0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
118s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2024 05:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0A6172B017F62EAA.exe
Size

137KB
MD5

b556893d6f0219bb98468f724aeb06cf
SHA1

540d6c29aa4a05564da6bf253fc46fc8793277f1
SHA256

a75d6bf3c8cf0fc45b368bd83200d141319c9c67033803a230bd3451a309edff
SHA512

3a9c8477dfec35af9e682e197c76a1c1e341cdd4f4c276d1c18beac9ff5b53da394eac8428e66921369a607cd75c2fb7e430466758df508d6974e59f7f901ae9
SSDEEP

3072:MLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hn2bIoKb:MstYrEMw6Bxk5zOFNtgJiCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 0A6172B017F62EAA

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11262) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation	0A6172B017F62EAA.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	0A6172B017F62EAA.exe
File opened (read-only)	\??\D:	0A6172B017F62EAA.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Describe.ps1	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Mso20win32client.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-ul-oob.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linesdistinctive.dotx.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-24_altform-lightunplated.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSYH.TTC	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\plugin.js.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageSplashScreen.scale-400.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\Library\EUROTOOL.XLAM	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\de-de\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Grace-ppd.xrm-ms	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\HomeBanner-2x.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\cardview-linkedentity.png	0A6172B017F62EAA.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\onboarding\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-40_contrast-black.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\System.Windows.Controls.Ribbon.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\TestResults.ps1.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\it-it\ui-strings.js.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\ar-SA\tipresx.dll.mui.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\EmptySearch.scale-100.png	0A6172B017F62EAA.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Voices\en-GB\en-GB_female_TTS\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\PeopleAppList.scale-125.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\System.Windows.Forms.resources.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-96_altform-lightunplated.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.IO.UnmanagedMemoryStream.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Core.winmd	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\LargeLogo.scale-100_contrast-black.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Grace-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Buffers.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\hu-hu\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\AppList.scale-150.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\OneNoteLogo.contrast-black_scale-80.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Windows Photo Viewer\uk-UA\PhotoAcq.dll.mui.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019DemoR_BypassTrial180-ppd.xrm-ms.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ko-kr.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-ul-oob.xrm-ms	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_cn_135x40.svg.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\fr-fr\ui-strings.js.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_~_8wekyb3d8bbwe\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\ReachFramework.resources.dll.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-30.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\classlist	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\HomeBanner_Light.pdf.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_neutral_~_8wekyb3d8bbwe\AppxSignature.p7x	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11811.1001.18.0_x64__8wekyb3d8bbwe\AppxSignature.p7x	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\cloud_secured.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GamesXboxHubSplashScreen.scale-200.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-96.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\uninstall.exe	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ca-es\ui-strings.js	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ko-kr\ui-strings.js	0A6172B017F62EAA.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\hr-HR\biobio ransmoware.txt	0A6172B017F62EAA.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\es-ES\biobio ransmoware.txt	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-125_8wekyb3d8bbwe\resources.pri	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\Accessibility.dll	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxAccountsSplashLogo.scale-140.png	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_backarrow_default.svg	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reminders_18.svg	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui	0A6172B017F62EAA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vreg\officemuiset.msi.16.en-us.vreg.dat.EMAIL=[[email protected]]ID=[0A6172B017F62EAA].biobio	0A6172B017F62EAA.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0A6172B017F62EAA.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
3152	vssadmin.exe
4952	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe
4412	0A6172B017F62EAA.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	4412	0A6172B017F62EAA.exe
Token: SeRestorePrivilege	4412	0A6172B017F62EAA.exe
Token: SeBackupPrivilege	4412	0A6172B017F62EAA.exe
Token: SeTakeOwnershipPrivilege	4412	0A6172B017F62EAA.exe
Token: SeAuditPrivilege	4412	0A6172B017F62EAA.exe
Token: SeSecurityPrivilege	4412	0A6172B017F62EAA.exe
Token: SeIncBasePriorityPrivilege	4412	0A6172B017F62EAA.exe
Token: SeBackupPrivilege	4708	vssvc.exe
Token: SeRestorePrivilege	4708	vssvc.exe
Token: SeAuditPrivilege	4708	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1252	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 4656	4412	0A6172B017F62EAA.exe	84
PID 4412 wrote to memory of 4656	4412	0A6172B017F62EAA.exe	84
PID 4656 wrote to memory of 3152	4656	cmd.exe	86
PID 4656 wrote to memory of 3152	4656	cmd.exe	86
PID 4412 wrote to memory of 3012	4412	0A6172B017F62EAA.exe	117
PID 4412 wrote to memory of 3012	4412	0A6172B017F62EAA.exe	117
PID 3012 wrote to memory of 4952	3012	cmd.exe	119
PID 3012 wrote to memory of 4952	3012	cmd.exe	119

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe
"C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4656
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3152
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3012
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:4952

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4708

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:2028

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:2720

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
1e82887520ced0dc830ba80f0b8eb2b1

SHA1
3a0a11b8aa1d51d29b1c115a09c8e1e51f81181a

SHA256
c626bc6e27111c3e0cbcbbaf997d8da7faef8f27478682af06e86fc3b34241f3

SHA512
8bd95c968eda9140a4db4f25b1e2499891cffa6ab6f6d622c36e8206e0d245b72deb01b4a5a073ac56feb735635d723d6d04418ae4bbefaff71d5d620d0d893e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
72408158fb72b83ee6ad4d9350e8a441

SHA1
f19968b8d3587e7c44f221a75babee3038df467a

SHA256
278c161b1c594c77b81cc2159669e0ceb3b64356843d4628475f55106bf84848

SHA512
ca1eb2df9b73b336f7cfb7af9e88b92c109b31acf85f9eaa176c84eeb3e73079b724420fce416a8b7c8383bda233e9692e6dd89d4a2d052cbe471b3626aa3537

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
1c2e61ea62e6dbcc73f2cb45072f5459

SHA1
d7dd07698049a7823618871d885b1f867418bd83

SHA256
5e9f7687a91689717f70d94be0c55379f0be6dfb865321de292d483c6ceb77bb

SHA512
ede292a57434f8d1e0b7b16cd3c328534be5998eb60cab59332ce4bc47b9b38fe467d0a83eec859313be83e47f28f3579da842e416820d4079d3a97007eeba68

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
76ae4725e84a7560958e44c7c73c2c1c

SHA1
75b0dbf98b537771d40c2eabff89d868edf0c418

SHA256
45ef301c3d3a915a5bd64a367cb0b73cae12073cf6857b76e5898f61845d2e68

SHA512
bed87e5c82d7a0c9c0eca9a7a6a6081a121b1b807ace29ce258cbbb9bc1c52ca09873d94d84d4283a344bfb3559b526496b05d95d3c6354e5ea045d2c52f0adb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
9ce147b98abd481b3a028b18f291728e

SHA1
9ccca3b27575a6aa7cf6a9bf5112e419a49d03a5

SHA256
ac3b582280710f95e2a44971477aadb6d526c773991ea24982467b4c166b1d0a

SHA512
d2c3b67aa0459545d643b650ef1abce7ed46921226c3ffb8fdcd8b3e2b09402ea40d116d7a66b932f8db7c15f703098d10935b12c8ed4fe82f17c6f2e68a3732

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
8b9338e8ff01a7f6e83561984ca35685

SHA1
612065bed5112c510da6c7f26f8d5870dd0bef97

SHA256
4289b7b3a36451775e907074ad1c29925ef6ea072d9b44723a1c78dacae5b3f5

SHA512
b4eeec0c4047e0fc923075b23f115494fe0dea167930d2e54a0a10317b3d9f03f566b7818872a6f46507c5b1caa11f89d9961e362520e65782c8a4d896c6a0fb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
997fb9fd1fea15fffe34d81fa484b574

SHA1
8bc9584f23339430f777308d9c96ee8193413793

SHA256
622afb0f6e96f0dd6e3de18855df5e2ca4037a6f98b73d3af93befd8761025a6

SHA512
d9f3dbe5968afd635b15aa657a44c2eaf3ff9e9fe4f5c025484607384b8d21de0a6874e9ecea3a0cb7aca88cb6955c49a35d05251ee9a0f0aff4e8ecd6d4b680

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
f0ecf1e202ad568a188121027483b4b8

SHA1
1ca3bd9896a55a0e232ca257f03e43c6af6d9f14

SHA256
698076872dc4a5e91ab2f09e26adbda1a3c0976973c698f1e95b14ae520df06d

SHA512
31671af4811a6d58ec69691c16a5cb4d0d6e4a94cf45021ab045ad78afa4b08a8540e6ba9b3e808ce0bd4f669f025baaaf9ca7c319337cc304bc8e6e0ea6476c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
e4949cb9941ea33524ebb3d0056d6faf

SHA1
6125233a0ea081ab8dfaa53689f4615fbf9c1a6d

SHA256
0a18c9bc396d5168a0af61a9b0fb403034bfa643c314c1af757ade45595d6411

SHA512
a07840480d16f20419faf343dca6ab0f20b7f43b1c42f00641aa5a31a71b00150e98b8b69162e94953e52d182cdaa5cc7f707aa7c93d4fa052b6ee2c366e7bfc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
1d750b33b59f60b30363a6016e19bdab

SHA1
38ef6047a7a46f8153cd6a1e320858b7d89eb924

SHA256
568130addae39a37f381ff44b0aad2bc09dc306e2a3d5ef85bae3673e183a705

SHA512
ede687572201fd24d3bdbb777195ac0c6f6064676b9a462814853c39520653599f75d62dfcb7c85e62d1a882ee9525e0dea6602ebba1b316c3dfc715fe895c8a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
28da422a9fcbcbc4d5b6e4509777ae4a

SHA1
3823e95361537746537c830c277d2eb8dab4b1c9

SHA256
c0c7f90ad58cdc5836c9c8ea6b1e89548656eff162f5c12563fda7a06b66cde6

SHA512
85d1b23502c94db4a813d4b293293d46d4506624e870d2a76a3d365a2f9f14a76cf48ceaaa30a8d6554a2ea902a0fba87b2d8792645307e87478e4f365886ad1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
e8b1c6e96d3fc3dc9e175a1af270ce30

SHA1
037d18b6927cf4c25151bc196c0fa12eaee58600

SHA256
d273973a25f55b66aee4383237eb42ce2f2814e8f5af6b8a474355f5db42c5f1

SHA512
ff9d11797ac4a6156b007266196483a95fed441c68200ee7fdfaba39f9e6490d0ff3903caa38470f3cb1587571e91db9b1b71eb5b2d7f9294a08d2d0e8367037

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
2bece39911ba997c4dfa5d51140f2b3c

SHA1
dd091e5335c8b9b60ff55872f589d3abd14f9c52

SHA256
e3c295c8e8a02efaf8ffb1d9c26f1c716b4dc9037e3f61c692d4eafba5510e01

SHA512
cebf59178769f34da0db7d048e5db202dcb8bc7151e84e3c6057719db9cce0811d7433d355373fcc9d0c4e5a24a48429dfeeea43e18de86affec94a5f5fd9a9e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
785a6f95d011371f9160b1897b743b11

SHA1
c0a3ea30b3a1d8bda4e859c30a27f78055e17031

SHA256
f3977f00a2ea6c490dd2e81aaaee142874451683ea5ef488bbd9bcb294b74a96

SHA512
99eadd0dcbc1325bbfb20438b6d77600cd990683ca61b2f9250494533370b53fae7fd5b645f95cdd7a439ec6fad6ce1383bd755590f7a4ac6cffdacb139adc99

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
231ef4f1e09ad88cc2fdedf6b4f38e85

SHA1
d61b39b2b55b52653090ff43992f3283d71759ef

SHA256
3e75f190f4516fc7d432e0d9d80726d508d9da8f8ca3aeb5262133dbe05cb5a0

SHA512
c05d2a66c191fd68ec047b48010020e7f5870d9a642de661bbefb5cf7c40db021299196efa1cf44c92904f7ee6ba8d496f61370606b884266772b40bdecbab50

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
d38a351df23f6314c3937b83ae983237

SHA1
9f0139e70610be9dc44e84b6c65e6f6cc1bce9d1

SHA256
4bc129e6d5f9a554f36b165bc2eb7575768584e142aa98bc115cf4a810636997

SHA512
aecfd1a8c4930ec5e4295591b341cbec9fec8b6741ea596c4960e379b22cde175a54caf914867d01616b358d8746e11dbaafcb68bcefe0a618e4605bc872f668

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
20fa4c6f7576a28726560c69ba27804c

SHA1
a2ef2b5af3135fb4655c8f6797a422e43dcaa209

SHA256
fd26b8e29173eccb24ff339a389ca72257df3c29b12fecc90746ce8b2ffc7cdc

SHA512
b1a7c2784c623bb12414b1a7d153e65a172109e52ae19ed6c3c5a4ad82c2b07b5ee65f93ab0b7540c953673283dfe7540b0a92e7ca2494df05523c2abe74efd0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
413af8eb74a6e63fcefc6f26b9ad2c6a

SHA1
3a74213182ea5367877174b91996cb5103ebc48f

SHA256
2699b5b4098d8a894eb5fbd9c2c6b056f9b5730d9d188daf582de855470dd5a6

SHA512
03cd2316fd271e8144008658e60b845f5f95fd6f81566304b16bb34987e3015ee19071953ee40ac027629b9ee0231b20423c5958a28c43ad5dd374404e3b4701

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
b280f232bad702f1ce728565552ef22b

SHA1
304870e279de337daebc0337dad94a1056f4b247

SHA256
3cdaa172cbdb4a7c208186a29e1418d40b94c1ce738de4f8dbba1cfce8c891bd

SHA512
352ae585d0a31685be2e352177dbbc825e77b1e00ee0b95df10ffaded63dd36e8ad0bb96699ae37dacf37f6599592d92aba7b97ec8d6afe8cd6568695defe9cb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
341ec65088d14baa8eedb9d954e802e5

SHA1
bfaa568ba02584839578547da246d1ce1fb198b4

SHA256
72aaecf3258d6e6c68eb5d9f46466abbfcd6dd6b5a33d518988044960ac437de

SHA512
11f8c8f4020493108c5b32f75fc05f05d0e11f09a14cf28b6048c024178871adda376b5478c476c42a384e505aadf7024022559a798bb199c8a2c9195f42d6d2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
eaaccc3aa0410dce6d366a1315f4b33d

SHA1
97c72bd083db9893be75eaedfb681535fa0acc9d

SHA256
1d51e60effb21cda820393392bce28124f4bc80824634b243e7347b462732140

SHA512
ac7183a1e7fee59ce0a371ac21c936eb12dfdb50719730a2efa72ffa2292744cee515d8b007ac0b394d594e132e38df33b673ce73d09d7d640ebc619739d0f28

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
8b7b8eab2dd38ddf039b4d9c73fc5012

SHA1
9ab800fe2cea1fc9763ec9b1b51ef3239ddda171

SHA256
b1daf56b98d040d907de9533d4cfd5dd13d4656ef86e87a43bb1e35ef98256d4

SHA512
a2f1c69cc4a1a20dc5dca51f0082851ea6d2a4c3e6dcf6c2e5465ff06b88b94894bbae7ba0c7e51ba991ce9b80d0cdd0a1acc60bfb0bfc2ae13938c75d898b31

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
07f885623aa7169848bc286d23788d55

SHA1
87d2c50b85f7da66b9e69e2d5c62e6844cf571a5

SHA256
1bb107e6db168956bacacbe1299d60085127ef1559548ea947e03f70987f6acc

SHA512
5df65b6b1815e5a68aee42bd7289cb22f950dd5889be43d9fa52c243f27a32ecc2a0034c8491b503e4c51f9db1a56600442689b189387e4b3080768acc81ca73

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
a7755211a14fce65bff4ef40664fa8cf

SHA1
34fed040fdc7104b4486b1faaa9f335419b569aa

SHA256
83a96f082656e5169c0ea19ce3d849f2307927384b563ba00b29a053af8b1ba8

SHA512
c0aff5f87d04ab18af65f7b11508e07018757c7f92d1d1d6773f490eea2302f60d214b30f556da2337266673034eb2328b6219e639f8185a0f48efbdcfa17e37

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
6df5b06d9861df8ee19f422c45e907f7

SHA1
952bc7bb91813fd43ba184a8f740058e4f77de30

SHA256
5b8e51a081562509606d8140a8ba2a87843f049c8e282ad265e92d2763618dc0

SHA512
7f48c6f6542231ac3f4ea528557967175aabf0027b3a8b646089fb01005b4f1caa60a98a09409df29b497f75973b4ddd0047980a79a59771f0d91b17126b7272

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
ca50eb44ded34de594e9471b1ff1f77b

SHA1
cda48596a1d5901eb52168ad8c2216cb7d95cc91

SHA256
9fc8559db8946e210e77bcb5a91c79234bf76a0e798f886d848a60dc00c4dce0

SHA512
65258c4de21ec6fe34128fdb3ee6f3703a7636c8247c69850e9427ec9601fc2101e7f817f6327f2d2797d5705d53337cc38c040c59160c7844df5004cee89516

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
b1b9c5eca65570ce6a578617a85a1949

SHA1
b880e7387cc60092142cea0a9152d48a5110ef23

SHA256
016dce20688b55216779d031a4593163009e8e656865d54ef6fc96f0420f75c9

SHA512
7425483ad75d55db1e0c95c97bff705d2026d2c34ea3cb4dab9271af95ff8aedf9ce339465143b54a774079deec6ac8d9e58bd4bb90377ee6131ee922b0051be

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
7cebc240df9e3e842ff18ed224ecab9b

SHA1
bd8172575e6110690f4f92c607906e1bb4db142b

SHA256
259b03b20fc957b80fec67fb4720388f07cbec4fe39980f877e2a05baf316987

SHA512
f4b0bb338f759597529ab5a7a4221a2df5f22da161db7beb5e0bb020f0167133d31dbce068940b1212acce3e674541c8bd0cd4ec9d9092c35d6037fd971dc999

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
679824e5318fc70f114df4e139c28482

SHA1
3f6abbe01e52f302fe9cb4cf547e92f86739d266

SHA256
c74ce35c90e440363e092a51926fb5fbfc3d6a0a9e3e1de3fba99dec74c61c8d

SHA512
b088530849037367e9b6bf89e9c9d38226e5e2fc948580f8c07f886ae0672c697f9639e8d7801ef67cb68da7bcc3ed8dd3a2bf443c071075066cc2ff56267469

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
fdb548ce9291a9025be1c9d87a37e0be

SHA1
8bfce70d12cb78796aceec48364756623ac5af97

SHA256
ad8ae0ab0cd8a93b63c006e7c788a4aacd9050c99af2caa955acd99f49263ee5

SHA512
83e22660f02b994fb9e46c5d59cf4831ba03f68b525c30dbad78c18fec5ad931840d77af7812b8b36620ce8756a35611775fdf847f5d56ef83f7a35614720b83

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
cefc0ce7fa876a2d153b20da44313b30

SHA1
b58a53258e547dcb38bc33e38b37e41573713ba8

SHA256
8ee15e3ab0a71165c5ef1ff32d0efa77c2c34d60e9d03a34cd0d5ffd24772385

SHA512
de9bb20d181243c89e876c6db65ed134a0c1819552e57598150628e7b6f94ebf071c9a641a3e88877909789925a6437203088de4750e34dfe581e8e5422791ae

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
f4ca5a8123f22cf9b3d96988be4f6dd5

SHA1
7e1761dfb78e9a8acc29afd48a18cee26bd09289

SHA256
030f8591bd21836b11f6ff788f8f942b6c181fabf50037730d35e3e71df43b35

SHA512
c3b5fe3fab3dc25ac1404cbbdaa4318f0021b4ba91bfa0a35b0e650daec8287c5613bb3b111e57391d712f3e0e5d29ca30760a0b369dc791f6f1b0c7ddd3013f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
35d191bb0eb08cc15b3beb0d650f1a97

SHA1
57e2e50580d6fc6a9f3416df35d211e4ee1dc151

SHA256
003e73ca5b9ad3708caf71d50dcdf96ef964cc9f5420de18a2ec5a59f216821e

SHA512
37cc841b7f7360dc2d7f99808c5b604cadc8ea103f645fea486cfa2e8e0a85948376ff55b0c7f658adb7a83d28df3c02a0f8d52ba87ffd40d3f88eca4ae6eb9d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
cfd218c436bae406947df28fb073acbb

SHA1
73ee33c6a2700060efea948aa17e23e79b54cffc

SHA256
e707cd13e4b8f7e6d7a8ee683d9510a463f4dfdd8825ffb74dd8ecfe9bb6fa58

SHA512
acb798227513678d4f8fb95501f3edc2d8fd09347aea4b3fa3dab0189431277c1e36f071ca05bbc432d32549ed2931c178ace1353bda88f403efca30587d50c3

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
39be383430ba6560e13992aa127dd381

SHA1
3ef9e091895976fd8ce742348f24d104fa2e2b8a

SHA256
1dc6a32b4bcb0f13b445806f9d8560a9f0c6be4b20b5abf123e595befe9a5985

SHA512
3e2d791dbee866910069465d0f2be45532ea77216af07476704123bc7a2ddd8f739b4823c2c997684ba81b23793d7361e7512cd7fdb8aa83002ce00d2415da31

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
2702f8584eca7a9f312b78a0b83aa2a2

SHA1
1b6d63e86752ed6192df6d82adc0ffa74a9cd0e2

SHA256
24a7cafba2dca6fb886c459474ab2b1666b3137b8db33047684d2455fd6c978b

SHA512
4d2cfa93333810039f3332d0d66edcc0b4f574496c41fd36fa8752724fe3a20f6226263fe9f3b1f1a187c9b8235d9e88092e96e795b11708d57bb98084bb1a0c

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
bcfaa613b80dee17187a6e92673eee4f

SHA1
efb3596370b990be64c3e40bc7e28d2a68e373bc

SHA256
9b02d759edd0c862bdb742de484c74b18f5c13ce689fc45053c2ed4e885bc43a

SHA512
f4d33b84200acf68f68a3ef07255809e46638b9162712688c06460beb25ef37910e65273bdb81e2bed273e129e28d1bfc0248eef7c1a2e2c46c79c5b32639da3

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
c0942f9e006e61a382e0a8588cb1cad8

SHA1
bac5c9b11893d6651370749a27dc663153b4714c

SHA256
d46929169f367cd0a8f1edbc49dfd533b307fd41d12ec8fa211a44705e8d6c31

SHA512
41ccb034b141be0f2187356c71ac3fc2051a9d958a2884c75583d882ceeac2618062193885783eeed86b53af83a5bedf152b829914ee34a57b36ac251e4702a4

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
f485de23b0d1ba28bfdeb2be78040389

SHA1
c71a7f087274aea89aafe87dc943087471577ef2

SHA256
fd7830437948dbaa03b39fff848a661ea6a0e3c3115e10d1ae13ba1b0347e081

SHA512
4a4f79cded38fa99b842f593a153a81a62053757810fbb22a29e5809a48ffe5835760565ba559bb4987d7a51e840cde0e20d2f868efdab89c7c60e4cfdcef826

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
8b8c31d0715a57a409b2ad006da8f53e

SHA1
8ed3e699754504b413b7a8cfeedd744d0987f424

SHA256
4a2cf9f822de51ef2b1277db52407cedaacc91a9be2d7853e2668e458f0cfa43

SHA512
b913e8b02eb8cffe2c6c91f7379745b408f4f6ba03c35bd498179aef3ee2c532fce353737c69872890cf999af2a746dc4f014beb24131e9cd7ef20cfa729e764

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
041a41ba5125f91a064f093e1967e07b

SHA1
c4ed5c61bf1516b2136af5512b2112eae142cb22

SHA256
c75f6aec483e84f2b659320e0be266715acc8eacb8bb10db12420c473813c74d

SHA512
2b89d8f3d733183ced679f3cb6783ff489e25fde912458157fcf111d41079375fe7406fd8e93f23eee36ef73682692e4d50906e17db55c765ebf9a2da1f62233

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
619445658f7bb4db52b9bda01e1a10db

SHA1
d5c5bdc39d092ae1622b8140274fdfdec19dccb5

SHA256
6c418eadb87f3c399e1b92bcc44f5014ae4ae9b3f90422c4a809c5cd16e4d872

SHA512
1840f19fa43cdab0c733d1cca5379be572eddec54ae6bb1ac5d4239223bccef78ff1d986ee3afb851d48d03d180c1751578da3743a78552a2b8d3304ddc9c2bc

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
6032f14d090c9f25a551e2a6dbb850b4

SHA1
eb49f40fd0d9ee114b47c8d428ddb2f13b8e621f

SHA256
7231e2f89cf33f8e9a7419df017e98a188b789a9a3cac8f68726ba3c1bdb2bcc

SHA512
e9fdf668aec63587c9d77623964d47c7622c00ecb1022c7c55274c75319d710ef901257edff0077087cf9065644f11a0bad98a9d0560de94d63fda3943b7c0fa

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
37a59b712868265f19c55f29943fa149

SHA1
785445965ac1230471ea0cbfbf2653ad8da0a9d0

SHA256
d4ae0a848ea6993ef79f241ed885a9a2a0a315e0303eb01cc10dbca9469d5acd

SHA512
bb8a5bb595fda0fbf4523c79b5c23e60c754bb96bceae3c47382a49e71d654163e3bb6f48a72cd55775082b15e12ffda29bd48679235e16b9af5c18af64aa2f2

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
677398850af71c390cd53c03c304d5f9

SHA1
a963fb93e73c875ca8073f884b4d9fb6ed39a979

SHA256
f9f91401c988bfaf56d369e4fbfdfd15b8ac03a2a8a50845f3e84bd7c59a5029

SHA512
33e91fbd099c8155708159396dfba14d6e8e43395c676eee31edd7b7066014b0c2faa83f5e2d84c8451cdb99fd4e7a51a3265be82965a820bc2ed5fd1c03dfda

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
8ec0982f556ee448a4d2996ddedffd66

SHA1
80853de2b08ddef426a00b7d0605a80501c1bc08

SHA256
252034c4047f7f551e908abf06eca64894804da9030c1df67454dd37f58571d0

SHA512
8b4bd7d497de4c303a61b6c947f91e5ef5a32a41630dbdefa51c08dc896c4727b08fb2c25b500c262a46ed798f44051f5e64adb1b4400e410ab82702ab5e542d

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
b974637aec68768cdeaee91843a43b52

SHA1
60b24288e3fdba59e4b60ff265e66ea93ec45f86

SHA256
aa5cb25a930d07059084f1dc68d70fa6492bd286ebdb0e4ff253c2eca531ab31

SHA512
553d8b14d066d26e6414b9c046b06f728ba49286d225338a7ad105ad3b1f9586eaa66b40cf8307a1dbca17ed79a5a5e116df1e7992a1c45f27edb877a2d25ba8

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
a817447c4a14acf90573c2a529add76c

SHA1
ad495be436a07ce4dcfc6cb089fe7ec017c6c5b3

SHA256
570f87b8a1208c175145f1473f84fc086806462ac66a8b3e0f5f352f0769c69b

SHA512
2c61ba7730737920cd8ab17dc0a2d89a55c2a7dd4c3d9e6cf25a11d4894b77bbf8befad78b665aca3d0d8cc0929c7d31ab85a5e6590d5383148c7b5d52f870a2

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
ac662fa30668e3dffd5e83a3eb7b1c2d

SHA1
b83825736266d502f2e835d1bf92c21e853123d5

SHA256
05e4e28d90b746f3e3bcd4e3978deed8fc4c6157c6b2077c66b19ff08fd0700c

SHA512
362fabb4420a4052d195fb3f223d25209a6185a6d533586da23f54122ad648aa708db3f2ade39b270ea41c4d7863326f3ce1b84eec29a98bf9a40b5da203d8fe

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
3bd66d740ad7efffdcfd31cf444d4c85

SHA1
a87456cbfccc8890885289b2be2a8645921ec4c0

SHA256
cea7fb4832554599b4b7507767e6807c893c2fe614784b20f173b526110d5b5a

SHA512
5ae3ae83a8feed7f43c0c1a262339c2626b1cc5c38c376d7cb0dd54e6c56fa76f4a82d9291c584cf59554df62749ef7e18d5d790bfac7b6adfb2ca6ad3befd0e

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
35e93763710eec5c83c293efdb1226e7

SHA1
5da29ecaf86fdb6cf82edc089bc3c5505bfbabda

SHA256
627a0948d553af216faa7f5f3a2422f43365756ce7d0c0db41288f17468ba0bf

SHA512
ab38843456e8808d2b27c897cdf8f6633e8e7233964709aa0d3d413094d63b9a752d13880a61d6be62ac6688b899d867d168f03de30194514c4bc0043288e80d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
b49e8b5276b82085e1b6a8b9c3ccac64

SHA1
ce33181874688e19429a27a4c581a97b541c0d19

SHA256
414ce8088c0f788285f6e235978ace8a99c1fb41d89f95654e7e464d0b5c259c

SHA512
d818a0d534713135bca9d9e5861beccf5e21590233ecf90169d15e3ec719eb7d75f5b924abb1b4f05c77c8a8ff07df3d976266ec0139be1365400b89b9ced5f0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
23e9b1b66fdaabb4b49696a7be6674ba

SHA1
c0c511c8ee00b4a46832470344c3f8c5e5112ccb

SHA256
fa1d8a8d7e818ba015f2a040e2ab078eaba67eebbe9566235f2e6e575cfb1c51

SHA512
cace1f87db0253afdb7abcbedabff00b841512f86ddf75319febe5e65287323c2fa898ea199d537acf4dc763e8cb6169f2467724726fba2179565325cd9c1f28

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
4f35eafc547345513c49fee3d129cadb

SHA1
4641f87abeb4e569c11b42c4afe41428ce23fd1b

SHA256
e43888cf1a298744be0a903e9413fca4f7ab38fa89586391d380247ac63a18f3

SHA512
fa2645d15e619e995420459320bd2b3a0cfa3adfa14e2db650bcc8d1656b71c55760d1d8c1aa651c01f753b86b2ce75830ed81eb01c1b8b321c1f21ceee53775

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
17462a5c7936b6b80c46f542927194f1

SHA1
a4ca675bc83be0ff82a698580200fa9488c24d52

SHA256
acadac2f567a02558024d2b2d19792160230063bc96bee23d510b868df9840de

SHA512
2aa499f984c7af7e44ed120c587290668efbc5bd7823d885f5374cfd9e895fc26193f859789a524ac01a2c93f7c379a1b5d6ce8d67cf50f1eb9bb57515c84796

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
3e35b64d1a56c0f79dff210682a500c4

SHA1
08ccdae0b2b23876ae739cd69fd29851c15aef23

SHA256
f0fd14a45e9d24c2445f19b1632685f5354e08b7c558169a824239cb4faef1ba

SHA512
8b194e96424b72d93f928d329cfecd2092bd4ca74b04c500c75fa9f7a2ec9852a66fd1a092270600d50dd42460f5091ff7d343485eb75d22fe29a3ae9b721727

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
dbe813729b1afeae1f63ef6cfd8cc7bf

SHA1
49c5cca06f055fd7761e8f9e34100ece0714fc10

SHA256
c432800ea73499881dcbbe89e78843944a23231592c7211a0120cc0f6176833c

SHA512
d3c24d63d6640ec04d07494528ea89e7e03834972da9ab06f346568ee9b943910e9e74b1fc3e4785b8b953c29e90c79a376850c1faa3a9affd76e4f4c5082f52

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
87013de3b3bfed26c76f97e05046f637

SHA1
1d21721b56fc7bc28e96bd8532f09bab154a1bd7

SHA256
b5450ea215477a39d203e44e2d579029c029567847d53c5857c3cd22b27241c9

SHA512
bb8d461a1282c5f148fffb3d80693fbd5d4de3372bce24e820d285e6e7d6953095b43a5aff64694a849380286690d564235f0381b50e297986cd6eb37c1ead2a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
26fc68fa42c39e12200c7046dde31b70

SHA1
3e3807a0e532f11c14ec2c06ec049cef9bcbc57b

SHA256
c257627ee62ced9a4ad17961b49e498d66c4b646ba67a493979cc2e6fbfb90db

SHA512
bd9d5bc3a5a762ea715f3163101be0fcf4add781094f72629a7edf677c86cd391fa8d892be08ef193b26d94e769baedcd0d2856d59309df90d3f56c52812507e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
d241a6b68efad371240fbf82ddb2b7b1

SHA1
a5a42354e723a58a64a5a41da34b4b3c7cb0df06

SHA256
51da14053b28e9a681a1b2f80ac7648b533fb79df48310df4f1b607d3c9c7179

SHA512
8039f966f28ed4959d2cdc33d54f3180c5aa8fd920a513e93262c4597b122dd1beea7249c77733a0e0772c725c7662bdfdee94b89e58c1892d95ccea743f00c7

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
2b97357b3b6240b8a6837cdb0809b69c

SHA1
228f685772db1ac048279e0e41306f785d46003f

SHA256
ffa809d30136bcd9e460d79019cdb436e0b831361eba74625f7be1ec4ba59079

SHA512
2e0d26e8e570743e76897b6fb0a793b363a8c77f891a50207cd20c86d88ff607ab7a00dd4b8fba13b5e51f9aa695d5ae4374c0144972460ced6bf3aeb1fe6db0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
15693dfed7a1ae8042c6af7b8f73e81a

SHA1
a84b41f7a5c336734d738f8957e820a6493d2765

SHA256
28ab9dc97881c3ba470fca0c29323603d51b2254ba00b6330098e1662c1ddc9b

SHA512
31d7b152c94c6faa2fb1fb73e4a363bda402ccc00a9400bd5d16e87057c84cfac234bebb5783c6953185e6ec006a0ca8df1e4755161e91edb6ccad167f990a19

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
a0d88ae1a983459e0020ba0e729d4c14

SHA1
1dd26e0bb2859d708276d6acfecf1097de1ce339

SHA256
475b27a4eb20b2a01a34d42381560cb847e378dc14b13c2e9eada821e8ca7ef5

SHA512
50b74dffbd237ff4b5f826fca947d598d874533ca84e86305f034dc56919ccda444cb024a8d4883a63ae2313b50d552c1b42713f1b83d1409822e67f4a178b43

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
a6838eda05a32c3005f1e7a60f566211

SHA1
a8eb5871bfaab737409c41790871630fb36dafad

SHA256
31cd2413343ed715286e63402c7a012554de815fda6597cff4e35c818f229465

SHA512
0f5491b45fd29e78ac0076810252c2128425989811f73e7d6d5c877723b28701dcbd8be6764c86bd53372b4c0d7ff037a5159216a7e59b488991391255b18d63

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
c338f9b99be60d5ef291a59f73f719a9

SHA1
7108343a0ff56fb251209d6e443d59e013bebb17

SHA256
da683dc7d1e775b28f5d2b524674d3cb1e50a5bc7358817092ab3cc87f31b8f1

SHA512
9ad60bbed5afd006d52d74ca3448bf563830bf440d8bbe032235b9241e4eb2759c3fb20ae80ea108c7149c9da4b0c6cd9625fb3885435766e62e827ded003a51

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
3c04f9eb3a0eac0e25a6238e43e50efe

SHA1
45de40c9f2f8e444881090afc663ef0b351bccd3

SHA256
e8108b8768366d54207244f0fece9000cd220293fbc45ea790ab09b858d103bf

SHA512
7a0a94a22b759e2ed7caf248e5cd05ee90fd926c9bc24e6c81450b0f80d6c81f0cb16629120178a03ebc7dffeeb3f83809200ad4df3b9be91f98ac59a3969aed

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
8b46d35e0f342f467e57c873b3fd6aa3

SHA1
d045527d44270e539dd2fd93ff94af57db030107

SHA256
3df779b15456a92c7719443d15c53a6c15304422d5d3dd8af169353fa5cdb3b7

SHA512
68cfa5cf6e210225a5a9be7a873f05ccd000d216357dcbf7613a621a02b86b15b4965f66ffcbd3f6f65f01a05e00f5d30320d935db9da73af7c740a756f46e59

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
e41d7d7c72b70849bf0e14700c425c3b

SHA1
d4172f8d24372bfb5e752c25a6047b6e109da4ba

SHA256
e25ad4238cd9d67ccc66cc3b85f6d44e02487f15ee2b7484a7307837ac7b8535

SHA512
e5631b06c78b09101dd8d056d5d2d3eb5e1cfe86821798d87832fdeaf749630ddc85317f654e11f1001a7c25970cd89d6a0b0508cddcaaf8cafe9d85b52fb382

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
b9e4a43056fa740ac2cf1feea95e5565

SHA1
1cf960352eac20565284c32fe8c38cf279438779

SHA256
0ce31f48049116faf257d93cdc44ae6975d03b35e504a2d99e4c8c39a257eaa7

SHA512
b7ac260f59e102d88465a1e27e5871ea9ddb6ca7108f9ca124c93144ed1e8d4da5dfe81f53f3f123bf4ebb2f8a374925375f642955306f754899066c2e92d231

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
9715fa1607e78523c512381f998e0019

SHA1
1b1ffe4e94f1655aef259e6b0ae64de356b5e1a1

SHA256
d38866fa4cc1ca8b18e86f92acaec713b51860e431dd7477b034cc3d340d05e5

SHA512
78ac3eaa10b514ae62d68d42e380113601f5408a146a6f54936c75d5818dd408fae8638ef2b43b848ccae4f7b71b29e99bc263c1c87b0d8b0cd65d4fdcc8b229

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
5f30c38e6f5303a4592ddc3d56e810a0

SHA1
4d2e6c12c001d57913230c774f3a75f2a65a7e86

SHA256
d1fc06298a205eb51c2ddd02424909b612da43d9d6c570c922467f56b2fb51ca

SHA512
724f14d88cefa1e82472ebff6da7c16c22f05314bf5961648e2a7655f3627e912ce059392fdc95781f185df21610657f94b612174283125708c9357295d188c6

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
ee2ce6e69b07205ec5469878cb4ad041

SHA1
e5ec7ee9658bc300049c880ffff873b28b27661e

SHA256
fd8e38dda66cb9248bef8c9fb93534d357b9e7197f5136c44248073de5d67b28

SHA512
106aa51f6b9a861b35ad46e694f2582cc47f7fe55206caacdf6f54fcb0a8808cec8923336bcb7fa0c3314c26f89ee10500d7d59a6a8be03737ae2469f76b518a

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
24a44fa73359ae30663e5b61c9f26af1

SHA1
b8561e8d7e113439871df25ff083e719158abe79

SHA256
30dda412ead61dbdf9e27ba85ba15eba7bc606aec4cec05a58915c8b56cf1167

SHA512
e594d3d0beaa1ae315e8883f1ae238e6a15839bc62fff1a7d70199a9561b02ff9d81b54e8b9a9d6eae93be1de7383a8ea1f16414f009d2fdadb2a76fbc9d6235

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
20511ebe9437aef2aaf4026c5406fc20

SHA1
b059b55c48e8a4ec948b9c0d44805579cba3942e

SHA256
690e234dd4fe6d634863b5df6ac5b29b124820c6a5598396f638cca9bc83c728

SHA512
6a9d67fc49343b3213c84062e374684f6d0797c653c975aee50590b733cf53829a6d0b0feafc6f936422b5337fabe8efd70d0e67fe4d60e7a7e28a7519470688

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
7e5abc6686acb73739eefbcb225d208a

SHA1
7a090ab98ccc84f870f7c44ab3b97d5c4e53a234

SHA256
4c68dd47ca4c91e3a754cda6a8240f39049c7cc7180ae3484286ae1ef0dd43ea

SHA512
fea0b698a8fe14e2b0f4b817d4d89526160d51cd85f40b62ec89e05d625b31dc0ddede0b1d0077e47acbcca4ab13b6c7c5adb174068453d9c59387af827854cd

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
589124a92e6bcb75cee0b5cc32976130

SHA1
240b03a6f949e87dec79e6b43e9b553f0954616e

SHA256
da9531c6bf76e9e1809d40abe6ed2127d24995404f520ed7d7edc2b456c8ba66

SHA512
a66be503666019f351341e70305328686b64204b06dcd07300be2fdb3d170d20d9fe13a4a149fe11dd14b57cd31ad9281681560c3682806ea1f4b031bfb7be09

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
e577a97a8ee768202352c3ed275ec65a

SHA1
f3c7f749f0e7fef4260ebfa3cb81de1d8dd91af8

SHA256
e5cdf00f28db8ff7eb274b61fae2ea389011e47f1668a122b7b5b41489c01558

SHA512
6d2448261c26c6d276b4aa012db4ccbd76da7e94e2b4ceb6adac3748ee98d8c9e3c47694e2c763e0cfb3d949195c0729ec85bdca2cb5ee680ed6657edfbd521f

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
3d7778c939148bc6d3a01ad5ebf11dff

SHA1
b146961ac0d0e303658912e58410ef4698658d56

SHA256
a0b0a24aa82921aa91ca1d2c5a65ed8cf8380cf7f7c116ff6fccd75348dae356

SHA512
520a021b65f07a3b3f3a0c6d87593f62bebaca8ea5b3f124f5830533d169cf06feafbfd528ca6b33773d97e62f255141f2600f2adef2fdaa30df0cbabaa21ef5

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
6630ebbbb0f236c69205830e23525f76

SHA1
733279e5a8599a12eaa7a3f02486d5ecc5def49e

SHA256
2f81eb6ba600dff1697a64fa86b6b47b878f4b9e251c7f0c738dde8514040cc1

SHA512
25966af136208af755e5d806e35d40bfec1a7640216b2a031417fa507ff7f9f6c4156f5138dcf170ef22cd0c8b129945d82203dd6b1342c47987e7c6111e4a29

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
5c64de06a67f4e138b0965351501c3ec

SHA1
34abf5ce7d49d60f0214c21ca3ffd0d7634604de

SHA256
2517847c3b2f330402d7f123058086e8af90a350cd0b075ff24cdb98d213cf27

SHA512
b771ad4823d0263b565cf87a2b925beca6cbbdd1f72554d5ae5d64a06ee117789eb30c89f305d7029d648b1efb3d076875ef30650c831bfa4510996b0db37302

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
0ae47969da18baa4b0de412e62f461a2

SHA1
635b93a916abe02fb4a234e383a4cf2630a9fd10

SHA256
97ff6cc0e9bf84c328d271c0eb1e1ae7e36e1d0fc05bea3ec4026a32360d6bfb

SHA512
34c9f9372d3e960df9b945e2acfd12be58dabbdff4edbe92d38e0ce65b28d01ee34b9239654fc1a2c0194e2c5eeb82133ce4e40e4d37cda913e2fd9ee3133a76

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
0c51f832a4e74fb0402f18538bcf7d35

SHA1
51e79ceaedc042373ea0112b4fe11fe2682a66fd

SHA256
a448bea12446800f33ac08bc267d7637b970587974ca26855ac75f7a958429db

SHA512
5321f39af5795384b152fe0f931a33477db85cf1792b14ad631ca4cce051ebe2c6e0b78f7a46767ee9a8fac5bc3bdd99456ecc77b4cb42b3c5bb03bb8a9a6593

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
71f1e6f0274ebaf50f45503fe0fb74e1

SHA1
2f3710606aeeadefa7b32d6ba6bb0b4544aea729

SHA256
1e2598ad98938aa4c9c5b5d42a61a3b541d1b22293a53a67c1830030ddaf8356

SHA512
b7753ba947a00d7aa03ff7d49772707a55be615d748be121844f4a81350be3b7b6ced76b80a3136d66f8fbb14b2ab032431ae4b94b863a02a9c9ea2d38bcb252

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
06b1bb43fb86943dc064cd06686e86ef

SHA1
04565fb1fa6459580149e97a57902824ca63edb9

SHA256
136926832ba633f12cdf88a97252aac52e6a295c3c18e9ce2c452ff6504e1eff

SHA512
74678c3858af7d67bc3d31fd89c394c87b8bb1bbbda0a9e2f717a02a62c93f24a93b144e799e89c9cc630b1bf9321aa58b6689fbcb18f029368be30335fce567

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
b6ab37475af257e01a493811607388b2

SHA1
c85e841d63b0ce280e7b9bb7a9353f06e8184e75

SHA256
5f8fa31b88d852c303e7ada6761af4f13bd30c4ee4df33f6090f031e39b563ce

SHA512
1338995869dc6b2fe1c001f755f360f5c37677cf96bcb1c6e7bade83e1b16e7fe448d054c370707ea21c4396cc0a116f6d4d0c29a75e5f60639a115d63d1437b

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
2e49f5af0d82793774b031c18623c911

SHA1
cae5f20a83ae7517e143314ca0bc6538defe9c0a

SHA256
d867cdc52a811938a3f70a1b4f30acbd516e7225e9a23de57c36e8dc9bff8189

SHA512
aa8954cf9e0ce7b09379dfcb939e679e09167263bf5c2155104c51d436b672293a15c2a82b033550b76dcc2445ba88cf4c06811f623b4692298cb78f9b9727f9

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
a5161bcd7cc263ce8ab8c1129401f565

SHA1
ae789456423efd45dbbd52059fcb70d7416bad67

SHA256
c9998ec26f3dfe727d8df16a394ec64c3c641f65069811b268734c5742abf1a9

SHA512
61986a3bfdd0c843e5495c6d60bd95034eed8181798fb8e4ef7a554f4a5f4de4dd7c21d1008e037d2254bd499eff324162848f8eb6311281daa0509bed92cc94

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
f5a1806102bf45b87e9f828265c5144b

SHA1
442b7016b09a5e042740078a901d5c3fc8a2841f

SHA256
8af76010868146213a565450c469f11a058f9815632414e136426cd8451d2791

SHA512
5f57ab746489f85ac0c7c91e85f9b2d8b2610501c5d2a35d481c809492313ccb6137860ccba5a63caf4258f6051960bc772fdcbf2c443531838445abe32e4f45

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
2fbd4154ace6c7ad8542e648d5d1c495

SHA1
64050643ea001a9098452677865848535a99c97f

SHA256
7523fc0261e23873f3cc13e080a1fe24788238a3f5c32297295ffbb93f081a3f

SHA512
e6a3cd389744e0d4b9494f715575390695f1d9c6ab7fc2ed22f6c56b329e6114968e3c3feaf2701c917ab79e08924509a15605308e1197bc0ca326ed618a49f0

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
2c6b14a40a92b56f6cc27c5af66aea33

SHA1
5a9b38e83e3068dbce57959dfc4698c214bd71e6

SHA256
e2d84e90ed3b75668543b147e0215e822be39e0c28f3ac7054599dd636a68979

SHA512
7817b507b4c7ae2618a40786a9d678067afe734d2380f0328598f7e15db914d7027f653d7ad7c8cda6a8a06a3634846654d761be8764a2ca6f8bb48f385066e7

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
efda4d93a8c261dca3f1c3b1ca498fd6

SHA1
e210e7061e13f192395347be41104e405d2c1fff

SHA256
6365394e15ee96f4301dce6463fd3523e8a6c9170ffd8dc2078751d8427c8c30

SHA512
6ec066a1a91ea78384ad69a7692f55356526daf1e856088ce3ca56ffeb6b6b1765771bf9d744e72c072464f0edcc22c2b8dcbe840eb26d5409dcd717b8ced889

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
8e8b22282659cabfef6339010205292d

SHA1
d83c2daf55e7118399a6f1ad8b3fd1c86fe5ca88

SHA256
8a0fb70c119f83c961cca7c77f28db577910342e91e1e33513f359518da855d8

SHA512
e9688267d38c550b493a30bdc256f3c01d3e1fab6d02a048d0494935bb707a99f008aa0cf43bf59188a768f9552f5bbb1355ca93fd209c3026fed35c7fd76bf8

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
1ce74c4b521f8949819143c35635a4b4

SHA1
52282a11de4f9d2f58055e787c5cadff81767acc

SHA256
e58e6cfaba6c5c252c43471a13b87fdf4b5692884117a82b02267c1acfbf6967

SHA512
9db5efb9fdc5c87e046fb0be50a580d9f4f6fe55c7132277db4615227e0909520d3cf500f46c8acc649b4d2dd17a7762f0fc17aca17d5aee4d4cb004e77642ad

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
e9df2fbb60b4dc741333bbdb1fc3b3a4

SHA1
dddad489b4cf92ffff62d02e553ebd6ebb407e83

SHA256
b3d49d07374735a5ec6b175e47dbdbd8dc854b102d974df8186fd2a99b41c039

SHA512
3e327b151f0d5ba79b9baea65133b62d7e024de44dc94d163122e31c220d997143ae6748b117ea619aab81a221d76021e8baa30234dc43d3e35983afdf49abf8

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
80a8d7aa560c4eafccc6c3a239f9215f

SHA1
0e9eea232c652f20383763c314650405dcd4038d

SHA256
5b1d5b12bed82d7612ce46668bce325df361714d6582d63e07239616715dab49

SHA512
956a0e76e3766ac6856d4613843c319393c9e8997b23b14950264b8aca17e083faab62c896fa20a42a0dc500239e14269171ecaff7d83db0676a22864d38cacf

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
e1ae59e3fa1d496708bc4f7763347300

SHA1
9648647ef07d57a3a05308984cfd9243bf51ea1b

SHA256
f5bd4b6c611e68c712e9ee5edeea3a677dcf5da746c2a6e2b5e65c5d3044c7d6

SHA512
cdb2832819690a3b922232d742f5ccba8df194fc07ba8cd8266830df743519ab9e31c5b59056c33c62101b8441ae7337e0747423d95d57f04a27d4425db28612

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
7a3a8500b11cce50a519ddc2697dc76f

SHA1
49670679ac2a27c6e8098d3b3f1dacc6fa408e75

SHA256
08fb36abf193deb8bd4c676b30daa167c57c8e6b4921a08b44de9f3a0cc3f16c

SHA512
2e8feecdd4572f1800828b7438205b361759b69188553e9ec9b4b0a940c58326383e11184e1c5b927638d6f8d2b2c76ddc68ec9e0a3a2f7f04554ce74925689c

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
237ababce37f47e108b3d5e70fbcbf84

SHA1
02f46203d3ce30e0f1a76d4caccc542741068518

SHA256
a548add6f16437469d0e1776c15a04455bf3bf4761fb9df696473fae9e2ef1ae

SHA512
6909f4f196ddadd8b0b2078aadbd6e3e5c5a8749f1e4b1068c7b77e9abe3e4535389f6639c340d4511b15a6c4f28dd8a3082f6b42f76ee75b56baaa5ac4540c4

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
b39960f81942eb7aaf9f79ab3fcb9b74

SHA1
945aa00f7680465e0aeedee90c08fa4b8f5f6df2

SHA256
48e97e7d5acda318f824ed2c31e73546a782bede469f0ab454ddc5d2b3aa3c8d

SHA512
78b5f6534daaf57d27bd1ce0ce865e9addb3854e7cc3bc1bc157bbaffd771c780846f08953e76e3a17c2e11d3c17b3ed4857410b6814303d5b3ed65d5cab3498

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
c436be67b49a7f2c072aa0aaa4b222a3

SHA1
e8c8534aa51038bc01af1ffec16ea1a4291fac6d

SHA256
e8adf4d9b8d00864d7b93b72e68276e2a6bcaf07d5671e379c81c5d409f35f35

SHA512
fcfd5e35103da0f2c631d743750c3638914aa5afeb72e5d18bd10b0b8396bbacf3b91abe07dc2dbaf23931ad013b6adbc64d9bd31b1c91a51d03a6c017505569

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
c4c419d31f0ce6618f97a0d1d9b4dd38

SHA1
49d8aa2ff5795bcd20f52db7ae7f6c8a5f370db3

SHA256
9bac926b7a28e59a92b7bc4fcc060f6199b1155b4f27fff803168e6ba1cabacd

SHA512
6787e1422baf3f9cb4ed7a479d658474b5d81a0dc240717dbfae3e5e057b013905823a123b81cd33b989d6d326d79da29733eac9dd499692241e47480abb7cb6

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
56f9bf8397b2ec396c924e4da065feb6

SHA1
3c8c371ab186e9b638ceba565ff4123825ea9e1e

SHA256
92eed14842981c5e3c8bc9697d209ac88a935e52b37fc3b63cefff82579abe0c

SHA512
4100ae166be5096ce8557753da663128ddf9cfae30bf6d24466a5a5e7ebdbd14f30e85938b0c7acfdbf478e2c712f9ea54b83a0c2f6af5b08a46f9e1da7d7c52

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
c9aed5817bd292a81abe1fd13f4f4039

SHA1
7b40ac79827a40b1c368d979b79a1efeb6ea5aca

SHA256
28fb62a817759b5ef7045de6f0e0340bbefa167651e24b61bb8a621dad8050e0

SHA512
6ebd58afa53640a882676ef0662dfdb9aa7664cf86c5249ffd7a9eff06f29d2866ee617dac8ce2d706c03bd63fec4d5efddcf4f2f61116dec169c4c6ac1f029b

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
60fec4430f9c6980697a8bb5216d1b44

SHA1
7cea058d7deabbb258531cf7edfd77292700890a

SHA256
6832cb1eb5f7762f71fa4ec694388262b902e1c9832548d2202bd96f62ca525b

SHA512
1568aa80314bc483960889e92a848231bc30baf380c4ce80fcaf6a853e2d8fb6deb433361d5897822b6a4568443fd03224e7ad2a40678a688d53ae76fd87c3d7

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
f08ad8e956bcb39cec47900667bc80a9

SHA1
9eedcad669c6f7e1fa3b7a3d87022a8d26972a7c

SHA256
a238abe7c9c14eaea298516736c63c592e48293bc6209c3bc4c91ed0559caa71

SHA512
a12b8ef86fe49947c1394f510f6a1cec0a59e024f2d39eb0f6628f1754fc63ded8dbae2deb056319f109bccc40cccc9582d70bd5b547aacf84ce7ade9bf6ce8a

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
95c6f474b397fa322b4ee6d7865f5c6e

SHA1
5e862a1dc6d4edfaeb9c0c287c34d4269cd54163

SHA256
72501e031364508c08de8ce8dc502ff9ee56d2bf0c9bc411775f45a6dfa6a7d9

SHA512
d22cec2543c96776be83a42f026056d8b8d8e4a0de49c183d9ee8f450ce758a01b2a00e8d001109267ed803c732c4cff8c4dd99ab545abb4e11d010f726c7011

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
c10b4f671403c3f4a7a5d1fdea352b52

SHA1
c47cda2c6368a6269f1ca28ffb42b2957807abad

SHA256
4a25b14f4462d92acdcbf8806812dbeb4007dd8c61de048b7ed54d0da8871efc

SHA512
b40171ee8ce94a50639887a9fb568be4e6e953f0d0ec46b2d6c3bba9f842028b357bd4b4e53512ef82137bc5c663583a5f2b6909b6e81729aa38f899734f4ebf

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
2566c1d18c861aa594d1972de03b6fe1

SHA1
06371a399357eb82bedc29dbf5717748af0860ec

SHA256
24975f5cd412fb01804c503109f21f047c8caea40c42b0cb544d72e547ef391c

SHA512
599792a37f320357a1003fa86257c0c86f3071f6a3051d9859e36ada1e00b82c6cf5cea9f87a509befa1a4392c8387b651c27a7b0211e102e0c8261b4d77a2f1

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
4243f3d9055081c42a42ec4ce6e6f0f1

SHA1
3b085b37fdcb6faf29165ae5c251b317c4ab8c1c

SHA256
b4e5e718ef8e9813ef555ff66231de887d14563031cc91cda9be669433e1df74

SHA512
fdba6535229f8de0004ef2691d3b80b657aaedcccac9cfb66593f58086786e0c318456ccc7b5f3ec887eee640cc7bada2041493167f8d070577f00b1bf548e02

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
648f9c8812808a68c46112d4df577cf8

SHA1
a620e56d1568370da8dd880ed2fcd3cf7b88e5a7

SHA256
5683f05c08da7aa56ea4c7c798428a13fb7a7a4d6a348d8d44dbc324bdb8fc4f

SHA512
6058de7ca42e6d0c373a693014d0014ffe55de8bfa5c032073b06107334ff254c01ae6d9581cf9bbc10390f96276fa9d6b4950480558b8c841c7d7d260b0d3a6

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
dd35a3f1d222bf09c6a3b8156b46e280

SHA1
d5879169b75576bba2e909871983df129d7e2bc8

SHA256
c7b35b50826ff6f7a34475fad007bc2268076268e52aa4017bb412eb2a7b8c35

SHA512
6bee718f6b36ff264447780ffbcd1d6cfd00c47312542e0539ec455082e55b31779b07ea264535712d51f4c2e511b2a15b447aeb6bcdc5ecf49980e2aca0b70f

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
f344d2bca36b8758cf594f3636b9db46

SHA1
bbbe93c32365162a4dd60d6a69c422cf795b84ba

SHA256
8915987a86343e2ebacbeffeb6ab68389524c77a1a75e30b57b728a8516ed5fe

SHA512
4e813a8b8e4ade66e36537df27dbb316d1466be6ac14431475f53a55a7dbb2b9bb3a1610beb1c3404fd5a734f269bf0b0d2ae4c1e2a11ee55f18280ad0b0bcf1

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
404f48972781c1a606e80a5f5c017834

SHA1
27e6ef652237afaaf417042d85eab3ee679cd155

SHA256
011bbf264ecd338f366af50db6df2ea360a790a7c7299818895ef2b9062e5ce9

SHA512
317e7864c7798fab6b602faede08d241916691f46a9915b60cdf85c5e1a6cf44c8299ef3f83ea894ee2ce6e6fab3dc52a9f3634269c2e01b0a451377508c4b15

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
ec286d1817a06e0a4434cede95a0ee03

SHA1
4f56ec4e38f6034572afc7738975933579792813

SHA256
1a96af18489e7192160c10d6914ff39f4797cca5c3e2370e28198b2cd8dbfbb0

SHA512
c9d9c3e5ed913103b621b902bd12476f4c8706192f31d8b53b229abb4cb94fa6b211ecdedaca5612d2106d9830952dbd307ad189ad82ee68f017bc2d0cd47393

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
81e467e1c5729cd1ec3531626be0bd4d

SHA1
d92d965097dcd617e452fb9bd8f0e80d0fa8a424

SHA256
384d33bbc6b238d1d9e87cbeda8893c8e66e3d31afc63c0ef1763169e1ce2243

SHA512
a8043812780d1dcbc9ca95d2dd3e241fc85a50de58049cfa100575145024af5464fc86601afd232c7c786a455fc016d1ffb71eacf61d2262131c7efed77bdc19

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
28d37f78de4c6f4408f5c9ac325f9ec2

SHA1
0bd21244f26c3d7170ba622fa964f4a462f0f4cf

SHA256
a7ab02dc2f4f0de48e747da3de56e78585788883f325d0fb4b28553353dd607b

SHA512
74ad4ad0f486cf6a456f8c0d89a85c219835decf5b95d2d4b1ddc40d678342a4cee722a3b55ba72ae89fdee4855cd988bf5519085ab7cb9f8600cc587b62d81d

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
8e0d77ba9f4531e248fc913e58a0320f

SHA1
29c144652507b61a1e1e1e495bf09292cb8db70e

SHA256
1d0c780702e008aad292ebd62b4697dc6117f5f48b9ad5d03b2dd583f0811927

SHA512
1724f0aa9e484c388b3d33a30f18262ede5e6331fd3a757658ac058f27d5b1e0a07bb6a0f0617634c4e3994a9fa1c412c845210884d797a57a26d73f533bed0a

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
4f47578e6a38d5984ce2278ae35019b2

SHA1
1acd0e39e311bf3d66253d041c739199357d6751

SHA256
6b27051dbff5198f1ebbb592642448fc67c3e7eda14a4836d98812e1e8d1bd67

SHA512
b3a862877a292d67645980911ed2329ce0048c00e8f2cf0f71dc723c8c78d3b3c0e072c7d140f3035388bc92e6c5b006b75e73a80e4dff0dba9cc00f2ed68c05

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
31b52c6f035870990b60890135b4b015

SHA1
40b6836c28a6f38f83fe5dcded62a26c7772c714

SHA256
4fb39573738e0981ebcd20060600c546a85502165a9c0c1fbd92b7bdb73f1d87

SHA512
d0a434e9c0024428058102a068eae3afa9eaca9a1aee409b6a2f47898158d4b2f0bc7f34ef138dd84bb73edbb021f62937f699fdfbf8c6297f936a53962a246c

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
5a55d5a5dad8a48d1217b8ca1a3c5327

SHA1
48531ceb54ece74570e6dff8674cd604a8d8fff1

SHA256
3b4b363b1d040d68db5311d56ac8dc4876bb7542fe2a65bbc5cf96d7a01ee371

SHA512
61a60f5c3ffbf80e27519763167acdac6921924d2b97e47ab54febcbb234cf79444f4c26da2bd38fe2ca4ffc05799991b12324314c580e398d0390a1cdb4893f

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
a48669f4b1b6636b376d434bd3ba82ba

SHA1
0046ccd33fb4ac2941927308d4e19ae9b5e91f06

SHA256
1041118f2e2252141db94356778668b7add6e1677542e49bb09b75c65a2c7f4f

SHA512
6168d24f94df7a3d38bc84aa05c740be44036dd70acc79757deddcece41f7bb8f810744f4b541bb1c950b40d9026e5bd8622ff3dc0c61a8e60b7c3c45a0037f4

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
01c5bf9725c80b198ac19a96a4e2068f

SHA1
dc037ffee9349f32e532208d0d8991b07012922b

SHA256
b5671d2898ccf08a808d749976e7600037900d08336e4b1f4856c514edf93176

SHA512
9144faca0f9585e153234cdaf1ac333ddf83c0bb5a95a7d3347cfe40b9503661dae0e70a165d5ab975f8f575341d83447cd324eb21d0fd66888d1f1a0f53f0ce

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
419fc23fe6cd201a155fbdccf50a7f88

SHA1
1daafcd1303fee7aa9c7ad8f5b0f63d857b2bab3

SHA256
fcc913064f39314c9ebabd3f641aedfb1adda62dbdc93f7bfff890912f4aaede

SHA512
97d1df40189aaf9c71ce68bec6d428485a5dc91b68fe77c5b35f1a39a9de7d2f8b01e2da655ff2a9edfb4bd76c6ec73d9d4f700a9d8b0a82d030760a2c079286

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
b38164e54f5eba1e3985cb6da56e1d4e

SHA1
19f2304923066c3213db0930a4b480dcd40ff846

SHA256
296214dee7664d4ec90fefd9d6382e55b96771d7c90e3fb3e62f079c0b9ac512

SHA512
cb6b3287a1a9e68262cd3654b2fde6846e6e3820d4f1e32b6bf6062b9cb63c681b1d64dc24ff902be269e810bd1747667fd39e8524e3978e48e8e8c7398cbfae

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
7945019e1f0f8da9aa6b6bd31623f427

SHA1
524746123d2db24017df7776174d7c900e7668d4

SHA256
5da43615b93d5ec34ed8298b2a9a1feecf567d5159ca4fd18417914464129c1e

SHA512
a57456d77545999f150ba42a0153b3ee45a7d1e9617861452e3283f335897a9909bacb97ae18837bcdd7874c2d893ed93bdbca5656700d082e6b2b79759d42b0

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
3bd7bb6d4e08c8abf41d61e37f05cf80

SHA1
29ac5f430b04d89fe3eed340aabeae1d43324663

SHA256
5229e9be3d6c6f752e46b77826cef07f6c34c825b8b0ce21ec2698f8d9cb83d7

SHA512
2b0c692a724abc4ee8dbd8be1d1e149a0dd543ddf9d1e8565229301f11656af7bc97574134b9e177fdfe3c2b8d0985e9d36e7b0046c7aff01f6de7f03c7c9c55

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
a9fe2560d7e68e64da6816b74ac4b510

SHA1
5191345249be404a738a38c41c9cfc1f01ddab39

SHA256
ef6b5de14e4205bb999def553b62e8125e0cb67fa6bc5f178af089b2113dbc65

SHA512
6d940ef3ad9da8f2d7fe887863a26054afa1a08cf8803b11aa4c703a824598fdb0e9e84371d00df2c216632b59832f589e2fcf2fd6ec005dd4e289748885505a

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
fc10985ea80d65f957011f643583e83d

SHA1
773986a535f3f9bbb41a2c341ff16701b0f9459e

SHA256
e18483f5a4aa87438d833ac09306891f3000a654cf822e91a06086e1329468e3

SHA512
5d4123d9ad9c4abebdb9969e839f83dc4e782a1d076c4baeeba41119b4a6c5adeaa0fd82afa15c4204beab10644bd013cdb0d89e97da33811c5d2718f43b9674

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
c155d881e3d8191e6a176b9d7530a975

SHA1
7cc5779d37ad0d65d25ff97ec283f1701637261b

SHA256
44947583f9464596155da3992c86a2b859404f35266c3aa584a544ad966bd779

SHA512
8e1b644093eb839e9977986af6114ec382b70a17f2fc5d15ebc49dedd7bd4f45dc9244ab5fa11800636b4209653370482dee437dd35b04351b94e6324dc745d7

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
fba83d8794301db3add544a026cfd907

SHA1
03dbe50472b3d8d796a7f28e422ea428bd9e679d

SHA256
cb99eefdd5b6a360ce362379553d0b50c4c7994fe985a0c81d53416102d88212

SHA512
2f8b6dd9cddca7706f2ef3fbe23831b7d865364c982a8ab9ec8068476dcc080525d90a2fa179f03d9a9312d6a28bcd5a677c14bfd8b26acf47346120c41c0421

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
e3b755a6bbda4d9fa27771001c1e1b14

SHA1
cbfd2243df6b2aa9130c923bf34c5c5e7f211a50

SHA256
8a604dff1ff472742f0e299ba22f7d2c5dc5d4225ac51203bb3d1ef544bd0dda

SHA512
cf36d7d7396c69474f4d8de066b38cb7773d4a1ee9a687090e2eb5e3f64c0d16939fb6908de3a440b6c7dd37e72e2a6b47c26e08422b832f6c43dc82bb7ffa66

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
33f958263afdba0941ccf731adcc3f6d

SHA1
886a4fa29221596f1908f17c7fcceae1cb41884b

SHA256
727b318dc394e5f6950765460ad37d6e9c3015a6dcc127283aab6fe22584eb86

SHA512
8016ea0c6b29ddcd1b1847e24f9f101402a8a921fd6390d50729a1c49b27c7cdd2cc2056a57ca0b1ae3ce136b8568c89e3a8878ea07eafc5716655a30d4a200c

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
5ac4f393fe1a9f873fa7fe71d29a7b92

SHA1
ce2dbccc656fcfa9ac98b901b0bdb8fb130e8f7a

SHA256
2f594708a5399fb71a7fb6214c133ea7836343c5fa8d6d7add5f927a923ac16c

SHA512
f099dca23e871312d7ef922560d4dc9df45a742fca0f1b21aa79de915adbc0385780207abae42d7633f1f0cfe50c543244609f218c3a03e3b5b565344a31b417

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
fcb0b7b4c445f18f02fc8e9337452ae1

SHA1
ec5f647843e6665c00f4839e97a66c0c067773cf

SHA256
5d7d2dd6737e0adf0478218d40765ab11ce5bec1f307a7d364639e3d6c2b6f66

SHA512
5950d5fb064616d752318bd46980531733cf4a1d588b1206bc36509ae2b014255c0f107e0d55dfe29a7c46fdbbf77da8bf31d158630c86d49387d12dcb0f1d54

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
43bbecae1b4c984291e7e9ab638cbb23

SHA1
5577deedcdb2f22936e3bb4eebc398427c4b683c

SHA256
662cfb7beb276b43ef25fe16e25396cee5ebc0514d152407e6736407b6abc575

SHA512
4d09623bbfa4a03d72e6e4fe3a64062d09205da5bc577c4b30532774c8d8f95b04a53e0efc70b79e8804428a4370cc14825f2fb9b6b1e1736d6c74ca13357f78

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
9218eca3fb0d18f03f6d979e42810faf

SHA1
83e0de83babd30f0670823a21c936c21652b4fae

SHA256
540d2b537f7dc30ad736bb01a6eb2f917d71b5e6dfea46ef2608eda06d11b35c

SHA512
aa6f9732da79108ac160be60609eeae206f6f4c1226de8ff94e54d93d1ccc4491dd2ea9ec5f935fec9126a291a1ebe528e99d01adffa07f121efe0522a7d51e8

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
63b246e7f40f223ea6cd934c9d1dbdbc

SHA1
119d9bf0fa5a49fc739dcacec32dfbb4e3147d20

SHA256
cdc806b66e6751c23edfae15d457ca867dcd12326ed4a34c92b4b91182965d0b

SHA512
7a1ee8dd8e946a67cd77d39ca145619f62781b30358e7ac872b8c8794c204164879384e9e332cb927142f2061f913847785f975f3f3205a4b93407d5897cd994

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
a7cf708d497dd6e922f91d33d14f7600

SHA1
5e4f3f5817004eeaf4bc14a0168d86ed7fcdf6d4

SHA256
20a5f1f3bb4614433712df1ffc67273465e766191502b8e932321f1f24fea65d

SHA512
d27a32dfcc0835879ed45e221e9857c1165de03a859980f0e29ecd6d5877d832577f7d6b584aa96e24caf7ab7652387d713ef2293412bd10b6b65567ed0bcd42

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
0a9646d4b0b3e99e21457d9672f53292

SHA1
b19453bf729cdb1876f0adb579d576875fc18b9e

SHA256
e26bbab17d312fb37b015ea37832783df9a40cc3fcf21c14be230317ab3d0ca7

SHA512
1e59bada4a5e997d97ceeb22f158dd40306934e7eeeb402c11b8e76cf519f23048c66df5856e8f7d712e0fdcb94f1fdd0e4d2048e94ddf86dcf055b2ea1ff13f

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
cc00ddf502b55b40b9df7cc5fd15a81d

SHA1
98a51b799076c874ff0ef81d32773e84917a51d7

SHA256
997cb0058bce4a8560846b48c5cacb9f2236aa23db86e94edd7ce7379dab1b56

SHA512
5829ebda112ddb90505733ae24351f8c1ffda97c4a9ca1048d715339f9cb79d56512aad543fbff0afa7d904c04600448e3078ba0843fa6318741f8e23fa0758c

Download Submit