0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Resubmissions

02-12-2024 04:58

241202-flyd5s1jex 10

15-11-2024 02:01

241115-cfxc4swlhv 10

Analysis

max time kernel
118s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15-11-2024 02:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7189AED8B8AE6568.exe
Size

137KB
MD5

ff7559d2160f6732056ff5a19722e69a
SHA1

aed67bf0c6e521fc552cbb4afe24a1c2eb286da7
SHA256

c2fc050f33d51d5560da425d137ef1e318f16fe5d49ee894327e33c3e12755e3
SHA512

020825f085dc4b08f2454be5425cd937a1f146843b76b445c6d5993d0581fedf93f84742e64b2abe986a8d5803a62a597962a04821488dea771c5354b6dfda10
SSDEEP

3072:oLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hb2bIoKb:ostYrEMw6Bxk5zOFNtgJGCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 7189AED8B8AE6568

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11313) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation	7189AED8B8AE6568.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	7189AED8B8AE6568.exe
File opened (read-only)	\??\D:	7189AED8B8AE6568.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\MixedRealityPortalAppList.targetsize-32_altform-unplated.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-180.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\System.Windows.Forms.Primitives.resources.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\PresentationFramework.resources.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-pl.xrm-ms.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyView.scale-100.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\SmallTile.scale-125.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\da-dk\ui-strings.js	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ca-es\ui-strings.js.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\1851_32x32x32.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\ja-JP\PSGet.Resource.psd1.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\fullscreen-exit-hover.svg	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\am_get.svg	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pt-br\PlayStore_icon.svg.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\AppxSignature.p7x	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-30.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\UIAutomationClientSideProviders.resources.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\msvcp120.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Drawing.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-256_altform-unplated.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Help\msitss55.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\plugin.js.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main-selector.css.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\jvm.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\System\mfc140u.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Maps.BackgroundTasks.winmd	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\servertool.exe.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-ppd.xrm-ms	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionSmallTile.scale-125.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxA-Generic-Light.scale-100.png	7189AED8B8AE6568.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.34.28001.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\System.Xaml.resources.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Place\RTL\contrast-white\LargeTile.scale-125.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-96.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\newgrounds.luac.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\MixedRealityPortalAppList.targetsize-256_altform-lightunplated.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\images\file_icons.png	7189AED8B8AE6568.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-ma\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2019.19071.19011.0_neutral_~_8wekyb3d8bbwe\AppxSignature.p7x.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteReplayCrossHairIcon-2.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_output\libgl_plugin.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\GRPHFLT\GIFIMP32.FLT	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\error-icon.png.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-ul-phn.xrm-ms.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Grace-ppd.xrm-ms	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-black_targetsize-24.png	7189AED8B8AE6568.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\REFINED\biobio ransmoware.txt	7189AED8B8AE6568.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ar-ae\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_BypassTrial180-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_2019.125.2243.0_neutral_~_8wekyb3d8bbwe\AppxSignature.p7x	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Windows Photo Viewer\fr-FR\ImagingDevices.exe.mui	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square310x310\PaintLargeTile.scale-100.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\fr\Microsoft.PowerShell.PSReadline.Resources.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\VBA\VBA7.1\1033\VBEUIINTL.DLL.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\fi-fi\ui-strings.js.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square310x310\PaintLargeTile.scale-125.png	7189AED8B8AE6568.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\THANKS.txt.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\ja-JP\InkObj.dll.mui	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\LICENSE.txt	7189AED8B8AE6568.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7189AED8B8AE6568.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
2692	vssadmin.exe
2124	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe
3580	7189AED8B8AE6568.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	3580	7189AED8B8AE6568.exe
Token: SeRestorePrivilege	3580	7189AED8B8AE6568.exe
Token: SeBackupPrivilege	3580	7189AED8B8AE6568.exe
Token: SeTakeOwnershipPrivilege	3580	7189AED8B8AE6568.exe
Token: SeAuditPrivilege	3580	7189AED8B8AE6568.exe
Token: SeSecurityPrivilege	3580	7189AED8B8AE6568.exe
Token: SeIncBasePriorityPrivilege	3580	7189AED8B8AE6568.exe
Token: SeBackupPrivilege	1796	vssvc.exe
Token: SeRestorePrivilege	1796	vssvc.exe
Token: SeAuditPrivilege	1796	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4748	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3580 wrote to memory of 2612	3580	7189AED8B8AE6568.exe	85
PID 3580 wrote to memory of 2612	3580	7189AED8B8AE6568.exe	85
PID 2612 wrote to memory of 2692	2612	cmd.exe	87
PID 2612 wrote to memory of 2692	2612	cmd.exe	87
PID 3580 wrote to memory of 4824	3580	7189AED8B8AE6568.exe	111
PID 3580 wrote to memory of 4824	3580	7189AED8B8AE6568.exe	111
PID 4824 wrote to memory of 2124	4824	cmd.exe	113
PID 4824 wrote to memory of 2124	4824	cmd.exe	113

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\7189AED8B8AE6568.exe
"C:\Users\Admin\AppData\Local\Temp\7189AED8B8AE6568.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3580
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2612
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:2692
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4824
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:2124

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1796

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:1628

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:3284

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4748

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
ae49a60d61eca66fe68ae8f913ddffcc

SHA1
9fdb63d6d52c32a135423b0ffc455d18cca9c84f

SHA256
f6592f689485fa40782c90e1c1626115ad4826d56a56deb23ef5b87218e6b05c

SHA512
b26c8177619da98b29f8d9bc0915b15c9e7148371c322ccfafad0e56a78e5a3f577b4d21e4940258cdbc1689d07f4e255569303b2481fdb5037d435a9180fcba

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
e9b995cc5dd3a1aae5ae23c7932ca4fe

SHA1
7cfdaaa7a0029f158802f8a33ce5edbec523893b

SHA256
e1a276e2c3f2f8a08d1ddf31a6b5ee9da917a8c56ab3c9b55b502c20f7c3e8e1

SHA512
9f8a45931bad42d97ad30bf98d90d134ec2c23150d6cb8a6a6fe391218eb011eecfe0a6ff05992269954d9d395b1f9072dce2483ee20b8733db83ae79ee377cd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
0559d5f6b7ec8af6097661d1c3f23a06

SHA1
93b2868acc111bc9e4e73facc49d4c47062073bf

SHA256
d1e98bc6ebdf9ed5a88c749590991cf7e63d6b9887e0fff46fea29d95229c434

SHA512
3382c993c96c337aa5a845f75b947460d4041de07c7270fbbed5d55706483ce4b407683d3fd40758ee792b6036fbdde9a46be5432772357e8312d0f19bb1d1f8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
7e67478f67c608c2fb10890c526ba9bb

SHA1
00a677e85ca6e51ee47c29620df8c632bc8047df

SHA256
35a565caba30491e29d61a6a259f09bc22b986ce25d4b6be33bbe3aa97f72dc3

SHA512
d0bf54220b807225eec259336e4c505dd6a21a8e51dbe6f3fd9bf5f254aa66f55a5efeb6ca8fbb14758b255190246509301a858be59e389ccbdd5eb446e3f97e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
802bb5236a5b1e1e853e24a2cc337e35

SHA1
6e810e12201e4ce2e77adc09011feb2802d37c1b

SHA256
d12485e52e58d5db1d1a8c93bb80f844ff48988727c38ebbd2ae7f2f9fde975b

SHA512
5031bc131e818a7296c7c0fc4ca263d256ff5652800e661a62dc5265d9895847945d2b91f64fe711b77f77d582a39eeacb967bcbae195e509c875fb215647b2a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
305ad48d8ae72107edf1f1a500986c41

SHA1
ba1f78472261e8e964ce7268f56b6a48bac67df5

SHA256
79d62f8945a2ba15f9fcb85b12f30454d3ca344c346ccff2e8fce640dbd785fd

SHA512
8062a21fabc72610f9178759626612ad0d43599fde7a6e3fea9bca994ce643e8f62b45b4bec5813551e149d1b8ba5682d5979a31ea2ca89bb6f5dccf8a5e81c0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
d662b7b7f0df1984d881c207cb071090

SHA1
c8c4cb18c562fdb37345554ffc6605dacdc1cb78

SHA256
c73ea4e1baf7ec94f59fb4322cdd0981545cc6b774959444d2db130cbbd24e57

SHA512
d7ce0f0c09db49b1cdb9b4b75e2ebaab39a79879fca12db3eca60dee4c9d9dce31f2dbc8d5e60511ee5f642d27240505d84acb409cc2876c349b1e1d352ff469

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
77ac2ec4c854f5145d9b214ad459f946

SHA1
9f1b57ef4c4824cfb8fd4a30f4013db03d897bfb

SHA256
c1d4e38df880e6d0ee50e4b74b15777efb1fe69f0c3e5a8c2f47cd5544fd0be7

SHA512
2e03e93853991bdf485d9e75a632e2a3348d7e81c5c12a442b1f10b5da83c16f3be82181147ea52c9ddd2eac93b0a85a663b5425cba15f342939068073e601b0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
cf94fa15b5a3311eab0bac0ea1b5d0e0

SHA1
a334bda9a6c3eab708f27b0e09838f53c162ea00

SHA256
db07985c79967ff6c35c39487c9715cb81daacc6db30277fdd0d3b27412bdf5b

SHA512
30ec5dece74588ac894bec174dd34d7137e497ff92b62fbd8484e8559d71838f1aae446fe0ff92788d9940282f1256c23f9eddae02b480de1f107683909bda98

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
732d62970ffce29771bdab9f8b2ed409

SHA1
cc49473aeaa228e6b33ccea36ad7f97bfb09cb4f

SHA256
9828e9f71ebbe6179d306ffa42b13d9784c5a45398afd6581fe52615f5f9226b

SHA512
069e970d4c3db12aab3e64827e10fcd4b285caafd9884da2dfa8ba2ce275b854aace678fe4cea833f58fa07725c2aab58f1c133da3223a91b0a8cbaf547eb094

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
b5babc138e82ea163f446d89d0ae0363

SHA1
1198c705162f79ab7562424ac78f0babc037be9a

SHA256
04abe163e273796c06036177c5855c8b9c687aae122dc4529c4ffb6f115fb9d0

SHA512
5c1ebf01def27f609904093f818798a731115bb70a357d7702b490eb6fffcf872e7aeb761e4bbd5bb6f0a1c6440199f11093d21d3271d291e080f75e2a53b52b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
66f5ced499c5432a5bb716fb7f46d590

SHA1
77e6b2cab013b622ca72de4cf445f6e2303a7903

SHA256
3156d8f6f67994272cabdec512def645a5cc225b65a1f85df0865e11b58f6cd5

SHA512
1d22249c7c8dc3c348c919ded748208e0d4173f64905c24f9cc606a8de83873fa3a8b9c8d2f50cd45cb9e3af2d68ad8814d7ae8e332685f1c59f297b8e2b922e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
60e3575b3ec072661e7f1c8690a7fec2

SHA1
13c6156df23bf9c3017d8044cc5375da32fb82b8

SHA256
09377b3d83ff1b74c4df18aa11c9a0771f877ae41ced619fba758f34a433517b

SHA512
c27f5d233154a32bad4f4dc8cc11f18759053c0f19b6239a22dc28b911de05b8f5305ae7be39cc79380c7ab06e50c6a00d7ad6c891970c093bea3f2ad2d4c570

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
39b2b8f5ff6ae8152fda29f68d3dd0e8

SHA1
bfcebcf2834df6691a6efcdacfe900aa4f30f00b

SHA256
5fb0394f4cc6ef5bfde7f9379c70d39a0b0f9a6a09ac3c4590782dbb01dc0c03

SHA512
e68c6f956dfa0f009ebe05bfa096a53112217abacfb2845d40d95a40b504ff422c850556b0ae17cf80392976fa7137987cca0a8264a7bda9a896c8adffc80223

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
3879995df8aad60014869771918e3f50

SHA1
2d818304c72fd55c5f350de56055036bf44486ed

SHA256
92171934edd0601e3e1f41efd86300c99dd487d34068c749ff67d06c294ce9fa

SHA512
75759f69733f10aaac97caeb690ae3983f639f6940d63b75e927b09011469e54080b07407fa2ca8aa4cdb1c62f9a09908935fcf6da0e05cc75b74361e4ef6a64

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
88ae1f2b123d2ea849a52c8ccb0a164b

SHA1
ef73b2e001a31c631b09db27f9f3abbf57016916

SHA256
6188e6c69588a820d4783423fb4a3799dec607d49a3e19dab0033788cc0259b2

SHA512
f3bcaad815c734d086f1003cfd8194b68a6b3275b21f8d3025985245274c92df4f465ea7a2367283b057d12a63a9fe508f6c8256c662b1ccec82f6ede1717db6

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
5425d232de22e874a717e8b6fe491d79

SHA1
dec3443cdede0a0f303a6ab9dde32e87696ac3c1

SHA256
80d68fe22d57e2781089491e2032274f1277e2f647aa64c87e12d50d60cb1257

SHA512
c8fd66fd9a4d41fb512824207853317f99025cba8cf44d32d00d9d1f63c94fa72bcb901df56293cd0f85624455c0aea9031d7cd971803500e923fe792c0e7ff6

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
ebb14360e8b4a5bbd14cbbf717b00cb4

SHA1
7f0e21e325d9a488d3dcad3c2006ebf4ed2c410a

SHA256
d995a426c6f87ab8906c065dceba0ae2d205172c0709ce5444751f9ee2348095

SHA512
7b58169e17d9c3a260f9e77d534bdb6c87577c3666a915223365d984a448668deb8dce4636d1c3110632560736f51e439221c1cf2687b74a7bd1e46baa1e098f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
bb57e7565052d52df1d459039a314ce6

SHA1
41d2c328300d70bcb1fe9d6480a4e0e2af0874f4

SHA256
a4eab4d718f27a460ed9ca330133cbca6729d94b0f68f65eb7e80b41436f2e4f

SHA512
12278b5dffe734f1dcf7a02b78b90ad8df7c8824efe93b85d141dfdb315fd092b101be79a55137cdb35b32badb4dab50ab65cbf5991211914fe33f90b53fd1b8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
b6175d7b0795703397f8ab81efd5ff2d

SHA1
04c397251d86049fb68d80b5f037b2eddd8a6a38

SHA256
63fde543ad7ed93544873961dd60d30df7e7c4d7f5585e43cd134b8fc270a8cf

SHA512
6b9a5b76e646ae772767202506fe8f26db9132667bf000ede78af197865e8d67122c03addf724154126f57c2e386f8aa9bb5f7b9856b2c53ab309bf376aa54ba

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
22d6d374c3fb4fc6653abb8aaaa632fb

SHA1
e263a8178ded3df88170b1319b139b55c1f0ea94

SHA256
aee998f530d69af37dfc0ffae59eb18cd1b08fd31a9128798770f5703bdb166d

SHA512
cd9a9225357a2cb8f4410d02bccf63d8e126823256838d5ea8ccfcd069471af7c94a2350da12dffcc90ce69c4f9847f58aa497e366195625e1016fbb020de057

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
ae169eed4a75f06ce6b727d87182c770

SHA1
f93a6ea682b0766155ed86851099c4753fef1e2f

SHA256
c7bc88cc9f6e4124724947ca4cc175e6f85601d34cf09fbc591a65f9cdc81e75

SHA512
607b13653427a0546a4d334a23fc2ae207bbcd3a4f764df45f39f45dc6b3975d68ce36577f66fe28a0428383782cc4bf6d8450ada9fe83b1f9445a65c0db7dc4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
3e9f5f438c0c00b702a66b42426069e9

SHA1
6524161a7366872faf165f1eea87b9b2711af215

SHA256
4d0bb8d2e194223b98c0327467284ca9b69d35b5e64abd55466ebb651527a6f4

SHA512
88177119dedd0e32afca4660b757fc11028a096fd511a1cac8762eff86a95353f83e70a6101d7b03172f83e46132d972b5a9a5508ad44c7b9ec7897dc38dbaeb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
f76ab2b32de0d23a5361483fa1669a66

SHA1
46fbdfa18f51c7392a7f5d8fdadc3c381ca1e03b

SHA256
fd7845ea8b339ea75415b0b7a5ebaaaf6bb8403b4f6f31fc5110517a14e595ff

SHA512
b33dc8f01fd96b76313f93181ac61e26b9fe3568451673d8ee48160c333409d975f4e2ba28a3c2d9e6fe3dcbe347ffa59383f8daeb1b875361a1778311e970b7

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
770642d3ab51ca1980b3557233250c81

SHA1
38401e66d02bf119d01c1bed8a3189d11e181b0b

SHA256
5c980a688608bcb487b19807f7bb851e915f54721f247d531aa6732befd2b6aa

SHA512
080152300be0872f07e8a1aac39523f2bb3da49541ef343080134e684de43492f88586a59b1c82e897d99a6c437ead493f5fd6582117ee6ac5862ed58548607f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
bac1000ce7061bfe89cb711678b0fdef

SHA1
71edbad0841dd38f0f7559aa96c5ddbdb46c4d45

SHA256
0f32152fba72ed865ff992995f218ca894b5ecad3c45126f8716d7476d987f30

SHA512
42e71a5de30cf0e159b8f1fbde5e1a039c0c14ea561296b610e6483efa943c8173af843dde2648fab9cd9436eb33b20da282310f98c61090b9c048ddf6f8cfd0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
9ecb8bdfc108b2ca457bd1a84a7958c0

SHA1
1437d09b336b2db2cfccad4525b62e908b436458

SHA256
db5d484104d37c136e55335fa54d4b5180672b1463be877bb8268ebc9d817a71

SHA512
6f8f4c52f0b69c5be0c574404c8d0abab6a3e2c0a4c2ab76b4e35c6db7f23d6d5ef993099d1b9ab3676148b944898884817e5e618d881f0f8bc22cf60805aaf0

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
e1dd7d0155c20642d4904e70ec4e24fb

SHA1
cdd9d9e7283edecad90704acb6012424bdd205ed

SHA256
e2a54d66616e711c55885fb0c2fb7bf5fd88dd38254ed2b35b8588270ca1d15b

SHA512
9fbfde4892fe757e16b9202f68ec3f2f39b3e0579c707d098588bae9e688927a3e48837c8fa5abc512536af90926e43c4bfe837797799ae6cd28aeb31d9a5ece

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
408b3a85af8e1b6b1e590890bdc74215

SHA1
81c7db9e451102fa94a8c3e95c280326316ac6a0

SHA256
a01be67721b0d59dd2582416024260eaded5cd82dbf5f9eb0cf92f54f5c0c463

SHA512
ec49c9e1f915f77dd42dcdbd82d46800fb21cb37e157c8565bb52fc3f0ffd53ccbd75129d5893e0dea93da75c2c952c3056cf18e1f4dd0dcd3021d91f2fbdfd6

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
8e669080bd99b70ce799376799533d47

SHA1
11d8b665b815caf53add94ec5397b32c5cabeb0c

SHA256
6eae135cc67a2cd44868fd097367f6d3462f46b3f4c175eccc277660b0b94975

SHA512
4c57e0c7a71d909243f9c50517f40f98908ec6d12a1eafe354887d037966dd30e81e33036f50bbbe84a7e0a736c125774f5cc5bedc8f634daafa89c8ca355e96

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
242bdb1c3fab01e953c3eb9474c1b814

SHA1
4e55e900c25fe883f3f6d59ac689ba46981d9b35

SHA256
bce2180baa1e4f329907cb6708b10e61d8bb4a0eb375ebf05a5b5ad06c04cf57

SHA512
0e25bb350394023ac5125bac8d5a2a0725588a4b70da6de63fee2d8864899972abdc4e581d4b7fa62af39987573d5520e65cfc149af03b9a195bf426a598fff6

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
fb547a36a5d7f6e2c5345b278f782f58

SHA1
4e15f66ff9eb14cd161e83d882737d77081986d7

SHA256
ab931e207860af707c516b765616170401cb701e74635988ea20893214122e94

SHA512
58142a813e8efa1db9b257635d06a708c4964e039c530fd89c01fd4020f1314dc57679345a6b68cff9ccf96a68d67a5c2924147983380fec9d2c78e492f1b33c

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
f868e2b596bd63bcd3bdc3db02cbfdb8

SHA1
ae7d2c57d2689f5fd558be03f364deddf5733151

SHA256
762252193db58c2d13e2904c04eee2fc8f21a226ce6a7ae3bd7236753f8805e6

SHA512
4bd17e9c70118b14218150382c86629d3995357a1f22fd4e6f3fe1b9808af9b742195eed75b42a53da75d3f143b16dd4f488dcd3ed676ffa6e8fda3a66ee1c70

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
29bc6bd3b7a42aa7710784ba598fae92

SHA1
11d7ad99c8463501033aabf192d62f0bb6a94b88

SHA256
773b0b89b5c28a85294f3aa1c9c282a43e637174cdd5571b66e347dc2280baaf

SHA512
42630a3c3df1f6b0fddb4f0d512015e5ed55f07cdc3c7a73c2667cd491496b9ffb1c37bcf6be722ad021bc7da95f825dc42892179e6eea61e5cbba1b24823909

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
f9c68e88261c656cecadcffcf0da4a63

SHA1
90da05ca40f31df43ddb2d3b32ef5c55b7d4e760

SHA256
742367ad86aeeaaad4d5e2c5c3dac932a4bd7fcc03f70e00c8e27606f460d78d

SHA512
4f6cbf8aca8e5220b315571a59f02a3483bc8e54356ee75b8fe333edb198d4e848a19f65e951e6fe691c0c52dd29d9af8f76bd7ca4a8bbaa3bb6f72d43c29d6f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
077e45cb03cde2070dca56901986ef7b

SHA1
4280178299cf16cc4e0b9c2725a50cb2f80df3a0

SHA256
cab220b4f7dc333dc54c6913685205084c61fe0173294e6d80cb3ad6407a2cc0

SHA512
f60de57633d8a169088e962dd79987a38c6cce04bf7b0d05f16388b3288671d7f60be1af94f859b0807be7d022465612a7d3fa256f1769b48cc4cddc508841c1

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
b06fe31f831a3aa4c5ad44b44ecf9853

SHA1
71a1b378c41ebc1a6368c3d4aaceca28ef7fac40

SHA256
6ff2e21c8147e181754bd707cc7a6484f4aacda65a65e770145b01f6992e4f01

SHA512
b7f6889d390bd973e5c37e2ecce89e2a65ade81c09fbcc7d9e451cbd0905a562d1270afead3c6b67b6bc939ffe51d28c3b6250abe436c002bfc051d4e320bba8

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
3b1c2bcab69ce6abd4663f6f8fd12e9d

SHA1
c2ce0cfc4c0c64a197b6e2d7fd151f6f605cd8d2

SHA256
bac909a97e05244420449daef97b23d4d63e85f175b0f75279b266c4e7a3799e

SHA512
eb18e139a266f88d333e5ccd39e0452e3ec5402cd8c65ba1288579d5dc8cebf97537f074dcfd272cc85da521a9c26f13b4685ae5edafe1f4b489dcddfd474f4e

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
899920ebece2b1bd07ab4b631e90b016

SHA1
05a275eac54ebe416d99e9b7ed6fa13dddbb191f

SHA256
142063e3de9353a9ba87e599680d75ec4654bf7aa8d1c240cbf9bf4b67563c07

SHA512
55a823dc7fb233d03a7cb4237db11097589984c77050eed3788a264b12f449bb48553e13b6dd36d540b33bd089b5b7d69e858f4e1d185c7afdefde17a7ac5921

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
1fd1b882f0ec0cb63b7f215b49f7ecbd

SHA1
bd6509d3104f9c8185cac6b94db72a54985a7ba6

SHA256
e0e14fa2297a097f5ba962e69a0efab8ec98e930edce0b5878cc9f19a44a2979

SHA512
9ba2819c9c03e5d3e31552701c935e9f01bc5a4ccb1c2ec931341dd24fabb171a08dd38e6536d1ee11a7b3cf026f5e29bdcabe2375bb55b39c2a8df13c3d3edb

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
b4c00e8a0c7834fbe140f112bd48ced9

SHA1
f3e2bc78af9363ed0667b6c25f586a904570a73c

SHA256
22d12197a480add660ada31bf1fe58666b85eaafe368500b50f3f423272379ad

SHA512
12310556040777959f69ba656ac4d6bc90bab6c094089eb930b92df4d821e5b3489441acdd2588dfd5dd8f69fa2811cad1c3bcbdfee49a982ea7c717e3d69382

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
eb89a01b309d8d84c45398f38a99a13b

SHA1
75790fc08f941f4acd7b9fdc8406ac349650c71a

SHA256
9438a21f281b7e73050157ec10314c3a277592245b3df51a045919817f2048b0

SHA512
03458f96692c5ca93bfde15b17b9231027228b2ba2bf5bc044a95372b86524582d417a79c601074467dd49de8862dd5a9800e7fcf4c87770a7e552a6e0c5a1f6

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
234fb660dd33285c8e1fe0a70cdaa30c

SHA1
9862c51eee21d2e70298a3ec816b10b3215d0748

SHA256
e6e235b135503fdfde97ee351bf6a72ca0bd42ebc2ad057e9bb5254c1797c5ff

SHA512
b8b07bdfef8993c98a9794184552ea34cb6349cfedaa528f42b46d4b96c4e50e3ce8595d0bfada2b9bcc82e903ae52c02f3c3d05b17b5e5ac0499757e684224b

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
fcfe11de84cfd15e1094d9cb0ad2ab86

SHA1
1322865c7830a5cfd0e6838844cdb00d9b0d15aa

SHA256
feeffbb7090e22ecd3f5f08ef4caa79ac8648f7dd700e9ede4a6120968077c9a

SHA512
1bc75af0f18479fe4e872afe9a00c16b39d16bbefef50cada64bcfbb476bd3bb1ded18cbc62166ac28bc0bcc713dfdbd378c0f0b374b2591857025370256c238

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
fdb105bdca706c4126fc27c298a21921

SHA1
c8c2a441dcc17a399280b881b9a791472052c50f

SHA256
f50538785ffd93bc880e01dd008533ddc9c4a6f2490ba750190130ef21a50ee0

SHA512
af0603c160398c3fd529676a7270e08719ca633245a2d60b12c9fb32f1ffc0ffa754d3c34770c22cffcb6be35ba75d192c371d336fdaa4fbebd902403f97313d

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
ce115436122dfccc037552ae99887be4

SHA1
baed3ed0f2b36b1244c87a579ef034c49019c7dd

SHA256
a4e2a33586b34b08c54bb193765c661104eba4a49fff50697887dc070b05ff39

SHA512
8fc67326d8c1aa3af1040d30994742a795d6bb35acbbc1a197687dcecc5a6c6fb75522963971bb4d5cfa68f71a8300d3684ed8584955b21ff330b487f4f552f4

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
682e8747c5523522ae3f328696a3f302

SHA1
df683f85f6481a67c6dee61bd976c4c8b6d29bfe

SHA256
f6b24db295d020d99606522c20e53dfdc955de0b50ab947ca2c35bbdd3fb7a07

SHA512
09b7ec51e1e46337a1e5a332906dc976d4e1cfa3e71204a27184182259b467d4805b7a3cd9346fec3d8583ef740fff7e816205519c4163c700838033e38bfd79

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
5c5623858e45843851807c6af5ee75bb

SHA1
9bc4b3203476777d6b1e75b61afd4de37672bad8

SHA256
7e64340a56d3de7221ae9b5ae467be5f03a97df7ba7ea4aec48817c89cb358c2

SHA512
13c235d4d68c21233f543f8d2e6bdcd9c55bc11e7bb9ac244c012ed99810d5704a3f3a4f768cded5d74012bcbedb46ffddae2c811abf746c10fdda41c5582c5f

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
881fd1b85fe3c408ce10a5c0e1deeff3

SHA1
f1e91884e707b79ba51e5c993ab0ca90908074a0

SHA256
f2f228f4f4d885fcb22c45f75fed2776ae43aa1fe050d0518cef7f94c1ab7b85

SHA512
c85527db5a03d3cf6721cb2e04a2556c462e21e5b0a3ea9aad90cc733145f5e898c00c3bb51e302294fdbb25d61d192020c5f8004abb9156e663f324996ed1b0

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
47531e08f7c90c44edfbeb5ab8f4006a

SHA1
6646ed69c345b26a3746cef28926293f1fa77335

SHA256
5e228f00ead914fca5ae286534b8c3a25cfbed3b1a033577fd51001c7aac3b2d

SHA512
a8f69572fa10781100d36098e947d345a74c17b2fb42b77e859620ae67541b21df03ed5cc9868625a3c2adf1fde864305a21fa147d8633ba89598213000ace8b

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
e41bec1904330036f8217662719a81b6

SHA1
721648da6ad765fb7c35cbb9025537800ec2c4c1

SHA256
75ed53fce188c8f834e688b68a43f3c1a3ca823353a808f27fc5d3e7ff230972

SHA512
fa577f6fbecadece02bf7fce7397a7d532f760769425c248033ab6d3d09c18dd4457f1c94e0e745df682eb3f86be5034c2767ab621084508d57f24a34bea0e6d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
61a5cbf6561844e75ccdffd9f55449b7

SHA1
ebce7bca3695d35d1bf41319ab8dfd27fec6f47f

SHA256
bd082631fa1c041ba1e1884deffc3eba086dfde67af29e63052589d362df26ed

SHA512
4a7135d45d1fe5d7c146272c1a722341843b144d1f3de7f747d1ae74b4c58b076acbe8bf9e33654ef6f8552cb70c15ac0e73c17bd52699cebcb72418d74a77e6

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
3d88e2a3f3fb52e26183cc02b2ed50ae

SHA1
0c8d8daf10a246bdd8105543c3433576c854cd4a

SHA256
5529e7860239209da0f22b267e4266e1deddf28cf17eb1b5c08bab6657274e59

SHA512
e14f9d1be56af947ad379672803eef1aff5beaa5d15d4a7e147a83cc40320f476e99cadc5c8f2f439e436955b4faf00a18a8a26e0ea743241de82ed1ef2ceba7

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
8409a7302feeea50a678a4ac95eab470

SHA1
57d382f888568642555e6aaf60f9c12f3a08e436

SHA256
6df7b8c40ec2871e245774172372ca98b4acb43bac67912c368f214539882938

SHA512
9f6d10c43b705560b5217dfbba2387e648d6e1e77ca1af10db3a012b849aaefb4aef2532e18defcebb03f1e758ce96a265b293947f874953ffb5dc8f7170d8b1

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
af8955edd12f367c4d9814723cc1a5c3

SHA1
8831a4a4f4f6207911744bbf806e85581e77b1c2

SHA256
64cba535704d1203f423c75d988c5bc8a57ac5f328307d911a26f6b916a4c34a

SHA512
174210116bdb1acb7dcdd694d68b5a597d72b1791b317699072f06502cdc275a067343af7e196244fcbda09b2dec716a5364ea2874584e9884a43199613e1af7

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
5a5a5a547f3afd23398decb759362aac

SHA1
f3702420063aeec4a4484cbbb594f3643acb6a13

SHA256
2d107f2967543c1be87f41e9cf163724be2cc703cc4a971a23a8a5c7cf6d4357

SHA512
cd8d45d731b35dd2a36dc722f7846471dec5946453723f7ed2b1ebd0f2025e76c1df03ff383d270ea8407637f0e4aa5ba233320b6fd28f21b9cc3c1d0057e12a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
aec7175b9c062a4fa6c41523c11d200e

SHA1
21ed6cb1b8a62d095b508a0af9e6cad5c033edfe

SHA256
ac7336acae37de6ae3cbadeb64f8b00360a70b3aee8f52a2564115fa72248139

SHA512
6a756c66686d866da51abb11ab164d7596e67d2f48da436e11583935c79711c10d0ad128b79449eb74b992504654a47c3080bb2e6c6462b96455d15d4a36fbf6

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
d5bc40f8c37d2346886e5f17f4a71919

SHA1
6261f99eb50360d8a96d41adc617a0c3af41f301

SHA256
71fcf30751ea1ab2dce98515c5c7acf304241d7a68f2e5f507c0ffa15b194f75

SHA512
8dd094c79198982c085051707643d1b1a6010583c12a57de4408261b58d69608c7b99c2be881f1b5b0a905745f8bd15fedc3767da7511dd1d89f7030ab99630c

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
5f4eda857aa9b956f0552642805ced22

SHA1
33c1330668ef3b050b813659ed1a7bfc161e1d5c

SHA256
dae41249d21a05c125f2ef54368ed87786d98d1bb23d1fd91e1de011e1c8fbaf

SHA512
717f9cccd9b1583cb621deea59c8eb1b7ca78c2f88b50c01168eaa5f5ca5a7581fea6e583bb566e8dd94b17fd50a09e329b4cf1b9839f5067c0571b3166ed11e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
d320b7b49225a98291559c7713cb4e5f

SHA1
78a0d41560f8c823028ba5616f4427c6003c1d7e

SHA256
39297aea2d25d1adef71065ae363e67ac3ce0687e8fce4710746c10b279f3e5a

SHA512
ce837c0a0823b92de2e29bce1d36cde44549448334a0a66732399f59fe8e1b8870535a01612ea026a3af24b82902ab40c65336f3ca58ddc782da220df4fc359e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
4f7af0140d0fdb6e3d43a26318c8c80a

SHA1
97b271d2239ba534f67f286c2d77de5a22e3f93f

SHA256
70e8f12472a93a3cc2a8b08ef6fe3f0ab6c43a540d81041c76782774b20b28a7

SHA512
bf913aab6ac9af3ffb8e5ac5fee16f9159b47a49a2cf6cb41ae482a202562c5daa38cc60ec8ddd5f309cc930b87a6a0d384dd9a2ed3d309f769dd71377909b00

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
c7f5d4b965f8f6a2f6a6161b62c61c80

SHA1
37181dce6bfc7bcfc1a5ccf3c306ce1660d33a75

SHA256
edb45d934d05326c1a78b64d758fd3a44ae8a30afe7f612baccdba5136dfa48b

SHA512
443946a78c5fd3a1549b1d0b73b125d0b4d8eabeec293b013e66c00abe6ae3a0618bce9a5fa0d96ec5ee424a7fecae3546548118bb0d5e8bd0965bb5753bc9b5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
dd182270b99f1c932e26804cad968b6d

SHA1
d7a6ab480cb2cd5114141de88c5b7f8e1024f3c0

SHA256
759824c76c5dc91795f0da4c30ac08c2904d6268d7447e17fb834809e78de3d6

SHA512
2a1e5d0b31c582754fe8a314a187447422ebade03728b32a341c56ef29e97a48c3fad04b88577d86e64cf6924c3d193e8529f3ef54f8fdd24185e01fe40f4228

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
3bbb8ef3ca997c00f783a3df502b257e

SHA1
13786a3d15dfb3d482cc8d0f23ba1afc3618bdd1

SHA256
8c4462f295abf770551ee115df6c7b39f290f75b587eada6fa129117f872ee6f

SHA512
03dbcbd39e4715559662fa4c3ef05fc161a4c91be7584b7c2cfaabd0d6f8f9f6724a0e38b676df68c048381dcd43f75ca977708167d0f650893a5449fe75e90c

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
272dc379ff92fb0438fcbd6e750020b7

SHA1
0020f759a217ce654086ea1d9e9209f4a76d4b54

SHA256
6715fb6b4950c74d45ef90dd3ba54c5f42d6c532f0867ae038c28d8d8565f502

SHA512
eb70fdd5f6782872bd3ae0e5a44e0e2aed508cfeddd79a7b94324f6f9231c8c353255b9c357057e0afeb4f35e8a3de40d0a2f49168312fd5943581c20f000c01

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
15cf6c3f180775d4757fef18e55e2814

SHA1
bf9de656cfa94acb95dd3aaadca9b5c2344f166c

SHA256
7f8bb642a1176894c8162d8112ed52410a71fbaaa697325872938d59d2a09b07

SHA512
4f847da6727e028a794b856c4309a22665e07600dbb5704644864cbe055159af1f4b22aa9fc844ccc58e4f4ed7f563dde1774a944b4ef862d6515c1207c4b0f1

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
78c1a78403cf74e059e1e9b063e896ba

SHA1
dfc931865413fd34e20809ca8665700a62e60725

SHA256
48a1f64aa7c05cf8358b551936bd400b97437f55ca4a98a22aa8535727a8b85d

SHA512
ae54df62fe23035cabe3749cfb1d81d42ad6bab4e444c79316274ee026718b5b287896b852a8f9939660ae07eb8c2202ac89663e557693384b5670b9ad705c1b

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
1a830c7fc6c8e82cfc10725c4f4f5182

SHA1
f909296a77ae916d589cd69b8983cafc4a6c04a0

SHA256
9c75cc25727a22f8a6c26d10666b2fe32db7b10f844bf0b4e6f9e5e212c24cbb

SHA512
86554d95858abc9817ffe5477f7c2800104b290d1674d2ef2d88697b269c911f213de431124d64a9da091b37980b753b4967d04da3b1e13db8a73e8a3af87a79

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
584ce5cfb6d78fc0d22bce49389700d4

SHA1
e4eb11221c254f36205ef820c0b076fd73734b3b

SHA256
80098b2e31ba39ab873a6d969d5ed87d487806e1761b39c72433112b2e7a6644

SHA512
e3b9a56c3a51941629b086e058d4c0706102fd713638a6ed865e395e9918ba4ce0800c2f89988ec47894667597c34b0ed89daf128e4ecdb98713136ee39374be

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
d233c3b53db25ffbebf709aac72b0201

SHA1
d70d8139c6485b6c172902174ddced4717f1454e

SHA256
fdf2ccdf732b7d90c7b7f60479e6d1355d0cf84777cbc8085174744134002905

SHA512
48432019f6e577b46853f82db962cf5b38143f9a9079795df82e7caf2b3aad598e97df80f7189fd6a3fb73bb95fae924ab06bd93a5dfa6487461fd11cbc4877d

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
17a32be838fd478c6b474fe0a15b3170

SHA1
476b23f9e8ecdef8375fef1c1dee889b44d67bfd

SHA256
ee5e064c01fea4e18f28990c2db3332163903b4a538adc5371fe80cf738affe6

SHA512
f78af7e767e047bf9facb5546917112c89f0be59eb2f6bb5bc1e6b9390ea88fd2ace038fc1800d032a1ee79d37b879b82504f96a63711d80c1e3705404d74b60

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
b75dfca988e12fabf798427d73bb8a5f

SHA1
85659537d52276da128f1af9f25df7bd374c37c5

SHA256
43478e76de2fbc2d89843b0e23b9591b14e6119ebbdb880a13a27d0cdc8259ab

SHA512
89d9afc44aea872ced69ecd9a6f2a82730ce13d9a9a4afb5cc2f23035f95328c871929186f66caba94536f1f5a35b155699ada93b2c3e4c42e89e128538f4d9a

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
19269d269b47ab4659c56fcb7b372731

SHA1
b7e4f9ddeb0de35ad32d3fc8a23b76a8ebef9a54

SHA256
7e05a4f0a21cb56e19db0a1abf084b793c4be5027db4ea6362862a2879267303

SHA512
3d709cd7e1e36088c074ac043423f1b248f08b60ceea11d1066861ed4be423fdfac7628c1779bc2dba26cd1c06e579b41f06b3e5d8a16a8261a1763b59e033d8

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
9bbf052daa6542e9799d2a92d0c5fc0b

SHA1
30553a25261b43a8889814cbc0b23200a4a86af8

SHA256
c2f9f39e35a4307a80f6033530152ceb509ffdf11d1a5c313205ab8e8cc5b0d7

SHA512
4f0c4874ca9ce5a48d3172f913a9fc9636e972e9d834e35dfca9421910fa87fa35ae1dc0be4f67ae9362269cff9a6a066371d9b0676f3f0d89161a27c25ef1f2

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
3cb66bf1368df3c88240ee6046a4c459

SHA1
2e45404d5a8ca806fff1156acb65767c5a3f8193

SHA256
664df6ba44f7b0852ed587bc31c5cb0d757cd236cd56d9fe829d6a3be1e20380

SHA512
a1561e88a405bf44e9a341669e8add365db5a3881a2c1d28cb85491d9241afbb20961640b6ab4cf655018d9ccbe88d5c0bd8d24170562339e51b542f55808fe3

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
90e82a8f5ea1263a29f656edbcd5ce2c

SHA1
26c97d04854d3d5549a93be14e112f70d2a5fe67

SHA256
8617e647be85dde6e1e53272f119b105bbe33991f170030c63f424d9f41fbacc

SHA512
356c420e1e64366367631c992036b6c082847e1714ec5ce68ed80d516d4bf3b1f4598bcad7ad32e6b32bf09bb15a4ae22ea65e9078a2bd6fb842d98c2c1e3879

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
919e778f686da2644fba7fee0122bb5f

SHA1
635dfae11a6e744c2001b8e7013206c2d823ceaa

SHA256
00d18cfbed91f503917c6a82f9b40f2b2c98db15e04600c4edff5cfab6576a3c

SHA512
3cbfa48705c64cbcd01079975a0c18762626d642cfef93c57a87940028fea6ca2c6af92ae46ff3cf46b2685640a2445aade5d4ed743529287ffd667a6e1e7720

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
cb51b84d12a50d9b7190b8725e41c044

SHA1
75b707628b78a627e6e75eb71d96dea5563e0654

SHA256
c3f2f2b90a530de2a1087706240456d13b93f5b75911f39012539eb639b35cba

SHA512
33099a1464306047255256995a2f30d4dbe67b489b50e32ae3541efcc7edb7039a66785899e9d62140049e37f81355b1855055891ae70b437312da9eb8580d2e

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
71d71d6e20d3ae2b15ca67f73cf208a8

SHA1
c7a3def6b23d01964456673ed9755fa3d6c36ad5

SHA256
9c53a2c177d17e24af4d8bda2ece26183bff06e205e2e42ab27069d297f324bb

SHA512
30f864ee57e1e25ad0ef6dac82c60f09cd83e7a660e9cb0a56ebf9b1017fbd4c257b5233e3196d42c63442af28170149dc42555dcd01a1410cf811e13b6be008

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
c10e819032c79c6209addc7acf9bf7f5

SHA1
99d2aed38ffbd8b7b983875d3e1b8a6ac51b0a93

SHA256
79c7a9297cb72d2b2f48558be6240a950cdff253214fa1f6900c7dd7fcbc6d4c

SHA512
b0e3b2a04b4e3e7aee5f226f2e0cc485cb14057d3f43469cbeb6ffe357f991259ef0b908a76329130b30aa9b1f1804cdc408ffa84ccd7e6d240cb673dbd7ae1c

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
85e8de8c374850ba631a1f29a344c425

SHA1
f707d76cdc7080ace835e6b0cb264bdde2a3267c

SHA256
88e1f4ad0ed1d1a8d9f4cf39c16fb9a94747a90111e2d8637e1ce7354c79eb61

SHA512
cb62de1e9ef7c0af8bf956236def6f70c47538429d09732daecfdb3eabc4e99464a1a447a3052e16f2cffe02ea91aa1bbab86787a7fa1016d6a59cc2ce421097

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
31b49c1cb0a93eec1de3815433917c9c

SHA1
c15cf90fb18c449c0447f73039f039d6b683f8ff

SHA256
91001fd87b65076a326fbb4a5a6bb61865c12b782d688e123d6df9edb2b1a2f9

SHA512
b864c766d0775a030ea738f196d4c7c78a90ce82e44abaa1cf8c6537caa1f56a7717c0371bcea9b0cb308c4181ad2dab435d21cb31aca4b0db0ac77321cf75d2

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
98d9c947d89ace14c0c1a0bd1349c3ac

SHA1
7cf2006dfd303d3e28fae0b4325d12f1435190b3

SHA256
09da292074e53f29ba4b5054befef5ce7dafb4ab28649ca57e2878e5ba7e5c18

SHA512
0b546449f4b8d46c488dc7f3ffce369575bf307d3d7223e0a04f59759418fa6576c0d0e90a96681e9df64475507a036833caf047311584d64564812f05fc4914

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a52f8fa42321fb0a39ab5593ec771aff

SHA1
54358f287d713b7e506f2048e5ca3746b2eb965a

SHA256
046b11a79236a62ab854e61292182ffb9a663698953ef0568ef17280335841a7

SHA512
62047500a6ba920a8f5823c4aa491aa3e4572494f3ae3c3b8f16be00c8c9143cb0662e81c4e8123a706b42a0e3f31f3a23a6875a3897212ce31aa3bf8cfa0fb4

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
8bd1255d51d82c5938d4d8c4fba0bd28

SHA1
1bde99522604d995fec547282e0484cbd7829922

SHA256
374cdb91013c13d31b6b2c03c59121fc815143189811f0bc58bc06e21c49c63f

SHA512
badaeb6ef7e9afcd7ee35694315a54e2028a4e4de8298db1a529cfaa54063f530b16b16099300e7936d5e9b2cb48363751841e79d37c135a808b346c350e430c

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
5b2ce01852cf115cf4ca7facc21a838c

SHA1
361590e82931517140aa347b39b2305dcb5fab0a

SHA256
428e23bcaf1b450544412290c7036c44d0c63d95dd439e2461f7e663f80c2949

SHA512
1fcdc9acbaae44f77c3c68772dbb9185730ab22a4dc7fe536e288884eb9acbac2332f0cab732823b434565575ffeba76501b36c01ef7e2b75fcac6265aa6b8b5

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
9fa27211938dd5c52d142211aef22ef3

SHA1
378800f5db523937c4cd90f76e156795832df57e

SHA256
3a2ed895f611a094a8e1ba7df7a8a9bf60f3373eef42e1643dd13da99d3c4e1c

SHA512
44690980c6c51c0f106cb142aba1d57bfe29d33ca2c8dc49573719011dd958343947b3d286c7baec3d5fb2477bb024162299c91968723daa6f6551ea03b46104

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
6a64e569a18ac2223ddd9f4e4e37abd6

SHA1
995809f0a9f53dc985b3bee54cc5412655acf60a

SHA256
857262f7b3141edf2b97280c9f7be0075980b504e54b56f7345bbbcb189a5886

SHA512
28f90c466b5fb133ad39dac8515465e833e97c1952e8f8eb4ba5f11b611e3e037022e9dfd8d846fd87e6f9a8a3f0f44fb1fc8a49c052fde9628830093bca7da4

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
4fc70e9184896cd46a17d29b8673ff38

SHA1
53b2af2c485e97a5bc38f88bb968cbcfc29d32d7

SHA256
52306c17b0b880b59cb354a4d36705f50ea4e9f957e8fc7d0d72448fd16f741d

SHA512
7386910e63ccf7178313361b7eed30c655b5f91c76de7eebc51dfc82fc8c93d3daf348ca640a0867ac9cd8b519e19e9be6bca597c5b1be2c3b8ee59eccc1f795

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
b3c501c948cae008c3e6ff5481f9fcf4

SHA1
8d5afda4f02c210ed2f0b18655878f5979eed52a

SHA256
ec09f90eef85a69a88f2f0a1f32676c91c5cb5b0c559800b60b3bdb88263f68a

SHA512
a6efe17e815622c11133f97adc6946de305f6423ed893c3ba08e6a97ee004dceb5f0b50c5de2d840f3013a7afd44ac296869baa888653869a7e9ffb01b6061bf

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
67462af02b7de96b10fb26a72d1b3dd2

SHA1
5ef3dd4144557f8a627d058b96639e5dbf91728c

SHA256
053732382e4d4849b855ab219bbefdfca4764387c3b3dd021ecff363a2090b46

SHA512
bb2bedd9f78b22b4c618331cbb312c39c1a4779e6641d49a1bb8b9583b55597502f38de9b28304c5bba1caf6b3b87df7b8e673a68e1d3ffa1c924b53ccb7bae1

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
f6d6db00cc567973951843a26014d752

SHA1
412490cccbfe4970c4af8cd4117facecd1d6983b

SHA256
19577ec117103f6eec8be162dcd56512df2466707008177907b2af5628f0000c

SHA512
de7016f70bb6f2ac88b3409777cb0617ef7a66b5b7a775890a02e9125aaf3fe712c6e14f067ef8fe27c335952ac678f98f1c382b1a83440ec565b0978fc39081

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
8d7666f360f498bade2555c7daf0f23d

SHA1
659dad3cfb44245144b54c7678bb5ccbcab70083

SHA256
a1bca43bc8549a1b1c37417afd35a5f4009e919c9a2d675e357b11e99cd3e078

SHA512
7a39c786a122f5889dd08282419ed665a40f36331ff95cffe0ddb2871297cbd672e0cc5b1a9b62e22a76dac51cf5e61915f4ae4cfc644fa553198a62964d655f

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
7b7c1af5e0e1879341d2a4197fe0bc9c

SHA1
be1370d3639d3cd0ca9167e1182e25c41e6b9db5

SHA256
62be02263070243d1037019e96bd1053ae48523ef25adca2f168a6e254daa147

SHA512
53377c7299386963f7346ddfc34733e63b0b20de12fdfa53fc7fc8dc5aeedefe8ae29e56b589d7b3f4c44df62e5c1c92b32a4dcff6d6e59513c953b1f0f581d5

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
4289f36ffd7a3a8dd5bf64b0944c1d91

SHA1
7262b1a4de086e759d35bb44189eebcb579377c4

SHA256
4cf436ff941d7fd4516c485688e0cc695ed85c1484bf1ae763ace91df14230db

SHA512
a9c4275fcc0269c033bb18998ca582701e713c0f00b5e5ed7aa3182311d810c992cb4c271595500552aa724bedf78837954fb1539b5d07731463c06523b01b4e

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
b090c713888722e12b64a44991ff3816

SHA1
8ac672be8766693c164bcc02c95eedcc350ce10c

SHA256
1128ed60a6c315437e42afd1e0b57e51b18f61668d85255d4d2fd9ed95c7decf

SHA512
0afab60d0a9ca4d188a6f9785628cafdddeeabf98d9e4a728651d1da10cb6be89ba4c5502b61ba9bbf539099388eeab98a1fc2f8ef50c00ec989374b3ebd4780

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
cfe4a64c75441150efd506aade6f458b

SHA1
2eb87ecfcd1951c49f137486e58cb9d8a61f90df

SHA256
89be863bb4693992aa2358c210d048072b3964749c6f0898ef6463cef2fbe3b8

SHA512
a1f1dd1376b6d75c76daafd1d47fcbda59642e16e1b3e389d66b00c1b63cf709c3e78051b6598978be8386d1c7e87df8f0e58eab56d6904279c148f5768ed186

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
e26d79d09a0213720cae0c18ff4c1342

SHA1
5411baef61254b0fdc3a9ed9710666fc1ba24d81

SHA256
2c6ef5466c1d6a14251b2897feffa93b54663bd9a8b7e4a91dd8eedae4634614

SHA512
30c9db34f789bcee59efe3f6f7b72b3c3bd7d4545c6daaf9d3d3e28f7f22378a2125caa387823b157e99b14eddfc1e0d0c0b91599c4f443e48b0d04bc8969407

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
0cfa5064b4ea0a51a938aa3fab7aa77f

SHA1
652e8c43c3af565507c521366653b741cae0c656

SHA256
fdc6785c86909a477bc3a2b25e4fca6a0bf326d7fb06df7d77b594b4a868b179

SHA512
252aa9b090227638a8dda1596f0f2cc5e2cb73ab234d8fb2d549c0d715ea52d01db25a6abeb21cd85256a5e53d1e5361a504c9b0fca293afec4f82fcdcfbad9c

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
01b056e6b0a4d5ffe300609f90239842

SHA1
efffe709ec09609d41c1774d4c4c2b5f099df669

SHA256
c986505128b7c4063e8310befe3873db8e0c0aa38c0dd355ad16525ebeea9e23

SHA512
3ef176eb03f244391fa5ff786f1002080ed2943cff7670f822961de6d708f270475c9200622f7848fee9eb7727957a43a15c6008be36ea99403f1edc7388c54c

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
bf1fe9d49281f4757ed6c775f763dd49

SHA1
e45abd859ebf399e9cded44583311c3700d4b04f

SHA256
31e4c5d22fc7ea66eb36d89fe282cfbcda4625d9b1e1742a7f2644ed90d75415

SHA512
ccad8a1f326415f137da9fd3347f5f8a28b475dc9f6386181f4e31fed3238d4ceec13d1d2c4eba8e3c95c7ae5a401d138c3e7535ec8c14a65dbe07f2c09d297f

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
de594e030a2a0699f28851b9690c4462

SHA1
d532e92df600b97a6fc367ada56e7f5de08fc1f6

SHA256
3082c18d64b6ca027a9239a5c22d2c5441da656e2740fa7df1a440f9ec5e53b8

SHA512
a1f3718fd8ddc30680909e19718d7860d4884bd44ba3a01fcce3cef4fc8c5b0fc23d95595f52d6d922eb72b4fec1fd5f22d5e555300341c3a22f2d84c0a6ad21

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
00db5a5aac59ef1dcc3c0b4fb110b224

SHA1
e01c0dd78e3a15c9b0ec8e779fd65d2ee1b5728b

SHA256
4a0cbe09969a274f3027f0ac89f3242c0ce6c8c5516a15c62b39568e3ab9ead4

SHA512
ddb3f13e59bfcbba445201408183632c3d62e9a56cf9af387abb31e57bcade96f8e17f54b4a43c38b46bd6446157dd2ee3d4c9575170987698496d8607c2afdd

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
5bf7f36f5b84ac9b9c385f9c9ba756a7

SHA1
19792b1a6b7bac010f4946b820be31cf9ce5fd01

SHA256
19d1b3af9fd8f9a6e3075d47b4accde801b9294bc8eb39ee58a23247a6181c8e

SHA512
53ccec69c23326dbfe77b329342a41f641a6c73eb995cdc4c8044a2f88198bb7201c1dcacd60c9b4161766770860d4ae32fe7b44a18d0cada8a8d993080e798e

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
ae0ba4865ecb5e31aea0f2bee5daee2b

SHA1
a793d3972e83aa036bf87bba6435d39108fc2470

SHA256
4b8f1436ed3f818ef46282acc7ac2c0ce257da27577bba03611a98f8ab1f3e59

SHA512
94481dbeaa5864937dd9ad0cf44f7aea6edc5a183530f864f48092de48a619cc721ca0c9844f18b8e2a664cc559a4ccf203c44517cdbc41344b3136c5d7eb7c0

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
d2427dc1c92e5e002d085afd7da92a01

SHA1
27a7572ee6911d042767d9cd206d0a9e03a5483e

SHA256
6dd5f6eb857af9dbaeaa246823740e32579f713068711d392906708a69b0426d

SHA512
5ead9471b8a91617653438efb3bb1deff105ee5f15c1784ddae06418a657a490670ebc46f389fc2bbd43e987673eccd899c314afed920c50f3adac63d494521e

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
6dd1eeebe27d6ae49f1bfc9c26bae438

SHA1
933fb7b61aa01393ab6dfcff1e718fa5e5054d39

SHA256
bbef440586796950e1fa3677be0f50f5fd145a222b9a0c374461d21ed54692e6

SHA512
236f640a8927cc77ecf41bc8b1321911d40986d227b8c5e4de3ad734191ca6665258634adab89210c8f33bb5489b96c1262c2eeff8d131145441325e8ffb365a

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
d62ffd3a3ffe0ee532dd46738b4093ca

SHA1
811f049d8d9ee0bb1da2ea1ac70318447d9d561e

SHA256
68fa11212b1e161e77fce8751644187113060add63abebbd1bca1075b2ed96c3

SHA512
17bb5954ccbefc56922308fcfde3eecb38dfcf4a7829c944e9c66d16e9af2d7b724873b3e8ce7602cf7acbae4122ca2ee35f2949f0ac2fc94726145d164b0da2

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
48fb260b3ab3c928645fdcb8fe15c2d8

SHA1
6c0de741557c37455dcce9acc46e070d80502177

SHA256
e6993aa4203f8347b84666236cc6b3c8b5166c5c53322f1703bcf9d0b0682761

SHA512
e8488df53f9e24fda929f44ef4588e34cfd73645f765a50759bcfb785a44bf79bace3a2b7b16f8e204e6e85a6221eb0f464b29c4b634a16f09322078fcdd7747

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
f1f9209c598dcbec1155069f788c4597

SHA1
3c7c4177c4873103d33b71a86045a31c254dc210

SHA256
7d97441d74133c0d5041d6306a94ecce017194051a1b7d9f213c8868f79385f3

SHA512
50b2899b25cf82ed46d78eccff56c73d1aba6d2d7ef9099bbf37622a870edaec94f74116f7776e3fab79e8c5129a97d6b9eaf41523d67440625734b7fffa1ea5

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
3fea0f1c3405f46693ec8b39edaacddb

SHA1
25b02c254941c7d3adfca076ed2537aa6260063b

SHA256
d3cc841458e032509b0daf6418cbf3d973cb5740fbb0d62253db7ca2659fc87f

SHA512
788465cc8416225664e098663d17ab876024f5bb64d13e750173f61d8466a5bb0db546f0225dcd6c6d6491f176d2b4e59d0288acce64dad4d4e80d5722e10af0

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
145dec978d3d07df83170a5bb625d842

SHA1
d8ce794ee196d49bf3c4317d80abcf078cafa7d6

SHA256
b03e29d87c271b3fa3d96421bdceeeadc11dd988f764476f52ef8be162fde3d1

SHA512
72bd895f6f11292e487b2221de176b69550b4870d49a0b78561277adae1c38a14aab4338102278f7e2dbd2bd06e6d77e9873a7d53eaba1e9d1a2bec91f406528

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
75e25c8a20dfc9dd2ff21769c50756c8

SHA1
9f9f4de95080fc318640b5e338c43749942059ae

SHA256
d5f6b1820c47831b594e0bb6f13f9fe82556d64adfe95a64f091ea1839e3b480

SHA512
a6e6237d1aca48cbebfc3ed4c3ea4de17c95dac1125d301f4f96ee7e9c40a64840c5e94999cfbb5a6201210b911c816661e50be8f9ff13df16c532b705cdd465

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
217f9a27784bf0b20b25e33a1b88d02b

SHA1
210ebc50e7e5ffea18800e8dfd05b06c9a7aa391

SHA256
096ba6c1400f8b57d2ec705862b572fa1926d7441fefa36564efcd0ce15aed49

SHA512
4efa34558f607b2bddaab24d910b3f71fd62c856f74d73b58105b13f15ea6262ae027535bdcab9c7ac6b2210fd56a46340bb1e328fde93d36ddb1f4dfb1402b7

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
ff2e64800a8c79a718db19d918de1372

SHA1
3ae26b524ac22b4bd435cdebe4312085d196692f

SHA256
e03c7376469e622642bc431cde2b3cf72549d90879890b3766b3ec252606d97b

SHA512
8f54b4731b110fd01506393684bba01658355a6b7650963b2411f908017f33e0b9a5335e7856705e2e4aec2c58e79a9f7b3b4d3842ebd3ead42e01772d587b48

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
a1dbba6edc1e8df9310dc09aa8d51132

SHA1
eb1f5be00e87a8e227b0c71d2012c83697761514

SHA256
64fa788b8be0cad2efc75e141bcb8041d1a11dd8c8e4e6c5ef1e141e7b5bafba

SHA512
7e23d3433d8e0cd8e30cd79662c1dbb2f8b22c71b46aa94159754147fcc754e8d9ca417eaa8b0a561bbf09b95ab58b0146aa0dd530985d9a484a230605b68252

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
169b4a580351784c87b270a939d4c8fd

SHA1
16867316033d49f4e0ca1c8e928a6aaa195c449d

SHA256
ba6a66589b0e6d32da5a15cccbd8d0f76529d2b642089dc7082ad8c73ba5708d

SHA512
8a745dbd94a63ff76724c5ae58e82e57b34399355904ad73b829eb5c7670d67bc01a22897cce3f639e222dc031c013b815d4eb522fb1fc43ce5e98666730ac78

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
3a70103ac2309561b062b29b34fe1760

SHA1
a19be90f966d2135b56c11e823474494b86a5946

SHA256
5e9c19b66df4a81cd90198e15d0909bd78f726880f38dc16d4949e5a25727293

SHA512
276dc14d0038b7f068c7ac1dda1ba6af45fe867c5229db983dc306916ff3e308dec5dfc03c6ba4b3494b5a5d7464c0e5ede3940478558aa906aacac29b94b1e3

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
ba1bbb4d26cb1d5e7b428cc4fc4175f7

SHA1
97f3427fb84526ff769a150fb58343a569c21b35

SHA256
27f6c8b2be3bb4f9cac7d82d89516fd177b92e84e746b30877ba04ef52c4f247

SHA512
d3edee66ba96e7f852da7297ea9880d0d4a965f0b440f7e36e9f469fe79d3d8c91ca5d7b70a384f79398127ff5167bd12e47d688c73464c819a21d7143fb990a

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
fa80a5e1080ed0d9cca4cb57851107f0

SHA1
cd6643d83e95f13ff2d775c3fbd08fe56846b6b5

SHA256
b3e6643d2d0c4b0a1ee03f9188601d140a77b0abf46dc9b4ee95e13feed18e5d

SHA512
77a7a108dbab5580eec24145691aa17247f2c9aca42689844faaa84fffda1e2e185fd52096431f2f41b56133d3bf0ff2d8ae0d80a72cf2473126a348807817f4

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
ab153ac105cd2e97d71bee9d738c6f52

SHA1
b7c0c5cdde3f42739935c8eaa587c71077d37471

SHA256
e9fdfe43b3fed723d7ab3b4adafb8301a368283caf5be55a1b9b96b382013ac2

SHA512
c7106ebc2fb9edfbed5906c696b82f5385764ca8abb464d83fa1f9234595665d1b9b6b7b8accb55b882d59a7a0b347e9fe9b102067ae62e8ffca544f911c03c8

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
b934fd1b10dce3e937e3e7d9f84a5768

SHA1
aae6e455e48ddab162cdcf374aa2fe15db655ef4

SHA256
b61e3c05ce11708132927099990da4e6939b6e60685b1d1dfeab04fb8552e1d3

SHA512
e3e484d595750a2c69c653d851e6379a033e80124e239114916a521923a2ea9deeb9a4dc30ee36c4d3837628991083b76e6515d3d4947479e087b0e2f1e4f693

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
9d558158ed2a83270baef2528cb9103f

SHA1
fd5a2ecb2f300b11bb21ab8e8aa438f072380743

SHA256
4bb1cc579250bad8f71d1484c9c5b5315cc9dfd8b3a103453e9d66de61851efc

SHA512
b8adc260fa24a92e37a63739b2c07b05cf1dccaec36d63538f93f4ef64d20ddabbd36a5e27d0594461074ee8a9dfe4becb40d4a20a3dc930931b4935418d8792

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
bd30b5774441a032fa98821e01933803

SHA1
dec31d71ead4c7f4faa37c1be2c5574064d3ffbe

SHA256
366c038695306ad6fe80f21a032d5f420c1b8eed99c512224ecd0223e2426e39

SHA512
dc383564904e676563f3d20172e4d35022d1bc73dfbba9233db725e3bba35802704f973484a1fb053d2aacecf875a3387ac40b04402c48c185c76ea97f49b91d

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
661b794a2941344fa43d8a45ebde1862

SHA1
becd9c11f14e49cf98367048bb724a7b1063457b

SHA256
8dc7d8a6d2c6c8b84627e024a13e5755a062eb910358d7d665394ec19c0d87e9

SHA512
718cc73b8494c94b34af95d2578215d96f6af22d987dd4be3c9bb6bcaa13f43f829e8e91a79827efe928842d77a70a72f7986c1859e682e893c72e8c116728f8

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
0580c8267c208e839711f0f7b181010b

SHA1
114f9357bf52da1b9b1bea5f88e21498fa8c0cc8

SHA256
d68d94b61dc17899246e39796017c5b1a0d79095dd23a3355742390fe7105eeb

SHA512
a06d7d33381e26df5dc347571314fd978e168af4d42079caaed2befe75da94914b2fe5bb895fed37e59059395cfe2abd300bdb0d7957ae36c96e37139060c291

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
003580cf282941e44630f09e8e4b255f

SHA1
270ab4d96a52ff35db8a7ce8befc28a50077a882

SHA256
b9861a4332959d9b6959d8457395c2c0e1e01753b4b2da158248aded8036f0de

SHA512
43a7ffd0b523aa055a74b626d9f00638045b04438c4a23b1076d38cca1bf1416652013d6d6a0045f2fe7ae2fcb340ac6ccf47bbedb3d3441cfef1f81dcbdeeab

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
551e7bf40fd2e431cf4527d790ad6595

SHA1
ff33a42123566dad7c8e4a186da7f17e48d3c74e

SHA256
3234ee5831aee8ac0d3e8aba042cc7123c8f0edd7f565be9894c6658644be23b

SHA512
b39ab290412a23f30e15d359c1b61012eeffa06030bae275e94fe63e0fbc6bd606a7e28fd964648db31c4714ddd9cc38bdb422ad3338ef3b91638dff1bd13ca2

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
5dc2928d0f4a2e5b56bce54c920462a2

SHA1
2185286244891d571990c6706e14f756ccaeb6ab

SHA256
75da29082b2c04ad3f9ba839b631cd20a20387fdb012e3f1f884b876563da444

SHA512
dab44fa99553c5f919901ee8f429a5dc5c6f12b293b08c60520dd8720a87a12c9f6220b882795046228cbc6dd5ec59c8c5822a382111d04b2bcebe210613707b

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
8fe3a944a4919820b460469c2d4de1fc

SHA1
2744b71c6c5c13af23c8071f1a1bb87a3dac2a5e

SHA256
50df5027e64bc5f96e6f3636b5d59426d90b0ebecec5e670b0f1e631b823e49c

SHA512
bc18a0ac15a01b68c69fd591265bfacdc5ace5e93f7eb32d780b6ff42638fe2b84cdeaab8ee4a6b6c86fc53edac138c7eb0107f04a6b87b9099d98b0af21e28c

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
6419d58dbbc1f926f78d051ab5cf9b5d

SHA1
7f28bf60e7237032d6832a0e04bc96589b306b74

SHA256
5b70ee1e8098caa60408d0b806a68a8750fb4c7e00bc32fda5d921634d539042

SHA512
5f5723871b77216c9f161789a6c0a15aeaf23aa386b4e86ff3c92868aec28281b7e9800bebfa1bbf89f6158a35326c63d115dc6a4c787c9edad0c2ecf5b5763b

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
3ea6537d0acfb26d13342e2287df010e

SHA1
84c03440fe29f597568c9c492dbb40bb7ddc2fea

SHA256
50e962416268b89b6e1cb44aa9625fa4c480929d5f1616e37d4958ce3090559d

SHA512
a483d8f25f75d99bb205fcd7689ef24aca618e6e300a5cddb860aa4132f27bfe8e22e425d565abd1d48c31f4ae6385928ca05cc9265b62d0be293f364f859499

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
b42e36358ef14a1a0345e3893f395668

SHA1
9bf87d6f852bb7d908c8cfe02a56110a0d1b96bf

SHA256
074d70d6e9e30a5227b26f122c30a2c0533f7dde3eadf2d340b81d5b1f5d94d0

SHA512
081e20c656aa4d22e93bcc37220295d0f5d94b575b71668aa45be185ebc2efabe06b84d4831813cdb3778c10298c5dd5c223209295b618dff308063ba178e4cc

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
15c407ecf25a19ff148283ea66d7c5d6

SHA1
7c744a2db349ae0deafa5046f59681822e08aaab

SHA256
de9d68124db1b4eb0e1653f981c304be13bed9d6dbf46d538fa46e34fc10bec0

SHA512
8e4fcbce385b56ac8b999405336673c8a7433132f54fb0175e62861e4549eaa74927bd59f56ed7c52d6d3a155bef293b90e301df8985599b3046ba99d771d62d

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
11be32fbb7a0330535f7bf680017774f

SHA1
34c3e25568fdaea69ce77d2832bf7ce0eba823cc

SHA256
1881f21f422d3ecad3e54468232198444c34c5c252be6dcdd93a7cb669a0ae44

SHA512
7a58b11f5c8516d82b4fbc5f97a7512f7fba0204d462d01a7c1b58584b0971c9597d31b8f2c07dd6dafac138ec9be158a950f2bf99651b1e9f6050fdf993a1a4

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
9feb623dd558e57661ecfb9ca2e19a11

SHA1
b076c707cef8d45ce6caf822b605c7d63dc30216

SHA256
a7d4d57cdee46a7cfa525e948a29cd9cc96cd9f4b2eecd4fc8d53c873c28a3e4

SHA512
b200aa70429ec8705ca68b1ee57dbbd12d79e099c7ca0f6b691110893ecae1f9bc67fafafa1792431361b4b37bd2be4c9aa4c09a8e6c7e3ae58f88388d8a207a

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
1f789872ae7be8b4a658628854b4e4f8

SHA1
efa5deb99674c0a246cf9e74c91194250e318d89

SHA256
66a80c0e5ab6a561b4f799ecd20e60d1ad8054b6d6539c6ccd021a9e26e328c4

SHA512
ca1438fe35cc36089425e5e33cdb77dfd15142da1d0aa24f58845cee5bf7b71eced5e7bbbd72253512b80972f764c0259336bf3908e05e799aca51de198f6625

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
c8a67f8b8ce607ff54e7ea29fc000450

SHA1
4fc728744bb78a8c29f05c67e067d3af755c9cd9

SHA256
9a0cc9b664d21fc01f93ce946d8426cbfe4a38623e2b6fe06c967291fc9840ee

SHA512
43148dce167a73b32b26a031e97ca75b8f7be8bd0391217d855ed7ae1feee09a9a7a4f356f30d054a9c157cf29d25b24fff321c96f01cedca86cc348f3f556e9

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
b5c35513df7ef6fef4f7ef237fce3c1e

SHA1
1546690ed591b48da87a3e9e5d7d1db00ed3eebb

SHA256
3d1e52c7d241478cdb35609ef8f6eb7ec26cbefcd4db77e7e6eb63edd0ac0e98

SHA512
5d8efb4989fb191a853daa386b63b50f5abf7e6bf2699c74728b7168762142ab1a5e0c8ba8d5a2ee2bfb75081c5721e08ab35f191e368b35e557e65ff9c5fe20

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
1d35820b160b265b0b5311a063ea5716

SHA1
025ca909a75efbd12f41372e20f05e15ecf54e51

SHA256
f0af25d1e9d3f63ebfa62e14d87b9c885863fd8a889279ad241e96f7d12a8dc9

SHA512
275ff3111a77c1df231056a3b45a4099472377a4389355d549af2d01f6e4a0643a412fd54d11140ca4b8f0cea0b9018fd7fed093487114d36d7a18f46d679542

Download Submit