0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
105s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2024 05:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7189AED8B8AE6568.exe
Size

137KB
MD5

ff7559d2160f6732056ff5a19722e69a
SHA1

aed67bf0c6e521fc552cbb4afe24a1c2eb286da7
SHA256

c2fc050f33d51d5560da425d137ef1e318f16fe5d49ee894327e33c3e12755e3
SHA512

020825f085dc4b08f2454be5425cd937a1f146843b76b445c6d5993d0581fedf93f84742e64b2abe986a8d5803a62a597962a04821488dea771c5354b6dfda10
SSDEEP

3072:oLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hb2bIoKb:ostYrEMw6Bxk5zOFNtgJGCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 7189AED8B8AE6568

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11272) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation	7189AED8B8AE6568.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	7189AED8B8AE6568.exe
File opened (read-only)	\??\D:	7189AED8B8AE6568.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_filter-hover_32.svg.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\it-IT\ieinstal.exe.mui.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Fonts\private\ARIALN.TTF	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\Microsoft.VisualBasic.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\CANYON\THMBNAIL.PNG	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-ppd.xrm-ms	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxGamingOverlay_2.34.28001.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxBlockMap.xml	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\seqchk10imm.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\biobio ransmoware.txt	7189AED8B8AE6568.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\ca-es\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Xml.ReaderWriter.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\TimerMedTile.contrast-white_scale-125.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\oregres.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\System\ole db\xmlrw.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\biobio ransmoware.txt	7189AED8B8AE6568.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-180.png.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNewNoteSmallTile.scale-400.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-40.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\LargeTile.scale-125.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\new_icons_retina.png.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\msoutilstat.etw.man	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.IO.FileSystem.AccessControl.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\GenericMailLargeTile.scale-400.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filter-default_32.svg	7189AED8B8AE6568.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themes\biobio ransmoware.txt	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Common Files\System\Ole DB\msdasql.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\Resources.pri.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.Luna.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Javascripts\JSByteCodeWin.bin.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\hr-hr\ui-strings.js.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ba.txt.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\Ole DB\msdasql.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Windows Media Player\mpvis.DLL	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\ui-strings.js	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\jdk\cryptix.md	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vreg\powerview.x-none.msi.16.x-none.vreg.dat.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\duplicate.svg	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\aic_file_icons_hiContrast_bow.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_split.scale-200_8wekyb3d8bbwe\AppxBlockMap.xml	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-ppd.xrm-ms	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework.Royale.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\turnOffNotificationInAcrobat.gif.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-TW\msipc.dll.mui.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql70.xsl	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Common Files\Microsoft Shared\VC\msdia100.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Windows.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-core-processthreads-l1-1-1.dll.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ui-strings.js.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.Interfaces.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\7-Zip\7-zip.dll	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSplashLogo.scale-300.png	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-en_us.gif	7189AED8B8AE6568.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\es-es\ui-strings.js.EMAIL=[[email protected]]ID=[7189AED8B8AE6568].biobio	7189AED8B8AE6568.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7189AED8B8AE6568.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
948	vssadmin.exe
164	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe
3160	7189AED8B8AE6568.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	3160	7189AED8B8AE6568.exe
Token: SeRestorePrivilege	3160	7189AED8B8AE6568.exe
Token: SeBackupPrivilege	3160	7189AED8B8AE6568.exe
Token: SeTakeOwnershipPrivilege	3160	7189AED8B8AE6568.exe
Token: SeAuditPrivilege	3160	7189AED8B8AE6568.exe
Token: SeSecurityPrivilege	3160	7189AED8B8AE6568.exe
Token: SeIncBasePriorityPrivilege	3160	7189AED8B8AE6568.exe
Token: SeBackupPrivilege	1072	vssvc.exe
Token: SeRestorePrivilege	1072	vssvc.exe
Token: SeAuditPrivilege	1072	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4684	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3160 wrote to memory of 2028	3160	7189AED8B8AE6568.exe	83
PID 3160 wrote to memory of 2028	3160	7189AED8B8AE6568.exe	83
PID 2028 wrote to memory of 948	2028	cmd.exe	85
PID 2028 wrote to memory of 948	2028	cmd.exe	85
PID 3160 wrote to memory of 4780	3160	7189AED8B8AE6568.exe	107
PID 3160 wrote to memory of 4780	3160	7189AED8B8AE6568.exe	107
PID 4780 wrote to memory of 164	4780	cmd.exe	109
PID 4780 wrote to memory of 164	4780	cmd.exe	109

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\7189AED8B8AE6568.exe
"C:\Users\Admin\AppData\Local\Temp\7189AED8B8AE6568.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3160
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2028
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:948
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4780
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:164

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1072

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:308

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:3568

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4684

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
2e03a9a78479323bb1f4d7f5ae7c9b4b

SHA1
1ddaa0a2b6999e485ae50af58a40b990f8654117

SHA256
73cdfb01a172cc64370752179ee7328385abafec27ead7e4ec453a8266102d62

SHA512
0646c9f6039bce163d2960399325bb0ef9c64209a78404ea93abd498b6166d68b75bce289770dde2942ec0f5b7621cb2d71e4855437e55b40ce0f9774c428251

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
e9dcbb81cf1ab24bb3bfeb6f19c519a2

SHA1
865ac0c226f065352a75c1a4cb018436e80e9b0e

SHA256
f256f72ee8ee836574c52ebbbcebb79ca747da5ecd00180d89ea2d99e5bf7c39

SHA512
536f4651747c3dea69344736abf35448897073fb57df6350815991bcc0145d36b438403c474053b5c4f8f4b5a38a1d0ebc9fb80a853f1745ce9727115114da54

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
6f0c7f78afa25d8d2fec5afa630ab926

SHA1
97bd19e819eda58e0e7c2ce90b9e44403c5e543b

SHA256
3f602e42ab686992e648fef27a4f14900542294a5cd7af1ecd703a2ff92641c2

SHA512
c1052cdd939a32f0874bcc31737b95b5eeab9773049352b72bbef7ad84635ec06f072937232a6540eb4fe45100b8dd2a5ac36eb7697a65ce89bca121c4683d99

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
f83bc5ce7eb2416c3be720419696cec7

SHA1
81631a15e6437bb3d8e893ceda453c71f0f581a4

SHA256
8112f89273514e35b73dac7242819a6bffbe87b833093817d2c9499d7da7dd42

SHA512
3bf9eaee1bf6149850ac6633fdf4c4c23a8d4442d93d19749962a9f1941961c1ab7625d8fe464cf1c3923df134e2540bccc0ac8882d0f1ef7428d3dab9e9c392

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
a33485d0b1bfe9afa1be55c6e5df4fb9

SHA1
fd369c14873c8c5f8a355c7511c0eb6e720ef420

SHA256
ee4b2b8a40899b53ac53116754e916f4dfd87b12a2b71e6ce8de62b03a995ddf

SHA512
b038017610e1aeecb6692228439b36081185765a63e9659886277a8c696558131e80e619dfd862d8d28e3408dbc3b8437b1f06a1ae8338f99dddec0ab1ea6f3a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
4cbeb50b97452efcc7ff71a22cfeba3f

SHA1
f5af2d480449100cfa9ab1ddf8531621d50efea1

SHA256
9473fe2340603d78f7da840973bf9494f6aff80871f9855f701cbbbab7cde2c3

SHA512
3f0771389f0f885ac52e385ab6733504c04e35e400de9ec6299739d736461c45dc2a5a642b685628706fbe31412e5eb6c9e27a73b3934348ab2c41dc1c93109b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
a650f60308ebe685f1e97ba98b428c9a

SHA1
f696a0f8b11b57aedceab0288b3030bedf3b56bb

SHA256
d37c17a752ba41a3c8475ab853164215cfac34dab1660ac449aa9ab1676c91cf

SHA512
2bd1316917d02c142dfa55e12b5cfc3c875b52f2808fa0e4d1166b5cd63d28d5531023031055cf5866d4f64d8059937ffb10e1842669fe42b2a182a1418ee772

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
ba81cb3bc770503c4bc503de00fca87c

SHA1
a147522682cbd8a3d61f2743eeba37812a147d4e

SHA256
2922d61316eac62e11ed6a67c05b55956acc2b78c999aad3eaa1c3377e4a622d

SHA512
ca17eabc76a42c651c855e617b63e2984c9259126389012d128fa0d76c9befbb562ed17e6e18478b9ff998c123fb35f6e025f805296fc73e2636bc79066d6b01

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
fad84aa814e7614e5c869977160d43c8

SHA1
c29f5a5c03463c6130351922f945384250d9a505

SHA256
0915aeb5875009e50bed0c823ef2b2e8d978bb1823a0a9050c32848ebeaba6b9

SHA512
c176b91966fef08b051a2f19b8b5585d4ae64b4fb1a01b645bfd2d6128e8910bc38f8e8b41108a1d82fc88b5ec4046b0162fdbb5fa0a693e1d9cbb8aa173394f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
5c963b663c204e7cea4c80a97dd75eed

SHA1
72228c9a15c7ca714d6eb3994d071815f401555c

SHA256
392e4503d906dbeb3e28010bbbb1d0a863fdcf93ce415ad5b2f33b7463f5d7db

SHA512
be0963d098c1e119072c0fb9886f399069d9d06a42a0bd323713781f71c184477a8f533fb64a075bc8d6b5b1dce29985bcfad34bf4564137352242a5fa9c3c70

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
88cd895b78aaef37023339af76e40150

SHA1
f99c9b79994bbf3304b27b87e54bb93b5e2521f1

SHA256
2a138b5f0acaec1f8ac5980a66da6945cff2204bf0445390519bf83713caab6e

SHA512
66099bf8ace987a4eb5286484fe79ba1fa399509c239550d0113336f291dc023ad3f1337d13b578cda72bf0f00d24d7c5fe7a52d9cab5c919af6fa5670f14218

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
075327696b85e688d63557c03cf30050

SHA1
24bd085814a2feb2aa9267ff34ff7d46856d134e

SHA256
3e984be815d8743c2ad027c6c4c1fc5682691fa6cc0dcd48213154c43c11dcd5

SHA512
d5785f03346e076a4a2c4eda9d28e451ad1338c5dd6be474edae6f7fc3348e4c2fc1e205a15c74bd55155d86f792fbd167f5f74abcd91fcb86f507a0c3ecb393

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
8116fed34dd82b1fa86985bad4e4357d

SHA1
6773dd233d4b1d27b2a3f10a1c7d80282cbbfbbe

SHA256
723a4c6c569e64076d0c94007629bfb1031fde07b0317407caa912eb1a805f88

SHA512
6fc84f6d437a8ca1adbe96d392e72ea03baa1838163b98e670bb9cfed668043e20847f7a089b38d1a0802209bbf9c44f1c48c83b57e48046d7a9ac4f6a1925ac

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
2cbf3162f5839dd63bf9b91b81f4b12e

SHA1
2857d656b23658caf34dffd3dfc90057285b4d25

SHA256
3cff76d17445a33db8d8e57eb35ea0fcf49fa596efd3489e7a26193b1cf674c1

SHA512
ec31d570f8bbc06b5d57de6eb65a273af082de3bc5fdb0ca8203575a6eb0b813f11b134c2ed1c41c278a907bcff243a15b978cd586fb02accbd1a4127905182c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
414eed7cae98ce7bd276c9c834c6845d

SHA1
857c20ca00ffe2e833c301d62cb8faaf67719ec2

SHA256
ca50d02eb172b80e4c437a1b5db9b40c81211e9be6de46b77182b2d1a6c3b271

SHA512
3cc41c35ad33f3dab4e1a0bfd96b3bee5d50fad657ede84d1bacd4b8a43446f4874abd21f9762918e35195714d0a745c977480beacdb733cce5d7e6554f43156

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
25bdfde066892e19640376b0eb7105b8

SHA1
18c685b0ae07be8ec1f8d358d6c78036a91b23b3

SHA256
9cc82da55d20a40884c89970cc1fff96b9b0c61f1831ab7905b59a4a7ef6813b

SHA512
e0ff36368f1099f95a7f1bda6d5971ba9d536d54d944594beee9859fb0318e66f1a6581312f462f2c41346457cf5181f24a6487c2f910af48baf54e955992f8f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
dee64b046e92632277037be17683b4dd

SHA1
b091d77a6d6a74d1ce7b7443dffeec44e1eaa0eb

SHA256
2c41f5c72a18f75c953c151ae29fc0fd3ce1d09521ad7103f18abe7dcd488f3d

SHA512
35cec901b7b231a8dfee8ac82fd53276c72ab4b85cb5c7b6927e8c14dff9e4d81ae32f821410a565657daa5e52c13b8e0120f5ea892dabc05e77ede77c7ae762

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
9a7f4c029541cdaba0c36c42be51f09f

SHA1
db1a65d42db1b8adaf5a71d305aa764635c4bd3a

SHA256
0f0e89887caabe93f999186127e4e8f1c82bac197d6bd0e69a813f1e4b915e71

SHA512
76d8fbaf55c2379a1ccde8a2407143d2cec4560aae38007cf8d1c6dc9e4132256b24b84a304c7d8958640a7da4440a937a0316af5c42b31ec804d3180528a0ce

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
597ca282b109204d0c3defd336e4f6d2

SHA1
78b4fb274550e3cf4bb28c954a066906d7005ab5

SHA256
08fd52b254bcf17e2155f3273d39681c79ee8cf2022f61b0606732ae7cb34fa5

SHA512
d5f5e3294026f089b1720fb518fe376016caca96a16b12b075124a754e9b67fa8dfd38b80e38dcbee0fee3f05af790895a93fdae5b1f1371cc2041537fae10b2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
96fb2a132215c6650c1bfc6dddcc0db8

SHA1
5779401351adfba6d2734b7150473a0eea9e3e14

SHA256
a733464dc8d131b061803e8180efab6390fe5c344d5a942366362187944aac3a

SHA512
63cce0e392752cd28ee42b5e74e811e527678d05f06d39950d508605fc7ad30d334f09aaa200e4f8aadaa5ef1fe3c8517c8a3e08f978e5a9f53f9f53e9378247

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
b08300f4f39e25fcbf2686aad55ee94e

SHA1
c08800da2784c3cc8963708612d1c9431c093576

SHA256
06b362c315fc19704d1662c8595b8f21953d2a4fc9f1017cdf660358791e7441

SHA512
e4008e48533b0ac4c9e549a1f73c9c336fbbf5140924f08b855b1ec1d4f51fd93f8388193571f72f3d93f1713fdda0182ed9a83b8cb90b0a97031a509c556014

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
723b47e702c78d14b3fb9b87d063263e

SHA1
8af93f9f4df5a95984e43bc999e19aeff4b1019a

SHA256
1b55bd0ccbbf6c98a0ff37b86425622ed692a14faef0481321b8613a0dc9a7e9

SHA512
60427a4d069d3013c5af8d3e50cf2d2d60e111b855ad80ac5ee9c787ce6bb9adccea739605ac1393ff668400c1a1d1b5935a61bbfd6a049ddcfcaf4a45907439

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
0b9bc2e0994c904676d16c88b9a16ea2

SHA1
a77d65ebaf7cbd1587f35b504271d2350c7e080a

SHA256
fa0bd776e6e9a81612e67e6789f78d274aa497240a6026e1e4a64d538ef66cb0

SHA512
797f15ffce37e722656f2a89c1ef3092a8be75a85cc4e8af2e4a03abefc29dba41cc48a66673a39b4655b59900916626d724883063a5c3d2f4a1378d8b08b064

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
9a88a4aa6555f1c82dd6a994d2ccab86

SHA1
819c32de466f812c920e8c3b9fa482175e7a1a5e

SHA256
840e285081aa0e12fdfdc4f3bd77e16c5ec0d506b8e7c20604af31f595492b7a

SHA512
e4bad84087f75ddefb8481491e8c4d1b39c50dcb3c15ece51ea55a82558601971286022fcba631655f11d3cbf4cc576eb5f4219d46a4942412c4382870174d98

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
3d66d099dd172b3b0f9d56717145a9b3

SHA1
bd7c21ba10a75ac907bee3ad1785e5530284644f

SHA256
943684aeaeb1b40248463d48a8576b23e1f578cb483d868fc4b1c8ed614af474

SHA512
0837c000ae4c799293d77658d4ea1d575b6b57e51337d3a64c75d4896474e25201d6750d40d9bc569fe500012d1553c1dc917cfe6090f8cd8b2f5c959fd872dd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
2d74a1b17d9fe5f5e4d6f818c51bdd16

SHA1
c92a0c8c86843037c995294c340f5e7ff4fb9dfc

SHA256
de57ad6adfc76b4ec14386b1346c419c10b3efb376ef706825343bbf0d573b93

SHA512
418c57be5ff45c3486c2a98d1cdf5a73ee6767cfcbd564f61c34409a899d462d1384bb15284e35e60d575561f5c57b160aafa1b4b166c84ec44667550b9a6980

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
05319374e65450368a271ba0e8f86df8

SHA1
446a747173e3edae0601668630c150fcd1c66967

SHA256
85f1612621b148821e9bbd9b5afa7767d4178b7a2c7c9ca5aaaae075a6ae115c

SHA512
fabb1532ada845995b10325ca52072edd91f66f10b15f16dc822b998ebd07e1f90cb008f022cf0ccec2fae97bc1c248c368aa9f91504bc857ba22df8949132e5

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
d0fedbc9e1329fc6c7efe1b037ae24cd

SHA1
4a791e07e6b30665f3d055e3d83b9b8d1bc0489a

SHA256
2cb9958e297fb8ce77f5df951d13967d38522efba3113f1edbfadf0b97e6594c

SHA512
5b7a1d1d9d6de812a171093f74b16fa9d91c9b8dc8ef6af34d87bf7fc3badca7020e5fc9c44ed7bf0660c5de03ae01e6a5d78ae4174895658beee17645dd7d16

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
7aef177ba3cd17fe5ed50769459ca5e1

SHA1
d3b6e07e799c3c051257b08a9e5cb72c0401cf23

SHA256
e5f4732f9b646f89eafcd5d7ca8422a48bafc4b4453ea26d65367c703d9d107e

SHA512
9e8f462259e64f95956b4ff4aff1dbc41f347c2c0a37d642bc971d84c758ea6205b8c62c1a4b9efd5c1e991ea4e04090b62e6935a8d093f1cf0c0275d6def30a

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
1b2e2bdd4de92d867f752100b14e4f36

SHA1
bb38690e7ef6c28aebe8dcba309a18d7b853aa83

SHA256
ffef6c13de02c8df9cf1f99ce284bd37baa194de0feaa5d3ad86bf7c51422c3e

SHA512
36c5b1827d0737490a85f176ff2d8d4ef30f4528070cb2daed1718d6e53db619519b8dace3b671aa6db3424861cad234126b4556ad86ccf7ce9fe4db0a09ef79

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
c98cc1a1ce15fca6943caf52eabb7081

SHA1
3f38120940901dee870d40148b0d4dd5a9ef60d0

SHA256
06d08fea7d716d2c0c33a6d513f0a9c09d33ac61bf07d810a5cfa0420552af74

SHA512
ef4eb1cf7e3524227ea1265aa527456afebbf3764bf02e6ca9fb8847aff9f02647ac78238e03ece8ffa083525edf1958f1187ba697252baadd3e797907644305

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
303ef4f66dcc481bccdc5824f77846ab

SHA1
7162d59536f412a8741e691af9ea02de9df21d53

SHA256
b2cb0dbf80ba0611cf920f8f3d6fc1f22519e9de53134a72a8181708d06acde8

SHA512
a0a641cafd75782579b1bb5b253294ad84b4aa2e32c30ba939d41ab2b76b2b642697130965f4dccba9ba8e8b8d5e2c9471084337036e6c80f56833d6f7452788

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
d49b1a9b5404aac03c316c716e2caa14

SHA1
8b6e2da507702f97ed8fe4ecd4b0e571198d6f78

SHA256
7d6e9be5065f99b843ee1a5cb09f129ac3a18902a63e3bac2f7a13614fa35545

SHA512
3ebe530dd01763bfcbc85517e279cc44725f4acd0ce1b5925b17112a59b48c6c51025d6ca80eb2b230262c579dd12f1b79ea9c43578c307014893fbd311a16e6

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
056e5e1347556fd53fabf2dccbb377d3

SHA1
798f894c0dece03138eacfe5c512e80429f5eea7

SHA256
6bb6f9cad654d8e8ac4ba5723a04b22ae10b995a2d2e86e02494567b2f812a71

SHA512
4dae2cb7638ef1b35e12a247c09c53b39b10b53dc8f50819e1843d1a3db90950dbea416a096ce3db009442a3d809aefcfb419249419cfbea6a96aeaa2e66d924

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
978a62589a69feab533a49d82d98a78e

SHA1
060908d7eeaf1023c5ee189ab3b332ea8e5df393

SHA256
ae887376ba1f65213fa6e8c98e40f5f8bfac320c20f593e0f2445bc3ad55d337

SHA512
e0a2eb0fa7905f41413755036e5d449e8fb8094d408acc4147a4a8cd31e465bbc0a14351f76daf9d8c3c88e09d5583711d7ebf446dae057eeac68f166a12e571

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
f33cc615857ed5dd260882f2dda76cc5

SHA1
04d436e436f77f688a15326e799af3ebbd1852c7

SHA256
a4b94c6c6567367ec631c049dc9803bce20dce2a912e1b8c03c31a12e95a2701

SHA512
bdecb4efb54117f0572036e83bf65a086e44897654ab03aab4432e90cb3747ea66244fafd369d3d021b1054bf822db40f0b73a88c571bfbbce1cb086cb8b6878

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
295aa0391b30237fb4c3c606f08a5a0f

SHA1
56869d86ab1be46beebb85971f396646baf2afa4

SHA256
aed1057cc2d0ef1df88635454e4d4539fd4afbd60c051fd2c561043ebc768f4b

SHA512
95a76693f7130b8d71ae479841d427fe83dc341d4525e4663b1c5db4c77a90ca000d2bd648871c1bf7272ef6aeb3c0d8d56ed9f1304dbd91a3d5d239d13d420b

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
36431954e5bb3bc554200271c9e3c8fb

SHA1
1aea27070064c1c6dc7a35b1dfc5ea251a7f99ed

SHA256
f90776c463af632833a9ad03f7fa5f38c7e16a9be61efe6e513a2dfdc3b27588

SHA512
1e51d7b7ebf6adf20ecf4722b21cbbd69063f455661c7293e02b40ed930a34a9db6c89ce8d62f33efbbd027b691924f0426d6fe60219b6c291c2662d2a99788d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
7b3e6e215e9cf42c8e3d42c2750938dc

SHA1
e07e6e39f7cb66d10793f7174fafcc1b77342ad6

SHA256
a0ba9b10f935b6a9978ed5d36b04e2326bec117915dc3df5b0b98fd267363d9c

SHA512
bf299aa20d7a8ac3c837989b5b1d60641681cdae78c3b426a1266d673ed99d6494159143104586aa6d3684016ed1e187cc3d5deaefaac0ee675e8ad44219f0e4

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
5ed36990ce8aafb6a226309415b55a30

SHA1
f68f4516c7c109e9974c439e06bc2073cf7cfdc2

SHA256
d8a483127ca4c6e0e63361dee7228a222df563233f0f4bda89ddf3ad01345983

SHA512
e9f47a5976a97f5ba91a4dd67bd937af550c833434308ec320ddd163aef63f56b5f8152fa489fb9b558a40ca8a007ae1622cb8b0bc3b0f3dbf06b32564be637b

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
b2f2ba1ba83e1a4288cda7f9bdd6e734

SHA1
39e7e7502ab2e1aa3f16aaa07d653f253df6b8a5

SHA256
6627e6931e0202750385c9bce8e90584941a0440a78429a932fb7ea5fb2217ef

SHA512
5ad9a860c876976a2ae87073ae231d4bdce67691dd669ee983d150b1d5a696225450c7ad52831878275182d087d493858ab3d7d911fe81a6f7ba4707a524812a

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
3114eaa25b26830eb9b4ed0de4f8e899

SHA1
dc34f83de60a646f4d1db0ed7185efce59e10775

SHA256
0ec7598b8363ee95d15fc70f2b12ca148853ff30e2e683d058f9143ca8012941

SHA512
4358250bdd9981f9a9b703cf4b132b2e90b7f7ba31ce2ce5371cc518a3d556a42252c0fcd4b44984108146d6299aeb47481288543034a073bf22e7923597f7db

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
a529792eeca3a3a42b01c5e2ce3d0f45

SHA1
a68ee282245dd650ee6d19677a1474bed49d5a8f

SHA256
0d68a6d3fd936b8856142ae3d344a892ce51007ac7ce9194a0a3dfd081517c16

SHA512
27b4615cc8e05759cf945da24da7bb31b85308bbf73f99ac68f5f9f3095dc60b277a8d4fe9055bab6641cd159b4fef457ad70882f61f881258291fb57f97e4e2

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
05768033f07e6c587d354705c684264f

SHA1
98c5e37d646d650644a22b9aa3e87200dc87ae77

SHA256
0da906179155cfc776176ff84c42ae2fc607f00dbeb9706d4ab11ada6cd83319

SHA512
9480fe1bfb3731f40793b1260256cd41ec92e9ee8f18f878631b2e744f8a5ce805cbb8b8cb41180f02ea1ef7d91ef98e773575bc11152044406e208786d8c0b7

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
7825702d184490505606e86b18eb5953

SHA1
a6132b5b3a164dd79b92ee8a945be4354b00dd66

SHA256
c67f33eb49361c7a0eba437d46d6ac93463d5feca028cf4d73d2e5fb59203547

SHA512
bc47dfc7db94e910c07a15843a2c1ba6076e27c10776a8b6d87d2ace933b00e7eed09185cb86416fcaaf555b438101e18cbd5dcb1cdd18cc99f7cfb9a2370d42

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
4e5b4248c140652922b5f85eee70ecf2

SHA1
287c973e56f726ad65ef4b6e7d439ab3303f94f7

SHA256
b9685b91f3c256f5cdf7422145b933a6078a62f9fd0ea517e5f21ffad3b01aaa

SHA512
b5e3e287975fbb19dd70f7bcb3a8efb6b2f7fb723feed7732f7d93d4a25bd8abcdf30206674e0228e957163d028f572969609ec7dc9bc94cd3b0b1c9705fc04c

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
c2d9f65ff07dcf0560cc1114b20d3a01

SHA1
3575624456a0ddcba244b480e2c9e073333f6f45

SHA256
cf09873796253cb6aa66425ccc979bf3aa9ba9192cc9cc04cf400e70facb48a1

SHA512
da6c20406cc324061bf1f579ea09470007db4e4bbb5c7ef09cd757afc8cee4fca2c48c8126502329f2e24e6bfa4c66668065170899221f4019e70f1cee417167

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
eee35f7cd867135347310f07e9f4e423

SHA1
8eac867c61eaf2e01aa433329665d153a96d7400

SHA256
81d1fb91edf717ad58a13acda5360dea5d02b9a05e455f5463a48d684d8f9a18

SHA512
2ce4b516028fde38c131cbb851c0d4a1752095bd7be33c41bcafce83ab9ed23a889b577677ee43f8d073333f427bfb6130937aec52eaa8dc94f40cafd36663fa

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
3a36c8d46b3f05a2c4c2035ab0cde9d2

SHA1
8270aa19e50226a92331dcdfa678a5011701adc5

SHA256
4b07293a7d2653ae2d9d4694b28a84ed86d533a30b0f2bfba7aa98d47e9d931c

SHA512
7c1ae95a2f58075cdb01ecd9b606ddcdbe607a6c16ffcb4df8257f7bde318fe34ff1bb5cc752bc5016c3f419a3de54c9feccf8f97762bb060e5735ee6d2e418a

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
f6f3d9d9143a1a2b7420083fbfb16788

SHA1
2ddd0bf5511fa97f3a7c11613b10d15437329025

SHA256
f0b22db5f087ddd3b225e2c34301fd33a6b911eccc9fc0000409eb426f2cb2c9

SHA512
d8c67a8fbabaae065b29ffc5fc05901ce3e02703bd45d639d9f66a1c4df318766b796b165e76d5784bf1757adcc536a63c3b2f199899f8a98a229aa5d915d5f5

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
23ecad8349a979d37a1d27fadda58886

SHA1
89482fd18fce392de7db4b81f6a195cb7316b94c

SHA256
63a55fb6682025816d1b01e5735aa7d76969b72243ed272e679ce779b1deeb5b

SHA512
e29f31f6e0da797f80be39d3d3e59d11e156c85898511f01e884b750e45fdede7d81f662045fc25447e5e4cdcb9518cf21490aa400c22cb5ccc51c8ee37e1a73

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
fcc53f08667494931961af96e55c7275

SHA1
9a395f882f097f8edb6f6e569ce4143ff049a9a1

SHA256
49f506abf6ef3daffe2afc706429a781b0468d5fa6f14b0ed34bf8b54b7965c6

SHA512
75b99af027461063d311bb6bfa7dfc0893cc063bf6a145e541a194cbb9ecf74464d033833cbd143461a9268af5500637654341cdf09b8d0e08dada173d4e7ff9

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
052731e9726d8710da66d6599afb16ce

SHA1
451d8037be28e87d65b1ab79f598b114d0341f51

SHA256
2a29934df62b6e934a3cb865d32cba1c85f0d5a131eb42cdfa956232c2ed0158

SHA512
25ad1c6c5c90c4d66f59fee0f5aba7527f2227849d2c50c4326df4399760f6e55c2b9ff9c19dc51677198c7cda2028c360cdb45d9d18b0cac382b1a3eb8b172d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
b1a292bc1c1652b07dfa51a8e13c04d5

SHA1
e4f7dd367e3ffa16418801d3c2be946bb1bcf0e7

SHA256
3519bf3cbe6537c9027277eddcf6071e00ccf434f544e9853435e677b30d1cd0

SHA512
b8525e067c91538c521f9f72fa6105736fd5c33829e32e77c67f4a3d7b02c2142756b69f6790f11777c7ea3feeefa102084dea054de0179b7584f85b6d8daed9

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
12bf6b2e2c77b4226689f14cc5d1631f

SHA1
ddbbb8f53580b35e792421e5ef6ca8bcf3a445bf

SHA256
ed172089b710f84ad6c0e2b563cfb91e9a726f3ae58b3f722860a2605ff698ff

SHA512
cc52a5102bb158a68b11cd0e8f018ec843ddf2c5723b1ec4f619ce62e4fa18b176fccaeab1e6bceb033a9e0554698ee0939bd565f117c36feacdb935ad6c4934

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
9b4eb8c9977e270ad9bfa21f0abbd8ae

SHA1
01015bf7997d7568eaf2012e39f0b5ce22e788f0

SHA256
0af7e8d81b586e29e0d37f7a6eba0ec7063ef7805692f7942721fe9af9fc028a

SHA512
5f1e6ff318063db39ddf35068ad97394b2cf82542dd011d6c1b9f0eb0b01c84c8c769dd847d7699e072fd8e8d8f4eae7ea42160b5307999f08c714773661b9db

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
46fdc6ea6688535b3e712b3422e26801

SHA1
2c80d2ace09c7339117414e9a63d93ff223070c3

SHA256
fd098c3054f4015f174562031ef1e1781d4ad91a1496cc4b6c005e095d8ee6e6

SHA512
26681bb55b80d159a4b658db6ceb1ef386b4fb3a3235e4219107f515a590fb85c60ed2f6fcbe6ff20ed661965e6f0b2a8702e22817e2a2572a4ed104d142bfd5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
4d96eafcb40e8d739fe84b0a373eaed3

SHA1
265e3a7782567ba13d01065854593abd003cb0ee

SHA256
374b26c60e00379e4846d8c28ea8fae32cc8f3cf822b668ea34c307fa54976b9

SHA512
19c0568ffe7ae4479e628e8d61450ce80e46f541a06507f7da39c28311e1d88481a1241126b143d0b70e2f3692330da2b96eaa26a3f5860350733f01929fe83d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
873e430c538da12667193b3ad316756c

SHA1
d402779729b6feaa1376b524b8f5ff53b0bbb03c

SHA256
37c7eeda7fdfbb819633d34860132554093ec83a8a4cb2dcc6890b68b22206cd

SHA512
68e32ffec88f5d8efb6676a709c6a099530784d78fc0824b8c1fae6c5e23ae247e7564d63175c339710a6fc6cb6799134542e9eb1daed8672c16cd54a70a65c5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
ac1e5cc165ba46b601763ce8ff5ceb08

SHA1
da80a8fa1db6466019c1be92eccb19f531ec3eca

SHA256
9d04bdc9594449e159728741090aa1a24d6524b3d0c06d0a3c620fdd109711e6

SHA512
a8ae62239a06198ed0f3bb8b3cf3964f419be93af8d427de28f675ea6ef9aaa61899a0d12d8a8b889021db3cb1bb015fa8eb2a02cc26d80bc11350dcd46da21d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
ed3402f09d9af4f635719a73b62a6707

SHA1
4d8e15a87ad88eb664c0231bce963763314762ca

SHA256
50289319d04dcbbaa5abb8cd7b637e8880c11a31d876cbbd78a199ec012a6f7b

SHA512
6889782ecc5ea670da85d4845dde8dfd60c45eba0e91c258bca80692a13ee38baba5c29f68c45d4443eaea4c663f5e34c3bdc72ec7e0226a4138a8561e64fb58

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
45ba2a9c8d6dc9f3a236d256996ae1a3

SHA1
79808561a1d867b9501c8580c4a09532b504ada5

SHA256
53a21d863b77bc9b1b51955c3c88a3a47e8aa61a169ebd1b87e87b6686a1f6c2

SHA512
b784228c4127992dac78d5ac9f247e9febee2010dca78f9ee7827bb31012a1751c803bccb68430275dd393e1da36c819a386e6fb747b1079d04ff6a8341dd2a3

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
d77f21e2722433da10c38b6d436a0baa

SHA1
b746d58d665f544f7ebcebed24f78d793597b658

SHA256
b051023acebfe188e8bed57857e532469b1767fb81ace2d5df9e388d6366cc8d

SHA512
7ca54f1cf865083ad6be88d5676a29b2f169bf2dab3f0d99211b4e72ad30c30eb73f66d8b747197107861a043ade6ad3496c3b06b446e55f5a2613561c5af98a

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
6821f30e680811e3be9a3f384a33b6b6

SHA1
09130e5151d536bcbe8828c6263ce152b7cecc80

SHA256
bde9d80b2f834e481ec8b34d713fc34eaaa863ab254ef4bc8d3d067c6173bf29

SHA512
982e2a84b4657b78232d5ef541996e7934617e692372cbc706f0f792a93336b90b2e932f08b4f745a594245af1e7ec6eee274527a172cbb8f8ea7c39013056b6

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
69b3f71ae6eb8c943b6e11ddaa9b3576

SHA1
0274f883af4cbc4a441c9cc0584d1a3bce65fd22

SHA256
d5544a4fc199d334682a570d109048408a0b03c7ab280dc46d9d093f64ed28e8

SHA512
b9d34d0a47c61c5d247de9ce7fd264adde50208ac7d570138b68cf9eefde744b92adcb198304728b651ea1b30b114b3d3d9b61b7fb4d612df81aa7b8c8341699

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
c02e5cce6e3b9ca9cfdfa84ee50d1f6e

SHA1
c2b27da0be8c4f93ada6240725a7c7834874cc49

SHA256
0d821bad094bd55a3becb754722d7dd7e1f9e87c505b3d74e9b4ee4790ad0cd0

SHA512
22beb10bb273fffe2f4498aa7ff37d1bf8a5c848fa0213e5b029308b4b3376176e552a9abce2c28d5554e110fcd18a804953a48f439f70eaef5d966dabd5a74f

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
98f0832337366e7a1c60f656d843d090

SHA1
bd038b2e7d757dd81c4edac568c755dca44ac07a

SHA256
bb6681fd0ee02e3f6a0f355df18656e5a5b88a2920d890c6b79d908ecebab65b

SHA512
33da7bd8227099f5c21cc9bc938fbf7a417e5c6990191aeec45517b21f938bf0755f8386e31241240d9483ef1b8dc606749ae121f22c353f479301445edf470f

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
6d170b085be9e97dbad5957766170bd9

SHA1
6b30630128056320e88245d700bddb68e6c14b9b

SHA256
30adf7ce6e61ba5c323e8b8f4f823a35a6995575e38a555ba49ea8646403e89e

SHA512
5baa4592287f4e539e47df197cc4d2bb79716cb77a1bec755dc871c5b0675107fc1469a27ac5cc06f3684ea6c8c947c68a22b67722347b4d58509330da55eccc

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
e7fd235acfae0157fbb3674df12c78fa

SHA1
1b368498ce83ea3f03daa5f23858cd28bc54edfc

SHA256
2c02338ad62547a6010820d33c5c92cd53fa0ffe44b7e6ba8febec46f25f19c1

SHA512
a5a9e532871e962c0ae30b49e69081398112ac03e74de8d08ed90f447df6c546c78afb3d690b7707fdcbeda564bbf4defcc00dce4272270a0341937b37625d89

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
221fb157a5a34d972a1a4c3a38bef966

SHA1
ef438ad3ac38c7af8f1622cee0e4244b39eaee2c

SHA256
1a568928f9d7e61968eede50cfa30e55db0e1226556269bf074a2977c71cd97a

SHA512
313ba81552cf0db32623b8bc6ce72e5fd0ec7a0b3967c232c807cf3c04b7ef539a4e734de939d59865c7b263002103ba45f31f1c8dafb6f5279de191de0b4b29

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
73826b39b2a452d099d8b7d0b8ff0022

SHA1
f0b6c94e81eb5cdd0d65c2db6fd539181b392f9b

SHA256
33f9fbd4d0fea845a73221f7ad6d46d561498804df7eb6a23d7aa5e04bb7d453

SHA512
b90b697ece247ea124b4dceaec13a2964537d126ae53dc9f9a8c29c4c985402c890aaac15e4cd01d77222d4152f25971e3ab72476df787244192fe9c64631b0b

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
7ff801269720792bd236d45a2e543bf5

SHA1
5e6dc0077f52937960eede0753ceb7bf24bd4885

SHA256
c09dbf15096d7d79f1239ac8b2c5472b0f485b4c10623b51c64f90b350fd5f90

SHA512
9205591f69c4eac561170f452e65e627e43815e87dbf581e05cb0726b4729a0e43debef86c5c31c97dfbb26e80a395f83165ca8e07b9c0cb0d4c3a716aaadaf9

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
6a35fe19c3de1bb1106d6bec98a0a7a8

SHA1
f16cd250753c893a8b5dbdbbefca9a83bcb54ce1

SHA256
8f99ce42ea9eace3e975048334908f0502f42388df1fc17c9a22f7a3b4a2a806

SHA512
9572e37f7e722e4f34b16f32b4b12db1957c6e53713be8a0fc0ae9aca3966924dc0d5a0e5382b32547c8bde32905bfd66497ea1c2135fbcf562b418a9adbf47a

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
74bc5314a5ea0d43f8eef18572480677

SHA1
cfb7e1b447ef0fb0de6acbd9170afdbfdb615b13

SHA256
6a2e15b0e20ae06181e42e3ec481111a2745368f1d75da0ba2ef2f455bc269d3

SHA512
639534e392a89a08aa7483f729eabb513579135d506278b59812fec68c260c4172c9bda6b6df9d566b626676038fab67aec9a16e5166732b6b6dec4165c424ff

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
c62f6995005832d73d5b68a53765572c

SHA1
7a91a19e08826f6e83cf082364632c981bf24b1a

SHA256
e339ea59c5d1e575fad2d14ae9de4c2789b2896315fc9e6c4e05cca1b53ceee2

SHA512
e99ac815767f8bef3909c7529f50ef38963b0d07e57811fa9dcf643b69cdcbc44170c7c8d4938c799b924e596923b9d126e9f9446f0efb684fcc79ad87c63679

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
3973f552943081f45e448620364d1ad5

SHA1
07640ccb8849781e5e9094226ef1b7220acec6a7

SHA256
56a7dbaa8fee134ac8036a86fea25af160d62f712ec9f92fd59b21c8b930f63a

SHA512
cecc52afea56bd628f97f93c6a62994fb36a7bdb78aa58666cee35474c2852ec86d6eb523ccba7470116d41f90e60dfe0f11bf4bc414a4aeab1f1e4bdfba7e58

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
022b77b0f6ea7f759d9324fbb4ba4ec5

SHA1
e9c7f4e27e7c417d3523c5eb4b689edf1e0b7c8c

SHA256
fb999b156d2d527d26d1294f96f2bcdefe5ad5fd6ac6675c9d2d9e220b58fad6

SHA512
0ca00ff1b1515d0f64506d118bb5f4c42443860ec6138809c1bf6d748ca4fa4c52ae6345a08edaac14ef8d7a879a2eafc52054b259fe3df90bad654e8b9bc37f

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
052126737e91006c88452ff36f4a98cf

SHA1
ecb295539788ae86e123e23e49e4c573fa05c50c

SHA256
0084b7a6e53623b8a10e8fd16965e1943740d92de9c245dd32f4db5d37983450

SHA512
e64eb0be8bde0a211af7bcdf1733a0b102fdbc9cbcc2a9ab28841919a0d39c686b1e9f7f3005b93eadc7c4e501c94352693ffaff554b21bbe10fcc8b1307e10a

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
b36001a85ef095bd4931cc585fd4a260

SHA1
04d1f5357d9c30d20f65fecf647032bab604de5d

SHA256
e31e237a2e0befbf9e487181746760936e1cc01769aad1d2c2167976158c2bef

SHA512
39adc79f206eacdb08173350c0ab5fc32f73743dfeb1c95c7c9f8d0e14382ab88a6df5b19bde39223974cee984c48dde33e3a57ac85967d1090404a67b9ae670

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
bce82b8b62f9ecac65e61e45e0f9a9d7

SHA1
8a200e0da2c63a2ea6004f3b1905999b8a581239

SHA256
be510edc4411a39fb2fde8b4a141339f7a37cb4aae985477254fa0aa34ed61d9

SHA512
a85d405b9dddf480a1b12e79695a230871159ecf41b1623bde00ed4a106cb61de15fb253f6f1ff2c10704d32c259a233dd89a5eedd3766725a6d64eebfe551bf

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
ef14bf7b36681764217bba3240005cfe

SHA1
46f7b2e3e9bfea30afe7092247fe067b77da81cf

SHA256
1dc3ac87d946f83f63ed177b669980aabdb97c502fd2a061763b267168d34c16

SHA512
acf054fce276c42637e9d40ba8c055c83a66666e46f6e61620237b913d7a22827a59d47686d53cd90f435ef0cc22d8e0ed97a980b073fdb1d6e089d6740da73f

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
162e6e0095ea9a630e00e4dbecf826a0

SHA1
bfd3006efe2d287b4e609e035f5f3aef92825210

SHA256
31637bc05b8becd1b54a2adb700c2e63fd8909facae5871acf2bddf4b0256c16

SHA512
5d1cfa37f4b8411e9f6c0a5426eb1781d6e64b5e5aa55b8ac37c770bd736dbb89d09bd53c5cc03add10164b45d7da8afe1d6f581ec738d8b38180b5636472541

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
c7d4fc51e26469eac7b8c17409f28e28

SHA1
0a731856ed7eaa967f9ba90d3082771bc72c8914

SHA256
c7a4f515df929050182e633357072c4dd03e68367fccd7aa8bee008a464ae30b

SHA512
0fcdc1c0b3700ae35f52e4d4e1b27d64ee98533ccdf089b5a7ca4ad7791466f66ba96ca738423f9d0361870612a8168e685f320d91b6a8c9e9bfe3310929355e

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
8284ac890c3dcf4169c6db3d9a27113b

SHA1
dfc3318d764fd54f2e443ce8452df35b3494e0b0

SHA256
574ba5f12c21502781ad266b0c7c814c9e71b76248cd00dbf718adb6ba33a0d2

SHA512
7e47aa2409efd97671655239ccdf40a4ad306330f482de4856136950cb664f65693278ce9ee2646aa7d3deb879063cdd04c1272eb3f150c9d0f33a0eb2343cd1

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
afa277b963c989151df933f768463116

SHA1
d8f77e1cd8161e1af708932056e275d2c004e625

SHA256
38570e5f73a951b62587cde956401d4e460f0bc01bb1e25fed0b2714e7e2b5c7

SHA512
37c2b8e5436930176063f88da6b6c4285ed6d46dde0dbe2eec3a54bc39ef1e373d00983555f1cf47466f60eeb2a2c3404c9bf7a792ef7109df795bd3fbc83ef1

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
0adb49231c57f65d2aa9f84a6f2eed34

SHA1
929fdec5c4e6d340a981395971376989c0115df0

SHA256
bd0c4d594df008f9593d7ccbbc0507d0bea2184183f32df70a7e55489545b1bd

SHA512
9fa0e59c07d11cd7d85b87e9ddbd135cc706051e0b97542ce39a68bb65c83e313d49a13f4ab4fbdba987e8e509ab182f1618c009946a7ae32f73cfa324ad7902

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
04722f7ac286baff2dc14e7a1bc5c3db

SHA1
9673e28db83764e905f4e65b78736404458dc374

SHA256
b124495c621accf787d004c17f8562f85af43e67ec1b83b217a71f96d95bd9c9

SHA512
38d97198742a2cbd88a9db570c3d5fc4611a522a996c589151ad96b972db7039f96f4eb94e27b7c7bde4ea1dd960b62887b28d1e98b5b054b78b16c6accfb868

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
824a4e7c365e813904ef550a0bec58ef

SHA1
df74f894cb499c6619b148d3ebe2fae5289c856e

SHA256
0a3209c5720f3740b3211d63c21f4bccaee124e1ec3e3428f9f0855d1248e34b

SHA512
799a6e0d57c65a391ad4864b9644d4cf400acd7a4fa135bba5036f0acf6d6ee6ad72d1d97f8a6977633c0b3e855937c7da767328ccda1ab8d416a6e52dd8d43a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
d54298b1388324512d54e2736d436cbb

SHA1
0334c62163a77da483ca12af62af27c8879a1375

SHA256
d4ae613ef20e7b40e6fd1be9dc61aebf8515e61d61c5d7c03892935a277e7883

SHA512
2362bb38fb07aa61d53d489beb6892598a3ff433d9307727fcdb683d3b500351a1814d3899917f84dfdd97aaffc04d32e9d11db3abb3978dcab34736b9f2e042

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
1f85f5f61aa2c5a09a9a1520aa633d27

SHA1
380a46b1166ded2d74a08c3bb0f878293bef14f4

SHA256
556f40225a6f8c2adcc35de8fe9d124f0a7fc78287ffd7ff4f90aaf477a25fbf

SHA512
4def254ea5e00e1ff9d65ea259f05b1ee774d044a53f875656d751226f4a31c26141ebb2edb2916ed0888b76f050bdf0b3810b5f948338077d5d0cc199f7d5fb

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
8545ce2bad87348d0d506110735eca4e

SHA1
067fd0a2829fb8dfb206fb1ca8cf47f4a76d5f6e

SHA256
a64af118391d8498364ac8af2153c89c3e594f77b542ee7dd665a92fb10a0d02

SHA512
6c5e3df82452e1d2321b48039a95a4e8da880f8d05cfb6eec1c3a0e46299314e543235fa3f00274c361f848b35e7a8f8029d75ee9d411ac2d60b439a6f27ab8b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
9681fcda6ff8f594c3429070cd756d9e

SHA1
65f2ea4b839d50dd492ad6b264959c5dfab21eff

SHA256
e880f87c3b2eb79e0c1fbc717cd74aa144d0a42c424ef242a4fd1f5f4bec163a

SHA512
fe9bd6759adc9007f026958b0ced71fd34fc7309aa3a5cefc8b78f0cafd844da56d392b3f7dbaeb4b004577203bd345f6a72aa7353eac8d2c0ab1a46d112cf0e

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
8468d650ca074fe3eb6c8e2ccc979d3d

SHA1
f26fe15e8918cc8b6c68dcc7c31eedd6311ecc7c

SHA256
7c1f230667a7d2a3874d7e62b9da1f6a17d6aae628a376dd24733deb9831f34f

SHA512
1bfba094aedbaffbb36738a3d4950bb13f33b007e62ea6b13a00698b81d931728ba1e4b9ae9e82040edfb4478c3f7bb8fb97a16311e73c4dd8bd099defd8007b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
06e527639b219291e8c1ab46f143aa00

SHA1
c5a30d576387c30550b5e79a679e12ee592a5303

SHA256
5342798d6523c6cbccff64a3afa1b9980e8330330cce4d2cd52e994bce5ae02b

SHA512
b26223c977e62af8c62d8b93b8e57e4a2e33c8774c74640486757c178e9c99031554786b2be452730a5acca152ee7a29b8c5e8ff6b1fdec0cee2436c355f047d

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
a4c6759b69e068fa8646db90d883c9af

SHA1
f28698707251bfe83e953a7aa201b262987bdbcd

SHA256
6ef2f01889bfb05ae22471ab07804a2b4c2781ccfd62722a418f79df4b78b87a

SHA512
757dce3b581dec8cd14467b5bff26d8dd87297daeebed5f48ebaef71910c1696f5e4d8f0b3dd03215a872104113638a6024357b9231a6b5f1b337924986d65b8

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
e652c0d08c2a7ff40ce6891c58f71121

SHA1
e2eb048a657162eb3e9bc3592b91e6913851f0d8

SHA256
d2a2e7802a830af626ee4a2e6b0863f505ab9b5cdb2a02671c3304477e0c8f42

SHA512
33c3a92678aaa01e24d606d2c8c982c86c85de883ac86d071d1375b1757716b994fbdebc5ca9edd81a032b30f49f42ecf058fa524e92d17a2e7fcfb97c789577

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a554c9ab09c85e221c52efddfce49280

SHA1
520ccd1a539481da592c7fd3936c1cc193b939f1

SHA256
f970091da592aa7fd41daa7ed6ff41b448128c5f6b016dd0a0dda7f81fa8680d

SHA512
28a5a8a65695e68037ee6734a3dde9b920078467f47e0dcbc44ecd58e3bf546fc3cc097bab54bb9507e2986162884d2a0c117bffe6bd370477a7eb8fe0bd750e

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
776742c888b2b97fefdda6329a2f96a3

SHA1
e6e28558bd94f969a5c1c03be3c49c9f4caf0b2e

SHA256
fd1a3b0306565a2f7e1a4d8dfc7441c00a77f2160bc4a1b834d983cf355556f1

SHA512
aacf2b008388db7856f322b50f0b99c52dbf2fcde32d976365b6cfb7a50726895c61c1c131e27c600f4528c0e450fedfffb1ea86f9c947bf6c244a88aa01563e

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
d3cf5d5b6bdb0e2cec8092132f6e7575

SHA1
a71e7300ac0771c24e81a0092661e6a709811af1

SHA256
6ed634ce7102073821ee198c3b0d1a8bf4b070f6f1d567ed38162218e4652f90

SHA512
55c6f0c323bf210837491671150f10ada1dd9c8959a577b930fd13b0eb739450ec502c2767928aac3143e83253655e58dc3a56c7ddf2fdca7bb8aeff227023c7

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
d3d5c9484f5f4932dcd28e70fe5e66a1

SHA1
b4de39b38fcd14cd944aa06ab3cf19fe117b05b3

SHA256
2696ba50a0ad3522a35796629a14340570bf96462f2e42249998c2df518a2a13

SHA512
358d745ce36dc8598bb70994afe3d0b15feb4138b8d6394a653eddb0f8ec6283957d457df2e35e09e05b3ab5108d647b18d15f3bce0d6e20d352fef8408cc0b7

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
523e231080c453fa6a77a1e7519688f3

SHA1
fae222312c4d372ca5b1346fb78736c7beb56895

SHA256
99bea80397a0f361b9152d4cad7551d9915e65edf9ac772e230873fac5bb648c

SHA512
d5587c08a3e69ccf59f79b71f5c0877c5fd2acf283af53a4ceefb248bdbe35cbfcfa2d6c6e3939afe72534809cfd55a385cc5d6ea542bfefab59df2c54b98338

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
ed218c7cc05626dd2e10af94fde7ac25

SHA1
ae8c3257c72c0f2623a00031e3e82b16b7cc6a5b

SHA256
30487235f6caaa5aa7806e6e2ffaf273fdb8fdacf8b3689bba02adbf82045c3f

SHA512
21fb99b663c2c6b7a21f7f5e7d42ada1f3187294f5a481281bc14e19e226e35d49131bf1cebdd5648e4175b3fbe08e280f5ed0bdc1f333f856555a76e973792e

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
8e3d4c572cfff7752a470ad05b31052e

SHA1
515c2dbdcf2a53f8f2956794032bd1a300e5f552

SHA256
263de0f4b766e07d4f64a5c2ed12dde837a6d38ddf06293087108ad66291c338

SHA512
776b4f61424ee14e3b568363a7da2730743e985ee8afacd0109c9b1e455106ddc0410be2e59dad78a252e3de2a1e017107721141ac6181b1775b5ada08f7c73b

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
87c41a4cc2de65648236c28119c4d8ce

SHA1
30eb4a85d446adc53b1356d1c1f0fe5fa3934430

SHA256
54146245c26bd1de247a501c6c6cc06f1d75d3b9c99aac42f3c36212af042e50

SHA512
33688a7716a6048d003169e83b4ec746b5f287dccb6071767122268d753b53d63212d2b6844388831c3cdfd0f9e4556d45636dbc478ee7b6a97f12be82e3b4eb

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
527d071974936bf0bb0cc2ecf2e29ab8

SHA1
1573306e3192ccd0fae5af9498dfebc079db4209

SHA256
58e9fd4502fedbbb0f461e229b6dcb94a3eb71fc56eb7352ee75b46ad96b0e3b

SHA512
0ed8cbdcaecafc41891824a5d71d5ed2d8a6bbe29b0906b4e468e7283d1c86b389e5b52d1789c257028a9eeca94ce39b994e4b86f4d7bdfb8f66fe27b8b0ceb2

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
e86fc215905e75bc7ee862d2196fc738

SHA1
3e7c2ccc10cf09045e7dd15d69a02e0686ce3325

SHA256
ef0f457458ab7975eb92f18034a016d89441d540a6aeeee53899efd220074176

SHA512
3c92c774e293d958c229133ec2aafac9b6bcb2644d82f7eed7a523b40ecdbb177687d0ceada40fea1a36f03a53f7d318b669066ad1ed466b8cfefdb58cc8c89f

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
9993b786aeda19c1783aee85cffb1ea7

SHA1
a8f2419a2335334ab5299e053ebde243f863865d

SHA256
6c7fa0ef26f6c7c59f2e4d6d349d7dd2c8f519711f02d567845c333fbfb1a140

SHA512
ba78d8e54743f76cb34dc8ddc6f7c8c3bd6de2653feb0f2a2d4bb09b6a9396c9c199841a579b0867a2d255bcabbcbfceddffaea949d6e05cb061fc5e2bfa9227

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
afce651b7e02bf033d8c512bfd4fd134

SHA1
1ff64e14b70b33ceee24558c66409282a0086c22

SHA256
30ccf3660d19cac0a23453468183088666328ef96986e9882ab1057cde4e9379

SHA512
aea2d06ef793bf74607a48e65a42ddcfe302f58c25898be831ab953b2853e69d1740680bb82033cfa5867169bef151278800e119379a8618846b916c1b34a304

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
efd0895cee5d10592fcf47a462aef23a

SHA1
6511a0fb9779ad6cc670ede34e47b200c09d29a4

SHA256
6384863a71e722e4a7ad63f796f48c41739410fc2b3e5b86393e5696a0c2a2a9

SHA512
2370a23bdd6723a5102e9dc2b4f2ad42e6e803f41c6a462e1b91599760ed9347fda924da9118897c98abceb911e05b3841df0c543a4cc82d4149bafd3ca1317b

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
ebb094f1e2bed7ba9c1b497b02fc83e4

SHA1
a33f7e90918e98d29c328e046fa7ca813c3b08c5

SHA256
8c7ea767aaf221c7f90db73553dfe9a46cfbcac20d8abf09fe613f83304407fe

SHA512
6252a581773faa0c44620281a0056f08451c338c7c28e943c9552da004d5409ee166de3a885e3924ffb2a836cd7903ec45e8452b8b47cd6506479ca0609c77fa

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
553ff08f3208ee835be3ac05cefcf7d3

SHA1
6076b6991012b1a1309aa1d4a7197d853bf0ff79

SHA256
51bd2a399d697950d0741124616430225e5aebf11e5ce3bf1be98a5e36db3f07

SHA512
4c0cd7f40441f0a9c74604c36b9b139eeddbda4447c28c746847dd6a170c15ca3752e000a056bf6025f829c80a1510e503c3890dca4845ef263c07abeb5ce43f

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
ef1918fe4b6274a8e24acc58d2c69ebf

SHA1
d4334ad6edd411371681f1129e4e52caa3741667

SHA256
37a7bd404e11700e310258cd83dcfbc818d40c4387fac381f87fd416ba8e5208

SHA512
c127dd39e46945ae3e253401469b61ea99ac6863ee082ae411d5623e89049f1efcbda11babafb40a85f0d16620407493e41f242a64abbef20cb870835af73f8a

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
73a7618b4f0ac6ce341ace7be16b9838

SHA1
b557b3bb830e57a2ca3a26c788a6f02340d997d7

SHA256
1afda1567e366e1485c68e3cf954bebb597ccf6afb19641b7b11c145b98de019

SHA512
5487bcc3910e62e34a6a79ebec3ad4a186562718958f067964496e5149c559f21d1f8f56c111dbe5e6715449c75cb23ab5bfd65c18a898871b2f77c7b6a6a42a

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
21e006c657233d5fe43fc808888a753f

SHA1
7dc8701c7ddd619b091d045f7bd2e635db667afd

SHA256
fd9cc78952e398cf49db884aff1e4d4ae6469016df4bce7a66c174b93e12e682

SHA512
37d47a11d648f8ccc84a55aca8823addfbf4503fb991d3884eb2490ca786aad6d162e2158619affa77a55f101846e47c34863014ca34f5402f2a40a21c32bd67

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
b343b2b75eeef6329cc67e06f5ba421c

SHA1
88279c2a02f9634707dd83605f2d517ce5432758

SHA256
7aee76ca65c239865936709d025bbea8090a45d5758a2405f095b6c3a063c42b

SHA512
8b2a38ec2362a1261df3acace1286f06eedad772f49f69dd771ff18d48509b24b49c7a05a0f315c21e9327f51715520c4db8b9d74dec03e7ba8194c6a15cdd3c

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
56c66441cf40735832d0b32a7dd0c56d

SHA1
572c8db45a4201a96c8b849cd9cffac321be50d8

SHA256
a95980f02ce9f7a0de99902235d7668184ea33db514b95762b4682cb30e1f38b

SHA512
7acda8238e64787536549c61ff784400b75df89182994e9db6f9305dca8ccb0c27faff94df50873c4d131cb9bbe45d7012e383d80539bf0376ebc6804ebff655

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
85fa514aa5cabf55a4060262b3b47e5c

SHA1
7141dceb6df75409a6865a04af91353e7fbe2fb5

SHA256
b81047d609612751471e2016803044263908c8e6ab34cf1486fcb8d353e75b68

SHA512
bc0d040681cefa78ec1df8669c88181efe0495f32d6a8c6b7733561b9ef8e9277ee806342462fc973747f93b2f3ad2002b742d2121f4db0fb5a5dc06a61b3bfd

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
5873f311f7e431c2bfa316fbaeae1a74

SHA1
b91f4359e005bfc69a093faf5aac64ed78d30c71

SHA256
808aa2a6665d7aea0a3e872be54d87c5c248f6aa824728db0b3df70abf5de7d9

SHA512
03a652da811f92cfbdfb196fa20816f15f0fe099559fcdd7890c9cea7b22d59a099cb36a8e182e228f3d7e763611f05cdd7271c60f48367d356df31355f9ae2a

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
f8b1e165f50c24ef8a2c97fbfcfbb909

SHA1
06f2cd5cf7609642527e35f8c220e0d340fdf4f3

SHA256
cb4a4d2f30265472e82ac1e4e286298fac9b4c187947b60286803d64a302dbf3

SHA512
d49de8d76b23919a0fa86a73602269a5fddf7bc990cd17d15831655800f7c522834489470d83e4b216c68d13f7d925f9292b094a8b72f7a2fb06572ef9a06992

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
0f0307cf1c9fc6cfcb2fc490312285d3

SHA1
0612c8d9e72318775bf4eafce5acc8229ceca594

SHA256
8e54852f87ab0e3d277c27d24ba9b64cc29f6e6a7cb113298d76936e5b5ea210

SHA512
c2d7e02f8f1a42568e102bbe2f80ff19e29ac346abab3282edc446674648ac76083ed6e63f1f9670b26974e808dce8c5cf18da4c22744ffa43d60e6b392c3475

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
22d34803a54df1dc284387eda5d05a30

SHA1
3533d3cce9750bfad4481326a752ea2020b5e34b

SHA256
8792299a84f151904583cf64482ef3fb44a671abb62e8617f4ead30c7c6c0034

SHA512
056e6e2b063fcee06cad76187a61e2b324ea188cc327ae5eda5f74ccb8410c327735b0ced10a3643bafdbd8f894ceafad5ec17664d14e498a2f6b1115b75b6b5

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
7ea548cc466229b0f5428d69103f9500

SHA1
7f5f96a69feadbd44bfe1dc7bf7f7754e94bfda7

SHA256
201ac41f291f13ab00554c81c1d67c16ca8ea4f815814d47789590da36d79e3b

SHA512
455d763cc6a14256d2d3d28dfefbc0c0c5cb1aa6dfb4db18f36d08bdfce94a4f59cfa67e1f769a5643c7100ee931fb853b05427504847920bee240e2d9e78401

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
0745a4bf7318bd2bab1b2caf31403c34

SHA1
33336846afd252f0188b2ca23168138afa995c98

SHA256
32cbb94f94c8831f2c05cf503775204fb20e650bcce58a039c87061dd2aca448

SHA512
a8fe1791d82060ec38caae9c88afeae3a1b8836d36957293379659a9eb3d1a7db2a5ad2566eaef4a7cc9c1334befca32f6ec63f3a7afebb04f57593f774be257

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
7340c6072c28e0faf89b9c07d3cfbf48

SHA1
8d9589dc29ae8a82cdb2efa18da098bbe00e5229

SHA256
08ff72633255a0dad7767e3069846538288599639ac99363e5c17f6efe03f1b7

SHA512
8feb5e25495396cda07bee0521c0b96362ccd24c68fcbdebbe0ff68d0cc442a2b7a015fbd3bc1f4ab07e9e26bbf7dee2a407bc9dda802b2f7363b4335865ac25

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
3a4e668b68817ae796c7e0bad7725b96

SHA1
89b9db1e4f462d90d0bec70097fe9b482fd95f5f

SHA256
8046bcc5cdbb383cd90b19888960fcffcca4bed991d7878f071ae1ac9a4a7309

SHA512
70d29b7d79517b56625feb5065e80bce54c335437184b8d3791f76bfb37bfc96451e819875819501c8a17ea77455cd548548f1e09b44772355d4e05a044b18eb

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
2621f9a8f9f07f687975e0c3dc8d1d45

SHA1
23728ab2b20a85d8dd6d176ca75973c38a14946f

SHA256
190f97c1d0f5d23e0ba3ed04d3f0b140df03c28b1ef3775d82db78d9b1eb2546

SHA512
be4d4e14ab559e7a985f60afa0d20c1f3b3a8b5fb6367b1f8cf44cbef91411ad01a6a0df0b24f381481e51ecd6f866fa129ce45af27af484de74376546b7ac1a

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
009a914c46cfbdcd02ea913ae8207c63

SHA1
0ee1dfb9e394b1d6ca1e141c49831f5f7d7e5e5a

SHA256
6552d1729d55e5755c013492b4c1a8e044f5ee1cf9f311c745577ea8c3d163b5

SHA512
a5c12b918a03fd3c0b6a06425cda87931a1b1c31c684f582600f1f248fa7aa5468eaf8f67ee49bb04e163cee13ee742ffce2eba9a59389fbd3fbfc9c3c569dd5

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
68f970dea56ed945918621fed702c5fa

SHA1
b5b147e3b0ad9439078092e95401384c5e0464a2

SHA256
ddcd4b3fb5a6a56a385f3db294650c239cedf1ded27b558eb4b9fbe89c93ac2d

SHA512
479ed3c2d1fad877ddf963c1cb2c7bb60c25891d8595f6301f2396203f7603e08d54c83680671ba70efbd366aebb1a9031cfa3d1b5b9c53ecfa9312737e90587

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
25ad9f098d5d66b89478aec90d458b28

SHA1
e5223850930e4c437cbedea1d9814c6fb193fdf1

SHA256
c0b0b1d8172bdefd49041cf5231e5bfcc16926ea8ec3e08e7e6f038e93fcdaaa

SHA512
63397a030cc8ddd91d5a6a12d664230b4555cd9aa8c59d9ef7c511d0258e3261c9dab94c261dcf330b1203f4927c40ba3d175ffbe6c606c02d8f4fe99c2598a0

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
e184331e2ec7d121c525467a976ce2b5

SHA1
51a5274eb249d7a3b0c9838518e0a4d994991d53

SHA256
c7d8095edf92093e8943070271ef4a8abfa0312c1748f3c55b55128a8d7998d2

SHA512
468a5d9c0ebfee32781552174e97742304760532163268a957f7a2761e58b2ec4457dbb064d178a654696ec73fbb5da8327e3663abe5df37fce66dd64d1120ad

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
fb9168071d4f7b5eeb83a07cd48e6941

SHA1
1ad7c08e2116eeb0642fa63df75d23cb45b9b856

SHA256
8b9cc11a1566fddbbeb20f6d57df1e51f3114976daa307e2bb8d92252d4dbe12

SHA512
6dac04e5442c6f654e9d406327f1d64cd746d2a2755295a66a01a9fd2e90a02f9d4ff170d5c901acd49234adae96758979e00ccd0eb4ea5b8567a6a9305d4e0c

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
e5186e1e6a37846992efd8a382ccc8f9

SHA1
dec9010385f9109236f8babe3355e540e4fcb54d

SHA256
10f91f157ffb98a241f972aae3ec826f1251b54734e65c72e662901e7b77eeec

SHA512
6dabee7d32f5679e996bcf267d8204caff10c12cc05341b0de7297d94b1ebd544ee48f3deb4591cbff18f9263f57651ed4e251ca52bcd305d17011a4b9fc3698

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
b539bf1fd170c4c0ccfa47fcbf079798

SHA1
debd8247129e69bc4a1e78313ce23d402f265fd3

SHA256
fb1b49406f3c206322f2d2a4b3cd37349e5abac639ffda262749cd8c4126eeaa

SHA512
94f842f0ea8c29021bbb39c4d673ce355c9618fc2e3329c6b31647be9301e93f8aff67d55ebc54a97ab2a3b15b44c92b8dec82eaa63b29327832141d4b4f315a

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
e3fc0594a9f68fb8045cbc4712689659

SHA1
5fb95b54f8390387e23466051f602012e4c9c8ae

SHA256
3c4a8cdc3350c8a1650d63908281929d5ae7dcf9658c68604cb452f50a629193

SHA512
c63e62a8a1fec301009d3af06f8217f6d07ded0400f1f8796c3c088fb2b9b3241f8ef8038b89217b86486164626ef429d5c61212ed04b38241b331212dd07a80

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
f076aef04493becded2ea75f071015c1

SHA1
5a0e32e31c8313892cd760108a1e2e7bcf9d20d1

SHA256
cb076f5413e2f8fde520b81369b1a633cc498f3e80da4c5171b6de04f8eb4e56

SHA512
8878b9d872d30683a2f24ec6059235dfc4250c75c2ee123ed9ebabb331849fb442b4a5348235ba82356003742f10b2757d7e3ab2b53dbefce964766813d5076a

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
cb671b16c34ff2f4b4fc720834e0c615

SHA1
22fab6aa0ffcc61ad4d027e8b178edbcc2c9713c

SHA256
4f17c59001397506cfbca1b14c2c345ce9257f3556a9074c38c761797af57f16

SHA512
dbc66f7c32d708b2a33e22f150722db4cccc1ce2e0fbc4789c73f4938972149fb1dc90871cb7ab9b4d36048a74e9dfb2d5c643381697a488657ee4f1a35c6da3

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
fa3206e0df93abb8cb58167a728fb745

SHA1
568043796a4a9ad0152a206c3936a1dc54be3a7d

SHA256
ac42b600084f1962e3dc4ecf75bfed3d3f4462bd7bd1f3f8bdaffb46d71aac16

SHA512
a227f2cf508a5dcb3612155fc5183024e401f89ced751fe8e2238a3f2f0cfe80ccc3560158249dbab739f59c004dc30f82f48d9d36191ac54d68c78a3ee2b0eb

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
c8a67f8b8ce607ff54e7ea29fc000450

SHA1
4fc728744bb78a8c29f05c67e067d3af755c9cd9

SHA256
9a0cc9b664d21fc01f93ce946d8426cbfe4a38623e2b6fe06c967291fc9840ee

SHA512
43148dce167a73b32b26a031e97ca75b8f7be8bd0391217d855ed7ae1feee09a9a7a4f356f30d054a9c157cf29d25b24fff321c96f01cedca86cc348f3f556e9

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
1d35820b160b265b0b5311a063ea5716

SHA1
025ca909a75efbd12f41372e20f05e15ecf54e51

SHA256
f0af25d1e9d3f63ebfa62e14d87b9c885863fd8a889279ad241e96f7d12a8dc9

SHA512
275ff3111a77c1df231056a3b45a4099472377a4389355d549af2d01f6e4a0643a412fd54d11140ca4b8f0cea0b9018fd7fed093487114d36d7a18f46d679542

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
b5c35513df7ef6fef4f7ef237fce3c1e

SHA1
1546690ed591b48da87a3e9e5d7d1db00ed3eebb

SHA256
3d1e52c7d241478cdb35609ef8f6eb7ec26cbefcd4db77e7e6eb63edd0ac0e98

SHA512
5d8efb4989fb191a853daa386b63b50f5abf7e6bf2699c74728b7168762142ab1a5e0c8ba8d5a2ee2bfb75081c5721e08ab35f191e368b35e557e65ff9c5fe20

Download Submit