0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
100s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14-11-2024 13:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0A6172B017F62EAA.exe
Size

137KB
MD5

b556893d6f0219bb98468f724aeb06cf
SHA1

540d6c29aa4a05564da6bf253fc46fc8793277f1
SHA256

a75d6bf3c8cf0fc45b368bd83200d141319c9c67033803a230bd3451a309edff
SHA512

3a9c8477dfec35af9e682e197c76a1c1e341cdd4f4c276d1c18beac9ff5b53da394eac8428e66921369a607cd75c2fb7e430466758df508d6974e59f7f901ae9
SSDEEP

3072:MLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hn2bIoKb:MstYrEMw6Bxk5zOFNtgJiCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 0A6172B017F62EAA

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11245) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

0A6172B017F62EAA.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation	0A6172B017F62EAA.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

0A6172B017F62EAA.exe

description ioc process

File opened (read-only) \??\F: 0A6172B017F62EAA.exe
File opened (read-only) \??\D: 0A6172B017F62EAA.exe

description	ioc	process
File opened (read-only)	\??\F:	0A6172B017F62EAA.exe
File opened (read-only)	\??\D:	0A6172B017F62EAA.exe

Drops file in Program Files directory 64 IoCs

Processes:

0A6172B017F62EAA.exe

description	ioc	process
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSOADFPS.DLL	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Windows.Extensions.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\System.Spatial.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\pt-br\ui-strings.js	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\Integrator.exe	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-white\LargeTile.scale-200.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Assets\TinyTile.scale-200_contrast-white.png	0A6172B017F62EAA.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-60_altform-unplated.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\rsod\excelmui.msi.16.en-us.tree.dat.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\assets\Sample Files\Adobe Cloud Services.pdf	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-36_altform-unplated_contrast-black.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\OneNoteLogoSmall.scale-80.png.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_LogoSmall.targetsize-256.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\de-de\ui-strings.js	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\pt-br\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntime2019R_PrepidBypass-ppd.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Grace-ppd.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\SmallTile.scale-400.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-32_altform-unplated_contrast-black.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe\mfc140ita.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\fre\StartMenu_Win8_RTL.mp4.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial2-ppd.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_KMS_Client_AE-ppd.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\2876_24x24x32.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\RTL\contrast-white\SmallTile.scale-200.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-pl.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-80.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNotePageWideTile.scale-400.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Lighting\Dark\Campfire.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\180.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-ul-oob.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\PresentationUI.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\System.Windows.Forms.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\RIPPLE\RIPPLE.ELM.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-ul-oob.xrm-ms	0A6172B017F62EAA.exe
File created	C:\Program Files\Microsoft Office\root\Office16\STARTUP\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\Be.ps1.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_GB\README.txt.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ECLIPSE\THMBNAIL.PNG.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial5-ppd.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ppd.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.scale-200.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\OFFSYMK.TTF	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Standard.targetsize-24_contrast-black.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Text.RegularExpressions.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Linq.Parallel.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\CursorResourceBuilder.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ppd.xrm-ms	0A6172B017F62EAA.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\BadgeLogo.scale-200_contrast-black.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_removeme-default_18.svg.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\DenyRestart.pot	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\x64\MSWebp_store.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons_retina.png.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

0A6172B017F62EAA.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0A6172B017F62EAA.exe
Interacts with shadow copies 3 TTPs 2 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Direct Volume Access
T1006

Processes:

vssadmin.exevssadmin.exe

pid process

1484 vssadmin.exe
1796 vssadmin.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0A6172B017F62EAA.exe

pid	process
1484	vssadmin.exe
1796	vssadmin.exe

Modifies registry class 1 IoCs

Processes:

StartMenuExperienceHost.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

0A6172B017F62EAA.exe

pid	process
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe
1216	0A6172B017F62EAA.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

Processes:

0A6172B017F62EAA.exevssvc.exe

description	pid	process
Token: SeDebugPrivilege	1216	0A6172B017F62EAA.exe
Token: SeRestorePrivilege	1216	0A6172B017F62EAA.exe
Token: SeBackupPrivilege	1216	0A6172B017F62EAA.exe
Token: SeTakeOwnershipPrivilege	1216	0A6172B017F62EAA.exe
Token: SeAuditPrivilege	1216	0A6172B017F62EAA.exe
Token: SeSecurityPrivilege	1216	0A6172B017F62EAA.exe
Token: SeIncBasePriorityPrivilege	1216	0A6172B017F62EAA.exe
Token: SeBackupPrivilege	3924	vssvc.exe
Token: SeRestorePrivilege	3924	vssvc.exe
Token: SeAuditPrivilege	3924	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

StartMenuExperienceHost.exe

pid process

4500 StartMenuExperienceHost.exe

pid	process
4500	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

0A6172B017F62EAA.execmd.execmd.exe

description	pid	process	target process
PID 1216 wrote to memory of 1688	1216	0A6172B017F62EAA.exe	cmd.exe
PID 1216 wrote to memory of 1688	1216	0A6172B017F62EAA.exe	cmd.exe
PID 1688 wrote to memory of 1796	1688	cmd.exe	vssadmin.exe
PID 1688 wrote to memory of 1796	1688	cmd.exe	vssadmin.exe
PID 1216 wrote to memory of 1680	1216	0A6172B017F62EAA.exe	cmd.exe
PID 1216 wrote to memory of 1680	1216	0A6172B017F62EAA.exe	cmd.exe
PID 1680 wrote to memory of 1484	1680	cmd.exe	vssadmin.exe
PID 1680 wrote to memory of 1484	1680	cmd.exe	vssadmin.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe
"C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1216
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1688
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1796
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1680
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1484

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3924

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:4048

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:2940

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4500

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
c01fe11db395b88d31bf0831a979812b

SHA1
ffc50687295b69bd879536b37969e71669fa329a

SHA256
8efcb46f2a7b93175d12b004196756a7dd73c694d0c555b8a8854d11bb8ee684

SHA512
7c39545a7fc36b40d9d8eaf069c437490e664fa7486464e11c6ffa98c75238bf5653a539b2c94442e4fe2f35672234b286f8624017c19b57d4cff7f38b64230e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
2c4a4381223fcd77650f02fa380d8fe4

SHA1
f7c4fcf0df82c2de71c63f01f2accbda1b5e8aa9

SHA256
744805066aa3d37e01a66a97d213c70d44758220b1cb3ef3e6db39d318244b9f

SHA512
c9c955d0e90eff3105dad2dc035d8e0af419df10c364bdc36614a61dc15263f733441625048a8d38acb3ac9ed8a7340356570959313b53081e94e0e5c35f7063

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
983c1c1bade7972962861e238c26122a

SHA1
d9eb792dd309c1fe0092acefc7f1a7609636f5c3

SHA256
32927fb13e4254a439ff7063783b536ea8d555f5f8fd16ebccfee3ca94317cab

SHA512
476546887ac5428af9e6534d6d5ca03104f5f8a3260ee73cf79319affa5203e7cf6394fb6c2fe05cff03e423afbe4e157e6cdf7b4fa3b1e62f9cf51b3c60f4c4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
10b36cbdea31c01ba8eefa178b797115

SHA1
c4c4e70d269ee0211a62d47ef6f992217998d481

SHA256
9b71eddcfd91e9cddca696f6cd79785733f3fe02dfe41041c4b1cb7485420026

SHA512
de24a3aa3c89765bd25b21c50921fe52d6f0e14ba2843f03f2a044acb68e8a52f17a21e6426849ba1b5629c0c17f08feb033fea8b35277428092d1418712a228

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
d34f765ac135f5a70231a5a9ef5b69ae

SHA1
5b28f1515ec7887ab4fb5c6be67fe77d9c59ab0d

SHA256
5c0bbac87de04792cf3c9c9ab0959047e65bea6204959c5a82f83a613c6bd96e

SHA512
1888bb08bad7709b85a056919ba43e191adc5e3797df9ceb619b638122c4057aa350f8ac4a00e6eef73ab144690f0884fb235ea7cb38500e8df18c8951087104

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
a4f4242027650b05efe536c85e7b3d24

SHA1
52fe16db1ae340d4536aa52a92a104f25b2f28fa

SHA256
940d1e1e377b38cb32cef643167cb0d16ec237f980ae2a263e81b02db66286f0

SHA512
8ba0c5497a9da5f3cd4248bc780f5c495095a654a1db068a5db5b40c4560a0b05f4dc70205cbc87a1c6f283d4fae1bf2cd4f6dc9e35a2e293b6657a6dc02648c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
7cb020bbcc608d42804614fb8cca8e6b

SHA1
1deb42500f4182b12c9486855f9f2aca26ab4a4f

SHA256
ea90c39d88d2c977a16521c545b8a8d7ace6682d71fe168ddf0aed27695d3131

SHA512
3b9d64cba86a5b436cede179295d01bad73401226173537f97d05fdd13da268983877299e5d30cba505a8f7fa0778b804783a25f259b7ccb8cfc563f3d963620

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
bc4eb868ce3a0da0121f38a723ee80ed

SHA1
0d194dc247e995ce9afb4a0ff1d0ab854f0d08b8

SHA256
226ffb9d89b6114fd9caf78580be9c348878b87c9a504052235109482c0a56ee

SHA512
abdbb5429a58fe40a22cc59d79fd2c030b14fa8b1c720e624dfc98e72fb72b4bcb8a0853909f3c7cefddbc93a556e4c24f9eac508b7bb4e376e10d6a8aadf31e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
ea03785093cee93a3b279b8f398fe2ae

SHA1
aac405d8d6d5df89c870073d59d4378f18990ac1

SHA256
19b706d4b98887c671c7b54eff4ccc74c4bbdf42b8f05ad02feb16e4a923d9fd

SHA512
4a1d891b9224bfd5310e8cb67688d6e2d6d7c71c29cc571f7f69b8d806f655e1a386e9c613604167fc3e2ce04cf269699d43562ebad73f7ca3a6ec29c8066e11

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
a3d50af64805037351448aaf8ce68769

SHA1
ff8e9bcbf90d5f412fd1a00a740f761a3e485485

SHA256
46221391a38e399c11a911ed4ee336b577235f30736396d2ecc15af1341328a0

SHA512
5dec454ad7e061651562f45a41c97b24607c2e8a80b09c12978f91d9e8c4dbbfcc6924d1ff8fb523a22846afe631d2296a7c39752ce6d2802818c3d326479d57

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
0f2c7971cdff5c016ad958cad830f5b6

SHA1
e5b08ae3a337ac98f3719013f3a835b361fbc2c1

SHA256
fa8b38f9f44d826c042547e54476b1e3c976f439dbe1c43556bc0c974866f5e6

SHA512
971a4211c0164b8f75e2492e07581b1c1a1f29748b8582b39d02176a4114c5cbc92d8f77da1fd44593574a0636e31a6b6443d0013b69b7d599219a276fd470f2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
53f6bee6ddf585bc3717929d7482c111

SHA1
5889d2ee24585a91b6318e21e0796c9b364d396e

SHA256
c6d6c5d585cccc58113b5a163f27330f5deaa37211fda0d81fcea31ecab7be0c

SHA512
cbc123a4a822685f744285b28aeefd05e1b1b397052d9e9554327f9e4b6e92b690bab8773474f80c95d8ad1fad89a31af2ec6a7d1012701a0b781ab23d23cd39

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
18227dc8aee0ae43f47bd172c98a893c

SHA1
c168f7a1b3d8aa2d79643ee1131fd45c071df457

SHA256
6e162acd2b470a74f1c854e26e82e0edaa4e4eff31c8060bc7051b03e450b7bb

SHA512
94f2f33d3fac5bd1d5df61a5ebb87c0d2e6a881efec29123b22deed7fad2149701a98f9d29c2cdc599bf7f50f753de4cd15af860dbef2e8fac55871a2a54b59b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
391d39240b2eab240286244a719f0b4a

SHA1
911d6da49e7569969235b2c413a0ab549940a875

SHA256
4fe688960878e4864ec94299ca0c77a609f80f8568784a9317e2d87257067b07

SHA512
8742b2beb03bc42d8bc4272d0e6be5aae5310366931ace471a9f152d1fde75a699a7c90e675514b7a5b58acd83ae5c37e543f8d77e982bd48825b57a86b9e309

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
24419ef8f2878217880f159b4069e6ca

SHA1
68ac21473003edd44053c1a215de32542d0bd1d2

SHA256
5755303c6fa0f1f83c720f00b2ab1c04c72254d75f56697d7c2a0e38d536dc89

SHA512
db8d340af94c6df47f3e753cfcb70e5fb596a6ae56b0f0fafa107944a29c4986870bbaecf16c6ff02ac9f342fa38479f74af81f6fe16f24c45689ac5a77da4d4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
ca623f0cff9bde6668e7fec3902da97c

SHA1
28137ce74d3384a9c416598eee1baa3843700887

SHA256
ed222a06a8d152ecdf69e8d15f54d21ec944f526e0729bb9e9fb2c9af48e49b8

SHA512
3e05816ba905b6e4bbc9dda24e99bf36ba72b26fcd91062eee6087e7854fc822c6f991f85a6c50f54179b376b7b0944e364c5b6113bf0b503e6783e14e6466b9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
aacc4eeb737b87937e2e81d390aa0f11

SHA1
f528f8364b748ea6d6632cb75358244f5a987c32

SHA256
884c81ef28c4e07137301b62ade65731483ef3443a061062a4340030044acb98

SHA512
d9a6b5ad59f37f6e66a851a21b9d04402bb276e709934f24a0ebab1bce7d975702fc07218215670b2b6e27ca77f3e6629703cc8ac0e27ed1eeb8316c26bd4af5

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
db0590680515181f2d706765b31d6982

SHA1
1acf9ff702f777a7e2845ade89e14e80ea0283aa

SHA256
cae7422249aca5cd95dbedb9e5627b1358da885aeb0dc33f635ab83dfcac9566

SHA512
2b923c911700487dd58ece5ee797696b03384a77d06afb775be9689a426e861e4bea44afb2a927e9c229653af17feb677b47877453403ec36ebc5f82f9aadeb9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
29141602fb4ef18e49f46d1d830eb23a

SHA1
f27380de53c8dc999416ad9e905363ba621b78a0

SHA256
c722fcbaa50eb3114bd2b285f8e7341b8e77318c7e40c9488b87d6d0eb7538a3

SHA512
7faac534af9a00bb64d888ec7d28f06612db98f41712644f23a20191b69bea0879b6e817eaeab408f7859a1888df07633792ed17d773ef262579d28764de8e84

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
09f80554ed94c4136cf6a01c0a90ca91

SHA1
76bf30af26d8af5b364ad13261e7ff76be401f08

SHA256
6e6c48b6282430c398d7729b86609c00b5200b9ebe5a3ba68fab421713894811

SHA512
89a3a286b473e2564a996788ba81cc6f0d47089c2f51adc1f0a4c1ccc58b01df9382a6cf3223208c0d8f91f2bdc52f3c84a0a6ee79d0d4b97d7f937c3a2f150a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
d88742ff1aa73ac1b8b04f1ab6b820a7

SHA1
525db8d70ca08b756372b964e40f94e461257bc9

SHA256
8873a7d0ae0ff7d28530a01d3294fb4b39329e99556a72eed0c2e0bdf5115615

SHA512
ec418e0d1904048dfaff1e512aecff94d81ebf6a14cca3a37d578f6b4aa89f1d01d7f06322e2d491089120b042f5489479b4d820a6cb6473351e4edf6ae434f3

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
049783ff6e961fc861f82493409f6ac1

SHA1
b25f889548595f5b0b5ec62e70fc87d9efa7bc56

SHA256
92f49ec4807b150f03412fab6b91075939429ff79236959ac68d7ec86132fba1

SHA512
3a4b818ffd64199412ef3500f31ab7010dcf2accf0fc341279adf4e09949970c4b304192bb150cecef72d4baa4c6bbdd2a54c00bc719b5689fa9471288db6c0d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
bcf20021ef3006551928ac7bfa3cfbe9

SHA1
ba78f21764403efca052bd6aafa913a3cc987818

SHA256
092b49ab669d346f1647ab9848e40397c832633699b590b5269cdced3af30808

SHA512
ab0619455c6faf3bc4bb8cb904de5bc3591aae81faf65cc73ef5f1db648aede58e59c14bf00705c9cbd845a320164cb542c276519137bd12940b6d4c79f4e097

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
1a50af27d5ce2da3cab3527ec8e0e2a1

SHA1
4458788c283203023151cba4968318e9c22d115e

SHA256
894eaca6958061aa08b140d656b27934d39119da19f41bc30bc5c49b9934c07e

SHA512
34ba8f5b38cf480099c736eada324e5f6a5633e5facd34bb39c585ef89d4e89677aae1341eeae95472e51a21efebf30b1809422b7e67aa335ff6e38809c9ef1c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
d08220ab335655ca47d87b3d13979fb5

SHA1
b826b3c7422d3f317c77443f9d0580560c228bee

SHA256
43df74b1ab5f3f0e8b58b4ce8fe40a5fec8b3b1a1983cce485914cd9a5e0abaf

SHA512
2f92d1eadbd662e1194dad1d60f7e3c1797ca02c06b7cb01d03c9688be912a70100a5a0bea1d62b6fed082bf09521a710fada81f148f1def01a61f383ce87516

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
e6cf1a0480775a6cf79864820828d33b

SHA1
9bf621b0ee76757e0ed2258489b9fa304079520e

SHA256
473291c0eccbf8d86bd3f8a7d47695cab517db99ca93fce4f03fdd50d59c68c6

SHA512
1123eb9d805b11e95f774342c3dc3bf0ab483112f8a0b1cfb8be7f947043a4d67f52ecb95278b975f1c3bcddc610a9bff4b74730891a35256636ee5d12460443

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
481bbb57faeef7ec4ffc7ba576e9d129

SHA1
67067ce9b6acbabb0ea200c32cf6f05d274596df

SHA256
ff4bf7b1b6333230e9c6e22e0b044b4c7e5bd2450e5c14c4b6f2d912d1ba9607

SHA512
32ef9334c90dcf5f4299f41c60b99a35d5a2dbef50d44ebd0fa6512718ed6d5e6f525b76b679ac5e2c7c801a10624186a254308a684d223bff3439c06c1ebb78

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
7eff0550537d47d988a489ac070b6096

SHA1
1328a77ab6c3c54da824ed1d58cf33795f52e9dc

SHA256
8e9cde561ed052910930a967a2f5d29a83f7a6352d4ee23faccc50e59f0dc74b

SHA512
249ea13f67a46e7364d088b18f8c3a57e119d6596efe6fb150d6f25ddcb5d36fc37ac42e2e80412ffe61c5914a470bcb6569d5e557a02ba5a48191cd67580aac

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
6c445322c9e405005100cab687e029e7

SHA1
203a6ded6054d34e2429bacf875f27bf711a95b5

SHA256
a2d7a29a855a086ec30160fc6a94d9b6e51dbc8e63962b28660a3d9a899a7dcc

SHA512
50d54445a237491e4e17eb95c40864287ec2e56c806cc8fbe981d596d0aed0b9bfca65dda60ce3af67fa7fd6158ccff72441330fc8e1f691a6c7da8e3e05e7c9

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
89fe7a23077ac5f5d9e7a8142cadbab3

SHA1
417c7f5b6d228fd649bb1962e6eb252b66a6ee58

SHA256
91240e859375affaefe19cbff697197cdb22d464be9b278b286f3d5fc8ac294a

SHA512
3a8e7a66ac1e228687069f1897b6f7cfcaddc2452c3991228c6941e6cf72c1af0c60d24f9aaeeeb2ba74eeb8688726ab4319d8281542f760ede7f195ef0fee91

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
5388a405819e4007675294f22c4a9738

SHA1
03fd9630ae01b0cdb4fc2b62072d901fbec2e90c

SHA256
22735710052791dd9caf860efc775fbf6b51f806eb8990fb925ca36425c584e1

SHA512
d917229d47104611a96a7d44c8dd2dde76ef0690b726f04ef7aa1d59a2ee669926252f932b5f09df65562d7f1cef8b53da06abd54ef60c07ab32e2573d127f9a

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
b19ffa9b6152c025cf51898f65b0ea7e

SHA1
142c9423dbe169ce31c60f821a99c8f443d97167

SHA256
acdfff18d1394faec664035710684269d6c7e0fa504e115cb16a1f840c8598eb

SHA512
576627c1355e917f6d3c9693f0ab06e1eda96670fe471bf8fee8c1aee03877be0f912ca1515e31541e692d53377f98d0a3553d6a331ab5f9147abee75e559ac7

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
b20412b218b85f5995aa2f80fc0be11d

SHA1
d0debec5bd2deb73913e7fac1aa51218fe8eddaa

SHA256
5993893811ea8fc8fd756f0ed8781afc4bab32042e78656ebade4cbd038b361d

SHA512
ae37dded1b450a290ff56c90548b90eaea4c63bcdf0ed9bcb87a0fbade5817e0467a3043baf7f4e9907fd1dff2cd3664c9cd4f89249ea8d3fa34efb43a059428

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
dcccfb201d86ac77c7da7274d0109dea

SHA1
9824b48c5828c357989a8a91459d7c312fe2dc0c

SHA256
08e479ee5b3f6795b51ffbf7fe052033991c0179048b4ec5608f2f739ab8d909

SHA512
4bf388d8b3e296e93ff59f532776177a52e5a7e743da21b8ba9828c06b0af6d3660393d933ba4e3a4fdf76783bb12e96924a8185b232905f2f767b3ddbb2f958

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
2c32bfebc46befde52b4c6da4728d32c

SHA1
5664e89be110a8f102667f259a949f32dfb65239

SHA256
d4170636e603ff306722410ad259647ff53e2bbbb65db994b72fb120fcc5aa72

SHA512
4e59abc4bfee25a9e977df66bab7bed26b0755e3c05d899a3ea41909a5e2aae285bbdf73aba10613d4abd0702d9f20ae9e208722e21a8a60905ae1cb82bc94af

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
db2c6da123746ea09aa0e458b7231a03

SHA1
65124fc8cb26ecf3872d22bfcc47a4f650bce2b6

SHA256
f0fb7db5e380c0bb9b89610919b25df3caa8a77b594bba1140f11a63eef9186c

SHA512
d8ca5a2e86b87e919e031b701ad25a80fa391bd8a69ac823efc1649cc8d3a5ba7fed1b6e6c595de18b33d657cb50e5a29d11871ea0b803f7bde91b69fbe1c0af

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
15a0931ab03adfecab279dfe77879911

SHA1
a8243f0bee47f2c553af0847da390bbc77459c56

SHA256
47c118476fa319c8cfbb7bcfc3f2365fbac4898732b3bae60cc7ee77d112a1e1

SHA512
582d4ecd69926f46743f4737d5fa470afdacbfc3054f2ed80f537f617e8cca1da0a9d1c24efc5470c9ef19353defad9ba122d674cd9a981d4cfe5a7ad89bbcee

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
cac2ec75475135a394191d73730f28a0

SHA1
5525f0a32f9e1b79ad0df0f5bf8597d4a8dccb0d

SHA256
1826ba49b65b809c749c3f681e90fb38a0f8177cbf226ea6c56abeaa1675f664

SHA512
f4fefffe91e8fa59ae2b6f414638a14f2c231a225578bbc11d20823fefceab796a72b7ec80e672b89803d0fb1b05f941c87b2f17129c5703bd96baf58e551393

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
f22564c5cc4af0e3bed05aeb2762d855

SHA1
72d8f48904f3d077b39032e1eb640825eb5ac84e

SHA256
9858320124ccb7fbca12247a43845bfa62da4627d062fcfb67eb77a4b6578df1

SHA512
b04870b00921ced7e84e6e81c5a6c1f0df30b20665f65cab166643216be107746e940e5a81a911beb7f9264d80813314ac3289b6ddc347ea23960aeb59fbd48f

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
a70fd75713f42b60bfb6dd504e19ae66

SHA1
f525f704c88b977f486dd134f781ad5adb776d0f

SHA256
334013ae2e10194a13468c2cc58f1f289f44582771badb78f0e29ed24dff4977

SHA512
380ac2e0bcd5fced29604f6b3a6a24e88c94a7ce5a7bf8cc6a13b26f68d72c592868002ba88433a88337024cfc7bec69ea452b28f62d2f7af0ef6f73008809a5

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
4c6c40adce834f9016f8fd2112652860

SHA1
0046848c51f5a374e5f3db667efac8f7ead0a2f8

SHA256
b61a35a09eaf247f385b3e345666ed07aa347294f231994538b1fbedc9fed7aa

SHA512
7629388528441589802b1e2140df137b0bf6a0175e16c1b58be34064c307c045709b38925794d993dc4729c69458bc9435e1507c6c711c511d4c8410d88e7646

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
c248eb0c0431391ec9b4068ebc04dacd

SHA1
f8299cc3a0132a9e7351b7919cbd7a577bccc47a

SHA256
f911c555fc2e886b2ff9e9476620cf98fd2a0443363d07f93a1f1f0701595962

SHA512
ecca75c589e8126381b09998ed7507d657ea978256a17bdf8f4267ebd1796c404182470e90f4d6cf845c6532131cc8fa9c81b3ed4aa93e80ae8baa018a965346

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
2ef7dcc4e542fa8cf71dbe5c6fbaf32b

SHA1
fa66bb4cbc876ca49b9008661326074bf9811dcf

SHA256
ee371a12af16f268111c3cc3c6052a323d9cb61ceeba78460f2e4251fd789486

SHA512
801c3895ce8dacfed0b70c61b81360651ee3c1aed3c4144cd0c4ff03674b07efb9a049784eb6ae7b4424b07d1c5142d7bceea2e0b50261da11eec4df0a025cc8

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
3015d71f915caf20d04c4de0825bf5cc

SHA1
de6aedcabbe45dc69749220ebcd21e2bf054ec66

SHA256
7af0e225d9636c735c65695b234aa4e85dd0c7d77bbb005c6d375bb4cf5014ae

SHA512
d31b6c2304c4a92da6e32be5a62144d34e56f4fc5740c32f3f34bd52775c1b46a7b59514df369f93ed270a43c8413be982c97369b6dae941e7cdd5662504aa09

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
843a04fc087a51a508a782e67565da31

SHA1
cfa01c9189cb550ec66b9ac0ef3511289493c70f

SHA256
17f7bbfb43907b4fbb252e8a8a87a3cd597fa73fcf94dfb8b7929ada0e1d16d4

SHA512
f984ae22865d7e49227c303c84b68b03c364feca778f142cbd57415a0ba0bf676e0dcbab42f518710556a8021e75a03bcfd8d995d441e04a928038d72d49229e

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
d69360b92c9eee5e579125e07f67f596

SHA1
247a1fc6c0caf679244013fd3228f45576061d2d

SHA256
a9013c4c903b253b3ccc1c63483dc9fc0f245bcc0f789f422c844ad0d28382db

SHA512
f2ed8c154eee8e6edd36eb2078a42d84b7a3c1c496a27ef1ed55834ec22fb6e811145843fd99586557038e553cf2a922e6e5ee0ebfdb163e87838caff50d88ab

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
fe4cf3681f7a0d3891c7b3d462a65b2c

SHA1
b7bfdcf64c80223bcc5c082a328330209d4beec1

SHA256
01ba565d874e6cbb787d5290b97e60be62f3b23b990c3d5ffd652db0158a113d

SHA512
cc166b5bbb3ccff1dbc0f890c05b1477d2008f9a57f8900096ccb311e23576f7e937fc9225a38fb68356a1425a2f1333deb501226ff6ba4e6f40f3f9719192c5

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
985ad2516102f3c0572d292c341890e7

SHA1
6ca32bf4d66b0ecd8ab342241d2ec946b26024ba

SHA256
73d46b447586a59b195290675b9de3b20d62f6ed6b23af4128a8b21198ade750

SHA512
f7bc8685c5fac58bf2f19ecc24cb5e8aea96a13d6028becaa70df1227b2b092cc315196d0be0353938843d55aaf2b0585f1bc2417c446c8a812a14487ded28fe

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
f4f16d19cc335f1e6d2f6e65414259e0

SHA1
3acc0d26e58abc16fcbcbe65b0f48d85632af9bf

SHA256
2df55ee0a47d9a4d53bdde89f727b2354603d4467f3f7d191c86c4dbe7c7d029

SHA512
4f816a6acfef89899333b62d0a077ed83954b95cb81009d95a32fc8246e6d707e2085dfe9ea61c3f63bef1163bfd9661a2fa1de9ba7e9d467bb663eec1456285

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
e26d08dfffcad64b5dfbef0e3d425b51

SHA1
7cd3d79c8cf02292b5aad3b2870f83a2dacd3a1c

SHA256
5730885b985b859a2c5ff4ed658623c5235099cbb8f69c174ded510d86aaa56f

SHA512
9b3ef2c6e33385f1635b30acba9b79a3b63dcbc79fa1b7cd13c61fd827b3442508781ec2363e4478d0def7e859294fe84a6adbbc889eb2cf37abdea2ab29fac0

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
4783d954ac08f0ddb5712eb34a296b36

SHA1
676939f3debc5da2724f759f30b4be81b6a9e89f

SHA256
3374b34f83d1d1606372edcefe0957812594d48631af1122c3d90b658f0eb33b

SHA512
7abe69ccb61abe70bcfc25972206b5a905bd0023351401e747d8b1e66ae427262777e0fc84bde64b6de79c32cab77e7c5615c5a7444d7be456d5902b60baf649

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
4bd236bb94579e181ffc26b59bf8e153

SHA1
a3dfb289590b2c2b88a2d846ffaf1bce858f6d4a

SHA256
c30f686d78eed2e8378116bc9c7f784611917b38e9821044c8c5ffd78c45e299

SHA512
ffc32e44e69a0dcc7cb501c531a46a35e43f15957eac25165aa6f9341c4a8b10ce2cdf59fff6994c3686164bdb95f77787a06a72fef1236191cc0e099b775fc4

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
85bd69c52f873e5ddb4b707c2b0e79ca

SHA1
f72df5282dc002aefac7a13980352000d02e87dd

SHA256
255c4673cac54145d7636d1f2a1e374b9a60372a2b01bf182e03bbf44e66f433

SHA512
47aa5ba555da1f47cc9198f7d728628e3b064bb4927a02be0bc0749bea57a9191ca67d232c833e2af16c39d1d7be855f2e327bd77c0150d06d0c869bb40b1002

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
70bd4688126c213b72c9655a83861435

SHA1
b8d18d10ec1e0772479d07a3cbfb4e57795c145c

SHA256
12f334c3cccd9859c769d1e00f9668a2fc4fd761be9bf677d7de3ae7460fba06

SHA512
34e038c8bebdc6ce45a6e7574e82b175ff5f990881c4dad521ffed3e5356268e9555a075dc14eb0124af839add2508670b25b7fa5231b1b4614f489b3c0db69a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
74abe6fc6cc57560578fcf2c8ea37cca

SHA1
73a096ab1d451ec5831576d801b7c850ff4afcff

SHA256
c538d5675633d66ca2d86ca233933ce5efed6d0bbf311bfe1db202bacd4f0701

SHA512
914bb6447844c6114b4a01df4da7b6af73af5cb975177f4fccd29471b50e5c87701375b962a24d6a08766926347e656f334be2f8dd9c98eeac4c0f85c2413826

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
4af4fb8be97a9fa85701ddc11add8450

SHA1
6f43859be83ad4accc0d37fa1cb065c8ddf4e597

SHA256
c3141a319390d135c2c260f65e98d601d0e146926231e104e423d610da2bde48

SHA512
c9d83b81aab720690193eba4893a8d600369925883a5fb30ab308458d1794cb564672f39ec9d7677c2c443853ed6a13be7ef3ea91c4ba349725cf2067b4d34d4

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
7b5579660353a2322449da5813b490e0

SHA1
6334a7815107d0805b19a8470007e8dffe341ac6

SHA256
0356be458668b13631b2897c22162f594990bc724527ddef65378e70888ec302

SHA512
9eb5b0319fd840987bfe0ad252094339f41824c0ca0848b11f48c64bacf60a47f89a08f30f59209104b7c840dbeb581692622fcd928de2b438fadf218a9602a8

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
b05b06de33c22f8b3d4dadc441c7f07f

SHA1
e344fb673cb13e00d718d72dcb37c66491465ec1

SHA256
4d758afe58e26b7dfbc51eb326a1949dc2a1431f36e3869ecd5941a5fd9b1bb7

SHA512
617331042fef4ea099941d26f7a239dad3f0c386c3fe466a2ab0251e64796dfc26c74d73716448046eea072a3fe21e18c96044bb08e7949bb98010c1e6076628

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
7c8792d80b88cc3ff849c575a6f5382f

SHA1
dff67ca279dd5351af653cc89015dfcca8dddbc6

SHA256
3e5c2bdae80b6090d7db7692b0a140bbd476cdecddab067eaaa669374f71c941

SHA512
5f5a4b35d6afa6cdf2bc4b9daf8f3a64ff2227c5f5e2feccc73685f1225d1081f2417ab4c3acb9cca172c3dc18d9d5cfdfa2f657593cf8ab33b12e3563f3e924

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
08568e777c56b7a6acb1e21e056edad9

SHA1
6f15f070d2ac2c4c9722c0025245037c1a36f680

SHA256
7c793b7259f6bc496f32d025a06c54688b830aa28bb48efef8a79cb204f10279

SHA512
68f9481289298f3c81701fd3ff5994922766047b3cf6f1da2c8c6767fcd114d73ba3b4a039337658f83ab7ef90ab35ff9d249c5c1acdb6d0c998210389fe32d2

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
fd864adbd7bf45935864a4503b7903fa

SHA1
6de55ce9651f71b0f5cb0c27d4da106b722acb42

SHA256
ddfc2c55ac7c285f9c241fc97370a04a70f0ca25e0c5ea47427667ddfd08729a

SHA512
5cb2763ef5ea85a75957226a8fd2c915a7ffc637bed1d81c3334e09448bcf6291a2fe20a09eaa078e32876abe52316a0a64b3fe0ef5ea68148ad9325a2693ea4

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
d682fd75c071c7f740e25bf198afc1bb

SHA1
946341248d19509361a7d58b110c3c90e8aa2563

SHA256
50bae4bd7b0b4cf7dd9120c5cd516a565d7baa7377d09df8c60b91454e3baf40

SHA512
4f3f096db01f8f1cca0be3a489bf5e3d859288230b2fc8f942c2f882906571c496fe2a4c9860861e3b8b6c6e53bc98dd17c8af0718933d46b42f861746939518

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
c7865e062225901c0b23306da05a8a6d

SHA1
53f82fb4ac08bddb7acc420af5e71d22fb2b8b42

SHA256
ffcf30acab891e79afd3a9324e005e8fd2fd208382da0ec802a7dc544a96e142

SHA512
766cf7bad6017fcd9c05ed54b35aa0f5ad6970bdf0ba647d30c435b1676e7a9cf3650176411a69e9431ad6a529a6cb6020a912e8d3ed70343316c87e3e7974e7

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
977d120a66647adee6abf538de0bccdf

SHA1
597dca56dc8f69afb99d6f29864105999e707863

SHA256
80f16bd208bbd3a4dbc4845496184958b7e9f3d9de64f51ec5c4f0d76b603b6b

SHA512
37edd8ff33f2a37c3706f813ad0ace8896f91f593bc0d1bb1624cf165f7462d30c3adb91bf59b7fa58b8b5c33765332fea32df7516287454cbe9d97444a6d993

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
cc7298adda30454a9a6737a8db835011

SHA1
748bd2763f3bf459f6138c4b4cea807eed97665e

SHA256
24c4283b0d8d400c54ef7aae821812c6e686f0d6892ee348fe905ae11e7600e5

SHA512
0ca6f7fcf26f413ef8efed5ed2def843044da4855ef41a895e2725cbf3815790bb128c6107eba89322f782454caca72bc56568b421b41534ff88403b1092e7a7

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
f70d67db9c8baf8eb24d901a1765599f

SHA1
1edf26f5215d0119040300eb1f2fb0494dd3d918

SHA256
b5b81e694e09491cde479187bdcf021dc899d421cc746a31c3908b073919291b

SHA512
c80802ea6c48ec029e7962d8d4570088622546424711e297a301bbf1dd2acf33e3776a8915cb9ed0fc9f2de0bbbfa15bace94a5cbf801cfb0daf6e50febab17f

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
d465d866370de9725d0450a857bddd91

SHA1
272415feaac10831b1345df14d2783fa052aea2f

SHA256
d33f670755dc849e4d9ef2e7e183d3a276b2bba303c481965e1504802a5a7064

SHA512
ec3e516faa091412bb75004bfc84dae81063f8d4cbf9797f9a2a720719e810004df66d01814a9006496829b7847774e5aa85d6b004886c0c8dee386e2e306cb0

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
9a5a046946de11c814382eb96a0799f7

SHA1
87850849a3611f3be8eb789449abd8149a152a87

SHA256
747145237d9c1c2fcb568d389dcf5ba632ca6c5167805607b585d72c43913251

SHA512
260a058bfb8ae1e55790ba33b3b50d205aa2156be5b6dabadf03d80ffb8d95d57edf3538d60d9ef34bb719ca5ee2fed1c94496704684585cd6ec0d451c7cbb9f

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
da070f4f39b8dd43eccaee019e53a559

SHA1
2ee2954115683781f737ed2754e7559571ec816c

SHA256
8a4db17d3249220781469b908dd7e1ea3e2a69c771f8a009a74a30ee573b36e8

SHA512
f7fd6661c902abc9a76fc6ca98908d105c260348cde30f2b2dfdbb9b4a0f95ba0c685e9a81ff15535c07b4632786a77b246a6a6e8ffe3abc33face021c317dfd

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
e31d7a6a3fd880c0edfdd0684b1d44f8

SHA1
bd62a7fa06ef36fd5afe32b28b2d8ba83aff697d

SHA256
f124bdab2b620fdcabff397de656a4c41311113f4ba1585b554bdb818a2c3c3d

SHA512
b678b6a123c9cae137dc4b37719db606beedc375e3ad0d71e9b66465be2cc13f68bd533811909fe6b068357bcd8a752c3f07291da05305678308b39a9c306273

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
c8cc3629af62580eb7d600b7ade51430

SHA1
b500e625222b1450ab68afb21268c3c55c806d1e

SHA256
6f5da1d0a887a59edcfedb053cd5100fd4754d3b01c5024ac49f490fe8ec44c8

SHA512
40b572c1470a70c996425d4dab819ba1e9924ec86940a8e42dcd2d2a0f1c8273fb0073b608e021e2af1b8eab3d29cd26f316d671cd4ab5ffefdee8ac00702b53

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
780a3d43b4402e14a3c28aba9b1b9f7f

SHA1
accdac5429044b6499de3c6dced6fa047658f7f7

SHA256
58259d2e69704c6eaa14adfedab979c3da8b0606530f065748e92717cccf9429

SHA512
c2224419f7e79206e7d00e123b4538e2f36811441158903e2f248a14bac98cc00ca51dbe01600aa79860481b0898baf06e9ecc0a78a09fb64e3ddc7d8e76178d

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
db3c29d66d30950f528ea17e8d2ebfd3

SHA1
43f0c18b5ce5bd6780e2abf94311f321205e5f2b

SHA256
68da77e1bb64787067fcaa64badf8ced07156f9b835f9f3ef99678daf2ddff3a

SHA512
7ee116fc6c3071679f6715c7580e4ccb6cbe8f4a5d47806ef2e5fe5925f0fc34a96a7cfeff88d3df1ae3efc73f07fbe785cf4d57d9678cbcda4e407ac5f61fa3

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
75b3971060db9324fb2bb8d4bd1f8ca1

SHA1
5e5685843491953f025a5896d4fbc514ded9b69c

SHA256
26199ef1a3d2eaf7c2d84dae47421eac7837f0a3918eb57ced3b1149f4fb4ad5

SHA512
1d776cfb93cf503bd06500e868f4bc24188e407104b7ea3a3c9c853beab61dbe7520f9ed510244bf4545ba365c183048acf0c7a01d287dbfbb52891ab8010c6a

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
2e9cc320021d106a3828698ff5131ed2

SHA1
abc034b5d6564d265740fb6a347da0256fd6feda

SHA256
0a105ce1b14487c64b7fc2687c2b7abdd30a2b4d256a40772b8f82c5061e4015

SHA512
65c5a6a68d0f34709a69bb9a007906d28d1acce13a10ffb5e9582fa8dd54ebe38bebdfb12136ffeb916be3b8753322abbdb6f3d68379ca03d34083cf16e9ade8

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
d79d8059c844bab835a699f6bbc59e56

SHA1
d73bf628ad4c45bd25d483ebd11817a01f5759c2

SHA256
dc4d003e454433c5aa558fa4df63a8ef0cdc653b22e12a21f1e218159b26b686

SHA512
538a2a8c9ea322761603310e9e6157961e85c381aa3e423c01d39c5d301010ac64bcbac1ab765cce7782d388db76a9c8e250e68b59b61aed05fe6ec2d4f99a2f

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
02a4498da04c4bcf31eaeb09b4bd4db5

SHA1
7a285ad982c2a2081093202b65224447e3408c08

SHA256
7a4c004de5c545e9d7404d46cc43535a808c23a65bc66b184a8031e67e1630a5

SHA512
0a5df50eb082f8191c3fa4c6a620f7627abba9b47e1681027d80a909d9b5f99d9932a8d5b9157fced6505b376e2c38214aba31403884a8c95699d181a3decdaf

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
9e373d008f7c177b81fc8f8850b7d427

SHA1
87cffa7bd424b5809909f0334465d1a595c5946a

SHA256
fb55987ad956a5b3ab8c207f8e7a6ee131ee9a4e63c5cff1c9804b8a5e121b3a

SHA512
6db86f59a3ee80fd19ee5e8fa39f24a78edfa130f1b0e4fa00777733b1b5fb0127faaee1aa3be1a981499d0922d162a8cec9d06a372a5828b3dbd77ae70ec7b9

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
fe0947fd108a1900096f10cfdf2e0d8e

SHA1
36b742c6078179e40bca24e20e2fef1e547ad350

SHA256
02736f7f614cf46b5204d86d6503f3b6ce3fe45b650d72782d529486cce106a9

SHA512
db454265f7bb7688ee5d58dd9a1acba0600c35e4bf04c78d5b4daa464397e62586bd9240e660562ce3fe8aabd0d4e427367fa6a11e5a06da12d62fda4936c474

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
f8d9a30635f3a1e979040789e08277cd

SHA1
f6177068db506031ccf82ba3cdc6b041678dce4a

SHA256
7453cdcbf9f866451c7145f3ec9406f083b02c108863b21c8cc07db94ef81a0c

SHA512
964fb77cec3d862c17bd7f76b63c3e521a2936928dcfc28d10e52f92d73a7e79c139d6f5898e656d37b66bd24cd733b19de1715a8f51cbe33e241d723031d4ae

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
5bb0af6f7e18011ed07a245cebb955f8

SHA1
60b30e292c3d049598ea10e3f0999931083eb018

SHA256
ca76efce6f47a2826c9e8c46cbbc0e993c2a75a9e8cf74bb22d6d74693419dce

SHA512
261c595436849b8e8edcd8435fe091b07da092e3b90b8e1951a6c434c6dce94bb91d8e91480234d95fab603639ce844bb7d77a79ba87fc29f96a5badd5d4f7a4

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
cc62434a1d8d734881058511b06c19af

SHA1
777c3040df79adfd2b29750bec0a4b4455e38a6e

SHA256
57b696ec9e0fcf53e9afa76e855cc105abb734a8933c251f41cb478cf584b453

SHA512
7fecc4ee7b1296a25f377397ff902c8d6b81d53063f03ddf05db5ba19862f4e8fd6cd7f01a27f142046ffab67b4ab5cf3277a843658aa5cde50ef54bb022b6e7

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
acc5834e82be35e90799744df61834b7

SHA1
0382cc862532528d173505b8fc63990792f55b91

SHA256
b31324fdb7171e82e29482cbfdc2542f9eddd2f500b120278eddea58f04fee93

SHA512
752980a713fbd03881f642f97d423abe87935324aa029cd72b0ac05d962fdcf18d47ee647955757271561a0fb3b9212456687f5b148f76a2c3f38f8a203ae0e5

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
42ff0abdfc1ec964ad331d3f9837f701

SHA1
61b1ddbc2a91a736567dc675434f0a2372190d81

SHA256
223e1c404131c27598a6022328b8dbff25405a8378f71388f7c95bf180ca7ec2

SHA512
40371a2c46ff65374d674c1f5a85c56c7e6e0ca158302f4ec06733d4b6a22e10d5a11ceb0c4e3cb754f0cf4e13300d164113d7070524cab7428b1493ed3766c9

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
833651a0557c0ca6f0f1b796ec998ab8

SHA1
bd20e4d361697e797ff054b8522c777c18276f25

SHA256
d8aadfae4addbef6e885a302837040fd01c65d978779dae5cb2bc86a9b7825ea

SHA512
56ab15d6c0728e6d6100ef890188637b46feda36f1a5c1f662b538388cb60306abb6b521c81dc6b0523234d546153efef4e8763d7affde5c7aa6f76fb1028a5a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
4a0da122d45443685792c4e8f8567016

SHA1
f7e70fa516fc7c5c70d9f51c4d8f7c3a12890274

SHA256
10c58e5f786c1f87e0a97140dd7df9cdca52b4e7675e6b17e37ce2c8ffbb1357

SHA512
9e56a4591e9ed0713b4635649ec9f743d1b52e9b2cb33c23e5fc0f56f0575517aedd2f9e847e5d75a3bb7a300226608d9c0e1d3a1f5051c99ffa3d82be84a9b1

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
45bd05136216f17e04b7a2c783b16982

SHA1
8e114438042284dfb7e8a15e57f3993b4ec9ee33

SHA256
f2edd86acb9f41f6b59b2ce2d9d8893cd0a271a92c1f91c8d04fa79f23cb7852

SHA512
01b0c8e59f827b32b5d17d5b93f3410d7bc4f55ffdbbb06f6dab46c8e503bb4d5884927094802d7fc4c0b13896115ad2b3282e7c1f975c5f8123b06df8da9740

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
034cbc0eea5cd63ea584083be7887f8b

SHA1
eacfabaaf0bf338e2f2c5ee16ff6fb5a19c6bf5f

SHA256
ab7c80bf567772caf912f392d4c4c23de065683d17a2661c9b36f39abb7eff2c

SHA512
adecce7377daff00834ca52bdbd06e13672a9ab90206ef3e9a0c43123e1b5c651c5dcd821492cf4667c7ace0fbc4b7fb2bd90bf51bbaa42658862b315cd58983

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
e770abdb833e55a7e62d3c1471673b28

SHA1
a79b63ffa2c98c06933491d40b9d0f6e28dbcb50

SHA256
217ed7f835b6e45467d6b0272186b11b455aa712527fd2db9eae38e7ce62a3fa

SHA512
0381ffb9326f0408461581bbf07af995110e2969a19c2c322914381eafb7b2a33f9d5655c5eb98846b8e82e78b00e5a1a8e0fbd959619c2d1bd0a1692bc928a5

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
a8d393fa9b44f5b0ddd82808ca720bed

SHA1
4780570f5e3e55c471a273af4d9956058470c240

SHA256
3eb63b3f85f3ef00668cced9479856f255752d71cb6029318acdcf3454448ff4

SHA512
477e90e4fdf28e6fe88514409f165ff442611119f9911dde0b1715165103aa8ecca62cf259c5623bb6a9253ee13c8f4d800b33f6939553e01d35ad90d121c2c0

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
eae5db3e545328c7910e4ffb30cdd1ec

SHA1
22e95c8cccfedcff8945871dfc25330643f296c3

SHA256
ad5d53fed974b755583f01d47ae1d5fcf7c739b7d8f3e601ab3ccc2332a2c375

SHA512
37b49e97c266aca99111b6995952fb342704d3f2fec7c479d21153bfeb73bcf9b15db3fa9bd1befdd26aebd0cc21c8796e4cc2d1522003d2b2db3ae98fe83619

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
94049d5652ae03244d4b3154b5e688b0

SHA1
0ee32e84907debcc1da3b3c3558a2648ad996333

SHA256
8c02e17d4fed3f2982464f72503b88e6ff3d3eff28b7ab6632343690d60bcf23

SHA512
7b87a985c39692d406e4c3382a8f417a4eab903b4b7f09b8ef19682639afe3bdbd0c655569369353f6411d1b96668277a2af67576fba7e1097b390fd4b0cad4c

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
bed3f3d92d0ed0e09f7526be02e281e6

SHA1
ab89f75b1b80372b8e15d01bb6fe21a96b98cae3

SHA256
a22dacd168ee22b769759ca79f1b00e1917ecb0dfec8370a9276a8d2bccb4d8d

SHA512
9967f190b4086a0498cca9d7975c3f68e75e980b616eda237374b739eddffb5aca07ad295d1e1fe8b2ac3646529fc9cd76703c1a36bb36cc77c83dce80e05f79

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
007962d63f6f12cf3a204e5bec106952

SHA1
20846e73ccc15e4de3eef9cb663b88cb0fb2dbaa

SHA256
61c61ab32af7edc3bfc37b242696196a2643331c020990d5885865f59b997f7f

SHA512
65f7d292f90b974a0c238ca3850a9d82b237ba7a1f405fde9dcc39eba544f58e9feaf1251f937c0889b12f4a24d78481e06914d1531b746d06461e20f9196216

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
6dce31a12e1ff67b8539ab8f29d392a6

SHA1
d21ffe3ce1068146b377f1fcf2b09767aa4080a8

SHA256
e2d3a5e5569ee40e935751c0904cf121c8c02ec4e70d3411ab5f6a2f4bd51f78

SHA512
9628ef13b9f67e41391adac58d164eb47b10c2e56a4b93bfff75851bafaceaece1688fc0636fc4e1c3dbb877d001b49141ff7ed72d69b4bd3508dc819ae16ad5

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
dd72b4cff81815cfd405f9ac5692c6ac

SHA1
7efa3bb8ee7f2de058925727dd8d784da63aa0a6

SHA256
c0b2caefd22a41319032bc06da8dff194c66efa2fb7886fbcfbad5673c345a19

SHA512
678d9fd758bb6093c7177cb186f7fac14329664d782eb57785fd1d529fad9ff5179513b65fc8702bdd40fae5ee67bc0dcc6c21925e34ef2d6f0a6663a3857922

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
efafabd3b358673b50288c9fd2aab5ff

SHA1
0a59e472bfe07942dbb2bb08cb3cef433a89af78

SHA256
96fa3a291121433801f812679cf5515a5cb1dbb99f21956806fca2decfc05268

SHA512
824b03a1ac07e05e27d240b59c3792fa1ff0f862ea6efd561842a70ce5fc526aa7b414e1256834a8130fc620caca0da8bfdc406567c319226c6c049c18309dc0

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
c1296e50ecb343207bce72f07c82b9cc

SHA1
9d88422919c5abd69a5f14e7c4c0659b0a75fe05

SHA256
5b50d51e762d14207659dd89da6e8844901ce94bf38374cbdf1ca44c3745b09e

SHA512
c8dc1e12eece825c19309d621dda6e351183b69aeab751adf59d4dba577c7f7a59c7b5f061155072730ce8994cb12f55a63c32e1fc1a0c77da0857ffd54d4b00

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
e9dc4da4299c704249008c5c6b4b22b8

SHA1
22d3a06bba573e9a1f991359bfef97dc51b2ee6e

SHA256
5bd18915c887a0ebffed12ff9b591169d04f498b3d6c44bd009aeb2bc03e3373

SHA512
b231313287676c8aa5dc16e60991d609876e31a27d1faea9b78886f32c227c6bccf3975ac8bf13aad09a852323dbc235f7ac399c974d3285a1eead0cd0e01b27

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
30911e3e5569e0686835b092b0c10971

SHA1
3bddcaa234c9d04b8616ae4d449f71d217d4e9fc

SHA256
2c25911fc76b3e825fb3cfbd62d61cef15dbd33cbc5697e2ef12b8f29bb21979

SHA512
78f78b3c243bf67a74db3f9c5c7b63050f434103841066c4ffc2fb4337048c32d55a080c982b2458ca9c77f59cc89079fd91a9c928a1fa6eb57b963acf11a6f2

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
0180977d29ee5820fd12c4d20bfe769b

SHA1
8016d9e8783d0cf80cb9d9b7322198fd6a736523

SHA256
13fe848a2b0960b6fe0bee9d9e5b462898ad21286bb045b50b668e6939928bb4

SHA512
ea0b681e345413764868f47c213298a687d35fa6952c8828283d1ddcfa15d56b307d9e430e0aaa398a68493031e6f7bc91b8abe23963e0fae1979f46b633a1bd

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
57b7d6add039a48d85e865ac894157e5

SHA1
fc094b38cf232040b9d92b019e9bce108f0e001c

SHA256
98ad14eb9eb47325f23e7a3dd3520f059f1cc616ee0cc0bdc61e2068ec6d64ee

SHA512
8a58d3c554cf80acc747551be4c60ed1474249d66f15dc593045903ef035cf8459575274211a53924408cb53943e60bf050876e3c95e6a1df1fe50649bb37182

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
7585a2168886907c51488c9fb1d444f6

SHA1
6db2dd891c6a6e2693da4fedc9ce8d81b4861c62

SHA256
524e2ad12a36bd679707c4937e12ff8172a1e0651807a6dc642a50fc34575444

SHA512
de56c099894967a0eb4cfc53a70b91b0995df229b8323183fc4fa2721fd33ee3db92b18e97cd763d63e805b1cfc28f13d69b24b6bf54e6208c44ca8351ecf930

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
6d53b4a683385e750277431dcb295e6a

SHA1
26c0ec496d28e0c638b04b7dc5dc576ef8dd33dc

SHA256
e186d6ad61f7457a811a9112d9fcc7881acc99af785905b0959f6f54ffa0c49b

SHA512
358120761cc5d261283869a69bc2c85504d9479f30160686dd04cb67a6719d6f91d14c8fff38b8acba960bee02abb7444e15c9862761cc9193bb08d9bf0bc659

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
a81e7f68aeaa08cc0f9eb63175fed097

SHA1
fac503230adf09e8809288af13c6529ed375c179

SHA256
56fc15583223007f073ddc58b0550682bf92189d26379b1c62dbe093cba9c7e5

SHA512
8201fb6f504aee7567fa1165e6755d7eea57a98b633ec987b7bc36875f4d50d76e43fc1961ac6f146e82b45492d015e3e0e8691f4c68384f80cb5cee2c7122da

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
48d74229210e2d20edfd5e3c3925bc56

SHA1
80a5f3a819ff202bba350894ac8ff308a4e736b5

SHA256
5e00c186070f3180421fcb157f74abe50cdb780d970b823f06bc2e47f16cad6f

SHA512
fb47d1c652eaf5d03145dc4dd963659d606cd65ac31a6b65733d2417b8353340e30010b7d058bc28c08699c2a8a2219d5676b9c3cbda7d0bf7a47428f8e1ca4f

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
568dce1e21331471bcb016ec23fd5762

SHA1
a0b5cfbbebdad56431510a9debd7139f460eeb86

SHA256
e3ef5598af0602ef1f7e163643ecebe4fc1ab46b6287082dfb950fbe3fc089d6

SHA512
0d0f2a2799e798b84dbbf16c989eea89e1be9535becb629ed39e91f0f15b920be0ba408b84eb222c53d4d5026a5cd00de2d78b495c43c26d2152646e78b6426c

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
0f2981f22134483697dabd134991af0e

SHA1
b53aeec2757acde09e4e47e795cfbcd3439beca7

SHA256
84e5c956eb481458cbc634802ca67fb1efd702bcb1624893ef313a1f31f9706f

SHA512
25dd4a27bc53374bb1ddce1940650e5bd380d525585a68d7411d668205e6a3b859390f027a855de774b035d90c3fcb601a165e73204b1da27a25f6884bc36085

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
7cec71b580c9cd8ea17b09b2b6c4e173

SHA1
6e7a08d4ac8cacc49cb0c627039f799369fe5fec

SHA256
79338c1e580403348828a521ef13395b6f7bd43c7a39447f1ee77e6bfca0446c

SHA512
0088ce21cefc6c438721ca7e97319d8305dc9eb76d51342de3777b1ee584f458c835b147a09c581f205a1d6a9d967feb5a27d50180fa5f86e6acde5b62625139

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
affb5bcbf9baf06e492ea6dffbf132c2

SHA1
2d17f9f25da32caab6842fb65c1c41157f48aca3

SHA256
011c9b9a4f4ea76261ed11b255b758c1cd4e40ed083e6a95ebd9f83ef07c5a93

SHA512
ec9ca9cb70adc97f3511cb3290e6eb4cd12dae7e6ebfb7392667dbdc2afcf75a2a5d81d7eced384bdb25c8f531f96e229ff1f4338b7fd41a03e6c1ab8b67d091

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
c72128221ab2b63b049bf1da6b6c218e

SHA1
c944e4ed550250c6ce6b64c748bbc9018d689cbb

SHA256
8d8822813197aeb76bc14cb905cb7376cfc548be1d39b4d965275a69d4f068ec

SHA512
51388aece871b6649d8a627a85d0dd08c0559cf0a6e6a51bc0fd9b0733569beb23deea86ac792b507dffd61c334a5f589f04f0020563ae07f6bcf867564e90ea

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
a2f3679062582c0133b66f708e2a3fa8

SHA1
e3409630430eae87b08e646cab459debf0671e54

SHA256
19228fa5a7743a610043f7c87b2da8b6834066ae8b8d59fa97ee6bab3469985c

SHA512
1817c0712c384e3566325bffe684480fc43bc7ff3ac8a25080bac951d36356f77426ea3411219a941ea70af810736f3dff712ba29c124709fd706a9b2df631d2

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
ae5e6678fdf420ef0fc5e758a62eb4f9

SHA1
ee3f9dd462445aab159bef27751945dd0ab5551a

SHA256
a7aed301eaec4ffcb6fa59945923d19f8b05c4f5d60b5bbb380c45d9a45ba586

SHA512
ee32cf763c4a000d75da3938ac247fa3bf1f5c608ed9198644add628aaa2d791b17be5d784a4204622564c5108821b6231d64c3286addc72c3b8f781781b48e9

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
109a6c1468880a367d7ae26c679df7a9

SHA1
ac16a225d108dd54b78858faa9f98fac71dff77a

SHA256
c33504729bc3b30ba510ea5b01df314711e8a5cbefbb26bebad4dd33d0f42ea2

SHA512
442551086a2a8e3d31f4a6b837dbddfb3f970f5e5ba92d1aa535a63c31b837a677ad16d671cf0402832fd428f6cc64b8cb8f42eb4222a18b352572feeae01b20

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
bfd80a7e05475abc781dcfe91bf5d222

SHA1
ad4eb815b7a59b740246f98c89951869fb7a7f89

SHA256
d0eb2a5f79be04a40f9938a46c923275a4355193f2023421a443a20434475e5f

SHA512
baefbdc5709e46973ad33b4bcb2e205dcc98a7890e5216f82c34f12cde807e72ed77a34d2592938ce1bbd96f495815f229b277c69234d5c788146a0199c5e1fe

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
dea1267f29bf814905bb94369ea8dba8

SHA1
8fade4a5477a7cf8c22da1f54ce9033c8080940a

SHA256
d46c27413f14bb629a26f918ad0202df4e561935734e97dccca417961db00f7a

SHA512
4e2bad82c31f7e7d758b43c970ebccf8eacdfdbc776db5ce53e258d8dd11cd56f9282043ff1c4f5c3d4ea40dc85abc23a741392512bb8927d0a09f70d131c60e

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
e809b36716bb566eddd54a5b3b263d0d

SHA1
0e7f02581c26dbd155467bb426f826d7efc03d2b

SHA256
74fbd55143035c289f0bd256ae1218f91e53ffb7c9683dfafcce4c9b4164d73f

SHA512
d53079ebb03b406362c2a9c683cab4f4078859afec5ab24861d324c3e0d8e2ff7ae95c42be5c0584d5e4def59867eecea818405745c9d064b51e6e5c5db609a2

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
4ffe10c9419d5b8ba38a524b60c21817

SHA1
3c54c03f17b4902c9b02eba4e6b80da17ba96931

SHA256
6b58952b9a0833bf55815bafacc52541406578bc66b255659c240fbe08e03e8d

SHA512
5712ae1db94d48307c2dfada1d67ea956555d320e38a553616736f690bbd6c3b64b2e8c74f461b234bf651344fa9be904b2b7f6510b9c6a66a6f52ab2c827db0

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
85d353eb16c04e897c6b1061b863726a

SHA1
9aecae86c36cabf4e050d8fdfbfa3144e9ceb9b9

SHA256
ea5ee5d2d99f46b95039cccc9061fa84b8c40aded5bff37c4ab0ecb07bf20014

SHA512
118df5cc4e7b712533f7675d740169c78f86650fb1c0f76bffcc94d421a6caf8c23d16edba25ba582e4348729846c19971743bc5e52908f2f0337c5f3dfedcad

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
b9b337357bf4cc915a3c2621dacf3790

SHA1
7e15d90226c2c7567c87c88ccb1dec9c53ecd700

SHA256
d9daf1bab626df6d5265d3f2611052e6f4bbf05c55b53b694d54ddbb3f88fba5

SHA512
68afa523a605bac55704744650c80ca40cb320b44a17f90ffed7c6071aa8f9f09ab6497839abc42a3ac2fbe29aed442e8eee05c98746e9efd0424874e6f2b442

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
34952ff88fb9b2bbbe8253ab4146c492

SHA1
1eb6602d79279cf703be93b5dcd08b6987aa1742

SHA256
41383b66964b4bf9bb570263005dc457f796ca574fa252de880f4b0024af6e8a

SHA512
9402612b705b66321132f5380c632ed904d1e05f6a8e0852d2902537bbacf8f1b1db33c66831b20839b23d1f7c3102ed43560e9b5c3ddd3fc63f098256fa41e3

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
93fdc079ebded8d20eaef82081df006a

SHA1
0869a09939c882be3aeb00cba81ddc86c62102c0

SHA256
a3b9b4a9e81b155f3d1632cce6f1962ce1f35c2db1cc206fb74f6991a804451b

SHA512
5c9ecd38d853cfae4b3b5a57238d7985e1c6274cb67d7d520ab694b9d0988f255fa45dbbea68638575ffd614e6aa77d65a168a2cc80ba4695efc58adbb45e798

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
abf6f5407adc92ea25d0ca4a6e057edd

SHA1
ca5ad84c2c009a1c50e369a80d0e16c7a0a2fd98

SHA256
accb453c71d26faf8f23d3bc413fcabd59d209c90345d77c4b0e163560acf982

SHA512
81c8655b7de8c21a99ebee0e3532c39dc1fa994486107dfd4692e417c689b29323e47dc1770e5f426f9f0759fe820618c437ccd50b8c6fdf7b7924841d25b4de

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
3423d166ff04c89a834ee8519785a0a3

SHA1
824500eb3da0ddcf6084df3b23be0658bf241777

SHA256
dc1c9cce046a3644240d4c57b5858ca0b73500be7fb347c62c7c11a81111e315

SHA512
92d59a8fa27fd787112daa06bb609e4ee8c24ee80d27f5cf1dc789adda4f44ff90f745ba1509db292b6b6e316201acc7e3ed6655ac7e4bff106d5aef894ed700

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
ed9c4e2b469f1d9563dacb0031dc73da

SHA1
dd87506518a4bb5a8033f040e478b088efa0d195

SHA256
099315b1ebb508563d7ecc9ed1ef9248fd19fa91b60fbebe512d6f4927dec305

SHA512
d71f522dc95838d3c2da447e27ee67314425d0d4bccaedab79aa1b621dc1f59db5f4129b0a1ebf0f4258dd8e9ce2091c2f0641466f54848c168e28c3b05ff44d

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
101b7335491a94e2b599cf47f41adcbf

SHA1
bf1ab3d1c1e693eb0f8139fe19ec6fee9750533a

SHA256
add22a29faa5b651ca4b4f29fdcd2fa7dc92e36b4e2ec017f02946351b80b2b2

SHA512
320b33044a0606443edd5eace8879f67fde775a259562cfc8cdc553fe1611d7ab35bc17c1ac175f25e71d7da2735276b50232e563ffec9fb5557514d8489de08

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
017979c664de27c6744c0b8fc8ef19f5

SHA1
0be68fd00bcb7dfd92257685f471b2d022059d00

SHA256
58c9e8324a798010e31c99887ff26f29b1f96e595f17912fcb2df39bb7583635

SHA512
c02717d4dffab003cbedcf39d93e1dded15815724d646fb3238771890e368b2511c7b11d86790fab870b3deccf577feb85091e73ed29ad54ed4ab60cee1f1b9c

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
7afcbee11db10e80d338fcd551c2a2b0

SHA1
81d5ab2187dd692ddd6a7bb41309a5c42f7ff05b

SHA256
2ae6f7bdc914022cc1da1ab3e5157a9835d0ee5f061f85da0153596c948faee8

SHA512
7f26d6a0cdb4c10e14a8b4414373343f255c7ab828d01db108f9445b1239c74b84fbd89c9510697a50d542ba951af25d53724103fae66c51d250ddaefacc0ed1

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
5d95b3d51da21befca2ba5e2eef3a40a

SHA1
6776ea4413efe7e2102720e61d917889d7ead166

SHA256
2536dae229ddf6abef47e8a58fc5d40176af1d444ec2e8dd36e51ea22d253262

SHA512
9c2a80ba3e9e22878f9ca561472619e32c783bf4078446fae61fbba0eb2a425b4b95c85ae2670b3192549fc4a8036b218e9eed15838fe3edf95271d7b7c9de9f

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
6ece2d9853bfc20e9dbfd672e6c33c89

SHA1
db60c35aed601f98b6d714a17d8f2b2d88c5d2c9

SHA256
c545a0de41e028173e11ab95c0a6f2018653f2bfb91a52c6574085a1591ac1e5

SHA512
0532a908b7f11606b71335609e7b9439c62cdda0bf83a74432e14bdc1759eb33ffabd77525abcbf5c7ff4d6574af708cba0881ad63ef4b68cea5217f42213d18

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
c2b1c38bd3fa3fdcb3f74a74d0d7b357

SHA1
02b630fa5d04fe20d6449f8e3f370b6100b2a685

SHA256
7676706cff90046330cb93979a678e926521efce2c7d7906f3f5226db239125e

SHA512
f4db84d2abec5e9fd4755e6ee8794e75dc7efeb3e77325ddf54b5b6a96ba9cd7be708ba935cf3adf9d7f66aac7e603c3711018427ff232fb564df72875c98af9

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
d80cb4930053c20de2aecbc2ff323fd4

SHA1
ec845ce2695bb261289be35efa1ad5d598784ab8

SHA256
112fa8c3aceb5a5992de0ec459286c4ec239a59842448622b51a6c2da8908624

SHA512
e4de1af64b1dc1c9bce4df515876d165a464bcaefbd094e0985d63d879d6fad493ce6bd27a3ead937b8359206a6dea9900ce7956be0cb93ad0529a1069fa4cec

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
5e2af17114064f1714ba13beb9502a10

SHA1
e394eb8d045670252c2de650856727c1a760bb08

SHA256
19777696d06fe7631d4a9637ca4a1cb6053c8ec302832062d99b5bfabb4b2e5a

SHA512
69f9df85c4cc0e0892f92ccdf3775d614416578318ec14d9c492e85b5962688cdc8ede6e7ddfc633ec1ba5cb60c4297143b7895ade82e6032a20b569cde96e70

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
6e00f03e1ba5b516712b9ff19f4669cf

SHA1
31ab5095dfd161292cb31850a74223b90042429f

SHA256
9d0627b641826bc33a6f3665dadcd611f19ab5e083d1447b17df5e607f222619

SHA512
03af8101ee1e9d3047df3934197540e4f7109c1b326246376f97804b6047514ae039e2eec79b1e8c8d145a5f46de9158842dc0d3dcb4c6b95c11dd30f3680b11

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
7b6e666b9e2fd5d2f7321cdc052a812e

SHA1
ffa3f11979e578e70ff171432633ad21f917935c

SHA256
989c00b5de3fbecf7923d0d7da21ebf37d07973a09410534ec658f4aee5b6adf

SHA512
e3dfcf71a036ad6519e905074716c9e8c6018c8fd586a0a7ecb744245164471a355811fa3c2fdcf37493967ad8a7074b55c00a6adadc257bd86dc1391d207737

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
27ab69f85905183640a35c242981d0a6

SHA1
aaea7bb686e0050a9a6c32bf50f1a2543c64bbd3

SHA256
de705e077d3bbf41ede54fbe5335f6c8663ceabf4b387fd85e9dac2792eef8df

SHA512
45f5cca0c99126b82c469cbbcf5a76396c55b839ebfaf40724fca6d67deb5968f859623088d5464a67564e07c1f63507a857222dc543b0793fb08e290954e456

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
ca498fece0057dd5b57cf6f79f2feab3

SHA1
c8790a7703e9061455c0efbd544fc6d7722617e1

SHA256
71e27939500f77184b5fb6ae950e45553039b65a27d62c8c18b98fdda7a985c6

SHA512
11a46a439c913b4f05daabb2383e0b7240343e25fb30c654dc3ae9b5502082fcfcf714b83be12d2d57f0783dfc53c7b283fcd97dfa5a603eb76d74c1c0e97fc8

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
a7cf708d497dd6e922f91d33d14f7600

SHA1
5e4f3f5817004eeaf4bc14a0168d86ed7fcdf6d4

SHA256
20a5f1f3bb4614433712df1ffc67273465e766191502b8e932321f1f24fea65d

SHA512
d27a32dfcc0835879ed45e221e9857c1165de03a859980f0e29ecd6d5877d832577f7d6b584aa96e24caf7ab7652387d713ef2293412bd10b6b65567ed0bcd42

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
70546771d934eccaac0ef332cb742596

SHA1
eb5d935096618613f2e095ce7ce6772a68ac0acb

SHA256
223df23e83be2ef5c37eeaa8b524d846a0abb6da994255f21834a91775b32c60

SHA512
b42116a2374a4fa5b1974bbc83e2acf1f42163c3dda59c5d904ee650f8a05096376993fe220f2bbff698e5d3e42646c1561bfbf19e44be3cf3f963d6beefffa5

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
a40c1b0009a6f90f564cdf7c5ffe8392

SHA1
978030580e0297978deaf95dfde9b338e3c5223a

SHA256
d330876e8c3e1c4d727aea49858939d7ab5c3f566532315882675be088928052

SHA512
bbef1b3797470eaef3a0625527b08ad3f2a5b14666226a0e5f520a5c87b71771ccba6d7c2fb1eacf04eee9e787f78a20d14a53e930189f9b7be2f493485c64f2

Download Submit