0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
130s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14-11-2024 13:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7189AED8B8AE6568.exe
Size

137KB
MD5

ff7559d2160f6732056ff5a19722e69a
SHA1

aed67bf0c6e521fc552cbb4afe24a1c2eb286da7
SHA256

c2fc050f33d51d5560da425d137ef1e318f16fe5d49ee894327e33c3e12755e3
SHA512

020825f085dc4b08f2454be5425cd937a1f146843b76b445c6d5993d0581fedf93f84742e64b2abe986a8d5803a62a597962a04821488dea771c5354b6dfda10
SSDEEP

3072:oLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hb2bIoKb:ostYrEMw6Bxk5zOFNtgJGCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 7189AED8B8AE6568

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11273) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4050598569-1597076380-177084960-1000\Control Panel\International\Geo\Nation	7189AED8B8AE6568.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	7189AED8B8AE6568.exe
File opened (read-only)	\??\D:	7189AED8B8AE6568.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionMedTile.scale-100.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\AppxManifest.xml	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\micaut.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ONPPTAddin.dll	7189AED8B8AE6568.exe
File created	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Resources\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-48_altform-unplated_contrast-black.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\ar_get.svg	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_neutral_split.scale-200_8wekyb3d8bbwe\AppxSignature.p7x	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_KMS_Client_AE-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL103.XML	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\153.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\organize.svg.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-ppd.xrm-ms	7189AED8B8AE6568.exe
File created	C:\Program Files\Java\jre-1.8\lib\jfr\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-black\MedTile.scale-125.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Microsoft.MicrosoftSolitaireCollection.exe	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\SharedMemoryUWP.winmd	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\osfproxyimm.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteWideTile.scale-125.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Spatial.NetFX35.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\VVIEWER.DLL.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\api-ms-win-core-console-l1-1-0.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11910.1002.5.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\StoreWideTile.scale-100.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\UIAutomationClientSideProviders.resources.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\MSB1CACH.LEX	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\en-US\MSFT_PackageManagementSource.strings.psd1.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\css\main-selector.css	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Xml.XDocument.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\ReachFramework.resources.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-black\SmallTile.scale-125_contrast-black.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\SplashScreen.scale-150.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\WindowsFormsIntegration.resources.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\sk-sk\ui-strings.js	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pl_get.svg.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderWideTile.contrast-black_scale-100.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\S_IlluNoSearchResults_180x160.svg	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png	7189AED8B8AE6568.exe
File created	C:\Program Files\Common Files\System\Ole DB\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\System.Windows.Controls.Ribbon.resources.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\TestDrive.ps1.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Programmer.targetsize-24_contrast-black.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_pitch_plugin.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\misc\libstats_plugin.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\PhotosAppList.contrast-black_scale-100.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ca-es\ui-strings.js.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\questfallback.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.Cryptography.OpenSsl.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteAppList.targetsize-64_altform-unplated.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\PeopleAppStoreLogo.scale-100.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\ro-ro\ui-strings.js.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-pl.xrm-ms.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md	7189AED8B8AE6568.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxMediumTile.scale-400.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_invite_24.svg	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-pl.xrm-ms	7189AED8B8AE6568.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7189AED8B8AE6568.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
632	vssadmin.exe
2448	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4050598569-1597076380-177084960-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe
2400	7189AED8B8AE6568.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	2400	7189AED8B8AE6568.exe
Token: SeRestorePrivilege	2400	7189AED8B8AE6568.exe
Token: SeBackupPrivilege	2400	7189AED8B8AE6568.exe
Token: SeTakeOwnershipPrivilege	2400	7189AED8B8AE6568.exe
Token: SeAuditPrivilege	2400	7189AED8B8AE6568.exe
Token: SeSecurityPrivilege	2400	7189AED8B8AE6568.exe
Token: SeIncBasePriorityPrivilege	2400	7189AED8B8AE6568.exe
Token: SeBackupPrivilege	4876	vssvc.exe
Token: SeRestorePrivilege	4876	vssvc.exe
Token: SeAuditPrivilege	4876	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3264	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2400 wrote to memory of 804	2400	7189AED8B8AE6568.exe	84
PID 2400 wrote to memory of 804	2400	7189AED8B8AE6568.exe	84
PID 804 wrote to memory of 632	804	cmd.exe	86
PID 804 wrote to memory of 632	804	cmd.exe	86
PID 2400 wrote to memory of 2804	2400	7189AED8B8AE6568.exe	112
PID 2400 wrote to memory of 2804	2400	7189AED8B8AE6568.exe	112
PID 2804 wrote to memory of 2448	2804	cmd.exe	114
PID 2804 wrote to memory of 2448	2804	cmd.exe	114

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\7189AED8B8AE6568.exe
"C:\Users\Admin\AppData\Local\Temp\7189AED8B8AE6568.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2400
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:804
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:632
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2804
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:2448

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4876

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:4304

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:1680

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3264

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
fc51e6364cafa0d0356c4dd5d0f3112a

SHA1
36f3c8d9c28b4ea9b527cfea81c43dfef503bff7

SHA256
74509fb024059b1446caee9d7c88acfc636c8fd1f5f6d1724307a32d29d6f09e

SHA512
29717a6308fe9fef8d78ae13f6b170a39c37c71f3710b609e659451b903c07c7569c765a5ff5e5547e2e4a724b0bdfc0b35673ea20b022283edae680ce387395

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
0540d4407ba37514a63941144fc8d8ee

SHA1
71deaf7e947dc9ca47e5f4cb30728500827822f6

SHA256
1a7c2d70e440d31d9160e3a81ac157fe5c0bb9a51e2c049d7e0609736db8a059

SHA512
553cfbec470252154eea3773ff64818f578e8943ba1d6d39becde2aac65db8ac2e57c40fc3b6b9abb63249a87bed03555da878717033d930c92abc4c33afe854

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
73597f137f9d290f3d638d2b9a04accc

SHA1
73a34b49d5215bc200411d0417ae1b28ee6a8201

SHA256
1d50f1f1c7bc8b07e1911b76f78dbd7023091b51e0912b623e16f70c5728af63

SHA512
b14df6e9e6e6f02cc5936d00c8b60b743b6a74403b94ad7e5d8ef357879ddba2355cb44840185d1f4ed3f9ffc2bf10a7b975d75acd008cc12554ac2bc732e754

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
6185969cc4e4085a24e1ea2c13704417

SHA1
731cf2a83a64ddfb4114cc2b4e2d72f626add7b5

SHA256
cbede416c90f9ea597de511e391055e5cdf55b63e6579f223748df99613c2534

SHA512
3c2c5b2774e93493679ae85b82b864e7b389d537c4c7f123ba116a1b09f9fe9927eb486451f2c7f64136a1111c681b05d1bec164a72cefe1b554b354ddae94c2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
215daf5bec19835c53b61a47b70e63e4

SHA1
67dbb0d79faee47586b1a62e96f09de620107ae6

SHA256
6cff110aabbc98d9ade46e6c9efae142b0ac763ecfb638e8b56b7a29891f5738

SHA512
c228ff0d639489beb4912a7cc7f65b3e4bd8bec78217114d9f7d2b2d5fa4f802097cc50e260bc1d505dfa03718bc6ca2f61163fcbd129cade48600f87c9aaa2d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
999018b9429729e2eb0d3153bfb8b632

SHA1
9c07d7c5cdcf05bb395fd8a26f13987a94d89248

SHA256
318c0d068c28b4e3c10c7830c4ff97156aa58047335f8ddd08c3718a5c7e1c57

SHA512
d9ca82546b4d6789b6bc4f4377ec0159dfcfad146fcf770f4083ed525ee0bb5f09cf0f61cb3be853746da3fcfa2300240d6d08fc53e109cad1097ac7b76cb58c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
1e4dc0c22d963d6c9197b2488be2d691

SHA1
f39b95f33cfb11df576969e5a3cf6aa52d8a9e7f

SHA256
2345961d6047bb8d9334645fdfe206b74f5f6886273dd2af0df4d52e0f180596

SHA512
d51dfedbc1554394f92038ad405f76089467263b12ef977d95705d86d480eebda360307a108bbc70a973663a2537a98a886b2396a48cd76540e1b00461b4169f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
0a36704f84258eeadbe526d2780833c7

SHA1
63c27c377c3d9e390ad8f8a38f78d05be2a67666

SHA256
016db238f5f45028876fd887739dae73c4192358ff462fa17b2b1cac5c0319b1

SHA512
dff80bf4b0b58295c11533ebb3ce1728a5ebdce20411f8fd278ed411e10657af7ce2eac015831554772ad0e11b11052e4c5c72b86ccad8d9fef4414376954124

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
94732819796dcaa2141289939277c278

SHA1
a16b5cd42ef28f1ac087bf558f6b70c05133eae7

SHA256
3bfc994a80a9a60e61da72f4286c47c6e6e7392ff7172aea69d509993ae02388

SHA512
c92fa7129b264d85cac13ccbe7687ce99e3c215b2a098395ed9f2ac18ae7e33f11bae4054b180b888e2b0a3febaced0b3ac204dc7f3884db1f347eb1c800366a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
e21ea250549b4584aaeb60bd26a37a36

SHA1
1710f2726b1cf08141db96df1c8b2711d32531f0

SHA256
810b01aa55a8f8f056b1de879c8aa979dd5f0d0aa67ce56bd38326bc9d5331e1

SHA512
24d783a4d8d91816afe0c51b1ea16cbfb453f5387cf1e960379dcbd99abee50680118a5a46c59e8f82f898198fc6f61871de4a649a59cf8a6fe919b5271b45bc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
9995436e6637d25bf362810662ba9934

SHA1
3e0491a92130d74c7638706aa15035340fb83131

SHA256
0d514ad7d70246074a7bb62d3fb70471e3672ec503ed891a1f5d624b2b2f555b

SHA512
1c29b0dbd2839eb4e2ccec6a67c20a89e458aab03c7edb2f474c802e1069c6479860afa377f3310380f2be3d96332074d8fd8555cff5b2c9ae99d19e2a3e5b26

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
695051506e6aa80e357a99791a758f66

SHA1
39fb728cda7538fc084279fe2191f1011b01f7b0

SHA256
ece36fde84884d45ec381358cd8b73a67ee4b3981fddfd138df761f5b257de39

SHA512
23cf25c98a159e6a32aba684cd0958a2cd020d579b5e379517c63cbef86603ced166f69d12cf961f3f2d5d1f2cc84032873f9a3cb4518254277de40c1bf52270

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
a0af05d49582d3105acabaf3b5bc5388

SHA1
ec24b85285dac6312d779475278f5a393350fdee

SHA256
1f18318123244bff3a4a2e9c9e2d757def87114ba6e08901b139cfd91dc032fb

SHA512
d32d362915be90eccd3bd7468781db63ba83d627bc26c42f10a8e59493833aed708b167ff1bdad8aa4933ce9de904ab948d2521db295b9d4686402bf8e3c7afd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
2a151b98ad4355cbb061ec9f26918a35

SHA1
2edf03343a67f8d1a7d2e33068c0dcb515085ea7

SHA256
65a7f0bd02a5d33278d28bbaa7cea65070863ae2f96494ae2cd34593502282ea

SHA512
612355a2e2cce05bfb192c1244655f8b94b1b522c3371f47c5e72159a17241072e97191dc07436a1be2ecfd8bde0de096c6e8c19498780b357a3485cb2c65723

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
6b93c2af91ea2574555a17420c786c63

SHA1
d4f3d80b8f0e7e8304365b173a9f19d4ed9bd679

SHA256
a88b9d6d464bb8b28d52ed44e8def9a8a380f9d597194784ba6d4afab1f5a6ca

SHA512
42f917021cc0f9f64d5f0945e2abe3f5df856d518628e6bc5e02ee6326fd6b5c880b409388eb2618f9aec632daf477ad2bbc37d7a1bff768fd50663be0cbd7b3

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
a0c89ce12a6a1412f8461a15586ada10

SHA1
d514e0cfd772840e7575dfadf30567fda5111446

SHA256
547683109245df577e54e98b4d9add184710726329f3835ca9d5478263a737b3

SHA512
19b64b669c3ca48b331961254ed5f62e413c91e6a2bf7a6c39ae3b2c27429073dea18228fa8ee1caf663e68b0d6e538cac140b79a0923b866c2b8fa8faf0e1e8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
63d397a493d4a3a8a178b3ba71717af8

SHA1
50150bd8816e4137a092f43d5ee21e531d758bad

SHA256
4270ccf15acc6f9920136ca75ba63e58140be13f267588f3c6d6eaff385dc4e6

SHA512
9426f2dfeeb2b24ff3e5e85b9bf7349d2f41cc0bef370c340feecc9a52dfb80982e422cf869b76b21c98bf6804be6709e7e32594308f3fa0508896202cfe9e7b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
891ec968761f8e686e921e857c303bf4

SHA1
5cfccc3fecea76135405d8ecaaf868a268095440

SHA256
f9c5a6612309132d113a82660bc82595f90fe8ca386d07517391d7d013ad9dbb

SHA512
f3ad3be98b0736dd0411cd75af0c7eeeeb043da22103e3c9ffaa1ad9f34a3d365d455de8d730eaa4c94902b66a5764f18b848a541ea58f75c2b01e4dd817980f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
3f7d527770eabda213ce072ba10b5f35

SHA1
50445c55edbe44df60f9143b43ad549fc960f14a

SHA256
edbc8e74f4da9f42bbcf1eb3d78b5bd2894ea6ead2d592f5c799ee6fc4566742

SHA512
e53d6d147ab15b1e6cef85b27af25844870f0d393f84f9fc122ed7692c5bb2d07e845ae177911c7b746bfc1ae593771775f9b87a6b959627ec7783fda0aeccf3

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
9f0edc27166d05a9cb9d511710dc875b

SHA1
8f3dbf2c8615193086cae09ed81fc7ef5e46c393

SHA256
e96aa19c43594723eb1580fc8e6ebcc82c1d2ca6f87aa8c316ccb16d16edc493

SHA512
a11df0c6cc6dda32549d78cd5ac1074ff8a7d01e0adfb138ba8d9288fd4353ff13d91c054edcefe94ee2428160cba11e4fccd74f25b7bdd5733afc87a422aa80

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
a19378e46588ad43bd26d751f3d22968

SHA1
077a50b9f73250b6875535e1fba2357e2ba28d8b

SHA256
5184274e130f4c7679608ab533fcea1d1ff22d7d331c3358885e57e524b35a84

SHA512
b6270dbf5ac76d3c07568a6e2b607744c16300dd2b33286253199bb7349329f63e73688647ff3bf5eb19d6e6bec7650a2b5622a9479ab4321129ec7e51cfc8f1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
1f227abbadb3c1611b9f5e4a7c010b06

SHA1
6f53532ede2ef5fc0c42768d5553fa5200003f7a

SHA256
3aeff327e9946438f92c55b59171110faf7086f6e17285f3fa79df318cd60be4

SHA512
3afd81dae8c88ef30af160e725accb97f41d21475c9087f32aca59f82d50f3194370c13363b774a4c45245a950a517488ceb76e6f64e89c4e78a9ffacd5e06cc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
8ce9f84e653914a6e34363410e83794f

SHA1
ef2beef3a5c6524dfb2ea6df937eb710506707a5

SHA256
09d2c68247c819d9364ac82c423c6c561c06e06a16d9a6d1f2638419c69b72ea

SHA512
6c63be437d11a92ae7c4c3c37d330ca9bbfc109fce142dde3f30add10033ddad924b04854aa61ce1686a49ed3540d7639cca3b7ae2d2174a5ee02778212bc8c0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
db1d62fdeb3ed049ec4943d97220a8a7

SHA1
5fc659012d8ad00d9817cad066f79e2788185aa2

SHA256
9b7607d1ecf385c5bea0f43ff8765891217242357f335219c451f0e5a6225dc9

SHA512
3a55c3877ed4d55c39ace273a714beb3371d019331a8f336dfa480108a563a84c83dbc952ec625e35c13db6b52059c0efd39bc06be1c316c4ee235eb2189d1fb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
642733b64443f824287c6c19eb172ca2

SHA1
38190530dc2b16fd0dbc96e96d3712f5b6d135a7

SHA256
bb449771cb96b2e46ef4e4635610ad1f9f3d9ff116ab99168eb40b0c070a0e48

SHA512
839bf5b992df4b561d7aed1a478b29413564d1310e0269287d47ae3a9dd87bc18aa2461e6c06891d53365b6cda6388d61575486f6884cbee1e33a4fa296fc918

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
bd86b7e8914babd751fa0753bc32d4b9

SHA1
ac439deb570f5ad1bacf76b1aa26fc603f792ddc

SHA256
e3b000ff05ea7fe5248186e8032abe2c72b8b60cebcb9be2883ab1ffdcdd0a12

SHA512
86d672970810a8c25405bf11bf79579d06ff97ca2398d78012de352cd435f5180631660f084b7de5b9dd66bacd89b6d3388ccfcdf14a7d4dadd49a30d79af824

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
c8a57171ed9d998197af3f9ad56d1e05

SHA1
18cb5ad21d65394ac1e0ce6f84270f25b8f338a8

SHA256
29190e52bc560adceabc5b9436787ae9953fcd96c8ebd9817aeb61b50675ca60

SHA512
8ea3c9c4a4e387c0dad1ca627ce15c13ed39196aea539fd678c82d380ffcc2a7d6049d6dc4f44b3151d497a31199b644a36a5460e4a73044548823c18f757d46

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
e27356cd571d00610b28d6c3bf3b5934

SHA1
f84ac047919d4f1dd9f0f22cabd34f4122ae213c

SHA256
57f2cb226b02c39a8196eca74089d884a9f61c24b275fe0d5ae0288e62b9ac2d

SHA512
773aab29a25eaf5cd7a6f197fd744c76fd78cc08790a3c2d736f509d26c0785b6c7247839ee16e07e7034f7c290750d6a38c71ac9bf8ec7e391207ac90db4e60

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
bbf48f093b2281d09bdafd27e2eb4f07

SHA1
d52c1f04c81a066e207be292206295e46a87ed9b

SHA256
bd12f78691094405ef842642baff4b245b6a68947baec10ca7cff532a3c9f795

SHA512
9e207b4e7f111106d7fd85119bdccc6af75258a4b14e4266ef98ce116faacef0576f0920025e24a560767a12c0d3cceb8eff0940a0a46f03b0749f9901e0a494

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
2549355307e539765a32c7c6827e210f

SHA1
3162dd563ec4196dc4e9b5cde7b6fcb2a11a27ae

SHA256
5c9114c44fc06bf37a0a92929d18b27812712d99a4ac32eb9b3f1794ad50f312

SHA512
97a3b51ba5ad112e0d5c6e3561eb70950a34dfd20361e86d252215ee03dffbb7686d576e8407aae28ba2f8e646d2c77cca489404be0a8202008339a6c9aa5302

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
ff6df2cc7b1d1d4a20e560aae93551ed

SHA1
ebebd55a0f1b91d1561b0ecedd4742559aab3708

SHA256
d807aab6142ec2e067b02cc4d212f9955aac5164231655bb838afb7712d39a60

SHA512
4d742134ce1f175cde42248649644993f8f19ef702bd11797a67a370d0cfe5dd4e8f1ef59cf64f94a67f4f831b93465fe825ef744c66cc7a429a8c38d4c09311

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
7e3a65aeed4ef98c12c193494baecbe6

SHA1
47c00057511bebb7786768ecb65989c8acc471e9

SHA256
d5add9c2bfc5c38b84e34e9ac126d60f3227230a360c0a9e6b3983bbacd832c8

SHA512
f097f8245bf2772f090d6f0b1057537be54202b6e9cd7c849dc5006bda9b639badcacc374ee4a94f5121478386b81cc4563c33aa9db8cbb07313cf838eb13750

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
9a214e0c75280b673b0ec4f489129058

SHA1
459aa015e7375ad0263f9b3a8fc1aac438ef492f

SHA256
da1a789f16168849b756c20159b4802dc2e54fd920b9e39368356c5f1624d683

SHA512
5574167dbb8f124c9279dc7a15cb7768c71cd2d5eddb10461512f5c5a2fdae815187832f34774ae7772a6f76897c666ea4f033666b5e3e1115818c203b69e684

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
bdfe11ab8e3745740091e4faa9c428f0

SHA1
779bc9dc8b9dcdbfdaa127ff9068a7409a2fd92a

SHA256
487b01214851b296e4790751528ba393721f101ffdcece863f089ed1984ce66a

SHA512
fbffb0bade8b443719ec4de5d5c8afde9ac8a0759f2b689cb440d6686db159b079d84e33eabb98021bc8185223bf2600b33c4c0c7b6e2226a9fb2bb520907d4c

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
f7dce39d11ba27dcc9e9f52ecef0aa95

SHA1
b969e3e2c582ad575fe78edab79d57152a3b3c41

SHA256
e487548fb499491325ac953d274e06e63cd85f7045c891e37cd8a320855f6a7b

SHA512
778b906ca776f0517d368aa55eb272ce0d3fa742bf2b1a584d9af0de7afd969cb6e7822b987cb4b0432648d8e75f352726743e7de2b222a61e4a14e223d31211

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
6a52928359f89c1b8e1e5a2ddd7f26a6

SHA1
db00178c3a74408280b5bf676ed49cab2ace25de

SHA256
15270a28fa5f1a7f74954f90b5472f48445c37a848bf7c6c60eaeb3e388e7fc4

SHA512
76e08b1de281d2d95ff58be1ee0049da7a519eb1dd1d68e01905f24baa874ba29e76862d2e45d19c8ec483ad87fe635a6c4f46df8a41bc31000bc2088b53ccc3

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
0cda1eb4df888c4b31d0f9e1716f1128

SHA1
d6fb55fdf8a1f4207b886049f52afa7c3da20d03

SHA256
02045b4ad2a0db5ef04a074fb50f776eb30271e848e5d000f513524bd18ef2e4

SHA512
063c03411bb256e97758e6bb3e56a6931a84caea78b4bb8be2a79f87ead2556ef55986c41768c0d9b7e6b3f8eba0f78b4ba97b63e8e36ee227b3152f9fa9344a

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
205916b7e1710637d2943ca096da062d

SHA1
6da9b413c8401a42fe4c0f8d0882469eb4c828d5

SHA256
cd3fd3a3d0f2efab3efe612fc5c1fd8e9263aff1befcb97f9cfd3bfb8cefde81

SHA512
de1c685c661700be762bb7ea2dd169a121814a657bb4c1c68ebd611a23766b7c497215abfee3a24ef90772c7e2d26f552a5328ed6fb46d09905adff6cbce0d9b

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
433d6c2a77056bbfc4bf8d88b04eee3b

SHA1
83597ceff49b94f49b8f50d85edc85788c59c80f

SHA256
26840988684dda82d8da3b9ea26c870f6a579eaa0c618c1f65482d06cb0f63ea

SHA512
dac9a96d94703e1df894368e91dc94fc9ca71cd233f79c600884e63acb0646c0a7639c65464b7a746bea4851de8ada7f552a33b9ef5926a2bd7dc4813430a1cc

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
e790f7397098ac7d2c7053fb39ed8a24

SHA1
d86b60c2bd6ede309b7f13957d864ddf58060121

SHA256
c6bd66072ab405c4bc93377c65564bf23c2248f0f7032b26f68f6b0c866e117a

SHA512
43f344df3a02f04c1fabd1a9e718f151137e64861eb46112879292b02c92b9c53991a26c4514d10fe50b88f9220ab46c9f3479c175d3c18c6b7205d372180b36

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
9b73be694a74a115e2fe6e72dfffbdad

SHA1
29b63f948c95374462cafb06b4864846fc28db73

SHA256
f87e434160f9c23eeed2e388ec9cbba1a67bd576d75575f2a8151d61d94cc267

SHA512
df79ef912822d153714ce007b00ed17a984c98a5b6c303ad6db94ad706fb6a13cd354988cd6061fbf290951308688641a75419b591414ad6655bb681e2f25382

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
60a9e75b22b045faa77183391baf10db

SHA1
5ecd0f53d9da9b76352add2c92e7e35fc8f7fada

SHA256
ded9e4cf71268244aabc9d7175b488ba454df90691006bc7ea5c4793e4f5eae7

SHA512
81402968e5dbe931495564603ba5c5d8d873ff344998fbdd6250689f7c3d3ec0aa04087cdbdb02f3ce42f8aa2ce62c6d17b63c3de77ad4153b3b5ca232a42451

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
bbc547d0f7fb1c1449296e916ecd2930

SHA1
d3757f0fde0733f9c344dff8ca13f26040497c35

SHA256
edff2974f2c587d8ece17060cfa6517a76b73b74f78a6c816690fbd67e526fe9

SHA512
36c8b1577205f30160934b9c1984fd1de03950a4512d3f5144ba7873a2f1f82c2ceb8b3bdecb6a632d28e39e28970a1667255b8ba8b6f53c8ec0db985657ee8f

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
547ca875957fdc4f4d39657e7734417a

SHA1
7cf90da42fc8c58fc5cc51b679ea4053d0ed4602

SHA256
e0f95b767b331286d5e312cfc0ee3e6ae1860ef59d29e747f80e2e36934900d5

SHA512
9d061fe489683ea1a67a1d361d51c35181c58c56eada08a8f9e649a7a67183f692c503b628b1a5f78a92782b39600e8c00e986aa0e78f5f3320ef2b761f6d943

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
5d6685774c7c940899f1296f32a44350

SHA1
a57bf70ed1453f6c8e53bec6232c51a918880d2a

SHA256
44b9b2ad880b852b120c149b6d2c9b01477833e38ffa1f39b200d85ef01b5e8c

SHA512
f08dc0f148a6a43c41d591d48d33682236f061375fc70105c933d11d55e287a4a646a0bdbb1ba5092553a9a60695009f2206c561f7031523f7680b97173a6bd0

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
46eb87188502577be1fac5f6475c7332

SHA1
5ca6d831bbdc78838496342ca036629ce6a524c2

SHA256
aeaba0f882aafd9966494cc6d91c216f52db5105f12eb91ec9daea176223e23e

SHA512
dd2505bc2983741b9633d6aa6af01f19971615a3f1251323e88ba4e7aef577b5820e365c053eaca3e7084ede9a6f445de50970e49a85ae2116fcbb756b4f1c47

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
64bd67414afdca53a6efffac897964ec

SHA1
5f2a0209523124f8bb289519b34e33c11c2e0f8a

SHA256
52b1c6464d91e021da8fa46651297e624ba79b67c756ff432e02900bfe7af92d

SHA512
47935d871226861fcb6678696e06e07f352944f8039015f1e9378662d01033121993fdbedeb118797ad270aa880fdb00c631db0c16f203cbbd65f6cc958f8cf0

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
d6227c80dac015538e7ae519594a55a0

SHA1
8d9b29cc1a4c3d579d3ca2ef228c3c83a9cc212b

SHA256
d428176e313be241af48df95d6dc45dd007bd850ee2aec965d72cb6b1b94bdf4

SHA512
1840a5fa1384352483b5c1f15e465f78f51410498cfd7f5a7dec455ced64091c69c2f07c689c4e688bdaadf727b47a35d32ca45f627bfcc5543ff564f2721788

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
02ed4749246dbfc7243e75fc27b143ce

SHA1
f5253feea725e3a18083d2a66426d5ba60a7905e

SHA256
3c7bc3334180f6a5230156565776332d9d36bdec2eb59c5035fa1be5e238ecf3

SHA512
1717817b6f120ceecbcd2728c277bae099eea790ce6dd2a71ae611e8d7f0d9d2803091d68cc4eee294b8855bc0e9363c4be39b48b296949f8144503a0543fba2

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
44854b1aa60d80814e77887bee67d1ef

SHA1
39df8452fcbffa1e2dbe5d2cd75a3cfc41e3a285

SHA256
023c883cdbe7ec657315e4e167eeccf3fae677660a1967d41a6fba4e80721520

SHA512
e739b03a004b76679839d422e11a9ec22e6cbde741d066ee9151348a9ea29e99b4963f0ac971c78920ac03e9b94a03eb22f8d34daa2621c8ee7d14b7afcb7215

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
149d313654774ee2bf12a7347675fed7

SHA1
574d8cd4c5a09b249991dd64d7bf00fce42af94b

SHA256
986d22a482643244992056a45fc5ac14cbb65c89dd9d4e83171c909fca9daecd

SHA512
50c1a20052a50655d208fb7dd1d4860c81e772741f13d2d2670dfbf92e6aec610e29815e1d0de70da740048d00e70154ebe111b3f62a6b7862fb1385f57353c0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
2bfccbe7b47cd371f79ad32a43354fa3

SHA1
22dc35f39e55c5d3c268a570a3dca4fce3de6784

SHA256
c575d80e16c966d71668b525c41515204736fb1b10419de46083171e9785de77

SHA512
d7973430373008600e45ddb0b364013cc91c50e729117258f72b1718f33260311ffae82f9e201fd7053a8c77099f0dc607f36b268a72ee1930a9c02fecbcc866

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
1eb806c210b7b9b72e4482e28391fd1d

SHA1
5767a91313e5015ddc36c2c9ba4acaa2d9bed81b

SHA256
92c26a2416f37e09bab3dfc07cf208da600f5bd1d4ecd626c4445408fd1c2f8a

SHA512
854a70e31232117c7f091d305f9137c4f2c1fd1e1b5b67a612b351f099ba965646ea6d9346a69b913c41f218d7546f3a04fdf928feb38fa5aebc2dd1ef978cde

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
f49b97c10ff4058081617fe6abe5e4ee

SHA1
3e9567e4e373f9de3ff4e13968ddc492c93b10a7

SHA256
20a78cbbbd0a0d2e8c7a8e22b65e9ef08ae72801740366f4de874305aacdd07d

SHA512
4eb938290fc763fabbf540adc8ddc072fb1dbc6496df833f9b746b39dde5c0e1ba13c9c02b901c67a1e9a6642cc555493000b1826602c291e7200a4d9b8e7398

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
6c25fd5344c5ad19fddc988e5aeefee7

SHA1
54dd0c583eb518e939b805d02a01605112536123

SHA256
eeddf49e40923474bcac71e47a072ab610a641eac270e75d1b7e420b454eca2d

SHA512
bac59089af85e88460a749c0ff3c09b8b87acc5f13d44ed709809507a745d1ceb9392626e2f85f3815e1f6993deae5bdc17f3cf932e6d3538bbe136d7fc4dc90

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
a17dbb861b8146228be317e140d8463c

SHA1
a3974d850f5b0b77bc123031475f8fb517dda40b

SHA256
cca27dd28d9bc76d90e9aa50d0338d28b7bc34f53fad1ffd373f81d33baf9c6e

SHA512
70a94ef1a0db500537d6ec4427ff049a0e9ce8bd862df18709c1a9237a9c8e75ce2612355a4d5e929ee24c5040afc03a47427b7c80f543792ed2ce1d794bf2e7

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
80327f59dd58b5458c708d688907ab17

SHA1
1a0719e291e65a1e18fb2ec1c804c808cb878b9d

SHA256
cb6c8292d53c2acd7dc6389615a73ccce48399e67d0fa5fe5e3717fef155ea35

SHA512
30752c307b537897f4f1e310a21545e265cbf2e8e7543706832baad4085108cb48c9d238805512917314f841aeba9eea45e1a10fb8b7810657dcac79c31fff86

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
1f95c0c1e328d043467bc03bbc978f21

SHA1
e6d931a5411d5b0f5cd0fdb9ef61ad0bb8a5cba4

SHA256
c17eb2ea1be497d3f319747414c222dbe65ff3a3e4e4bb56a12e6f3e3ac707db

SHA512
3a98763d4ba222e59a641598054f8f644a4895212d5d2be39a895ae3cbd60a0e15bf347bbe55928d8e7846171c4e89d14ee5a584216d16dc018414e6d98c425e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
22749bb9012a37c05f0d4a740ec8a0cc

SHA1
aab0ee09298e61972a2d39b9eb3558d06f124511

SHA256
5e5aedb8f478e4f586ec55826e41f9b6b018af86e3fbc01d64c367d6911f90f0

SHA512
2de056fe6af754b3889225d7756f3ae2ca8fe5cb4689e0cf832d02c428048abf30f35009eb035efa702d1d18079ac0cb3bc4cf47f46c5e15629e2712ca9d44c7

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
6f828a59222cefe56c38bbd304d5acf2

SHA1
2b553f7f323cc65a6b912c3d54136d3f5f26e9d6

SHA256
2363aed69105a5258f99bb16621c28564838c1b5f3bef39df65ab63e74b0953a

SHA512
15473ca3810c548c6e0ddcfeec78115ae85bc871370161d9247a2d684fa68827fbee129dec8cc33c2f0758e1c7ede2f755e859d61b8b66965cb0aa10932b300e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
091ddfdb651f487b0b0ae6e67955ff53

SHA1
b32e6d5f77bccc2cb66edf1d2d348a39488789de

SHA256
7b01d9407cdffabb10e4e0a802ff04da7d7e7ffc82e08aec6dae8da3da6889cf

SHA512
a9d921376aa066be5aa4a0d226b6e5aaf53896fa67d14a06b06e6c233702192cbe77e5841fce9460e148bf6479cfc76ed02d21bdf67f3d763d76a2038f2a1d6f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
4e8485511ae6fd0472c0941e86d2599d

SHA1
68cfda0c660e3b5952df3c0748a6c826fcf3176e

SHA256
a5667666ffb1dd09451f03b0db2258c1a650deffd47fafd7e27c7de4abbc57c6

SHA512
aac80d9ae546573fa51a704d6f8f35f539354642c0a2e6771998c06e105e3ba8790e15c79f95a860afba5a1e23e59a381f55dea9ed59ff012b9b54bc99cd565b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
5adb97904cf617d4e619685140053844

SHA1
873ce4c8aff4de000fb2f404aed7d835545701e2

SHA256
ece4223966fb0ccec12e538ff6c80cba13c4d70c95818626041e3be0a8bc5eb0

SHA512
f48f058ffbf76e08ab52b83df164c3e8d69af7feb0759d922482a6883b8d6723332396c5cf0a1088dfccbcbd6593d3f132565238e2fa96d4f62305ceee56e5d4

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
623989051a8660ba2abf837c6181d651

SHA1
2d6d1acdef9269b5b80ffc2b634be708da028ae3

SHA256
9a4af1b11e3b83c3b90f7475c93e741a782168fc1a73f2e9129367f8ce461bf6

SHA512
a7d8729b6e3610d01127bd360cf6ab786d424326cbaff99b81b9a51705f18a6a65d2061bca3b53d24e688ff10276e3ed6b01281f89bb058845ee214ca8cbd072

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
3d50edc282e670f5fb9e6b645c555eb3

SHA1
45e29290b5a6168386086e2e5648c520ed2904b9

SHA256
d295c31a4125b479fb2d4c949c4cf39f39d8ad871da7436fd51ab27f479aaa23

SHA512
4b84c067243ca45a32aa15e43c3b458e1a0ce6b300c237aaeeb703d5beb4bc183c260dbaf445b90ac2d4548a6be5c55fe461b1eecbe5f65328eeedaaf48bf03b

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
68f44754575b747bfec321f7b2b1acd4

SHA1
ac6b5510ab1a375915fa41613673b542c51d2e28

SHA256
ff317e956f9bcc5eb1349cf691c600699220bd0451c67475327b747707232a5e

SHA512
60ba0df5fd606f1b6a63cf01bbdd2363799afe6fe1a159e93e80feb12e47c1639513aca936dcb9c53fd0583badeb656190af7e9d3741dba17cf18d5e2176de4f

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
a232c4e7c5802067ef9d193a24086403

SHA1
1e39e3248fc12088d5d31639ded9c05567165425

SHA256
734f306a94a45e68b3c5ce86e4791dfb7da147bc2922f3e94ff731dda1ef9937

SHA512
7ad7c3867414534a6d2f83d0a7e3ce81e8c0485fae54f0e48d0a20255d711e2805e27a6ea149ee9f3db2c91e2fbfe266e434573830b20e284efb00235f51d420

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
f58aaeae47a1c742b23b118168e69e7e

SHA1
46d50e55a92fcf50c7f5d0a06cd9f5ae2914a8eb

SHA256
e3095d1af7b66d7d085062e782e62e9efb70217cedf05b5800343f6995b1d7e8

SHA512
abb8e9f520ac12745c866ddf9c094c4b727bfdab608e3d45b61f3c41ce61d0fe788bf50426a33b51f556af4078718f96da86ea693c0a3ffdca509ba47c917b0a

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
c52bd9c630e857d73b1aa89adeb8bf7b

SHA1
9bed2b1032e31f65b7dd91c2e038bb7f05a10f66

SHA256
c8d9a3a1fd12b88f58de698ff7b9729c55e4e92c2d62789cf42a06708d3ef6d0

SHA512
a0d69229131c70b6b931509e3e54f3f5e8e38c81f2a3b821d952fc37e7b0bded4e100d70fc55a9b3f168fb6801f90c90463a2c3641693572f18c92ccae6a4510

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
60f3aebb3b3e1d9beb985741043d42f8

SHA1
154d2ad7f9ad150936b08109d5d543dd5e396085

SHA256
6e3a8fff1b4ee1a7070c77564c3c18055911e3f5625926d1cc0af2d1f707a8d7

SHA512
43205c8fba7235512d16de29de2f11efa86ceddbf26ce414a8026af4bf99d46b837b5b2b0bb6f32d6c3f277c04f5fe69ce7873aa92f82d3f315563020065ec53

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
f94624af53b5973823c32ab0ee218a5f

SHA1
213e0b44648e678e1792ad24d9ce7a8c0bbf619e

SHA256
32598a992ec8f5d09372b956e9586f5c4c9e446ce8625259f0c46cdde3641a9f

SHA512
04d7089e2f79f588d0673cc5a3aad5f1afb8baef2b8e523460e1e2abd317b30bac67e9b53663324c121fb418f6dc0f296692db1ed9417711432ee351e2a2675b

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
4228868d282d5ce978d8b0e6fc1df259

SHA1
90ef71a9338f7554606fc2ffde04196118f8bb9f

SHA256
023e7d9f871a2bb91cf472e8e1c9277bf0fad0fd9395ad3303ed63de98285a98

SHA512
fff524448c056cd62939b93df88892a734642dc2a13ad78fb9a2263f16942b1a21b68d3996a0fb1103093c1424ec32794d40a0202eacb2c23e3d6889596da740

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
975d7fea5dc918281cb8c8cc637bc689

SHA1
e3615642581136955d2e6c0d1a796721302d2d52

SHA256
c0bf9eb611f2a32f7235310c4272809fec95d142a8cfec7c9356b1b454f2bfc9

SHA512
323c44150252d02e42c2b954b4ab2544c10f1db16dcf1a6259e2ad2523efd4300155e991fcd78aaae5ca5f4d8f92c079ed3d99325c15a854d0f9ef6c6862782a

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
df4a579f0800286ed93dffcbfc22e458

SHA1
46bbd39fc1b594d4d9cbbefb8b45a106a02cfaa9

SHA256
0399867aed5c990c84e90dca242b7b4f5a0270a6e235a5cf39fb728b50e94c80

SHA512
bbf125b27b27025d3b698218117e744430133c1da7d947f007bb1b89835683ba3056708e4c30098028dab3e657bf059d4609b73fa41616e23408171867ab3640

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
7a0d591b742c3dcfc9c31ad07722c38d

SHA1
753581f894cec851a68b41b73c4b7c589c102e03

SHA256
b87c04768c235fcaf3e89555322571a307a6135d51090ffbbde5d5c9f2aaa699

SHA512
da6eb51ccc88e7048caea42b02c31b1c1b4fe8ece0ae9daaf09d0dab5dbd0a4a2f499026921abce75df46bcb83a3a4ec111f351dc75b7f80d29d586ba280ae62

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
3a938b041fc4232f09d7c5e7e5600975

SHA1
118fc228e23a6935d502aaf2bdbd351a5d36dfc9

SHA256
7044fa6cec3e167f68dbdd302e4cda5056c4c36da23a6cc560dee2478953713d

SHA512
015995a32dfa1158bd5f1bbfc5fac398129a228c7daffc89d44a512332a98170be3bd824714cb588c3f036b5b1d3d7ebdd2602522845307b1bc432d91cb36559

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
bbbf35368032fea66d05806c87c7e95e

SHA1
a272653c82009eebc1682c2c27c6bc009c10253c

SHA256
40914dad1fb421d60cfe6a71494087da2e43c0c53d4fbf9899f83d7abb237674

SHA512
95ef61622ce8ccc6175acee8650ed85a621bada65ef8d29f93e8dc88c20ce74ca32f0ea262b96f65badb003834d97ac92ee16130f3c8c133e9b75d5196a1bd05

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
230c584425186ba86f686f6b5ee24a30

SHA1
dec2144cc6f231991e6c4cfd47b480e0c39a8fd8

SHA256
bc798f611d9206a9c2cf57d783abed5b8b98d78152e5e0288d9e855210119346

SHA512
4d64456c24dda5afcc7f64071c1614d10cfb5d56cc9952baf93b0ea69a095587f9f62d6d0564a80d93299d16585d6509bc6b035eb9253c58c946a0ca726cc92a

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
98c5f7f12d4917c9e0abdf010ba89968

SHA1
4ec95e2b10a2f2462c862bd203abf65e204fdd16

SHA256
8f97b62b90cb4d1bf765c6b7ea989a169a03cf9bf955c0fec34658f109b0b3c6

SHA512
389dfbcf9480ea2054ba49307f8628bd36a07fe37f9667e0495737185748eea67e2bf97930b29b93860e277f170f398ac85fb09fa6fd5797cdd9bb582d7d9c6e

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
9288609b44a4f4b280dfbd288ecfd4ea

SHA1
1b585768b33a93a23b33029eb98d90164f90e96c

SHA256
a1821df91c67ab983e170533e09a125d2a37744a015cc9d6a923b923b5c9a224

SHA512
aeb805f0c9ec585433d52ac9fbb1609e4c2eeb73a0b2b41eeb076f156914118fc0a59c586079c2390426152ce9c87b930b70948f0c5c71ce1f2d4112061d1f76

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
e5f5e8e3458b5094a6c92f9df5d10091

SHA1
65734865d0fccbe5152fe2ff75a6b5fb297c90e0

SHA256
31c163c52f7d1cfcf62e5ef33e095ea19afd5f0aec10edd40bef071055c336f0

SHA512
2fe6194b0150ed30d4c4bdbc83f20cd55711e885329ef916ca036ad7c0380103089c9cd1126ba79c0c0f75c63f95f3bce6f39889036adcf3b86b53474ef97153

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
9be4b4c5d96c94916ce551200e8ec33c

SHA1
7abbd82a3ce221b34594a3de9b460494ef8a9c5c

SHA256
aaa5833778bc14ddad8337bb8c8719c17d44d63e40b4218082414c3b1040dd14

SHA512
c639777c5d0179b0f4f94a5ef43cd319cc2301cb8ae8c095e4808a4cc2b4ac2d2470ee41359263dd75d2e3af49d8e66575099784978f356ab1391c5a1518b14f

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
745600b6b3f56525bb025b8952fe41c9

SHA1
b18d7121bde2e1a8f7285442f96be059802acf3f

SHA256
2a51a2e82edc12f55ad66031ec808312af1c860f561b062d4d09bb2e891c4a89

SHA512
02e6d45a5545a120eac069b1bc9d7be8d5daa516d0691acf554eb08210213d15002d7430ce0593e3d932ad4a66b05b98051ec9d0ad7d32b1ff0305dcd9be9cd6

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
3ec86ba7a3bf25060c3b546680d0a165

SHA1
843ff8875af3020c0360f8d2f90edfecfd362ddf

SHA256
8a928346f69c00de651470fa6791ba5d45471fe827b3acba63010f252cc6748b

SHA512
bdf099c7da4ee42248c57321322af13253304aac5c28c2cc86c8f242e323e869f7da98f90129585af1a3d57f6a0aed2b1f9c51d96953183e39c764b225213037

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
fbaf2a5d8c845b9ee212555e6551b997

SHA1
e5419340a0b541a3ba2ad9302269b71e079d8353

SHA256
9c422a0996934d83421efc1fdd44a0aeeb5e603c02ff784ff34b3bbd700ead14

SHA512
c6b28a62471f6a69079a5ba3eea311b500fdfffdc26bdcdd6a16f34b97d69e21d5d2ac0c5be2956ca63205abb36ae7624593343de5b32cacfc0f9cb919d28b37

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
08bfec6ccbb6ba79dd9a7d01ec7a488a

SHA1
6dfe3f13083fabd5d169d7b03a4e102c8b493932

SHA256
784c5a1033fabf07a3f515c4fe1410926ba0df93bd46f1c806a52d7ceaa5a9d8

SHA512
8caaeb38a50b85e83af35aec025b30ab079e49a84a1db7c419ff22c00f1e1bd1210f846401328df75b6a45b9372ffdfa0bad39d3251c22e46b3a50e66b3fc7e5

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
887624c5c206b73b74b57ff1b03b36b1

SHA1
9eaec3bb6176108abdbe5a46b074ca59c6b2f04b

SHA256
9b5a4442fb807daed3a5b3ffb71830e83aa0a17f62d0aadba291417e758f3698

SHA512
3e1d853b372ef52359b994a7c1aa84054977235ab31ac699c5e6170683aa4735f603ae46973b91c9b031167317271ee9bb37b9c22963212109f5af06247de881

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
2aec981a1c8407d6188d7713c364fcf3

SHA1
e11d25921c965382854ce3738af2eea13857f141

SHA256
004a87130441b4984b9d119f289f59e8b6cba8a24edce09bf06e84c412f00f9e

SHA512
5023eb1d4d24b2aaa5595298e6447c7040beb449fa2d81894db743087899d73dda562014872e28911c5da636296d6950a9a8245fa469b78047cb591bf78be32b

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
1d588aab2d06ddd5ff46484875d26f71

SHA1
27e36132eeabec1b69e2ab48b9d60536d3e24302

SHA256
ce07bf5598f7d95ebe00f9317072587435c9b0b0806751457585d2a4ffccb0bf

SHA512
d56a6fb9fd5a5c63976ecf193acfd449f195e833f489ac8f14537af386833bda32d8896627a321737146c8ae6c35b1b30c357cc19b885810ff38340d7be3a36e

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
f02ad1354ea83bef178271794d23dd89

SHA1
c9e541a62224ba47e82221c1815c7be3983b062f

SHA256
399ee3c7a2ad17e914df588af70dece302ae033b593a0c3fd3a4a483151094ce

SHA512
71d0ff4bc189860f04b57d3218cf58a17794c2824515b4f3eb7e3d9d73bf30168edc0be4f127085e307359869c2e39dc408f42bac9c39b4f5afaaa4d0c8d42e4

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
1ce06b9b32ebf50ebf0e7fb7ac98361c

SHA1
9b81d06d6eda9ab6e44a37f667884b38fcdfe083

SHA256
4512eadbbdb10ebdde32d158ba3e3fb9d513a36172bc55eebd5c5fd7eb0adbd6

SHA512
332ac752672c738e2ff52f0cf9664e356d2e79f4689a0451bfa29a8a7b20fe23b1d1f610b673dd81acf922df6288b96d262c7b1b9ec4d89d2407c81980f6ebcf

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
0994ddc7ae15d5da37dd05042a756da1

SHA1
4278f7024d366309cdbac2ee097314d2f976bcfd

SHA256
9b53b26aa1dc1ab7aba9ad5190f99edf9e2221561a437503c46ad9538c9bdf5a

SHA512
decb9d0cf987376f843421fb76086e7e28f14d0c0e79d834a5b2588f27c1f5edae591c11fd91f4e14c6b06569984de6a4184d37049d4a81e49583ba769e92c96

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
53bbd43b4467068892cd2896463bf125

SHA1
eaa89935ec4b130ac08b943affdc6dffe2ba31e2

SHA256
f2c47b7136c78500caa17aa3447b65a941097e2ac1ab0eb74237282588ab59e5

SHA512
8025a60f9dee65747d70ccb7ffc3b631ce3ba9e19f65fbfb11dfd23b463ea44d79e429e2a7473940adce2df6dbb1b86fadffcdf03720723676361f092647dea3

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
636a4f85bf1ef20a7f0a541bf20a6b25

SHA1
fac5cb967066e8aed10788439a157c9b12664ace

SHA256
7e892768dc9e0e17770bef5420df4434c223f51580038bb63ccdf74627979352

SHA512
d26872a83817004c4e9c6f14d429a1e7c3eb461c0a117a41a2ce2f3e4c8292cad3687e16fd0e0878134b45813e08805f3e28acd3aea7c01e15294b71f24a6aa0

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
f0ed1f139fca3498eeae20d9595250c5

SHA1
af5e1c2c166380aaf0a8acb27495ee18b564001a

SHA256
47b85ee3323cec09c71cd81ff20ba3e9ace181886b5e5db33ee586fd1477337b

SHA512
e66b70c4dc104dfaf04f0b5d68c24a51a9f7d35796c471a433f09faee72ffa9e464e5ca0e927759efc1aca4bee0368c8fcbb86bc296393469ab8014ae94b4b54

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
721b845902e17db62961720087b8c966

SHA1
1413ca9840c62b14bb372ec537d50625061c3fbd

SHA256
a5d22a59afc25fca90e9730bde82de829f17c4f79006ded0424f88cfd8a099cc

SHA512
310ad6f398308ed0c90d7497734941cc95bed02c0a0d1d52a229beba6d72c576c416a64a0f287afd430904ab52be08680507441e1ed236c78e85be89fafaabcc

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
894c67f103e19d1d31b8dc16b8e3e490

SHA1
0b0bef58100700d643653930899435895930e623

SHA256
d446512de9974f0404cd632c0c5a149dc327406673597852722fa0e0c347ccf2

SHA512
ccd32ef455aec2b28ba4297290bffd0cdee54884f490715f9fa59d1ef420963ca613c272af6d01af4da43e171cf0944f867ac3b19e8b1b05219011947b8fad36

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
2023b65c4851a982f429051ffaca9d77

SHA1
50db94435dd85010e4cca841a945182b272b7924

SHA256
c56a342cdab3a37bea1fc7baf1097c5d8773ee44d2186a7093c2a4b0901e0e38

SHA512
145efd4b27cdb4deec4ab0b7a74e94f3823c5b66a9ed87f5c450623db0daa3fa2de6f306d37d1fe223b078ae0f228930ccb1bfd1e4de81e646ee590022fa8f30

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
f6a1f42d7b1ff710e61a4b6373cb8b10

SHA1
61d08be27bd534f12609aa22cff6513bd378d0aa

SHA256
08dd5bfbb20769ed969e4b7bea0c505f1184bda167cf44e91bbdfb6f854e2395

SHA512
82f788a318e0c4863f7fee0ca27f2ecf23f3befe2d36bc46c006afdceb930792a5a5959aeb554c23db19151e41b9b68349c1b8488bd0c04627671d7753fb6778

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
0b666b7902654b88346e2f3c6fac0cd2

SHA1
753247f4d886b5578b2a3ed2354cbdee83234a59

SHA256
9c1cd1191a1562115feab95ba880132358da01fe4fa2703a4df019270118c53e

SHA512
adf60fe80dc904bff0671b272624d622de3cfd5179b7194e157fc5d1151a237a1c938c6da5c57d1a81d3cfd33d7b75c680b5941d12df38cebb225f37f36c3dd6

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
e434e843de202a6d71bdc7c94365b824

SHA1
6e8d4944252e3f4b8e1a8e71facdf17c3b4e6367

SHA256
da40aef23f088d7b35b9da5df003009169c29bfe427768cc8e952c410599dd57

SHA512
e52181a397f903b91aefa7bb2b035a11398246104af8a59db7def1c8efa9d9e7f04d56ed01e1349616cf33ef37643358ee59f30258674f15df14e3235d713f9b

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
549fa0cfda6cb8b1b5e833394434867d

SHA1
f3407099c1162334eabfee74a043f11b69614d32

SHA256
84f9a0d31273ca535c4fd1d7f71a43eb0bc6cb0c5916649192dbee7d8ba17660

SHA512
01c8535ad3123510f0da3ceeab401810f720ca9b4d37e340ad86bef72b9f74daba87e0d07864eeeacc35fcc429f2e8adfcd17cf2cc86b3ed21fe338992fd3af7

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
556ff3a145729c65a1b0da41e813ff90

SHA1
72a29d82c7506a098abebcd7e4273ccc8086bb84

SHA256
0ca4a4e792104227a44f249d5bfd9648c2903a7af9c989b74d53707295136048

SHA512
b982066034ae0c5f9e19a22542ab07f6125bc9d5bedb17d0a7e9f96f7653e5eb9363594007200a69f5771d62582819c894d896e8be898ca2b8805a51d9f8a4f6

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a5543b59f4ca6eb8f7f8e867808a8d09

SHA1
9e82275cfc8ec1368983aadf3d3ff1b1d669035a

SHA256
74a25eae0ad54bbe94f85e6ac4552cca3cd8e3f4a778fea2649ac9a11b6b900f

SHA512
6ad3e58f7191999ed05f953757188b7b38dbb0d881fc544bb5a5df513c2f2a75a63d1105ba3e8a55dbb5243077ea311b9b5227ab607bd72791ad3af92581bc22

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
3486e5cd5bf6a5bd14af2f5400665f0f

SHA1
dc22c8657a9f6a5c93e3912703a5b05b8cd9b378

SHA256
c6017ffe39dbb27e3e10420e6500cfb8b443270bc690c26e2a33f940ca031a77

SHA512
f7b892a1a103c80b1e5a1dd5df592250b033fce6743998dd9d70f19a4715f21a4c55ab5b6cda448d74fd9ea81ab374196efc43fec7ac2bc12919e2902c5b0bc3

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
b1ff1ab6b1ec501da6ccab8cfc6ec675

SHA1
5de32f2ddd5fff9f634d22bad1ec4b2a3abdd75c

SHA256
59091d6cee78daf175aff8ddc8fffba6561d664437e03b20ea942bfb35f9cb30

SHA512
51f4719027cbccff07bdcfaf11ce28a9be44cae9fbba8cec5467f0100bc5bb491c700591ac0f33b520218aa8c69c1eebfa42fbd83f254e149d4a3b40674a1b18

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
60354fd7f993aed64aa163d14886fcb9

SHA1
033e493e4fb1cb830cffedbc2ebb97a3cff2fbef

SHA256
a3f29a32e1e640ca8f2c190fc3169fff2359e8ab09af3d2f2e0513209dc1b862

SHA512
288ab2af2549570c35bfe50689800e278b89d891fd0a8b5e8095c4e0ec44f0ad363befe16103a502e1021fa5eadbbe987bcf8ab27c8d49f36db4116c7fcde4e4

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
a93c869d27c6bc062a230e6cb920bd8d

SHA1
324f76ae5a6781a28c7e8966a5f5fba5edd427e7

SHA256
31dd0560a1543508b7267b0bdc469b843f57ccb364339d586e844d436feedfa7

SHA512
4fc55fa389711f3beabbbce0c01d6fd0de010d2a3a34623bcd1f08f373308c7ccc20cae96be0e5e00000281534fe0d16d644214cadaf44cbb9af17d81cc99025

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
128a53c0b5d58dff0a75cee2249c48d4

SHA1
08c9855b8bf2eb25502a427f1cf911da17fe3f16

SHA256
b9470daf4ce341e7f0c5abac5a0f840c5d7276aadf5d9134a500143a99c3813d

SHA512
67d83f6bcd1e1485a2d6b6cada639caf0a72ee675a3ea6eca53a6af0685e84cdf46a8c042fa5e5c24b7f7cc593b0cdd4fb895cd468e6210ce6a909bde0681894

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
31b1dee539387cd0796338d194292d37

SHA1
9a162f564e13588c8f89bb0f2127179673260983

SHA256
b917fbd3a98f3dd3a407c28c86b37c79bf8a4e725acff24163bb90f40301df74

SHA512
f2a02cbbe94bad644225594328b4bf9cb588a056aa0992b5d6c0d08e20349aafe7ef72dee479b490b11d859a9db6f9dccdbdef9dba710bff5683d9a063779218

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
3c0111b5799b4400fb628ef2cd9efd35

SHA1
8f00bfb4612098182fcf1b53d959657a4dec5209

SHA256
fde2ace34385244f96853961a328c652a6bc47fc428ef4462f33f1bbf44192b3

SHA512
2833e71f82c891048bd13763b9b0f05e4118b06d01d3f1537d950e196f821a21e74493bedff7a1075940d7c9c57b6fe1c29e0330f944f86b8e94f85be1ea70e4

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
00d806dcc2cfe2c18dca83c18e4c4887

SHA1
44f5cb7439e718ed7b3c06c5abe2c744c6c16a5c

SHA256
a30e792874e3dbc518a37d762ff5418f5c7c26b1f34709fe7ca57d344fa0e7db

SHA512
c9b36e6af5178810d81a872403d33b5342bd252b3bcfb012f34f3a689aa296a301e8bae6161f0c23a1e909ca4036b61802daf5186d0d8314d470c6d4e31a7c75

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
c9d3e6aa043f40c0b3823e75f1e311b4

SHA1
bf739099ea8eb834378be1de9fef6276d6f43988

SHA256
de25fffaa4b108866c8f41fc02211fb4ffa1291054dbf647aa43f6cfb517c1fc

SHA512
47e2c140b96230242d91f8dd9ccbe7045452e62faf465242bf4091e74745afb978dcd69ae2c2cc41c55abcdc9daf6c0d62181f34e8b8a0c95cc56571aaa64459

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
dff66e5064295a29d0c3191422e61342

SHA1
64e999a911ef877d60540c5ece1ce285143f41cb

SHA256
7e1930ea792ef18874ae4ab2bbddc33fb6621a3cb45e5e6b75940bcf2c7a33f8

SHA512
bc57cd60b3eff9c34b44abda8dbff611982bbbcc60165c31bf9211d1524a03c96a5653bdd517a8689880195968b2e47038733a7e30c06748bdc754ae4d4332b2

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
0a195aa265ddef68ade10e6623fb39e9

SHA1
798de0b30fbe8536c8a332a513a3ae96f680bf2f

SHA256
68fbe098c2716f076204894d175afd64365ded1fd2f4c2f1ad9efb18035543c3

SHA512
0bee00721283041d1546b15dc5351a39a55002d0deabe095fb5bee1a58e0e13f1d31e948a57990c51da276df024ea7a12a41120fd31d731ff9e96e859b010dfb

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
bb9808bd45ebd79004314365d8c8deec

SHA1
8c16c8eccba7afafd280baa630381f86a222ff59

SHA256
0091e341c2d27972d1641af6abc7c8de5ad6f501d67da1734f247b7259ae371b

SHA512
d91bf3b44550b6836e6100d6627f0e21e425d97617c5dabf726874f0fe614600bcbd88547849d631b72492e1610a197ef8071e45be25ae0f7ba9ffb043d4de30

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
4d7240b408b93509255fc6e897d6a924

SHA1
74eb773d73dc4a20c0ac3d9d2e0ea18fb361ca03

SHA256
1e5b6c13a39a3de298017aec8fc29aa799c479852883585bc16a188b370b4af1

SHA512
5d50940d6e8cca5219a7297dd75b2449c3c14666ef7cf6529db8afe895fe3aa93f287d3d357ae211043d56a59ae817cea00317909d26dad069120055852a5537

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
6542e1f9636558d80d0c4f44b6c9f076

SHA1
a3231aa72f9a8934b07feef0bbc9ce29834fa39c

SHA256
bba612c78c8e93aaeaccb7c9a14276385abf0115e7d8226bc84d2973f8d3f646

SHA512
f7caeec44e0745ed9a168efeab175a8175fb8fe405b69f3f195409b88a3e7850d53f611aad843b445d67a808287e162d34cbbb3beccaa0eca1f79d7835a039e9

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
90d33066e3ef861ae50d3887353a34b3

SHA1
9261d5aeaae11ccf43a3165788820a1da7527ea6

SHA256
3315e968f32e767f3a3c6e930e5713762146d004ae4b6bfae0ca69b60b7ee733

SHA512
2efa5284347a39f3981ca6d9b5c5bcd46a098484577e20e8167a3663bec250881561a4148d6b763b036f216e4de1612cc59ea64661f8c1ccb3a906af6f96bc50

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
eb4317ba9f02b1d45e06d18e6c01c8e6

SHA1
2d42b7ea5677035cc3aff49c49ea4a0be4b2228e

SHA256
a7de85389895de80098a2c0837a64a1b0be11e5f30dc475b490cddc007f6eb94

SHA512
45bfa0f8652cfa792e3dc4a69a01972bd6218d2d8f3f2101bbb2d610675ae1984d1fe7867cda7082edeb3091f1daaca5020bd60258855596dfb449a15ff14db4

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
494c71c5eedde5da5d646b2ca27664d0

SHA1
e76b9792919d815ac21b35d3671eb2ca0d383592

SHA256
39c09616f8c4cb9c0c413c46308cd534649493c8b4adfeacf593f1d01f147fce

SHA512
343daf5978e84cfe5203e9aefdc3a14ba396b2035e9c365ea5b289412e12057e43b60bc7006d3e57cdc02bba007f188847b84ebe58e44a03ee0d7944bdf8ccc5

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
cbd4a1dbcc2b1820e6db1a040d840591

SHA1
1928c5be373145d0ac2dfba9791195708e1887d1

SHA256
0d241f0ad27617c89b0af84964cbc1499671c06e275a04464fa04a771d224eb8

SHA512
1bbcdfffda5e1246365a64858c9702eea6e47a155e4027a9d471117cf4abe953793b2a797fa5ca96298ba29c68aab60599a8a0fb8d1e55c5a9791c1fa6c5a2c0

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
277833704f55e6616c31ecc7258af49b

SHA1
b63a095d7e5555ecf533dcc47dd432c7b3b5dd9f

SHA256
1b020eaae5a01eda1f4a18a81b2ecb8861815d49129e28751c91b63570a2cb4d

SHA512
3ee3033d54a2052843171f1b26e6fd33ba4ea78b595e27c3fff688104f6ac0c7e36d2c312de2cfab3a60c9fd93d6c31588145e208928973806ef353a0e10720b

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
36e2f9f44892cab94a1388263e4ac903

SHA1
24187905b5506bfbad05d18ca7b4b96efef7e47c

SHA256
a024c747a8aa93d0f22bbc6c9b66f4c8e820d966880a873622701b935800d5e2

SHA512
fd85459b49f52243777d51a2b86900b8f4632c9773680f5548df06cb38ec9cb5545e78dd2d6cc0598630e220fd93140816eba7adc7b0ee0aad225e5be1fb3a04

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
c4e64f8d08d190ac093ab7fc76bdd4dd

SHA1
790dadc63ed929081e146c0df1ebf707e9e22335

SHA256
d73c34a1abaf3ba0c3cb77ed3be0a0ed62ff1da00b6dcbaa8098fd164f48e789

SHA512
911e8bff527c1d2899e2022a5a0e2d06c2b9bc39d7ff9461e6b33861d14a6942f1bad6292abfb852a12ef732dbadd9cc8970214e7ad59f600a142271c2fff6a4

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
534a725200f0d927108874d785b14fed

SHA1
75508603b342e4acd65a45bd5ea203d0e1882232

SHA256
85c0f9a35c8cd52e37d5776a966db38d1f920ec7fc764c23d011bf602598561e

SHA512
d21bd8fb3ac401d21623820455df3bba1de6def413c79177f43b9725916a80a5183a3324740f77fdf9c3046050af29990b819507b5d4700c9f50de75e130da1a

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
a2445b27ca9df05fc7ce3213c2ad51cd

SHA1
2a6eb9a86179a126a6f2b6cbdd5f1a74dfdd3171

SHA256
07f11b866f8c3dc571e8fe71f0e60d8b23ac133c389387e9ff43684e52097db1

SHA512
ecde62a07a7edd276198e7022fcc129d615e4096bc2fe5d9962e68fd5a44e42f543b8fda237c85a66a39f766b5abf96aeb6ca4d008d6266292a044eb5bdc5e4f

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
4dd567d2208ae516d5faefdd74bfb92e

SHA1
06b9fcc0db2cabcf3ddc1a2ef076a181f51eabe8

SHA256
bde5197e592914fa556924656cacfd2a272eb8efdb2c25282f6250eee2086e37

SHA512
cd4782d1c4cc15d9d18d4912a5fe5b8ecd41354cec08d647bb7679b4958570bafced4e5578d1b4d0f081975ee7ec51c451fa10ddf23acc5cfea585f4f76c3151

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
921cd88c459d787d53f41103fcbc706e

SHA1
0ab363bfa0ad15d3e1c40014633ab39661f86919

SHA256
ce2e69f4752d481e1ff8c1703d4a8480db8bb7ba3d3ce6cae59cb391b557b770

SHA512
8729543ea85cb8e5a6d5248df093833d0012973bc8df3f3895984b4201cb6cde08c3856973035b6e306588dd46a6843bb881440514a95211b13b3d01c82f4f8b

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
1b0062b69b87dc08cf5a87b772ec7bca

SHA1
7c390de7de640877c24b1534dad0d0467215c369

SHA256
32ccf8480525956c79d7b0a7517f5e1c04f353a935e34ab61dffa1f0f55f0d0a

SHA512
6181470d74decbc944197bdbf5ec55ebbbc4a3886e2afe54a31faeb00f6245e450a56c88cc36cc57fbbc3bf0048de7fcc08dbe9ee5ec8883b5b2bf6f7d70cc34

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
f9f3cdb889018186a70cb6a708c33b96

SHA1
f6a0dd62fb56413bdffaed0cdf3de19bef3da299

SHA256
0378f0e7c3aeeb055e7b826fd1390e27736150da02a3e5276c49de434a509e13

SHA512
d3b04546f4442ba891f436e8ce8b0a10c8000c59e3c03cac98e753c2f38791da6e46ce55911984e9ec9108845d46fe73eff3c76abfa7c394d30cbc2652f3116d

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
b002300714db9f27b6fc1d173c64573b

SHA1
a47be74afe54b0034850cf7a6fb20de1204f7e52

SHA256
0e27c1f9fda3e81038cec2b41bad80397e77f20f902a223996586f6c586df34e

SHA512
8576b1a742ba523624b33ef2a32d1383946d7307479f5e8698fde6f7adc37b80a8a53803cb7af17d16b82af36576c0276bcce0fbac865bee09f1b88b24bef076

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
9cb9c10517a56be070a7e9ef10f9cf58

SHA1
f62997b08402174a41757fb2e2fbd07aba2df372

SHA256
506e27d6f29f44e2e808f5141657d87808e9da354d20caceaa93b27d6144b558

SHA512
c6de8f37477251a24eb906a0125a5fdb7c5237adf1d5db4691b3b440718d474d05fff3d1196cd93cc06c8ad3c12be26ead83f6300b02cb42b521e8ef94b9671d

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
cd65c2bf5258742d69d8f0a1a08f2e4f

SHA1
a9038e3e6dc5b325c75089b09dbb1547fc297f52

SHA256
7b6961740a60b9f752a0892c6b3e6b10e05e6f881cd86a5ff84c12d68e72b13e

SHA512
d73b98b5e10cca9ca1d2b4fdaf2426871e36b24f2487acdfdd437ec31152178bee9f86d68e5e0ceb15b47e6f875fcd268f3147f40dbf082d9754d8908f9a5867

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
0e855853531af3b5840fcaab1f64ef57

SHA1
bed32cc61559ad59d317945aa50913c47eeebd8b

SHA256
11a3c461a60ac16a898450545640c4de3fb7f9c0e0d91adebe420253a4ad0469

SHA512
c5418c4ddd3bac4e30de980b8dea20c9be918130e92fafff62500549a4dc5b7d4069f7d3ac1eb1b383dbe417968e9ffe2bd032440289cf4083d01e7b7a80dff2

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
1525bee25bc1f54b84140b45ff2ab0b8

SHA1
0fdf7686af95816d62c444136de096b0e47294c5

SHA256
383488a4c8ce6082a7b10dc8faf6416f9fbc1d1e23452f9001f40344ec750c0b

SHA512
6ee1c0e682f806e01084ff1707e4e26cebbd85268db57ac7846f0a732075c6fcb8fc8b354f66476139c44a8c34cdde8be4189d6d6d2d58172e26c6a2396f4f7b

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
0815f8d9e23ae6067ef6527ae094cfed

SHA1
90372c71d9396e8701cadc1056f1bb1568228e04

SHA256
9eac2002f63d3a02a5e6a0fd914436f42b3f67d7bd4263d4582689abcd00f60a

SHA512
c37ff62d2fd02929055a18342f0d964e17a95134ff3fe5a83edd57cf038ec267972f5184a25967b49f1e6dab97e9ea1dad9e2d4c79465555926e06c64ec5b9d5

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
c8a67f8b8ce607ff54e7ea29fc000450

SHA1
4fc728744bb78a8c29f05c67e067d3af755c9cd9

SHA256
9a0cc9b664d21fc01f93ce946d8426cbfe4a38623e2b6fe06c967291fc9840ee

SHA512
43148dce167a73b32b26a031e97ca75b8f7be8bd0391217d855ed7ae1feee09a9a7a4f356f30d054a9c157cf29d25b24fff321c96f01cedca86cc348f3f556e9

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
cf7d2d2a0d101bbb4cd88075d121b3af

SHA1
adc21da1907b8ed489044995250866b56c95f0a7

SHA256
53df3d9e3aeb03fd53ec311c6af1ffde0eef0b975f17816cb6486f91f821bdce

SHA512
adc3c5d3ab70d3eb2f96e5b6668e61b91c07af2ecef1f1c579046108505f52ca6b017113d499f341bc93edc30a71afba0e275772384ef6cbe52aee3561bc5bd7

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
53699233827fd554b86c48fc737e6afc

SHA1
a3177c3ba8b81fd5f7ff451a515d3b5300296b81

SHA256
f2bffb5acdf32f6b7ca74764bbcf2e243bf4bca187a9d639100fd0d580a8505c

SHA512
d41243450e8665a84e996d5f6060ca6e6e5e32a7f845ddc4d8c5c7bd2558b63a7b226301662b379ffa787812c25b78bdf7907618d7f95cbcbbf0edde7dec0112

Download Submit