0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
100s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14-11-2024 13:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2891E1D4BAC70EBA.exe
Size

137KB
MD5

c04dadf78f2813750900fa54863fb2b7
SHA1

8575e9d6f980b53ea13c37053aa2d55691bfe3e0
SHA256

207a249e3c4359548b9ff264cac31d09c95d626d0e4835c081d8afbb732bac4f
SHA512

20baf3958a55df7fe0196d300809afd2c4d4408c4e08db21f5ed6a1b6d21fcb09eea081813cf2b5ba60d745f745db043d2d2d9132da3ea565306402247b43372
SSDEEP

3072:GLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hv2bIoKb:GstYrEMw6Bxk5zOFNtgJKCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 2891E1D4BAC70EBA

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11292) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000\Control Panel\International\Geo\Nation	2891E1D4BAC70EBA.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	2891E1D4BAC70EBA.exe
File opened (read-only)	\??\D:	2891E1D4BAC70EBA.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\StoreLogo.scale-200_contrast-white.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\System.Windows.Input.Manipulations.resources.dll	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.NetworkInformation.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\NL7MODELS000C.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\TinyTile.scale-125_contrast-white.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\GlobalMock-B.Tests.ps1	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\selector.js	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\release	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_GB\List.txt.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\ar-SA\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.46.11001.0_x64__8wekyb3d8bbwe\GameBarTasks.winmd	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Resources.Extensions.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.scale-200_contrast-black.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Download_on_the_App_Store_Badge_es_135x40.svg.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_neutral_~_8wekyb3d8bbwe\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\RTL\contrast-black\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PROOF\msgr8es.dub.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Web.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\da-DK\tipresx.dll.mui.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\zh-tw\ui-strings.js	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.2.2_2.2.27328.0_x64__8wekyb3d8bbwe\AppxManifest.xml	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libreal_plugin.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-30_altform-unplated_contrast-black.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MedTile.scale-150_contrast-black.png	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-white\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\US_export_policy.jar.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\ui-strings.js.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\bci.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-30_altform-colorize.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-16_altform-lightunplated.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\models\es-ES.PhoneNumber.ot	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\javafx\mesa3d.md	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNewNoteMedTile.scale-150.png	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe\AppxMetadata\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_download_pdf_18.svg.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-ppd.xrm-ms	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-pl.xrm-ms	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\Microsoft.VisualBasic.Forms.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarSplashLogo.scale-300.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\Microsoft.VisualBasic.Forms.resources.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedSplash.scale-200_contrast-white.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\freebxml.md.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\Images\Ratings\Yelp3.scale-125.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderMedTile.contrast-white_scale-100.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AGMGPUOptIn.ini.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File created	C:\Program Files\Common Files\System\ado\ja-JP\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Xml.XmlSerializer.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\MSOHTMED.EXE.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ppd.xrm-ms.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-48_contrast-white.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Security.Cryptography.Xml.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Templates\1033\ChronologicalLetter.dotx.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHLEX.DAT.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\System.Windows.Forms.Primitives.resources.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationCore.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\th_get.svg.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\ext\meta-index	2891E1D4BAC70EBA.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2891E1D4BAC70EBA.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
2792	vssadmin.exe
3976	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe
4748	2891E1D4BAC70EBA.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	4748	2891E1D4BAC70EBA.exe
Token: SeRestorePrivilege	4748	2891E1D4BAC70EBA.exe
Token: SeBackupPrivilege	4748	2891E1D4BAC70EBA.exe
Token: SeTakeOwnershipPrivilege	4748	2891E1D4BAC70EBA.exe
Token: SeAuditPrivilege	4748	2891E1D4BAC70EBA.exe
Token: SeSecurityPrivilege	4748	2891E1D4BAC70EBA.exe
Token: SeIncBasePriorityPrivilege	4748	2891E1D4BAC70EBA.exe
Token: SeBackupPrivilege	4388	vssvc.exe
Token: SeRestorePrivilege	4388	vssvc.exe
Token: SeAuditPrivilege	4388	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1768	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 4748 wrote to memory of 216	4748	2891E1D4BAC70EBA.exe	84
PID 4748 wrote to memory of 216	4748	2891E1D4BAC70EBA.exe	84
PID 216 wrote to memory of 2792	216	cmd.exe	87
PID 216 wrote to memory of 2792	216	cmd.exe	87
PID 4748 wrote to memory of 1948	4748	2891E1D4BAC70EBA.exe	110
PID 4748 wrote to memory of 1948	4748	2891E1D4BAC70EBA.exe	110
PID 1948 wrote to memory of 3976	1948	cmd.exe	112
PID 1948 wrote to memory of 3976	1948	cmd.exe	112

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\2891E1D4BAC70EBA.exe
"C:\Users\Admin\AppData\Local\Temp\2891E1D4BAC70EBA.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:216
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:2792
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1948
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3976

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4388

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:1936

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:5072

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1768

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
56cf1f0425ca988df7d19b5aad526fb6

SHA1
f8eb6d2992adb857ad9a2ab9cda4de4dfcf3e298

SHA256
8195dc4eaf7ce4975baa9c587e3c85de8be0da87f8ce5f1645796dbd26e9ab5e

SHA512
3ccdeb992085277561889c6663dc9fcaa58c1bbc49ca881f83cada7eab575a88e22a79adae3e83570432f52ec66c6a64c7e4ce5d4bbc168acd658a8c1de62a8b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
c8b54518b1d62e0e740743f8546985c3

SHA1
1878563dc88c8491568666f65af3c34c07b918b2

SHA256
4600939577c890176a64b7e5b7dfbd161e62861b9dc976495b65dc60a2343a44

SHA512
c6d9d311bca93851b8d7f8421a5f0df812e1a828eb7d5653eb8b9ddf61da6a90e70abff6eddd3f1b4723b64c7899a23831d9d2d89c56da61fe129d5a7e592aa3

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
7aa29704d2d3e09b0006e961aa4f8387

SHA1
4cccfb75a64293585833fe921662c9a5ad60c203

SHA256
691e868c8b9680529d74803f461bae9a4604963aca8b4546697f4120256708b0

SHA512
334c15b80ce117ebc728c9b414f20123b2b3b0cbabe490c72d933fb7ff14e5e83563f8fb07e33b07f4b9fdc885c80aa9162bfb554263feaa965ec79cd4d54103

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
be12d5b9e11216eb1f67d0462073dba9

SHA1
454a0ca35be3874243060f5ba92ff95ececf1669

SHA256
a6b5a164cb372e377e68e2edc2ad36643ea55eeb197ec502535d67ce8436db53

SHA512
d2e4973e97f5159d4e40db90254fc15c90deb372fca72999f756389259233dbd77dfd0bbb8faaa9c47fc5eb8d5fc02983fb3b07864d3be3f2b2019f0c409ff57

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
8f572c5d841adeceedc1db9221058f85

SHA1
668a01ad264a314bb24d88b225e4cc49d0db4772

SHA256
8209a1e9d35baaea55893e61d151745220d6388440833d8b365e532d81a98224

SHA512
86828143d3a04476e6f010fe8d24cf86ec7e0b769914af62981c74c44c44b3a5b20cb0fcb869b62805dea8ae9eeb9892be5084941e4252fc83ddbf749bc405ec

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
74e9d26ed29b1262555b6c0517e05d96

SHA1
53ec61e6c11e8729f3c8a4ca61e4cba0ecfa7c3f

SHA256
6bd4798a4180930888fdf5d5692fb5326bc37d11ac45eb97a13c379da65be595

SHA512
449d6f4b7885ec38ae5a82c8c6db98caa85fc7665de4aa4d477d933ed13c14bd0d83b2873d6d552535fc8410e0bd1a7d017a1414954343bdf9d96d9099c9ac92

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
3cda1d21f1259834c4ad88cd201dc9ae

SHA1
10645013cd5d479a9c9a8b6662852950f429906f

SHA256
2df9df820eca68de48d500096675da516e675d181d17c054632f52a308d4403c

SHA512
3cd79e81e2293a47e02fcd65c3473f2c290d33152fdaaa4d947375bf39756915db92275ecea4a43ab4502a216a998082352d2091fbd8273cbb0964886c7432c0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
fad84ae4c0c80844c6513960a1ba6023

SHA1
e839b7f92b4e996ff5e14ee365356125a7330d1a

SHA256
f8b360790726f5fe9d32a079b2e04d9ad4b4c132bc2002b4eaa0885645c82bb6

SHA512
fdf2d5ce723398b2e5a30dedba375800b6e25ed663fa8be5246250678ef7a8521e52f1388e0edcf86cd1ac89d4a09d00717dc057c5ba5f7b06f21ac0273d577d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
c2b6617bb6f6431642f5f42c2198a8b5

SHA1
d40e48f54af0443732afa62936e02e76b960aeed

SHA256
b04a13299baae5553a3e5d670edf240c7f35154543d7b8b487258fb694f0a9e4

SHA512
c6acdaa40d4e1d43803ace3836631b150ebff64c6b65b5b4349a98410f3782650d2dcfb1b9cc923aa33517f4aa1a58d7fdf10a567eca3be7c64e1205d3cb3988

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
132ca319eb653fed4d5a9f4b62f96ae9

SHA1
5f0c7d734531fe270b07668157712cd6d07538a8

SHA256
5f6d6786355bfd17cd021aff7d21808b661e622cfa2347c98473b67d88ba3432

SHA512
bd7a690dbc102f192a4bfb5478aa702d293a2cb8b083665a939f9c47b4329e026489f39fb78511d93b11c4990da568c1bc8670d8c98d707dc209893f08c79122

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
ae8c910b4adf1fb1f3fc91d16d9aa8bd

SHA1
966a388a37f543cc7d4387019e5c53cb95def9fa

SHA256
7701ce0dad9742e67098a34c66d6448adc8926039658e9f060e0ae32a315f856

SHA512
da34c3194791bd169ce018ff358b68669715bb46713d84bdaca8c922120d2eabe10c9ffd58c3ba2c382cf775bd8b10e5aa4ee33d18eb47da4a233a154210c0f0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
e863cd6084dd5465f8fa0569d41a8fff

SHA1
bea8aaa97cf7819fce8b163da8267fb1e18c6b81

SHA256
3385e9a180e0535f6049343262aaa5069f8a3fbe1beb1b6b29a03252333ae75f

SHA512
a8b1aa17b56cb1afe2159342467fe4561b413c4aad1df000c18bfca9431fce7debcad4fd2437b662960bc963da93f01c320503b480688a7051f43931f1628ab3

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
a5e077db6ac0976cd96dadfbdfd8d0f2

SHA1
d7caa91a3786ec902535b683d1ffdbda92a0ea08

SHA256
2c26590b3e7e632e41ce73721f760e0a5824a342b94afc952f137553167d7a23

SHA512
6428aaa8957f147dbb8af81fe5641b3b031418cd7f9189782c9b0ec54016f91c4bd8ed4856aee3ba6cf617769562955abac1ae10e23f0ccc27fa92290f221d4d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
1070b1c71346263ae6ec39fcaa162c6d

SHA1
7b6b557e08106b1e49b76dee1aef54d5c3038922

SHA256
d878096dd3ae0335f90456fcfe0fe089b227ee2731cab983496ae1cc1fca2412

SHA512
ce3fe21ae23f6bb0a0499b2c3ba9d10e84044befd02d1d98184fae9f8cec4079664fec7109b84c811fc921a0b652f93834133a170ffe5bb08f92f56eef2e26dc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
84d75393af9584feb91830f557ea66bd

SHA1
d0f6473aa766880be731a2222767f1a64c481105

SHA256
0db8a9c0f679e2b92edb3a4c80522b76ca9a668a5c1dbe929ebd6a5cffb5d6f5

SHA512
97fc479d02e13d87360c5cdb9451a221d09cdf22416702c840efa5351c77545155d49703b7e0c197cb80ad616fa1bf0bf6de45707d6b6e16bd175192c0a30ef4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
03e5fa15aef2537749f32e74e6f53922

SHA1
833bac5bc4b3836327f5e2cf98cfc54f1a8ba8dd

SHA256
adb0ad764d7f4faf7e5689e18d75456b77ea3252a00f8aa6897c8c99fd35fdbf

SHA512
f3f6d872197c52a5623d6e02569c87cd7ccc2a32588f1911d0ac50baa9f38196fa3ef9beb5b767c2b8195aa70c65c52fe104970c0e2b9c28de007dd3dd64caad

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
18797dddb8b340a458546df78858cd50

SHA1
087c8ff71a272052c4e64e5f658a84d9ddbacaa7

SHA256
c89b251d7e287f67d5fb7b86cfc71f3024a5aad3d682da9bbd9428c01664129d

SHA512
3d7e762332dd963564c2111f0917fb8a747b6c42886e513965c15c38336fadb5303d03b6a3e2749cf2639c603fa56b121a576a56892b374b95eb97dd801f4120

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
983ba59ec140c4c7c1bcf05b69c137c9

SHA1
b0842434b9504a710982d3253ed53c4d7117035c

SHA256
b7fe306a2ae16f9ae0fd281ca9e8c201fbd3de4feeb68791ea336b4eb38a817c

SHA512
e5c8462cc053d4e194883fa97182fad6334e2e32116f7fbcd5e87885a18a46c14bb152e41fafff5952f768762461300bf588b8e8e80796399a6e1e7f16dc507e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
afd26afd0fc32224b5b52f2b3ae3bc0e

SHA1
72f4d705992999fd6a859ed9e0a23f16a06e420e

SHA256
8bbfa71640f01d7e5c86707cf872d956e33c66b8399396ea287801a32853dc95

SHA512
229a05ca12556e049dcef7bf06f6169e4a9c9e017f92b1f96968b6b66784e5c80fbcb3e299dfa237b594bc2ffddafedd9b70d03cce9ac73e352f18980d443190

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
f37c501f24eba7289bba7aa5d9fe54b8

SHA1
b4425f3debfddc979229c4d69e4e59c0ccea5c8a

SHA256
b66df621b404c4c30288ac17dd913157dc2b586e762d24b1919506efbf0c5508

SHA512
2a27321c8a180160d3bd047b8abef1af2230255206f42696b53bb1da578cd9f36d93d976b33aee571e311300d8ecdb77eacb2a56dc35d602b60222f82783c8ed

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
0bccac9ce1171ba0805c7b08786acd78

SHA1
478e4810fe33ec78984f90da65357aae914b9dfb

SHA256
896d3352d805f8774fe76e8e7221217900e2aa1bd9462d67a24eb79fb87b1f4d

SHA512
e94eeee4b6aabf2938d7a00f51043976b97d04e35f1e3189c830b1ff518244f98657054db0239f86d514a313bc8acf9a5282658a6e22becdd292cbb72290cef9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
42f9793066a9082476665e743aaa1dd4

SHA1
5c23dd8599d0d2184db6c033f801fce965e14546

SHA256
1e6389eb7427f49f9548a86f70631ef4264e97f36088a8acdfb219c4be274a71

SHA512
2c8e143daf2b37d0d60d60b48c4a2996fa1af3a0fee17a2b87f9cbf7771dc769728fbb568ad15495af4182fd8f8aaf96b4a08c2dc67e6d4b5bacec6096ab5a5c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
d32ce88ea96bdf6221b833c466d0650a

SHA1
a635cc3a15e043f40b40ed0bed4245192c7a85e3

SHA256
2e4714e8bf5cb59fe9372a8d3c0e7153b0723217e3b05d9e7297569630d90bb7

SHA512
8adc572a0ad47132bf266452f1e4b47ee516e16a116a1c5015698a0652165796a1f2d1c0ab0e081d78952f26b2a73394092737ef18a95bb68f0443ce20a7a2f0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
936903598d089f53077a850e51d234d0

SHA1
9c69dc24d2c4991e06f3891718034b2f42aabcc9

SHA256
936b2a67b8ee5fbb345f61dfa0cdc15269af6ff662a3f84e834f656f2b8fa04f

SHA512
1ee6c0ef854264eb05faddfc32caf8099500c6edccc1b5a79835ff2987eead5747c9726f0edc96dc31a3581d1e5b94f3552a5721d320bb8c18e5e8950125f35d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
2a59b7f39a7f9ff6a806eb65227b0af1

SHA1
8910131b339aac1ad195683dacbbeef338d2ff62

SHA256
c14576d06b59755738a4d7cc895a104a910091e3ee90a3b0fe064862bbf951ec

SHA512
86a1317d8a5cf8ba67008fdb9a8e21b86ebf3baa3884e3fff598ac1a9777877c99d86619c92b5e17a2600d43313cf8ba4a73fecd11ac9d2672cdc4c0e54c4957

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
4e3b599045c53f5eaec637d5cdfd114f

SHA1
d7edfeffc06629a44aaa7084a2415c373036b300

SHA256
579a981efcf62e29421dca6326a60c1a1dc871436d96e72f52196d3db7662426

SHA512
2ef7e2f3f47ab83a03cc22d66d79b529035de3815442ee4e246304305c2cdb978eb734103ee4c5b3d9872d7891e130aad57b17f26e2562b7d6bb60e0a1fb8072

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
8ed2e4a2fd55d9015a94d8db2b68d332

SHA1
27b6b06f2be162df7da817e05c2a3d494d57f872

SHA256
8dfd903f979ca6c5116b126becdb1909294219c7a95740f8ba0abefce545621a

SHA512
9c7e1eaf6399dcda8c9b15f740c96dd3c612644022309200e5da9efa25a7dadacc4bcad688ae6e867c29d0f859f94fc2580efcd55cc440513ff7502332cfda21

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
5f4943334fcb2c8dd3b14dfc262fe49b

SHA1
b5b494d0d4f0c6783bb616f4c3e35f39e108794d

SHA256
2ffeb53baaf0e13844872128db5d38e2e35b5b0e1fd60efb2778fd55505a9712

SHA512
08f5d801160695998d6f61382e4be1e5d4373b629fe343407466120c1d0da25405ba9a08edb3fe9d18c88980a6682a50ae47d5a6b13b5e40bc2bafe0b1955ba5

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
e53f5900d3120b5e273fa662c76b9c22

SHA1
e3076f4d2c7495a6fc386c09f15dba0f8d2bb1e2

SHA256
314e0395587f18cc8d752ff5eb308d4fad089d1700b0077022eaa279f3522fda

SHA512
8cad1abbd94a8237a688a2e28e71a938be1ab90e62af249dad5aa7f64d8e1ab10d3b3000b4819bfc41dd6f4d2c6dde57e1727bf1013df83502218117eb4004d7

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
6b2a5a581a406afec632446f75034599

SHA1
3a4510653b7cc149e3d7049b7de7479100ef4d8b

SHA256
09a111aae904aaf6355dc35a41039d731280e01cf2d2629a112ee8d002e9f8c8

SHA512
8b7dc65c2309ccdc9a85446b8174e61248ba2b2937605ed7507713516e62e334e877cce89661f1f5a62fb11a2147f8e73ca996f23a7c88cb1c64c58e967437b8

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
5207e493d11fc8895d1ea5e55ee0936c

SHA1
acc2a53c136e2d7b7bf8c1bbddf6794d00733906

SHA256
698c015e0112ca24fcadca240b9fff75a0597a440bb8a846f16aa4969fc170b8

SHA512
25f556e34acd41e19d27eea7c160f8235c356bf8b64956cb107a192b4e0ad1f91678494a04530419a0943492d763722c26848bd8207c821bb7d2ebb3a80fe7b2

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
d2968f5735c372ba2c995470253d82c3

SHA1
089d1f9dbe5eb2c0452b0ca108070b07bee47a03

SHA256
240787551a2b8775ac32169313861383a9314370e03dbdd80b7d137d23277558

SHA512
ac4dc015990aba887ddc5dc31a61781bc96eaf9260ed605bb951c9ccc30b79f2a53f6195a76a7a0e39c2df0c8e53a725d558f8623400bc59301f44a0ef37791d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
612a76d2b90101d1200a09003e09dbad

SHA1
6ec29a7d70dc4faca0a55cea08e9b16f67d4c8b2

SHA256
aa830c371dbd76e6947fd1a2f13c19994def7c31d4ce9025e0541758579e4ad4

SHA512
7835e37cc526cc413cb8c3cc8f0f7903feabbe92fe7aef48e3d0567adf5611bb4efb1fd92658440a760b13b1df7e635aa825dc0f7a93392a42239779cc0397f7

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
f6ba44dbca620b449341aa6f177d297d

SHA1
a81187d6792b1d9348fa1c19764b392025c92986

SHA256
a6e4c3efb30a85fca6b5ef909400f2dedff23001fbc0b61dd33e3f10e5964db2

SHA512
4cb9b789afc67bfd5024dbc6265cb0440541a0c549f5d90f92bb32f753da70520e41b0638f4cc40da768ae4658c6f3b059a73e86609456ff5889141e1ea63a82

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
d26d976b64afa3288339a1bfed0a68d0

SHA1
a5404fef361e2eb24a5ea60850163d94afa867e1

SHA256
58ccdfe3052b6c415a18c3ddde1fd02135dcebd188a188d1fe44349ed744ecbf

SHA512
0c9873b225a74ca3f713b5c4ab21e4cd69e97f722da2c402657e4bc07ec10d5969d730e6f4826cbd18a3d8c485e535bdd6c37a6e979dd5ecbe939b7b6d244e07

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
11b933e7a32873a87af316ba11b122e8

SHA1
ef9412b497f3c65737978ba8562185d92b50b778

SHA256
afca257983947d446f2407805a8ad3738317f7a70cc8961469dcedba02664c96

SHA512
a81a8063eff67b5c895951efdeb261522b9190a5ad97171e76605e3dcf3c3c4ba3cb5ac8e4af1a255411ec2c8724541def6aebdc2ec4dc6f99b6691a5249f175

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
c711321e49909d868553e6df3a7f5107

SHA1
a8a84dd39478c8ba0f9d0ec3606cc46e06091974

SHA256
a6f3e9d64b8746b7d82cd269efe8466970376600fbe013875d14229858317e36

SHA512
c75b48e93e02bfef7f6b9479a891dc8121c42ed3942a726031ce1dbd9bbf3e0404660c22a78ee10080cc0fec01f0c3832ac1c41e7c4d5adab23142442819ca58

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
b862aea85ce46292fb24ce889eacc867

SHA1
ceeaa152f7cb25bdcd865df2f284662388c0f580

SHA256
02a5beeddd80d14e64c5573e15a42b74b176ca804bc46497a594c3c83f60bc49

SHA512
b03c0055197c928d450b9de108b14a3d5e8662c9eea76005f6b9eab97afc16530f1bed3179a6356a16b66ea97aa96176b6683f9901c6e502f3cd260f0b45d28f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
1f87df3cd49f434790d295c6388f4395

SHA1
1547dcf082962d712f7808a189f9ef73432b5fb4

SHA256
546b238ec9fb346ad5470900b94dd85ea79b19b9eaf895fdfa494e04e2b6f7fb

SHA512
6584dbb8c36f908bc5e0a6d8ee8aafb89a3e428fbbf25be0811a62cacb7d3dfd6e3502ca181b9a216cb6d71254654625f62b310aacefdcf10286dda410369298

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
89089271d420d97b125ef94a753d50b7

SHA1
264ee920a1a1b21989c1e70df49cd9f8b5d283f0

SHA256
2bc92b2eae4ccc6b05ef19d274e5db90c58ca9f3ffae49295d5e90a1969e6f27

SHA512
b450b8f34c552e202ab12d40a7c7dc87dabc8b79c71a73ef31d932b22e65c72ea99cc0441e195f7808f88d46f0f2655f8f74d98e0a9e10cadc93b8dd41a1ad75

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
ac1771e91c6491048943ec8762c521a2

SHA1
84d3a7f7cfd23711c8a231d7fcd6814f9394459e

SHA256
b64218903f77a117a3ca9e9235f835f60e7afcafe484ae659767f12761a40987

SHA512
208bf17839f2c2e84bbbe98090159324750c8d0944989d601d7b317c9213fbc7a88244c77e7ef906e2fb59dcb72eaa9d5ed59cd4f6ca0ca0243b25b72bfd3c4f

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
4cc6fd7d971c5f5d5cd03ee51de5c194

SHA1
71578ed512990f68d36df2499cb475a5665cb285

SHA256
194414897f871f969452916c8a0b6f7748bfe3c40cf70d324342bd2d15df685b

SHA512
e1cbd96dc34d1a6272fe48c0dcdcd7496291a19409841c3a71f695fbb33d49173b3266ad9d1f9d9febf50221a21b95eea2cc2d86e64d47e6c886696f9bb9ae3b

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
1b757d01bc1b766aed05f58e985d8df0

SHA1
206e9bc04d762897301d9f2646fe82a1136d2ced

SHA256
e0de121009b442d28f6c99b0c3811c71c383bda92cfe5d123f42b0fb9b32e405

SHA512
621a371d96f95766b9d212e2059415972d98dbd9278f983f7d68762b8ad53197b51a564176fe449049e5ed1d25a09cef0dce1fd7b807512c43735ee811f048f0

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
50f0c19493ab0f4ca90540e44dee54bb

SHA1
1cd77560d591844f6cb1dd7d6cb70fa5d7c187d2

SHA256
1f5c5e6fc9b5913abb5b782540ef424165fafc84b6354e0d8595e3a0244a3f2a

SHA512
280b118eb5ef427b8788ac92c4383d4af866cce3ffebffd52a6639fd0b92055ffc621a96578f4b1e04bf164205473c6c47c66c9ba266a358f05252e48e139078

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
5b2c2d1cfd7525474d115e63f610bfc0

SHA1
c645067efa8a2bcb907d157a8ab5fc1ac9d59e93

SHA256
8169d93d5b1aa92f9cc91e4c3d297c205f8dd8865223165663df36ee469c7af9

SHA512
8b072b171b89c1a709f03e362b2c39b10bae052564688b9a8c85853d003683561254d1497aebccf00c1d2ea2b19ff3970b4b4b47785919ac3483425c290f6cc3

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
825729d223ba21b2731736e7512e35bb

SHA1
64c8054e0be4935a9c1d7dd8f4d6652a9936e120

SHA256
d7d2e7971e7181985ce159106898746a568770c1f9da85edcc50b1edff9502ce

SHA512
80b8fa6f5759f97d5c95afc9842a32af23a716a765d766243c19dc7f8f9d4f32f40d3977c030d37c81aa44390df965e97f8f742d10d8b0a8e1d2aa8ef5808722

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
0a6c0e91faa7672a1a807f869b4c997b

SHA1
1fb75a84dc1cf183779c88be9c5b29be2b94d8df

SHA256
de253796a3c0403295d194dc016bd69439a14cfa099d0895c56875ed1964c283

SHA512
a9cbb7d266c80373095d1c5c130e2117d0138ea9e2e24d5fba0e01fe2fa741e814d3676b863531e1f88c09c1d0d76a9609ac25dfbd58bece8eb46c91014d1cb3

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
9971ba89ad705db6fcf9cbc1921a379d

SHA1
92b32908765ec2345331794175225d6dd55243cd

SHA256
370901ba3087658e62bf74284b8e243052ced6aa56864655079c4c353c3e5ce9

SHA512
c3955d0ede1b3d71d8bb3585438ddf196211528b89860d15f5171b6ddf73ffdc997c7af3dfec1db162cdab8d37adde0a28f0eccb713b4a5acb4c54bcf1376db7

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
80c442d228ea7b3f767135dfc76eabb4

SHA1
9efaa5a028788c5d7233ef1952aea0c780d8e624

SHA256
8301087e2f3cc456237ece713fc70ba56ba7f1af535241bc36108774d8800d21

SHA512
1fb4a3171181740449ba83a782f0f0cf74b113fef350a1a8a6649813ae14eee63dfddcb7227061ace228cbfbc76a2f98b75be549146a55a969afed7553c16794

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
d8c33dc050ca1637a20abd5c3fb8374b

SHA1
7ac231cc6dd0a47cb8a823d5a5e70cb9a6ce07fc

SHA256
dfccd3a2837abb7b77f862eba682a0afba1cffddef931d591229eba602fe69bc

SHA512
198cf4c92ae7ece6b3749e55c43a2e10f57a447caa54a0a3da5b6582c1db0ac63126e58fc63c8e8124cf6646c0400b3ae796a4178e7679adff6a420cedf0ab9e

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
aebb6903b876dc494bcc7cada0408a9f

SHA1
c98aa24083b209a622331cb873a046ab82eaf687

SHA256
02293cf240dd9a7b3cfc9f4e582ab9fae13f512760bb1e389b30abc969137370

SHA512
9855ed4b8d159ece4b445ee8b3c42f88625bc017beb269a17ecb1f7b5c9d41bd899a24fc968ad02d739343617054496b0df9e968df209b0d1a3c2beefcebaa23

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
3a1ad891c8907d70074957007fb5a748

SHA1
58849cd5109b3f94d653c6926c8fee3fb142c147

SHA256
8c5d91e16dd501d6e62c1a17feffa2dca161841f236387029dab5241df6ffb11

SHA512
ba4df946a82bd587249be27371b377c15169ae9b525f6fcd7735a7808be4a252d8ae5c93f14f7077d5866e2ade593dfeb7decb5c9d889f67aeb5733224d953e8

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
eccb589d9dd06111adfa9f3a9c7718a5

SHA1
c335ac391ab2c958245b40142e4e60bce4271763

SHA256
88bd9685d0b7df0aa992c7e5d86f53e823b4b0bdf642c80707288242b7f17e6a

SHA512
33f93a1dc0f2d95796bf52e8a0d4165a0373ec9fad96c56692a763a29ec56c3b46191969802e5bea072321a9ff3331cf566e8a14ac4c0b38b8244e6b94641cad

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
e2fbcb3f924e172ccb76da99368e3eb3

SHA1
665bb4ce9b5d9798c9ce399994076b11aceb1641

SHA256
bc0389b2df45b6de3a614a194ff1bb00a2802ca8a3ce0688823788e4e1095716

SHA512
a503f51a68bcce0596984d3cacaecf16bfbefb2824d5565d92f7b9e075bd33e8b6853f649918cb74f5c0129f331b6b2a3104ee2365c1e4e38d3f0da943bd1342

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
4390a101ba8222ccd5f47001d309f17c

SHA1
3b2d6a8bd12906517dc2724ace2b0c83f289c2cd

SHA256
bacc833a538936b16d999e1ed07b0941282e10731e7edff88ea6adcc4f6021e5

SHA512
562ca697512fc0dc390be5658526adae9eec55db394c6edba0c2f1075f7d703d96bb9cb821fd4a7f5db5e1ab5f5565296062fbd4b77b67a8e1b6999d960805ac

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
26abdf8ffcbab8a7a6bb621eadf10a86

SHA1
04413205fe0e6464b910af07e07ed072035be69b

SHA256
ae8499e7b634a5f1baea563735ca0657cca2a700ff14e51e16509bf940703983

SHA512
334b7b0d2e80813bf86c6cfff778bfa4e5b798a77b44d04462805b9e4be11c397d6d98a8377900308d33812f533a4f4bd7908171cc11089ac5e3e78ef23619de

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
dfce248710514573888bad7be1f48d2f

SHA1
738da7d734efc38105d2a48dba25820ae3895552

SHA256
d02fb67da02323c7b76b35c5488c01945f3675b9434e55aee5e7761a9b2c70c6

SHA512
720d9bdcb3a5092fd59704e27fdcc47092af0cceb409c526e586bce4bc7a66b595718f4d7c13deba5be101c3b659c68a5fd14bbf884c082276939b94a7fbd883

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
2266058ab6752bfa615950f1afe870b8

SHA1
5b93d1ee4391712c23a88f69c633f00f6a31aa9f

SHA256
ade4a41a4a0d46a9ffc92a9b50ba4103c8d3afc30ce442d64143861a6032e0c4

SHA512
0707c1ee2c5617a0f09b3eb4b1866fb3ea4fb9e78da53e7ba3ff062bf66a7a3379d435cb8b8f099d4278ea25da6879179a35e3673e8e9bd7d5368ee22d120237

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
181e626aa416b05abb86d53cfb5f66f8

SHA1
5046806d7028e331555a2e292ddd2c86e4effbf2

SHA256
eaabb83ad4519947359270ab8d14cec4e9908c0e5373589e33e872f00ca16b6f

SHA512
4d92a0e24c2059600046bb58e48d8e7a78b7c37f4aa769c98c5c22533fc8c8bac74ce94542d983985facd2984d54d30053b6feb12117f78c56080485a5ed3642

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
568945a60847af1fb5f8a7a8b47a1c28

SHA1
137d7d83b27d9bc143765e391adc6c46dde6627d

SHA256
8f27f621ee1f194ad05e5a9025f0866f89fc10b186b0a906f4173b58f7ab94ab

SHA512
106fd837b04e20ca9e2d0333687974020b26021d945cc021b342f39125a7f0ac8d59ad2cb9d2f10e080a3c2387e629ab509efcd08cfff99441e76f527b81f7f9

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
4f8c93718233c5b397b4c39e1251abf7

SHA1
2271ddedf8a8fae13d3d564d63560bd48c8d30fc

SHA256
1fc95d56ec50fc2a41d082059de22cc583c28cd0dc30be69ad76c14eaece1611

SHA512
3485e50bead9edd0c83732c7f7fa7128b89e1c5ba181ccbe95de491add0cfe098afd7383bdaad47755fe4933125bb48c260ab439e9d5ecce89c370274ce9df01

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
c73aaf7d954e8ae0af9d22cd74ae141c

SHA1
a3a63573a1f5cdfc16d4128942d07fb5e12652d1

SHA256
1b221a0ccd4e33be0e93e800e775410dd203b3c7216eecefeb2164f5ada69a4b

SHA512
a0e06ffd3189c359cd4a20d8fdf6d80c06e9ddb8d1bb49cb9e0575262ae0d913c7fba96a3da34ba528ca254f6b24ee8ca6ffeeeca26dba74852447da0e4e1a7c

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
1889de517ee29969b6b2cbce6c6991a3

SHA1
c43f5d94ed4c5c32a960699b1eb582fc248140f4

SHA256
c2b7e16ee920db4bf70376580e59375300e4e8a0be09779810af0c9af5d9661a

SHA512
2065002e413dbf55bea3cb45fdc858490adfe90431edf7787a7a32aafd7c7f907a1993f7481a14369df977c2eb7fc7bf2745507ddf3132df5ffa7ecf1be67a4a

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
5cd4d0b302f123b54df6277e110e7c6b

SHA1
c8a729dcfa3d4151ee4c626176a97f88d8108072

SHA256
decccf6b33dd9565cbc1ea00a5bde9d59b0ff7ef90c3b5e075cb15967eb7ce6f

SHA512
65be85ae15132ada1062be7d5b6b64d40690bcf6e726bb5303421f0af7fc5d2d5bd43f300b3345b98ab019f3c1adb2c2d5417a6614d9d3495d4651ab79048963

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
e1e3d38e3782a84a0dd6ca585c470363

SHA1
96febb91f31818fca9325d0d0c50a28aee3d9706

SHA256
65a25ef66041547b6964343bb2fdb0813ab43e36edf2f473027ec3d6d02a8b17

SHA512
9810c98af68602ff90938e54dca7e5590474fdd4e24920fd91949b684d39fe592e963984aedfe016118107e74c07fb2bd117ddf769f48be97f32fb2d09d3fb3d

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
0d79620663725ae34e8a0194e0b2a85c

SHA1
b1b43e4eebe267378374beec113dc3656ae7c2de

SHA256
b30a8f06a212753625f4d01f4b0595d515b5ff7855fae1dcbe586a8bab8cdfac

SHA512
4c89e9f327407bd9f19492752a4aa31557a150a98761cf17b0a23d63bab6293db96ad8a9cff67ab9e4c3e5ee8af1273b3d287952a131b171be65a5f0524aa6ab

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
4ba9de578e7bf12708e47cb6ab7d447e

SHA1
762793acf7f632d936ee32efd212d60cb9b7b64d

SHA256
173ec397b931e96d31a53c1a0512581092622cec0fe8bc8dc3694e3a34afc058

SHA512
befc8dd17c33c15da2b0954b48d67b00c569a7f06f08718d8ba1008d510e725c50af49d6cea222d627dcad8ead25a46fe27a4fca530aeab400afd5887707d6f5

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
77968b32b7f6669fd21f1ce6ab761345

SHA1
c2ca59456b3babcb0ab12275ecdf7288c206b317

SHA256
eca1dd64b1ee2ef15d54678f3fb6d13055ce283023310935964cce154d2c45d3

SHA512
4bbfe414c177ae8e8f07975cbcd7a945cee9886bc7e49c986f62f321919454b126195ceff5241ef9bf4e8cc4a7fa42c5b407114466e1aeae5129d2c326faad3a

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
93948ec3c22a7844b763e24841a6fe97

SHA1
af4663f59e19a37f7c8c559751b1133751480a36

SHA256
fef882482ff8aa81315bf102c384f16d30eb17e571c48a21c0339774589595ae

SHA512
1ea4c5a6a8a2c1466f651dcb403a48c21320ea5af9ddd50000845244ca694295cf39e0f87dc0da5daedc072593a8b8e4c4e1a13be6f0f342aa0cbe49a820289c

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
15dcfe9297981b120faabffef3a92878

SHA1
81053d79f187d6d5b03fddc00bc236c05a59f0d8

SHA256
21bd40f0d8317fef41d458bb42175f0f50beba399f6b2d9c4265b31a53510e66

SHA512
aeb59db3fdd314916e9d8e999474cb794e9c4d8fa9162154820eacf758a17cafedc8e2f3b9f1ef7fe8f6ca982c53cf2ab4c326782dd63a43af4a53dd93ed057e

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
60ba84e189ff28613dd18fb729dfde02

SHA1
c30020a05cb3be0afb181ed3761709df508c6a8e

SHA256
4029a0659f6f0902da6ff1fa1e172b1f426c91932e0c00e33261064829fa543e

SHA512
64c12d9ff8611d6191adc8a8b512af25989676d7b5ca10d20e6dbf36079fd2498960e3244bfcbd8078407449e51736a360930464ceca969d71d421bd951067bf

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
a3b0e2e54d0622bc846216cc18f7ce12

SHA1
4831b5030eb8b76621e4d9f8c04e3ca961229a9b

SHA256
b181d7e4c5bd8d04beba862e056f8b7bc916378a02f722eafac6621ad3b35973

SHA512
c002430bb547d2355d9636de7431f17fd27ac360ab7a92b6045249290a8218b7807812943025fd0842c3b6f19634fccaa2c9a1aee402d2cc9ef704e5a2c7dd87

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
116569f5dcf5fcee7a91cf6be7a62c9b

SHA1
8b2ecba28b0d8e164ee13d2885905ae8670159e8

SHA256
083045c451cd2d1f9044180d892deef629afb87f69961c07c8ab6a8c45821dbb

SHA512
5bf28b36fcc8481a920ac411616db7f0e66107790e10d8637cc7164353e6c2667a1ed5cb9258124989e38fd6ea8cdb6e913ad5a8188634892636e104d17cffd1

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
ea7755e1bbbc6ea1cc1d507c2f8d7dc5

SHA1
6be05a6d8efb23d8bb38596d370e11b93c6b2564

SHA256
0c7299a09d8a9e8ca04e3f479f8de4d170f26a9ec4bbebeff70e69ac39272d67

SHA512
839ac92cb3e83517ed6264b96ec44191a92aadefa9a628be79de2b4bd1ba26081a165762d3a2bdea31c55561f78462867e336ed8be1d0913a613e82b68c89fac

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
285f415092a8ad0ce641f5798880d432

SHA1
3e56fe0618c60607821558e0bc11e28604156e04

SHA256
4cbf3686b9586d66c704338c86ae5404421532840fc16a8d1f3aa03cbb092213

SHA512
3cff70d898db314d96821353cdd769c224d00b0f3c6bb98a6a24c32446170de92519617fd9e28afbbc92eff75ba22b1f776a072da573a6796d05a226ec739dee

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
262dc3b7acd2a263f2a68008d5481617

SHA1
182980578c28ac76b09e84c0238c70d50f9ce4f0

SHA256
6f8ef06d79faf40d4e92d40e85c674dbbb6793fb05758f156dc263f36bb5b752

SHA512
4a5c17171a7b1299d956c6783888d4c750a05ee1a643bcf30492373316a4191149114df28f499cdecdebf426f5c96b0ce4a45b2f1b4b5f1c9a5eb3cb46e9db53

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
77485aebdadbb0edccaf349f600f32ed

SHA1
c142ff70a2cfb0d1e02a3c3289b89847283c8b55

SHA256
6ffb62599f69a5153844e3440f019eab513decb926a8deeaa4e55567904408f2

SHA512
5dbf3ed4a8c70e8f291825c70213bf60c2c30be16ec3c364ca1d9858c614d63c1ad2b0ac2c1133b4e215e1f6569aa4b8d49c2014b4b3ba515fa8baeda3cc9ddd

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
8039ea3a2169111b0821cd4c14c2a688

SHA1
3fe062d4f679df3b86c7b9340626b3ff4b3f410d

SHA256
e72715a3321a303527a193c29953202c5dc65f566348bd9c06991246f01d2503

SHA512
b2b06647016e72ddd693d133214bc74791fef3182a9e252e7506c10055b78e408e59f7a51c2108646e3fffe348bc6e6e76497ef76798fabe6080d07677d565b4

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
46a84caac7bca143fd8964057e54a818

SHA1
75e4590a51cc61e5de13621d122868fd0db5d9f4

SHA256
6f701e7b2d133819993a1009a791a97b9eeb51af0b7340dacb1d87d25cc3e175

SHA512
ef38d6942c875c6e29fdc2021be4869ea33d53178b970cc948997fbd64f95b894b3e440899498374559b24c0be21df7c6fc98800305a85e95067619dfa63a4ae

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
a10bb0bc26acd5bd76d04d98985faef2

SHA1
9fee3795c9b4c6c0c6a07f08044fc40478cd2338

SHA256
77f682d0f81f03346006d5e8bc7fb11323ef35774305d2ca846b6bb913b8de94

SHA512
b9ddd443e6a4399d39ead727c6e6381bc35525e86f9efda888b78284b6c0b440001e088ba08da5e9ddcb3d96750dc49904bde231b5080371818637004d62515f

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
df691bb56df3cabe5e339fea0e430c0a

SHA1
066b649ddd02c8b150fa4bae465781b6faf533e0

SHA256
4e341d909999f646d4a788078d9bc24f4f01724ef1aa6ca2f1648984fb068497

SHA512
ddcc7a44e345225bcdaf8ef68bfea490db2ca7554a011c773e1058e7c8bfaa161cec4a927d6fabee59638d7ed5d7bb947d162000b3c25d9fea123029a8d611e6

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
cff44fecc88139021c65790c6d561188

SHA1
d14e23af971d5a2b5f096329c9134d76b874ef36

SHA256
4c949fdfb814ce8d883810e8829ace3d41906e59129c33adb717516e59dbe601

SHA512
6e772239afd97058ba4a4329ee78027c3cb7a1d81969e9ea551f4c93a3354e44fdbc025302e50451d7459776888d964dc9bf0c03beca5b3e0ec112b496f347c8

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
4f0cb5fb4d841ee52aa93ec63f24da9d

SHA1
6937cfe1222c7082586dfeccf113befe7b888f4e

SHA256
2c0e99fdcb01c2d6ecb89210b64606cbc8b9efe5f3879bd232987e915de9e9cf

SHA512
62ae286a0f0949ee0052497eb488763e9edf9101a06d90f64d21793c754da0557d5beaf57ec369e13f00c4cc0d58e8be2ce3fefc35ec84a41742bba6714a0be3

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
7a1af3c65168f41779efba3e68c39873

SHA1
119a837b3f9e2f7ace7a969fdd20b40b7b6ab515

SHA256
7eea0ee57a0b8bec8ed1b2c19a0dd002acc5ea0b17f081636cf7b6773f911b61

SHA512
7c0430c6f1eff14e3b721b19f4657a105138c920217ac038582bb26f8f93eed5afb61d81569cbbb7eeb2fbda37ccca627fff0e24dbb51d620a6e615bdd0a4e3b

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
b8853f5fac7140fac17596495596bda6

SHA1
e04562b98380994e9509bdf9ce3a2b4cc0993f22

SHA256
c77e4eff1dd2b10c8e3b36771860f543f3a676f04a6d300907101b9e98bdf0cb

SHA512
4517d758a5c62dded9c8efd67cbd8f9a400302ee0d8fdfbbddbb70fb7ea93c4ff770f0d76dd8df52177d20806a4c37ca57e2acbf009151ca8495867ff6c00337

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
b2cab4782f7246dc95ce1e31f99fb94d

SHA1
3166c20e592e197ebd47771f6c209a90b6200ba6

SHA256
8e6501d0150de4aff92f38766514c74a18d5a859f62c226784d69f304bbf16d8

SHA512
92f5e31683cece0ef7fb0f79841bf1ea9077c2d8844eb5f6ac708fc1d54067f954f5b61df7ee48a5a960c8ca3a8ba47e31e814069df56f3c39f29142d0f64125

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
4edec79d7d386c83d5f65fb1b4c8c12e

SHA1
87efe4e776d3b9ed2f04b8ef16517a2845c0747f

SHA256
fa5fc9b7c7701f8a39d3f28d47a822dc550fb333409b2f19ba028692cd1f0aba

SHA512
e0403cd0002f6cd24eba2635471feb15ec946a6abdc5168a72f01e333549320e8b7b8a0e8a28a3498996026c796b69274e052a7e0d33b295ba819edf9b6595a0

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
d054c9bc8a8f306ff3bf12768ae83127

SHA1
bdc7585e7574294be835334fc5a942f309126ce7

SHA256
42f84b091559266dceb51d8c6eeac64af1ed39217640b0e0c2dba8b140014fbb

SHA512
a9c90f86216ab958d934cc3f02123813770ba44de2538b2ac240db569429310bd2f45ee2ff3480312fcf64f1eb1611f9505446a2f2d65f5cd222fb0df533db11

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
48b1158cac383f3b9dfab4e78212b316

SHA1
d79758687658742facd4863389487254f3c0a973

SHA256
9e3ab0531200c5246e3ca3a0221e141259af6366ee82b28780577c8ec9e764e9

SHA512
e07ba4f9a8da6b2f293c5c1a4f0433b695d42dba312c31d2595cf7dd37f83f6bbcd1674ad4aad8876647244af07f6fef85ab3d378fcace6024584eaa747e7917

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
fdaf0ece38b0f0d5f4c6f5e8f9141e37

SHA1
7047060d3d0553e45030f7a2a36bbe5169b1f697

SHA256
2920b0d016290fdea5f4259809b70da63b93991d74962c771e5b8dcbce018342

SHA512
e60b72e02bc1c8208c01ebc6a865e628eaf6f723633054df3471621755d576db9ac37804f8bb1ae8d07b0a532e7f27d3d3927d08067a1a37f605a03693b9f759

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
ff5476dea3fb1068e8c5fed7aef0efd1

SHA1
cf14b273aa5645ea7af0bee10f520da72b676469

SHA256
f881232ec591507153354a419ca331e6dac7898774159800329255576237798a

SHA512
03d900b890bb8b552c574d055a0f96502370e2144193bdc1b2ba292a93f9281cd00f7fdb23fde3f94a38184246738669fd39f2b85a2321b46bf202700c99a682

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
555cd6c71ecbce056687e06ee7757670

SHA1
9a15db2b4cfe1c863788b3d76bff4b4b1d1c6819

SHA256
cecd2b2ad98ab6f16386cd0fab6e0b99cbc3f816ba4084e98c1fec5b6de6aeff

SHA512
5f0de40f8eab9a05f37a073972d1b3f2f0d9cfc412bc32f2966aa37ec2694997aa557a494f11f833f8777f9b351076a68377d2660dc161fc8befc6c7832560e1

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
4515174fa7a4a8b5ed82ccd256459a13

SHA1
a121566a0dc7678a184e5d7ed37c7f64246c85a2

SHA256
7e96393f9da97864cd624888eff32e14456b45c33327ab35d34dddf8762fc9c2

SHA512
e0a4f50d5bfe328b0b573f72986e34eb34bc6d5371b6760fda753eaf7aead83bd05f48ad3d116d09609911aedf6b5715bd64dc8bc9e4551a6be1b62c336a649b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
06af7fc0b234599f95413c78e6af7850

SHA1
4c228030443307f08e22bd5b188f8fbfb5121ac8

SHA256
6de750e5f9c5bcf1b928bb91e8d8c1400f5235d52e91f5d1f92428a6664ae00f

SHA512
f4c068064cd1225fc41f8768e9d2793c0ea723c47fdaaa98fd852f0b413e51501eeb12457c4bcb24ddd4f1a6dbc4f360981b9c7360adce4b6b00207c32175ec0

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
dd6c2228ec5fdbe1fe0be212953d3c3d

SHA1
e277594f4f5a0bd7b061510cc7e6f4aaafb3d92c

SHA256
8dbef8a6e7d5949e04af1d6fe996546d6fa6fbb69ec05874b8994da19c9d37b3

SHA512
67f2ea85f125569fb69cd287fcbc3be3dfca5b6c04b11f82eafa63743e316e9852b9c51e997fd0239bba43e403af2991d3c11c563c4c9df8594d9d6ee74b4636

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
d3e8d867b1316003c8ec992df1a4c4dc

SHA1
132faabb1687c6c3ccd9099899ebefd213bc9c35

SHA256
0e438140dfb177f3bb4769fc6cfe64a080e0b6830cd124c96331079bc8caf8a6

SHA512
99860f94e723059a831e7e67a1aae6a771dd28055903a6578712ff47121fcefcb0ff68589b60b932a899cd1a99402ebc0b49e6a2e72799520e6f6815842c05d3

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
feb8399c282c51384b901ceb5943a666

SHA1
a0074acc74dcb9683dce372524cf7bc5d31a6553

SHA256
f797f37ec36a363be15512a3c2b299de5904481412a7dfef09e0ad3b6becb69b

SHA512
ad794f24dc0ccc52d0e3b60070471f9e0772c4a8d466a2401d03bdd12d5c82d31ac99a731a36cef8ae3c12e4cdf63eefbe2ee4c9ce0a5e1899741997a3435592

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
1793c54c62ad374c2bda8b7a819466e9

SHA1
84328800957cf2a6aa68d3d4fa9ae22c8d681a10

SHA256
e89d803b367f991296694e09951a70bdd591c4d54e483dafb2052f52e9b19e4b

SHA512
ee76cea4a70b50c30db0689ebd28a72f114d331c4bfdd97a7c49c5f8a02877d2c074275c9decdf09d98f345a84a7157bcc295e1c2f3428c851c89615efdc31c6

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
6258c648df952fc0829e3014d59cfaaa

SHA1
464ee7bb75baa4be8e9dc065e6278f5b1d7c95c1

SHA256
edf8e92d5003ba8cd0840ab45ef7a268cbf694b191cdff630e0bd827966cad8c

SHA512
019f1819eeca8058ba65695694acdb459f1370b000b0f723814f3d24e8deac567789d36b2fd0c6af3015e34477dc8f2dae2c6ec14c926eb15e74740c59d4b740

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
b231fce16cdfea162c359b486097c017

SHA1
74620de97cbb8157ac4afac2f45491a95e3bdb91

SHA256
3cd1301b62be6a55b07c14edb7a149bc3a38afcbe62b91c67431972d398bb677

SHA512
3340a63e5f5800f02f5f2b12cace32aac3df89218ab2a2601e5bc63aeffbb33a88a5793abaeb6366c9c0dbdb8ca1634584187b6412130190b1e5703b49830046

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
edb99ee082cd179d9835b347e6fc175e

SHA1
94ce930f6dd258a702b09769007750399bbfc167

SHA256
759835fdbb7274d0481b957874880edb3dbcb4edf30fa6c9c0a01e2c0d3fe1a2

SHA512
e5f1dab623efafc87621bfe94581caf1108042876f4d57effe7fbcc97774cbdeef2d63dbaeab2830dad1f389b7a1194abf822bea4d6b16e885ab154d6eaa2c77

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
bde5a17c1b63c6e509d019753c7f6920

SHA1
00cdb618ecf172f39bacb69efd1ca3103f9c65a0

SHA256
e7e3d8187f39df8c85877662da841e2bb4ed1f9db695ace9fcce707e2477e906

SHA512
69ded5bfe7b99d5e8e4772c284c37185d26d68b7c4bc2420391a2e41153467dcc38291d87495f1db6d5195078209b79108011c7a095795df870ce733fa004b7d

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
c155d1344039930e2577345e3b716803

SHA1
e4d2fa15143d5e61be1de659f0f788e40b388da6

SHA256
0507d63da72fab4ba8d61b96283f173e7ecaaa6c0dc9df17ff868f000e7242cb

SHA512
bb6b95a1fe24cf6cc2d27c0acfb3ca87191b9d077b9b25742934a045d8f45cc7ec3b04b232080a922b52b4639e1396673c20af6f458efefdbddcdc74c8c2ffd5

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
8c018710419b056e02498b82dd9a1ae7

SHA1
77fb77e1e69dd1c36d3200ab7e9df6aa40b97a95

SHA256
ef394db8d2d96ad23ce49a3756c8d1cee093aa6201f4612df40a74d5074d0ac3

SHA512
e32e0ccf60c37c5d917ab0e16b8185df9e6ae57160b4494a2ff4cd92815b444b6924288a28982f4139c8766e37c5f5aebafc4edf889685bdd47472a4ca86c01a

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
6c85d6121c408676c5ff64ff27e78a27

SHA1
3543f7f527cdee3c5ce81ab20729a70a46bc9c4c

SHA256
8e2c7fef2fe14e4f211cd4fe0bc85ac1aa413adeb68dbc0e09ad9ca0ef2d94b7

SHA512
183d80c012a48c8f6762d1c9db47b55e803a62471c0716bdd6563302cc7979ab7cae1738e599526798d8a5287984cdb5a2cfa65b4acbff8d3bca150f4f5c3952

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
a18c3918ca42459352a49aef66e91374

SHA1
5b2379136e99bf6e1d510f0b4e562e0a3f00d4ed

SHA256
9f0e59dbd552fc1bb7080789eac14721e765bfb9db0f90b4099910889cf90fdb

SHA512
8ed02810f82cd0045e5b70a4bc27f1044bff7851f4822ee39489b2545ecd1480acc4bbbf5216148d3d198a25da733f3160a294f3275405d1acec4865e3ef4cc5

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
10ad93166fe2c5d404b8706dc1ab4d92

SHA1
2dd6fcd9127720ccaaf9b1a70760e24741a6b038

SHA256
78c081bf24f242be6dcc25fdb7b5435541021c66cb469a5374d4d0df605c14fd

SHA512
8a30b96c8d50f516ecc489a569bdd846a92e75c5cdd7a724f543d48e0bda12410c0711f74fac5292b89f0c324d5c7c55261e05d13bd7d7b328b12b406a2cfcac

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
921ce5c76cfa1d08661a48a0abec6d29

SHA1
a8f0a49481a2198524e16b25104078c05b9db0b7

SHA256
1ffc580aa9e5c1cfd31bc8ba95102bf37a40ed2ec961b1a62742c2298fa5030f

SHA512
28cbac8345338d94a313b83e744e01660a94ac798e17e7c4f32214f1dd0dc5049f38088638da4eb727739792fb9066ae0eaa5eec3691b6aaa0d99a9e511ffd44

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
4841cfacdbe4a7765e048d5132973475

SHA1
9811db6f20cbabf962970f708f763de83d0b8590

SHA256
0cfb724a3f7c192f67228ea9ac02cab6ec918f9f8fcdcf156800a21ca236b70b

SHA512
b759f79abde029ce5e77d6ae5ecc96a06652ef1ec04440ae054d306400dbf9415bd5ed8507c473058653a796bac88172ba33cd8beecd2012f9274e651e823f7c

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
5d2ada9f1bce7e0fce930b0dd926ccc9

SHA1
72f4d592495f5341a5fe55c29d0b5323adaf614c

SHA256
9d55b8c9bfffa1da7ce8c6317f6ccedc49840c2ef5f76d71ea930ec9ff102df7

SHA512
026d0903d063992066f2e1b61998006933fe1655dd89cdd8a5997df4abfc06ee96c77bbbff712fb6e36e37e990028918ed7f601550dd37b9716c7b6cb89901b8

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
ad0f33483abae80b441c7a9333259117

SHA1
fd8ba8d639ba566d381defd292528823cad32be7

SHA256
bad247ae3b819bdec54b49f4308b3e6bf837eb509305187f8ff0fb81da289314

SHA512
cd05582eadb10c1b452d42c84ca097d2fdd6e8cc4a5ceea0afced9776fdecf7986650a6825980369a7fe75eb02e9e366ea76f4a4a1cf2b4653081563cab6285d

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
a29ebede4c6f065785c67114826aa2bd

SHA1
cc0f3877c45728384387cf6f961bd06af105cdfa

SHA256
9beda22da8f998767c195061488780871c056c80079f8be65797f1fe2569436f

SHA512
45e070ac51c85bd47146319ac54a30f3cd1b8fb9125794a388fdd916189ee20c5841b4a71eab4db154266cf5219518ce6bd2d5e00d3eefbf30749a364a2b2cad

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
122e43ceaec0c294b0d3fab4408be5d0

SHA1
b7ad29a555b046e16e70ab8f150ba5fb17413d3d

SHA256
534ee4a14d35a1844af751edf14f7572aef15b52cfac0c40b5cc83b6e341da6e

SHA512
c953f381f312f7a7069b757034ff28c0a33af095eb080ddbde95026d4c6e656c5f2ebc3566c1d6f1b157a8187304068c70b5c958e647dfe78ece80607a28c967

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
9b32b5f7069ca3867f7b8d32ddafeb08

SHA1
174e230730084dfb6a3f1a75885971142091bf1a

SHA256
1fac11b3865d51e29179922046d9c3bf34f7778f143a06b53d9eec9d8bfe98f6

SHA512
df70c7ab001719489f9a9c3ac2cceae1f3cf2595e9b354d05dfd5f026ab21b17a38fe0261438550ff5ec0f070bf71e05e604a3433653e5ae39d09d76dd1efbe0

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
34ab2e441ef39fdeea2a1c6867391030

SHA1
b61b9f18003f8c65af8f74fc285d1e175cb92f97

SHA256
e06fd3d90e685881f0f1fa83d2e677325306728fb2549c2967ebc155e1ae6707

SHA512
a2b8efd76deda094ea74173c50346cf796409fc77faa57e3d182d4ec0ce710fc5620c2a49f33a90048a4f6b4a8b0d7595e909a07c578bfd31ae584e53cbebb25

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
87680107b88425c6990d70effac125fa

SHA1
7be305a3fe4b9ba77ae81d2320dba5b380c0faf8

SHA256
bf85e92a78c0e1a1dde3367eb3ad3dbf5c52a72adc0115e8d4284c0b88820a68

SHA512
05e0b977ad0c6612e85e4e662cf6340e9b28260c6dd1008756be4209ac60d13fb8a339f8a621c38eb2155ea66d1a677ed92ddc053f70ce91f0298d59ed972fb1

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
af84d30dcde1c64b31cdb454bf2ed312

SHA1
f61035c13fe4eec768fa4e544a919e78275a9819

SHA256
0c1a4c975bc892299f8ae6cdcdbb2ea9e01af0716cbc6e3ac80b352c0fdcaa69

SHA512
ac058df8782c44f388aad75d379153a23693d985cac2f0f0dfea27dec46ffb22e50aff74dc5bed7d7506db63acd084b07c82392bfa84a5f5c710650a93f249ab

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
4b91cb2ca087683687ecdb805fa8b613

SHA1
c1450c8fbe6fa2064b0ac862268c516e97ae2c39

SHA256
2bdd67348b3bfebb1db80ed72af01b9534dd51937088caea1681a740d28e67a9

SHA512
ab9e8b37d247b3e2c521a315faa15693e52d490cfc75e355c4849279bfabf6895c37b21fc3e3a387b6fc3126f4668b310872143e59c28a528d7bdc6ec326f23b

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
f78b4e911a4ab39a52087e9c7c59990b

SHA1
29b65509d45539fa9787f1d632d5f9c7f4838655

SHA256
3e63b67a4c452fcca91fbf9d31c769cc3594158d46b99c4cdf5d732c4bfd02a8

SHA512
ec93d95eeeec32d28e6f01b82365f083b92c9069391513abacbc00173857b593d1e62b36e619e6503c39a172aa787cc1d47d391ebe70262a566d05a84995828b

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
7cfa1f8a8239f8a6895f6133482c861a

SHA1
f9c0b47024a91d76c769ee5ab31d80c8cf699672

SHA256
af6459d7278094867df8af4b9b4e0b004419b62314f060caef10bbc9d70ddb73

SHA512
fba99bd37a5382e6b9d9a2434f1a2546d8dcd2819a71d91e54cd33a088a78a04d3bc10abfaeedfd7621dab07908cea5a48739c54ac2e020ef0289e512af8a618

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
08796bf0ea8679ab8df0b7cbcdec8235

SHA1
c0f5e9e83bc65a13159943a6e6e510add030b9f1

SHA256
362159d1caffd110f9f03e537835d1dcad9da0814bf4d71ecab8b625b897219c

SHA512
83b2479ccbeba41f087c8484ca9a4c8045e4963cf529562555eef46b7244ba6230353e31cc869b00bf8e3fca7ac5b8e1ada2cdc96b3aea739efc7769695a1b28

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
f3312db596ae4d53067ca8aa1ad1781a

SHA1
f2ae56182b0e8aa82cf11177a1779ec10de220ae

SHA256
22371c4622ed471e2a947a75787d30170c8b59a7832d533472a3d45c4b5b57c3

SHA512
ae697d2dcd73e092df5c90f583ba7a024a96332dbc146ad71d2ed3fc544e22ffa7d9fe32110eebf6920fb0af451f0c217f171f74a9f4ce3f4c078fd784140544

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
162986ebc1f7e9199f1eeff2b42c00a9

SHA1
a4a465d752f8a05df0c0fba05ccc21867a44c294

SHA256
b4ff198e91ab50c5c9409b1f5e706d11a9f23428b92f988d2cfbcb37b62b1eab

SHA512
c3532305c7cfde21a295150bfe8a11650c25180e9b3dc381b327d6bd06a23f42f5a487b16f44877484579891472cf5e84658676ea8fbc1be4ed141ea599c02d8

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
ac9d6d40966b5ad9a066feab52f6b7d3

SHA1
36656f04bc43d73405aee9a18c122af414156117

SHA256
258fd90f5bb9e4e59656e20eb8f01eaf9e0cb424a3a26b2fbc630099e3c946f4

SHA512
479002feeb03f85a40cac971c0e8511e7ee4830c1f772238c8a034bb7654b69c495224681881d8d02ceef7dd19696bb3b5c21fec9afded19a9f80144918a8b4d

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
7e071cb80967215ad2520c6f1b86cd2b

SHA1
c11f34b58c007f0ba4dd1001ad361c6e4ce6949e

SHA256
c318693961ce6664107fc86f7930053f6a2c7575ec48428e5856dc3a2eca8e74

SHA512
7b39a185c99162c67f2e084a3c5c700db35baeeabd6d51106f96d7a349e93d8da9db90b89f02dd7662ed8e7df298de8f2b2b063c79ed84ba962d846b740632ce

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
3a85082082636ba9a15ca81b36761467

SHA1
e32443a3a6283ec56039b060cb90491b5107c832

SHA256
b56c890d863dafd0c0ddff37032720aee3bb7b59ef90266bae2fb37beb12255b

SHA512
924c3538bc90da1c0f96567fd3fb022efa781f7d2f156ae7443715e1d345774db0c3c3cf6e708a797e87ca50b437506e52d0ef2d93a5b2fae98f269fa556730e

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
7dd3ac385051a42b9c825b29ce28c695

SHA1
5a840eb14d0fa61be85c6093e68744a9e15f6c51

SHA256
2c19bce7bf827e720bc82a366ce205f8792c1b19cc2271ea9b238dfd4c740d75

SHA512
c48c98b1d1f93a6527e50511e5e879cb155eec601f5534f9f3445b839d72440254440a0fce8b7b9b222fa216ec1c3740af4249d446011e5c35acf0f5f67de73f

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
6b428e00b5aceba3e6f1511a13ea804f

SHA1
7e974a5d782ccfda7b9a288e378862460b7e9c4f

SHA256
44049a1f89cf75fa14bee91227c7f6fa0914d1d66e1bcf17e6ed80cfb376d3b8

SHA512
f62706e28cb10436d06b30399b5a3d0b3d2808dad476f0eeefd6b54186c7985fab9c51c3144dad0bc52d91af9a1bf067b6c7223166c26db1e183a2b30a07d7b9

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
1e25c290344f9e51cc6741bd343e806f

SHA1
007e047eaab771895849c97519a97755fef3d93f

SHA256
8c48d8ddc25a262da31624a895347212553e0ce3f32bc6a671a00a99a41f434e

SHA512
b3cf88c7e327af249db36df9f18152d424d9fb84ddea7d15f9dbba751a1d9a43ba94032c8ad4c8e38613ae605aa6a847c27931688408c6d05388763401f735b7

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
15dc1abfd3e3cf25274bb8ec9e52f4f0

SHA1
804851de93e284a688fff1d13adf379c35b4f1e8

SHA256
073d6be0fbc285f59d8627f968f0c10731d9e66f360fbb6384c5aabfbb13502e

SHA512
d459b7a48b6006e45c28c1e48d46d1fb7b3e20a7d19cb28eee39206cbc520c6cc6b8fd24da6a58748a17db9d6169863b72f9794c3306ae6a03eac346698a45df

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
7ba0c7a24ee26f5b3c377ff7ff1727f4

SHA1
882a8ae2b86342ea7813e510c39ae397f9b7b6f1

SHA256
5ddad22673fcade7f2e33a870fa376f46fdac56e959c167df8c31d6b8bf26292

SHA512
ad4202952aca89cc4764440ebf5c9da7d8ac245ed066ae521f683ef11a21b5e3990cc4a5cc10ddc689654c3cfb20bd149027c849ce95159d484174d358ff67ca

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
ff619235b481d61dc5d44cb2e1d289f3

SHA1
0b2711d50c80514ae0850c798c617c1767730700

SHA256
aeec24bf94e7972413257408567d738df2048d620ece45e9d03f89fe4fc140cf

SHA512
2e4a1182df03f300407fdfe17a1d6ff384584818cf0a16c6f0fce4b5a79d6ef8cbc857e6a9744422b0c1071283141484e9273e593eff0cf18e07896b9e37b632

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
f52c6f676d841e25d519fd3784f37f4a

SHA1
693a3a981dfb35ae07e825c743c0d56a143adc06

SHA256
087fd1745f927c4515e93168024508d6e655c38947771afa98aeb58cbdfebf96

SHA512
4b772202cbd8c02535f6ec080615e2f75282fc3cd73bed5ad8a119b66318430973b8263ef4a1b8df7145aa1e858ff0dfbbd25ac8a6095d314416746160fb100b

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
a4d92322269d4f689e91d76f986eeae9

SHA1
0bd1f1de0e0f961893c3cf901546aeb5bbd4469a

SHA256
4d2dd00e4df24d426573b12d898fcf345979e4343a6bd7c94369194212014290

SHA512
935065730b15faaec24a8f7f9bc7d68c224ab8b0c454a557f69021c8436317cfebc46988892479db5900c4699b2efdef7061d53357e4546cb613adf538484337

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
52b077a500fbd76f50b69bf56de5f40a

SHA1
64421f3d25d9694cebee85ad4c5d2fe8dc1f728a

SHA256
9b7ce42b23b80a32adf87b9f1fb9610aa8035c0a65de27ac4add078d4fac0639

SHA512
bd1d05bcb1be517e20e24ca7b1c1482986e79e09ef2f4e58ccdf7006c87f02566260badc053ab7eea7cab36c0758e4130a33368d97c871b1939c89e8206bbe8d

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
34372870d9663e44edeb08873b04f5ef

SHA1
86fbcae666a10deb1dcae772c3a2f6cc060760b1

SHA256
d00975c8f4addc629b27e24d0326bbb87a141e150421a832b2dd52a042f15da5

SHA512
c345582f596d4afdc3b729237598303939d8f00a98d9d945054f23e86683093a94f8d6865fb9fe73c7073fd8e171dd6c691fddf610a3d57e52711977a3424188

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
6ee002e05371997a9c2328d6836dd0e1

SHA1
325f318f492959dcb9da4c86d536f6ac6761f5df

SHA256
a072a53d39ee1981102949cdb23b3381c8e7ab53c8a678d7f2a54411f8d0cd7b

SHA512
a7b10a0971a1c86fc7de9a9482eff568acf699c6b956a5b793eac7cfd83f05c278b2ce1faa21b8e12feef096ce17d34743a126aefef6d5b9201d4b03f647d504

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
91fa1053207971e936e6bbad0c7e8c27

SHA1
61a6300d327ae6eb276c6143f65a58c8f269a67e

SHA256
f26d98cae64be561f1260f5cd1c2974a6dce9ffca484461b985ae1107198848d

SHA512
b2794993d695cb6950eaa65eecd44dfd4f8ee297dfbd0ef26532fa9f60639c466bacd18e557798e3e28535f4812f1e928bd4862d6bc39a3f014465836d88b832

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
a7c276137c056934ab68c304c319033e

SHA1
b34abf232a61e7e11a2c9c1b777862a7290cce89

SHA256
8d4c88156d0de75e86b2f8ebadf8865f2eb56416b6cce1241fd69e0d10a5108b

SHA512
7742027aabebcc76c7a64e5f8ff00c0de5e19f3a8d7e25dd354731095cb3c02db3903f5f0bbc37f61d30744c94fc4e3b4aad1c2b5e666c6769c25245b5716368

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
9c7705471ec2a3f6d6d50aab780f2dd3

SHA1
34a9a47603ef94b30ec5b9566e980ace3b8a1215

SHA256
d895c139325ae22213dcaef7d3b2cc745d5eb06b4b690e068364b58e8c9bb3f7

SHA512
ac2bc1fd7cc5b98eb22f0968fce395d22df03efbdef8f149f6eac8fed0fc1f61cebf14d4eb425804a5bb6ae139b1fd894a634fc2256e13064f1e7fa958104a0a

Download Submit