0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Resubmissions

02-12-2024 04:58

241202-flyd5s1jex 10

15-11-2024 02:01

241115-cfxc4swlhv 10

Analysis

max time kernel
117s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2024 04:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0A6172B017F62EAA.exe
Size

137KB
MD5

b556893d6f0219bb98468f724aeb06cf
SHA1

540d6c29aa4a05564da6bf253fc46fc8793277f1
SHA256

a75d6bf3c8cf0fc45b368bd83200d141319c9c67033803a230bd3451a309edff
SHA512

3a9c8477dfec35af9e682e197c76a1c1e341cdd4f4c276d1c18beac9ff5b53da394eac8428e66921369a607cd75c2fb7e430466758df508d6974e59f7f901ae9
SSDEEP

3072:MLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hn2bIoKb:MstYrEMw6Bxk5zOFNtgJiCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 0A6172B017F62EAA

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11293) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000\Control Panel\International\Geo\Nation	0A6172B017F62EAA.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	0A6172B017F62EAA.exe
File opened (read-only)	\??\D:	0A6172B017F62EAA.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraSplashScreen.scale-100.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\OrientationControlInnerCircleHover.png	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hr-hr\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\mshwgst.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_SubTrial-pl.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\dialogs\stream_window.html	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\it-IT\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\eu-es\ui-strings.js	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\uk-ua\ui-strings.js.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_split.scale-150_8wekyb3d8bbwe\resources.pri	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\DirectInk.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Core.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\UIAutomationProvider.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-pl.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTest-pl.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\System.Windows.Input.Manipulations.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Mail.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\en\DatabaseCompare_k_col.hxk	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\example_icons.png.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Viewpoints\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Controls\EndOfLife\Assets\farewell.jpg	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11811.1001.18.0_x64__8wekyb3d8bbwe\resources.pri	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\THIRDPARTYLICENSEREADME.txt.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.Serialization.Json.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeTile.scale-125_contrast-black.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNotePageSmallTile.scale-400.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-256_altform-unplated.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\jdk\bcel.md.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.UltraWinTree.v11.1.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\themes\dark\[email protected]=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\UIAutomationClient.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Generic-Light.scale-400.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Fonts\private\FREESCPT.TTF.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\NoiseAsset_256x256_PNG.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ul-phn.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\dt_shmem.dll	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\it-it\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\codecpacks.VP9.exe	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ul.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Drawing.Primitives.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\en\Microsoft.PackageManagement.CoreProviders.resources.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyShare.scale-100.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\api-ms-win-core-file-l2-1-0.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\WindowsBase.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_cancel_18.svg	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\classlist.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\WorldClockLargeTile.contrast-black_scale-100.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\BeLikeExactly.Tests.ps1.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\UIAutomationClientSideProviders.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\27.jpg	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\aic_file_icons_retina_thumb_new.png.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\AppXManifest.xml.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_SubTrial-pl.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Images\SkypeAppList.targetsize-24_altform-unplated_contrast-white.png	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Common Files\System\Ole DB\en-US\biobio ransmoware.txt	0A6172B017F62EAA.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0A6172B017F62EAA.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
3856	vssadmin.exe
1016	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe
116	0A6172B017F62EAA.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	116	0A6172B017F62EAA.exe
Token: SeRestorePrivilege	116	0A6172B017F62EAA.exe
Token: SeBackupPrivilege	116	0A6172B017F62EAA.exe
Token: SeTakeOwnershipPrivilege	116	0A6172B017F62EAA.exe
Token: SeAuditPrivilege	116	0A6172B017F62EAA.exe
Token: SeSecurityPrivilege	116	0A6172B017F62EAA.exe
Token: SeIncBasePriorityPrivilege	116	0A6172B017F62EAA.exe
Token: SeBackupPrivilege	3368	vssvc.exe
Token: SeRestorePrivilege	3368	vssvc.exe
Token: SeAuditPrivilege	3368	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3848	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 116 wrote to memory of 4448	116	0A6172B017F62EAA.exe	83
PID 116 wrote to memory of 4448	116	0A6172B017F62EAA.exe	83
PID 4448 wrote to memory of 3856	4448	cmd.exe	85
PID 4448 wrote to memory of 3856	4448	cmd.exe	85
PID 116 wrote to memory of 4056	116	0A6172B017F62EAA.exe	106
PID 116 wrote to memory of 4056	116	0A6172B017F62EAA.exe	106
PID 4056 wrote to memory of 1016	4056	cmd.exe	108
PID 4056 wrote to memory of 1016	4056	cmd.exe	108

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe
"C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:116
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4448
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3856
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4056
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1016

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3368

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:4656

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:3400

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
2297ba30975721dbce7fb7323d8c9130

SHA1
2c3033ab731024b98096b4aed00c314e0e800ef5

SHA256
a5cc340a13bf1f0d6b34770969af85a5c6323f75b89db3ecec91fb71c73df63a

SHA512
8e2580993a7af2030b3f32526ca992d2298fcb00aab11f2f10506cd88a9dc507eb79670d991b77bb0c1f9ee81846720d8697ff30e8ba9aa0eb23d58bbbcabd23

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
a12fbc142dcceb69c57eb2ba3295d251

SHA1
2008f02c64ba7b1a498bcb35116ac12dd186df63

SHA256
894c155b8eb7a53975300aa149b9f605f282131d4a79324021c9bc9e648a3ca7

SHA512
c8da15553594d1c9e87d71a977ef2d580e06afb7cd2ac6394e7e0c3074212638e384b1c56c933c23e777edc2813147d4ccb42b0f63b68bc66e1e922fb1778f54

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
ffe8c62152669aa5ba3926015949f683

SHA1
aaf6303d43a4beb72357bd131a0ec746a05fef63

SHA256
0fba3dc6e92df08b3dc8e83517c62d6c21b79eed8c422d20e9f4c347f1abaf47

SHA512
34904b38253d9be4c5a9b5923a1e45843b409b13756349628e696dcd262966fc58cae5f3fa95a370eda9cff1571780b5245c12bd3586693d80fd734c1706a806

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
682a732dd68111afbfb666b3067940d1

SHA1
6180eb2131a36623ccf6c27fca7a6e4b9b8d527a

SHA256
630ccb530445373354a530634dd920b1dccebce7fdcd839dde9bd41f0f0f87ea

SHA512
61ae8320b71f669f127ada2c4971daebb268a7fc30bd2d0bb162a09bade3de884fb68cb15fc849852aadd96800065bebb1bac90c21ae6ea1ff53ef0a13479d1e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
bd17d958a7f91348410eae2a4ac8379a

SHA1
8c3840cdb891de60a6c42eb773449d3f12493931

SHA256
92e28f2e72722bb2d38783890a96f183742f7c8c67e53d67b104e5ca9435654d

SHA512
ee68a133cc1f8aa178192d13001bae49ab90a3dfe863305ca2e40cc697103e8bd23ecf6eededfab3e6ebf9b00cd70f8e78cf45c67ebc9e6fd07c8a24f8191539

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
d93559aea4bf1863bd2fbea84111b36d

SHA1
787c76af9122fcbb758c6a353f6c0776f3bc5c21

SHA256
ebdbeb6cf5bc96be496277a8e7d99c30a0eb992e773847708b9fc0c18fbcc999

SHA512
a36f71c47a479a785735e0b394690f14260d7c8285b239d8e9ab39a240bad4c687d401bbb9c49c08e7148c9a934cfb4999e8ab7ca6c7d6fce1f55927a6130d09

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
7b250ed5af641423424aaf97223f2b4a

SHA1
0197e43adbccf3c9de2880377ccea77882ff2fe1

SHA256
f28d9ae57eaad439644412616cf627ac04d7808cbeb81e0d17d599f95f1ea8c8

SHA512
76f728d241f2a34d35e8ddd9266a8a7a9a2d730469733f59ae305ed481e0d0d80373a0c3b31fc6afb7828a19ab1d794fb974d5b57564ccbe5039a632f52e47f2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
0a071ea33af65db775e1326e2e8ccec4

SHA1
2d9edce8fc4404bb1b3d83ba2b507d873d58dbc3

SHA256
fa7e61ae415b99661f177cab3371b87081973161e2baec663788ee088062c983

SHA512
d599ca33aeacca90fa444c13294f3973e1da4db26dd17ab6c56009fc0972e55c818cbb105b79c0ed72f46736da49748cc874e3904ec0673fbc219c36a8bc6932

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
767624e5f18e8090c2008130ee6f3a5b

SHA1
0ca228ad6171463ca2ae35af64b68b99ed623f98

SHA256
76c1735b8c542f8a7e2f5fc02df4a881edba8ee34f9575894b363c14bd712b8a

SHA512
e0c7a7faa45608a2ec81b75d986998f7553861d98ad9a29210a8070483c1471a527e18e37717e17ad0ce20030f0ee3e011bc83ebfaf950d0178db6cf9b91f364

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
f5f3939980ed45c1684c6e4fcfe5b42d

SHA1
7f508094d6ad86921e76d0a9a9d88ba62abc914b

SHA256
ddd03b1d636cec0714cdc74e3f2bb3778134aca6db4cee06c271f2ac88e0b253

SHA512
8619c81f9efc0f9f4f3bcd747a2949af46fba8c4ced265bbabe95b193eede349fc7e9ebc2b5dc041c609b0ab48c2cf5db451481970588b9f461d43698d9d1c3d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
aba4649f45b8423d9d2c8df40438de80

SHA1
89c79acad1fcffb48325c08fdc972c15f917bbd6

SHA256
54f31a698b0848f9ce6d3a647a4f5299214558514fdeeb5e0ace4207d9049703

SHA512
1e4083f6bf9436c608bc25de68ed7252049f0faaa12a70fba291bd90cab429fb6176e22452f12dd0424eef57adc064ee4455321b5f26d59beff101cc55089dd9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
575d670f0f60f7e512450f2f7cd6e586

SHA1
3a7422f9677b8acf48597c608ccdbd7f2e5c54f0

SHA256
170f80814018fe5838d27652b31f9a4dfbdbe3b4551168ffc2f0cd5edd09928a

SHA512
21bc7fed8fe2a6310250d452507c927e68381a3593dbcbf43abed7b48203443d11da363cbd875a8304bb6ae12b498a4b803c0baa8d55ea13f8d81a6873e0a764

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
1444a537257bc6180e98679a32cdb883

SHA1
914c6f209a66206de19eb1d3f094b9f455ec217c

SHA256
810df2d3b9f5778ecf3be0c33be2fca9a1310eb85050d381902dccbad2b378e1

SHA512
d476a23118c64d5da61091b6df7d3d96138f4764bd0d0d2dc0e0ec04e40c0812144d93c42513603adac60495941452534852bebad0f9aa98c5414b0f427861b7

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
cb7194823a330db031bb476f905ae785

SHA1
77ac3eb66a158b99d583bb221ea95381e1a2db08

SHA256
99518ae44c67c2fc359e5a852baa39c9f2f1b8658c2b4ac88704e66006381408

SHA512
47dfad4821f7482eb01d1ae72dad19b1836ae300d37069dc375146d8a3bf624bb317c83c87f738e588010f1b6b29485596033142dbf33bf4714c455c92f8991f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
d1f1f17e180191381b0f8dcb6fef1180

SHA1
307dca2142beb647d72ab24c2b3aa35145f41e30

SHA256
ca292ff9737646a1c2563ef29ec1948d3b488e010182dee2db847725888807c0

SHA512
a27506c0b4119f8b5334b2176540ea6f2acef57476f7f566883333ef753e988db3097c997ed60575b788faaa312adbf9322b510a23ef6611954f684b87a401b2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
1246f0ce22a9da897158d096a6813524

SHA1
0ad0a64372cb3abd1946057ff3b96a9318f7351b

SHA256
85fbf418b3a25f8415e84623c4e795be4ba43994d5a9a5685dbfad5345137768

SHA512
2843e210bd655bf01649e876e5016596c0eb0d741e84d6ee5192409ea9c89d040ee6afb26e42189d3aa2a3823e0957cf0e1d8a4e37fe80b5d230ff225effccf7

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
8d6bed71d65ad52c5c973e5c07feaf0a

SHA1
53e21b308a13a4948f6b00e950c35c94366aa0b2

SHA256
a8d28133b21874aee11f1e74a01c4c969160eb1110831677190ca5decdb22c5f

SHA512
7d598f1c7e05519d81ed05cddea359767ea3f27d3515994e231e16637deb5c19183fc301d79604206a6bcaeb723a9a1a0325347fe7fe26467c0202bde3e4896d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
7362141f2023dd91f3367497b55898ee

SHA1
8ed5b43d646f79d5471064d6603615e90444dd53

SHA256
de9243690c8b0977118587ad67b1675b1b9d5435c52814dfedee43bd4d3806de

SHA512
e688fc136afc789f3db8919eae501e418074614ba4c929110207596b613b997f1f4cd3cd2ef3b8bcb861e29aaf8591032fb0bace87ea5fb652d2017a0bfe2b08

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
469e0a327646f8e99ef88e44b8330008

SHA1
803b97a46f05b3f0cd1d02b4174012edb3ade4f2

SHA256
35a9afbe20d9f6fae765a3415b8dd19c47c4b10cd580ff96a7831e296012760c

SHA512
53302e5a978169f53e30696c6f97138b5069ff5effc7aec2e42f0530807a140ec87dd0fac516aeaef7baf2492829b1eb663f9165b6edcc002c4fab6e6dbb8c9f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
72b200689d0be1196f4f345e9f4bfbfb

SHA1
9741855d5fef73d9f4d80bf44b16e079a70626ce

SHA256
776bf0aaa8fd30d43f7c57a3d21acb5b5dc6d81782724beb692505a4be43f6c2

SHA512
295df29bab2748af11a1d55188f906ae5fd105dfb6517f120aacc1bccd95a1683f1f5183a03af27385e97507a23efbeddedf9d660be4d318ab52942607d9b282

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
8994a6b209a9a94a0d9abb629232b9cc

SHA1
71f12c4fcc00e43a68cf6069267ed44d51e948a3

SHA256
a5e297b0c27119d95d7d3d6fe5847d20c0f0b438e81d5b4656c26d4e60d312a2

SHA512
05ccc1b25449a92f41a875533b285ccb5911602116fd3a50963c42c22af76df2f66a776bba499e7779fc8107d5dc5e67a673c1866529e319221fefc75e79ee6e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
c4c91e067fc8e0f44ee0f690dde68306

SHA1
ccfcdde48cdf0f6c6bc8d5d4b436c48bcb6242b6

SHA256
38a76e77d1abdc773295eb608f2ef0d3cd7e2617983fa6b7890009bfe0a73ef7

SHA512
1b36afc71b33ddfe2f24dcfa8474c7c24e34b828653902a4bfefcb11143eb1cbe60c815dd6f3d9fd49f3049e5bd5bb6fa530a93dfba34e140093db94077e2b71

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
7dbb8a5ac70907d2548cc888ce53382a

SHA1
4c4d26247d46bd3ddc32a76fcff078e0d399f227

SHA256
161909f86b0f1f2f4696062fe95b2f423abbf02432e424fe5983c1739568cf6e

SHA512
8dc547aa45346eb54435018e3dc289e8135a3ead488df5f1a951ac17a86b2bf0f91d85111666c4ad1ec79c94050dbc4736996d68e4c30f4ae2a04342240a872d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
b32dcecc9ec03bcc3c950d020318aae8

SHA1
242b0cfcb1c4b41e375f6e3b75aa7b7dbf9f8af8

SHA256
e4c0bde8e84d67fa4cd58f71a187f77d846fbab3b5f9cf216257f80c79ad88fe

SHA512
ecf6bbae4f121f084881eeb453cfe9e54ff3256801e3c5c6084f255c0255b3f9a3e0db139de4e7c9a83e90fdad785b1103f3d951b8415d3a9e6361caddabf414

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
d17e11136aeb8ded3ae55be7e917ec16

SHA1
ca933bbb6c48e251107d1eb5ce8353af57cb6f0e

SHA256
27dd2a581d07421c438bdb38ec6e8f3987f00a24ca4b01e95959babc86154f71

SHA512
1ccbde6a4358d00e73d989bbd444ba81ccf46871c6386ff1a561e721c4418b57febb946ba6d237d3eef7350ceec330ac247fe0936de104522c31fc6b7ad26630

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
d68adc814a3bf299d22ce1d079c0cefe

SHA1
a5befe5588368a4c01d1965db3fb53e9e0b701a5

SHA256
5dc855e4bbb94740d34633473e5dd6ab8a5b4556e3028abcc1c3e1435d8e446b

SHA512
49075232716b33056b1f2b6cc8d6860d35cda847299a2f916ec63e121150f21cb91656275c7fb22552ddcdb222379d7aefa2c79c33e0eb090099b476966cb4b1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
c8f4451adaf4a8a85213434b2fe24bde

SHA1
f270f74130862bdede75627790b996f17d7596e9

SHA256
83a5aa6d05c7699ceb3d2dcadd3fb0c116a3031153e0e9ea252705f9ebe7b570

SHA512
35095e2586753d0a5abefd3b38c8c8891f0ee2dcd6527a41a034310607b187034674aa34803dab75ee6051740cab9ee74717a7e4073b9ba05a273b85da5f9d09

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
0f9e13e3f6215fc740782e500300d185

SHA1
70df0cb8f487ed1350cda10480c72e24232df4fa

SHA256
87135df33f0af7923f63ff26a8b41e50dc60377d1bad3386562dab7182708fd2

SHA512
f6010d0cd36ac1c58bef0074db06abeaa07ab08741cc58dc1d1a54042c0100b060cb3f0027a044325b4e2339465d8f4c16599f8f0c6dc75d26a6a767697bdfb8

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
357c0bed9b563bf874dbf4200b775985

SHA1
b621c7c50a63c51dd4a3597ff626f8d47d0deb18

SHA256
c286c8324aa75d2ad4be65b5c496aa51f23e7af422e1ab18776b661f6733af79

SHA512
648a032edb4e52408ae69b098e868c74d70ec919b81360eb729ad767c36bafd214af4f4f135ae069f7336c828f1c639a98bd232177a882c8f16b305cdeb39fef

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
01ee061ed58778f7931d394d6c6844db

SHA1
e1179f39b79f62a40b9d5ef72a056e6c9220b80c

SHA256
d9898ce7287e5ff07cc675686235c2d10d50f11f69cfc72ea082b20f899ca672

SHA512
4bb4757e6476304e2537f9d5e501daf626538913e220d67e8aa058737a8b67e3032a1086b96d710d9029fb3ba56009e1f9e727d2e7b41cba0015fb4e1025cc57

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
869682e1cad1dc0fea762d33bcb7bd31

SHA1
7874e6a717e0a26cb533624e2e09e8ca8c95c4f0

SHA256
cdcaeadbc356e8985835aa6b17099121e2bdd12f01c7b7f8f107bcce294c32bf

SHA512
cc4b69c36335a7e74094fed2938ba8125978b140534a65a033ea6479f8a799b8478d6be1ad98e83af295493c85d138e3915a2ff669ce9a78d3ce61d0a560e7f6

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
0bbff97855c514ab0af0430883b0f87b

SHA1
254e2b2b4ac42ce528d10800a3cdc33bf25e0c68

SHA256
92a99c020872d8c031d33e38161a5e981106f54440167892dc1b601356ba732d

SHA512
31c1f26056ec3cdcc541f6992a04fe50d29fea624fe3a1f9d5310457067a5404d508d60b3c84ae1036e18afc2925bd4bec2fed2d891809986784009fa1bb4b91

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
21ef452638acc5744b5ef6c3b9b7a9aa

SHA1
ae7f973eae7f9cd0a21fe4a2495a306452ad845b

SHA256
4e49ac294413559ab9249f2d7e3c75caf332d7c9ef3a5787359e94fa63f51a9a

SHA512
6d95a9214cfb6dba5ae51e8c2043c3c36df76c53c5ea20fba440821424e896ee1c7c2c9879b6e7ca7d0128f32377e325438be3e62c3cdcf0e6f34c1d4cb88609

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
960ffa4cd8026ec06f974a209bff65c0

SHA1
42c5e78a6bf27c3c7982c65e7d93435e46399650

SHA256
37acd80c4dbb084cf4698f932a2503d09e29e09495e0c1040d5559b43368b05e

SHA512
9119bfd70090184b90e77025dcdb05a86a2266e6edfa76c381b74b984906b8140083f4509b299718383c6399f3fcc01d462e2f4d746ada6c561366f981cbea57

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
c98c894adf7208c2f96977f8109dd77d

SHA1
d0dce42a0e67e362d9006862b17946f7d0694e53

SHA256
6de562698a91eb04872f50569985491006d0ac02308dfa71d84c4afe5670999e

SHA512
1968f54341a5ce5d9c8e052d9a3776ddc17806ebed092a6025500ef23eab9e75669dac822c09ab906870bfba5a898bd32079755c7b86f4ac52e47c516fa1e89f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
28c4d4083839c682f8d20c7841b11e5b

SHA1
bd243cf2084554a8d9223c3eb645ffe4ec19ac29

SHA256
143446703fb708603fac9717f1d611eb48e8d38ffcca1073ab9214722a78cf82

SHA512
6023f6c254de5b407448af56d0044e3e15665ac107078eb9c004f1dfebd2c567e831a0e981296cc35078b715e7f82119e353feee2080be24ee196e53444c545b

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
8e1f7f72d580864a96b771553b77d65f

SHA1
e79177b2608b960620dcbdccfc0ceaee602c1669

SHA256
5dddb671e88065bf39970c03c2596fdd2c134e20093e6e36f59809a83aa04a96

SHA512
65372d5f682168e04d6541c6f91e21e81d0f34571cf560f060bc6b81b90fdcb36e097c0ae1614467f51b5af4c1179bac9509216907c2518cf5933741272f3d4c

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
50f33d6ba1cab10e8f711181362f0b45

SHA1
d5c16b7b824621051d220bd8e741c6002a0ba133

SHA256
659d143ad9e19309e94c78bbaf87f87d78f379fc06d3b52b7a564bd2748445f4

SHA512
90b4c7c45db71b42e4cb5adc72e8c8998b79270bb34c4c065888703ad4a8a570f677a9eba4660a0100ea15dd4ad451182efdac76123547cb112a51f5e105d895

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
14b0bc4511101370bfbdb7748957d0f1

SHA1
5e9d967e84fe14fb28fe08c1c5eb19102542d490

SHA256
6c83bedd873f978b593a0a99d02d83d7d1e591b1ef35c07bf848a4b8157d53f0

SHA512
eab64f2683ef88a7a2edce22963ce1f9014c48cb605160d9133e62f70201a1311641644be3c659d5e7d4c4c75e3e26cfa25f9ffa4da4c9fd14f394f68b49368b

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
6a4c5a8be5f9a91fdcfd82b97bec4bc0

SHA1
b6860f4885a42579b0c69b4d47b16a8864107b92

SHA256
b3c428fa87eaa69729464841552b7ae4f1e55704253bd16affc409b5fbe0892e

SHA512
258b3a126295cc23fa22e3346432dc9b1d2718d74c7a62d1d617ee2876ba4fa37fd8506daca8e16a7b0f3f1450ab2ddfdc75dfd3cb5697e760549eedc4ca3ea7

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
cfa927959926621a7974c6a36542ea75

SHA1
3ba4036695f79915b701181d4d3a3f707ff2eecf

SHA256
5ada9e00637c9d08d56948d69dc7253c3d107b315d9c538f7755227bedfc71e6

SHA512
161fcd32f1abe28825d1cfcb42ec07454f15d1cda80df2ec8f679d13b4bc5cbd161880dc7c5b0440c3f9ff252155ed9ca2ba79f469c3aa6609fafc34f1c9043e

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
b09adb53ca3c78c6fb8c923db762f70d

SHA1
baedb196d33bcf7d01620bb270bda2aa76d020b9

SHA256
a722ee8ddead67a9102e982ed82099820fad2e1eeb58726d13696b370f932d59

SHA512
90119398eb73defb5266746e135be28878aae2133d23ddae316d6917f6e1e492c2afd2e3370c0ad1d32b9474d8a9c07c9e9f19bdae7cda1b6374a1bd4bb339a3

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
3121234f60e22bc2f00febc481eb446d

SHA1
0e9751f19ab2d6b868dbd216d06074ab97c1e8b6

SHA256
96333b88ea48f025e8e25df994b338ebc49d4fb2d97bd819a6be628deefc9d86

SHA512
d3fcb5cd24dc02c6108bad6ab57c67ef548bbbb0c45ea6f79bf3f54b3065900ad953345d3186297bfa888fbf81bb1ad4a2d2bdc0e07790c97be2fe4be9643a05

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
c955e8a7536a0c3a8cf80ad054a6515d

SHA1
e0b7b4087b61eb537f0a88e2871f8c4a09e93c46

SHA256
fcf463039c9f9bd1649467134796b3204f23a73d4ea4e970f44a5e44aec8b0e2

SHA512
7d67e8ac9ff1b9d6a025eb2b75eccf30a71d61cc3fffd4cc3241369402e5422b3fa31f1428c33db0d2647e36eb7db397dd15ab522bf591f2e46471f60e91b658

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
ec4151456fb9d08099045f486c3b650d

SHA1
4a26f4e02222af3a491600743566944e00d950d1

SHA256
cfcd58b2a69d07b8a1babd3b0374a85a96908ec518de401b317f8b42c2c05d90

SHA512
72ec44566f9fe1b6c50d2f1a07bb7f96c79563d69f40a16fd0b002f46cac3f76b4fdf219c8a528fcfaea183254fd7de1606bc8d951bd5f3a77b354d7d3695af6

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
69c3ce7dc8a70073d342fb7c50c4f879

SHA1
548ee3447cd99f15aee80abcf02ec7c9f9604ded

SHA256
aaa649e66b80aeeabd64e9c842eb3c6501610d87e4a69ad8521bbad9f35db75c

SHA512
97eaefb82ec95db75c01e44e2fd77e05775127934863fcc5077d6f9e6ac92996162c311d78f35f2019479db484cc0263138710b6f34a6da3f74e8252e9454943

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
a6a63ce9a528e68f07fc29ed70e5b38b

SHA1
a7ca5d24dc26578403336303be7ad7cc87426181

SHA256
51bcd4ce03ea57a43a3ee62998d3d6d9eee2ebf337f9b9ab3085b6da1a1e9103

SHA512
266229e84e4dcbd08db502d6b6dfa248f60cfc45bf6be830518ce488fd88a89957a0fb776d47e8c426bf6ff1febde891a026dc509d1a05a8e0c2c34899c8bf8a

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
847fddd910dd74958b85854693b516f6

SHA1
76037f0940519113fd541275796b81c874c6371f

SHA256
0cfcd79a441a8d6c6d520f5a264a66756631433cea328489321bef4be76ef17c

SHA512
0c4469603d6861fb1b6433e12e75c70d65285c30dd254863e0c21f273e7d8feb5c45c3437da01664304f23bcb7c0a7bee3f1abeb84d4185a4b3475665629d1f9

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
dcc167be6f6893f640fed5b536535ee9

SHA1
a34e2b87509c0b2efef01a9ef696dd1404fb7e94

SHA256
6c2176882945f267ddaafb43d2021977d707810e936902577825243015e29109

SHA512
6f27751880c4c72685794d719b954bbdc6b38ab2865660e99efd7a5ad819de5ac6e5004c01981034f95c89cab207b27ebb60f05e416045eb3b2d55ea1a51fb54

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
c36dc2e0719f39b00bd86f0fd37f8427

SHA1
0f294a597dfa83ef489ac4157f4943a2c1f92799

SHA256
24005a184e5df0a3be1f4eb1c98b52b323edaebc46f6d3aceca4f99702137b7c

SHA512
d4fb4005e5e538659342723e0c79d7dc248b0ac8625987941080e856d750250148b7102039e56aa28a8b769c526a16d5cbbd2ab7d82e6175872e9489ce1dc1f9

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
ca88abcccfcf8ab27abcb3eadc4abb2e

SHA1
df5767b11e888a15a9a807a735aeb0f70fb1d845

SHA256
4b751e6c08eb857a442d178ab5d6fa23121f8a1325cbb87fcbd6bebc2b859e56

SHA512
9be79abc4c4c8effad2d0c55b938554a428a3c803fbaafcae3164c55acd2748a2570fbe7fca222ce28cbe3f82679d5a8e625e69e44f643e09717e777da803dec

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
60e8267c556121e34f3947e3d1b6755a

SHA1
99a6791918e3b8a33c7dc4b049bd9bd17d2bd687

SHA256
f646e8556ce162e12bb859718459839b40397f1178bf4c9ec28e67dab60bfcc7

SHA512
395cedbffcebc30f17a3cbf52cfa6255b6e8b593efd94cd1ee073a697fe2d44425b727f3db7b52276ecef999f287f4a7f6e46f9e1e23e8080de8afbdee3b8f45

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
3eb03c56696e9e8c22601725472b3086

SHA1
94fda653c1a2290524b7b3427e5879aff90a1026

SHA256
71e3578935e141b4ea9d7978365911d7b2304b3fc179f6cb21e445c793bed899

SHA512
553d31e959769c8388b136c3b28ea48ce1177ba237862013d0b6211bff4977042b5b3d9e41f09b28b9e99e65d968c6970d255ba85332f9f461681cf86407982f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
8e9e7d1de2a9ca1a50995d2036dd4378

SHA1
31d2ade7aa1fd56388e95695b7e6cef4b9043f5a

SHA256
f4c9222db2e1d4283e244e0e6bc41fd85edcbc7f545673523457589e76bd3001

SHA512
f65e6c4048aa2aa88bed60f2f4322396156bd3de561b4eeaa66cfae562464ac886813d4aad86b3dd1246f90941f723398f23fd51925526b8b8fbc178f65b4b79

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
8faf1d1b65690b6643cb861629d2f8c4

SHA1
045cd0b1e8c25bd834dadca6d417c534576f1e0b

SHA256
e645d7e400cf3d4fd937b53f1ccf180825f4b8e208e8780dc7aba15a5dbb3997

SHA512
9757054083fe1f12b230b1f7e458ee5db4d884a09e097138c1ac3935f0987bfa892e2c9364baf2388a9a3e527e9a5bd76a53eccf5e0c0a3f6875343eccef227d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
54ebf62b49241a69d14a28d5f31dbed2

SHA1
3630f9b97517707901c54793aabbe123901d0aa8

SHA256
3b841dd4b762d3263013818d1c97906ce8763bd44c82a3bb1633b497260b48a8

SHA512
54c9f57b69487cc2b64820c6793f049069dd28e3425ac77c8c4d13b3d028c0c3236eeff291e4814c231a99827338d57da22189eb40106ed6ae8061d28ffd3f97

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
e12dbece5381f727bdf615d705b45874

SHA1
55f43d73676831897a0515ba8075f1d83175ef23

SHA256
8c398cb2f632bd23aa392b6cd7e46c152149cf1cb5fcf8c5aff38b9918f8a716

SHA512
4d4a557a8e876dd149145167e0a3106ea244028d1f1e03716cde16370046e062e5338130074adccf45f6ea00dab291406120535a20d3a8a555a267ebf0387114

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
3b7c43f7fbb1229675198ff90c3cf6f2

SHA1
524ba767a8bdd7014b348b516c871030863a9595

SHA256
8e0f88b69ec3962a2fe8e801174abadcae7aeb0c830ad28dbafa0d3ee293bd44

SHA512
fb6b5a5c2688a90362d87dc36fd64d95a6109d9b2a75040fbc04ffe3783e7c06c71024399312aceb04920f3393f0c534b56c915b24841edf221e69fea1f06af2

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
25908f28b8aebb8d71a2c9f87c51fda1

SHA1
755d484f80ed47d89ce6e43f7bdd0ad738ca5478

SHA256
0d39409ab15cb54d992eb8e1914f719c4ff02a42f26157d9fc09b44ab565efc4

SHA512
b00a5a56ab3394da4c07efccd3e3820d2d516566c9abf1b6ebd61ce69211c8be494db6c18843d26cbfb3eee06617d9cb6e1cb0a9855d12f6e44e59011bfa4ad5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
a37c1e164921eb3a72c0bb52835cf2ff

SHA1
d45e88748e5e64e01fce088ad74a05f138dbfdd2

SHA256
9c42c2fc812fc9d35b671c92dc1ad465724dbe9204145dbcf39d2902a4574106

SHA512
7f6c0735e0a3b576c91c7d559f4c8b1123822a11d3a51d7aa2174883d3e1d3b28b2f4483babe335c9037bb81e5958d2673e8d1d478ac98b2f682634a729cbb8e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
3e9fe7f18453b95cf0bf37ade3c48e9c

SHA1
685877b6aee1c162b148bd4a48368daa650dc65d

SHA256
16d099eb4bd613bcbec1153cce35249e17d88118e25c950c75f0be818c82a47f

SHA512
aa576dc3fb2d5d92264a4f3b3c7d1f5338c77020d53daaab6bd9d3bfa8f7fbe883587f51115a20c2dc1f7b40d74edf08fb83f4150583f566f75290d09fe35ef8

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
fec1b9be2213609eb4b1595118a8f4a8

SHA1
1453da10247bb98b7d5e39bb05cf9d5e59ce8884

SHA256
ec36c8dc9a60277cbb8743ef6697cfe51398b5c1560342809fa6e4dc37e039a9

SHA512
c354a93b4f3734f1f384a7007e7606efbe3236de49729221defc81aef83d16ecad0f09f75fd6635ea4df4db81f36a1eb61312dac6d1bb9027f2a9435d4e4cf7d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
d92265a76da980cb2cddca2590b1b605

SHA1
9b616169ceddcfe165a8eca829297790c2509557

SHA256
839f991ec4793143455c455b2f727acae84237105bac7c1595d4b3f48f2b110a

SHA512
7cfe3532b2deedf3dbe2ac407468e8118ee00c37899a4bced1aa2b1644cf2d82a69921f67208a001c4c238788e7bbeb5d680f0ef3ba3c875e1541572b8d3b612

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
ede7e59a4162d697960b56e3707a5f2f

SHA1
056ee09a8c3f1a6987ad93a2f79d3990a549257e

SHA256
09799a87b702cd256ff1d20fccf48957d5ba8d2cbb827c1a216ed1e2166ac417

SHA512
ef6266702a13b9e950a90b8e27e31f3a6bd463179408434e58bdca826f0b4ecf8f9c50a5cce3f91f64ddc52ad51f5f49bc386ec6bf50a77f6ab9bcecfc85cb1c

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
306a0e4068591760e36fb4d31fa6d2b2

SHA1
1fc921727d6d02de00ab99e5cb4503f16c46ee2a

SHA256
2aac4e94ff80e328292c42aae76e5d5f0c0d5c5a7f4f322277f5459a94509b25

SHA512
0b4ea0e67eaba1205228c266d9d397411cd81aa99e49f1b4555a36de45b865a477eb24da86b6dac4763baf7cf2aa8d2089a0a6cf49b052a5b6e2e45f23068fe2

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
111b4ff2f6d5ed4ac4c54f46522eb6a0

SHA1
6fdb6863cafdaec9b0ac6c5a484391d0dcbf985d

SHA256
c219bda7f4302c54e8d43a88b19c20a26fbdb28219b85c37d2c7d8a113ec682a

SHA512
ab5a83a32741285d44c526dc23dd629766a3114321d6f59accc844714380e34fdd70228159b0b04e10379a62772b39be780afd9bddc3d74ff5835cb5db78d0d7

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
755bd4a51734b6dc3580aad04f94aeff

SHA1
9b60d19026226d867335b8e748ccbb702bd09019

SHA256
9af9b7ac0e916c0f51b97100321b7c88976b677cd486d539b455ccb17670284f

SHA512
c69fc65a3bc76bc4f4e1cc22b34eeb25f9e8bc6e0785261f525d8d35e33dff38c3304ce2ad8c6a4d550c60016e9808a3ddfff16e0258e7c931b08ddd6f6bcf72

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
5e786620511d7ac46833a8dea097aad8

SHA1
489ec01d7971c8291d7f584e20e59b994d5e876c

SHA256
60593a59347796ce16dab903afe9811b3d73936ada1532e8c9bc0ef35e2fb0da

SHA512
eb4c1aae39e8680eac8b830d1ff3481b902db2e21cb9f1ebe090e1c98a58e0316c95ed1d20e0c8642d94c4bc28a9883a032ffc8444b1ddc924f8ea337c08520a

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
26b2db8f606f57138fa628bfd6d965d6

SHA1
27498eedb5de5f640a6d6d68a0844bb79118303a

SHA256
7f4e4b23e951f54ac1115aa2a388f175cbaf398f102cfc72c419d88339d113f3

SHA512
b62c4fe56dd07fe22f49b9d8a4ee251f2054a6510511c3319197aa76849eec6f76ee993835bcd128ce1a63152d05337044a477d3297fca543de1efa4395e47cb

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
44ec5399b5942427a1a9f7756a3d6d77

SHA1
2b4c983ed97b565efa303973866276ccbf048437

SHA256
6dfcb23df0d9e740815d40f9af213f56d55a196abf3b45d84245403f87285d12

SHA512
48b49329eac78f798ee75b20d293037b21e80c1d2e54dc2e1421f8162361836112bdecaee309565b66697e9f73963fd5ed599cd60a52ce1863e960be8243c923

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
4e0ebff4767614a814f6e1793b3ee306

SHA1
3b0dd8df26468c4143c18d66ec5f58d40d0dcc70

SHA256
60df1260dfc310dd56cf1a4c6c566495bee8676acf6d248f97801495a0865608

SHA512
f8c82df5317eb590a92730be4218e91058d86f7090c57cff3a22378f957c4bd609c462b709d6d77f30b180af1f12e748a1550471339f9f48a9a2a8eb06c0c3b8

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
d32c72b757e36c9a024ced5d41109c9c

SHA1
965cb5869b6937070406553aea22f09818899cfa

SHA256
d2f1696614b8da1dfb9a852da88263aab30c9624dc5e4793a9ba6402e43c04c7

SHA512
a75ca8cccc4ec817fba5ae4c835adc884783b9bbb1be51694aa23c8b5eba44672e53088e020032eb9e0041c4849f47618caf10ac623c120d7008ef6d3fa65052

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
5dd46ec82c31e305ffa492f5caf534b5

SHA1
682a49a732f9c116d735540af5b3c6740152f405

SHA256
ada5a66596d40af30148ad2d69262099b8ad964ab9b2be76f88f08025657328f

SHA512
acda03de73a1c09c5d113cf1eb61d4c9b497eb7fc58c50c284ef8c95ef56ef27e9045d1df3f4cd9f122e90fa5735e00bbc507e28dcc3310c5200e9ac734d1443

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
65a3be64da04b5c2f46be24804bbc45d

SHA1
b1cae5697e9e23246374f0a828687b9619eb1463

SHA256
83f3c094d73ff2cb1bcdbc5e354c85f7f52b6f0fed21b517763ec3ae370e1a3c

SHA512
e08783802dd406fd851b2a7ac4905be37e3bc2956bf0cc990f7a00056f500773538414a58043f9987243295b9ee66458383521ce1d53ed97a0639d6c2f05ba4e

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
7b4b5d63097a5d052ae1ddcba9074c28

SHA1
391c4cb3d271fa8fa52f32e513fd75d98782dce9

SHA256
08248f58dfc2b08cca98d84237c6e73dabcff6e068f1079a766d25fd53b14681

SHA512
dabaadb6fc06a18922524269bf59e7fcb1bd95e8550daa6e5b84f7bfd8578f14fe8f15c40b7af4754e6ed54488037c275e168e7b7a5536140187b6a27619ae60

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
d3c3967b8bf883dbf1d160bf093230f5

SHA1
53234d9af32b5d6b47ac55813fc2d3b5cf70fc13

SHA256
d34ab06323e374c165692de687c062742c59434f8198026cd33b47bfa3edf878

SHA512
bfe6e321603fe6dbba4cb68a03eaa7470c65e426de87b8531fe4025b6edc10e05df6cb384dc0511058c451ecb5c8a7d0944ab5386510bdd781562cf0c10435bb

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
8e45808d1613230a90d8f7c181671beb

SHA1
01d090853e2f896b3f64ab7b3242cd22585e1e29

SHA256
23d396240013b2cf43f408b5fcb41c2d7fa4fd81cf52265c4858e5807cbeb5d0

SHA512
60cefd9625d63f5477014385b17515ef731503de72c5d08995c73324a064ba06be16c0d2f7f0cfe4318f09c466dde7e49cb9d8bcc00b780c70613331e2cfcd2a

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
1a82e61836081269124e4d59fd456fef

SHA1
09057b70618b453def1212044dd0ee0bf4b25fbc

SHA256
60cbf80fcb97151ed569e330d3bbfea09293480592491316b4f704aa961d3d8e

SHA512
a50f345af79d223d44d56c086c54680f815581c0c8cb85ca9bead0ca73791806ce528db75355fb59490d2b2ffabb855e56fd9c2422c238995928307868ff74f4

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
375bb06d4e322b6aa457fd20832ab4ea

SHA1
0fb44e595d9993d29e60997bf78771953d7cf4cd

SHA256
7b4e9ba10746c0362d0fe753a5ba04e09782282a81af9d1b2b8776750b88bc1e

SHA512
217dd5079022ee88ab79b29adaad4806bcac7b448c99cfa9e39b6528b86a71b77e3daeced5e897e47f62cff0be61eeef76d0af5fd30e70b3d69ae980eec108a2

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
b232ccb0789230d86f16193b65be3ac6

SHA1
7797973f65b377385e3049b71579b805c5bbe051

SHA256
24b9da2ba77a7052fe1728d193e712f9f6aaf90993d922906f0eb886aa0f4a0c

SHA512
f76f15df447fc5a75e95e0f8617b4a171483d5077390353433582f9cb1b0d36eb2a404e7368aae3a3c7d0e1958085482c4858a54e05e373064122a49e067cca7

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
155353a0f889a797b6909bdc28c5c0f0

SHA1
ca5774824abcb8476d683da2838842813f582bb6

SHA256
1dac7e3186472e84164dc5909b0299abbd84d06ea1d464e397c705e634b5def4

SHA512
8afa8b995d440aaf49b4445aeb20248134e06b2860a3f6b79234e546bf1a207d92cfb09380664277c552f0cb75039f5e53b7ded8d593902aa36215358eeabbc5

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
f520be2fe163d615543794e1c0f7d2be

SHA1
021c0f6bba478ff9c70a8e188ee4c8374bf07cc1

SHA256
d7045d111d9ae0a13418b052d3ae61c03c49e9717119c9ec98bb019c88bad12a

SHA512
fd05f58af253a25cf527b73d017a5a00918e0cb1cfe0c60b23dfda5505c8b1abd8fe8e529415b6c8aa322556f6ea25f1992bf841b6dec708191fed13bfd9c39e

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
9b99c6daed157c3934bbc2f479c3f8ff

SHA1
f57b129c38aea67cae83d203b89fce6132a9a086

SHA256
083bb851bc796bf5cc31743fcedc575543955f25adcdb445457a4ad31efa54c9

SHA512
63dcfbcc60468ee65ab87e6d54a2b3beb5d07bf3dfb6b97a01c84a605b5445c2830e64138e966efce1653f629b6672ce214f21f39c9bfc577ecdac075d775a9d

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
046c0ac2d22e5c6209ae0137da285266

SHA1
0e74d16c3b547196b368a4f6fac1aea6fca030ec

SHA256
6b712794cdbe456b41edb8a231f698afb5c10bed2f3840a1c131387f014d429c

SHA512
541bfea7b86134ee93d93feccc6e9807166342f7c93d233ae4b850f1a3c690aa31b720f8cfa8b7c7572f0fc7c35bdd55f4bd86203345a91abd9a2e30fac9d247

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
2c90f5e17133452627ff2ae77f576483

SHA1
7bc946320a6b65b982bb9554d0fa95f78771cda3

SHA256
4c7fc4fb60eb806d44de390f2dfc956f074410a7f2f83c379ffefd3c6ddb1af8

SHA512
8305afe112da0173f79beb1c84b2ca85c107b01373987f871b5a2a9d164906f33217b45ba5e745cc367da7f69977e0e7bd00f034138addd1c27461a699db7490

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
8bb7a6e7b55e99a9ad548458f80dcd68

SHA1
e27b934ca8a3655546d930b4ca27831cb66585e8

SHA256
d7532c664f22dbaf7572e0d82eb411e75611bee22eaba11af4e54e1207c1dc50

SHA512
e7292dfa5704b134767d6921664e8d30cf3fed1f262210375abaf4a7e75575734534c4be2dc0a11b6f9b01f866e8379e84ce4cb75ec12cebbbc96b14f812f6f4

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
2660061a84c2c7e979805a574528d4f7

SHA1
9e043dcc2a4b4b50973728f038fe3596e43c4a1f

SHA256
4bd0313a80c7d34d53b611a056a728a910d1fc7d9e0d817075f9edf60463da7d

SHA512
2c68ebc356cbe23313a973b5fdabfce962fee9946aff3f02b8f475499bbf0a3dcdda0d6fffa156f0ae1d57422047c462f21b3cc4332418ca177416d296acd275

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
38e6a8257da93aa029522b67ccd29021

SHA1
223ba60f70f8eca6033201e059230a4c61cec60a

SHA256
966dc49eae07fe08fbe4cee6d8073a1cf9a46583e3c115fb9a89b780cd79ac9d

SHA512
93897c155578741b8a51470d3fe80b5c9e13933d1c49fb2d643ec8c2d23b5c40c7305f4057f10f2626a0dc74798441a47abde80aba3f62bff3e494598427c7f6

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
ec08c897196a1358746432d83d0c74e9

SHA1
9dfa36aefc0f99985ba75538ad0b5dd568c5af03

SHA256
9f22ae1842dadc6ebc15d44f998600c49ab4adbdce64ad353806e44c1f2de884

SHA512
c706f1f2e607867c584745e81e6d964d8c0c4bca2b2632989ff92c42bfaedcae4f2aca12bdaf871e331588e6ce2ffff5b60050efd9dc4655c413248057171d5b

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
1d081f28db4bbac019a789176b1291a0

SHA1
db3a38d0a90e682f6d08d6609ee69de135d40d8b

SHA256
781f615f06bbcaf18e6890eeba1a78613bf97c9172d4df23959a77039f044d34

SHA512
1eb797249e94eb891fbdd43f0f47fea129dee34c826e45164d30398c18a1f4ad8c31fb72f868c2e587a4684fef0116ca070bb37176ecc4bb5467f62144b54687

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
92c51cba392dd060616c05277bb3d4fa

SHA1
72690aa80be92f780102a148e8f331356f2fca87

SHA256
75e1a4381af44e875c5436bb4bc4bc37fce49c1d6552c75beb9bb9809759496f

SHA512
4938268843949df1095a4c4c4acefa63a3a187bdbfe4efabddb42df4469ccdd4a6dec74ed28211627a53c6108c621199c1f5d1ff98ea23529613c09cae971411

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
840db83f26c40f780753258a10afccbf

SHA1
9d0a016f6fa9b02229f097c3a8564dcfd9b5c124

SHA256
606da04158f84a448c0c9634606d710c0c4e662a76f2383871fcb072ea10861a

SHA512
19b6abb6d3e7d0fd7d360f4f893f5f0693deddf0726c26729000c1f63f62678f730ef704a5d602adb70e258158396a508d459ca293243792090afb6a6d91d15e

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
9bfde502263ff84460f7394191f41bdc

SHA1
4c4d64447ec95bae80ce64bec804e9073b8b8a08

SHA256
616bc6aae618da98116fd553abdb0527f9df16dca62d4941ce5c25046a0f7595

SHA512
b0162acdaf6b94a822943d112bdfbbe3c24f37361c4bf4ef0c94a0c55baa3f9c66de53913f66dabb00ba92a7e5b72bd2571570dac03a033e0379814f7217c70c

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
83365162d86150d6ba0ac6aabbb5aa26

SHA1
bf33d8ab42b2804d0f7b217a12d8d52fb3d5a998

SHA256
792bde5afd2b41de261841c68be359aeafd5f99b8d3ff070b53437519b9d6a60

SHA512
9cbee8529507ba2a22475ce916d51c0bbb0a40cc17996db8fade25021203402d8b0b2eff3a2f46a068c095c17820084bb874acbca5555751d069158f7bed06eb

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
82e4b74bc29665fa8ff6df6183c6e32f

SHA1
62775e79379e7fbc9a11bd7914cceb499cb7e2f2

SHA256
e3bdb0d152edc0c7c3193dec48b0cd0c5e22c589df81879c954f4e1d1fa2270b

SHA512
f5a54a2cad5d1c91f2440c13c0a9d6d9e1d7cb430bb02344035f78ad5bce2a27cfd7bc2727af19d729317453de8e1d888407109fad07ae8865174841d2c61a7a

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
dc932a46d1560c98d8785804cbfa52a6

SHA1
4654397a841040610fc4e6674a649a4d328756af

SHA256
2877d5d37e5e94c9a851dd27580d455bb23936b7e37d04bc3b02eeabb8aafcbc

SHA512
c461af79e0c3e0f86106a38a5ed370c713f25e00e2216bd9c71c1c6d2fd624edf6ab90ddc20e60e229e7525c013812eb882cd4130fbd73c70b4011a118877305

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
6a1ed542094feb8df356e77cd5d4ee0b

SHA1
0d4203fe701f0db330f2b83b5598322a918d7251

SHA256
66ed0b91dc7cf7d53893c5f583211a76ec963b9b4c0ea292ab7b0dda60920c23

SHA512
ab79aa4641814aa621762a826fabc0c859797a8d398b22e76eb315457845a2611ae9d96ac8c4f9d8ce99b727ecb0c52ee4adde758491be6cd07304c538492d77

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
e57615b1955f834c4747fe69b931e852

SHA1
0493f60a5ce6578a1f23657d055902054f6d9b35

SHA256
0230fb74bb827e57990d44608800bf8fd35cea0ee3ee2b2bf53225b878795721

SHA512
0329a0e7eb58ac82bfc98f82a6ed0a05ec59d789383b379a35366f7951d00719d3cb38761229cba9d4311718f7b8c812ab86cd08e6e841b004e5dc1d28e03a90

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
fba6a5fd14219215d6d0cc1386a73967

SHA1
151a5dcb0985890e723ebf2d55542143cca5cc92

SHA256
4d2c7b5319247a9ee1663180af9bba836a63e064dffa38c5323e0ee6099e67ec

SHA512
385e2938afbaa7155ca0c70c8e8529cc27453bbbc463caa2bbe3d585c1eeed935182437588657a20aa37e1aa829d81adc0513413be9ab7239870caf06af1bc3d

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
4e804e69cdc64de2c1b753f6a6de4dce

SHA1
8ba2cdcddb57156431e1e885042702574d145cf9

SHA256
4303b04c036f3bca27c0f41ef4e868f605d00d6b5636cbe88733f3a360f95521

SHA512
0d44de12694e5979a33cbf894d4ecb98f09b1a6406ac7ca327350818e6f96f8f9add45b909975636f8125b8734025244e3a5a51afcc694fe1c554d1d0cea4ab7

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
d8fc95955a0bb8acaccf1bf15914fa23

SHA1
3d0af42597cde4cc425595de462fad02e5b95ca6

SHA256
be23d0eb53b96f77b9646ab17dd973bbaf18503388e22cf95ae8519c2569ad23

SHA512
a72a98e32d309e937f902c139f58e30069b7ac04d46b4db7fb19b90b88b54389d1fcb2bf29d8950981f77d7166648e174009cb0933e0043b9573a6c35ca8e48d

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
3c4a84ae2bdc81ac7acf72abc8f85ce7

SHA1
ec61f161098604d40f19c9092bed9538ec945724

SHA256
7d2137704e76face17a1f8201d26bf49df39ee912bd8ccde731f613f32bc3cad

SHA512
4f3f5346c85ed36f55f39b664e6810819a33e47e7160a1779452c9d58905103a73b82c0739103798b33914e8b2792ab34981ed457e4f8815925b9128591c893a

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
a3c548a74c16a32ba87ebff07b88a36c

SHA1
c0d203501c1338cdffa801da201d8c2ae8d1bc2f

SHA256
17a266eda9219523833a6b45552c027ba1c89c7f2db290eec754a327547cb713

SHA512
8f88a820b86c031041058909aa010fa759027bb14b85c6c5bda891529d0003a96f8404f5e0cfd53ac2c125a7099b09cd1f865cfa315073e8b2b4353cc404285e

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
e6e8d74fef4d7892b36c82d0d56be399

SHA1
cd9eba2938c35ca736d37efa1fde912889ae8785

SHA256
40c6b4f27d08e781b1c768325936c559e076c4b36987c58de087c1f37bdb0bb7

SHA512
cf0a3eb1d44d3556254359af7533e2fecaaeca627744ee8da2c1ddc55df1426c8704f2b91eedee52ceadaf8576a456e0fec80cb23694414070cc7591dd76d5f8

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
8613fe743ea0e627b52ea5f010fc2698

SHA1
c497d49e48bec11417d82978366fb9717beb310e

SHA256
60ff9cbfaf9f80296a66ce083767c2a2ddfb61ae4318eaaf38f10e6adef7c5cc

SHA512
03bd7ed82e096ede72a05a94e8d0aeb23dc4a3de5eb7a08d38f3384025fc7e4aa7d730402ff0550671c6b8db5ad1ebe902bbc87cf6e7e42ec3e7e085c072e3f4

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
0921e451fe9028425bf42f2eb38ef7a7

SHA1
f6771da5b835a646dc4e7af932f02f90d8bd2777

SHA256
da47a97f7ca035b5c3ec6a6539bca9343195edcc3eaa7346d2966ea8da285286

SHA512
b2bab58fdd662abd60d72504515ad81902c39c38fb5d7bd7f7203297bd326b122f782f55c48cb9df0d6cd4d49c30e5587d36258bcbe1eed24f923369828110aa

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
f4f85e758665dac638ab6347748df64d

SHA1
651a930568a239ce0d584fb545dc7f9cccdd6d6b

SHA256
1ed0ef8794e0c0f50ea50c337136117e20ce37fec03d8685a15a4e38c88846fd

SHA512
cb96048bc2875307e49d30d4da4a82165363c80437462562cc54773d5a2faf6e0133f56961a430e2494db162b40a1a399ae7e9f8819964705a295f82cf7a487d

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
03dcaa2804cc161629d68a939a0ed0cc

SHA1
1cabe16230e9b0a0048a6e159a0f9fc79fc58f1e

SHA256
d7ff1f4e8652778733f695ab2082848c42570b05aa3c897da82f80d2b56abde4

SHA512
5b442b64aee36d2b96f15e722d26508829fb4348030f03ce0196c0311c9e7b0a02bef8c873b3efc7b30dc5b910740542ee0bb46425e93dbc6769b19a930e9314

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
d4ee384bcb83677b2eb79ef937591ace

SHA1
de08b36282fee418bd5f19376969ffdd93fc9d8a

SHA256
e98f6052e5188ad30a4462d3de46897b396a4bd0da2289b235cbfb033f49f746

SHA512
3f5e5a6b921c0098d87b31d99370cebb6a0a8333c6facc89ea3e1b4139ec0dc6e85e9b5b8533ff6e4014af3f3376b49cd3ad3391024252d42e708839f4d9b181

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
30a67ee6cb0d2fdd85cadba7eb73ff27

SHA1
6d656dce6539170ab7bbb0b555d2e31c8c13560a

SHA256
0dd19fda4395de31ee201634da65dbcbe2d7d0fba89cbd7b0f722e5825919766

SHA512
81686d5b5dfe476702c27d7921995be7d8c7f5a800737f641749bdd55705005637c33ba981ffb998711637483b15ff8cf06fe5265ba9e0429841a5557baa5c1f

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
8e45c30bb3611c9434e60c5c58266a6f

SHA1
db01f865876b3092470485aca0e9ca11fb0c8b5c

SHA256
6f8ab5b6ea67e1d3717c6c726a3fc3e6b754d20745bdf7bf3928cc4ec392d204

SHA512
55b37ae97a84819b41760fc48765ba922668aec90b93f46d978f6b1e4a1d01c1952dab2db653369ed70de2aa8c2c92bc628613ae567ee0f3ee4ced19f12a8733

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
b01979c61e6dbe689f9f5df692805ad7

SHA1
3f9845ab08a7600133b7d4e8e3ae00a16e235867

SHA256
dfc63ae5eb7c787d71296b446c1ce6d9aa66512803392db188221803617bd28e

SHA512
00822197afa1587a6fcafa1add33845af66f956ace84c463fe44ec967b512747037737ba1f7c50555c2a2e9d3d7a9ffd7ed85244fef5a1c0b1b05986fdb0c2ff

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
6831e2e5ddf3aee3e4077cd4903b8484

SHA1
1ec641c59adddcb935ad821fcc2ca656d57c62b4

SHA256
bf4f39fa77b02921eaae1d1e1a60ad0ecc67022c2ea230ad06f737693c35b8e2

SHA512
af2a66b14955586a9b24840a6660129f9b4831a7f2d2832f54acacaf159b7b09540b46e025e8fcab32e60d435cfa2a220a0b7a1811ac0961c637b3e584c434e8

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
23b51fd86bd3b2804ae5a2490a8e0626

SHA1
e2411719512bb71d6fcfbf3359c6e3339dbcceea

SHA256
99796cf33ef336460466c520929e393722ce3caa2dc3c84e3a7b3b91bed5d2b3

SHA512
54126b7d420a68c1be2761d5389d234f3ae33daa0cf26478e32b185d2b1a3c6d2e2a8e95a4fd75528390bd0b2caca39d9b0b58da4c98eb24c0282cb243637f5e

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
a653ede6f15be08e2a8f3e59b02ab9b4

SHA1
c415189dc5886fdf0cf1f64936e8ed9f01925748

SHA256
76a796fe73a9189616bf79575369239f3c14b4d8755f323f184d564fa998ba4f

SHA512
885353bb2e1298f54924d5bf999e0f7544aa6a35cc0ac24416aee279dd5891d88b260676597b3354b44cad76b639ad4443b8a59155333a7d1cf4a3010f7268cd

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
35aaf14919f74f575d7320b585fd8249

SHA1
12ac5752704c7896ec09281ac2ec08c1a7af565a

SHA256
b33d5f5e4532539d0eb6c977e1667c1393c6d6dc050fd88c534741831f398dce

SHA512
d28fb8c34000ca3f6f669723cb204b2b0b789e3f97809952a58905ebffc2f21ff0a31dada51b5befb18aaec5b6bb2db569b70d8acf058f8e00ec5e823e7e7da0

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
b829ae4c9c0a7c93a754d51f636c97f1

SHA1
254a9daef821739c0990b804dbd6f7eda1dc503a

SHA256
0cee05896dde8b84a195eed23aeb0b8fad2f3b9d1684355c543e3954eb829793

SHA512
5c71edf30f39a7219c6e00670dcc4a388d53d84e5a73d977398d2e99051fa889542de115744a3486b8fc5f91431bef11a3b0d506e25d2e8ee9017799573aa51c

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
2a049af0c8de71344ff0f8407f058bde

SHA1
b83d545bdfb669cc0b6ddb2a839decc1d6aa40d0

SHA256
f2a93aaab610875ef7bafeae79c4cfc146193670a63b71fb05e7249181533e97

SHA512
91150ff9b27783bf32dc785bc681072e94798009a08a93ea70e51f0a372965962d756d499e2cfcfa385aa55c74b4f70c08233310e03795d22a6d759c217497c8

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
8a0cea1d29e9907921f8d2231fe5873c

SHA1
4cfe1bcd1af1b0226e46f06e873453f43e489336

SHA256
558cfbe0be3c44c80e3b7660afaa4fafcc0540b41afbadd132ed4a800b834e85

SHA512
270d7f37d772a9e45dde114a41f4aa6a72f4d940ed7406797310f0e43ead89f423b73988528932b5a44b1ee086a35b3164c0f8c8a2f6aa2f0308fd5de04d4841

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
79cfda81ae5294abfc4614e57822f7a5

SHA1
f46f30fa93f79ef1fbd4cebec970dd24772a8f15

SHA256
058f3839568c1be3cdb6a6c0074e2a8c1bde8bc73d4adcebe692ab001fa77586

SHA512
118886a4e6f8b2ee4f99240ed5642e43d2c0521acd248807fb0a527b3f4bb7470711d5ca77d8cbb90503e68725cab83bdd574ac2151d49d34c8dc494aec86bd8

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
3608e4b7f8de910565ab2615bfbb5ef8

SHA1
d41d2b1047484b791db9b8c046e85b11b6a6ea5f

SHA256
f86c818a78b4fcd11f547d21e042b636dff63eaa1c1a2a556bbe414ff6b81440

SHA512
16bfc54f03b4331c941434b03bc29bd01fb6b4ec561d86817f630dbeb1760b3d084f639b204c6250211a069c5f0ad26caa66322b32e489b919f9b91fcaf85216

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
5c21effdd4e2129b7565260016426c4c

SHA1
57160fca4490fd14a777559379b89f4220e32d05

SHA256
549e57cb5a8c9ca1c8912769a6e1d0bc92f894ad7530707f2ce2cce8874607a0

SHA512
ed1c843f83e0c281e522f81eade50fabfe11f6dacb166ac351c97db5543b5282ca548ce651c18f393b649b6312371ad6756315fc7bf41cfdeb12b5991704cd21

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
a429be785cb014f80f7128709a4e618e

SHA1
9570139ca23add0e7f13b0816b425c457c2fe2ff

SHA256
5fc2a5ef8a25a789092c3af8d566cc5c7038b3118450a4d7e0fb3ddbe4947c93

SHA512
a389e80de673a665c27c62f0552fa31799db6af1878b28349fc3d084d7363152f32fccc1455b79aa1ddca5e81afc3471a0ee5812bf46aaf539c7ab70eabeee52

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
eb5ad83ee4b7236546b9edf4709e10dc

SHA1
f720692bcf5d2a9458fb02c29bbbe4c7664dc65c

SHA256
aa37ee050121ea4696cb718ebc3830fe5b00652d237000657936a723f9af0d14

SHA512
4152e3b017ec8f73c7c5b40196bdf39512c042b0b677f638cd3704ad4502f1232c346387a6bf94d915095c5d61aafd8d62ac947dc2c02769d44d8744d82f405e

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
0f50412c4db90e248dc97f945b1c8c82

SHA1
a611db31076b875835622aa22db80e7b5976ea9e

SHA256
0c256b5e288f894b93be3ff11062ead65b7ac383f8ec601f676884d58d37bb73

SHA512
9101dacd45912d6f1ef85137767537e7ce58267f68124a3c62f89d3e4a00d27b2eb5829c11d11c276cc6f205981ccd3f2ad2427509e207b1edd7ed9ea32d0150

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
4447cf7ea4f962b3f65af7086f82c04a

SHA1
6a986b1049e4ffc4da5c2805acf377d03db20a84

SHA256
bebe16cc20924dbce631488e8ccdb22a7850026f65eff9fd98b42099ee7437ec

SHA512
83646d526ec3a9aaa59eff61caad2202cbbcd71bf6322970ad50e45bdc0b81268b5d00f591df182ad65ca0995e2782e9c4f8193a839d08d40676a7c23e493e89

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
a587a5a2036786e75d3b57288651ce2b

SHA1
3016b9a08def916f442915ea8b9db275df4410b6

SHA256
e4f92e0a49293b4fa4cd0bdbfc987529cea21ddaf4799294803aa9335afbafcf

SHA512
50bab0f531dba0b904429dc42f57c6b254f35500397466a249484012f9c3bd803f75d8d53726a55c1b4a4b53e3f96f01fbb42a09d80f7616e98f88fc768bd3d5

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
0d006a9aa4297c32fe933594bd95b7f5

SHA1
ff2d79f3c29dc6dfb01e77e3c3b579838e375b9c

SHA256
7fa86a72f7fe9a1b77e1b8f5fc313c0c258fa76acdbaf8f7d83836f48073af23

SHA512
73576b048b6aa50e672a43e5bfc79fc6f7d6eab5b1dd2c499492bff928a70f1bb08a3b4532cb12139cd200b446b040b50e3c319dc533ac5265988e9f611af892

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
baeaf452b8f10738f49efb55719501a8

SHA1
bda918c626778d518c0d5994b1a34514f9c6b619

SHA256
5a5f35d6b9a6fbcd1461e2e29145df7a5d284aff09124ee2e7e71e1632ade3e4

SHA512
ec088f99e8d25b3a2dc55757d3c75093f757647c89538142f10ff3fc06777c36fcbcca4fdc874397e125f381c26cfbc4244a96843591cce18fe09261053c5b04

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
262f14ecadf8fbddd787fbbb489ee265

SHA1
70458e8956a3f324442e77d0bf7c54b4c723e9f3

SHA256
63628b229879f54032f340b2709a6821d7e57a677cce7851843686e6e883a20c

SHA512
0f4453ddb6dbce8e53f47d8ad05b315f5e98a2a7ee1eccab7e9407162dd41f709d28c9304862a6f28c302d8f3aaef57b70529b7e55768c89d177e89102babb91

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
6e9abd05753872ef5038168dceaddc3f

SHA1
280f6d3e26a6703f01934530e0e11fccba78a04d

SHA256
fff2f396c7dbc3fdee5a604ec5ca3ae1e17dac3cacf298426de220cb9a601a23

SHA512
1b1fe38b3e79037c654f46c429e20ce0a1fad89417e085f0397318f4d232d02a3ed4efb72ce027ff57187925678f20e431da0a307294a1863daecd8a586d7eaa

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
2951012dd7a2b9fbaba8ea7caf5b1f0c

SHA1
feab447e753002870ce61e6943c7c170b4570b40

SHA256
d467baa6555e01c58aa5ff3b57f0e5522f8233da325912fc6dfa64a0c26234c9

SHA512
123bf7811a1fc7f09fd1d3bd8b8cdbc31163e38071cc837b748f7d790fb2805ba0b792bce40701c23835f7a41a5a07cb2e3b640135302cb4156d1675d101ab13

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
1f9ca4a1606e15798017b165879a09ff

SHA1
637cf7b9b65506cd7d7c42c662a8f201365d748b

SHA256
eeedeead1c687f1a2255f334e9e90374df367a65a91bccebc8323b3bbe439f1f

SHA512
cd6bd2b4f626275909c23678e9a36bf9942fa84810648b74b5618e24d761223836e36fa22c32bccd96e2e0e320e5fe923ff2b592a9c3f5a666fa0971d4dd4092

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
69c2b8fc6e0e77ef13c97c624716a6d7

SHA1
491cf5b9d3f418e368883a63ad2a043b683d81f9

SHA256
6c3347941030003c834a714793488cd0e398bfaf0a38a629a0523073bb1c78f4

SHA512
2250dac9cdcca1b0839615bcb9eb5e6c96a60e5f9411a2cd6d2eb569387b2f12feff341a64cdecaf7ece5074470dd7c0cb2db381225ee19206de875a25d5d531

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
15518f8fb00039421ea9635414d41af6

SHA1
9c9f46f7c9a799e193994710b830d6255cbe3a53

SHA256
9f4137f2a9a3a68922692988646dca5fdc04ce230b50720dfc46cb8ac9f8dad3

SHA512
f116139af3698e13aaec914520d0f092daa944b041a601a4c42772edb87b5047f174a2104235f6412f59968d04514cfb36b86e039853bd909c9c9d1a86c9f6dc

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
c9caec494d045d696e4b34ec7194e3b3

SHA1
7e008fc0eb5b0cf231d4f6d1b69767b5badcd7b5

SHA256
8dfc1b70b0755cdf7899c935c93248b70ae0589e313eae20090f4b51e3b88d8d

SHA512
c07f8d09994a605024549c3c5a8a01e64632ba37aee6bc56b36cc0616292aee7644fa09ac8305c43cc09031d334292edfe126c73f4868d14ccfb968b0f6359fb

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
f0ab0f5af9c0de063bd3eb16bb4f79e2

SHA1
9d987504527c5a5bc469440a574747bca5b8f44e

SHA256
13ef1e8d1cf45036ee7a9a1d9b05d16dfe94bc18ca1c56edd2b9042b7c76010a

SHA512
f3f63d59cca639b5ba5ab559a4f4af1fb80d7a266ef4c36f55fa9044e53e5ed9d97ef4076d0e642c79e43139436ad68669095d1039ffbbd659115f3b6165dadd

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
a7cf708d497dd6e922f91d33d14f7600

SHA1
5e4f3f5817004eeaf4bc14a0168d86ed7fcdf6d4

SHA256
20a5f1f3bb4614433712df1ffc67273465e766191502b8e932321f1f24fea65d

SHA512
d27a32dfcc0835879ed45e221e9857c1165de03a859980f0e29ecd6d5877d832577f7d6b584aa96e24caf7ab7652387d713ef2293412bd10b6b65567ed0bcd42

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
a73830aa40a1c7ca00fe68ee4cbc4bdb

SHA1
f946b1c49d7f149aa0bfadebcc2d71b5706c275f

SHA256
47c4c606547ed578741b498eeba643d1f33b76b76629c6b59f4e0e422e440960

SHA512
72056ae81b6ee9e2d0719fb2ad1200f876d2c265ec9aa91f05aa62b9bc5ea5b1f2bcfc25e12ce2f8e338633df32b580791b69530e73b73ac3f344691a3f7384c

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
800c619d129acf489f2281442000c361

SHA1
08a47fca4c09d04547c58e0781bf59531d70cfd3

SHA256
8933465438adc5c5193eb7fbadd6c6e7565d2d460fa517d0bc8f21cee49f4a65

SHA512
cf467ba93136084d23b3ad4df5330c028ecdb3e93500196f57c134a7bb3719fe2d4fe0e0f378e8fe10937e9c02cca4b4192b6e54d6a18721ced257478ec12092

Download Submit