0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
100s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15-11-2024 02:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

613788884CE0093F.exe
Size

137KB
MD5

0b6d033622c9ff929e98c5ef7e2f8860
SHA1

ece019cdcbfab97462461585c58a5cf62bc5deb6
SHA256

ecd80e30e6bae14ca7c1198e430651aa297e01361a0508acef591adc0d50159b
SHA512

a5308bab575e87825cef01ae01ed8da84e1d42e588509b7bda1e8f4ffadc5fcbb39b9c5d6a331d508d74c12ba077cb303706537cb15662076a1fde86106b73e6
SSDEEP

3072:hLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8h32bIoKb:hstYrEMw6Bxk5zOFNtgJ6CUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 613788884CE0093F

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11257) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

613788884CE0093F.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation	613788884CE0093F.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

613788884CE0093F.exe

description ioc process

File opened (read-only) \??\F: 613788884CE0093F.exe
File opened (read-only) \??\D: 613788884CE0093F.exe

description	ioc	process
File opened (read-only)	\??\F:	613788884CE0093F.exe
File opened (read-only)	\??\D:	613788884CE0093F.exe

Drops file in Program Files directory 64 IoCs

Processes:

613788884CE0093F.exe

description	ioc	process
File opened for modification	C:\Program Files\Common Files\System\en-US\wab32res.dll.mui	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-20_contrast-black.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_TileMediumSquare.scale-100.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\es\System.Windows.Input.Manipulations.resources.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Download_on_the_App_Store_Badge_ko_135x40.svg	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\LICENSE.txt.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-100.png.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\fr\PresentationFramework.resources.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\fullscreen-exit.svg	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\sv-se\ui-strings.js	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-100.png.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\System.Xaml.resources.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\msadc\msadcer.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-80_contrast-black.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest5-pl.xrm-ms	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-60_contrast-white.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.Cryptography.Encoding.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\basicsimple.dotx.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AXIS\PREVIEW.GIF	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Adobe\Products.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\css\main-selector.css	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Windows Mail\wabmig.exe	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ul-oob.xrm-ms	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Collections.Specialized.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\OneNote\SendToOneNote.ini.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\7-Zip\Lang\uz-cyrl.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\EntCommon.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\MixedRealityPortalAppList.targetsize-40_altform-unplated.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyView-Dark.scale-400.png	613788884CE0093F.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\it\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\bun.png.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\id_get.svg.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.46.11001.0_x64__8wekyb3d8bbwe\KnownGameListRS3.bin	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\fr-ma\ui-strings.js	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoAcq.dll.mui	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxManifest.xml	613788884CE0093F.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\_Resources\8.rsrc	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\System.Windows.Controls.Ribbon.resources.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\microsoft-logo-white.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-conio-l1-1-0.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-ul-phn.xrm-ms.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-30_altform-unplated.png	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Microsoft.PowerShell.Operation.Validation.Format.ps1xml	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.Uri.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-white\WideTile.scale-200.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\LargeTile.scale-200.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Threading.Tasks.Dataflow.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\System\ole db\xmlrwbin.dll.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ar-ae\ui-strings.js.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\bg_pattern_RHP.png.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_chromecast_plugin.dll	613788884CE0093F.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\sl-sl\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-80_altform-unplated_contrast-white.png	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-72.png	613788884CE0093F.exe
File created	C:\Program Files\Common Files\System\Ole DB\en-US\biobio ransmoware.txt	613788884CE0093F.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.Xml.Linq.dll	613788884CE0093F.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-180.png	613788884CE0093F.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Microsoft.PowerShell.Operation.Validation.psm1.EMAIL=[[email protected]]ID=[613788884CE0093F].biobio	613788884CE0093F.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsLargeTile.scale-200.png	613788884CE0093F.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

613788884CE0093F.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 613788884CE0093F.exe
Interacts with shadow copies 3 TTPs 2 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Direct Volume Access
T1006

Processes:

vssadmin.exevssadmin.exe

pid process

3944 vssadmin.exe
368 vssadmin.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	613788884CE0093F.exe

pid	process
3944	vssadmin.exe
368	vssadmin.exe

Modifies registry class 1 IoCs

Processes:

StartMenuExperienceHost.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

613788884CE0093F.exe

pid	process
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe
2256	613788884CE0093F.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

Processes:

613788884CE0093F.exevssvc.exe

description	pid	process
Token: SeDebugPrivilege	2256	613788884CE0093F.exe
Token: SeRestorePrivilege	2256	613788884CE0093F.exe
Token: SeBackupPrivilege	2256	613788884CE0093F.exe
Token: SeTakeOwnershipPrivilege	2256	613788884CE0093F.exe
Token: SeAuditPrivilege	2256	613788884CE0093F.exe
Token: SeSecurityPrivilege	2256	613788884CE0093F.exe
Token: SeIncBasePriorityPrivilege	2256	613788884CE0093F.exe
Token: SeBackupPrivilege	1028	vssvc.exe
Token: SeRestorePrivilege	1028	vssvc.exe
Token: SeAuditPrivilege	1028	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

StartMenuExperienceHost.exe

pid process

3928 StartMenuExperienceHost.exe

pid	process
3928	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

613788884CE0093F.execmd.execmd.exe

description	pid	process	target process
PID 2256 wrote to memory of 2144	2256	613788884CE0093F.exe	cmd.exe
PID 2256 wrote to memory of 2144	2256	613788884CE0093F.exe	cmd.exe
PID 2144 wrote to memory of 3944	2144	cmd.exe	vssadmin.exe
PID 2144 wrote to memory of 3944	2144	cmd.exe	vssadmin.exe
PID 2256 wrote to memory of 4544	2256	613788884CE0093F.exe	cmd.exe
PID 2256 wrote to memory of 4544	2256	613788884CE0093F.exe	cmd.exe
PID 4544 wrote to memory of 368	4544	cmd.exe	vssadmin.exe
PID 4544 wrote to memory of 368	4544	cmd.exe	vssadmin.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\613788884CE0093F.exe
"C:\Users\Admin\AppData\Local\Temp\613788884CE0093F.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2144
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3944
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4544
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:368

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1028

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:1040

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:2252

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3928

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
ff1351dc09019b759443d28ac446797e

SHA1
d1f98ae1a11cdb26ea672254db13f065c720688b

SHA256
a1d7026729e364e5176d7a5d0a7060a26f99e8d590aff213f3509a80ff3031d0

SHA512
4424f8702e3d40d7590e3761b967324b25d4aabc72e2282110fc4c79e26d954abf22f99fdd4e76b6cd70b9b0e9194c083e00f39bc472efc963afa6ac2f7c3611

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
c991fda70339566707e24bed31c23b47

SHA1
54d3473bf4b778d4c83aca24bf76ac2cbdd6c2e4

SHA256
c8301695166ae2f6a0967ee4abf9665a2ba9e923f3d0acf3b7f1e4a834564764

SHA512
192ff67095c71c3906acf9194ccc06ebdd009989accad070b20f86d4fb3e08ebcb06294cea58cc3a0a535e4b1a03e9e215bd50015565e66729c2f8cdbab86557

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
9a08b46142d3ebb30e1365458277141b

SHA1
1442336e4530503f181c9d00de63aacdc143cbd2

SHA256
ea6e5d6ebde861eea70b59ca86b05fa7e1f283ea7e4d60ad86aa0e095759a736

SHA512
dfa8fcc44287e29f624ba134c75faef679192081f041e6906f007dfc398a62a46f47cddeca1d02bb99df455c568c0d626d83c608c03b7a6fe824189a26992a0a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
ce422b75840c21d743231d10e2424ec2

SHA1
c2ac33372cb8fc298ca629e81ac123de8dbe4048

SHA256
c0f8f43b0b7227b940cb93319bb70b177c617473c38aef4a861d5201621782d3

SHA512
44c660aed877e7dadc6459ba94af3b99ce941c057818597925ba242f73922853f01bb613473f029a2280948ffbcd809056eed28790391f8a620abef8b069fc5d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
bc7a00e932c82d6763add56d81e0a480

SHA1
17d238d23cccb695f53fd4181d0d6370743957bf

SHA256
c638ccbe84779032c18ba2b671661f2042231ef8f3d4b2ba6c76cd1786c16e0d

SHA512
90b61480e3c0e88ad2a842a70fe815863ffb60da26f8a99fbc969bf1d05b1e399835e09bd826b79509e6161488148ffdd8982c83b9339d0fe93f4e6fefb8ff2f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
7bed6467cd7dcfbdda4516ef7aeeb91c

SHA1
c6ecc00189f1d47bedfaa82e2485f09eaed0a260

SHA256
1dd2184e75f4bc1bca901525458975749357096d617e39b912b14612b1aff0fd

SHA512
b0d5e8279d98ec08a46f955abcd8d688fa50512d0ae1be8556f1c467b8809e4e9520886ba614f66fe0246c4e170c9f82ee2b23aeece947fe2fd8b90156a23006

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
7b86a3ad80bb74e3a63daed1f6860a87

SHA1
3de5b33e0660f8571a82df08fe4c60dcf7f4c86f

SHA256
12b07fa6adce8af6236a95296e16fbd8b16a2ec825b17e400df8084daf603f86

SHA512
da0a8ad19ac91b54f4d38459f78d457e3af67cd0a18f02383ab73fdb7f9b8e3ff509f3f2b896386892a72edf7b6eef3cc52b3f0fe5a8a38afa5265709820b4bd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
1335cc410d27b73593fccfe7296f97ed

SHA1
a51c3cc7eadd5814d8683f93f618768ba47519c5

SHA256
57862d26d8d703b2ccbba7b315505e45a46cfafe7b77ef3c0ebc6a0c2323aba9

SHA512
d5bb14da82b3e2e2bb8bd053d44a99bff6e3b4a5c0db0b71b0e6aeb993c1799db6a06061dea58f8c02fb74351799ae6dba9b81a59561df6daf5daf4a08774d88

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
596670083e1e17b543d63019d456a4d9

SHA1
9fb0a32b9a8781fd031df3684775c96f24860e88

SHA256
46def071c58ed7badd904a8ebd44d9eab4e6955d3747d65c1185576fd1a35f2e

SHA512
e8d496edc9bde3ed6f6c01552da23a3966d2664b56859dd0feeec165d11b641a345a2cef9e81adcd0cc6b71c166f0d8deea20a2840e1977d30288f7fb06ff60e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
688f56f0f9668375466f8233cbfb5f0a

SHA1
553d6552a263489125fff2c4be74839f6513d000

SHA256
143cdd18c87a34be38a4445cdfccd98711cc082db3e245995f32000363b126dc

SHA512
e5fee973bf3a13fd9c46c0280e7de9107adba10a2c889c99c3f4d4244022550d5b5915e60209d1733d59a106ce959c0d9f21bd646a5f56f029d1b46f034b062f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
51c0e7f48384b8e2f1b1ba92452daf35

SHA1
7eb7844b721db2b39e824929f4ab56e817ef12f7

SHA256
b0b0f860698dd1a09f10f25baeb0324c2771a1a50d4be0cf21eac828eb57e27b

SHA512
0556ffc3454d15394215bee79cedec607ba842f21fe5547eaff425de1be3e79fa39f4cfb60925269309e9c589ec78e3e48a449b1306151288e5a6e4b37a4b0d9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
f5e3c7ab26df1cc8982a41fee158ab20

SHA1
a5977a71104f9464a6daa1ed275d0693812cfe80

SHA256
5fcb4f13b2f1f2f697bb88c7990c7b0502c4369007c41fe4ddbafd713ed5418b

SHA512
cf794888b2736d1fd1919a54c0d0057f2062593792ae1e899610585f3e0fb07e20be7ebfa0f77e6239a0d874699e667a0a12b4362c8a5452ca208849c1c4b73b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
5cc739b795f852ebd9c6ccc738a20df5

SHA1
10bad769c051696eefbaeda8bfd98fe494f36573

SHA256
e266a021161fca7c442dee4175946f309e039eeccc2be07270216358fb2671b1

SHA512
0bcf499415b9b8c8419a94c051429e4ef73c2497156ea2a52ccea107a275b2c28ea91f0b8eb0d147c7446ec85c42727340cc99879379cacc80b4f1cf7625e0ca

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
526444ec746b1947a5038126f2267dca

SHA1
8f4fb747e8abf82662375c2f2d1e06620640dc6a

SHA256
2ff69b06c0802f663db7be539c7dcb1643093fc4abef3282864b28589aa0b68c

SHA512
85d548424691494ab21b932673f120740bcabbea4af8e6d98227c3d8e646c62db494c69edd493dada83c8ad2a5e045acc0a398490b31d9d53fc50454739e2aec

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
39519c0f1e9b7142ada22acb456545b1

SHA1
502517ad8d3455cdf7db7ffd95384255c3c1f894

SHA256
b45fcc77b9b368f847a40f36de6d977b5621d6bdbaf5dac8200bb84bd85ffcdb

SHA512
419cad9091c07ab0b4d36dc940100aa8edd11dbadc35ba3756cadea4149f2659890e1c0c1c892adf43807bae0e20f5114705f937bd28d69ba59e0cb7ac0bb4e5

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
803a246b011753cc00477cf20bd91470

SHA1
7d37958b6d0571f15d293754e068c496c50d3340

SHA256
68b2e7f819c1659b218f42df68ac788f6881dc4eada89febd420a194b6f32561

SHA512
2f9db8f487489b6c05bebbd6609e326b7b310ac9aab0a71a9dcd0c029e15e73a587acfcf87ee11ba33456c5240ed60d825923c0896422d048c744c0c058743ba

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
078b53a90bb66ab7393a64af671c9b75

SHA1
aa8ba772f3044bb3f908f68aecd077384ed38c00

SHA256
26d55ad40cdbf35bccf626888d88b3501fa9b8263ae55cd453e1415aa5c7d777

SHA512
71d2cb10bf3092e16c0eaaf0312b2aa8cfdd7cd79a3d790dee7b50b4834694200c70c48141f45db7fd1a0818ca5a454f985ce9e67fe5a7b2d5bfabe252d8d35e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
08ad1c0a4a77acf6dffb5ce4eb3f41ae

SHA1
e45ab479a35ac6e38eb622052f5d1bf004b34c4c

SHA256
a93dfb4f99c34175095f053acae8b432d510ed0af82cc9bc2ff7293d1d8a1c6a

SHA512
10f33191d959f1d5d2c73ec9ed015255276172722f1d073d23f46dcfda055ce85a445a39a62e1acbe067643a31d4b33f355dbe0f3375e6bbbda76ec3ec850c44

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
a37b684669a34ed19555fed306280aa8

SHA1
1c99618af2b1bd7a4e8268ba35aa7f148521af6b

SHA256
60d466f4ab20f16a40b06db84296d5c855353b2c346efd493b2f2e4dafaf916e

SHA512
ebdacd8bb385822d32bbc624fe330cac668691206129cfaa34ea60c9dd767ee22ce8e35967760297fffc1dd5e971447bf0d1159c8e4dec89b0406bfcce6cdadb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
22a681e3b04db48409e0edda642f0b37

SHA1
4ed057d9a226681fcb6d989feba34c4de83371b5

SHA256
5f2d77857a44d9542c5c2dcad5384aa2df206e4bd886749f4b712bcf902de0cd

SHA512
44f7ee8b99e8300570f06e8f7949cd143c3a0d9f62658c1994464664e79395da423e85e35975958e0c2d2b206cfd6d6afa051a027d17b516ab3c806377463679

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
e3fe151d8a467ca5c59307d14d573ba3

SHA1
1033cdc3c2879e8585065479dd489d89a8273879

SHA256
2930638a71d1022d6a50e772ce0040dbe72c8223e7aa4a252c9da5c1a438332b

SHA512
474128f229d9a050f96629e31570cefbfdbf104f622872a22aee5822d7e592446ddb65bccf17dddc6d65c2d6e3b4ca2a25e11fa6f7498ca9252de459bcb3bdd5

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
504f2c9db233a91506522ccbf3707e4b

SHA1
af0ecb093023873c5975de6ba704825ceaea1b9b

SHA256
dd62c3366d6aed641acfb738d655d4b2a6ca2f859f44e47cfa8a9c2afa5f1df6

SHA512
a241e41a97f2ccca02e5d071cc14fa1018f48e7f63c81362788fc539ec687946d10acb36f8aa16d6a51717fb4b2902b8c14e96771c9b46817b2d9be2890cdd8a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
0fb2df5a1e18dcf1ed3c4d86af001860

SHA1
3fc9ab4e06f493a459fe99d14154f1cfe04c3308

SHA256
0626739e15cb32b930a8a17339f705e9ea03651998622745077911310a1ef451

SHA512
a8b01bafad1cbe09a8db18999979e84b8fd8979b50df0d7dfcf7bd3f96fc2118df566fc8da3cee61ade96fa0e0bae4e47f577069a42b55b03649f71f06bce3e3

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
2833c86cec3654ca5cc244a7629c1ff4

SHA1
e300b4149046ced3e7d5f82fe9ede08e80f027d5

SHA256
d4a42ec645068087f4a336dc76a189335f4125d9d019124ddc7c6bfb8947fcec

SHA512
45f855a2462cb90b16ffbaebb47e57d279c4a7769945113c07350c1caaed339526025c82abe452cc76843904ff3c99a642c7243b73d87a85416760f6d111eb7e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
69862a0abd651285a1cc7a2e487b04b5

SHA1
cad862df00b4e8e5456661c096484d41366197c7

SHA256
fa9bbbbacbab56493bfb3197f4545479e9e8662906f26fd0e5fe6e3ef3776c42

SHA512
20109a1e99a3b6ed223d7eb176c1fc8387cd0b125ed27d8eecb57e96fbc79370505df70ef9387a230bdefb15a0afd271f04005b6ca14a1f59da8fddd2aa23b24

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
128c62e706e4d0e13b7a1af5590baa6f

SHA1
97f86b9485aa41fc7775f7ff121a5cfd3d525502

SHA256
cb5fcf50ac81c0bf46c6e7f1add8637d545f4c4986efd098eb2adc7f2160d80e

SHA512
3c26bd7bb27e171d6c3970e0cee7b54411486326e5eceb8fdae2522911e446af7f01a4225514ae0bb61bb66b5840956d5cf25bc95bf553d82b67efa4dcd208d3

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
ae39402f90bf3a7b5e84aa7348343177

SHA1
668e63bd5b28af632d99f370ba88ff5b69681a19

SHA256
3796aa5c99072dd682b6b55ab1001110efce674dae312610bca37209abc24475

SHA512
9ca97c79fac4949153b4954c0e34d93e36931ec1b2da8bb8662da62c3c1e7fc9be0431d4b72d6cabc1cc3f29a0f5cf3361a54bc6ba6b0cbcb69c8693da9d1814

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
8a1876e08e63a0831cf6d84df69a8d06

SHA1
7725842e5254fdcf25a3ce6f016ac914029fff42

SHA256
849bb9275d2f298f43bac7c52906b233fd2bd78aa3693e9fa5e672031e906759

SHA512
6f575771afc4286148f8dc70054835b365eb4ace6b16f9dfde3e7c2b3dc62cae8005c1477750b3dc9f7e42fc3f60cb34bedb513f34f23dd14fefd7a6e53cb8ad

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
83e5a245ae67ca9948ad192716d65f98

SHA1
46d9d22f636e099b661d21caaf5811cd0a0de827

SHA256
083219260f224e6f76aa2ad45dacffdc7c95407168da13c45e8ae62c0c20692b

SHA512
b4c66b8b21282ec5329f1cf07eb7ddc8a854218b937611f075ae0a4188df5f1f83721752068cfd2e7fa9ffca7ce9c0fe2fa416c8429e86435404aab9897064e5

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
c3c68c696fd0981ac7d1df6e3330fa21

SHA1
8130360d70042a7a282e04d3fe77caab9c906913

SHA256
865b2cd0c791b329cf2f145d37fe0a129f82c1520f873881b8c4060f79c02772

SHA512
e74865345cfc2202591918fd27640fdb39ece2bf7ae9ce6a02cfb5885718a1b2e59de6d24f61780903ce674eb9cf3854c2c2456bf5f0ea1366141b7e8c3d1460

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
a353c2b8b4f50deeba733fc74f83051d

SHA1
fdeb66758661fc5d64dc7bae46ac44fe9ba8ee6d

SHA256
3efcd5bedcff0336bead9ea4ea0e4dac42008649ed047d249dc12a7750fcb25b

SHA512
60b89531c18547f183b611af1402be73e064da4072376f6293abedb0983af095945cdb95f59b6dd97584cff52a0f7a0992bd8a1df2a422bad27cc0eca050484b

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
098aabd10c2abcf834acdae95b157c9d

SHA1
fba09e04916ff14d2c6dd52cc4462195884b4627

SHA256
70702bb106a97ffa3967729f27a2656baffffd45a88b2e3776f6a19695050af0

SHA512
0955bf53aaf5287c2aee3e42a54592370035e0ec7988a4a08d8a8c9299440a366e19aa821df98bed899025749db5f3cea0e5d124ed00b2096f28bdf3e3e4a72b

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
a6c1c28a9e8c5e7255fd7a3a264d3023

SHA1
00ddd81d58f82d66b73beab76b3857bcc210cd95

SHA256
760513d2992fc9ca2854aecd1b512b463fd78ac82bb27f9f9bba96d29d157daf

SHA512
d285a54cc7943ec8887970b1d60c02e2356926b1c013e83143c9ed27edc3b28d83a0bbd2ffb0f78d1835bc4fa8d26b144da7bcf01231f5355c84d6b14b193177

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
5e5e9e65b5e1e4493603036d5934a39a

SHA1
98b71f282957c969e57fb6ac7d9da16cff975dde

SHA256
09e78f1ec116bc6bb4d41e0116ff18a446a825f630921a7bce4da120b8105f2b

SHA512
12401698fec9b1b85252c6a124fec1cc7bfc6735c561a8cfa79291e6418c20de6f2d7eba408238123817aff60523ee832c18d133a762c72649126cbb8c66d5e4

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
ae0631fcf9d6957ac1c7a816cd97527f

SHA1
7a9df8fecc9480478c0e916dfbb21ddfe1f32571

SHA256
48548f1395e3a178cf360033e08149d2595757974f23b3524865943b309b620b

SHA512
040a51d71d7a202364ec32b1cd0e32035731a3519aa970ddb9d8285f07dda4b062e20feeb645be51946d777a73f4fd8cb7fc40111aeff121b1b22bd0e0241842

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
204384f65d8d92418a3cff446b7b5390

SHA1
14716693d6020c7004e036c932fd771c32439a86

SHA256
52c150be56f1a330191a41013c26a9242dd647cbf919509989aecefd98f830ff

SHA512
73cb4da4472c630f79d45def61dfc651438522c4fa2120e467ec41ac5b26825a08117d09f86b9f5410367f55f52c66aafd29617ff26f6848e9067d4b021641e4

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
f1475778940a5d9dc3ea0918c01632b5

SHA1
07fb4ef5d075e8d2eda7bb928a1c08f7c4fab1f4

SHA256
9088d09c9faf87263668ab6a3789e506ecb47869ea8405ca5c08e6dc6de7496d

SHA512
036dc433bcd24a5c5edb3214dd73021c51704e0fa3735384292a972689497425b39b99cc759642b4f4ed763f79a3c165a2de5fed016710fa48183b2494f9e40d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
b97288f056d0c62368db9434c5533368

SHA1
830f02fcf005a8516ef42d630f4b3eafa741a015

SHA256
980c6cad03ab62fceca673b5749fbe9c94ff0be5a8f1b9349bcc3f57ac542d6c

SHA512
2c7a0fb0085617ddccf869e305b61659ef561372fd84779950705aa3258ddae4b2b7cfccf3519e64c8a95e71e6f3cebfeb34b22c867bc09b3ddc46d17f852dac

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
a5c85428c823c94d088e3f558968c21d

SHA1
0f26564979f7e97d68502f766615cb9a81f9a5ea

SHA256
6320d202b52a96d858685e833ccf8e83734c936a96a9aaebe7c7f343dbafc767

SHA512
bf96f1c18afdaccf885808ecda53b08a14346cacd35082c5cb94595ee8716aea9a4534c586993b8b9736d676f788f182e42997b2e30ec0eda914a296caef378c

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
e52b42ac273a066b3d7598ba7db6a7a5

SHA1
c1cbe0c83b41bc73e6584d088e4be49209aef9a4

SHA256
8c6e3f77533d0f010fe30d385795c40733d560ccd19916b50cbf004ebdb7502a

SHA512
782df42099ca359d8b267bafbba075d6d4642d3644cebb643e57433998b2a40e4625a5df4aef25f6b03f54a1b455e11c36ed40bfaea5a5615d82969b2f4d0cb2

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
710e6992d98ea2581d6ed1d690988058

SHA1
ef5f938610500da01a38240521ab9300a452499e

SHA256
6e34b4bca3442bad4f6f5c44ccee0be9f0c4b257edac90bbe57d25016e724d43

SHA512
06e25d03b4e0113cf7d790bb127c7a12ba932450dea6721f3486f4956d94a28033b70f5c951ac3d1a0f8b0132bdd3679fc557852e6b8e4e6bfb84cde32b70bca

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
636ed527bea9647ad8fc49dd7963c3f7

SHA1
87c7e08890d2405ce47c7ca9504dba804a880a95

SHA256
d7156e9772c961de9f915d2ecd5a07ff5c6ead37e419ef4ca44b97de970a21d3

SHA512
0267a34cd570f4d29e26c2feb9931630b9dda3b5ac27c836f367fb4e7b69e2351d7b7bb24c579af497833da0a48975b528d2c4e03304b8c0a4f6aeb914b97974

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
ec67691ac5c24f5f71b973b63f6ccfb6

SHA1
c784e2114816d1f619eeaaf7f3cf3dc3e3958bbb

SHA256
cafd987eb56d25bfcc3d3064c7a4a65fc6d09e70cd06e0283b21c1d023621b20

SHA512
60ec15a597517cbe09d80b7fb39bce6299bae1a8242666190ebe59f9144cd6862b251bf02cd81af4ef38f0c6139c977ae5546e9a767ce31e2846003326a9f5f7

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
e965cfba27d113aa06aed8be68a318fb

SHA1
9723a9577a2b371da84024432a3cd30ed043a3fa

SHA256
4ba01fb21bb9583cb3534a0cf2fbff708b0a916ff2a693ed74fa287c8e00b3f3

SHA512
1885e6c891496811a032e495f5a66955cddaaf6e2bbe12b1ae7a1282f11e02dbe9bf642da555b2a8bf10690053798d1f94b12c0eba129ce0b47f340a25fe728b

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
81cd4d28dd382525cb7e00489755c23b

SHA1
8a523d4ab222407a83cfd635860d43ee246ff8c7

SHA256
b9045b1f0f8531adc0e3312cac8f93dd563138d43b8f675ba301ff5823d4fe4e

SHA512
28621a210dd0c67d8d559558fa7622fbe94ead290c0fbd2abc1319b848b38f9f1f960675f2f8b2fa2cd28cf297abb90a47f92c3b3432b68ad5d8e29a828c131b

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
eb934fd568e69e6bc4d7de8813762bf9

SHA1
fe80cac36c745da9f823933e8e22b537d9bae7ed

SHA256
c57711510691c9d7dacffa507e2c49ce2ca0612bcd0ebecd167bdfd0ecf889d4

SHA512
d55f19da0692413afc0228b43168077120d35e9be0daeee94460ed3c5926a139191e005b537dede6aa207ad20efdef67c8dcad75f31cca85b9baecf301c54a42

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
cca046ddc261c7236d1d5248496ad00b

SHA1
56612fefbe897178f456b0872c0024f1fd0b2a24

SHA256
21b71a9d0b52b30fe98d5ae32dd16913410cb721611386de7e9d46c8e62148ee

SHA512
51c049c4b2922e0746fbd0fa51a932f451a0079621a7bd75a24e4b75012316c769007531a3011e4744621043c620bec8a6fc7b76fb3a41446c6a3fe61a2762b6

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
23f662331ed847f24b5e7a84d2a4388b

SHA1
a9c225e6edb47168ccdbe74614d48bffe3d5d6b6

SHA256
836366c7dc1ed6f971d16b73638521e0126e9505397841be2a06ab91e5c339ae

SHA512
2950dcfb802b688ff29d0220e63fe3847b3c9113bd4678c81959afbc7b7ba386dfa229eda0c5104574501e26754daed865f8a169160514971bc981092b8987af

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
36f5abe57992a46a84b8b51681c93d18

SHA1
c5d72f70e69365fb7c9dfc13d1c76e7a2d992fb6

SHA256
bb5a0bd063c953e735067d14bfab343fd70da81f593ae18100a8547a7d8767ca

SHA512
76ac8c8939349f7cb03963b914f2799d934c67cd83e67070b2917567d7bc9a266978ca8ac2a27ccc939126b7c78dfbe92dc89475b220fa472fbd42a22d3f661c

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
ab5df11ae93afccb2308a8289e719847

SHA1
df624c28f7bb4b1277b1eefe1b15206f9b7cb0d2

SHA256
cf0045fe07a0e91f0ca9825eafffa2e47e766af0cef561639dadad30e459e192

SHA512
9eaa5b4590c74acf85638d984fa74c08fbd6c82b3982a71f4c1200581b6e51100aa5a0f1fc9f1c31dc0a026a3f3bcbeb13a838b6e9eaeaa359f521f8600c9504

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
d2bc75279d3fc312ceedaa2ce43f677a

SHA1
edd4d5aa5b063ce9eb3dc53d31079e0a01d0add0

SHA256
7550a75a3f5ca893863c63747dea15b87454afe275eef001f083bf9b13f2db1c

SHA512
e45c5699b3affd4d0349a2562e5489b011f2eef162fbb3c5e7fce5f8b8d82c173f62c7cff08aa325057597e92e3982041baa5c99e9f492477ffe467d41e541c3

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
df1ca20fd4495444d0dbd47b7460d8ac

SHA1
815b256120caea9dd51b06a58e62fc7ff618b659

SHA256
3a48d92fd2c225edcb3dd82d1b46cd03ad37d27a228dea0e74745e407c585d41

SHA512
a2551d9d31ecfc6f1fe6aa77302978a5321d4eeab7243257f6481a07790b91a565d54981bf2f63fc13b7bfae61b164d1a9d021e6a214cb77e6921764a4f2d548

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
e7f29d3173c6543e98d1bc639518d8d3

SHA1
c70bb5c0dce43734451e3058922b22a2896a575a

SHA256
d4589951c138388a4d906b9711ce8a347ae7135de2af979aa332d57afa11dc74

SHA512
ec078d86d67232dcfe3ce66faead633745bf6bee1a000c8e0197534fefd8415ac8965dcaa15cd3e506a399a8357465486e964a5a6bcc427be996dfad64c797b5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
58c580ef908f65e17781851215949c5e

SHA1
ca58f6473d00e41d38f50ac52c8c9c4a4ec093ef

SHA256
db6db5d70ba6b93bb121d1b459450322f4dc27795a24a4d5bf822145ea54303f

SHA512
1226b1910a7c6bda23c8d42c934cf5db740f520874d473f6603f01dfaafd450bb1135b922feaa6670792b905a465f5ff7db27b9a84b2641ea2f0945de3d25f6b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
637250872e160a9945ee356e0f5a5569

SHA1
d16bb87ffa4026652279f03b33dc0ee2a8a10894

SHA256
c2290971f08841665a0a97fe5ed55e6ba759fc0948c5e5539b83a08689784c9e

SHA512
6ad578e6cd88f61aa0fe08ca0714b5b891aecb86c6b20fc7a387090de250a0ab7d25c1ab8610ccfca0647e26856d032b97c3a41b7d2ff2f4078b3a2186e0e6cf

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
bbd313c2a7e2ff072ab49420ba1aeb30

SHA1
db39836a809b81e5a4569b217ba725ed0688782f

SHA256
8339cc02496719e776f5ac68b8c464ec73d12d354945283de2b6ab8563200739

SHA512
93cad46266c882fa47a1a6de86fd4149af7f1e14b350b6418d6c83ce1a60c78b036a365c030778f3d5a47f632cf254fa51ab32fa48dfd53c470404bdaff9e142

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
f3fd9ee0f09c5c3744149a04334d2ab8

SHA1
dabccc8140d1170a520c542121dd2f4dfc95f695

SHA256
a1ac52c35b8cba62a2b12a673e61a1d6338bbf992d55090ad90cfca48efff923

SHA512
56965b521f97aa62eac67230900a0a0c2451e03da941af8ea2d22fc2708effc7f1307ee7430995d2e632b3f30ff3a2dc96b03d7ac33c1172351df70e36737c58

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
60bdf90dee617daa531f8a996f89b5f3

SHA1
1d3b5c509b3beee426ba06fd858466d745e743a9

SHA256
fd3253b553cee04ae0569a112aed3d2a4f1faabed3d39c51079c0584e22cb3f4

SHA512
4230eda5b95c5e2c6823dbf6c4dc2d57cf06785de9a6992036cb2e65a6c689d09d028526f12b239f1201bde352f24d01aa72ad611ccde9991e2b9d53de4434d7

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
a14c616c7b19ba1d7df7c7670e7b1121

SHA1
6e040f9a1a7ed7e0a9af41cc1536bcbb20f4f371

SHA256
634491dbe89cd5a62b49ad1b1506e6be083dbab7ed75e79cc5d9fc4c156c9207

SHA512
810306dedadb2614966f5f8ab931b6862449dfc775803e9115f02a1400ed03678160163b0ce2a63381639636fd9419a99d2b17ee8bfc56c0ebc4a3512460cd7d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
3ada721a6c41a5bf104a2b4568949a78

SHA1
13eea9b19aa7ce8bfdac4dba6c27ca458f8ec788

SHA256
06387ff5785d2672e843e02a20ddf500d460cab23b2ca6163daa140a1c119d1b

SHA512
123e3a9d89643b4274b136c02f38fd78f1c5bae98221450b2dd71cfa6e893527112ca16dbcf3402b940076200f4517f9ffa06ef5d67b0ebb9b1d9a6b8af0aa52

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
b7f222f1de03d4072e1bd698a7b74487

SHA1
c6cc2713ce7011cf25c181744db3fb8d1c34e07c

SHA256
a779721acd87be26a521f6ca271ef92fbd222a4104509ee63c419d77fa2cdb00

SHA512
bd50a06153bdf65b1f433e6d1fe86e3fca9fa875dd7412ca090c57e2efdc2f84cc9f4fbe2b398661607774bff9034648713eab8fe9061d1d0b4784982302d060

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
32861ff48407c60092ef8b0f77975e7b

SHA1
a8d79e4c3718eb0410a3b2ea5bc4e23b596261c3

SHA256
189046296d0f0c1cae1c489b678b7b8b35ba051036e5dd362639accc1f13040b

SHA512
0638a5f06646c236353f8ea5725684e80d2fdc538fcd9e4f2497e73d2b8b3e57b54652ccaf6702ea86384f11235e10071d4a55862ed4ecc2ec5c9e4c94b2e02d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
74e1b9f07473250da3a1984b015bb163

SHA1
64636984643f738130448d6482f58d8412c6f59c

SHA256
25d82407969df85e92329859353d6524394b36ad14c209e8b68be5b166d7f485

SHA512
681d388fb78aecac3b0112e4ac4a7056d5d73f217023541cfbbdcb7deeca68ca28661620bf5b4be1b789db61a63db7eaaad928677cf83c3c4e39e8f34524e4e5

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
14caaf9ff47e5c14719abf10e19fe398

SHA1
c981c6d9590eaa78fe6087d34c085d32d10cef83

SHA256
c1f162b5964f169016973f8da7e6a38fe595986bea3de16893aba52f7f18379d

SHA512
ef33b15a11405291f26adeca1df7c252e9c776e4f094de56e2b5659cb2fa31257793e378f7340f9d913d97a25139c434334c795a57348a4d9150c13d1acce2d0

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
c6463805864ea71e1f577d9ca7b37d08

SHA1
ff4b8d7b5f3f565de85e9d156df77dcc79fe1dbf

SHA256
52c28183a3087529b460db28eb57fee1128eda9fb3010df1e1a7ffd8471894bb

SHA512
64213c8f2e5e57718092b3348f1f54fe6ab87b117ffa9cb4c599b564bdc9a40d70c541e5050496034e0a1e68658290fe4c83d38e0e2b8f51330b4c1bc1ab6ea6

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
fe45c2462de5cd71f77720776e68095d

SHA1
7143d181c916c42739d7f8c99d084933e3d27985

SHA256
09095678d4dead85910a0df621c465412dac36a5c87cbfc1c9acd5e657ebe7a8

SHA512
775e7161a8d2f21302875335026d62f267acda44bfc0ce8f2bf0455645c61e3ef7f73094feb9131a31d1549f2ccafb68aa49e4e97c24c4730913ba5be5318b5c

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
363cfc2361c43d4795da395db9ed89bd

SHA1
f2772fe97aa9017f16edb5f45e9b455d8e63f897

SHA256
f4e6eb7949d5985a818a01234f70b07e5810e95fefb39dd874ffb3d8b3569ce1

SHA512
557bf83891a35fc71309027a1b7bf04e511e65a3d8bbc9e5c552db5deace667afeb4658c2dbf2fd8bf369d01ffe94eebb4a55b45586c4ce6dc43b7e65c0170df

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
017651a2665f857136ea77aafe6caa43

SHA1
f5bc356b2b4dba33129ec67a4bd864e1850ef0db

SHA256
e8be0d7184e53dac72fa2954e0f276b192c94c701ce2bb496c75c56c363fd2ff

SHA512
b16295e60d6bfe4300e77ff2b7cc959372cd664fb2eef494f6ae705a62bea3c550cc9d43046b6fa3c638efdd9fb516501b0cc69a949873092ee813d460c65f4e

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
9235ffa6a8097095dd12d6cb7808d8ad

SHA1
f11b72a91701c3cb2d616d344f4a05e023c35de5

SHA256
0093a8c6306abf6e8c4b69eeab68e9d41213f89df79290d00a82a739e819efb7

SHA512
a4ef18d8957e2b5669b051c0d4d55fad0912906e2502d6a5827154ba506a901f874be9095befae61c59d6d7641aeff6b45f8d0da7258a746605c71b9f17194f2

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
316398771598ad9b588d4620ab234415

SHA1
9884ac800aa09c731d97f51d346772fc3765de1a

SHA256
7c6730a9168d7137adda35f81bd5f7aefc6ffc8ffcaa188764e4a97646afca78

SHA512
cc66b55fe361a752d6cfcc09ce99f17b7f41a58317575cace41117ee7cde4cbe770c0dec2c54e7e609b93db78b05be297999f6f7cf0cfcd3c0e1f3b119f43688

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
4f8725187ba63fcfae6ef2e5cdc84fd4

SHA1
3b29c0adb0bcf6e111fe2a7a29a49a321edc6768

SHA256
d3beb3df95ef7c2b4db2588c776f3d7ed0bc9bade3500aaec34dfd0f91d4e2d0

SHA512
a45279873a03705ad983f0b221b5acf3fd12e50d970c16d8fe36278abe165a8c21958fe9dd6d9f65dcbd0377afe93c7651fe715f4e80fa37d29bb45936c54ff0

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
e2d40cc6d38cb0902203beee138adcdc

SHA1
8d9b938c295d75eefcd908a9d41cd105365af4f1

SHA256
1c3337295ce7dbdc8edfdd2cc58806387fcfe8170ae9900155492081954f937d

SHA512
0697e105061c23d3305494f122da4c43b817398c2195c849b80dde8c578ec2613fe9bf08ea4b3fc9a5679cfa5dd2bedde5d32b91bd0c60d3a4c072d9b1fe4207

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
d222da8c5e22bf2dac025ec040b169c6

SHA1
978199c08aa4123b675fe212816d37bebf846748

SHA256
fe838c2a6884010f1ff4b5876afeee5707a65452cfe505745fc5f996961c43f8

SHA512
93d3a78e7eaf67f0cbab2b3e0b1823db1ca910ba649f0c726e75cd57e7f66cca1fd3c7bbbf8216caa3948db4892dd797b2e54b0efeb9fa54712082536fbe06ac

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
22f6099ef67114293d3ef28ce7dc808a

SHA1
f243fbff0c9f61edd52e643a0597754233e4476b

SHA256
b8457a8fac4d6af25df6091463f729fb8d5f9c84939af8cd5872d9ebe1cb7da9

SHA512
ac542e7964f47cf3b2a162017f023b4b8b1ee09b95b50513d60c3c3a808df45a25b5b9f64dfe33ed57970b52ff73980553bec74c3b9224bdc21f99cac70085be

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
98fe2888d75988012e3fb8168ab11104

SHA1
2ac1896c64f8741b48f95e725437fd6aed930b57

SHA256
49e5ce70c599a18e94d48c961eea370461b0d2ef4e5293a57216f060d962ff49

SHA512
fb26e81b877c616f78f1d70d47e5272d4a825254a8bcf1ce5588f727cb4e8208cf872c356b9c653799871611ea76e9b3adc920b3c165b9db7770b996f4c51e39

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
fdc68ffa171367750389432dc6235b39

SHA1
be6c940e0bdff157e890e055499542cc6759728e

SHA256
0a0a9c9f6505d69c7e18911af07eff2af714d75dd656d3d5bd3e1b8af283eace

SHA512
35197f8cccf39849a39a43d05bb8f15810d8dbae0b866861c4e8088ad03b51bceaa5b5f60ad1fd44a199cc2c31b9e7db046cea738171aced7e80a6c59fa86bf7

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
c9b74645a25b2c746e0c607d29e4e2f9

SHA1
6403fbfc2a53b376fd35859a855652b800c44388

SHA256
bd4cc672ca553567a0bd990bdb8be0839f289c879501b597e7d9a48d096462c7

SHA512
f994e30ea2c9819631aaf69139792116aac66b319a7c217f545e502cdb8ddb8de490281970f558163484fb1629be35ab62cd8bcce8e5755d0d97beb005ae994b

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
abeb07eda20a0e61c68ef12841325e92

SHA1
e7312ca78242a486d878be202b8d5e832209d4a6

SHA256
a72ecc29466c8cb4e096aa325792c94f23088b29c2e587b5cfeff06e21c5dea8

SHA512
2bc5015f37a30d854b3c11ac35adf5d256df4d6d6aa2cd020ff3a48e3bba9a46a28428200a23219ced9c786cb227da718e96da370f41e1c016423e5f3e677d4d

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
26a341813084f81f587320ff701fab75

SHA1
998384dc89741822aee19c9da0a75f03f68d6368

SHA256
a851fcd7440311c45cd17cffc795204adbc602a962be726f5bbb7e53704e05fa

SHA512
3d4af6e8d53f7b192679ae3f8a778201ad29f938a587f6f7525881d40ceffb5380d97d2c696849e6319180e16611e4e6d8c1d09c157fffd0553c4972cf112da6

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
2a8d4a2b33e56a4d4535963dfa7feecb

SHA1
831571de88bb7c1f542f445d416e0c96f8b99096

SHA256
bad926784163cecfb443fe43733e23c988a278025f3df2c2de6df72e04d96f24

SHA512
a1b12281b1f77e735764e4ee4faf2e02b4cd19af3c4c4a68773bfb1e3f25c989f9ab772cfae5e9e8b6978881517582eadccf98e2ebc6c8a93f64f710c62ba9ea

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
9594b7c97fda72c36a8b423bee10e3ae

SHA1
7544bacc4acabd845f9eccc33ce0dad149f5e14c

SHA256
56f14b6c754f884bcfd4a894698b72f9438846774b0028b7703de8fc6c537008

SHA512
6abfae388146ee872af23783be38bde52ff229ba49e411e03585934499adc8bc0cc9d35e09a68c329579dac7252b790d18d28c630c6245dc8268576de09ef592

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
9c24b54588ae2775819edb541713ec3b

SHA1
02b1b6da0f46a6f8b9953a5d929dfb877a66fbfa

SHA256
89a7e51a27750b5dee376331e714bedba183c2e31db3f15d72a8054a8f15b540

SHA512
7b78c4c36031136c5810cf038c05352f85690be7faee147abd53e6018b396da5ed98470b35847194a69239490a698ad2fed6edbcda4c55df337e01733f1d6ab3

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
4a3ca654bee6370b64fd5195ea7f72e5

SHA1
25d824f437252ef87280901b914c5f9d46adaf7b

SHA256
d96ac4282a3460ad1fb0ab34c20294a239d161b9a01a1d97bcdcefaa18116897

SHA512
fa295bac22e0559ecf999117ca9b4acff60c7e5c70981972444fa7145d3770a493795acec2621e4068241f38a896fbbfa2b07d231935422ae2bbcd8c2f6bc091

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
6f757f6654b5c42157ccf38fddd5b8c4

SHA1
1f00e2880f22c78d68f376d7cebd94453c248232

SHA256
ad5d9dc8d746d5544b68b746c4ec15b056ee6e5c05c35896a44b158b3222f830

SHA512
0f5a5b575d915902d4ee822ed5143276ba53009b65c9f2b3150296d22bd2f45354a8a962d9342955393432ff73c7be19ba509793aef9a01ea466acb1470e243e

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
12d1420b7a6b32ae1ffe6c7fb90741e7

SHA1
d569e3f2e2c4fd2b91788869eb04449b2734efa2

SHA256
4ad504657e1016491d159977291de0d4b01efdfe8129636b92e8f31d6d987de2

SHA512
95cecfc0d768c5c1ff4fc5b4da931a49621308d65423f494809b4deea685dbf584181bb69c04789bba5e4a705e7807f307b4614fe065900b552f9e022f4d3300

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
c6c3b02973b0cdd12591d4728a36dc65

SHA1
1c458cde5d8f02189d0de0d4f5fd628563188123

SHA256
2a2983001d12e655636391f2a23997975772a5aca56c2d63dacf4c2dc120e74d

SHA512
d8fe9b0afaac0f26806539a4cff45e5e30ee15e74a3a6fa52cce6ee9a2694912b719ae14f1f340ba5eea4ebe1d8e12dcaa0755ecbd04c2663a554bfa2fbdf407

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
48ab08d3ecefc7d3bf1007cfc3891d96

SHA1
0e71a57737c6542e7d2be663b43055c178b76789

SHA256
b1e3f662acc1329f13688d8f5c53449dae6dccd23ef646d722c2780b0b4ff5fe

SHA512
eda23531f8c0af98b0b7f78ff108bd7bb79702562eba4f8523dc1c58af83168e73307ff555f89d56e4edde69f0ae0329eef594327d60a11429fc88871e444d51

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
90ab6969da20fb0f03a9c7f4dca261b0

SHA1
b8d9e669ea65de37760f8b77bc54d6a20235ee2b

SHA256
aaaacc72592769125e94928155d3d6602ee5d8579558bb18f3bf02480a39c616

SHA512
2eb3c5c5e47539d9a3c913a0c8508d9709cef3f0e5abc16dbff3915084357904267ed4ae2987e01f454e0010f242c32a4b0531e6c122fe40857df8fd6d406034

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
823ed1e50d70edeb04204b793a5eb60a

SHA1
a4233352d72fdcb7c27ef44aad9ed783b524f262

SHA256
4695ae3a77fa70fb7b4bb0c8834b26c6c38f63efbef8db76cb6c230f73b0eb2a

SHA512
65dd3d827bf3a4f27ad4d2e749ae8a1e56eef5be2c5e55eb2d613b36de98cbe24ef4bf023374167d7c34eca194199a001cf79415071b23c699b31fd445594793

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
96bfa796e45cc170f26134e99a293e52

SHA1
2b74626df1b1565d99cae506f5633733654bec89

SHA256
ce8d33ed25f7d68deab8da8395d83144e42c18cbcb6f09f5b8c472fad7c9a833

SHA512
7be244e57a3d35b5e3da38c8857e08e180c2ffd71439f48a83a0f318840375c03dc5923035e506dd32c66eaed716a32149c22af483f21dfc26571f4a3a43c389

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
ba5d7121a6beb245d676648edace01fa

SHA1
d9753a31de63fedefd4436cfa47262ddb4f464e4

SHA256
5ebf6266f59604d87567a0a2b1007d687d473be6bb2252e10a966280ff5cb211

SHA512
215e8a9960b8a1cbce23e17c50d3d3f7c33902fe78af018760e1ff83178318ecf73d69752559f3ba678a2d61715c7615be4283cb56e5f85564350df2567d073b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
ae48a232db12fef595707512c1186a45

SHA1
a7bcb5269ab748e6db75ed9954fda1140274ba89

SHA256
b3e28affdb3f874382b1d2e62e66e32f50a69d2d4cd53f9f1df7ca0b68110d7a

SHA512
ad58836f18ec0fd004955755df63323dc8d724efb5dcda1919360249ffb6d4dea53771a9376aa3b47e2cd3e145be7db4cd8c0cff1ba8b7b1b2273a312314e2d7

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
4366a25a1673b965c9f5646f13516bc5

SHA1
1185fbb39d0a9f4d0688a3c5e6a7f8905fed6a5d

SHA256
0f754a4b1fa780dec386c0baa22a73f63855d192ea76e6db362435576856569d

SHA512
cd20f2729d2bb924c7db46a98e2b7e0ebc15d266641f724720a9e265961159bb4e47437bcb84675563baffdb80df6ce9a57773bcb744f0a0b92c32a97b3e24c3

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
6fe1360ae00a066c674ced9ea79b0a59

SHA1
7a4c090d44b128809362e1f454019712f65831db

SHA256
9d06fe8432dc901c29a6ceef45bf94f06d46853017c7b2c476391161aad3bbbb

SHA512
2c1edfd2429f2c71c9f6df92b83bc32a8809ce6fdf1be7eef9b55fe5212c3e181cf29e5ac6d39b53314415fca782e42b27923ba12c521a693af0d5659a415844

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
3cbccdc55b6d42e50e02a6a5d00c2468

SHA1
728f1077007dd87b3b9107e4c792083c523deb97

SHA256
436c0f63bac43e5d19b0264e8a1c7153527ca081777ee00d351387cc06c1ee9a

SHA512
73d7d1102afd8f495407f308a2b8e58e35c6c58bee2b7a99a7d02c312753caa7542283dca6253c65506d2afc59732cda31485e30e0202ab9839d49e4d8a38382

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
f5e1ecaf00b46774ab590bde3076729b

SHA1
d8f98ff9c34314ca3403af940f97536ee43735e3

SHA256
74bb4abb8da6af6b350cda3afbe3d23114fbf6b5ab7798baf326ccab242dcf8d

SHA512
d25bf140995a08d986f4b8cdfbd47d1582352c6e9a67db82f1f2afc032d3ceade86c9f5c5344a03a34a48c6e01cd8faec6d1e75002ad257e731be186b3d3a608

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
f88d6a321dd35676e50a6c77f09b2caa

SHA1
af99a0b2421b6b1ce83072681b702089d9154998

SHA256
663771277332b2c505dad920229470ff37387a2174c2a4f81e209571a57352c7

SHA512
740dda6b3ec5cfbe125c52addd847ae64ad093e2e6c3a4866634c83d64a7f4476bff3414be066a5adb07d7ba86c16a9e6c5caad44c697fb5f7486affb0ece69d

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
ea12046ccb39762ab49eec4f66fd2eab

SHA1
9b551819b8aa156bb8b391188d94850c7aaa2a64

SHA256
00ed4667c0fcb1c5ee15b0b187405d8f242bef0aa20761b57a4927fadf913037

SHA512
9ee6daa70cfcfb1247d22cc4e373a151df30df4a527be1a6d606c39b7facb30b6a061452dd9a419f4f38effe7c300f9399d99f7c3849c025cd38e56bfc6c47b7

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
5aec24d89e8ac1e93374ba7498b73671

SHA1
53b126850ec10de90a633692f45f921346fd97e3

SHA256
32657117e125eeb5a164a136a509ab17f871f7a5bef5e5f6d8c551ebdebd0471

SHA512
f0be6d317ae9e47f4de03334d99d849e8839a2169945bdbb901013d994d2f4fbd7d512b06e66316a9eaa5fd722e1d0d871727f943b732bf0923a150995183691

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
75955677022ebad55f79218ac69de10e

SHA1
be0154bac1d8c72f31e0d7e88df42b83c4cb6a73

SHA256
8f832d2222ae86478db0bad34d692e5a5776d2fb805ec9d5ec7cd520be3e5ebc

SHA512
5ca18657034e2afbcf801303f182f0eb1aec941dbb241c8699b6203e81e907a6a6a8fa3e86036ad35c81d36a8b7ba69628b30089f7f8be6d7dbc7ce159275e5f

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
2639d8eef7f27f9f009feb120b7909b9

SHA1
07a0779d056d91d4b47679214d6e5ad2a7e0e042

SHA256
117cdae455bc1b9b57a16bdd0b6834cf9975164865471c0704c2d68aeae8bc18

SHA512
1502c9bc931d69d13bcb3a7685bb9a41f724ed0d82776f4d85f31f7109aef487dfdcd5c19fa86b8ed08ef229b160da8ae7e2a41498638f756c65d9b8ab14a22c

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
bfd25668348a92de51dd98ffecbd109d

SHA1
628271697987de85c0157793b6a51b93455fea2e

SHA256
ba6206b18a3a6b2e05faffbe268777cd79ad3244ca1b5b124f6710a2a57b685f

SHA512
deffc2f618eb86362c184abc529f429b93e1de6284aa06b6f71cd29481f553e3a63b8635b05d4f79d938268a3d52adb2c83e411f1c19ce9c76e5a829d629d591

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
023db94538499f676d43ff75bb5ffdae

SHA1
33bda96b123c4851fa49f009e2227328f3fe5f7c

SHA256
02a0d6a4099731ba965fecca2101f478e55f834018108f3d4670f708a3f6f063

SHA512
845e5c4b507ca96cbc478e82a200e9615e69442da92b49e1b9a60c8d31a3438b9a254039084563c62d0d9eb68327efaf4f986e0bfdf554975e47a57fe3f5c5ca

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
c269242ab7427c0cc3c5d99bf3e7078c

SHA1
2ef11521d39990882094961a275b35ea5d1494c5

SHA256
d933655b09cf64617a4d66d288630124392aedecd73976f3f739274dfffb0d3a

SHA512
f119bc91414048e857c45e398dd4d11600cafa47cd25a7d9e8c785fe00f156931237f1d017cc82a6c71e9b3f689274679232081f87214a6d505bf31432b05810

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
38fdac75e8984dce7635cfe562100953

SHA1
7c0a15b820335c04bcd0e97858f8828bc1476531

SHA256
f631922dbbdc65c5c3597a77e6bc6fba149a29b225117fd7b3712a952f728214

SHA512
19cbd3216f386f0ecfb9751b19ac9cbb1498050135c64088cc832cbf40abf5b6ba7fed715e2e6eb2d385f9e647f35e6f5e22e7fff5abdc8cf8cef5443f9e5eeb

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
efbfe8b9a092bbda66d2430bebafd511

SHA1
b8e7231c1d341332a5c39e83f70f751450121368

SHA256
354cb8b41947f2fe199e22b4fcf840f5b2bb89492e2ab6dda5592d39883a5741

SHA512
3a657847a70daa288a5a6d48b45e97b9a72f3d90f6bcbc8767cddb9cd5742ce9400512af310ccd884a368c17ad630a5d2bfad82de9ab27206da0311036e33791

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
354118306d91defd5c0187d369551f80

SHA1
b591ebd3da60f258a023e9b1df0f22e4bb3583b2

SHA256
453f47a90b32c8c9fff1ce5557ca9cb403cb38c53fdb54193df6755f5786cdf7

SHA512
fcd131f05b5f9a10400a631d52aff565d07475e3402581f515e1dc536e4d26d864af33a612ca2647d31449b6095b10cd1087a5c423a8de71c5a66e64ec0f5861

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
8767a48f67ed855ef63525b9af0e862e

SHA1
d83a2d5793bcae1862812a22430b2fa8b02ef915

SHA256
45a98344043796eaf83de3d536951d5e3ccb2918f7fdb218d1ecf49c99a6738c

SHA512
a92e4213ef1fcae4bd3775bc66969db6053118baeb8c6cc0843158fa30f7e8b74bee11e3e5f2bac015c9e10d80ada82b31f80eb664f7b561db45161ae2eaf7e9

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
bd553d01a06307d793735425d68f76ce

SHA1
fcdfbeb614841dca56cd4cca0f618eb6461b1a9b

SHA256
9c4239253c6220e6e611961de6745fd82574b48fafdeb8461414b482c1ab818b

SHA512
d6570103cffe388e39f8f56709509e7fb2ea45b723c3ee778bf2a935446e76681919fda90e3c0b4c8d8d2b35a25fb12d0839506c7bfc50f3ab100de33eb1debb

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
cb4361c67536d3b060fc4822f63d7179

SHA1
0d90e7dba1509e84138d7400749294770319c072

SHA256
bc12f895cd4746505c0c1e9cb33a151e072ba384aebcd3a27745de970fb1ba44

SHA512
c937c18205b90be86a51eb5622d519e6ad2e60f410e45210250eb33ea69d3577564a470e623e20d15e0bc00f304144b3c513fc6bc2a0d0f2b31cb6b45786ab74

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
97966121d6f256b3c63379aa1ede1765

SHA1
b09df02607f653f66a33cac23963001d0deac939

SHA256
41d5bf42e7d9e1f57c2ac86d577c6bb3b83f033417ecad923f2d55f8ce43aebf

SHA512
f82503918603300f921415739ee209b4066c69723334d88f71327bed7bfbbc4dfe68e884ae5b2b1470d169eb67752642c2fb6a13d58b1be11df3fcb6812b6329

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
1e7d24ad4875d68d93e945a5bc2ab2b9

SHA1
eef64051a12f085fa7cb304353d22fc43d2c216c

SHA256
f6a788ee6bc210cc20307e6d8557fd15d8f623ffc7606f9471a8e06029d2a3f3

SHA512
ae265b4d3a67c851e99ea97297cf2e7593512ab3a4df8a1d7638ad6bc2c4843164de1158ec28c01dfb78687ee1b7083925359365d71500cbfe9d03a2c62a4685

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
6263e557d3092ce2878943e0f4e672a4

SHA1
d3e2956ec5579be2f98455d330de9991da5acca9

SHA256
97e64a4bf5ff641b3a71d00a64f7554515ed602ea3531df69c4ed64bddabc369

SHA512
def27486b314babc0c4400db4b38c06313069c5bce9185ff87a5136e8e465d4d91816ee84a0b1ed945720d2fcfbe6b8387cdb1342b7c48ed2e5523d7b30bee07

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
32f2b7e7d1f41bb1875dfd83eb3d3d07

SHA1
d2ff48e71639ccec6994e3f40ee07442da64eaa1

SHA256
8fdf86f4a93876a4ecb9d9d9da1e9ae525e9f8b340411fe172a7a9dbe00bb97e

SHA512
5f6de1db929284d47276667609aedb6209d275cff896634367c234ecce5cd2ea54d9e6c40d9411d7485e919701861eae191495202fd858b18fbd45c76d8487a5

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
899224ce026364fa72ef3f3deca7b652

SHA1
e7cb5d8865ae4f05db644c894b1fa185e5dd6d96

SHA256
24497710f3aae3d4d23904f9be20f08e382b669543a77a94af5be24f3129f82e

SHA512
876803d705eebd1b6d9a06c6946b67b65227be0ace97a06a55f16bbd85d27dce3793e78a970e4085523fbb4045121b3c167327460d89411b21d07b60fb13f9c2

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
183b24b9470062cf8919652c23d23112

SHA1
f902fa08d7f93149833570334d8b9c9da1c50781

SHA256
263682d2369c4ad327f3767233ba428bb27ba928f3c78746a7c6298ef208433e

SHA512
b6ce1b876e751a68f651ea722c6711babcf9da4c33f37c4511ec3161f0534ac1530f1a98f7789e529162a252873a39109cc4e9078566a8456096424a0d3a5080

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
b13e32a4748abf98c613a889db5bf79b

SHA1
934702d98e0321ebdcf50e30c00692f4b8cc4016

SHA256
a812057493c62d4250c02a75bfa498bd374e89d91249bc73c2906ac2ac203ff7

SHA512
b18896533048c1b156db3cf452d8bc0fe40220447534db6dce03de1c4f01e5dca763e866f2d0400c1eb77d53b98fb421982e11b35fed0afd97a6fed0447eddcb

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
ba92c63f59cf20af38064417a300bba5

SHA1
57e39a1800a049fac87c05cb642a57726217efcc

SHA256
b3675b9b56b3cc4cfabfe00d43d63666d4d1115f45b8d8b6530aea895c5724a9

SHA512
90ccc5942099a6dafa698792997d2b5493d77a2649481addf3baf534242bde35a103edfb2a3c465847951073591e8db461686f95abe51496eef7f07f6eb7c42a

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
bee32ca511840dc275ca102785bab42c

SHA1
4e4ffce34606e353ee508f2c721befa0f43e07db

SHA256
d2b5d7a96794ddc3d6ada6540fd585c5345261b9a5daab26f58456dd720e786e

SHA512
de71ee7bc82e606e68b6462b6a14725a4858e00054d795c49af27ec77619bed75b8c6adbe79edf32b241da891c8a2da3fbd27a2e286ab20b89f74c1a279e76bb

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
25649dac1743e3e40cc68663d126659f

SHA1
5df5027f7e7e66a03255f36335aa5845a4d26c13

SHA256
6e320cf4ff77f8a81ed483be6bf8889071c29ed0e4bb1c1f2bc6a20022cd0179

SHA512
a300471f34b3364721e9c5e218ceb487c9c2edf37a4742bdd8c28a31a247d0c2480d075c5d5029075abf6e4bf2018c4fd0001a48386c5fcdf93f5705ea427f95

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
d8f069825150e96052d3f714c09bbcc2

SHA1
ac49248a504b189545db71ac72d652dff31c16fe

SHA256
791dfcb0af541c49fbaba78a07df2a4fc93a73744f055004571ca3e70dc871f8

SHA512
dfe092a547f2799f627705e4798dd50f2c85bc434cfea487233e68552c7a83fc3ddd59ba0ba0bab65cea341727c9816ffe3a0c6ccb943b3f238e61e47dba5238

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
56001fc8cb41ceb2015b7abe4e4fb39b

SHA1
0dfe4595d93f4bfe5330933b27babac6f94b7feb

SHA256
2c5056ec0dd13f7e3ae57cac6d4fe8627acf6e68a53cd30296cf1c58a78c2bac

SHA512
a3b27db61fe4b9687a457de6ab5d3488fd6cf0b9db6f638af39e51ad221f4a6144759d7bda592c00962f8c76e61d7fd0e503b8d431c9718128375bd578395b61

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
688f42fe69f7855473b1f540c5b57c31

SHA1
6ac128e421d2a5452169075f5973216851409a00

SHA256
335de5900adc1a6ee438929f666004595789a37e1e74e1865776fb642b9aade1

SHA512
6caf10b126be5f95982fe126028174df3089a52ba5eba3df55da32a2f1c64a76c6b3e0fa2dcee17de32296f6ec97e159ce5806fce27a639b7bb5e1cc47ed3766

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
c6fbf36f69b904b9ef9ae45ab31d1ddc

SHA1
122037b90688a11d7602d710fc5299b0057c2bc8

SHA256
1340a250e43c05031eaeb80f3cde6d7b9f081c169de955f5319aef2c17aaf2c2

SHA512
b5e6b003bf7507cfa9534fb52e44463a6281824314f46ed0408a117053fc0b634e4e4f535e97f447d5922bd952e1c240d5bb6e81546134eb1671c07b47e82a43

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
0a3cac5e8082c8c5dd8fb1c2872530fa

SHA1
17a6a3ae90654b0ff201abf6754161661cb388e3

SHA256
75763c749731d34306033da767346b71a17d849f30d3e49443f966a7fd12136f

SHA512
6071bd1480844a69821257dcbd8ef666d97a6d0e8daf8405eb6cdd5711578fba90c83719bc7c84227fa47054bcae462fc55a4481e1c9a8a13f476fd719bf696d

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
47f96249f36c2a3dd56aaff2f1d3360f

SHA1
38e4aa147070f3a127df5b9632ab3bc789563eac

SHA256
54285c1c7e2c59ee49a8e1a30777be339d3f72de2b13e0afc4b123ec34354e66

SHA512
17fe1b293c46493a912a25cc956d563d889128458d6fd563d5fe219028b089ff3cdd73b99f6c41776cf516007049c1c22bf39d1d79096f56502fe86b5c54dde2

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
637e1b224e6ce6f613db13422ade99fd

SHA1
8b442f715de86ae1d8ab01aeda739be1a6acc157

SHA256
cfbeb8ac969a661f679a6c94a9fc73394ad146332d8891256e0be80787874ea8

SHA512
6e6b5849e51376ceef8cdfc50eca22840353bd1e5f04d0447389a33f10bb4f5e3a7a3102ed77c22abbe466db99812fa17b3ec8a081e923f6d764250e9f4cd9e2

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
550792e030ca8d9ea63e3805f18d411f

SHA1
83314c19f7592ef72a3c5cc28391bec127f9149b

SHA256
876bd16b52ddf43f114b8d5c8f24a6f574cee7cafed7186357a2752168773fd3

SHA512
72a949a92377e36b7b9389a314d48d761963063a22ad4f0e4acb7f3748ebc71504140ee21a8eb170b48ddf16a9575f31fd7b009140fc890d35ce66fb17292c56

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
7be89ec511d2b458733c0aabe6ce31ec

SHA1
f3602857191335b18fa72fd38e56c75081dbe734

SHA256
57c6f3790aef7b538a2602f0aa025f41206714e181e5369b4164205869824151

SHA512
248d6859f22b20fccb05c74d37a58b3270ef773aa92d4d3b687d33f96c8347fd5d00051259b16ea422c0a72dfb832679235f16a365b734a6df6c0e4a77f0fd2e

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
6bf29e06aae9474a63108c202baa2b92

SHA1
d5182681c96555fd849c01cd377601fc98715fa8

SHA256
fe330bb5b7f5f55c20840a40ba13bd8d367a428a9ed50a5f5c5cf1d2cf6d1d32

SHA512
c2ac981ea4694d0bc0f196262a81e1bcaf9a8fc27e229d320175afcfd4db107de6c4f28401c901732a830dd5dfb64d2767900d885dcce52a743e675e281be5c5

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
e5ea4393becac71b69a03a9d20e17d22

SHA1
58d3d83f893dc2fc1823c1025956f8d12163e01b

SHA256
0fca116875701410ddb63e4a9f61a1ecab42801c6ea7ded1e1357d6b0f39f42e

SHA512
eb109394cb12cf59bf792da575ccf952466876fb9d3abec2a4d2f86732f416d05c6122d4fcd78a539e5e3e5fc63c1b2128dd84e8747b468c9a4b5b043bd0df19

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
12e6512796bd775f267bc862b92ee6a2

SHA1
5e70dbdead748563fab40b30ead65b4341e2d2ef

SHA256
56edcf2bb7d5d3d736f2b9a50d00902f8a467e3cf65e719af0be5ff2371d7234

SHA512
755de57064ac418693fa63482ee197cd9b24e7516517eb491b54a57356f95e922149be72952be8f55a739ec2926a127ccff94f36ebafa12727058c2a4e66770b

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
c3f6e1083ff6c80183fe792c75ad199b

SHA1
82fb6962c49760cf827e8bff6090474e36fc654c

SHA256
35b5281c9cdd0c99e24435b7e660b6ea5955d65308a5e1f18f14e4d8529811d5

SHA512
44fe533c76ce41d36049552d7af45cd166844130474ee00a358a44777589ba91f40b8551742addc4523c8c9d325f046cba78005942a9917ff3ccfbadb9966da4

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
2a677dad87d909d4aad1e8387ba44734

SHA1
31f51cee1d9abf89f745910e7e9eabc9119d9c67

SHA256
956ff80f23931a428b968fafec8e3c8c5057b2824acd269f36d2707f592a942a

SHA512
60cbdf0ffc467aa4c796e04b93cfcde998756102dddd243cf0992f7e4e8e252f29d569534b74b87fbfe1b8914d3672a2734b4a5c416d0194ad93c7e1c4cebfea

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
86f0e66decce2d494fb203b33ac9e598

SHA1
a4f069f2814944852ea644c6c88cbe94b39d4b94

SHA256
395241d46a3f152c298f3c7a14e8afec2cb475d897d34e68bfb663d6989c1b69

SHA512
6c051c5ecd1e9bd1a5ce27482f905a4c7eb7885e895d8d3188f9b6030ab72103a6817de5bc20efa20d95e8ade5874fbde319a639660f561013aff078fe738c78

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
7e1bfc9d4e82553cef7397c2fcf6cb22

SHA1
0c0227f24f15218504e695a296b05d7e788c6771

SHA256
3e12cc45558d4bea0a6b1a157da965cfaf3df3b7369a3252b7209c2dacb3af3b

SHA512
38a62843a9bdbe0c497c068ac9cd558766171b305217a92db77096306aa1bceb42672621e7eb779898ce7a3b8a7e279e8f3bcd12f62a91ebc0563124db11f0aa

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
2664796c6f761f1f89950879b11657d6

SHA1
725fde7d2127248b18dd30d2a10038e45e421931

SHA256
352a216a41ce47401a79ed39d4ca92403eb7f63d59ff78dd1d3da65edd3dfe0e

SHA512
6085d960120a7e630e3b76b02305777ebe3e760c46ca52fbd49444c5c18a1dab367599c0a3e9c123b39887559b886a857b68973779d5b987926d407d606cb80c

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
9dd4c0412b91c85abdcd4925e5a10577

SHA1
f34a9a8a866d410d03bb26a13652c0754658d40c

SHA256
b05da8fb81352f7f573a1f010068cf0346ff8bc370fe14ecef1da1805bbc3138

SHA512
deb3f6bd3a982cd5396de1239c2b7d63a6640608c9a9749495ad9c19bfe863106a153550d3535a7ca938cf6c756511df026ca9cc9a4b8d52424b222e69adaadc

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
c45aace2e57c3fd9e9d692a8d9bca16a

SHA1
fe119bcaf08ad50ffdd6e0689726bfcbc4ab4417

SHA256
d46c79cde89dede400b8ce5a97e37de3c11f4f61482c55fb7bdfe749558ec1d2

SHA512
215e2d2392dcd7aa49f9887ae9ba856073ead7101cd60f7b02f667b08504eabf18e1caabb194d5e07de72c22274b4acde1bdf77869600e6c8e23e5b5a8d9d209

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
37355643f47056ca0448ed30082a0397

SHA1
18abc2cfe19859ab70e37112eabfb3a7c77fa28e

SHA256
36faa1f6f73f09dc06b66bf45136845f79b60ab959f7ba7f31d29fb42962d700

SHA512
b68dcfd342d3ff2508cef21288b0a5acb1c75c6a7ce57a1be7a88b4c9d614192fdcd4af539e812784de4df786e4e23006a15eb1d674b7fbe256c7b3a8b43924c

Download Submit