0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
116s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14-11-2024 13:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

613788884CE0093F.exe
Size

137KB
MD5

0b6d033622c9ff929e98c5ef7e2f8860
SHA1

ece019cdcbfab97462461585c58a5cf62bc5deb6
SHA256

ecd80e30e6bae14ca7c1198e430651aa297e01361a0508acef591adc0d50159b
SHA512

a5308bab575e87825cef01ae01ed8da84e1d42e588509b7bda1e8f4ffadc5fcbb39b9c5d6a331d508d74c12ba077cb303706537cb15662076a1fde86106b73e6
SSDEEP

3072:hLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8h32bIoKb:hstYrEMw6Bxk5zOFNtgJ6CUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 613788884CE0093F

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11279) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

613788884CE0093F.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000\Control Panel\International\Geo\Nation	613788884CE0093F.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

613788884CE0093F.exe

description ioc process

File opened (read-only) \??\F: 613788884CE0093F.exe
File opened (read-only) \??\D: 613788884CE0093F.exe

description	ioc	process
File opened (read-only)	\??\F:	613788884CE0093F.exe
File opened (read-only)	\??\D:	613788884CE0093F.exe

Drops file in Program Files directory 64 IoCs

Processes:

613788884CE0093F.exe

description	ioc	process
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.SkypeApp_14.53.77.0_neutral_split.scale-125_kzf8qxf38zg5c\Assets\Images\SkypeLargeTile.scale-125_contrast-white.png	613788884CE0093F.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\INDUST\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\index.win32.bundle.map	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\GenericMailBadge.scale-100.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Xaml.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Tw Cen MT-Rockwell.xml.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\it-it\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_Subscription-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\plugin2\msvcp140.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTest-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxBlockMap.xml	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN020.XML.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-variant2.gif.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\ipsdan.xml.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\notetagsUI\styles.css	613788884CE0093F.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\javafx\glib.md	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\ORGCINTL.DLL.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\main-cef.css.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\pt-br\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTrial-ul-oob.xrm-ms	613788884CE0093F.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ky\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\LargeTile.scale-100_contrast-white.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\wpfgfx_cor3.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\mobile.html	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\System.Xaml.resources.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\it-it\ui-strings.js	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Common Files\Microsoft Shared\ink\skchui.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\MedTile.scale-100_contrast-black.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\Doughboy.scale-250.png	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons_retina.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\SystemX86\concrt140.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTest-ppd.xrm-ms.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\ext\sunpkcs11.jar.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\SkypeForBusinessVDI2019_eula.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\ru-ru\ui-strings.js.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\pt-br\ui-strings.js.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\EntCommon.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\SDXHelperBgt.exe.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedSmallTile.scale-200.png	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover_2x.png.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Windows Media Player\it-IT\wmlaunch.exe.mui.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNewNoteLargeTile.scale-200.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-36_altform-unplated.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\ReachFramework.resources.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\LayersControl\ThumbAerial.png	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\en\Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\notificationsUI\notificationCenter.css	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\en-US\about_Pester.help.txt.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\dot.cur.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.fr-fr.xml	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Trial-ppd.xrm-ms.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-140.png.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\MedTile.scale-125_contrast-black.png	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\da-dk\ui-strings.js	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\es-es\ui-strings.js.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-ul-oob.xrm-ms	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.ComponentModel.TypeConverter.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ro-ro\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSQRY32.EXE	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\TXP_TicketedEvent.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\en-US\PSGet.Resource.psd1	613788884CE0093F.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

613788884CE0093F.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 613788884CE0093F.exe
Interacts with shadow copies 3 TTPs 2 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Direct Volume Access
T1006

Processes:

vssadmin.exevssadmin.exe

pid process

3692 vssadmin.exe
3408 vssadmin.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	613788884CE0093F.exe

pid	process
3692	vssadmin.exe
3408	vssadmin.exe

Modifies registry class 1 IoCs

Processes:

StartMenuExperienceHost.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

613788884CE0093F.exe

pid	process
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe
4556	613788884CE0093F.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

Processes:

613788884CE0093F.exevssvc.exe

description	pid	process
Token: SeDebugPrivilege	4556	613788884CE0093F.exe
Token: SeRestorePrivilege	4556	613788884CE0093F.exe
Token: SeBackupPrivilege	4556	613788884CE0093F.exe
Token: SeTakeOwnershipPrivilege	4556	613788884CE0093F.exe
Token: SeAuditPrivilege	4556	613788884CE0093F.exe
Token: SeSecurityPrivilege	4556	613788884CE0093F.exe
Token: SeIncBasePriorityPrivilege	4556	613788884CE0093F.exe
Token: SeBackupPrivilege	2984	vssvc.exe
Token: SeRestorePrivilege	2984	vssvc.exe
Token: SeAuditPrivilege	2984	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

StartMenuExperienceHost.exe

pid process

4052 StartMenuExperienceHost.exe

pid	process
4052	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

613788884CE0093F.execmd.execmd.exe

description	pid	process	target process
PID 4556 wrote to memory of 1576	4556	613788884CE0093F.exe	cmd.exe
PID 4556 wrote to memory of 1576	4556	613788884CE0093F.exe	cmd.exe
PID 1576 wrote to memory of 3692	1576	cmd.exe	vssadmin.exe
PID 1576 wrote to memory of 3692	1576	cmd.exe	vssadmin.exe
PID 4556 wrote to memory of 3824	4556	613788884CE0093F.exe	cmd.exe
PID 4556 wrote to memory of 3824	4556	613788884CE0093F.exe	cmd.exe
PID 3824 wrote to memory of 3408	3824	cmd.exe	vssadmin.exe
PID 3824 wrote to memory of 3408	3824	cmd.exe	vssadmin.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\613788884CE0093F.exe
"C:\Users\Admin\AppData\Local\Temp\613788884CE0093F.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4556
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1576
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3692
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3824
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3408

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2984

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:2560

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:4400

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
b896867c4bdc44cce6e5654390c71e45

SHA1
1e62869d1c68e2625d7906c25ad6ad33a9cafa58

SHA256
dba3537ff7cabd3d6d8c5627d3f3bbc389dbc3c40efd5d408e3e25e20493a934

SHA512
477b79ff1364ee71629b8b9fed300c483f6d66ca92a4299d39ac9db2a37a3f6f858d2461ba960d3d651774397764d94a81f31a637699071483d717a7d9e83a3c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
1113e1df7b5d7d82b88956e1e4cd7502

SHA1
b2e2095b9317e42e26437a091c97bf014b5b75c5

SHA256
7df36437cb65905bd37e578de2bc8a56947b62923463252d61c81a81558946e0

SHA512
be0ddabc5bbbd31a22b5852940bc8cc959373c5f5361e21a102740bc4a0909f5ff01dbaa12a0db760a5546d99161b9cb056c0f2b98d8c276bd6b3d9428d33a4e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
a9098ac7923b592d7c800028a4ec2133

SHA1
d33d54ba494427e692d3397be5c7ad91327bb780

SHA256
2dbb57e32050f2b0856e45d3a877c0f0c6395af83bbac78bafdb8eb85b556364

SHA512
eeb4717a699abace3ea16f419c6cbf02d0e260f8bc145e0e05b71d6775c0d5696844adf9e1aa834f508a2b13b6434be919365bce655991737b514473d39754ad

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
e957ceee9e007fc6fdd3c6bb5bcda0dc

SHA1
4f83a8f8a9e80a7747f7f0a3780289a418558f9a

SHA256
4cdf776ed1baac8bd266958494616a965530ccd9ee5876e5e37e8d65267f9a0a

SHA512
9ece90728ccedd7e6e7c035327227254d433a072c8a122c0cc268fb078e21217dac20caa746ce67d63046b837f6c7a4a5f81603ac61902b4907764c65cb64b9b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
e71b7c47c5142cc9504070c66483a666

SHA1
5ad3ba4bf877d55df7e55962b921bafb1c08b01f

SHA256
f9179daf95efa32dad59e4a46483865c38e28599bb4df48b40ada93347e2797e

SHA512
cf07d69da75b103f852b2332b36d9244b27ca54651bd8421ecd755474c20b8ae0960b9a08d79e46426ac2ce00a1a3147a0022cc3f80233a5effc1cd4e55f6db7

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
541aa400745ff0fe87443fb09986c881

SHA1
be9ebd16a87d5853c3700f989d4150bd444ba567

SHA256
678b5f07782447d972f7b257f262bb70efa4a3b1149984637f26e2d5bcc8e1a4

SHA512
9f1171051776e429f8f2cdee8b848fa31107310e58cc51d276d27e178c82ae5dd01e1f81fd7e92c49def82cfb381ac72a674e2152dde71e4b82eea7f7b9ee122

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
62e627f88008b91fc86ff59981b771df

SHA1
d13f4170ebb8211b13419c00c823550a2d7a5dee

SHA256
7927efc49bb16567395715356feaa18d1b56c958b52fe149dd51b0803abd41c4

SHA512
2b5081bffe5fe9d2ac86fe4670946c99afecf87263d932aba75874e3943de22f918e0948fd2399fc673e64f0d383fff6c6301d5f841a5fe6022e1d1721459c5c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
52bbfa4b43683c2d19f57a2ecf34ee3d

SHA1
f9a91495f9420c15c5294891a8397a283f1fb44f

SHA256
02c3292f25001e520b649097f87f282dba8b5c32bee2639a97f9afe89ee7f4df

SHA512
96e560e101c046977472df097446ada04a2b53035efb90379e036bf7956d3065c0ea7c346b59ff1677dbdb37ee1f51c5188112402c5d78bc896f0663f89dc44a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
64a1dce13877d67947a9a9fa37558a63

SHA1
434f4b5fdfdd2d2b952478d286e32bed72ac8b7a

SHA256
5e31aa9da0862f29387f14e458e844b86e21ae92261fab3706ac4cffb06b5f73

SHA512
95cdfd2de3f94616e4fde397964f768c9ecdaf07c819747effe570bda2c60344b34f2863ac9a6b868555000a8304d896a2b556734eedd6295d5968c75867329a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
d36a2fbac3ac6039687170b1ba72c077

SHA1
d855b9c0d0a9490f2657d1cdfe0abaea18c42867

SHA256
578003ca4b5aff7194f03981d591b5c8b113d100ba956b184ad778aca588b588

SHA512
34283c81a83423bbb1eb3001f0da4be2f07c8ea57290fedd0c03bafb1a64aceb0294cb4b11eaf3a0b017f2f57878d3f31c10844e0566c9224c47ba729073757a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
4a33d5c8e5f5ebe017aa55d5f44d230b

SHA1
60dd29969145b197837147f3ee128c1eea263e28

SHA256
04cfd13265a998528a77fc40f6ef837c74e9d2eb86c234a0e9f482fc6ab2623f

SHA512
bf38fadb4a469aeec1b8f4fe8afeef039ededb5beb3296effea2627699626f38c7c89459a1f40dae6ad47a710941f266eed9dde9cea494c5ace7878867ee74ff

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
f2e7f1bf1f5b342d4cc159a4e339be9e

SHA1
cdc65144b369f5a0636dfff32a560fa478f704f5

SHA256
82cc823906edd6ea4540e8f820a10f28bee033d7e3bd751799d1f0f4eae235a7

SHA512
ddcc49ef5eb334b710e0566275ed70475b42f4ce82033518efe839027e4891f92e8602cfb63cd685013f2f46742b5bcaec8844397be37d5d2793a9c4b6690437

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
d596dd9fe071fb8bcda58ee082c0a52d

SHA1
c512782497284c665dcb57784fc8c84ac4b73540

SHA256
9a586fddc06cfe200144c62afb3418b8f5f3d8769bd7807ff0b313c272b051b4

SHA512
494967ea5ecef1e98bb1ae1bc483459fc357384ab7f7fc094b0153901909bfd416724e009eab791fd541f7402ac78568225e4a9090d7c5677769359a2fcc3152

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
d280a228ad6eeea9f32c8fbd6c4dccef

SHA1
01ffce78f98aaed13ec0fe879967e4114cc9b281

SHA256
c4f5648b39e5f1aba00e7e640efc68935de54952b3807d3f06b129ad286efc2d

SHA512
118bcadd7c5e65182bd11e6ad726408a86dd4074e7d136638ebb63f5cf3e11c2b115d2c33f58566c66f564441303701ea28e19a99ca2eeac814edc9fc375c3c4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
ca387dc9bcce8e3d572a75de398d7094

SHA1
3371faa363858931f96a127149a779767e3cac15

SHA256
1d57288430654bedcff9b5e1bee55da027fc85f0f281fad6db8433b1d0561a52

SHA512
850d7615c1f44a910e4327605b02b035066498ba75f5439067fd81b1bb6f0308e75bb8b6b3aceced9f7a47abf17fbeea2dd65ba9ea4de7a188c010f9d24a5fd7

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
3a3658eddf24a438fb007c862227f1fa

SHA1
ff38d15ad2629a152c66d20363397c90737ceb70

SHA256
626f524a79ebb0d3b2acd5e901c3f365b8bc87ea52bed93af2b1567b5053ca93

SHA512
eef665f1b01f9b188d660691a5b689768fd44f579cf0b7c0407f479d694f6f680da70517687c9109232143dbcf83127103dc7fdc1e4c8da0b35dc59e8e6b0f53

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
1845186f296b5dd240ba2fe1c38a4933

SHA1
3ec2cdc00910edb0da502566070bc955eaf00813

SHA256
05c45c6a86d309e67b3dbd8486e06cd1fe2025ff9882230c564043e20105a005

SHA512
81e406835610cdfb08ceea1998e42c399f1e2a8962afa5bd45b04d6c2ffe40f0a29791d6faab32e1963c7ed57d3194362df6349cb772d0019d206362d732dba9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
6a8eac6556d1099e66dbb29b4132b8d6

SHA1
39ed784258aa5439c853a0aa3d20d99706efa066

SHA256
25091ca195f6d74923947020aca59b031956db33800a34029e90536b499004c2

SHA512
aa4fc338cb79eb684eb17ba0e977146dde0e192b57eb0cfb4c0ec8db5bc5ef50e08f61bbd78ff7c14c869b38f6f2c230b4d52fbe2a00f0f5c22b6c98eb6f5062

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
d739f8ba73f5380627543be48848f858

SHA1
fe3523393c00a5eb123910e9b2ca9d7789b1ccf1

SHA256
787cbf5e63f9a0bae3d0a4d353f4bd7e078d689bf036bf65183a762e4af96e5c

SHA512
9579a124a77facc59767fa6e992289a3cf85ab9ba50957968507d21d7f48be926f342414fe52653b1d481f35964206521a16f85a45d3416fc96260601cbc9941

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
f6438a93a8befce8f2e7d41130d65541

SHA1
8ac1988f73f5141dcaf148240937de70c73556ab

SHA256
6f811964604bd1613720e992d3eee451108d28001fb2c71ac1793dcdaf36a93e

SHA512
f9380f15e8461b6454142c49aea7cc078aeac8da63e1c6022fd5fd4589fd6f8bdfd4ff87b64a3bdfecd4eded882ae19c0cbb89da87c5204f439cafa6629336e7

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
b0bcecbd84f9e206a38c71a6bb1d0afa

SHA1
4ac23b9eb94076cfffcd8d0a2af949d56447f682

SHA256
0d878212309dc3b98ce5dbafaacb19f0cf4bf76ce6c9f61fc103b9d165701e1e

SHA512
d72c9df39ed3c8775443099c81116354d0fbee06256fea4f8296753e970d0e64e32d7e78a58aaca74152b54c3cb9a39de3a911818279905f9e187720ceba0c1e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
2267c3013f3247e9441ced87dacc69c5

SHA1
f578ffccca249b1db93af95a29aa92c5e3ddbd3e

SHA256
99eae74d0be6d8793897406af6cde0c0fe56a39eab5e117709dc16d7064a1e1f

SHA512
db37facc7fddf03a67f10e8f7083b96a6f188065e426b6e29477275fc0f82721f91f80859a5363dd6ebc0e581fe1a1c4b45e0fd630c0ee0d594ff1b2b927abec

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
e1e409c68be56bf18dc7041b4ccb0541

SHA1
0119919f2492b7bd2cb5f7c17c3b3937762754ea

SHA256
e6a37d3434b227917294c11569aa4ec67eada5f2a79130668b8b3f6bdf5652c0

SHA512
426c7e8ae78bab0ce2a4c9be24cbb1ce4fb785add73942c20b68857325d2925c15e2010002576cbb57eb9ffa28a45fde12952a59ee0570e9df3d1920828bdd61

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
60365d9984b83d7a0f2cab171966a4e3

SHA1
f8329db5a2974b920af93fd9fbd59448021db4b0

SHA256
f7fd7c8bbdc3272765ef9229d6392efd54d48bd923f5795924ce6de1ceeb7fb0

SHA512
9b6ac446650ad6fb5642b7f972edaf3ea421986acae7659bfdec91adfa56ececf5062ce2779958c947c2ff3fb11ea4326ce74fc0a7ab137a972fd41540131ab1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
31c8534182e95f09e3e05e802d4a8f4d

SHA1
4daadff408fa1d0b68f0070f0501f130ec81b7c4

SHA256
c93b75344b075e3db69ba30756c1a51394e22fed35bde104412cef93e1e4c898

SHA512
10b62701beec0ad4c9b99f4d5ad82e9cda417a4e51d523e7d013cfb096d8af62a7abaac0d61d3c276633e253a02e2a6d899de6577dbe820e5c5ebf8de4da22bd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
753c2734247fdcbb8d0b85da322811bd

SHA1
515bd28f1b57d30280f28cd9d519cbe7b4ff240a

SHA256
5092084899f6e0461ea64a1f919dbbdbe5541d85bfb6c01973502d9cf1c23eaf

SHA512
2954d495194e94617a42d90bf1c48b672b980398287dc37f53a6fca2136b10dcb6907ba0db24b42bb126433c991ccb0afb987f7523d8c3749b81a5bad2b0f884

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
211405cede79326d4b38f49e31e488f6

SHA1
ae3816aa3761a854c8651c382600144ffd8d84e6

SHA256
805b74b7f9966791f16518084dfa0b5ebbed656f5c5f7038986ec1b17d00d8ce

SHA512
f8768c8c964b1c0ff8b167b6536d92642c8eac6f43ad738ac688fd694f7bdc42bcf5833619873339d836c15590e3d7107a3854b84187364ace45acb3bee0db76

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
510afe9f344bfeab880ba964d22cc8ce

SHA1
9df84763e15bfecc9cccb3148876b366224b0f4c

SHA256
6d4d17a66b1135cdabefc1e14770f9caf619a279a11c46e733af3af60eff2eea

SHA512
87e4450c5cef5b473d003ed0dcd0c1b816b4c8bb9c093cac33ac5395e5eecbd965c8bbc2eff20946ff4f4a8ef06a4b9fd2b4c2b9c35200dd69288a02c893c55d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
de501e0a97d986f753716a3906f9f01b

SHA1
dbf237870b67e80c42001f3ea693bc39d6d8da1a

SHA256
d597812787dc821b5138c565f2caf180136120e66136ec87e845009b9efa51ab

SHA512
0a645398499549807f1978f25d1e10c8efa170244ed3635ffbd6b949961782c6398c62813ae3a8d8146bfcaa292ef6a1fd44dabd7f5d9dde21bf8097fa72eb02

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
64b629ab22865211cd4975de6f9d39aa

SHA1
a1eb1e9195e4d8afcea6d053213e16abf6b58bab

SHA256
62eb956fd63becabcbc46a4ee2b2383dab7cc71056f474a807b1121103e174c7

SHA512
d12bc54b27fd980183eebb6a47c57c5a3e5c4f51be1fbc13b9c0dfb7eebcfbb4a7ebc7a868d03c31f597041f0c01a84701d884f1f2b23fef9f9c1a3a548df93d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
3d0d4d046165578be6d4d50338266151

SHA1
3ecea768f12510327bd17e73491cc48a51bf16d4

SHA256
dab25b93b4ab6571285311535e67a4dfddd685b4bc4396513aed2a8599f83391

SHA512
6bc1e1e596272ea7181fab469c15eaa319b26c0f00777b6089157fde4544d9f8139b1f223a5c8a4be3e40adf549e9044a4c63f7e6eb6b4c2c61d87e3618c0657

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
4c3648333702446e663bb95e029d1f60

SHA1
c67b93df21f99ec1a83335a9fc2d54f842831506

SHA256
ed8c01ab63b4136b21793556d0d8a2cfc2e66f0439aa1ebfcc193ced545c7d1b

SHA512
a1c59188125c93b4e54ce0e6dd6cb64e7b3d671d68c7a394ac8f623b21d6312fdcc10ca6df1177c51a1ca6a571b3c5fcb877225121451e1f35c9d4e4a0f9e568

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
85a9119ad38cd46425ee281206e22363

SHA1
c211276e23c3648bc66d88d5805242077ef26f12

SHA256
946b8f593b84a12880e0fd0d9f47a1677c9c50b2ebecc8c2de2d170c0f3b4c84

SHA512
a2fda73351cbda2769c757be517cbc81aa091fc8107c0181bf2f5c97f14bffec2a44f21b676732d7064c853bf3c660d0f7681e12231e71cba605443b28fb0ebe

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
4d98d7c90e5c26d5aad01becc25f1cff

SHA1
1a542dc4a47082541e356aa41b5c9045ec7ab2cc

SHA256
8da5d1f0929637b9802f36620efb28ef680781cb9fad4bf83a74740fdfa5283b

SHA512
cca2a42484bdaf4c2d11177380cf8d9305b96c4170774034f231cd48af2c92e363a768f3bad4f3d905bbf36cfdd53f69b30946d6e9b966861b23499eb66461e3

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
0c6d9f703040956b3da56387935dedfb

SHA1
753be22347b10eaa11d98a41c2b49c060a47fc74

SHA256
b74f96f7c12213e059772251d5ce45792f2e3564f1b068220b9fcad578cd6c39

SHA512
890cdcad09380d3f1758bacbf778b78c52713fdb6f5ed11c6e2701efbbd782442f88a78332282148379a053eb34f8fc81195a1660cec3e9f26478c8126c5a901

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
571a52bc91767476868c2507181c3ada

SHA1
65cfb04af09da9cfb39b93a5f8409993424cec57

SHA256
c0d33bac2fd02a9244764b81ebfdb764b8f71346084b3681f0d5082e0b6c18a0

SHA512
a6730c63e4c7a13614a543335ba76d7c1560ec15e0bcf843b57d1fe20ec16809589c852c7840a505558030015411b8e68a63117e0f0ece4051bc141d17153002

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
1136b54d28622f38988d48280eb29ea6

SHA1
3c4706d052b06c5de6ccf4315d2942fe262d3e67

SHA256
f32e1a57f1a43339e188196f92b4ad50b2ea4f020e9ebda8aa2256015c1a3041

SHA512
1b006b5ec28f6df6b468e4e3a4625b1b84c9a9f4ed87254028df098ce81eb3942a0a963ac98f44055627fb34192edb735691f01c2e9d7f33efac0aa9bd6b8824

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
d7580dbfec79fb00a05699704e7e7504

SHA1
33c43255f5f61c5322ec403330ce977b0ac334e7

SHA256
51d7e20e3001a70813312d5694cbe8fcfc531e8601ba8cb7d60fb63832872db3

SHA512
87e77a530414267b8027fe200c4f04e5d93db934c823dcf234de6a834a7a2ea9aa13e2af407a6a422cf78892e6303088965462f314a2eb41072793463e2de859

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
f60b3cd38cbc6d669d41057b0e96ae06

SHA1
beefc55b425f1536e60665a6226478aaac37267d

SHA256
be88089af7a6ee448e32c562d89135303a5bce6af807f012005b1d768669ec8a

SHA512
5a79ca838798c9df93edc203fd59508575ca1aef65f3c005a795d0a54324d305d2902a7e05a1d1f3e72f07432da2d194e696367df27787d9cc7dca05c52dcc70

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
bd467c649784d98ecad19994318a714b

SHA1
8d2e5c42c54af3cc7c28c4794d97060148152728

SHA256
a8e967f5530faf87f5e39a7d0dd8edf1faeb7ab3ff776e970574218c84399be5

SHA512
47eec2e4a6bf57cacc6a9a02521ed698ad7ddd020ceb5502dabe8582987f9e1693aa671f5f8842ccbdfb6d9050e29f60bf70f0db4e958ba1d8654a736bb684db

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
49f26119dd0d06770fdaff496278ecc0

SHA1
eebf04d37a3db3a4251b8057f4669f5a28e6106d

SHA256
2e3f61027c761471ed2059a5839b331f6e35bbbee94b022b0ea7c7f7491361f0

SHA512
c86b5712928aa0a530b4f349e16868175afff1ce15da19460932ff9ef05f8202d91a73e33770d7ef56b41e82c884146e3581031c05992494c8a9374fd742185a

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
c5bfb97c9a3f6083117e8a4444d06bc5

SHA1
3f92a94a441adc7355280a946fa2a590f8e8b234

SHA256
c84bb0ba9e8a512fca9ce3b1df337686b4e1feac0b8fe12f49c69808d857c871

SHA512
4acb598c7b36a1256fa60876576f171760dd77f038e51884012183fc5f30f8f3e14e80aedff6965bf0c6a2c2f1d62ae60e1ffcd22b34a6110c8bfbcf02506fc1

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
90aba74ea53f0e2768a4289149a35d2c

SHA1
d64a5932b60e229f6cb5496bc3f79da384fedc85

SHA256
3749371e29e534631b4f18c463dc825d38d7be1bfffa647d0b9666c4a0e3a1f4

SHA512
40ac94578e18cd4b4b5a0cdc5a28d171539ffb424c11c84bb2e42efc3978808cfba3e1e8ce41698f5f9d5fbd173e3b63b24c20df88becbd2bd62a15713d7c335

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
846a1c7a4affbc474c257017117e620f

SHA1
43aa8ac19ef346013e3bd0a7b903bc7e3c4b2b88

SHA256
9b443a4caeb09f066eb5beff469470152e27940f467b2dec0e320e5441d7cfa5

SHA512
3bfdfa353be27d3808df1f0ef50502d7846a6757132936323c96d7dce356c178429df06313d0d57b086932c7f5c828bdba7207b9b1a22fac54b24a8bae5983e2

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
494862969a8afdae455842b631e20c78

SHA1
ebc9bdcb927656dc9cdc70c76e2177d912ef15e0

SHA256
878bd97b791688c05c9d10402551247344366811c2d37be3ea4d683480509f5e

SHA512
3cbdfe83f7a57bc69bb76c75c49d073949aa66abdca25fb45f45e3c39b1c48a5ece8b6d31a4c96fad4ed6440acd81c44d9477b0f9b9ae26d3fdbf46cf392c4b2

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
b268d70f2d236d442e405e86b2a08af9

SHA1
5e3c585ccb08551375fc7ea37ba91209378c356a

SHA256
bd80376b985f0596abd264526c5eb8cf4f25fcd92250f8344afe8c5e70fd0b9f

SHA512
6bb10fded974e46c56e0fd1aa058363f0fc3fa0fd6a8ab4a43f0519c671bdb35cad938de842f0edf88630a4f22631918f1e1b661ed4ce504aa55e6f6b867f643

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
d28b72cc5f098b0cbb697f112b1cef08

SHA1
572e6df98fa509e0677550a25894ea10c82ecc10

SHA256
7e8979f461950346f76e7ce04671938d286039aecf46ed75337ae2155e98fd3b

SHA512
54936613ecbebcfc5dead3d702efc597ee45a1022a1af8d669626f5236e4098a61410798a51b77368704f635fc81704c242c4046aa1fa265f86eb4e13fa55aa6

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
0c3483901383b302475abee51ca6fc75

SHA1
1a794cded77c36ab0014fdaed83a48903d219750

SHA256
d150395ca2f0b90d12554d52fdb59334a6ff72a76c39838d4424a2add36cb390

SHA512
bcbd6d2fe52d6986e3680158489b467a0f197a70d20bbadd322361f6fafa9d9c68f8c8f2eea13a64bfe37f31c1bf9d2e550a25bc808cc41f6f239d352739a3af

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
75bfb8f980a90f1d8ec0707033961743

SHA1
2cfa8920ac28e47550e7b727d29978ced6474211

SHA256
9822779c439ce9cdb769e69066407502d3b12ddc9cb6ba9ad78b15d7c9239c06

SHA512
ccd3b6a7b67b32302a1d034f6764e0c8bbdf6bd446e62daabd7c0e662829f46e868ea8c0075c19b5d783f3c84236a4322c704b5f9960b7fde581a388bb7bcc90

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
97d03296a6501368a7e3fc5b0184b3b7

SHA1
bc9f38ab8a2f05ca6700925de3408daaeb1ca693

SHA256
d442b099ad9827a8f3c67aaa06b513b94246f6f7eab64461f902f222dcd92b3e

SHA512
7907256f4b49fa89bde4fa56e587fefce0ab53d6e49b88b8ae171416dc4b875cfa3b9c5ccd8767d37778ccb6245f675f35f2c665037a1865df5b4abd2f8bf0d7

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
756cdc055d88c59db07513cd2c999e97

SHA1
3d07392df6f6bd8d063f1e325a4474795af5a35d

SHA256
5b9e92a59d496bd64b317e38391c9896fb1f1e617cdbc56ea6046229f8f16ac8

SHA512
f32afeccaaf6e57974eeb8a28c308c9c9265e1b868eff02a71d5e95b01f59e68b04d14df10a399fc337ca0c3bda0bb2fea64c16585179894a0a6f0ba695f9cca

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
e8757e79ec501b502bb9565869ed45d0

SHA1
e50321a3bb86123cc78cd20d84fb7d4b4bbb541f

SHA256
dfd936851aecf6c03b5a86189ff4a206122f4a0fa9a63502a125528e9434b14d

SHA512
c3c4297601d8531d1ebdda3e5500f07314210fddf07626c5c253c14ba6bb54c2d26c4d916ccfe9e892a16bb2ce6efcf8f2b6be27d77746b7abb04bc31ecba27b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
3f540aef870b60e2c0f5b58644c12c3c

SHA1
555130a7f287463935395fc1a71ef3c4f52e4de0

SHA256
0bab2add772d32e24820db65f646348f6077ba2f5c4e60dab49fb607ee1221bc

SHA512
90550a3b0963bdbfde72b1291046704549a4b925952391bc815097710f173f37a5f09fba311e787e6002f0b78c8f7b9f575978402cbaded9441c3de71486fa60

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
d9af564a9d59b6dcec75e776badf6ec8

SHA1
81cae7d396e309b2982e03506fe87ddf91e722ae

SHA256
4d499a4dd6d3d2f3d7f62163e513eb609d5646e335f0e4877ab241c27f712fb7

SHA512
ad8db1e5efab581daa25d7c972db33dacce921c77d01bc2e8417bedc22add87641af931004a350a0e7d13ad3cf07eb51616a2acf99b5d98186646cc27c51e4f0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
1610b6f98a502f6f87f35e9f172bbe22

SHA1
0e5994c2abd184ce4369e3549b1427798d138283

SHA256
89eb989123523c550d3d0885c320e8f52a36a2ce7d9beb0ab8fbcdceea6729b5

SHA512
b43dfc79e78a4f5cbe7dd325e8bdbb2ff74d83719efc9d6598f82391ebe1f5bfd991b5f167a54aecbfd5eae57a3a60f0866b2db1256a1ba950745ddbff8c9674

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
fff135b79bab471eacfe9a828ab01a28

SHA1
459ef55a1e21e4fd5326c3fb0b335954adb32c4d

SHA256
62bfe2cf5c185c34a1a0573f8284a44a6714485400907f06cd3772e12698223a

SHA512
6a3abe51bdc432ecba0f17da27c1c993b42bd9111de13d6439543dba935a432ebefc24a2775f23f247bf8f4e52502ad9e52586fc36c50f96b9b18509ef42e77a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
040599f3a351d7511f07798f08e1ffc6

SHA1
0aa54c914f242774d88032d6c68f5ea986633444

SHA256
b33f06f2ce31de2352057cfa83d5657b71ef6edea9d277bbe3b96e215510c752

SHA512
b76ada16bfb1ba50ae80e8cc6b04c48a9b9a3d13150634f180e0566f8ae5e9a117aaf7a5db4d794341640b2ef1e64887df2cb9403df31f7c6bf44abd1d711af8

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
76615d94a356142c503f3b0aac2a35af

SHA1
bc40cc1e361f6cc77b76e29108d9c02e67d3b23d

SHA256
c7440df10f6c878a63ae8a957b1cec4927a7ade7f8ad9a81ffd6454dc16a8571

SHA512
3c24a936b30b5059239453d7c9abff7cf4cea1123d465750a8f8cee4d01fd64423f9fcc5d745a015c52cdf36d38eab84bbfe31b9a127c7c2596be37912a6f8ba

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
71e5c635287fbe689d51a8c3ad3a3a98

SHA1
a9952d535f707c03155b1a4b6100d69af69efbd6

SHA256
427f805d0567fd6005424c5c81531ed685de6a97ae3804398beec4c5c26579d5

SHA512
f56204ad0066e51597508099bffb6a44c820a9f3d112a439af7a17d780df719c44d546ea4f46f78b065a30d7758536135adfb50f9979b170ed4c01432851b05b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
876478fbe975fcfdeeae8514b363c054

SHA1
e7450e26d2ddb3258b15c40c568249168a464828

SHA256
21d5aa23b525d7291f08031f2024a4b4ddf48b64cd3637fa12bec8e2fe84d6a6

SHA512
8fdfc486f1fd3473dfa9616f6126ebc36b68cee3de33c5d7eddaa351e1305bb12e1eaf0d698f931d5958711ece9b8b596b11c301219e194627149fd4a8e8b95b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
59b4dac6637bd968e88615cd9e0a38d8

SHA1
94853779569c7a6fcfbd39ade4e03b013deae536

SHA256
da0925bac267c714928653cebcbb2243226ff9c3fc469cb38f9aba3929ed9673

SHA512
f02e8814607128ecd66e1fc34ded83c28e24a9a85921a50fbc833ae888911b148987a3326ebd91870f5436950d147b4fccda883d439e1ee486a29b43f7ac80b5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
ec5c2b06647d7a2c05632f84a3f780ef

SHA1
aa63d1c4950c3f8943e165c77c969f8961bc0fa7

SHA256
9eb8a64af3a5092900b1688b48a1bb8a0209515c99eb1cebc1af3ab145d3a946

SHA512
5ee2f6e1c3a1142e1ca2e73088e9cea6bd3620aac811e0efbb52c3634fdc4864092a013181d348a3de3c543b5608ff62d41b6470b83822cdabf8a372a8df590e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
45929c96f184b119ac1cf4c90c6861da

SHA1
4fa0c979e7eeeb9d05dfabe3efa4a7b09910cddf

SHA256
8228ab9d21f647343866120078d9a205fe02827ad116dcf7410c4d1137df2995

SHA512
0a95a0cf703c6bcd60ae428a5cee9f0a0e588a755f95eed312208bf72c73193619ae727336e8bbe9f4c06741ce2aa12a111442a92d38e122f6196335b5df7856

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
4307562ca9582f6e25cb0f09ff22f3e0

SHA1
f0d1212dac715a166c0e657ea6ee0cec13ecf82d

SHA256
0bd249c75a6c832f6cba3147d16c9169bed11b1a23ef96429be48cc51f2ccda7

SHA512
4d625dbe3ba036412f20e1a8790afd4c6bb20715ca641411e66a069daf1748b975eacab812ed5e65351aaea4e85774cee77d4c5ff6e0463e80aeea8b1441b468

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
9aa8b0a16d6647b3e5218facf90d92be

SHA1
5374535f6aead6640b60143cb77aae99cb39116b

SHA256
87d467edc009be8181b90fe1085d9f234c430cc4a499d35c87c97e7e490fc555

SHA512
bb1b4f1297848b6e05565c2fcd437bf66f0fd9aacdaac45a230c068e3a862581fca8733ccdcf60853c184e3205fecf427b1f573d544fc1b9cbe87d0562a316e9

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
6ea303191673fa199883367efc7696c1

SHA1
eed53d2ed74332109e773244df340f98d718909d

SHA256
c8fb351349f2152096d296a8b4771feff395bda782b1818bc9f46e71f40b36d4

SHA512
7a3122ccc8b8e08592028943fe83b7faa94e2a6823228a64071a0ece352098a21c1e47239911eb108781dedd0f4431591be4d8df2ff87507c36807d746e06b38

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
4d650433b3a105fddc3f39e6cdfebf02

SHA1
16e57b7cfc9d0b2ff331b2df5a37889818f048b5

SHA256
b19a3246d1ffa26ed44162a4bd0af1915f13c1ebe977d18ede89704dd8d82743

SHA512
76157da906ecc081181ed9b38f257bbda3c3f4438e651fcf6a4d8ff258385e28d8c4481f129feeb04698e639561612d8744f4102804b9cb3fe153dc59952d2d0

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
0894496a9ba1d27ad89b9c38fde34e2b

SHA1
a967612676ab017d7c0bc2b6f11a320f92838113

SHA256
098dc68276e10a63c2c377d520c06a29f25a4ef52c2e8b04a1ade073ebdd9a99

SHA512
8e23ccbd80185a3f838de624eac823d95c3c7ad345e1b2c80b01d9ec3aec1787ad1ea29bd779d58ad096b835459b746a0744ddbd06025bce885fd5b56c1897cf

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
8fea07b749a4505bf723fd2102a0dbad

SHA1
cf0ed37ffcd755f7b1980303634ca1f54eed19a7

SHA256
4de1741c9f0b0ed1839306bd0fdf5d161b5412e41d937ab51943237b0aa79813

SHA512
9bfdbe3c34f578d47a0ab2b5e949033b472f4270b8208b4b84dfec4e262070d3f12de9e79f5686328401f5474d3435d4137b7a3073bd24076e220337559463bc

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
3ee2568ed0e81cd8c6b5171634f8f0ec

SHA1
14276f1ba91972b36a3a505bda74ff50c0091b80

SHA256
0aae025aec8a7ee4b878b8733cdb50754369f0f15eeb280f8ff0f1752bca1124

SHA512
f831294a38eec7b1293e8585383221d20eb0191648e983decff5b8243cafafdb282188c52599dbb6facdceb9b615a4238c9d9b7f4f1c2c1b8cbf4018aa602f0d

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
ffe1860c72802a258b84b4c93ac6b21a

SHA1
ebf7569516364a4fe223074bec6c3838fd817186

SHA256
e73cf364214f8bb971b9cd626ed49bb8178541460caeb4f15bd9c47f5c74af0c

SHA512
83abfe59e5a4ecf7cfd4b8fd347677cbecef438cf670322cef1626b84b0e6bd05ac2ae62d8878919c6619b2ce29500eaab4d482d1abeb101294415df33369fc2

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
54b9cf2d8a4c17e55ebbfc8b9e0e0310

SHA1
410b72f486cf172333d600542c842736fd187e4c

SHA256
2323a0cbf23cdd861fe0ff2cf49a9c4b4e0a4feb80f2815762df25ab4323968e

SHA512
c6a5c9ec50ae40620ff227a330b3fb75d3ab42a51155dbb7a3ccfa073aedc583eeed100920cd52ee4596eed999363c4ef905a6758df638a6d2cb0d0c286032b4

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
ba00deda6d4404ce0b565e62656e2688

SHA1
028d1b21148e86ea05c0fe47f6a2c75010ff2452

SHA256
82dafe0a6dd4e5fb08defcf3815213af8a8549dbb99a90449e4c7c067f86a077

SHA512
f799b6439f8ce4936d4004c98be227695de1a7e1386e3f3dab2a40aa143d3ac37790c12bea968f4fee1fd51f0a6df7e27ccdd98049ebe72be307459ffcaf37a9

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
3aa9137845f79412a59cc5999391c678

SHA1
cb50399f218014da84976ac709b0435ff60b9141

SHA256
214835c916381d4b4ed35466f612fc5673f88a1331db19d77b2f15e64aa84980

SHA512
1c7548ce93106e304be21090ab3e6b91a0dbd4d4eaf18f9764f0e4a0a2298768e63a1fd4fd9f169c67d38dd0fce7ab60723e0b9c6074838dc1237017bae08eba

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
1e648c81851ffdb4007371f366d0787c

SHA1
3cf8a835574a4350d2d9c82305a15611a5b61345

SHA256
cddd9e0bd88e44c66086bc7e95061170a39507f5ce2d220106d0766955025e84

SHA512
39ff12ba546a77ab4e49046fc12691dca59395943df2e0ff9b8ffa7ecdae3d508c0c75c4b33184e3a28bfaaaba87035c80fedcd2c7f3e9e5afc7d7f196d3e686

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
31b56d9f517ec7ccc122cf7e1debe59e

SHA1
5d6217bbe7463363a2851d1ada5945899d82b60a

SHA256
0ff172faa2512838846dd42d834552ad82a75ed3cb70ea954a36c5d923eaf3b1

SHA512
a970e54b45d51acf2780ca52f83327b186f42fa4530b53fa2a6c907b0b32c5f61c8db7a76564634c33a481e237771f49d564c5233a4517b92109e230dd950cf8

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
f7b506690be14035101a22e7e06c222d

SHA1
59847b625f573b81fae7090a1bd40567fc9638a3

SHA256
bdcaeedc2011efab4ff61f1b044bffb7e48a2a44a979c94b84c9a6863b10b7a2

SHA512
4c060c165f3872c3546b5e2f64fb557578c60da8e840df8e78ed5960200252a4f4f577e7ada0b21bf3c28e3e2cfd968fffe08d45618747c281da229675887ae9

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
ab2a354850fb6de088e268a81e7475a8

SHA1
2f43189eb9d3bc95f12958b66faac46be8baaf68

SHA256
fc72e28105e8c6207dafadc361ca9024bfb4daf9514d4e5994bb5445fa9e935e

SHA512
772f4b6b4b3452484033b540c513e60a945525e97e6b4a0be166a6dee56f85a50880a2ac56148bd87f5be0f872859098b83212c98075a1035053661cc8ac7d08

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
3c901036f8df82c7f19ea08256e48a57

SHA1
b6f66395611d5751044f3e4b069d3dae2cc4a676

SHA256
ca0dee9f16a3f29c3b633ee78c895c854077d10b26444a38ce2dd37458091a02

SHA512
1dd30553cc222bfb26378419302217207ae495165441bbc88a3ffb015a08ea1038da9478e06d42a66c10db38626f2f2ccdcc913d365f4ed4257a9e609a53bd22

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
c80cf698b391c8cd71f87f0b1ff6eb96

SHA1
bd508e8a4bcdd7e6c259beaabbfa12571b83e306

SHA256
cd9c497c7c06700ab009e59bfc2526ab0197c2b496446e5d0b3e584b757c267f

SHA512
f6b21cf1669405029fb073146ec09af2b2062baa07925c2383aa2147839769de1b2c6675f79ed6e09bc2261ca0c9c6df25702f71954b75f544b2f9dca6d235c9

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
0dd7b8951bff9a70b3e5b8e60a69b413

SHA1
0f0b76c941eb49852d56bda9fda8f53611fc3bd4

SHA256
4c2c3aabeb65b3e1bfc284088b597d8e177ee59e52d44d030d795ca43362b6da

SHA512
1218d499c5a1b78af656d1707a44055e79a695a7a357440232b0ddd0070043348258fdc8f3fd27eacdf2cc2f7bd18e85112e30059e6654d2231a33af7b111bea

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
3877ac5da2873fd14da557594013a253

SHA1
0a7634faaa949377c05caf5a614f5243b59d4190

SHA256
2517da68c5cc5213f22bf1d3f4ac805026b628d6c71b01b359008af8c289d258

SHA512
a28ad0a1190945ced847e03bdbcfcaecdc173bc609817ee205225424404b6525c32364e09af149e820fc4c40e8a0f7f794056590fa0fe5303cc2eccd6e5e948d

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
38f7e4dee970188892be7ebe01f5dcb9

SHA1
a50cb5abc57c8054a03cb8e893ff9d4fb81df02e

SHA256
b13338c2411c7f0be21ad90bcb7bd6312471dc6284fa014d12bf9ab30135d5f2

SHA512
3e1f8a2ef5d08b6ef89c60e00311430e6a5429baaa6cea0db660767d2cf9a69eefd37ecf7e697721df0d085f93731d8c6e5899a30c60c55e702ddb7bfd24c2eb

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
cf7636d5095d1588904516c8e520904a

SHA1
dd8087e8253baccadb3dd81c8858c60b45385793

SHA256
4b798adf284dbfb9d954c9ce2318b9c0af6d0d5ee854f485bbbffab7ec7fb466

SHA512
f8db1850dd29d60b681cd1026027e0cbf93f69aaf2c4fe3ce61196fe0fa9893ab75a0bb109a3bc6db573b7be31b005c32093ac8805f6c484ef3015bbe497e3e1

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
cbc0616c5140992e76b5d33db17e0235

SHA1
fa030f0c1455b6e0f08c0474a630eb0a8813e7b9

SHA256
97bfedaf5f1c30f870b22b84ce7c7dd713d0d8cff1550f43532c9f256ceeec79

SHA512
5e8c37ea988ac001770db02f90fe3eeae43a4d642b1458dd73178a1c2282275c73f7df08f535076d4d1d6346ecc98a56cf9aed92864d45df8e22125ce80a719c

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
4dc93bc1ac22592983b4331b14bfbf27

SHA1
b25aa476fe580ef0f40c9425c2479bdad2cdbac3

SHA256
7e4ba89be431a17f2902f91fed24361e970d976cc6057899c765d2b5ebf98313

SHA512
12d4f1cf56ad82ab486d13c428764a46b579e480bf9f1bd942f9fcecf3fe926dc43dd6bd81ed43ac2857c2ffa3500f2d6c9484ab23e365866ad3efd4e81c41e1

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
6c81661c65e92c3989ee00f387ba9617

SHA1
73548b84b78675d61427c32976eeac0565770237

SHA256
02f3ef41a500daa4d1844b8bc94f21c3546f1c2f3346031b2bcf082b6c3981a6

SHA512
dab049c7408e878d738d982e8a930288897d92d3bf319dd97af451e0cfa35b8e83bcd53a945f4d8e9be2e35b787d265425d463430b1fda14565f776c662baaf6

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
97e01436e7f079284b0ffc7a7124d7f1

SHA1
2466982857dcde68467a9b93fae15b89bde118ec

SHA256
d41d6798a6645de2331de162e37fab5e857c3f0e07b6a341558c64d967c02f24

SHA512
cdcb8171c3f78da3a533c9ad6a597ed34a6044fceb8d3ba86c5d3b7a2e1fcccfd27cf42422f5908c382c44397d24aea6da1e6412242125309108fbbf099ed4b0

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
f8558c67b3a6a7e4ff61e5394e4dd9f7

SHA1
71f6f3494624aee1b2aef98444412d23d177a9bd

SHA256
00c3f93ca38afba26d38187717a7b63a7993ae19cfaa5783bbbdb2a7bcfd79eb

SHA512
2fa5a2c0c2ce8d1cda0499c7bf2335d6f97505046e3a64b4acb0efb918ab8451e587620be8278cb9c645f3e8e87077b7853f5fe57e39ae8fb96e2748fc1c2c6a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
87660c745c003f112e15bd1d8c8a01c7

SHA1
06a389d060c6ebca6159ddac72dcd9f3f9daff5f

SHA256
fdbfefce81e7be7083af67370bf13301029c06a4c0bfc6a8c55c9f8604e36b8b

SHA512
a63c33cfdbe8ff854c0b2de02bde67ba79ae98df24c9a73c18546b417d44d7c7e9b801872c17c5d78fdec4d50ac440b40545a945c84740c4933480ec1eb7682b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a7b7c964f565d9188164ccccc7832c3b

SHA1
a0db3553982df3c4ef3369a0b04db83103638282

SHA256
41bf3afc8aa1f6ebc61247b533f590b84796883c853fa1be78ddaa3ab9213449

SHA512
c4d9a97f0b712b50adc62e1e4fa5765830d69bab86a6e3def2583ab99cfdca1038d43f8046e99ce8df2f69d389651b21e171364173c4b7e8bcf66151de31a69b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
74f9f6d7a491d6bb53471b167ed60d17

SHA1
de5624658b9b60eb4dc20c52f5666b62a876c762

SHA256
2467a0143ea6749ef87a94e2c4172400c9595bb8b197fe98c228c629771bd1c2

SHA512
e5a12697815a5c8016c1f0dc794e60e13e723890342fc024888a10debba295f15c50a23379e0125f5b2b928a29314eb6abf50457f092de0bb4da6d9f4df0f2b2

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
00a65d86043c723ab2d72134b4284356

SHA1
6f8e1ebce439a44a115c5eae7a4f8c65d120c902

SHA256
f4f74da13be7928ea79feeb7fde5618e5266009785495b8570ac6d75ff1b530e

SHA512
f7a6583be5ebdf2eb24003fde75c5ecfac7e9cf9bfef63e83c2281b3845adb747b2758e886ee6e5e6208fa7a67551597a1fad6ebf49fdeba1e9861ce113cd235

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
bae4b08782857e12aea3878cdff1c71f

SHA1
912dec0f1e75f6decfe6f99c214707ca4a35ca3b

SHA256
9c63111fe53568a2efba9b6fbc9b75387458c5079eb6aaf1d220f2a1229b0414

SHA512
097543db9ae7aaf907b510665b8a58c4ebdc60cea3b8608533a529d20aeb765e8027c0cd063dafb1542d49723698bb2e9437c0b3c349b9b810d341842cd87ad7

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
a898e975f327df2ee08d3d84ddd39f42

SHA1
f5037dc233b48174ee16e9ecd5f639df8de82eca

SHA256
e560b957c69359423bd2e34f80416afae679ef02d0c8b33d1384c7b41f65a048

SHA512
dd3ad0dd6cb2a68c7db31e01efcd7dae114530ac7e09398166e4c18f167cc5a98f9ca0f49871bace0c2f7773b9c7cfd401c0d1963737838f6035c7ef21045b6b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
b38df0a55c97aaf9173df5cb7ea73c2b

SHA1
25b6c861dc21d690c182e2575d510440c627d637

SHA256
d00896bba6fc33a9d803fc3873e7d654e03c7fe177e4fc21272b3e1c6401b8cf

SHA512
5a9240eece47903a9462d4d3a228279ac4038bcabbf115c561bf0eede862eab45e1c3668bd5041b5d05c1589a4b54fa1f4ce7217cb4f23391ce919daa81e8b48

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
ca90ead13890a63a7f77d60632e56dee

SHA1
645d8ba80cc90832dc31a2df7ca5d5c421dfb58c

SHA256
caa735f1479c4cdd070f35fb4b623a967faca20f63504a41b0907eb16bf98100

SHA512
22b4207ee4d84a5983c1a91af6e6abe57bd29197667f6c37b510021574cd61ae3a117c1f6051fe852461e7fcc792b8f0e571f71993b2e170e0784a744f982200

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
a7f0079901c042b2ca28b2dbb34ad737

SHA1
5559bff4a40a3cbfdc5b5572ebdfc496d6e3cecd

SHA256
893cac7b4d187c0ee31761c3312de63965ee3260a0422f65b03bc9687c811272

SHA512
9ab417512bf4c5afaad4155b5d1123ab54bb57b2f65d81842ea40dbdc7abb41d5baf4afef21943ebd5a76c22ccc25078a0478d7424a540c310c518de9540f3a5

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
8cc280d209d3f32f75a672e6e89f4aa9

SHA1
ee003f9627c398d07f968162bb1cf8d58cdc2e6f

SHA256
b7da17356af4e15f3f024c2cf1099470a9a76d1d8df33bc4ba4d03a3b35482d3

SHA512
33163a677178961c3ad6b74fac6532d3a16659edbffae182966ad163ae1660de1a906c04346312a2c68cd624664154bc69f0ebceb53114139d8f0e6b2ec1b404

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
1407ac4dd984e5dab33800d6fb1fd718

SHA1
8dd26a6dee25b0954b1278ea148c113d64c7c3a3

SHA256
5834d1027892e3ef1ab5de7e79d886de9e0e2f1a422d9ab136e62906cf6a1037

SHA512
0ab421e7b4b912a1521e71ab05b728908365b0d32a17ce9b6503d214d07e10c9f3cc1894dfe8a2e2164d83b92c4120c7a88a8856efbb59291cfa1683dba22f67

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
f225b363d4bbbe288b833c3e487b9d3c

SHA1
2241265cd353bffa67d4ffdf5cd87e63caec0947

SHA256
24ae282640821ef184a3fe9d3fa15ceaa3e60f9fc2c704765c1c10de63fad0d5

SHA512
05d64e5c4bebb745e2a567b5d4c7ece2c4a39e1fe6ac2a27c44d851def24f642416741d3042ceb0320f577d0cee4b5df991073ec58808776f69f75769cac0839

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
f96fe6859e1341b8bdb1beec20ac39a2

SHA1
feb7810ef3023b5eab5d0ea42c2f1894b681f330

SHA256
83ddb9abb70948026dcfab5c830544f742cbbd9a6841b7a4bc7724912647f86b

SHA512
635c6cff63c13ed227de75deb94e068f8d0d4551046baa6204ca92c9a4927280566ee6382adb0ce7a204efefcaf8232444aa70d0720b8b143cdaf907d26de40c

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
f91712ff635f406308817f8c7da7f7ca

SHA1
6105423137757493197a1ce65c40c17e71eaa9d7

SHA256
22f6c7b2ab1837de2b4ce14fff1a0d44969069920c70d6332f5d20a9a9ba4b2e

SHA512
eb3dd93c9285e868b16b241adaadda2e2d62aa671512c24d9b1233cf8371ea2745fe04c2785170b5f928a129bec8611e83ac315c39a653cfeef15834b21d388a

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
e35e6d526578368af64fb30970f98bcd

SHA1
3e35ab40b742783e448b1a2385a98c09750f3d33

SHA256
b5d9145f282b51e0ef93a89c979bd8f7a8d15fa159d8b3dea5f6a36108d2809d

SHA512
ca0ee35951dc0b6eb8570fe2e6c8b97d4da849823ea0093e6cc3b1080cba22d236724fa9d7a1cf10b8bf01a8b5ecd9f360f1c9b0a177916f84fd1f0a04e3e128

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
48d7f32731391e0a77442ed2ccccdf44

SHA1
f36a2d2fa98ae85e083a4698907347b9f6bbcc6f

SHA256
ac2866000a859393b9b9e18c1a18583bc80c46ea2e72f7bd22674e926573e78d

SHA512
04f510c4dfd8f8bbac8b9408d681e9a23bdd739ccde8ac6ab6ab612bf9e74eadfe778a1ed7f66571679cbb76afd2ada174244bb7691e7cebf9917104cb21a9d5

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
d94c4b0c0ad39bc61bc5d68ff179f948

SHA1
2d7daef844d305548064a495fc0675b893eaee9e

SHA256
04764e37ef06bfc124f50868e532c2b63a7914df88dbfc556f371d30018c9cb4

SHA512
cf57cad755c5163603a6e64da30f695ec18710b68683b54327e900d95a659529e5424d3bc89e7dfecad63e55ef7bdd255ae25fceddd502e7752478c5eea782dd

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
3c2313182bff2ce70043cbe0c991a26f

SHA1
46f4f50dc90850dc036a3600afe5ae80d2b71e96

SHA256
2086bda12660a49f027d29e09f971e1dd236f54cbb06b3e852d86f91ad92a9e4

SHA512
9f7448728b467376401fa9195213bb20745b8087f747d6a241f7842b5f5f5c4df6b523fdc482d1aff9c900902d99e639d58737305f5645a6f4667a238adab4b3

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
53c23988e9a7083be0c92c56d57902e7

SHA1
8f4c1cc16ec45a749fe77fa7278b4a1a9d4e8ec4

SHA256
b8c74c31d2c72156f0dd58bc15c72475854d359b468530763d97082f6125b2fa

SHA512
aa001a397640a337e54da3ba2d4f6117e29706bc58db7a4c27fceaabea6e2e6b59e508b570197548f04154c9da2c8fe44f9666fe737b7939745d1a917602a682

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
f58e70659c4b1d433534b104dc7e6a01

SHA1
7ba7198265bede303a527def0a80c7366d18a8ab

SHA256
6cc0385c48588ba778e6c509ddac725e97189d3e7bd904901b8db6cb1927f83e

SHA512
25e79ed29eb0346b34c17275ac784aeb3b29019a2f3417bc51f231eef15f171a11ebfe9312e24018af51b63304bd8017f5c0f088ed477210886663777ec323e2

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
d8570e6de7367a361bd588ffc572608c

SHA1
c2b29c3a3de34180f8a873c9c0fb60b999dffc23

SHA256
057b486f6b39e3039343d830e1401d6888efe765326f37b01e217a81003b0d92

SHA512
c392b64d5a139b82e5e75be2c3181021a42007537557f613e2633f910b3bcf7513836ff03e390cb061897c4cdbed119147ed2fa5c1f3d70d14f0c53b922c0f29

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
e20c528748678a76a19c7a7dcfa90346

SHA1
a03128fbb5a109bde3f48937c943223d4ac983e1

SHA256
7020244f91d69d07aa9a53ca4a94076d27698f0f7cb7279e1b1cb5ca35e1039c

SHA512
6b8be95c021eadf4ea887732cfebda0f2bccdb365986a56ad2327f3a29f6623bdf6cfd7b0de15a531d4320390ee205f099a2b46bb9b47357692715b8caf2c6f8

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
2b5c24c558605886be0318ff808ed548

SHA1
98e961e47c48d2e2ebe5efd35192e2997c15b1d7

SHA256
3168c065c57cdd11dbb2d812eb5356028fb7000490f2964136fcfce6c67c3278

SHA512
d341822657e1b23100f9a2ca3bd4449dbfbc80e8e7bccd8a04c5475dc0c4164fae1fa8b0d0d9e667bf935a472f4b71582bb5a203638f234a2bce83a0a04bc95e

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
816c49a00534f2dfbe2fb867f14c3db0

SHA1
489251e017edb64cff8f6cfa6d35bdba07d6f7c6

SHA256
2e1c9af24c096b404668e7ef8a63d791ea0081a721dccce6ff1a480518bd5bb6

SHA512
6e592a0ce1322b086356529796e1882d949c0e06d370b42713b68ef4ae924cbf1cd975613692797cc99371d740834971d3960072aa1df80b1cbf848ca0c46d89

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
596bfdef25c1bc133a3e74ec40681ad8

SHA1
c4603eee7892cbbeceaa65a971a44b0789fac1ac

SHA256
1035561e51c9f2d7f166c8e3e0e232d190a702fb07f1b0a86f39310042ff0176

SHA512
79322021849584d6c2e42ded6af3055ea32b56ae141115e3ad57db8723a12a1b70ce6741b0f11171137b4b0f0bb441ca65210708f1d77c585f92b14597880a4f

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
37e43bde3c2cd528e6250a74f582085f

SHA1
437dd2815e4d841955a5c0583bd3c79e976c8916

SHA256
cd83c93ff24a15eb6913a868cfa24c0c698474fdd0a024ebe65a966534954526

SHA512
97e4dd2a6eab45a0b2fb139bbd8cd3c6c3dd99f2a3b67ec376939408e438b8a6ad257470ee732640072767aadf4bc0ba68f8a3085749bb0e02d33b30453de3fa

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
fc064eeaf9903f2102237b07497b0902

SHA1
a739338532500f952a38f928664a9476cd37e3cf

SHA256
1868aed19fc0566cca1f119be466ba3602c1da006a8e168ee4306f2342a72009

SHA512
13198e1c72f7a6caff4667794d0a98162d0485415effe0d0f9013d677c59973143e3f8844b32564fd21ce80bd66421e531dde8b3f1d6197ec81fb0b090d32449

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
60729d55584733985722c3c5f937d25e

SHA1
10a38bc824cf02f55d65e540a96a35c04fb04223

SHA256
a122110335f9d231f7512f71bc9db6ac52d4afea56403037d2f1cdfe18180ab8

SHA512
e1c003e483b322cabfcf828b78adfbd73b6db76e7c1227dba4eb224fe531db35e6ab5459ee8c8ba42215d8da53504738e714cd270cfadd1b6e40053cc013458b

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
54c18f2d5a4fc53a4e798526c45ac73a

SHA1
93da647dd4996bee6fb9ce05a168e64b64b3ca00

SHA256
d5982a68424cb1be43d71d294da9ee704dfa2b534785f08b51beb638877c6d71

SHA512
c9d09a0dfe8d21f12184162d93a8ab13075f11759e1c69ac7e336e487f1b4c8f72fdfbdc4af9c82f7204f1cb97562feae1da40ac0847f6aded34a67d5b2fbf3a

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
2063f2d7d6ffd9a9771f37a82f332163

SHA1
a87ebc477edeeae9b3207ba8d3932858421586b1

SHA256
3f79ab58368e5864b20d846cdf56c0536950e6665176207a0843c721e41647f7

SHA512
aebb310bd659c60da6bffe89225204f00fd1aac869df4a06fee53efc65a0a1142833ee5f57cf1804886a04d993cfc1de0525d878fa7b35e9d8867ea071634893

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
b234da83b6a53fbd6cdc76b2c89a5d59

SHA1
9d456afddd285b827d1ba31164b16cdfc9fd41c8

SHA256
93f49faef92192c0cf5dd18446aef6ca77edc0319a583524ff8f504de2344c1b

SHA512
1c0f98a712b2cd0f9e3c941aa42ebec06f7039832ee433cd68ce85844022707e7bb46f8e5df21d0236ad7593bc10400eace72629cb4c6c1f502b4619bc0d22e0

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
2a29f24f35e45d3aa4ddcaf265f740c7

SHA1
6c8e3e8869df77d829774b625e2b2b7a578ed19d

SHA256
61a09ea342ea614babaa4365a610dc1e295420e2875e58f4629d4b81fe2e2f64

SHA512
d006df6bee60ccd99ac963e1b244294e40e26938ac2c71d86268c89be2d8e96ac3c6f77654e073ab8dae0d8e956cfba9bfc903bc7b65b3d3883dd69cf4b36268

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
bd724228c47fcea80f3cbb55c3cab2bb

SHA1
a141b520e7418fae303db70d83b903c030e72cec

SHA256
e6e28eacd78d532f78745396450ab429cc74252ee561157ef1d3a3afaea05288

SHA512
6521cc46cc028306a3a7c6f3b39ac93dbaa0ccda1dafddd7babeaf9ef38caeed0798d5764a0ed08e49b9f4d18dc242c60c25fe25fde63d87ef449d46e678a67c

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
67fb46f30b5d987c736d80d2ad2b648e

SHA1
6bf20de127405c59e40c939cdb61119b8f4537d0

SHA256
a3753a0e8d013720a774d7fa40bb92358c06379ec646a541ea1ede0a632cabfa

SHA512
1f0326557dd2d90b01e07ce91d445b4fb694d9aeecfc93b5e46f5084412f3874c22b5cb238205dbad175ebcad5c623b321bd972e68d3c70d665c7f44d9c8d666

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
d27906154199b50c07297b1360b043ca

SHA1
3b6db08997bd4500c01a53a0627d5da607defe3a

SHA256
7338ac86fe8771a87086a1361f2181fb5f6d2b74fd95c143ff441439d7dc0e23

SHA512
215d8c237ec256a5be723dfa7a80a0ab9b87eeeaaa37f60f9a030dd105941e07717fd1f4aa098323ffb7c93e98b4c30644528915e81f198e06d7df177286cb56

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
4f0aaf73fc5301219b727418e7526455

SHA1
47ab3a05e7291f4769bf690226b0ea54bb6f9c21

SHA256
8c8e514d21742eca1a23430e418b59a41ae1ec021d600eaa08e76b9dcf2c878a

SHA512
621f220f6d0b89908264e2b50793af28f9d1b393602cf49bea82fe378c14a2e9738e2bbbc46202ae9171a7b7e796999df14c0dc53574a938d5103c4549f32011

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
14cd2edb21cb3709c588e40e716a6653

SHA1
ce25a4a3f4ec4573039f0b6ee39b7d58c5d8115a

SHA256
974ce6c24259f28d442dc3880dd289fe733624985b7c707bb30952104d357187

SHA512
1b43aa35f48d3c8ea71a46e973fc123590dc077dc0c737dd59bc4c2a9982b1892642d97c5803aae4d6346254dbea8bb84689edb8e3db9dcc072151dd1e074397

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
727fde31542c1580df51ed5c9319ec4d

SHA1
d6b231b284a5ce62d465a9afd5aabd42abd9ba0d

SHA256
96eea61eadbd0bbac68a5915be1bd627bdc8968b0356c88d4d6538e901ea3738

SHA512
365350dda617adf3b9454c2b6c532e56cf87b8ac6f37057221121dd885b9c68a7a9a634a06446c3627a59412ba6d4505147660c04d4db3605d7e4ad6928c17cd

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
65541ab6901dc92642006cb970ac28e2

SHA1
0d995e74ec0ea8288b202dc7c4779a87c4e550ad

SHA256
051f8e6936c21309d4a43701547cf4744f4db4d318303bf8cb3e8d3dbe49e259

SHA512
61dfe54debae38ba4d9b3c28792a37d0498998878e3786b454568f39786ef7ad8ed75cd32b91b942a2d5a80809e8f549ea118db69476ea3542380b696ea1c26b

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
236e285ba4494a0856e86348f3dc67e8

SHA1
ae65382a6ea32e7242a2a3b62f89629aaea1b786

SHA256
1b03e7eb925610d3b4ea7092781bf65d804a3c51c632fc2ef1c389c22d3cd19b

SHA512
2fce8e74ca367a9918c09cd285be1a35d622343155a958baeceaa39fe952929e6778896928545ba4caf42a7871fad1dd85bbbf5353aa2a17930fd950420d7102

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
696a0a129f8c4b1bedaed5ffb203b668

SHA1
c5e5752aeda495ab4fab601d53d1069933228224

SHA256
5303cf013ee95c345724d2393f2fbf7c20ea273021dd6276c98b2392affbc4d9

SHA512
4332f846e3558e2e87a2e021427b08f743f9a7dac2bd05f717bcc6c89ff4ceef2d4fd1f8de47ea2f2d3e8bbcfb6264935278b15b82abf1909336c1e0d156ea8e

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
f2f05c1c0d84bb1cc1e7b40ff27b6d46

SHA1
e31b535e187cb58efc984f211e2a7c8421208682

SHA256
e86658a783617fa9bfb3172ed51772178f4b29a9b8d9a714a3bbc286b4d4048b

SHA512
f2f5a3e4037cd2c5b6ab2ff5f80d10e311326dba592b07b0487aed26810f53ecc687dfc1d377bd9f25389d3f72921303227661c12a776ef48660b34b0d1c3731

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
e7dcbea5ae844769d7efde891b490250

SHA1
84e88b33df566918e7512026269249cfdc78a8f7

SHA256
f3696ae88131ef2616548a0a7f002260adf4598baaf4008049e89f2f8a11126a

SHA512
9f1cb40f1dc2b6c715d6f57dcb2c6dbc9506cbc69e34e513221fd3e5adc832daaf2bbddce13d31182b69f49cd35438b797bf83c405ccd1608f6dd48232cb45e1

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
c8a6a161c993cd46d8bde1fd62370cbe

SHA1
ceb59f11c94e42b8f97e61d09956e49f01f60430

SHA256
a08c90126a0cc6d01b6c76bd21423b6a2dd88f22b9f7c3f964b6ac35f14ec2eb

SHA512
a775bce1167463e82451cfc8177442fd5cb4145de68c5f7cdd9e6fa139c8c6f787400c5b21afa1b2eb9fb14f90a8732f9fc1931559334bbb7053e6a9ad93ce9a

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
8b6ff4a6d6f227969c1bc7e6b8bab5b6

SHA1
957499042fd4d7874ef309319ec8f8fa85df7a99

SHA256
b4542adecc2eda459f4c1353dfdc54867e699bbc3392db2a60b2d7f887491ea8

SHA512
aab0e633feff0c45574fe2d8c61b7cffc5ed2c873b9a89360911af1a73de251bad4c14298b37e84b606574af72f9b3f12ba2cae81db578432599e0e2d68b17ac

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
e3c7d92920f5c7f37b444f0719abcf23

SHA1
b850b9c76d9a68739f559bee2d0e48eb0a88e0af

SHA256
ac450fb0415e2b7c68a00e8c37687fbb05b330d5fa9a8781651a1d8c4f13852e

SHA512
9453f748749b9da36e535e8ffee95f742f8da540bbd59dfa0ccb6a2c92707548cc97f811321b6acbe09b1af0133c2e85bbf910e76f9312220dcb759de93e5377

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
0cc7f505fe8d3cf3029d934c411e6619

SHA1
61704d9106dc9ded59def38f4e5d87e98fd0089d

SHA256
721de4a4f718db39f8ea56a9e79408f23f891ae1401a8ced78782fa3cc31c92b

SHA512
91ecb0c1688474509f48b041be7ceff7c0343d60c793f7f073203a93a3b6d81ed201b02af287240cea395c9b68e8e124edf1c55727bf6fbcb11cf5d0319013ad

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
cb5432bb6fa74be5afe592acf48a19f6

SHA1
97d1c80764ba4dbcb4fbe7f21a8993b6efbfde7c

SHA256
bcbc3006a0a804cb237e755ce7d000c323f8d71945c0722833aa2fa884069fcd

SHA512
d1ca1baa8e21ee5b02109870fd4fb9cac3ae6d91d29adc7a5174b08e20fbec3c59f83f8219d4b3a4b350530e802b365e92a4638f3f05ef8e445f3a0806c72148

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
9dd4c0412b91c85abdcd4925e5a10577

SHA1
f34a9a8a866d410d03bb26a13652c0754658d40c

SHA256
b05da8fb81352f7f573a1f010068cf0346ff8bc370fe14ecef1da1805bbc3138

SHA512
deb3f6bd3a982cd5396de1239c2b7d63a6640608c9a9749495ad9c19bfe863106a153550d3535a7ca938cf6c756511df026ca9cc9a4b8d52424b222e69adaadc

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
a73830aa40a1c7ca00fe68ee4cbc4bdb

SHA1
f946b1c49d7f149aa0bfadebcc2d71b5706c275f

SHA256
47c4c606547ed578741b498eeba643d1f33b76b76629c6b59f4e0e422e440960

SHA512
72056ae81b6ee9e2d0719fb2ad1200f876d2c265ec9aa91f05aa62b9bc5ea5b1f2bcfc25e12ce2f8e338633df32b580791b69530e73b73ac3f344691a3f7384c

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
800c619d129acf489f2281442000c361

SHA1
08a47fca4c09d04547c58e0781bf59531d70cfd3

SHA256
8933465438adc5c5193eb7fbadd6c6e7565d2d460fa517d0bc8f21cee49f4a65

SHA512
cf467ba93136084d23b3ad4df5330c028ecdb3e93500196f57c134a7bb3719fe2d4fe0e0f378e8fe10937e9c02cca4b4192b6e54d6a18721ced257478ec12092

Download Submit