0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Resubmissions

02-12-2024 04:58

241202-flyd5s1jex 10

15-11-2024 02:01

241115-cfxc4swlhv 10

Analysis

max time kernel
134s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15-11-2024 02:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0A6172B017F62EAA.exe
Size

137KB
MD5

b556893d6f0219bb98468f724aeb06cf
SHA1

540d6c29aa4a05564da6bf253fc46fc8793277f1
SHA256

a75d6bf3c8cf0fc45b368bd83200d141319c9c67033803a230bd3451a309edff
SHA512

3a9c8477dfec35af9e682e197c76a1c1e341cdd4f4c276d1c18beac9ff5b53da394eac8428e66921369a607cd75c2fb7e430466758df508d6974e59f7f901ae9
SSDEEP

3072:MLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hn2bIoKb:MstYrEMw6Bxk5zOFNtgJiCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 0A6172B017F62EAA

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11274) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Control Panel\International\Geo\Nation	0A6172B017F62EAA.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	0A6172B017F62EAA.exe
File opened (read-only)	\??\D:	0A6172B017F62EAA.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\fr-ma\ui-strings.js	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\ja-jp\ui-strings.js.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSIPC\ro\msipc.dll.mui.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\icucnv58.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\accessibility.properties	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Grace-ul-oob.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupWideTile.scale-100.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN054.XML	0A6172B017F62EAA.exe
File created	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Microsoft.Support.SDK\Assets\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Audio\Skype_Dtmf_3.m4a	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\InsiderHubStoreLogo.scale-100.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\bg2.jpg	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-pl.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Collections.Concurrent.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\System.Windows.Input.Manipulations.resources.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Mozilla Firefox\firefox.exe.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\oartim.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\PresentationFramework.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\Microsoft.VisualBasic.Forms.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSYHBD.TTC	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\AppIcon.scale-125_contrast-white.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Marquee.xml	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-140.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\TrafficHub\contrast-black\MedTile.scale-200.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\APASixthEditionOfficeOnline.xsl	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ko\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.reportviewer.common.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\fi-fi\biobio ransmoware.txt	0A6172B017F62EAA.exe
File created	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\AppxMetadata\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Private.DataContractSerialization.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\ado\msado60.tlb	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\sunmscapi.dll	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\es-es\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Windows Media Player\mpvis.DLL.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\SkypeServiceBypassR_PrepidBypass-ul-oob.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\iheart-radio.scale-125.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\PresentationFramework.resources.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Mozilla Firefox\locale.ini.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\GRAPH.EXE	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Input.Manipulations.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\ext\sunec.jar	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteSectionMedTile.scale-150.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\hr-hr\ui-strings.js.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-32_altform-unplated_contrast-white.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-256.png	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\de-de\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\deploy.jar	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationNative_cor3.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\cs-cz\ui-strings.js	0A6172B017F62EAA.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\redact_poster.jpg.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\ReachFramework.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\Spacer\1px.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-white\LargeTile.scale-200.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\en-il\ui-strings.js	0A6172B017F62EAA.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0A6172B017F62EAA.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
3188	vssadmin.exe
1292	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe
3580	0A6172B017F62EAA.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	3580	0A6172B017F62EAA.exe
Token: SeRestorePrivilege	3580	0A6172B017F62EAA.exe
Token: SeBackupPrivilege	3580	0A6172B017F62EAA.exe
Token: SeTakeOwnershipPrivilege	3580	0A6172B017F62EAA.exe
Token: SeAuditPrivilege	3580	0A6172B017F62EAA.exe
Token: SeSecurityPrivilege	3580	0A6172B017F62EAA.exe
Token: SeIncBasePriorityPrivilege	3580	0A6172B017F62EAA.exe
Token: SeBackupPrivilege	3684	vssvc.exe
Token: SeRestorePrivilege	3684	vssvc.exe
Token: SeAuditPrivilege	3684	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3160	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3580 wrote to memory of 1940	3580	0A6172B017F62EAA.exe	87
PID 3580 wrote to memory of 1940	3580	0A6172B017F62EAA.exe	87
PID 1940 wrote to memory of 3188	1940	cmd.exe	89
PID 1940 wrote to memory of 3188	1940	cmd.exe	89
PID 3580 wrote to memory of 3404	3580	0A6172B017F62EAA.exe	119
PID 3580 wrote to memory of 3404	3580	0A6172B017F62EAA.exe	119
PID 3404 wrote to memory of 1292	3404	cmd.exe	121
PID 3404 wrote to memory of 1292	3404	cmd.exe	121

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe
"C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3580
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1940
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3188
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3404
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1292

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3684

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:2188

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:748

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
ca52af58dcb8e36fbea6f0808bec1d22

SHA1
1d53f0675357fcc0582bb00382fa2672feeeda9d

SHA256
9f268030d8161ef6272cf96eaeee430c339598ba55c0a9d23e0da71bfb750820

SHA512
595f05eb100ecbf6773973f1787573d257ca1d6c52476a2f636705a880fa0404312db2ec32da031491f77fd8df904f549fe49b4f55a6f8995fbd9f83db1f7b15

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
5b6ff1564ac53ef137a658d8c1e97178

SHA1
a403128960361b2d4613ac24f03028443ea60604

SHA256
d045c3fb97eb9205722a56e3cd1733b8baab98f3f9e0f76a0715813da08d1580

SHA512
bfc0935d556f6b34623c273e4a7a1e91e8a2051ba059f647e854c1ac74ae65e6308367301b7e3a721d3783c276948269ac041a3a55b23f1c427420e315072971

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
176dd0f99a448aadbf57dd26d06066d6

SHA1
66defed91b38d6c4aedfd579f6379b20dcc2ee6d

SHA256
422cc7cb8d9c606bb8776a23961205b272d3c958082c3b72c9f2470ca3046a1b

SHA512
e0259b7007c3d9f4d839e7f0bd6f595d681a61c8f398334324d9d5152e2c3dd931824879892da90b2f5a8c3be40020981e7c589a57a4e23bf65196fde7399476

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
fba20bdae4c7f1a385abb4148bcda4cc

SHA1
4ce57544bba54bc0a1f0b2a4f523ad5a97bd4618

SHA256
daea8c014f29e9e394f9234418991a899e3cfec1aeed2ee5485b5be9e78c5862

SHA512
bf807dbf9bfb68d30c7b8a6744663534f8004c866b37843a048b88a1772d568d33f9de3a9eac678215f5aeb04b7f6df3ff2c2c2cc6b07be192173841cbab5c89

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
d2bcf6f55d5c3642137147014068ef69

SHA1
6cd4d4913c9e291cc6cda8576db2afd1deed3ab1

SHA256
8139bd9d0f73ee2fd65e4e784a3d112de2fb96f26f0d158c81f69fa22f6ea748

SHA512
4a99b0270221c46909a65e9b636eefd8e48732ae39632693a6b57b5cdf2abb0f226390e3ec8c6a3226080b881ffd821f66fb8e79b4c2a8b68108177c38303240

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
14ce14d92b5c1a9d9d45290f862503de

SHA1
2f83e594d3015d94e4a400f66797872affcc53f4

SHA256
1e61eac14032090d6da72e1b4a8ad78b6c780c59c244ef8c0f6df677683fa605

SHA512
a3af44bcc62c9417cf362f23cb892183f7c611bc0a80ea706099ab4d98ab53fdaae1276148bb50d53a0410ed6d7f93b7259fdf271974f05b81e915a27ae466e8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
d33876cedf83cbee8b58a58b79e23b58

SHA1
cfafb5412ceaa890c452dc3a981ae847e13cb199

SHA256
aca5df1683b7d16dc5955ba00e26cdf73b05e62cdad21bcea369bf99b2a2f773

SHA512
2fc907e7e84f77bd8b72da011e5c36ffe4cceec65e2f301876866ad957ee48f16cd9a477b171b13e7db27f59a11b6bc2c029d8e9ca282f6e4c18bb1ff362fe01

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
30adfbcc3237b3752cc46827debd21f7

SHA1
8ea8044e1c44323245039a1cc08e4bddb394a0ee

SHA256
c9681ad599e1b5705b5c7147513c54477ab17cb7171029c453704c9305bd231f

SHA512
26533a21aae1cc77150f538a4a0e1da96dba3f6e8a5f029ca6b8892637ba40624efad8036508d048af209b01c5329c1ddc34ce70eb8c292e804b55ca8cdba196

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
0439a648b7fdce1b32fa545eae55ce04

SHA1
b59c31802a7aee7f3631fd1f13f5794e552a4d66

SHA256
4c460edb42114fd9443d0d3de33cf90c89f04eec18a90dbfbf1589bbfebf3ea4

SHA512
768bc43434bb5ff19f5ca899ea9af5b0575e5df93f35e7a02292ed2f46a1cb69e7eb2e19818fdfae1f033368b8de3e95e480eed8028114753013ed05cb2a2918

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
8386a780ef454de15bbfe5e4ddc89278

SHA1
d310efc04cd4e58381f045d757a36f6eb7591625

SHA256
841e28a34a0cbcb8998cdd893a14390833f2397f563654f18c5bf880b1445ef2

SHA512
67d2b517ad5ac3172c1ade80f54069dc32af4570d4dd4bbda1629c48d8039681132acf4fa564cd10a6407b7b308b9005bb0a340f83df75bb99992388c76be4c1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
77692cdad8645e2e77f72fe3807a9679

SHA1
a8204edef36424656321a32e69fbefd5b92202f0

SHA256
be8dacffdf4a3c25cfe84c8b6e7f112c08d1a160bafe2cbcd6155543a4d7b558

SHA512
eeb948c451b89fd5149bf994cf477a70f2348b6abaf19fe6e9b7332d0bb4fba3cb6d55db9bfd5ff8829fe128a28e0aa5f9cc830fdb8f686011220161a74e7f9f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
b734c6a0d5b578b9909487cbf8ae3d17

SHA1
abf888b881a6d321d98e78ae5d9070fcda90bfae

SHA256
4cd2a7cc9b0a989a0a55f85a86370414194439b5cb315bd3888459251226bef2

SHA512
2be8c164240f6891adb594d53e6f712c127163de5d81a367357e65ee9feef1a63be6e19010aff8cceddf761766a26eb23830cd971e177565cfdebe8f56703cb1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
9bb99f0efd79f32bab2f18a45602b15b

SHA1
0d6f705582d2af97577b20638e3db09c05e0d60e

SHA256
99cda7774f7c004e24c4e921f17f649a103e032f1b04281e2f82c44c0df4081b

SHA512
2c4a3ddb946230f3f115d04f01d2f2a86aa147a11ea6cf69845744eed1c021d1e7241ab7276daaf72288cf62467bbad00f4e4eb5c9d13d452d716978924b8d8c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
1fa45d3bf71afd8da3c1e5be487be359

SHA1
c369fc44adc35e470e3420d924c26a6ed6d5e1bc

SHA256
bf94baa9e3497de3590b204c0a9d973186746035d51cf1e8256a86d0f249cb69

SHA512
d7150c47c7ad0618d71ee08c137d2fd5c2c43088719776a57be7db3bca1d6143f1a6d96a867ee1b1e154e1daa3a24d5d37702de14329fd5b2c05af18ed68a174

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
5488cb028c90ab071213d500c327d35e

SHA1
8b63ea97c2ca6523f855a4cbca9b06c449d25564

SHA256
8f86e37bb913787a50366522a227b895878ab1b830a04ec8a7ad83d554895004

SHA512
0de38ddbdcb55b837266e9faa7430f094a2c594eba008e54601a97eec2803780c80d2f1418bc8808bd99cbd10449800be9028006e4ba6371820dcebdf6c2510c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
15e00114d883a80296882cde2dbc9e7a

SHA1
fffd0bff653d139f3fd91a82b054bb1716654d7c

SHA256
dccf059b72d4cfc904084b124f364816efd4f6acd661fedeb2f39c065d9ca17b

SHA512
d76a699f7ae1daa6f79b8844e657f2e77c7c1e2efcf7ddff07e619850ab6a354f857e4bf5b1365ff5efbe5ffad7c7c35314ab7db78d71a40142a1cae328b4502

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
b02fdae585285b61550980d17bdc63bf

SHA1
9161b2ac59e38135fa311b3e47eab5f57d07ff14

SHA256
30a9194c5413e81347697e51e9c1b82efc1a8c25d216195d19ea4b5c49e0fc32

SHA512
08a805191ff69c0827c1a720272b974208dc842955d103e1a551766768cf3ad49a5b1851a20f2d75c9584e83ce9c9679a1f8c7ce5b96f25f5570160ebae28cca

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
edbc26b97d716afd0cfddbbb1f42dc1e

SHA1
e961fd424946656aa803792e05d45a90d5267aec

SHA256
2cfa3cb54a834a5fd52f6b28ddc4f5ec7a20fb48f419b1b563abf8be085947ca

SHA512
ca9a8a9ce4df88fb173fe572a6826dd61c13827268ec08e5a406a6f707619bf095af70c9ee00c4d853d76b5cc78b19b97d925bc86587b19073dbbe59b4a55ff0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
3e2e45f0fa41ad71d29d89ddb0f862dc

SHA1
df56ebf665c5ef0150bb2865af03ed386ed4eb58

SHA256
2e517e3ac019758a4fb327804557fa9f2f2d606d4db4c1118b2df3411e654d16

SHA512
bade3ad02d5bb604b9adb3d8a021b9b1654ac15691082ea9c2c7febf5166f6c26342e3d09a015a6efb625e307717e9debef64f66e4919873eb03e5730955e1f6

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
8bc5e3543d4887161f0cb495bbffd2a6

SHA1
5ad5b64a88fe09b321b390719ee6b5cce7703599

SHA256
b23cab9e257d92677e1a272951b54c7478a52bbb2181b5b3adb8f26fae6f1d19

SHA512
00e765f95c8aa4fc27646ddbf94bcb9217ebca997a1f506659af0919cc8b5c469a26a8dfa25c0c363658b7bfc0be0dac1050ada88fc0f2b6ef2e5d3669f8fdfb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
3489fb2d55f88b0a62811d024319b8c6

SHA1
c7d746524d4e24b242e205c011e486572163e7ef

SHA256
a93d56ac582ea19425593ac83ead1c6f9b8598e9ebd8dd66323d17a9ddcf4142

SHA512
adbf21fb5b586b0a7456cc78d1bfe7649526422a16b13dd9e422d7d6669bfbdc0e0f7d6f72bbe81ae32d7eb142457108cac5f1948f0bbad380d96961141550eb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
05b98e5b5932f14df1ceae7fa09a41c2

SHA1
adb4e1b1cee4923b87c535194d8cd1e6167e8b48

SHA256
aea868e01d8093a678387cada5c4d10405a2ae3b68f0a47c1d9776cb01b966cb

SHA512
5a05ae7532fb78928599497025efd29c8cdeeb8e156599169ad4901a69eab85da9b9ec78490f5c08e5c823f06a03c918b386e7856a73b94e51aab5d6bcd75616

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
268803f186e73049223b1b5b1ed60454

SHA1
49857e113f64975f40d9018e694e87a353d1867b

SHA256
9330fc50d1cbe0f340ae8d2077d270249e9b24ec8430956e04203440865cf5db

SHA512
2b987bfb0e8eca6cb4e051e795803318292e56d80169c70aac2458891cfd9a15f16f751ee32d355c7b615ed466cbc0a68e0bc45ebbe09ef3c6bdee7517aa4985

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
0ecc418b904317648e18c3c5cc0cec52

SHA1
381dc7b19ad1c1bb657c88eb0be11ca1e3008ed3

SHA256
f0edb5c3b500910ef8289466d1907a7a0d6bbfd9558366ee712e4d4e8d695bad

SHA512
f14d1a3be5270fc42398b1775a430b3af855ff4afdf73c4da636cf33144d628ab1574e43fbaa564b38c880d6a370a3069dead5d0aed4076e6e7eef7e8b23461b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
d7cc526409e04bc4f9371b2a59f38999

SHA1
8161468edbe050910f998c63a803f6adccd4d440

SHA256
f9907c25d9151191effb9156ac113ac937e2ebe365cf2e1e09b84db255f4f7d4

SHA512
6d8fe4174aa8b007de366e348d3a06dd372353ab0a246b1aad42d7dbb3994192eba0e79ea228264ff198ef14ddb9be0e776e21defaf731a42f1455d003a09326

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
1baab40eeecb78cc0db1f13de4eaf20c

SHA1
c9ed7c2bfa057a276ac2f2caa476a36d3b27e823

SHA256
a6ba71fa27f6359e1a898696fea0ad723f39cebeca69e1e3ee320bbf9d609363

SHA512
972b4e26432a47b7cb1f8725b0a5f8c592d99b3f0b34cadd346246e2a6e7b0b4e05c81a8eb0f825f766aebf927e813c6b8b9f088ac38477bb070b8437f026d70

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
86ec2e3131f597c6d40114af352186a9

SHA1
23e95bb7e1bcaca5f8c120cd7fb9bc311f210599

SHA256
0887de29b45f9b41cf5f6710a479f6823a65bd9a0ebf731b71880bfdd528e253

SHA512
8dc9b3b4d0c3465393bb6984425d96f2dccf4dc98c265a023e735f08546cfac627f0abedc12c7cb6e8e18e6975e3add12a84d8749224ae2fc6e89b8bd17e220f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
a194acffda47c29484ebbbe5d4f03528

SHA1
7b875329fcfc617a5d47237980dc1e4c77c728c1

SHA256
dab98d515d45faf4fd9102886ab156de2e5ca1e93c803d6c28a2f936a4a7f752

SHA512
be217c876508df11f3c20503c053157c8c78b021661dda46c33e9096cf4a4166cb1fd2e11ec38bc32699dfe8da6bc7b916e7a03a977f2cced8be7683bc3451e4

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
22de5c2610c4713b58292241ab9ed7d5

SHA1
0ae4f3be4bf8b6e6bda184eaa47b6e46176e2387

SHA256
5cbab17a21da74198e950cad987835edabf462bf17166af2d59d891542b358bf

SHA512
eb8b3c34ba98f241b735d734ab61b39eb0c4a7f23103891ee19c689c4b542690b9e6a8b0b8ded5601f5950f9b6e54c7f8a0c7dfb01c1d2b42bcd610e0eb85448

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
e4b922287bd761b90e10163ad0aaee72

SHA1
db13235dd919cf4955b52446a893ad2c3f693207

SHA256
4f82e76ff40a539fae64c06f41d0dfe7bf0eb429b0ff288f8ad99432b97e02d2

SHA512
8029395513905855bccac08316f65f8a74bf4f56710a2069c2cc7a57a1d5c7a98c9da9325d1d61b3d3eaee2e053e9a33613ea9195cde3663bae3f5ca9ac65127

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
a57556b35f1ad56cc549371b2ccc4cd8

SHA1
83817bac38d7935bff5bf1bf09571a8899ae06a0

SHA256
3d460eed1e9a0b0cef3cb56a4cb0c98f6a1b0364e4d2f4e6546f7cba1e21de0b

SHA512
65d97f76e5418ce4f1576d735e030ade325af9cc0040b2280e89a43abb433913c4cc22954bba9d6ddf426abe99eab3a9209643322e9193eb576ab8da5fd3e94f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
86a7228ba2e7a4a7787abfa87d79cc9d

SHA1
f8449012c4f6e7ceded42e8dd2f3090fabb369cb

SHA256
5e31198ca6d381f796f98bca14c372c9b75af89050cfb812cccc2d1e6448c3ba

SHA512
c9612677c891054f7298b3e41ff2d5f4283a6a20ca087a8dfffd3aa822727ebed024ed71d956fce1355015b3167c625501213c978b891ac78a2c638fb54f260f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
36ce3065f13e5256be9091ea4d82d51c

SHA1
ab24829d04598afd85e70cd550b68cd46578cd2f

SHA256
7cc05ebd2b6fa952e824215e421d4282f22c91404f3fe4f70026a27c0d01b722

SHA512
314e22a665d5031b358e2aec7c61b4f312457a178e938d3dff1891511da60dbb079c7eb79455fbca4045f1412fbb773d278455ffdc53086e9014527faf49d670

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
3c665c3ff8eb4d65be0414cefe819853

SHA1
61d1ed351ef0e4d8933818dc05e7101123f9581e

SHA256
b55dcd9a40c33f7507a743e5173c3b27da108dbbb409f98d66647fd54401ac7f

SHA512
97255ae5502ff4a3dc1b817d41e639a804165ced9e2be6dc107ab27d5d46d551ccb9fe6bc1080df60a5a1ab1e930a5972446690e9a7c5b76bd61d0d716a185c4

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
836304df69b688263fe49ff4b7a5b9df

SHA1
5a441c86891e8f23e33c4348ee0fb0f6e118b255

SHA256
16ee92c14436313ed2e7b4b6861cc0aa79486c885df93fa05b05b622f4f07fb0

SHA512
cd37a113dbf234b0029489f5b7c9e556ebb6e6ccb662b932477cd180296df7ee4463427f7ab7bb56129b35c9d5870768cca73a5691fa9395d8d39da0744ce715

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
fb6a5216db276f84e38217132c21e7bf

SHA1
a79f6c29dc1fb9d50106a8e94afcff4e765b18e8

SHA256
5b5e2a396d6519c5619ebb0540f8679ce5c70a205b6725ce9e2e7b8a347625e0

SHA512
865ac89b377171979b04d579a428c78132195c2cfcab05cf4bd2c570bf08ea950d717e408f93f2bb398a26baaec6869ed1cae7bf317c95be5b8dcdb991ab853a

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
6b9b883c7b3042b2ff747ad008afb40e

SHA1
2169787c8af9efbfee46b666f79da1925b22c4ef

SHA256
a7e8404d0ccab4adb5b5f764f4da9796c9131c1a0ab85ebacac84c49e48cc3f3

SHA512
7cfdd48100feaa30610c72645c727880e92be69beffd611d4abc14414cc11675db0704769e7f6cf79d557f6f2164985809adfc5fa31ac1d212aea8c66aed8c52

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
ae7f1b3c0c2113cc6dcd40fa3e967100

SHA1
a32d3c9aa5e0dafa33f3d6386e478a40c6282d31

SHA256
a83f6a9808c09feed4aa8a659cf734ec3f4d9cce4aef79eb7c34eee8ce7e405a

SHA512
0ad81a5732c0f5de07ded339f87e4acf1af4fbf783d226e271bd9a3747077fec26d5ae23f59eab0256d1033e40984484c8ada3792c7ac82c5bc4009409d9b3a9

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
682262af21f285acea8146b9a7ae8ae5

SHA1
7406f429f4e3db680b02be30e3a5180c6c589d81

SHA256
bec47dd329a990fbd607cfa2515f011b35ffb3af181bc7c45b4c981add953b73

SHA512
3c1f0ca608000ebff4c097be16de8f0791b4ce03e1aba3b59c1351de87e2ba8c50c06de401491baedc4736adb47ec7fff03fc973b24157e5a2f9d1d1d303388d

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
a1c00921717ad7d3ced1b6a1e9ac097c

SHA1
4437041be37ee327b6e4c15c9c0dd9ca6f1be712

SHA256
83d3685cfe331660ab56631e9c852df20675719650b1afa7b8b43a87a067dab4

SHA512
08c4bb326997d545b0871a7b3b42df6900c2531b6e3f6b22a350008eccd561f71bc2218afe70dc560fc5d6efbcc8ff1fcdbc8552f07ed6e9eb5827cd7a3a3e0b

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
db5d1a372158af176a3006c637ccbc9e

SHA1
dcde32317a581022a57db96cf77a719e3eb90b8f

SHA256
adccec760a6c18cf71390bf8f840fbfd780c7465fcfd4b8d3d4b3e6592823c1d

SHA512
efbd66fc38c70da2a424587a3dc02def710ee0e4d7059d995e3e8a63178643f2f18ee04c608c04fa5a4bb00650a97f8de36e775eea8f0b40dce3d8e26e53da14

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
9e191bf2d68ab178464416a80f1fce43

SHA1
f34b8e7fe9e9471d6d90bebcd14ea9e3ad56a233

SHA256
87ea571613727c53dd030dcbd70d3f04aa245106a5556389892c3fa7a43a57f8

SHA512
ac59cba94318bcb9e4d1c4de98a445515ecfd0bd494a05e12ffcd33ddb184607f1672dc09bfb7cc5eb8ab4f532fa0049913d88f86f4ca5eb8447e7c3c86ace93

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
2d2cfa89d60c1182471d67ae623fc4ab

SHA1
e5176f6c5b850b0d031b6948df34006a262210ed

SHA256
884e0f0bea85ebeee03cbdf1ced40560f5f50b328fa8638ca1c93f234cce1c61

SHA512
aaa4b8f0e25f812ca9a8d6410996e713fba142d76496b71b2b0dc6bb5ff756d4cd4fad79c7c01d1ab5dea74821cfe034e1b966f9448a2f02f5a2de194ddf24c4

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
db0537f4cac56c4899071f920093aa72

SHA1
eebbd7fbb4b4866ea344c40f1f8b96cd979dae91

SHA256
d61de98d9627ca3d0a3cadac87830aed9c0e5ad91f12d5daa0f5a5ad6a0f6166

SHA512
314d0f8caf6f542017e6cfeafb3761c3a55fccb8a8a826eb68f7375ec99f36f9f0cfc6a4b48631c1dd1d3784445dc51974b9bb3717e8251d85e9099665801f40

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
d308382ef1642c3f30f9654e862475fd

SHA1
52affa4ce833965b52e244c5de549cb253e1c264

SHA256
cf5e9a4b1a61093a6698a8b4cac459ec4f43d1b56a910031f1babd2abb1a9abf

SHA512
a0e02862bca728b0e5ce06727888c1e481f2b3a5e22e38c7f3e2e29ebefadb0550c1786d42e8f985d6fa6f7b56b99a0bb935b9c35802acbd9c817170d9ad61b6

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
c0d9c4bf48a47a93332e9fe768f3892a

SHA1
f362f72749b6eec177df6d6c10a1478de4a66ed6

SHA256
85361c745f8b52b51e325d4838f817f4e50a6b7e3112cae5b891604ec0ce6c37

SHA512
9bc6c17f394798ed4974587e1f31e14197f4f676e1fae83c7fce80c722af7c6676c6a8821f896bab7462b1165ef04f03a796b4b72311417827a79aa606e7945c

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
49b9a7cfde774d03c3d1a5128eab3ab3

SHA1
e5ff70a0226d1f7d855ffccf1017b31cbf057edf

SHA256
5ce210c809a61e0654a2e2adb0a495ccf89c5b59194757a2fdd9076743034b18

SHA512
fd39d959dd34ab119337b59cc3b721dfa87fe4cb7f79c1c100de1b614a0c202800861f7f226948b8f1cceff898686bda118c71892b2b18c4ae5a441494f45741

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
12281ef280e31200fda925d0914dda1d

SHA1
1ffd03b33f52e57b1fddeff50cff42697b0e60e3

SHA256
c53d774e33f5b74a015d55385ea9aca1c75f7d759a10a639503f53fa536e514d

SHA512
8c83dcfed11d764e99ce11c3b3e35283947170863ed01263b73815a2853fca7b6db0a3ebec3bb9c30800f6c0eb304316d6a50983534a5a52e9930e96944017ea

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
3a35c78b6c11eed1e6adfef421601c40

SHA1
06bfb11cc6d2dd26f673c3e60a47e45591142b66

SHA256
df1448204b2f95ddc176dab6ebfd5c1505b26d71f9ed286dc8cfd9609e30d105

SHA512
47b6f82139e0f540ca7a40d3f308e5f3b33d52f0926833a749ffe896d5495c24a650aa2f5a27efb658fb1717240697ce1226af6c12e0c3632c0d246c74751747

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
e2ffae8e3b301514e9d7f98e946d408d

SHA1
81e0301041547dde3cd289c0cb6fdaf8d7cab3f3

SHA256
aeb02fb5b31eb042968dd1ccbd60b48f941017cfc6cf8f52084294eae2f99377

SHA512
25b89940086c301e01774735c3e78df300b3c7bc75b4e24748715e2ec1e54266cfc49793e0dffdee31d3783bccafabdcdb9a6d4c399e056a1baa5810df860cbc

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
28d4de1783b33ce74faea459d9646fe8

SHA1
6cf2e22221a18588bdcd532fa6ab77be4f2fb96c

SHA256
ee488160cee36698c96aca5873681415d0c8db05295f692ef6f536a15cf462f2

SHA512
69e50ec206c25aeae945096a37d3f76a2527a7430441fb99018ddb98febec0b800ae2275cb3294e39b5717470a11c943e4d924543587562cfebc5f67f7233174

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
db4ae6bdb5696adf0aa8ff74d1c356f4

SHA1
b1717b4c8bb870cc4c81efcff1ad13e8584de4f9

SHA256
251e241791bf04bda782bf6e5cf9fb69e8cab2b5a54af6b2b77109cdec105680

SHA512
3d1b241bd25475cf018544b05fb1bf4a4853056cceccc34ebf8acb7a6de4e80ab8be1c9c930ea68c749307b7b60f29d4cfd604a8ceaffc4a3b5ad99ecd42aa49

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
850d2619af698ffe8ca9821695295813

SHA1
8be553a2104a9c244380a740fb03608267986f60

SHA256
cab1423d339a36c4033ab8661817af7736603a2ee299a6db02cb2396dfc8538e

SHA512
44ed1615a22a2946cf4e3b075810dc3fac28993114376dd3d307ea0e2237be435f35aeb0231c9f441c1a12ae2c2187fb71951534b49fbd45b3c8382ae7a4bff6

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
954de0a18365f3d0d63d50ef3398c30f

SHA1
46c17b1a113930215a5f37cb2d7b0b80558daaba

SHA256
c0637e8a883e724fede51bd903b6ea700385050f027c97919e15efe64fcf4577

SHA512
ac60ed5703f55e71f122e73340e0e6f740273ef546f7980e24f1c92ced30fc5ba36a282c32d06058d0b2867dd08dc268ec7d3d2f20ce34b32813259c2eda959f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
899eb95312ca6f3e9a6cfea4e811ed45

SHA1
b7acc0edffb04677ee581024c706c054ee5b38bb

SHA256
7bce64472e345572158e62f18da3444cfe7d2ed3aedabd4986518e69329a6881

SHA512
330ca37f98599d1086ed878d50bb1c41738aaae4f72bd5e4c7e3f12c5fbe615dab81b7d2dc44fb409f65aac567bcba849baf0f3e753431671836fb2e3684900d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
350ba7b407cf33a777b57a4c25b2dafa

SHA1
2041508b532e0807883e7abee94e922571d7b554

SHA256
8ffe691a924d98fa002e6e59e26bcda77aa3aa1888d538486c92975b6d8c16a1

SHA512
0ad0e77156201bfa3dee16ac2c1110d14b9f2bab0b018e383a0caf38bdeabfd39958f4fe0756c5da9c3a06fe6739846fb213776f898a868dc615a94966d67733

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
fd8dfa3e99f5983b1316d3e85b841119

SHA1
4e104af55bfc15c8500b5f47b09002cd024c151d

SHA256
c8411b173882a52b02c3069c79afc3a6719c0d8ef52020b5a88903118d174e8b

SHA512
1751641c8b0cdef902f36f737a3940d7045b88a2b3289f590c952f85a34d5d6ed982c465b813cfd37e75a3ce6aee814dc9316a0420a64a04cf67a66bae190ad3

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
a6c31cd3450d751f71034e53172992e9

SHA1
957763c27198c035154a9b1c9b7e1ba059c8b6d6

SHA256
161435758ce86d46bb2a620d94d0f1b4f67900375cd1996da4647bd6ee43812a

SHA512
8587de4d311996cabe5f5ff15a45d752664897495dadb9b963b4b7b539bcee322bebe3c5f45b553ef3dcc64bbe3613be8e58df8e787388fdca7ffd9bc535dd6e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
db13b87d871a82347170ffb55da720ad

SHA1
6de5900be980b577f94a55fb8a80ff8ecf9fcf3f

SHA256
b1a5237b57d1afc5414932ca982dc6dc7eb847d922f1b7a3f1b4711aa8e45337

SHA512
1f400eff6b417bb1fc7a6c51ebaa6d70d48a8c1a0e3e2969bb29aa037a1fe86831eca85a7748a9b162a545d138a3050540699a9dff4fa1c71954c5258522b087

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
b19f05abdc021cbf43eeb10174ae8a35

SHA1
f80db25ecb3eb794b4b93bfbb71f845ceb41e903

SHA256
560d8a4f30241abb364ad5471fd378af66c8a29d36b18b52c59fcd5245c4b739

SHA512
09abb58646c9555695a074e6457fd282a40dd3fcbe963c5b751d09af60420d6bd2b9aa70177fece4f9b7bc2da44877cc83945e12ffa558a41483fb096b082575

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
99721032b050873aec062c2520c45844

SHA1
b339324c73e278d2aee9b30fbe89246fa61c130d

SHA256
408bbf1d339eb42e801d5a742dce9cc0db25a585bc5db5b875921ecdb308c2b0

SHA512
1b8d4b362fd9a85a2a8e81a53375e3c7b83c62f6fe8d82c49e2db0ffb6f5747913dbba6d32435a38afdcc38261ca57d87b8a299c3f78ddf3db87c2c2b02fbde0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
09e299da5146ab916f2d8e7c8fa57fcf

SHA1
5bda72dfb07b44c28f05a18900a5b1c0e9e752b4

SHA256
92c39d1f03aaa2ba9b94bf3e4333dcbae3fe6199c2d009aff10217dc1a217016

SHA512
65f6c77b906a7c7edc6cb8de0158881e55b8a075f210e3fb162eb12d32d21d169d38a6206473d97e5884204a246f0c6d1c9c2f6c912815903e94a1ff80836802

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
8bc03110f575281e8f26d6509f6136fc

SHA1
b878fc031bebb01ef57e17128dd4eb5373a8882a

SHA256
d508652784415406162aed148c03bd0ecb0b955a88da6cd80ddb3d3e806b874e

SHA512
79fbf0b346ee23b306a7c21ead251e29c3dac25e7d8f10e194129f41a2f3f13c0cb059ce45064f9ccc3afbf4cb0e4253f1ffb37a38e021d73f2e48c5b9d18d46

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
7acfe29e624e0144334d7c632d05f10d

SHA1
a1966ee386074333fd58d06d3207a1dcd230864a

SHA256
5df5b60462de8ce60d2b00eea216c6b0a1c43ae8c9be1704a2aa7e0861cda988

SHA512
748fc381762551c3fd9dd3073162a6ea96d7a889b8d43bd540aa16ac8f594b7a6db6964d1217780f33df9655dd6351e69f4f4c0532a147231f8a1716f65b7182

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
223095f089b78a157c627f05f5310b8e

SHA1
37b150c96e7de7db5e2a3d7891d6486222032063

SHA256
e864fd820b0972ff30988f372c2de672fd5a09dc8169879e2493d789a6abaf4f

SHA512
3283914ff300dfbc2f378e3d79bd74940afa8c4bf2f37680e2d2776e4c35aee30de6da81f9afcd31c203ca368a28a624c959b2b40d2fef02db2a19a9bcdde144

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
c13255ef447d46858149e8cd933a6ec7

SHA1
88491970e4c153728939e78fa850dec0c91eed29

SHA256
da597565b6e30ea76143641e1e9fddd48fb1d65f00ce4d801a4d923b3f625a27

SHA512
3ca7e84837efc544aa71227dc00092aa8ac1ffe0688687cabca707f4905474a33c9c41a4a8195d0de6f8847fddb7c9d55a2c2df53a3d7a2fea8375443f9b9f5d

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
6e1b4885760e54fd65209a39cba82450

SHA1
2e1ff9d48acada93a887804883a4105e22dc6176

SHA256
99f202592b0c70e364a51f6a494e485985e8df1b2b9ef73f3cfe4dcaa50e15b0

SHA512
61fe3a7222f9534e7bc222c53be954bcaccdcd82382b84b369bf11ceb09ebca1354c642c510b4561c8e1c9c009adbdd959d9ffab18793a4f864a34b0dd60dc29

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
9bc9e46eeae1414af5c31ba3902832fb

SHA1
d0d96028482a1aa5121d96dd06c75e7802794f59

SHA256
03379ad83f9f0163600cbc3a27ebf0911708e1b5d83e4fd6e1b0520fbc333a11

SHA512
1c6e4ae732d55e78c89be0508bcba20244e39643327385eac51e7d1ad88ac1b95b59719d1e0add446e207867ee979ab580045347625214af4a0b5a225ce2905b

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
8ca762c177750b4905808ad626bc2f7c

SHA1
7c312b72985ac56679853f1e79acaf289111d1c6

SHA256
3cbe4b11e7e43cf57dc693654840e2e37e4c20ee723ed9519269d436ecd38216

SHA512
07fbce97f350a19194196c65cb2030055c0594be2ef77c235c2c4ff7be1664b49040c9f9fae14d8ab7f0f09e1086294f79c2e1c33fedc6b5a99d5cfaac330dad

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
bf7c2c85fd90dd7aaf627dbd0cf79e57

SHA1
c74750d6fe28930d4123bcd6163b66dae61af1fd

SHA256
f1e2a32bbd8518fbcbe4f6e48e04ff68a6ac5721781a5f588dceb56499b9ce21

SHA512
f0ec8faccdd2b1ad9428117ab78756c4970131bd18a659668b250c4ebe56e41ca789cf290237998c5030f999691b2be1bb9ae10b5a679ff0743b8c80f101d138

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
5f9d71b54ef27f3b4b7d3eba75905f86

SHA1
656a28223e87f174bbdea28e5523f9a4288a60a8

SHA256
20a692fda51e77bb51812c665c2e0b17b858c051c70efb652becfb14ae6f7467

SHA512
663250aa8ed439ddd96be083b2d7ce64e26a87fe39a4a60ce49d669f537dc78337f396cf26ddcbbbd828ef1b35972fcc6e3813cfbc8bd8e893bf7e1e525d7768

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
a3782345fcf7ff63652f730a225f09d7

SHA1
15fd008b93827c7e5841fff30fbf1d459ebc81ad

SHA256
32d7629eaced5e4e9f8ce18cb841153c5c4edfd7bc4625400250314e53edad23

SHA512
0d452c5fdd60d267ac2b212e3e11997edd817f36c88b2c6d4cc9a43444e4cb6d6d992ae5879f75d207d5467b62e971cf5dfaa9a2cc5baad3cc61a0ddb2201caa

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
b8cd29aee95747d0b84f13f0558da281

SHA1
b445647905f4ef48ae74a1de33979a708b9b073f

SHA256
eab52766902aa3fc9383e84dd93de4161567a467d6ac16dc7a0094733d1616ec

SHA512
f2acad549152bb7ffb2b7c9d9d9816e901356c4b311e4a922863d51be644b58ca98728d81f874c72db05a50edb0f5647df95d62c6698984c9fc0950f28df4458

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
798b3171be627e3af19737d934f8fd14

SHA1
622f998f235b90fca16045d01c7c15b1575fb2ab

SHA256
aafad6497021ebf442b4c6d7e12ac4f8296f37ef97451b61ad2183749f4dfab0

SHA512
826865a09a0b59b082b27db9dac042785405e2869d944d88fa1525a8891a131576ddfc7449046ff78704131cce18ffd666a22fa6bb4713408530498f3eef2c48

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
998fedddb778d165ebe2804b01081a79

SHA1
2dca5bf3a09e029f4e732ed7f5f1806c87778401

SHA256
d49fcc8c42b4561cba468da2aaec4be64b7fa4e8b73fa0c30c54851f89149555

SHA512
666d64e099e034115afe564428795847dc9fc9077d8de0d1060035c730a3946f19bbf27fd3fae38040db75f5e387c4d361dfce00e0c0cd495442ad6b00a4dfb8

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
33c61745d2b349118d519edb1c802eba

SHA1
515d76d9cb74c35f7cc71963b5b13267d66156bb

SHA256
88b6d38bc1e3de70dcf5dab497fdd06c59f79c1db1d72f97c6aba8d4397c0604

SHA512
d71fd0ad752a1227e35c5b82ede8c4a5673377271051ceaf1d9019d8474e2f4d7ca941acf733dedff4557ad00d1c710d5b65dea0832c66bb98dd588648e60d40

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
fc69ad7bb6b85ce5ca3005c4b652fecd

SHA1
76c2d0bebfd520caad7d230c995611b116f7d828

SHA256
b02a6d293613d0e8bdb2346a5f6a5fab4f61944ee68309268787313a6b7e972d

SHA512
e2bca1ec6ac121d5a29cc152aaac2405a09125c6b079410fb477dea94c969fcec131519b8133cc74c3bbe5b414e47476d2d099a6c2baa49a3e6cd4f20dfe87de

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
227c49591bc23d873054efefb71f1a0a

SHA1
8d4adc080c80e92812846fde0c419028af7ad787

SHA256
8c88041c2a7eb864201746f56ca6906710cc01fdd8df342da6588e3050861cc0

SHA512
0f63b280b3710f3d086563dc7f62ec3503e31140f2f46f223ba9387dd555ca06c1a4f90c1dca5e42f701f059b5d2a54e1b4582cb1e6bd7c4c14ca6474c4024bc

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
e95d7573d2907c0d89aaa3780b1387fe

SHA1
3ad0a6a19fb3b540d8f81c6b1adf50a6e24e6d9e

SHA256
d1659e75f347de36ea90ca121f310102a58db39acd62857975bbdaac35975a7f

SHA512
94da2d49c0d03317292834975b17660c761ae2059c9d794db2cbbb03ad4666db7bbe93bf75fedfac02262c13382c22a01ed6369fd34997414925062ad566d471

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
aac85dfc58976bc802635c3809074c86

SHA1
94a9c358b09d868a5164437dde442126e79f80a5

SHA256
e3cbadd88de218e5370cd65aba6b720a1da4a9c913940bfd0058f4b137b40038

SHA512
c7ef16b24a76d74d51fcb9b1a552deb61c3569028376104f9f5fde7a159bad997d6e2db51d588ab54c0e9bf767782104dbe4f338ba1a3362cab424d14691c476

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
8fea139e2f51aee0a53b8c3b703c5673

SHA1
d48e58040debe71d47108c678a36e7d1616362a1

SHA256
c9f6f1606456c65bb1c67847a3b3e8e32353f85bf58d333fa168681361f2aee3

SHA512
b3a393e32d1bdb5b7c8976970672b48090dee3012687e99972be7524ed10cd59375591a8e62392658f0fd19ba95a70c6df32f271e775b3a6f271819c290fcb34

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
13a1b2780976e1cb520c8f2b7e183834

SHA1
2b86df706b09afbed3e49a0e9dbb81915c405d27

SHA256
20f7c0dd29dca9cbe2dcfe4ce91de4a0c96b71498c70002bd1970a7015e949ec

SHA512
e14cc059a9be45026ee794e123829a0bf729863c9a2d925aafd579c7e3ca1097a9bc72c4e68bef6b791250d85858337be3a4e81c71173baa25d706fdb2a615da

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
80ab722500950b7929cccb635877eca8

SHA1
5872c1182cf3113faf378e508ec8012a192efa17

SHA256
3788738c749b00eecdbb450a152a84cc721e8057e0bbdec70c1e0ef23e2b38e6

SHA512
8ab5b7cbebbe1c1bb2a4fd544322840df4e507f0b261ba3b995053bf35f2d9a7638a82a29d178708f583ff71f376f9ab06b4b5cff12014e3330e7dfe845f94e8

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
ed175f1917e614fb64ec034ca11b6f8d

SHA1
7846efcbcb49c3902ad4d5560b1c4307662bddae

SHA256
d4e6c0a391aaff896ba747ef262a29347c368ae47a7da2a7a52e0e91b907c571

SHA512
0e57860ce8d005f79b4d3723d801727b4e9b82cb7801a22d2be98ecd02e620658f8e466f0fdde8f85521d152410d93923dff8dc2bd8c25f32fb3655ef77f3b29

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
63f3e3fd0fb66b3cd2a460210d0735ea

SHA1
6a7422879899fc04f384ebf84c1a857012e25ee7

SHA256
0a6c5608dbde64248d92a65166ec73750099f8133ac9c7e374e32ef8cc829529

SHA512
5d2e706b3cd87f584ac235aff455163b461f564113bd5a58ca870a35bf52a3e2138f3dd6c1c7ab287366769cd306b47b145fb5e93029c6b0d42a995493b4b1f8

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
e6f5639e6d95b2f51f73534255aa4352

SHA1
bd5c950e4f4ae0d1122490cd16084253644d5fde

SHA256
82a6d92c50351ad3beafd3660299560b7fae298d3f030d778e0fcad7e76f5b04

SHA512
2f7aeb5e31e896209ac291cfdb206e65e73ee86e52c07bc0f36cb6de09e376f234a540b527080615ab9f3d76081ef38f7f6ffc9065c6cd7571c0b8f33a7b4045

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
a2d539f815be75c86d2b194f60b9842c

SHA1
30ef2c918e28bfae637f0c2651388663ffb8a54e

SHA256
c0d77cc9b13a98a5b02f2dfe7955f77f0970e206d2ef527bbd74b48d95d5ad8f

SHA512
0dcc06d26d6b842af5adf7f7f7a13cdfc808ae8309f7bcdd47c44408cebe4befb31fb00c757d6dd1292768700243376e85697b0bc4691c0345ca7050fe687777

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
d49b88bc44e9b83b49641e9442c0d6df

SHA1
27c0787d8f0a149c02b2225d9519de19a910a928

SHA256
2c8ae14dd014db0af048f22738c52e162e3d7f2a731246622fe7852ebcaa9af8

SHA512
b138a2658e6f1680fe8fdb55a008a63b8d36f50c80570ae42bee59974a1264ff7f30edd5ee93cd4554163c70e15607c4d5e79403e18f37bee142e119168ed486

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
7b46cbaa6a05a887b7e317f81ae4f234

SHA1
49c06b26d788f9132b22c6c681ddcfc0e35b7c73

SHA256
10b9c0b737b8fe4d75c348cf5a5d90d0a2135679873479c768ee1284813dffa0

SHA512
01388ebdc9c7e15a78e60c7abb1efee316a0960323a81d6417e49610936a0b357ffc521f584278ddfbb0489d0cb49dc472304df0adf23c6714708eededae58df

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
c2a5617e064941e383a030d58aa6bd0e

SHA1
356115e4148483462d400b18a0aa0c6f6a8a3989

SHA256
346da3ee835e35a4c8f036680b970ee497eda9d8c357ca9a7c73253e45ea566f

SHA512
123255685294b80d9315b2d2026b360fc99c204ae788c546a59743e1b3fb6e864ce8a14aa96cf5d514c42397fc588605ba110ac782e20b5973b396c92cf3f62e

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
cb6571f914142c95cf67c23531e78888

SHA1
a11525eaa3eab1770fbac4994fe8ee47ddae4f8e

SHA256
c03a160d35a69f8bf84af41b5f6d1e0b963f74b05e01192eb6f5e277874f488e

SHA512
7aed5ef795f7f1eed2ab0df0a4a912dc6bd2da867ca5832440faa95bf9eb55206cd82590cdcffbc9e3c4666e81afd71eccd017c162d8bf490d77f336532de9b4

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
0a6716b3c93428875ab118c55db24e4b

SHA1
5e12c2ef8afd8e7a880be211b87d469b0f9a133a

SHA256
35b0108294f36cfda2c97c1425f1b7e3924ce606051da2ef4086d2cbb5e44195

SHA512
3c44510d352c3b8978374c36c6646b5d9e4708e1eb5e9e77d472014c3a049cee6aa0f389769d992833dfaf739344c8a85bda6214475f5e32fcca356dd4f5da66

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
21e129157e8a0cd59e66a5d205bead5f

SHA1
77c39c57657fe52dded6cddb39925971de69a45b

SHA256
81a7d3acdd6b825bce3702b0bb2fbc05cad82570089afc3fc419bdc3d05902d0

SHA512
095c1c89a3d4db1638b9227f668a18b5d4badcb0eefd85681d0a543863e12548641635f2f774b0c7effe6310e699ad973e2772a8fdca671083e1c601728bff2b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
791d9805fa3f3a490f14263b04fb8857

SHA1
8a8d53e81d161c2e89a2bb3cdb85f42565862bcd

SHA256
d50b8567efeed9a8bd27fc0317e9399c4e1650e1d85e3173d83a7da9097616fb

SHA512
f026f60993b911a052a439c26aec9f61300cbd2b7ed6011ab15169370267481c3b47c4255f3584a1ee5d421a0bcb0b4eb1c2c31722498c04f0541189ea586a96

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
361e723eb8b2d66aad99e447c6642206

SHA1
50b5888f9f7b7fcbf8ccb134fa428dc14bac79ce

SHA256
352a0f6491520f90b5cd7e34a2f3d516d4a58060b976296b4a01bea016763fb0

SHA512
7a80f281d3e96c5166e90ec87557ab097a2fabd531c13566675cce47d40e0dbd768daa1ba8b04e00d0ec55b9e5705997f4e0ef59a022a79a2324b3a5faf0c92b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
5029730242028fb3df7082ea5cc08985

SHA1
4aacde9523d049830a4309808660e6d3a5139dc0

SHA256
9be0d80e38446beab161e0c7d40fd59ee7974ed0d3a0b9aab60c80ebdd5d0545

SHA512
e58ca9d49fc3af193f996ee607abbf47dd3fbac1a9119592cf069cbd37cee303a0426ebbef01e434ea8eaa9008302b6a916c1005ad5ce34cef1613dd18ad7a36

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
2d46400afa8086c338d8cc3b630c1a14

SHA1
786d7d4181f104754f8867fb7ef393f94dbdb871

SHA256
2fde21528670da4719039bde3f4d6ce29d04d698e8aa4ea86aa0a827ef4d046d

SHA512
0adfbd7542a7a13995a5a7dfcfe938ea57ea6fc2ddf0f4c4120577d9f851ab6d96cc58fc5acba32c52b2e11ccacfe772c1f22a9a6bd4ca07e2e7684a634778f5

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
2c31847913264be7bbff762a121efbbd

SHA1
7236da8f21e1b7f75640bfcc89c71f770bb6879c

SHA256
ffe11b1f406dc7ba44ba1e0417caa9417b955217e7a0319689fd5a92b9d824ad

SHA512
9fa03e16225a82eb2ef288060bb1e999cb11b9d41d13c51d1cc33883a5bacabc968eb226834c0a4e8284ace1499c98754c352add9a2d9a9760b6f45176165110

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
426dcf0482c5ed2bba692eaa7f11908c

SHA1
bbb6050f2da39c52a268567d71a2bda7afeb991e

SHA256
041f8a6e48560198943d4d9b8cee065c3cdf985c57ba58b8c21d9064ccda524c

SHA512
458be7944aea894362b5bc6b82e2dc4bf69a8603553983ace2a645fb055f9b200fc6963b68d5526da07e4a3891d1e9a880066764aad033805419868f69867558

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
d15d025ee16b2578cced18000b39170b

SHA1
5951e26ce7499132ce18e5e6b2cab47954812c5d

SHA256
4017d6b12c0d83294c4c7fda467c32c808468d9f38ed949e3f1b45242c375c85

SHA512
605f0244557a792a0f1aa330a38944b93c71ffffdb83c54dd76c700165018e73dcdbdd1474f185ffd54bbdea062ddb9b872ecd289ca40b93bfc8935e762fa3a9

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
c67a21824170ced95f2173af383b184a

SHA1
1a26bb0a2e0a5c8eb779045a15ef30e311da4385

SHA256
c6705f30528cd0b0fb57e5281360c7166105e3a1633d0d290128d7abb9633599

SHA512
83ad4c2e07b4c152dca1e34b65b129a0f848f18500ca31f5cf2c6ae3ffaf2d6e3ecc32b54621902b0473c23a3b39d5a786ee018f3b8859cb2868625399a7212a

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
8822e9ddb2b1d468f0977996e0935719

SHA1
08e74c48b498646722d078b294e55d9940b8efe6

SHA256
087a7883c0ccced40747908fefebf64f0ed28b9b0a9e91ff6031f958929a9f7a

SHA512
3b4ebbe11990d03f303e717cc2eeb40ea4bc73ad7385e834eeeba3bae7c980d1aa3186318c036c507328c1f4d788bae77dea1449992debef7ba4d610cf85cf8f

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
e6d5c22246960bc323c553730a4de711

SHA1
ada0fb70f07b18f5c20af8c3bdf1f55368a3aea5

SHA256
d7ddb07db90f8729da3d7d45d1dbc3a6f80dcc7a617dc85e291931e049515391

SHA512
db0727b1814ad394ab4e5de79708eba85b8d461f36c1aa7b0f7905adc99cff3846c34b266edf9db6593d8f6879f545188109647419bb2d1a1c4ef538cf74ec5d

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
3a16f5a53ece93a40bf8b68b3656f45e

SHA1
5157dc3a5746d2d903bf85eb0cdb1f16ae3684cd

SHA256
61bf5d8dfcc0e2f7c5c682859c422e662aa7b3ed768b3073cd7de2a835279f2b

SHA512
f6feeff405c39195cd7c91d13a05f64a909154749657f4313f008b6a2f173c9894cfd01e75353725be79c312d74e5e1838756b83cb63d1f2e1ea699a4dbf1c53

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
d09afa5c7c8c08cb011918c3563d3ff8

SHA1
682c95bd7a3aa13beb78dfb0c175fe47da5dbe57

SHA256
5139d6d53ad3ef27853ac6959071f2dce6be6064028574ba13c03973cadf018d

SHA512
a938b7b8ffa3042f3dc4f8ba990b6f796b307e33c290d8cffaa7a14d17e18d059f2c0fcd851f6f70def15df11d5d00e95c39161b13e3d7746f61646d6b16a510

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
7c61531c4b041694cb78c8ecad9a8226

SHA1
dd14cc21dc19978c35a2acb38ad6e554fd976448

SHA256
579f0561fc4097c8cf653f71b9c78e6f6094372280422cc74301d88a1c87a430

SHA512
9f82c287aecc4804e975cebfc220af51bcb27ddc767073b6734e055d32ec0c00904f82e90718eeee4906a81679a612b37b5cb04479944a6f9074a9a0f276541b

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
d51475b30469f40bd3f101f483cc77b2

SHA1
3fb143d7513ab154755e68b67e7a2619faf39c44

SHA256
aa664222d7f35293daa6462e366e6b20602f063a3ccb05b33dc6d3d4fa3993ef

SHA512
16533adee5e537660f6b4ec4f9e058db429a200a59e6df47832d4e686fc774824980e2d9147855830b163a236f5be9cd5c6e4d445ea734afca8a11c3fdeb57af

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
fa10ee38fb09eeac51be31b39aaadfce

SHA1
5329620d7757cdd4737d532d533a87086eacd284

SHA256
883dd7557cb645f91b02a6ce78afeef6fb162622677beeeee72bc6337a45f2de

SHA512
ebd03a949542791375295628a6b1e14a8389bd9a5321cd29801d1f59cb87fa171d2e3bcf9873c72b0a790718cfe925ee01da13dcb79b52ae9f993ef94497b816

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
cfc6d380a9df98548132a49c3d3d8f17

SHA1
b09c77aa1473b0a8a4ce804ae0db0e1efeda5dcd

SHA256
2a95a4c54559dadf15e2032d4f30343127b2d1a346d7eaf4b1971e541e0b16b9

SHA512
c93bea94a3fddfa50955f88aa62e2fbe6bd629fb57ca5bbf0566c25f9ce09618a7c3fb6f043798a99c6e2f216833b67e170867e845fbd37fd75972ece10098dc

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
02579ad231854918a010346e0c29893d

SHA1
8200710a8aac95494645d78daa801e8213a5fc24

SHA256
d0f6a08f520d2935ec58b3fde18945004c33c0b5cfa9a06006e9a042fae2f84c

SHA512
528f0fbbf13287716cc5c9ca1e1c380764465e9066f9d947dccd3b080431be628bbbb814e302326be82abdd8ad32681956bd1090bc40cf60ab4873ef80c32942

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
d7a0c96a87a152c5dcce0322098bc4d6

SHA1
bbb31941ca9dc7ce72ae398e7b94fef8691de360

SHA256
ed57bf456840ec93b9181daa4b2e197b90c418f4803027231a350199b089377d

SHA512
787f95949cad19f6a6434b3020dcd1e2aa39210bfd7eba0a63246868976931b534147889fa4409e410784ec61c533e513285dc99f85c891d98f02f2afb6c4a5b

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
e6e61d74ef138b951af123bfbd6d0198

SHA1
829e95749850ca1861056177c3ed6f8852c53faf

SHA256
56626cc90e5c591096254aa836ef8856beab7a43f994980bd8318f361d163d1c

SHA512
9541a291cd08143443576b07202096f436a8588e4d5472160e8d567dce400c7488d85b9030176725c84da07c0de5654eaad7c11c237d4be4ce5947c2d233bb53

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
16072d8c114b4e128c0660d4537e29c2

SHA1
b1430d796cab78578efb1612aa3229355d12a28c

SHA256
67b81edcfe590fcb9b23534f0a90b5911aa6c7ad45f67733da76b064728878dd

SHA512
032607db0aff8240911f6a873d5c983a956149011d9cf45dd098c51f17fe0719a145e99172b65a364b72276e1894f97ef463d0ab64446d021346badecfe8e9e2

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
8be096ffcc034e052872b9078952cfa2

SHA1
807ecf54e517fc21bd2278d7b50b979b63ce0ad8

SHA256
93c869144d7c04f81dfa4b7100c92a902cd28b4ef4764d4177730ffe1bec09ff

SHA512
13c578d7e67a61ff9737aa9ac60876f09532e2c3bd419d85a23b30c4d73c6cf23a2fc18f9d518b21b91ca5bb4b711c3f0f984c3cc0b7391e995d9d4eddf47d45

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
d894b7d07df365f9cd32493cb3d58bf9

SHA1
80a4a4a7b1b32e4226a14765bb40d00b73e2d382

SHA256
06f9e3b522f1e8c6448ad96de84fc510106fdeb8b22b17d2d9716e135d8dbf07

SHA512
3a306fdf978fa2900f29516b1bc55a2c05b559266096b9df825a064131c936373dba76df3ba0b3276a093d7f1bfaeec42b544d29ed9f15884e14ed80e93f27ef

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
d0c36918145c7d2392bcd3e16139ff09

SHA1
33d50548a85a00ab274a5c22f35f977bbe6ee136

SHA256
8c14703da808755a652a644d8e8d05af624f49f8c50fcfade0c719b7f37d369c

SHA512
9e5b78870959394cc3626b9d7ed9386df1730f646bd34edf97bc68295068b1e962c9fd36851fd5fc401556500bc96fd59c35a79ddfa41b5a9905614547f275ca

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
6ffc8b477a46c5c78b7048b22e317b32

SHA1
ef6faea8aabde1d5bccda16181eb0bd688b07b10

SHA256
0e197a146b135997bdfe6ff7ff44e57635d194316b5f29b0e68afcb06e8d3a14

SHA512
470f4020233311cf66e958db7c3674ac25ed8ec9c7039ad525669d401925b78b8e30d1051cf01264af6d42153d37c0b9d4b4632df46eca8cacf56419b4c61a3c

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
b348faa8210f56615fae01e31c14b453

SHA1
1835c4fee56d1a81b943a84f2a6102daf08a25b0

SHA256
081d84da318435e1d47c3a31792823128fbe4f171eacf96516a9b9162dcebbd2

SHA512
757a5005919a04c869bc5931c619359101e54068d960c7de2ab44ba16de4e039547ec74f7c26b60a9bd483ff68b85064b9898ca3ac726d50d1b74acdb35a375d

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
386a1504b09323988d542d431038ab21

SHA1
54bf5e89d03c8eb9feaa7629bac43444a1cd7287

SHA256
3d275907b86087c72d6ae850e9ea1af87c3bee957359190add1bbe9d5d07574a

SHA512
107d69f78e001a43ae43d026e93015c1472dd703262c06194d97b5f92e4184d6c1db67748f007d337c6323995f7838d3ecdc79e4f71da18280ee430cdee80156

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
2fe352a2885aa3050cd3b5d3ae7483b3

SHA1
9e17209922bd95077ed84a6ec4d6668b82046ccc

SHA256
00dc59dc950d90b7e9a121a86385632cb0675c267e246944f6969b2be3b03345

SHA512
7dc7968db26300468a46d0a96dfe338da6a1664773e8f3a514bb5f69a145f46a2af75414df1d5b26aaa96effe4de667bb334496e2201c841b8eb9ba809731748

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
e2c3c44c75a6320feb7a7f6e50abe8a8

SHA1
4202e7166a8908d54e456a0b328eceb3b8c9e720

SHA256
e42d29800941ea7af94fe32451f3672d19979e993ba814a8ceb1b5d744217fc0

SHA512
e30a3f4511e4834aaba1829d4e254957ba642b91f461ec2bfd9cd21924f97622d863dc01075d9194e32d4093b9327caf084c89d5419260b703fe13265d08ade5

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
3ebd4a5d948e9fd3d8261ebb51100dec

SHA1
022fa7841e0131cbdcd8fcea3cb82a580a01c4a4

SHA256
69414221d99ff21a3bc46dc39bb0bfedc0c0449123a1ff3835d1cd3364bc9e97

SHA512
cdb8a0968b69824cfc340bcabac4e68c2526b636a8b56527eda16c19f1edeab161ff962efcfc95e151b472686e5f4064108ab8251c6550fbbb1f93633f3238f8

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
a5760b31a932abb67c42f9e6918aba54

SHA1
ae39e33f2fcf9c09c890e1e04115f77aba119683

SHA256
218237071d1df99d5b2d3a7935a053bd4b5bd54e1634028da2d6a5ec36f3aa4e

SHA512
b33a36fa84b6ac8546e955fe688ad68ff00c1af61cdad1261ca7e1109d1a47c39dada293997efa51e0067d66d5efef074e112da4c16d68176ed2953ac71d5911

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
413fb7de6579b78715e493b0dfd40c59

SHA1
fa63f84607dd85d064dc9731662b1487afb0bbbd

SHA256
588eb3436661deb70ea200fd2d88cf000d853023a74ee8e667486262fdd4decf

SHA512
f61989fb1d409302ec384e239b6cad975c322bf2feb749242bb672bfe6e1aab06ee3538a813936b0f459a0e98f67feef59e22c58e470afe44e995d74a93cc9d4

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
9b21c734ea961b02ec5a8a87a481dd35

SHA1
5cc32e88ed2f13954786f44e0ae3aa305e6d6a6f

SHA256
7b457f1a5dc297664d61febc36f3ee76c30bcdf435074f906e775262c38d0174

SHA512
367e2075ddb7b3edc829187b9d5afb211a85a39b81ae8c93825ba202d0ae759173da8984e0f8fa6ad62d7348ce8cc4eec358b62ef7ba71f3c9d5c8b2aaeaada4

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
09ad063f38f932c7750840b383417ec7

SHA1
ad12b5404621c401af4df8225086a3207e25ac40

SHA256
0e66ccfd4390e62a91a2a34d63a0649a04c51a4df9310af8a8f266927965dc00

SHA512
a7ca93a38d43c47295a2d731bcde4aa45811b0f0b58be9077f1c8a53b0446709e8ab865a7dc86b3bd2a9888109bf3f5e6437d08247214b216a1a9bc1dfd08529

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
0c4682dcb8ae204eec144721d9b5766e

SHA1
2d427be19ca07b7890007bb3fafee39c4ee3b1fd

SHA256
f7b85838e97e04a3034b1bfb4c17f668d78dd91be52593c47b95eac07b4f1a94

SHA512
83e59f6c2f54fca5ad34966cacf78a005240c5b7320d0bf9a21f352c17a7b7c9af942a321cb032721423c0e49c71ae285ba0e63287eb763b25ac4df5a9ef770f

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
f1b21c38224eb06945b563b2c75582ea

SHA1
f3b205a5d7d6f5ff8264e9da81ce9a43da7f4d94

SHA256
e394986a4d4e0f10b1b5c1fcf4b6066478f011a5c497c222c0f887faf1875514

SHA512
2578b3452a5155ef2549ccaa433fe574b27a8e34cb9141f5faa566f0a00fddcb1ddab3e38b784e1aac361f9e223e5bd40896764d55ca8cfaf35fed4034005ee6

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
bac6efae2a65f3d7d101cc199dc4231a

SHA1
6a4ea01ddaadbad556970028b132979e39508574

SHA256
7ed3ffe412581149cfa70498867e5ef21015224302bdba46982aef8573990f9f

SHA512
3c497d1020eab27aae33bf5e2727c54416492f03f032bbcba407caabdb2fbd81c1c69fab8aba54ca440bdb9a0b98c3c1bf92ac4e92b98b338adfe2361c507994

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
bc497a4a6db59ac6e220248854a2b6ca

SHA1
b5c8d41b3f7e2476ed27bada08684e42a5619979

SHA256
7fe98765ee0bd2a36e1d12e1d27cff9824f54f9479d3b73bbbe43f6b28cf449f

SHA512
29096d3f75a929de02abea2bfa422660c0ae9283e46049930119004644228fd0b239cf1cc105755271044ebfcf5bfcbf9fe542f014a148f9518207fbfe2f0ba4

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
fa74af2d8e20854b9de25ff65fe17ddd

SHA1
8a078e88cb2f686c90440fec8d2bf857ff63eb4d

SHA256
ab46ae008bcc3a9aa1009c3dc18ff7f0e854c13d624a0fbc71cdfba69ad1080a

SHA512
ba2880cf271e3b3fc07b6220339f7abf2e59ca2c5fcbca96274649a5ee40983b0e28ba7c8410adff8dd59cb07f9863ebbbe21c45435127baf8e884e37ab7e74e

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
6d716d5fe8f817b2d98b37f90c6367a6

SHA1
09b305b2704106e45058491821674fb73293d570

SHA256
dd368753df0eb918e045f2d8c82e715aed2fcc0bfd6cb7477f6ab4df4f32a44f

SHA512
dadd4036ba403cc303af9581db576cb9b31e7de5c0fe837ffb1f1acbe505aef53631a9afb9a9440da7e0575a34320693b7d9ca87690c75cde066ec160c84382f

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
f4374e3361d0257147056c298e9d8989

SHA1
8ff5f87777a19a0bcd4ae4ddb8168ce6a20947ff

SHA256
403089da3a2216e8a8e177f902cbcd6a5e84462493529d7d7143269481d82e46

SHA512
f2ee135363b04ca6ba03c7ee7ddb3e01b00634e936a8a7b4c3c03f22cb3bf9a2f5fe441ca047c4f8ee79cac31f62415b155851dcb27039601bc4ebc3dc3d9aad

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
44be738b5ce1f7361d8036240f523da8

SHA1
91c485ce6a28fc73148e3143a59a6204a7853cea

SHA256
e9f5f835c618adb7e6cafe6e3ada9a23d07f5cfaaf2b40522db2b0ee31a6a444

SHA512
88fe96ea1019f60053915edfbfa5728f54fa46cd2a5e108fdece6199a478e8c2c477282d5bbaead083ce725c6ea743234b98c3ab131a89a2cf9e05bf4de37f5a

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
63cad4eeec6aa742e8751c1aa4aedd96

SHA1
ea83743e2bcf99d765db6472e713a0e8fba9e3d1

SHA256
b02111b617451fcc04fbd237f92bb04be0caf4847337314ff283af0fad7f78eb

SHA512
05c90b9642264a6a5691168aaeeefd1e9727d4eaaa553d630822567a9252cacb804970356eb72c65a2c5cfbef997b4d96399a198894c20fd4371f37a10da39c2

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
65e399129dd93431cb755fc5a973cfe0

SHA1
28570bd2d0e6e6f2ba3507de5394b2d832998701

SHA256
b02c78096f95539858f34aa4baee9894867b1c8273cd73bb72e597f53ad548ae

SHA512
f1ad6f5cd03472ddb0d4c0e3746016c125bf81dc77efa3cfc3fd2b11d25ce1659aa9dca9893e4ba072045f050fe8090d535f7e903efd238eadc1407255e9efff

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
b2b67bd94d6ce722e88dff2705d97e43

SHA1
1857aaf142779c5ef1e31cf7e66e2b51b180c5ec

SHA256
eb4cc2affddb2eba5c546f2fb3c4e13d89462ec2dc24e69b9f738f1aa3b27ebd

SHA512
4edbf85f45e6c7de3a2318ecc35311e536d93454c91578c667d2acf5e90a235f4a1cb8112e57e610c17fa8d48150a2d776fc6070fa1ed49af462d5e9b96eb6c2

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
a7cf708d497dd6e922f91d33d14f7600

SHA1
5e4f3f5817004eeaf4bc14a0168d86ed7fcdf6d4

SHA256
20a5f1f3bb4614433712df1ffc67273465e766191502b8e932321f1f24fea65d

SHA512
d27a32dfcc0835879ed45e221e9857c1165de03a859980f0e29ecd6d5877d832577f7d6b584aa96e24caf7ab7652387d713ef2293412bd10b6b65567ed0bcd42

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
689dac399ef2055291aff9913d37ea23

SHA1
43956c4bf6b1b65de05354193767ae64a25cbd71

SHA256
7234f45b0cbdca7f4d4c1e1b9a85fb52428c19aedb9d6f5fa0817d66c388231f

SHA512
6d8a2b1d4d404e9a65be038115446bab456b0c938b9ca58cae40473266995259bcbd2ef88dc4c9c59c60a82b08de24846ed2d010b78a2ed57c9cd1e1aeabb420

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
a27a03b336edfc22a5f483225c694017

SHA1
5b88908bf371be89ddc8e99ee30fac70b28ae3c1

SHA256
d1b58e30662f37dae10f4e042e7789926aaa1d8a050181d16da18a6fd8bee113

SHA512
e0b8d253264cad2cf4a19ad6ac7721ad3526bccb0cb128c4adbdcfd42015636b93bf4ea572c4d5d65f18711f54621d94b321bef36f6199374c4f30866b2a1ba5

Download Submit