA256
3fd886b82a73bc6f66ba15d01cce4a76cab810a0895c60778febd9e8aaa42d6e

SHA512
636971e6322fc86327add8725ab514c6fa5da0e5c02ec581696fb3d4b3e31f6a9fbf9e46785148f1fa0f5229cc7cfbef128f156773403282ecbb9ffe2a55c27e

Download Submit
C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
750189c4ccea332284e902207139c9cd

SHA1
0d5431aa15a12d97fbab632de640ef4908c65e95

SHA256
a47ac94fcd488c5776ee8946275a8b141bc1ab6b8204c325f5a7990844711a8f

SHA512
c9260dcfc1f0fdf72e1a872851ab0d920750e9dd109352d8957bdf4efaf764c234a0cc50799741827bbcca68a7e048008884a15edeee0b0520bf0dfc9e34b530

Download Submit
C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
e6c2cfec5670d233d9560708f86b883e

SHA1
ce291fe85f17116ebe84bbb6a618ea7afc0f0f6c

SHA256
6283e99e804529c8ddb61c2bcda8eb81c33b24551bcc0e55f09ad7727191b595

SHA512
0d002dfd0a1e961e39217bfa684e236ee03493fd4a82658092bd04e637425f7a29471d9d94ae4e4581d89b5b2c0332cf86eb80b9114ec61a154653d3942dafb8

Download Submit
C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
fa85a79f924b3f4640b0d392c7310f41

SHA1
158f56e4e7bc5faa82dcce957ce0eacd89763157

SHA256
956bbe9cb8d71c4fd0a7331e57e2f81a8e162367c09de1ac013750c5affc71e3

SHA512
07e49f9b74b60c0706240be3eedd3a5fb3dcbd77ce821fb875f71e625eb49940124accec5c32d3c214d3c15ed26ae6bef48fdefc73ac65ccc53503ee1da626c6

Download Submit
C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
5908c40bbcce2a2ad930184617f44f16

SHA1
732b535979ef059aef6f9486fbbf1d2d876423a4

SHA256
c538f54db7fd6ca3193d00508039705c79a8c0e5be480703008de8713bb2548a

SHA512
ef779c5659baedf0b7cd4ee5bfd855d9a270f8ac2276f6eb73883275da6a7e889476bafa9f0dfc948ce0548d778da09fd9ff631cca774677b8a9fece94206042

Download Submit
C:\Program Files\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
17591d7882aba439c46169531762aa88

SHA1
e602e51d7ea639eb7fb92b32e0d155a843b7363d

SHA256
dcf4b7efba43d5b642786dac445adf595936e82722572468a6c7fa862109ad2a

SHA512
0a6610a763d52a65d1d700121b9d4ba00d7d53874c0d56780d7f595253150f830834f239f3750aeb47839c7ebc0db48142407d23d1dd7302048af6252cfd4d9e

Download Submit
C:\Program Files\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
465a1997683fd6ccea9179321b59cc28

SHA1
a5a0c58b108071800bc9e8af920cff8210b0475d

SHA256
5fe2c8fa6a75a188b8cd8a34256607dc379489c9874237fe70fe1a4a3934de22

SHA512
16924c95bcc20c102b10f455e91b3461454382ab1602e77d0362a9d534bdc16bfcaf6f281138b426c4d49ebd7658f49e94a3498897118d2ad101f01dd70438e2

Download Submit
C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
c7c8253047f6c69b3187ef97ca77152b

SHA1
5d8cf93cee9eaa6ff77698cbb295bb9d38295bb9

SHA256
3eb2d4a431145a01a0d720c17450118a4c3dd9a70a26743e33dd2d3629fb016b

SHA512
8b48f236d53fc801c036e0f1bbb53d62eafbe2e2ad96d1d9d2ee902417ed4c668372c7e96dc9be6c88dd2de0a9eceac4884d96c869287c77d5673461de9556d9

Download Submit
C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
4a63ef6313adee7d8aa96c9be7f6d048

SHA1
d80b5d31e77c8169bb8394823f75275fd2bf221b

SHA256
d3cb3e5acebf18c919a32bcb228e0b83e6058ea2d4a316ac39e2a73750c63779

SHA512
ba360647b9f6f866b0e78087094389b38048a4d82e5bd5cd892105eec2cf8fea957c2478f002b7485dcca654fb3a4586740fb0a14909914ff6401c8d6e884e32

Download Submit
C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
47f085dcaf5007d30b1fd30045961bbf

SHA1
6b2e1b0f8f6c0e5291f3d9f13042fdca48b8331f

SHA256
fcd91b430bf197689048b83e193a3103190b9011659cff326f29e303f4a41121

SHA512
5024cd765428b0eb3773c9c2a0e54fa9163ec3a235b3fe56d0f5e16bc3ba330e9a7eb4a3a283337d96af16da1f5a1733e1b9856b9ed5e21a37f5ccfe676c23fd

Download Submit
C:\Program Files\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
b7273b79db2f671586d39264ad23045b

SHA1
127ed7e2e963d5f6d6e3c0e7eebe496065615d2b

SHA256
a59f04e82ec0f99060e1155df1583de2296500a1bc87ccd34b704cc828025ec2

SHA512
19509d58f20e442c09c07e666de1e2f851f3fd4c4bc3aba0eb73a5571122ffbb26b9be65b7feac0ac438a2d50c62e5beaddff3b001fd81355f8de740fb82d63c

Download Submit
C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
f3faa55ee647dc4e50e6916f4087ae8d

SHA1
cd6e2692a55b97e92a9b6f00c4595ec95ccff837

SHA256
760964bdd14b3aebadcfc178427640790ca741d82c033f6584ff900af73a6053

SHA512
c6901099277231ae186891fa5db2b679b6545a7d07cf089f4de7497e50a42f694fbf9f38953551ed51762f4f96c14a6305aa920edbeeb4b158c437894a2a7c7e

Download Submit
C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
5430605d905f54c587993edec4b0cc8b

SHA1
64332d34c7a52c10ebf94755d3d3ddb200022615

SHA256
80383738bb25dcea85ead531db4435a91629d4c8449d76d9510d266cd77a7bcb

SHA512
78db6c7d445ca41efdc33af3f91647a8dae897040b84dc314e6a630d11a9e156dd4182316a61e8682c075f20036501c4503feacc84e458133a61fd3419567b80

Download Submit
C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
2b622146a601189a530bc12b1bbf1854

SHA1
502c8930ef3d21ce4bfe58f261c9cbd8e1dee6d8

SHA256
3cb256482283aac97f4826cd03c7d209ad69f93c6522f9ae48597de379e2d15d

SHA512
6fe50299499185004c416d1deb413fb94d912c5f6dc6391c4daf33428bcc180bd2ff9cd5015916455e2b2d9173d5b53d18eccb6c3f55b241450a0da169861c0b

Download Submit
C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
32eeebfcab6658e36bc73aa7c5842eb6

SHA1
0561c9e1d8c3631344b80a985994f10f1aee54f6

SHA256
519a250b6281dab60d8c644717bd2f132c0bb065edee007594b992fa9cdbe849

SHA512
288ffb2cf2259378c5207aefcd602bb29d54de53c309504d47a4f8b24dca1436faf4a3fc2efb63ece342c529043ea61b51d5368637d83ae0cf1fbd4fecbe31ad

Download Submit
C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
743831dffd1b18a6fd2a932ee239ee8b

SHA1
1951707c0c9fee639cdb83e9fb8ab3ad4870bd1b

SHA256
1891adb14da7ecaed8ebb2b1ec56847b7c35bd4b6b6f67e647585302dd11f7b6

SHA512
882bc3f0c77092c2d7841b3cae8b0bb99fd50efcd6a6860e198a8ade0a6b90ce2e72a2de0bc495829efd3c1b6bdef774a16d2baf24fac0709dbb08c08139186f

Download Submit
C:\Program Files\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
cdeac05bbf6b8195cbd325ac849247bd

SHA1
a467555a1661d3c7f6370828952177c09bcf481e

SHA256
e4599d2e94655f6f8f843bc38da9513af1feb1dd3c626a30222e43d4d8fe0e63

SHA512
28e9ca3f72a488443beffde06c1e830f29dc882936c492d9bb5cfe3ab980494ec06487d9a530729aad4eae35bf1ccbdee1249965bf1693f004a57a166fcb53f3

Download Submit
C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
488057e9f16d2ab89d948c80dd8ad910

SHA1
a19100a17bdecab1450c4f9a617b3264ca9e15bd

SHA256
1bbf82a37c9c406c2297fe8d992a9cd7e06b0017d1c1fa5e44df603d9f28eea2

SHA512
ad89f391585606a94354b30de3e00e2098d7b372476b50274c444ac7629fcb909e0919b478612d9ad2d001f5819f0aa09499266ed6674343acbe01ba446071ed

Download Submit
C:\Program Files\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
9ef7339bd19f2427329f342251b9d8c8

SHA1
d1d27891a0b357cfe25e77dbe6ac8bd900c80dc6

SHA256
afa0af305ab3f248a2d17be43d632bbb4ae1ae7698a7c4a70dc8720242fe560d

SHA512
5a43f286da384235854db05ce84c9a4bebe53d6c4dc58eb0cb5ba13bd0fa881f376855e4bf08c64ad794944082c0ee122263b88d2437341bc08a0c22a5686e60

Download Submit
C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
914b226aa99a2e62da7037325b73ed54

SHA1
a70a709b1ffdbd9a5930fbe369d742ec69aa3552

SHA256
639f04c0077994d9feed493b7d2881c103fc1a3b265bfd3514cfd4b9cc76ce04

SHA512
791f1f79671699c23ae6bbc905815af8db973ca23eea78a774f729ceba88f415c2cfa12b7eeb2c9776a475ab3b3106ace643ffebd8f258277a4de4173a55624e

Download Submit
C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
319ffe789ebb41d22b8f8beacbb31a7e

SHA1
819714fb881493bbbf56bfcbe6530e9584adf031

SHA256
db9be64fa64fce212870f5eb62807447465727d5b5594420ce6311fa47650e1e

SHA512
bda97ac9b9ce805d4b2921bca2048d7153001e3bbb5b927e9b8d75f334b498bd669b01bbdf0b468e68243ca7e9c91aa7986725c861683288996ba583bd191266

Download Submit
C:\Program Files\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
fff7d4b882c414d6c452c263b32d47c6

SHA1
495593ed6211ad4a82d07d5189621e7352d4e891

SHA256
5930850ebc53c67357ea8e7ea130d715cd2c4ecff48840cd7bd6bc59294aa6e7

SHA512
01673c610f10d771fbad19d9a3c8f9b4f26ca301fc61f4173e533e1b31a7ab2602f26d70bbe7feec5891cf5b3faf840eb5f5a3efeb129a323b0c8da1a7a68b3a

Download Submit
C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
f33a736196951cabda72f9ab88a8b9b7

SHA1
a9b2c6add4aadf0ad2f429d7f8e50fa83329171c

SHA256
ea88eb915cb940e2a22a9e328990f3989afb091be45380f3915fca6fc22cf5ca

SHA512
f2a60590456456ce5fb0584d84836a34a02d90b12e5238d3dd5a6715ae534999dd8eec07ce9621fce874de50bd36728e7d0ce637ce66db50000728bb35e7496f

Download Submit
C:\Program Files\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
3b8b2f4b64649c22efb77c062eaf61ad

SHA1
20b4f6daf3355413ee297ca6690abbd71496d7e3

SHA256
cf4347bc23c0940afb26400a53b59981ad69cc5bd8e865760fb091d82de06cf1

SHA512
53636db951c5c3820cdefb0036660d57809e69ffbbc95917dbcad17821685b615311c7c8e13ce72eb78aee7dde263113671e585aa897ef128086d4646b55ee24

Download Submit
C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
a53621b1cea970e841fd28069dbf1576

SHA1
2ec05fa428533b75b1b038c4c9f565cd3abb1f69

SHA256
5a4e0702ffcb65bfa20bfe0326f577a9018684ac3f0256cb7d54058e5de238ef

SHA512
07eddc4c38f7732c7ebc958af55ac7837769bd99d606ad0e70fe35dc77f471e246a24ec23acd973a9ea2ef3fa71209ca9be43abc97a5b7c18733aef459769d3c

Download Submit
C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
90164bd9060952dae932cb90b98cf0f0

SHA1
1574744fd7ceadabeb8845cfd38865b5b5110395

SHA256
f83c5bcc90db2b607688afbb51569cbdb1cbb82a8724de25595c94342ddf9f5b

SHA512
26eb15c30e10fd3991cae4ab1d899ecc46d472f4a68bff0da5a9d92b617085e3d9d8d991903b6d1c8c1f646d91680e4a5357ec16760d416b5609185289dd167e

Download Submit
C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
a0350cf233a459c2f010df906e499058

SHA1
f4a290cdf42629f668d70fe151eb377d2df3dfd8

SHA256
58dfb3b33ecc3562a7dd0ec2bf5013d1d35749ae1ef001a4984d31e22e4547cd

SHA512
0087e59111929903e6cc500a47656124cd63da2e58095087f3e8f4b6f6808e048ac8d96162623a7533f36d10e5294f746be26a933259c8c3f04cc51924ff949b

Download Submit
C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
8c9ee258ade327273aeafe6d91572397

SHA1
63bd69c36e47fcab71e6da43fb0638bb58c8e1ff

SHA256
8d2b786880b6c8601d79f6a2bfaa3efeeadd8656ea6167a8c64867a724f5c5f9

SHA512
58f0a57c042433842d73f9dd6f0f65c052d1ac60158ab134b0ea7f4dca6f1852af4d87faa32a2256fbe65d44995320d9ed123e2259c6f53528c44c0bbb6d8d8f

Download Submit
C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
e8a21ac1f90081cd444c68c69cb80a09

SHA1
c92594a2caee36b679ea4d4d2dcb9d88c7a06930

SHA256
f4462dacfdafdb15e6955560bd361a96b59bae6a930eaa01702547902ef6e276

SHA512
82eb05424a0abf0b47a56f880c198e01a172538edf3712991d027bb5d10c40c68c921c964c922f9e28745b628249fd1f32ef8286eecb229d90a5efb69057211a

Download Submit
C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
50bcb9b1d582bc4f3a3a414094a6ff03

SHA1
bf676d7320ccc5ff5c4ccf46cc4426c55acdb940

SHA256
7c0e9ac4a432d3f10e949852809031d25fdcd206d234bf43ec0e4df5f44e287a

SHA512
c8e51d35d1bfb089425b494f4560619a16406c3a6d8d5d06f40fb1bf8eb86184b2f147a931e45eb9e42a1b8802df9375924df5c9b7e26441666614fe4f39dc50

Download Submit
C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
dffeff954fe0a3b6ce14566ff720c1a8

SHA1
1b7118e0a11414081c844dec9187ae747feb8018

SHA256
00de7768c3b44f529fa874a60f9a0af46ff9a5bffada4cbcb03c542faec3d9c8

SHA512
fc2e515475c89fa5d9641f0552fccdd7f0c62965395e14977bd89a4e5a734637853d6cd48f533e2a038caf179533d102ad3c6c53577abecfd635b3660e3caac7

Download Submit
C:\Program Files\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
969527630a2d0d49bc28556fcf8aa48a

SHA1
a67018031435e296ed4442407024ab99d9bbbcf1

SHA256
61f3eff18befee474290f253d8af92720f34ca8a0f5c7442f58fe215d5a1d63d

SHA512
7f9935f70c45ac68f21485a885ec46970efa0301e05f7472b63f64f8ba0d515894a58cb630d868180782d7bc6db8d1a13c7d4c4c7299096e9cb3162d73a6e2bc

Download Submit
C:\Program Files\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
488154b5ee21ca3e95cff8ff76b2702a

SHA1
4c7eb089edef129eeaf5bfef9d70233b20097484

SHA256
44c318edf54ccea1d11d88cf581dbc124d868b1d45d011a0934b20611a9b045d

SHA512
7006e74a8eb0dba1828af08ecc546c9474fc8060a00c8684f60f19fba4b8cfdbfbf549ade571793d349f697b1bd7979f16fe637637b93637170a0853b667f1bc

Download Submit
C:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
2ac686d8fc1014aafa909473b309dccb

SHA1
c4ded57d8620756b11ae2fed5da2e96396d7b223

SHA256
ec2b24948f4315ae18c0a3b5fc80b80b7d51b496cb1bc8e17d943f45b03f6a54

SHA512
b27950b6704c1ad3b54b4e8440d9ed6cee7051730e38ec4f7469139198761b4875d5dac0677dc8c52869e44e26bede418895775c18f395ae491414ec8366fb3b

Download Submit
C:\Program Files\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
8ba9207a19d63c4a27db23c0a0640a82

SHA1
1d891206469b9ea7912254a9bdf9a701fbbc7d36

SHA256
629a67639804d806bc0ae49f86ccbe28986931bde3f4093c1b2a710d4100737a

SHA512
f7d01e3617856236ef9093dc6f62c370864fc02b6d0eaeddff033c8cef428808c93fddcdd7973c174ef348619f55e13b313c759fd870478f3c6003a30f9334f8

Download Submit
C:\Program Files\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
0293e865aa5c9e6149a89a5f9a69ece3

SHA1
abb412bf364703135e3c08d0f83320c6d4dcb634

SHA256
ffc5525422d6c2a3b18e1d6ee8e6de8cd4e356cf1b2ec1ceb35c5136df51f2f2

SHA512
89d5d8c81e6db3e524bd059ed01ee18d6f99f8a57817f8cb91873ed9b7a0068c40f66b3167621aacc074d29898ede297ac2d956f2e9b98363fc3964ad50aa972

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
143aa963951d24e761e7a97f070d91c6

SHA1
cb38b97165ca2b82471e6bbe13890b9621c04645

SHA256
916b5eca0f2a79a948a07ca8d9a5ddb75d6e62d617b2c48ba741a3363cf8035d

SHA512
33979efa790b813eccd76ade66e1d9a58acb5510fe3be294ba9891abc9262436fccbc24166cf504b238a5dd84c414e98f27e2bea605190e6297f8434a885f6eb

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
b42dc6519fd2cb39bc2ad0d9f63ce57a

SHA1
873a6ca374b94175fab7610e6ef977b75a727157

SHA256
53cad9d2c7621f4065bd4539a86fd82c50eecc2d0c5f8c08658cc15731421910

SHA512
3f26261a6301f9281ba1d74bc21d30d8887886fba2c6ad9b624b64a9559aab13e3adde7dc9dc511ad36a840e8a617a6d1dd34c05da0f237ff097f87d5e202878

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
7f5c6a81f04936d40e24413180060294

SHA1
4bc586c6a218ae8ce172bf0eff1f21ec54c2ee18

SHA256
5f859840b995f9a697cf4427f5809c54a727c86fdf492b1fd3d09bd67a3246ba

SHA512
acb6831202cb2cc081deafb0dcf4fea7f914d9e84a8311975536297a58b0b6629bc63168d7c23e0e54f350d82a3a338071a5a7f87e81b594d5c609294cf5a21a

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
3550d540b382f37d6661509139a0832a

SHA1
a1b8637b3076579464484869b2c46ea06fff722b

SHA256
714b2f7a9e3df0403db09505425ab2d804ca1de7cca5e7c8261fde76325dc2e2

SHA512
728d55d3c3c14af96f759707020b230308fd9a98cce55347d633c1f2e309bfb1afc77c504a197873bae87641fc3e5bc0a9def04de0cf005b704f9e5ecb07fcb6

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
5639b720f1e50f127825205d0696d0d1

SHA1
eeaeb8d80a04cf7ad4e804545f5cf08b731c57ec

SHA256
70e31d3d076a2338650579ee4133bac3110be3239f7c2b50ac2216df18032554

SHA512
e07cffabb354e4de1bbf683e54e075db5ac035464a015192d52d32570a4cd182a37d928a9d43167d1bcab2830fdff5bd99c38670a913df058c9be245cef7ee89

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
a85cb44e84a0eff4aaa0ff3db01ebb04

SHA1
9f5dc30b14e64862189dd67676e92a4240a27d51

SHA256
edf980c1483e41d7f17c9b091f7eb7568fcbf41840ef2e077551f71a9dd710b4

SHA512
9a02aeaf85f2bdedb24edb7d27b1410718da5ddbefc16957a49d68fdb043fb893577b32b25b81cbe52e61eda8f929db0bb1b7579f4ef10775b85ce0f4bb3cb5e

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
b89d5e91065772b4569ec5034bbd01e3

SHA1
bfe683ef07889b30273431f650a3e4035cc98cb2

SHA256
0ea109554a8cf64f765cf25e20aeed9f3a4bea616ea271c89f99abb95211d2f8

SHA512
907ba127ecc3207f35955b6100af62c6c1eaab15a2cae0e7f558dea2c79788db87c0a4ee2bb0a05e95b60ad6be5415c9407de4f4bc3cd262665b4edebb07b016

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
b0967100012a2769b4e6e14983a8a409

SHA1
f27bd9a2a6eafb04906f78e7b2a14d88dc4c4c2b

SHA256
47895830115b77b73cea9c2bc097087888a2941a738a9abc95c90eb6c4ded3b4

SHA512
862f42b904903a330998330fa4366a8bae51398e9d901c2be7312bfed92b84505e3874540c15ca1a64d3b706e39e4b554ecbf932bb9ccd66694eee61e1b75b52

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
2bf09f50514c8b35b568840a6cf9665b

SHA1
bf7bb0dd7471657a5ec870f7004cf1268e7b3fad

SHA256
91fd95ac89d8e8fecb1ead8345873fb67023cb4199a35ea0d6ba645775e6666a

SHA512
72151ebc87931417da8724f10d7fc21a34557cee477a8318fb7c0cf48735f985d26d422f4671d2887953d1f0183ee7a4a082040e4a3427c47d12ce9093b74c5b

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
92bbe9c693a9f7aaecbee0d3df6c428f

SHA1
4b2272beae4d6844414cde55dfec143b57866b60

SHA256
a179671fd6658dcd1d0ad94a0870d609dd6c872d7830381c7f6367ac33722f21

SHA512
8ea71eb4d8031aa21374da77e3b288897e90728978437bd96674f23ec621ddae1e697f5984d0dd6157c3f401a2e284fdc2ce5858f97fbb5c931e12fa07895f0d

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
b247cf35f49b0d4336e63dd9d79068da

SHA1
cb31ff371794c42bc5a477a855f960e107bcddca

SHA256
98bab62b949c96ca080ed37a75ce513a0ee44fce2165f39f7c240b4f002c6d7e

SHA512
b0a3d6d2fd9ad27aed6ef412fc698b4f525c30fd83b2b192b09934ef78b1d3d3fe9d68eb3faceb3720815927bfbe0784cbd1a3d70196c754077c223dcc89d458

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
6e8fd559c81e9580cb4cd54d6af9accc

SHA1
11ac568f936f1c1026e5f9f7831041742895b4c7

SHA256
fe289d028d84ec7d52e213924139dd189750643b7a3793231f0a9e6aac703845

SHA512
76af503a355bbef173166f7ea0bd5ce0186fae8078e3fc4c11cbe20ccf6757f3283e92b22fdf4c7230d4a427119cbb3d3bcad401a8532dc16a12681e3c521837

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
555f62230ecca55a954b369d6cf6f998

SHA1
02545f19363e2cea1688858003a5eb19e1fd08fe

SHA256
f77a811c1704013e4354e8032692169930337cdc1c1a3cbbca01a4e523c86db0

SHA512
bbaaeb3cfbc663186e72a4b3661bffec65a78de96d30b5a17d2296f5d35baec7e46c2762dd9d01f7043089cab59ddfe3942a1c4e99f30286274a93cbb900bdc2

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
eb312504b9f9ef72653dce73fcc0e6fb

SHA1
093eb71965f04f4c48d56488ca96ecd89284abdf

SHA256
3181fa05342c262eb2f408d5867688c939f83588578118deaaf933b6c2933933

SHA512
f95e18af8533931a757f01fa0364dddc628cb925b081623ed1a3e57983e71085bcf8378c25c266f6fb3a01e7178e102eff329ad61d62252b028f98b34766ab4b

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
24313ac924286b351013f5d61939e20f

SHA1
833fe283ab2b11453522b135582fe19697eb7ffe

SHA256
d5fcd975e401f5a30640eeddd6f139e1383e818f30f1b4e47765920d6d8c3ce2

SHA512
f12663d9c1ab750ce3fd975a6b4fec15b6e0125f919edbcfa6c14a30618bfeb299fb7b861c592d3cfd0c31e329eb992e7d38b3dc39796e82178e69c00a06bf14

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
1b476f58a215299d18a410e69e2bbdcf

SHA1
e0c63660180df1ef621a710a54ca5a281e014fff

SHA256
6ab9a65cd370eaa128a7118b42ac16c9ddadb4f7d25dd543db535f948d5eb60e

SHA512
970435fa23d2069d508007814c9f0ae8461f254eba56105ce43c7be13ce8d47f99ba9a66c4483021a2f8267a78bf542f1143c708ab3a4390a79e410a753c1dff

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
0f9cea4b91f2c3994760ba18c784fd91

SHA1
b3e0c178c789f477d764bdcf7dd88f526cede5c5

SHA256
b71fe6c321cc63e19a239f482567413e5b5aae8f387bb59a20eb58e7c1b32de9

SHA512
be3bce33b343bc9abfd94b8abe212cf12ad6e1c2b8bc602006a3597f1e38c87f68025848e602073267bea101ac8b7852eec53aa19ab5b544bfaf52f1d9905aa5

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
a27f0a283fd8b5c118e6b97d4d2ce9ee

SHA1
82aecf2c9c8073201b208ee05be2300ac6b4a483

SHA256
fcd4580ffa9bb64918b5f7f47554e50e1502d0fb58ca441f29cf507bf1208ded

SHA512
2c5bac8b1f215dacbf187effbb016d7434ae2c594217dccf0c11334cf88d32a631a705edb8dca2b1dd5caa9b8856fe014063028783adb71e45da45d6acc293bf

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
5d3f024793117873f61c6d0db4d89ea4

SHA1
8df43b10ba57187593a8095e23da2ebf35d9ad22

SHA256
3fe6f68add29fef275a54b639be89374774c8399fb9789313271fa32fdb9478c

SHA512
e2ac0f8eec4c11f9059ed922b0c0c303ea363eee36dc4dc2a96878b281a51cdea6adf30b63ff3a02e19aac3a60a0d7dfeb5dd9dc049f71f4ab955afee09e28f7

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
91150668fd06e0c148e7e99397d17216

SHA1
00e8ea65c3bf27672ee80067a795a07d4bc1abe8

SHA256
95cc074e7707dbb63bb8503fb6e4f5f048f3df77f4367a4129320dbea31932de

SHA512
ccc4b753898f1ee53a16f3e310f86d4ee33fa211e4b72e451fc0faeb0ce0895e8314a9cb3f9100b8e24b38cb32a59e94091a5d11f26dd4b7978d69c8ff22d2f3

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
2a2dda43e136c87b512d2491f6abfbf8

SHA1
1088045cb7a8a142baea4b4f4ea853381d7e27c1

SHA256
7f208d661dc59d2435cf1b8145c3f6c0894fe008a8c8e10c985b78d5e5f7cf25

SHA512
abb433a0427b957312b5e32db4b2df9346023e9663c8cf52e1cca8b4c42190986581788f923453d8de428c8d5819dd18715eddd7f60a200421918c610210b46f

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
c0b57638685e4f5f9d460ee4209c2c14

SHA1
abdfa454a10ae2685806a1b03d14741f25838006

SHA256
f031073dc9778e5a51968149f5fe07f8684db9cbbf9d897b294565865255a53f

SHA512
e6bdf88325116dea48c6b6fe3bb2367ab6e095921d6732a2f1ce8af5cfdae18b49ee87ce4a404d1f2dc6ae0636b91609663b6d4ba926c520b87ccb9f011361de

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
3101e62e122c277cc8fbdb210afba311

SHA1
98f97ed301aec58b3baf8235c9e083609ef97716

SHA256
6c0849bddce6ed0d4c8f25e5e0d7ae39b8e67bceaa883f1f119c9f1aa12684c4

SHA512
506070ac1da65ac4287369d8c668f850931340fd5fe13f4df88fc834228c3096117b9525bdbb90685f8ae83dcd09440c35603bbfe3aad1605096822222eeeb5a

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
561df589c836c7e83b9a4e9f11c35529

SHA1
46c48d80e09c58a7748cf4fd6e7912c3ac17d12d

SHA256
2cb9bb6c4592895e60957480a44b2d7364474afa5de679584c3ea022e36d034d

SHA512
bb71908caea28368408b13388ff0a054b008e81f1880aae52e7d6ff5df345c39213a03a7a08d658fed29ce6a136a36775d7568bc296467201f8f16e47e82d44d

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
2aeb4629021e6ec5ef6368b578451aa0

SHA1
20fcc7fd5bf4ae199510594430e142cfed890ae0

SHA256
2308c041489f4eaf55b95ca7ba57d5f8b94c7eb7b4b0d3a61c6e18ccecf04a02

SHA512
4bc597d425cad9f023d7971669bee85f00f97576b504fda969e1949c2d4e5de769180a76872f3f336ca6e09c2966c0d6f2910d58bd626a8324dc2f6c579468c8

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
d61dfa2aa74c3398ce3beee0b91d3d1c

SHA1
797b7b2f87dce172c8f273b390c1f3652a9b02b2

SHA256
269354b3259f14eb39912da64631bb91935dd015a53e0081f4f13be27243f13c

SHA512
f90eb0d4c820a62f7af3088be435296bbe93bd8406f50608921811a843918c1aa6271af5774ae53530c6588f96984a1994a7280f7d433e84ee336602ed184364

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
cfe085f62303a3032d7d3e25bb812ac0

SHA1
ee3822823e080ddaf5c3e836493bb5d7d85b48ed

SHA256
07796618dac8f6bf7821c6acdf058d0d898a76f83adfbcc2e16cbd66afa84e52

SHA512
76c1d951d460651bfe5eede47380d5934e4e7b9c87af8d4ef0b67210552eac473caad2010c9a18e1376a4afe14287394019874eb88e29db93336cd1ab1c17bf2

Download Submit
C:\Program Files\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
7e60cd7140839dac4fce2a6a4505a062

SHA1
38276b73cebad72e6afd0c36e76bc80ce6eaaf30

SHA256
7de1322ac9d50a394bc0d549155fa45ad02605893a82046f15f7fb1794b9f350

SHA512
56da36f140865c75b56cbeb9ecb0a661ec3c800fccfd6e5cf4a15ca74989ade368f135fba1b360a3fca3cb0b0d27c0b68b900ad18ee80a8554764be4dc1efe40

Download Submit
C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
a0a007229002363214bdc8c68d4d9c71

SHA1
a0e6867b8c5ce8f93666c9a274b1cd52fbea9184

SHA256
26ecd112bfc4bb51a60750abbc897223021608dcd4f62afe85e41b39a4094647

SHA512
581233665426bb60df48037da994e5e5cfd38bb0ce974a780d49dda7f5ec88c77b130a076ea570b3b216ffd04afffaaa4ce8ec1a2be841a7424487a660ed19d4

Download Submit
C:\Program Files\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
9cf9d200a462a71932e02aacd0b54d9a

SHA1
20f6de2cce49bed603f76ab22476321ed4e5569c

SHA256
77a50ad478b449c5bb4cb4ea59c264dd57c4845de9e22204b2e22de6b89b5574

SHA512
4d6095033043767ba8e985a3e8587d7699420e4b9458932fe141285f86c394adcc9dd6e0b0c1e7f1c9a904bb8667c58c2f031828869a24ffeada4e5ca412f25b

Download Submit
C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
f1fa61d0cee4c01272d7ca4578e1cdb1

SHA1
668f98502f44533c216afb770473d14a89046427

SHA256
161bf590043f2f313b642806f9f96fd55770e0b9e6665dfaa727adad1aa39eb1

SHA512
3931486e5254086d37e0b062f37b34e79eb2252e2df313de32ba9aee5224be4fbd80f28e96edfbf9b56f88caa3e65d0871d73677c0291f403f2b8e1dc52a697f

Download Submit
C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
631faf132c5c1b6cfabc50ebea2060b7

SHA1
fbb392e297012ae42de147ecc059ac03fb4b6641

SHA256
7ba8bf27b9118d671bb2a995141db1e378cc9eb1a8843824707c602b99fea894

SHA512
2703198c9284745c4beb4228cb7690198c4570e333481848cb37fe28215e72f811b9d773af7b96d6fcf15e962480d2728e7943d4721456236d24fe03133b6f18

Download Submit
C:\Program Files\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
8dfcb5b367a78ff758b484aeaa8c0808

SHA1
ae68d1d0ab5eaad5319180341975c0ca078babdb

SHA256
4bd402b0228559ded36a3405277acf3939b6fa846894d22566167c271f6eae80

SHA512
dfcab0ac8d25c4c03d4d7afcac164b780c84e5520475cde0b50dd7be2660efc5732506a0d87d76b230465c29006c7345d10334f5a77377d7a22fc9da6b95d571

Download Submit
C:\Program Files\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
b8abfe97f6fc68957e3edf354504ef90

SHA1
7144551c6d1f8cfb847114de37c17a0dca263df9

SHA256
e057493d9167b20273372dd50e404e3d2442f19df30548f9ca1f679a6d61d8a1

SHA512
2064d220674cdc76fe4a35b97dd3fb72d5b1922cc092f737aaabfb757179b8b237b93d3c75f8d8aea6f623f58b28f7b284a6461be496c0fb551004f24e771de2

Download Submit
C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
3bf16e72c96ad4453645060afdceb6be

SHA1
2b200c8b3dee4d45c24bfc2bb841b61901ea1a56

SHA256
0bd21f2f38fdfef5f938fd78689d7942bd27046ed0efd1fd3385f61311eb8772

SHA512
2bd1aeaefe8de8d979a5c3bb7489a3d58f3ef30a8179445caef39dfe5dc10a576766efb902325678d1d0062b02a64343579b425b2e13d6a7a1459eb183c30e97

Download Submit
C:\Program Files\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
6a3345f119fa04c328b393c42852b88e

SHA1
4e127f991857110273d74f0a9e60827e61a581d5

SHA256
19cf46c0d73a5272c3ace4023204a827580f5d2d523465a9d05e485fdd62ca6f

SHA512
56c0ab6f4709209801c74c60a22f631ffb803e2cbcef270dc8850712a86ebd8ab88b484bc9bed2485b9e711cec952f1596cbc96cfbf34971a8bb9e60997448dc

Download Submit
C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
405f8e0d95cbf9a46601f85fa2c3c5a2

SHA1
e836c2b293edb4e5df672ac0703c7af7c8e2e604

SHA256
c396d5cc6f8e2bbf2174b6fb90d44ff53efb1835bf24022330783b1d6a21665b

SHA512
b476d28d3ff231c2f70f09a01eb91fd3ad78593207ca60b325e0005e542d334f19794294ac6b7756f9627b05a45de68c37010a0445f0ad96a146b8cdfb09d653

Download Submit
C:\Program Files\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
734da6ce689f07664efb840ab4137e1f

SHA1
6946eaf1f5c212a7f3ba04ea7602152b7ba6208a

SHA256
218f082e67e2ea509a7f7eb55eed1f45b88d5fe39036334b830cbb8cf4515771

SHA512
49a9c8e2cb99461ffbe3390d2db09257a531f744d3d7d2dbac6cc3edcc9ab4dfb252132ddf79f265dea87c9ab31178811b92cd074ae22fc39908811f7970b673

Download Submit
C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
7c6aacdfc5c3ebc680c48c53ed1a4494

SHA1
76fdc01799f68dbf10e49866f3e0f1b019a9489e

SHA256
c71934fc108f5ecd8c2bf78a5f4fc70da38d0e7771857d5a05ad8c664482e043

SHA512
e3d2f3cd63d878317b1cd1752b62d4a7a4e05d6b88648d3de4845039d90dc7fc00617ecc9d5dab21273c58aee7725a279d244e69d6e6ef166860d5d6ef488923

Download Submit
C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
37be95da48b533295b7c905428bf85e5

SHA1
484d9ce769edc8844a21930b00c58624453ec9df

SHA256
43426e28e57deb79c4526abb2a6d011be422d702b9fd33a780acab85b4f52933

SHA512
305ce60794b97f5f30f25940bc0f7be34d097d0b0237c17d027fb3a034b9a2df2ef6ec6fe79456ed063b0b7e982704f077e950ef7e8c75cbde8051b06afc7afe

Download Submit
C:\Program Files\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
9f6fdd17817f98580adebb440504d127

SHA1
c887d6d0465a53ca53ca7345a956c80f88d5db62

SHA256
53e4c728a6f9e0cf40dc5b24571517fc1a11c1c041408f320f34b80dedb255dc

SHA512
78c064ebb673ba608d3166b248a0c80daf457e6f7c79d3eca24dd52d39f71d4dfcef68b0f4b595f23edc205ec22d88d3b00d89d66fca10d8e7b749a3689a550b

Download Submit
C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
b377e6874e752c9b4c32f360bf4cb8f1

SHA1
a2ae6b8deea6eb57f4bddfdbec5ed01a30e5dac3

SHA256
58cac7f13ba66df7bd123be544f9e43999ee2fa32d03c6bbd9e59e47982ebab4

SHA512
d98970590b374ba8a6de2cc38586f824c5554a2b1c166549a2a031cae28d9cb9ba5721981a5044a7c4d9a132f538f043437e388545934743c9eb335de4ecaf32

Download Submit
C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
5b3558c68ee309221b3136d92cc12513

SHA1
080cb57e0cde4406e57b7978ac071347db27bac1

SHA256
533cb4e9a1ef0a8944d96ff33c89cb6c7fbdc5aedc6e63377b3172e2a721ee41

SHA512
800e69fafe9433858ec11826a3875c5a504b1a85fa7958ece426490542dcaaf3df3ad3b2609b572ed43e5b76d60ffe36f48427953ef99eae29e30fbc1aa084ca

Download Submit
C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
667ff6b294cb0ade05b9b3e91f693f34

SHA1
e15278595c12753f6df60b2ad92344b0a0e4bd26

SHA256
b9e6d77af96f1bf2b04070ed78ee55264004d35973bc6f59724e676e47f18441

SHA512
6633229ce7eb6466058a2517aa2b5b4500afb4fa0cecb612dcc3a133ea239fa5c830ff583e86af01d737a78ce92c7ccebc93d2928e87469e6f56b61812c7951d

Download Submit
C:\Program Files\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
61ed3a03a7606eb79f9591f30b1ff414

SHA1
394bbd744c72e820fd3899849b1116b9174d4e52

SHA256
5a595b941490cde7004482fa440910daf2b69835b1b4a585b0f676b82f9c2dc5

SHA512
638f458e0ae233d663e1202204e9b4385d444dcdec307605bcf93d0a661e51cabbe4f3956dc00afcc2a30843c31dda876e6deee4d95de2eb6378fbc9acdee7c1

Download Submit
C:\Program Files\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
801fafd02242d6afa6cd35133e140d1e

SHA1
7556be31d2245a2b39a03ab88341cddb19fea1bd

SHA256
0a9ea9b6b7a0aea50e5c16a5fa0f6e075782ca6193db06c6f10d887946c3084c

SHA512
df9d9a4b15a5a2e6e37abb6aaca932a82ccaf09f6d5b708b0bd2f59bb82b6adcbcad0faecc8e3b5af7556787a28dfeaf78498fa5935d33666016e05d43d5f555

Download Submit
C:\Program Files\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a3954cad352ca2a3d4c6fcfcbc6e0ceb

SHA1
ae13c9f5e84b1e14b4a232f68f29d2c2f96248b9

SHA256
f785042abfa2f2fea3c6a14d4c3ee010f86cf62946ede3b8fe94fcf9c934ca3a

SHA512
1d6e70094d0bf5d0731a950635834daf8a3d40195ddaa71050f702a7d71f0fc346c5fa4077c095be80d51b751b35574d767c117849c8a171c3e43c7a07dc0a3c

Download Submit
C:\Program Files\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
496b46a48d34c8790bf37c72b120091c

SHA1
2d9ec73ba0d11ecb2d57659ffe8c37eb2861e242

SHA256
ccf400422e908f1b9c6e7dfec0b85717ff44be34d36869d3e92e9e570732c76b

SHA512
f4df3b8273b947b3aa9640402fd197a0168fb767c6c3ff1ab4426ed1d0187481376de8572e3876f0e9a099b0512ae74dd18b1565aff2f782e7e94c192e4d8d0b

Download Submit
C:\Program Files\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
600a47e01d2284209410749c55ee562b

SHA1
3488419ce42ccad2feac3338578def8b1d6ad337

SHA256
447d59d9f86ef322259089c05497f61701a73d33cab98e38cbeeac147eb37dea

SHA512
ba4b0d22369bef29eebbc41b4d5531c1129f6bc141319a333baaeaa975eff7baf195104cafcd58ebcb915635c4feb1ef00e8ec0a95d8f38f71a933e7df9cff04

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
68e6440bd2422d39d4cf0575e7b84a37

SHA1
71e9e8469d249e3d1a2ba1b261e103810f893253

SHA256
92fefe36e43abf915a4963f9d0c3d3a2deed47b7368d6c539859060ba57133a8

SHA512
0a4868b654706ce0995dd04ceb293d133e835af73d1a51ad664b80faffe8ccc53f15c4a267752b76c9126f3f07980116c8432dc49c5a6a84736146a60c987434

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
6e095927812a0dff25650b43bb3ab35a

SHA1
3e6867a12d2b8d44da53d3364f149087f6d14152

SHA256
e9d8e6e4216042a7661b2edf90f6bfda66261855069b5f0d0f064ff6450ba334

SHA512
d6ce42a499cd2b9ad6a82c88382e00081ffd39fcdcabbbcd3a09f4fbabb102accf2c27a5178d3fd73ba45ea79dcd4083e97f20051929cfde352460e1838ca6a3

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
a0fe04280267052ff9c03d6c4e6e9765

SHA1
ea4299abe01d99f503d2bea87fffac79dc99b8cf

SHA256
4da0482b1174051272a1d7872c04b4bf983ef89d0028824bcb7c362c7d42eb76

SHA512
81ca425738977a1c8189fc9267a094547d7d8382d9c686398534dde538e0dd5ad722a76c80a20e0acd364c9d36c49f2cd66731c11f11c4da9e2e5c85160357c5

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
05583b3f56f301fcb8463ceb1ec1cd33

SHA1
5d47ea2af383bb41ab7914583694ed00b33dad93

SHA256
ea6856ed578f351fcf8abaeb4e033e7ee91bac8775071be46e1fed99e48658ac

SHA512
de7ac39c9855513c845369e824cc09336aed1a1abbdab90fbb00f15b34a4dca8a197dae26afcd544cf8d899d5e6f824cbf8532619f5d492d5450f8fd7c60060b

Download Submit
C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
7edcf43a002661f91b3fbc83090752be

SHA1
ac80b69748ade1da17b755d7a5fcdc9b558639cd

SHA256
e54e507831e80f891a93807664e4b1de5629c6def03db7704d2bf2a459d599ca

SHA512
8d3d9c92aab24e730214cc8f5bf7bab9c6db570d6c94d5fcd0d289343b8610f478878de4cac3cd1078a0dfdb87403c19c5d55a47f93a9cc95c6b7213bcc78d82

Download Submit
C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
20b026b693dddb4ffb81870be9aad1ed

SHA1
bb2726dd8e8fb07c4949b1196f25220bb9d91add

SHA256
7d4e67d8ceff1c2ca4ff71682a9d7db5d68e2d08eccad5b639e47ae48706a209

SHA512
9706e696fdb9073cba03cb64c1b166e1daef84ff08887fcbf2f383bb46a756360db3b70809aeb0b28d4e8cbd43960998d96c2a81094b3ae9bb596fd85ce910cf

Download Submit
C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
ba65ab4eedc6a6cd760ea0d25969f269

SHA1
e4021e88539c867a74a8bb55ce8f7847e9353b61

SHA256
8615540041c88ce9427b7429eb60c5586af7c143042eb05ef79a9ccac51fb0cf

SHA512
b229f9e788abd152cfc84159c0fd6ed19400dad596f2c7a6a861abe2d2aa6ccda03a906d5d12e9e25940309052d52e076ac0a18c9ded4b015a41abd6ab739ed7

Download Submit
C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
a2ff248eac57d26e1c5c1dae9a7617b9

SHA1
efbe3be79350e4dd323293eeb7f9125cb368c238

SHA256
6a1147d583fda77d1f3d32ca86c736f56185ac8f60c1616b5ce0e412c26724d2

SHA512
35bb681bf837960503709096c390cc523f975285fabdea9a9f7886772a09681422bc137b305bb269230f019554936542e3324464d569c341a13bd9b5bd5e7d15

Download Submit
C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
6f24f2bb8cf411210b27031fa3c7f3d3

SHA1
750de6b6e5c278cf810be8e7d9e7c7cc09bce8f8

SHA256
18eff1434a9d5f522f0404eca6c5cad39f7135b2c6db5e86c4c301c45149bc2f

SHA512
5ea33b263c651850bc46323b0f0c033362897574ff44b4894b5e8f22592e1581c44f48477a9f2325fcafebe40335e8da1860c3d813bf3fa119740698c8f11a69

Download Submit
C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
f7df760c5dc376e7a006ebed902a7d98

SHA1
ede0449262528df320089d483193d661ed4f36d6

SHA256
60cf12e2bbe42d072a6fb158c2f4c3dc88526f83fde1834990eda35acdef4f2c

SHA512
e207f65605a2dd63fb78c1f1d8e85144b789c425a1019333cc730419f84d0016cc1f1e5ecb17a3dd07a536adc8c3952091fbe8a00b24230ad8d2c58b6c61f87e

Download Submit
C:\Program Files\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
aa1ceb846fed2478d86179e918deaf70

SHA1
c8a0a271cd5b01500ecb394a87ab4a8c03419e8f

SHA256
8f4364cf97b36023e913c915495a00fee436178fe37dc4391a76255f86a779c8

SHA512
45c7571ad07c8177ffbf10ab5eeabb1ccc5a331c752df392f526e77d611f615c00bb74d63c4fabc4d836bfa1be2defcf1bfec0f1a8e678110e168d2b6c761879

Download Submit
C:\Program Files\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
17c1085ebdc21c0cdb085bb4bc12988d

SHA1
901c9fd26a7f801ef0fd4272c2bbef2fcd1ea209

SHA256
0aee210ec7ac6e649105abe4596cc04220d580864827742a3d029331440d1126

SHA512
59b2665a85150b1419fb21e7b475aba8ed207cdb0d45051410797f067082f4da8cb89335c6cb2a25d191e5bec657cd9443b25baebf9b062a599aa69938b07cf9

Download Submit
C:\Program Files\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
5b0aaaa92c83b80da9f1c73eb425b5d2

SHA1
221de1b4fed3f4292a99e6aac32aaae11104dce2

SHA256
d950aa415b9e4019d96195003e820a5b5e055a34565ad68f285c39a366979ab6

SHA512
e3e8c1e6c7e3438f0fa13c71e07c7a31b82ba4013d32b800116be23b26a2bbfc302cfa70ee8cc91a73b01d9e78871df7d509ba096d0d1ee89883373b8201ec7b

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
bea5ad470083a6a845007fa9b9edf7da

SHA1
b4ad241f418a4f3d9046b14ebde8a98c243455a4

SHA256
d27638dee9aa50eb3431ddad14539951ff4636d9f8c9cb333ef8f96d807eceae

SHA512
2f7b5dacfde8a0e3722e9553609e9c37c1c2d91837f8550a3e5099e284fab35d139389bc2a91e0b39a2f6ad85436e25362b25fcf84ab2b7272b289345afba9b7

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
6194955ab8a9e3f2880059219497bcee

SHA1
412a60496917cc3edb779d3542335038edab3297

SHA256
b9f57305c7d4d386c7175aed12838bc207a561e1a09713e8d9de55698ce0c0a6

SHA512
6d4051339974354881f6a3d4b77eb3ef802933fe1fc9409c6ecee13b238722bdaffbbdf179ddf0cc1f63b7b8497755d328c1a1559ed81288de24ecabd3a522d4

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
b442d17044b4b2805d23e91877a9baf6

SHA1
b125c2460f8396a29e9326e5e300312c7f948770

SHA256
fd84e3fc27e0b2aaf0ee3de136b4ab1b2cddb3cb3d13e376759e1261999b11ea

SHA512
68822f4009f293f3bfa2b4b70ce4f538af55d0aae8411382aaccb1eb21403b3de3a45ddd27b2def6a21b16ca2a3f7d23b7584076c61cdf6b1da81da18922e85e

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
5810ba4d1686c4adf10e1d953146b4a9

SHA1
ba2e02f93d060c75db958928aba3cbe9fcee0d4a

SHA256
1cb612dca3da795b5cb8b0e4677737725795165a4a4993b545358cd2fa7478b8

SHA512
b77875aaa4e7544f7f1172771a6a6e5179d598f253ccfe0bff8a3b1f3792869dab41b583862017529447501e11c55734e0a0647dceddfe2ea91402fbac32f440

Download Submit
C:\Program Files\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
15be05b211d607d19a375704fdbb1de6

SHA1
8fd14c4dd1608660c04b4fd9d64d35751ff49990

SHA256
f58d8e08548a66c03a9d475babc389374b11b2fa184101ec9efef112581339a0

SHA512
c9e65c063b094c32653430b5a5dc3ff023b5d993a9bf11d74931bf646c7f3c390e75b01285bf213740c4420e74fca7619ab0c73df31e32bfd7bc8e59e4ff9d0f

Download Submit
C:\Program Files\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
cc0eb506ca2f4a166be1b56850a0de26

SHA1
dead80a87999b9b8b0a711742703882bf8f34e24

SHA256
0f25f86484c2621ea29dd7d8335fac338642d082315aeb1637287579f3e57687

SHA512
6c900bbd7b79fc4a8f6d86efabf0310e0861513690a6c1e3deb3c8253c1744b42faff97a84dd3360b868946971083d0098c1ad37a8a8ff1790d2a7efa4c4bfe6

Download Submit
C:\Program Files\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
30460a30e1b319dc6169b2e2e60c7cdc

SHA1
42676cfa09111d6fb3432735a1f27e93e7967e1b

SHA256
8da7b197ea4c9d6e66492b695220f26734283c8b035e1b75e01c08aa480ad535

SHA512
0b9577cff330ee7215397a133196bd50fc84061295eff58c2a0504e5a48e341091022d94ba02386dfb4db91f48d738c54aed5c80458c123cb0d60f4dddb547ae

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
0a5682251ac1a636209e2ebb396641ee

SHA1
61a786ecc262f2fb66b2e9b84fdeac6d787efe96

SHA256
ea44aac5ef01fcd0ec463305bafb57dc910e09f6d8b59c9bf4c1109b4dee2879

SHA512
2bc7ad0558a64f537039e21adb36e797c198715b0b922e16df6ba6f1afe9c7bbc85c45976d89ad66717732076ef0c12c2364fc7ec591533808bbec8ee91247a1

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
790fd3beb8f18e96f2d94603e0f1d237

SHA1
ccabb0a1e1830ced81895ae9c9b810cf8c57428a

SHA256
88e0cf2d39cfeb28363ab1408ee363ec30b8b29d6cf64ae1649f24db8175580b

SHA512
36a82b47d708bc32ff7b34f043249c8a6cc3f2c576938d0ec2ae9364cfc1a361549b81ad884f26bd8ba47db1d6fc2a7a06470134dcac6ed82ca9969d8b626681

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
4ea6ff22c0eda88d7e6da9f389824246

SHA1
304e519c46464b8668ec8ed629154bcf70e1e887

SHA256
b9c6ed075dd2793d13362cee74175ff8bf833806802af01205582fa5d9a6bd05

SHA512
3ec067eb2386f6b44f76e876b76c43f37d8e9884d251c678806d9b1000e154044718073df2b4d975f00b1af41f530fb5548d7986aa2b2ae6c1c86b909f971585

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
fb58eb888f06f39e2449dc4e6b2ab1b5

SHA1
58814897cba58d9fe84855b22f4b4d32e3ae43f0

SHA256
77287c05d327899c6b9d654f22e3e60e363fbd03e11c205e5c43b9ffd2221bcb

SHA512
e0f94e54b666f32d7b0febac2e8bebc71f768c6bc2f32d23537ef72c111105d2b22d694cadbbe1ccd492f10bd89106455433f3e842f5d2596e96b220f1d8076f

Download Submit
C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
23b46e82cd4fdeca96d03773976096f9

SHA1
b441e8e9621e8dfff9dedcfdf6c43891828d6bde

SHA256
3d1f9cee841212e679023b1ab9e977f837bbbfd69791fb743690e3dbe2681452

SHA512
98afa965427939fce9f107924f2f895d7b363823bf4e68707602569e4cd11fd508615a8ffee561b064b1152fb8a6565726d5a403d64b15bde6d943f5a3b1e182

Download Submit
C:\Program Files\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
7670ac6d9c33424f8942e5c28569304f

SHA1
050e0f53f1e2328f81ed3ace3731ec0360f61289

SHA256
eb5d78127dce4473b49dfae18ecb0551e6e3a64c8eb877217cb789f29b9dd687

SHA512
7ee291ae737beaa4c247952ab17137eca1ea1e71983bd4f1d456efd0a49c5bcd04c5acc1e5bb79b6e54c076d47d7a53bce1bfcd6e91cee569558011ca39840c2

Download Submit
C:\Program Files\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
cbca2ec17eb3e2b90910cdaccfaf849a

SHA1
37762b5c0f0d0f7f9652c0a174ae7fea303a8e74

SHA256
35800fa9687fc5e7c1f30edf117488fc9dfd5a564fb98adb31a17446b234c69a

SHA512
dbc51e6696324d72a843883c54b4b704c3b63f0bf34367ef15b8cd5f7f1a8361766bfab5e7227b0761ceca2ddd57079556cd53604188525dc6c318f0359c1b4e

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
0b64b3f601fb43c8892cc833172ee20e

SHA1
5c3fdaf3952cef822f52677b6764d41725e9c148

SHA256
2ac5d53255a5df13f381def46ffc4ec9da41642ceaab07c96d9401d1becf0d54

SHA512
d9f04bde75c0f42a7aa0862a001f7bc32f65f6aeeebb1e830aa9a46e7a39dcfacc7f86640ba23c068cdb56758220f111d7938ffd45e501fede530151b449e7c2

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
ffa0ab96205e14b28967bff22916b143

SHA1
94f9e0e6585c2e441ede73e560e8cbd8acdb5cb4

SHA256
de38aca2e14426c141bfa25b3d0490f5fdc5854ed8321ded7e2e3d0de0ed6259

SHA512
75e0b7c6b6945bd9e8dbffa32eee8d85aef18dfe396edef6ce9da0bcb574c2dd68c2b6d6afbf179bb7b702a10f6243ba8b51d280926834954cb47cb47556112b

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
5094803bbccc24fe90877dd782a138b6

SHA1
44749279ab4fe8dbc9fd81521ada68b49034e895

SHA256
8546d80df787218fb3d06d8415d1e7ed41d603061c64853348749e283b6525db

SHA512
bd1ca4632f119e0f27cf562e6e0a829a9468351f45923b0961171a3299978de69670b283fc26189f0e88cffcb90df6f20ab4095ad5eb0b4da10e2b2a699a80f9

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
30e96626faa1c589cfa2aecf9dc4503a

SHA1
36b3af06e0b1e3f04d314ec1038dfa55d19c79ca

SHA256
e80d27cba54986dda4c85583c0ee334df4f84ea5021b810aa4930091896a55a8

SHA512
12a48d94ace0db8081d64a051dc126350d21e75da33f63ea7c174cb39a2e2cd0b0aa9f43fc586aabdd76662216a371c7c4f65dfc1e5ebbfbbd576c0b1a03b008

Download Submit
C:\Program Files\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
cd8581280d7c53cc1f8410a232a0b083

SHA1
3ff3711a9a07cf222db5ee8b8b27124aec8222ee

SHA256
c63784aab91bd469f4f3fb22ba1a46303962eac022e86c34f996ee7181ab7077

SHA512
b3615c85c05c8e4a2cd28d798172de355b809c5478842b6a55b60b6182e2b51b9086bcd4c099070c84c557b66f8010ec52405b3916dbfe96045ba70ce199a5a4

Download Submit
C:\Program Files\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
53bb04d629e0aa39b62ba5c925a86e99

SHA1
430a2694457e8b9b8dee1525c223c7e593597a9a

SHA256
e1b93f2fb5d2611ce2f58db5f2dfb75db0e5702c0788f46cacae1eefcb8e069e

SHA512
35063a49ac05dd171e592c1d49835ea960fcef24ae37751d9618084d2569c038d811bd60eef12c684bbf8752c84512b6016887a9b4c22fbe36dcc7e11395ebc4

Download Submit
C:\Program Files\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
56778d117cd22f453a339dbe7c87d76f

SHA1
49a4155a7f75ca954a6b2baa8329da70a0b1912b

SHA256
38c9ef5d0cfa51ecb2c3a416ad2d2fb1713a15bc65f8eb402c3dc2bb497618cd

SHA512
32e887e77b65794d73882db1be6ab653dbc3a0fcad9ecfc8c41a6508ec0abf1e28b6155e870604156f23a84ba3ade513a858dd2b23637973d473af1e551585f3

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
623336b0c1ba09502d58e6c4cdcf1376

SHA1
2624113228bfb12502768dba6ee9002aad727504

SHA256
e9e3d69b264058a5e068d7b790bda47b5faf9a881b5e54bfd6b182373ed636fd

SHA512
7414eef740c6e019e4f799d5c679965a2e6ec1e10da0d8fb5be35d64466f6653f8fd67a5d810a0706656f7b90f3848f27e79e3e7ff480f7045d25d19914437c6

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
52b9a70c1e5ab57f2ffabbf405304d96

SHA1
c49209a914cede490057210bc12b859755bdb8f9

SHA256
8f9fb87bcff2218ba62b682fa1aaf730d441cc4e14c3d1125e73854a6bee59fd

SHA512
5d044c79e1800cf9642ac5e895b89314bdd3384082a9d96bd7717aea1b55dddf7582c911e64b9ef5cdec76abcba4991536011d89b9ba79646a02647643cd4d86

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
388ea0be3802cb1289c1c157dd930530

SHA1
5671213e330ca40f2cd115acbd6fef27a8be2a73

SHA256
567223ea0b77d7eb043927482a9a03c4ec9877b2624adae0cc5fcd076690455f

SHA512
9f5fcddf9ed4e898e7ee5a1a073f6ab3f29331c0e66e7b92578bb451ebe30d67209f8e0b5893584d7b5c163e492b3a509b566760ff73199a0cf9e4b53802aa5a

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
a1b7129d230fbeacc55500aa399aeb11

SHA1
4ea62cf43098c635c1d3402faab8dca0b5fd7077

SHA256
fe780a9c455435de85cd550bd6b083616259eb323743c1f588bb0296d8ec09c8

SHA512
97a814fb80edbbe4b612e2f37cc1e0cef52be691e5f305b99560777169cfce199b0821b9f4690e9d081bc85a55db6b16b968aace9c3412befae22d8afec83fac

Download Submit
C:\Program Files\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
6043174c225bb48a82d458d61d29f7bd

SHA1
0ee6892d1113ce9c81b711e22fbdcf1a8cd2d4f6

SHA256
7b0175d6346fc7a21e411d5ca64e2f5a4ca0a2548d18bddb072e6f5fe5a6fe8d

SHA512
2d2b7de86d46072783761af669d2bb2a8c51e8d35bb0bc5c04a136b9f860303669bec0bd49e191cf562c048620fe2a8b58704a08fb147a59dc6d6ded31524360

Download Submit
C:\Program Files\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
789628cadda185f486e642457792f03f

SHA1
697e424be57abed25572d3674e3ca80eabcab99a

SHA256
bce201f06bf190e44d98f570f96d89fb18397235ad1e238ed6715711f846dcd0

SHA512
b813f0b995b066197529234fcc52bd8b95d1bb3f8e9d72a11552641472a7cce6cc0b33fa5c6a46aaaf8fb76a0fcc1e8b56097311cee4f2c1c56b01ed3bb21fcb

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
56b8e9552528f96566e0288cc406f149

SHA1
9f685153748861cb653adb98c3818ebc4f40c0fb

SHA256
ad578516a74c21cb0d2047960e5ad6817ebc7b8ab6ffd5c0f5645d52671fe7f9

SHA512
b1f76c57cf6cc8d49391c3c601e1231585da301c6155dfd1c4e46de3c0e495ee54db5ab539c008efc58d3de12266edc0466edb6d3bddde58e504fff381d50d5c

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
138d73680d280210f99239be2c12b6e2

SHA1
9e9fa9e6a719fb32abdc85aebebd65b051344203

SHA256
dbc652875f2910755facf4ae42d6ab4c9a1289f28deb623d11c6c64bae99caf9

SHA512
14e92f1ae26e74ee2a887283d6c2015f331984c4d67c58f13a92f266ee8196c8c4d6bc9e026e351d5f5c49c4498ceb1d5cf5d925ba094f75ec022d20b93f8fc3

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
e2b8b9141826a3474ffe903f9d3e06d4

SHA1
8f13a67f297f51002ea6745c52ab23df98688cc0

SHA256
ad77d2b89ad323250dca4159623be1d9ea761121e572f7463d4a90dec43a0f5a

SHA512
a0af54b33431dc25f25d654e367fd3469232e3763fffb98ce79b24d098fd657ac7efb329e0eedb13ce76fcc95013b845ba237abbc8b08abb9966108013534995

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
53132fbcf41b9be475315b36fd8df95d

SHA1
bc486f9f636b93189ab48939c35483375d7e8c79

SHA256
cd688a8b61f6c5f515221d41236e2dd9b74dd93c32f5e1ab1ea598f4566ea4b5

SHA512
efdeac403512ba773f56429b707e3e189cc294a70547f3ccb7a84d05f92daebda7868dbc77285148d1c2c8e3d9a19ca452b28ae76d06839f850b1e171cef02d2

Download Submit
C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui

Filesize
49KB

MD5
a699c91f501903fd98578289d44156de

SHA1
716247e534afafaccbcdf2c5c3bc3edbeeee9c26

SHA256
4451044e50c80c9b1d4117934e4f4fc15a46c86b1850b3ab55d2edfd5ff986d6

SHA512
f1a644a3009b993c19ca7e99be3fea3403597afb8b16c4902833236e6c5e8c26300078f72a99a039a201d2e92c735e16a2161851419b89cd075c8a9500df004d

Download Submit
C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui

Filesize
8KB

MD5
860bbd3ba18b3146e209b3a237626122

SHA1
666a3ec80c291f1b109c8bcd3f5e514caba7f5c1

SHA256
47f2fab3a901efb7df0509c9ab807f018bfaf97eaab460ae5050d161a51e1db6

SHA512
304d78f0f727f2f3cbcb039c8db1085d582ec49823f6edaa43163cea09d1bb2998f4b4c249c78e53d65ae545de8b4ed5467a93d6c30fb06c250d98fa7102d689

Download Submit
C:\Program Files\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
8284192587e2682d1431d511b7755dd8

SHA1
7a19795d7555209eceae626ccc2c4261885ad003

SHA256
bb4bf18b362ea34c37c0d70dbc2a66db77027f50276db2d1812f5e345068d606

SHA512
0efc95a6224b76161d5e682e33cbe814fcc5cae76688fe4e086dd7a97bd2e9c352c22dbb9de89f37cfc48b186a84a04c60625cd2c5a58a6f39ad5f5122c4b1dd

Download Submit
C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
7aee46b2935cff55e75ef4a7e1bf5f82

SHA1
f09c03b5af114e4cb76a0cf08d4c16f43287f638

SHA256
74d75466eb46fe22dc3012e77595a8947dd0ed8c6eb431062e760c5e79c02975

SHA512
49a47f33e9f30fddca1e6da2a744afb91d0cdb55fe2d1fa20ffc51314343fae5cc27b150ddceccafbd16405fb4b99a93c27d9830f830d980a9e3951ca2236446

Download Submit
C:\Program Files\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
3d855917c3fe0df4f6e3be071d962bfa

SHA1
576ce75cde2893567eb267385d00be0b973beff4

SHA256
252c6713d21b110404a4c9664e64c6e9d2eced5a64ef7094268653f56cfbae6f

SHA512
aabe9137ca6efadc9137d75fc529e3b92dbfb4fb61a0d3efc0779329093251274bd14567488aff3e3f6f0a620b716b4e9995b391f0ab20c07608b30ad920aad2

Download Submit
C:\Program Files\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
e496ec607c7ad259527e7f9397dbd763

SHA1
6dfc841b7177936c0c46bdfe8ac3f9be76a9d6f2

SHA256
e150c26158079767cc13760901195b20234a93350acf0ce79eb1eb130307336a

SHA512
6aa3620a49452968f63d35bec495e5a99a686c56b9230468861721395ce3cb671b82f109214fe9cb73d9eec047d4bf32fcdd9c4d3f058978b6fa631902aedac0

Download Submit
C:\Program Files\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
fcf2ceedcf4762a934c1e50c3708515a

SHA1
8f3b3ec2a347707537db033aa03e04705fd3ce8f

SHA256
bbf5116bcdb1c2e4604fe9f58997229ee8311dae3a8c4c44b84e9802b6e34675

SHA512
ca469df771fb2d085a44fd766bab933f0c61ca43e77c97af41c6ada7e7006ae8fcf6ba1f808d4a798142c47a68c50c84e69adae713d6de3684e076373588b31f

Download Submit
C:\Program Files\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
f62f61c8407fc867234f95692dec30cd

SHA1
e25ea545d1b96251908f2da78b57ca2fa7f7365d

SHA256
282ffa7049eb47109cfee0e53dfa3aa3bd575a6f0c846ed91d028b91e672d09d

SHA512
b10d9731054485430eb84c4a032e97e3d1afdf2576c3cc4fd981499518f4f56ffc47cea0c94d2ae6743f0c060d60b614de2edb888df62a7bc9d3f35d8409a249

Download Submit
C:\Program Files\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
8dc2bf9c6b227205361dfe6101ae36f0

SHA1
04a02baf584295f11147edb1c75352942f621f2e

SHA256
5a459e7cd30b1783880a01b046072a4a29b7fc46add8f7f7ad478441d118cebd

SHA512
1c2341c86112cf0ee7cc10e0efef977093553f57f57aaf494717200b936280ce90bf86d776314882f1102589f11b67c7086dc380d380988802a5476b844bc474

Download Submit
C:\ProgramData\6955.tmp

Filesize
14KB

MD5
294e9f64cb1642dd89229fff0592856b

SHA1
97b148c27f3da29ba7b18d6aee8a0db9102f47c9

SHA256
917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2

SHA512
b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf

Download Submit
C:\RCl10Ol9q.README.txt

Filesize
1KB

MD5
6c20c5b93268232ba3bcb18e6dd215af

SHA1
2008645dde0884ad7bed5732a4005968472e7ca2

SHA256
ce7e57b1ee943eeb6ec10d4556da9b16f2cb02401109d60590bb8f78ddbde478

SHA512
4a2465070eff7a0e3d99fe137634f2a7768f5df383f4b10fb00f214c40f4843e0712c117c1b0e422ce7650d3ae04e5d1b4993b7029f3007a52fb68e408a1346c

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
dcf01ba3a271528f1d9b851e9b0b81f0

SHA1
124ea7623f8e41a5f814988f70279c994f87bea4

SHA256
4495d4ce0254417a3e4431d0fcec1ee8244df7d54cc1e9425066f5eef87d95b7

SHA512
ccd406107f6378879139aa61a707b7aa482bf0a585fb2d51b173c7f0cf6281e667ce01753dbb1b40a19135f33a5d3976c9f862dc74628bc3e09d56c786ae814c

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
c4ea10c85acf2d579ac0f15c6ae48192

SHA1
0d54b436bf79e9a0067b295f62773264238fb630

SHA256
b0338e0d6907546e25653621c4f4ff53f5c7be12f7c24d1095f0cae371ffdb10

SHA512
bae34d1d803265dd9e20d4fe062b816b21ce752550b53bf2ca1f04476da6f54e40e646336cc47cc36ac01e359b569377d258b26d0fe0a02ffee0c4c74005adaf

Download Submit
C:\Users\Admin\AppData\Local\Temp\DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD

Filesize
146KB

MD5
bd1dcc6b63947dcd0aea46d946863637

SHA1
418e2b63feadaee8562648a64aac825013933b13

SHA256
7452e5f449e5d304ef516a78a389653b7d383ed054912d4f0693f01d5e3e413d

SHA512
d28fdb04cd02f16dc0f36bb0969ad868b34767ca1035f7df9421b6104e9b74751a5da6e44bcdea18f226023ba6aa6bcaa42b0824e8cad37484320df015baeb5c

Download Submit
F:\$RECYCLE.BIN\S-1-5-21-2392887640-1187051047-2909758433-1000\DDDDDDDDDDD

Filesize
129B

MD5
88d79d08d4a2d47e6ecc3d6a91603218

SHA1
fb7f73370b2784283806c550b6ab61171f5dc0e7

SHA256
439ff329f3c021858daa9915faa7f1af5b46c62fd9ad18453b7e5e38d720f51a

SHA512
83550b0462da5f62e91a658446aee20e25fc5bf772b9eb6f5a690b60170c4ed9cb2cd4b9e37f65d2db8df7087d23644a2e4a662346c8e4f1d6cd3bda3156669b

Download Submit
memory/4052-7348-0x0000000002FC0000-0x0000000002FD0000-memory.dmp

Filesize
64KB

Download
memory/4052-1-0x0000000002FC0000-0x0000000002FD0000-memory.dmp

Filesize
64KB

Download
memory/4052-7347-0x0000000002FC0000-0x0000000002FD0000-memory.dmp

Filesize
64KB

Download
memory/4052-2-0x0000000002FC0000-0x0000000002FD0000-memory.dmp

Filesize
64KB

Download
memory/4052-0-0x0000000002FC0000-0x0000000002FD0000-memory.dmp

Filesize
64KB

Download
memory/4052-7346-0x0000000002FC0000-0x0000000002FD0000-memory.dmp

Filesize
64KB

Download