0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
110s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2024 05:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2891E1D4BAC70EBA.exe
Size

137KB
MD5

c04dadf78f2813750900fa54863fb2b7
SHA1

8575e9d6f980b53ea13c37053aa2d55691bfe3e0
SHA256

207a249e3c4359548b9ff264cac31d09c95d626d0e4835c081d8afbb732bac4f
SHA512

20baf3958a55df7fe0196d300809afd2c4d4408c4e08db21f5ed6a1b6d21fcb09eea081813cf2b5ba60d745f745db043d2d2d9132da3ea565306402247b43372
SSDEEP

3072:GLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hv2bIoKb:GstYrEMw6Bxk5zOFNtgJKCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 2891E1D4BAC70EBA

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11288) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000\Control Panel\International\Geo\Nation	2891E1D4BAC70EBA.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	2891E1D4BAC70EBA.exe
File opened (read-only)	\??\D:	2891E1D4BAC70EBA.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.23.28002.0_neutral_~_8wekyb3d8bbwe\AppxSignature.p7x	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Windows.Forms.Design.Editors.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Audio\Skype_Dtmf_8_Loud.m4a	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\System.Windows.Forms.resources.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\XboxApp.UI\Resources\Images\star_empty.png	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\contrast-white\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Windows Photo Viewer\de-DE\PhotoAcq.dll.mui.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.Resources.dll	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_2019.716.2316.0_neutral_~_8wekyb3d8bbwe\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Common Files\System\ado\msado27.tlb.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Configuration\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\javafx_iio.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNotebookMedTile.scale-100.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-32_altform-unplated.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB	2891E1D4BAC70EBA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\css\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\LTR\contrast-black\MedTile.scale-125.png	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_2019.125.2243.0_neutral_~_8wekyb3d8bbwe\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\ja-JP\PackageManagementDscUtilities.strings.psd1	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Windows Media Player\Media Renderer\DMR_120.png.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-60_contrast-black.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\api-ms-win-core-console-l1-1-0.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Reflection.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\ReachFramework.resources.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\rhp_world_icon_hover.png.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\MediaInkTransportControls.xbf	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\System.Windows.Input.Manipulations.resources.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files-select\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\CoreEngine.winmd	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\UIAutomationTypes.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-white\LargeTile.scale-200.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\es-es\ui-strings.js.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\api-ms-win-core-libraryloader-l1-1-0.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\Office.Runtime.js.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.People_10.1902.633.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\PeopleSplashScreen.scale-125.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarWideTile.scale-400.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-24_altform-unplated.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.NetworkInformation.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MedTile.scale-400_contrast-black.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\apple-touch-icon-57x57-precomposed.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\bg_patterns_header.png	2891E1D4BAC70EBA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\ko-kr\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\ipskor.xml	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.AccessControl.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\management\jmxremote.password.template.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\YEAR.XSL	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\fr-fr\ui-strings.js.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\System.Collections.NonGeneric.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\InModuleScope.ps1	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\System.Windows.Forms.Design.resources.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ul-oob.xrm-ms	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailWideTile.scale-125.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\WindowsFormsIntegration.resources.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Place\LTR\contrast-black\LargeTile.scale-100.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\appstore.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\servertool.exe	2891E1D4BAC70EBA.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ast\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\UIAutomationClientSideProviders.resources.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000049\index.win32.bundle.map	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\createpdf.svg.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2891E1D4BAC70EBA.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
1568	vssadmin.exe
4560	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-940901362-3608833189-1915618603-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe
1196	2891E1D4BAC70EBA.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	1196	2891E1D4BAC70EBA.exe
Token: SeRestorePrivilege	1196	2891E1D4BAC70EBA.exe
Token: SeBackupPrivilege	1196	2891E1D4BAC70EBA.exe
Token: SeTakeOwnershipPrivilege	1196	2891E1D4BAC70EBA.exe
Token: SeAuditPrivilege	1196	2891E1D4BAC70EBA.exe
Token: SeSecurityPrivilege	1196	2891E1D4BAC70EBA.exe
Token: SeIncBasePriorityPrivilege	1196	2891E1D4BAC70EBA.exe
Token: SeBackupPrivilege	864	vssvc.exe
Token: SeRestorePrivilege	864	vssvc.exe
Token: SeAuditPrivilege	864	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2924	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1196 wrote to memory of 1812	1196	2891E1D4BAC70EBA.exe	84
PID 1196 wrote to memory of 1812	1196	2891E1D4BAC70EBA.exe	84
PID 1812 wrote to memory of 1568	1812	cmd.exe	86
PID 1812 wrote to memory of 1568	1812	cmd.exe	86
PID 1196 wrote to memory of 1784	1196	2891E1D4BAC70EBA.exe	114
PID 1196 wrote to memory of 1784	1196	2891E1D4BAC70EBA.exe	114
PID 1784 wrote to memory of 4560	1784	cmd.exe	116
PID 1784 wrote to memory of 4560	1784	cmd.exe	116

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\2891E1D4BAC70EBA.exe
"C:\Users\Admin\AppData\Local\Temp\2891E1D4BAC70EBA.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1196
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1812
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1568
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1784
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:4560

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:864

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:3692

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:3848

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
29b1432552ce82382cc2cfd6106bda06

SHA1
75c214cb147d6918c4efe5b9478ba7dad0a51395

SHA256
eb7c6fb889671dd40431fcf559471695bda4368127341450aa78aac9eabdaf4c

SHA512
44381fbbf90b94c43ffa78d09e1b227798413f812b71db7da01f8b2fdb11bc2746d7ee44089e66267eaf6a2b6c51a78c7a64bd3baa7120d5556e3cd5b3fef89a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
5f5147be274cb324a528c9121e3b9b9a

SHA1
3da2b905ca12cdf57f4b2db939aa1fbba423855e

SHA256
3b159d63b8e87a5513f72ab3b19423e7fe8783ffdc08276bf0a1eaca764f9f90

SHA512
12da258601f6d4dcc169397e4a50492af451c2aebae837c6854ced1e238274d71479ec845bd2787287cd0455a9118360ec1f496f068f5e39083843acc7e9ea20

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
128bf6e292346135a9c39efa32ff2a0e

SHA1
63ff595f97d1caa80596a87532bf1df644a4eaea

SHA256
504a95f55bc774df2b76f64e445347f4f6f4c8ce50a718e373ea576db4c80bff

SHA512
28c4669b97e1f47877318da905f88824a37a036982d40ff4df42c29e571863c3a7ae63f027ac602424fc609f67ae786626c030cff371b42f6c6cf465001fee10

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
a24cf7ae04693ded5c494ed6c6ec5fb4

SHA1
48dc5363e22e36f417637b510367307a0208f37f

SHA256
239c96028162de401f086d136baff1d3a64b5b69fcaec869edad4be385cd69e8

SHA512
b97dec16bcca8832feb125f53ef25661070b9a217c764793f782d6677562ea801d9524d765961c4ed2ba218554d168046d677d6ecf0e1f229b5f02497faaf7b8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
6b83aad091cf7289957ff05443c00f02

SHA1
c58eaf251b8f7866b3d89a582d8584ab421ad7df

SHA256
0118c391976ebb0cc5d5c95e32c332d3f72fc5e03e239fdb9ef75ade69558c09

SHA512
66f45e67b4defedb968f410abb81ac5c3c34de34df4a015f000f5e381539134ee3abe4b974db69ee054cd853823513e96730fcaf8a3a8a527c5b4d1c4e404aba

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
d9e4f5f604de699eaeec65b87ecdb417

SHA1
ea081b775eac6fae92e089fccfc073aec6188625

SHA256
743fbe0d24cb70d3fae23d43613ea62b299be3d42cd4562b76da1f20315acb66

SHA512
0fc1f5e1ddf77c8aa1c50187938cc98d3b56c402d7d0b2e7a3b0407bd7a5ebf408357740d130481d15ed428d7afaf4bfef5b709f166ced694feb727600ce3f51

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
c3e0df7e92edf21d37d9725f81c24d97

SHA1
59f4a329a498d74fb6c47bba1ad13e1e4dc632c0

SHA256
1484454c24ca2ab1e8e65fc71d22b416fde864cef85ee66effc5eb929ffbd18a

SHA512
60e12eaccf6cc33b9a4606115e230cee2a4e56add7124ca6c7be4986254ba657179cc44350fb0170f2f6ff07a2a726a01d0124a45d7435cfd5626ac59a981f68

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
1a922663837162d3038e70a1522bf8b5

SHA1
e3795601ff80ef7c0daf73bce2a96ef16460820b

SHA256
bd8f13648b91d7192184dcc7334f6d0f84d1972fcbb4127394fba95f95f10d21

SHA512
b3c9139879d2e29bafc0c23b8371526ce00410ac0b4577f5849193e38f97f7469f15f8fc6f977979704a56e047138f709012f380567458d6fbf39249cf1b537b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
fd2ab74833bd64f9e9d70b6d0db51c96

SHA1
fe2d1e7e744ef0701f398e697cdfef647193021b

SHA256
8ad4266acff51ad5660a6e8b5a94e0373bc04318e42f8151aca942f3ab84ee08

SHA512
308f4e2b013e3119221aa31ba292fe6ad3d49a58b091984aae6d1ea89582b7e1d63c266156735cd44140a7059946981dd74cd44a28871f99eb552dc25ddefd46

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
9593b3c92b2876bd2810c5335e80b913

SHA1
b7213075aab468e1e04525f65313941db20b3499

SHA256
6465bba5d81f78817f36f0caf4501a097d6402df5d7a75c2f5d44ebb6c6979b3

SHA512
4a6171ed07f855e02679df5c7cffcea617ecb359a4df17fa977ce5f0d9b7c23bb89e81b5f5f4a5312930a13bbe1069845f116a188dc3fb553d91106abcedfb1a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
55c2cd2ef7ef6984a0edadce07d46ff3

SHA1
c855ebb5c8005459f963f14deb0578bae61a48a9

SHA256
419b8837580bf3a932838d95ee93886ce50fb29160c51e2472eb29e7e926e9bc

SHA512
1382393f45dcc0f44c1006c946e00bfed2bdcff6f328c752ea7d587d1e15db17510e113ffd9c3b7239aca797732678a2e862189efef17c813fca7b2ee06ce9be

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
484c97b808e9234d1d47f8beb1eb5d08

SHA1
dffe08c316d99c659a89c55a1dddb41e09aec21e

SHA256
2046106ff5b4e6042cecc98f7f055f8aeb8a66d04d410cd691bf39cd26964af7

SHA512
820441aa6743dc53815bedb133bae22ac25085efaedd006db81b8b13199c379ee0ff15e3f2e07cf6f2e644dbd935d70576da9aece55f8c82050d72fc3eba6cc8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
31d4bad6b620b347dfbde5219cc688c1

SHA1
2d6740a51360a665a6000e3e956bc99ed4040f33

SHA256
77f3e41c3fe364085625d9578a760b9ad3ac76d5fc0bba89105ad4ffa6762f74

SHA512
eba8a6c547ff3ba9166b0cf93f6aef946d6b1f7cde086035aca197054a6fc4284d139bd0302d0799e3930f1097a550fffc1acdcd5c4e70f10d5d24afb5792f8a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
85eac2dddb9e0d2822e72c94a5e4e0b7

SHA1
0e3b18a06efc35be8ca4f769679271be35063b7c

SHA256
a762327feefc81abe387acca5a2a4adc1d89869fe7367b91bff72631c797e838

SHA512
984776a99ddfa165a1f01006b97a76360040c3c37b7d2c57b7573829204921fcca497e4973bf0a7d69c7ffea3c7c6234d7fefdf41485254e9e5fdc20b968aeda

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
f91963e485d1ea6ea13cd1cc3e7ec3e1

SHA1
408382d0c1abe79d53ae54ca236bbdb8f2d7aede

SHA256
eba91929589ee1da2bdb4385b959a38470c725683d9c9548213db1dc7df37072

SHA512
82d6029a9c21d7e37b642fbb43a9384e5fb4eb73d365f12a68ba6e950d08a20f52fab0107ad676c016130cfd63636b91b951bbea94d3969f2da9d9b7a7e31a92

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
80f6efbee8e0a91683d52e90ebc03488

SHA1
21957c6a9e61a60784658a658d92c61ed22863ff

SHA256
91aea67f7354b1c3c6cc4973ae27df7b996b06c24c66259913e1006e7bb83908

SHA512
80c83ffd61dbdc839f6a29c177b342aee9928769517bdb28ef65d8e523b7d3dce72509edba7bc07eebe6c92cb0d9c796c07495eb330c73c758c19cfc47bc96b3

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
50cd575a9d8c8e11403bb69d579dca7f

SHA1
d9c12d4353fd8a744d124e412b6ba3975d60427b

SHA256
99fcbfb3962024b7bae1f265fe8d05ca36026d574127bbe46a551b0c94f88226

SHA512
e36594faa8cf80f2ac8c5797298bb6dd58f84312ca98415a00422b76fe9732d024bfed0259a70cde76845f2b5493a5fb5a895d2a9fae974101f6fc2be4121485

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
217947357f117c7717fb221af297d1dc

SHA1
5838241a380f678aeca4bac972fd6f6b294ad509

SHA256
502fa626d5ff25956e161c6a18d4bf942babf5e9f5cdbd390372703343da48f6

SHA512
740feafc9d93590464c723234c3a0ea0b36e02cb9ee6edae5187187a895bcf9eefd61f4aa1cbe2606c41cb0a456d572d51df23b0b543ab26acbc7076585db619

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
2d7bf45e76790dc894f24864d247b483

SHA1
d9cb105390090dde7a9cfd9e154e7a2555a9a62d

SHA256
edb0336908af340a9148e81f70a4d129714f8ec107ba848a5c1a51335b864289

SHA512
63a9a7166a3a5fd9513cac0c1b70bc189f06caf54a99b1fffa08cbe6b27668d59a3bad260fa45750171e317b5db73775f1fc5a3711adabe87923909ee4c55572

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
835d79cc25375e06898a811d4d2b73e4

SHA1
18370a7faccfefab8a6f7199b39d4a7951b2d9f5

SHA256
0d2baf9fb15696aefb235afc4f97d1e08aae6a3d92fb2fdfee6cef8b1c49552e

SHA512
e02b9ff521a6317856f24c5efc6cba44fa2ede761a8b3f8917fc280077f1a404717d37aeae7269736467975040026c03652ff3c192154ba3589ef88e77aa3d2e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
4adc905935859d512ba7557ec35eee7f

SHA1
a6c82f87d36f0950a47be468329b5d87104aa92b

SHA256
2df31ac14cc1b601feaa5b4d266f1ca920ef7bde3b280553cbac15936bd3ade5

SHA512
310a92b52bd5309b7d54117e9b3ae9f52926801f196206f7584f8e4c601c9178780db5ed59e5b5ead1cb7b2f4cede5a01750b1a6c2ad8b83c3dbaa6f91cc4638

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
0734e37649ff197a25ceefe742250a86

SHA1
51fbc60e2cc7d308a99fbd0cce2698f5ae40d0d2

SHA256
7bd5a149207cc8e2ae6649cb229b4b5ce4f46a0e83bf0b749c38d2612eade853

SHA512
4d21627c98762fc758ac891c4ac4bf34083cc0037fe5a5ae0c76f0f1b4e9d35f1f4d6419121cf4dd7689287791807d4671d51f9a065b0678c859552551a6da82

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
eadd468ce1b13629f0f739630aec4e29

SHA1
3e63ccd0e27e1d4209b226ea301c0cf62c511870

SHA256
c938475bae30db339f7686bf8cf0bfa3620972fde80e6c9ed1755bed85bafbeb

SHA512
77a98da2424516d3567ec496be874b0644e26fade4d45cb4e33e214b926382d07e4a3d82de9ebad7df87c0ae32ff1c2e4aacd2ae282efbca1b960f3ea49324a6

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
a746fce13874306733e94fd57535a562

SHA1
4f79a9060be724b9e8ba731f959798fa40763a3e

SHA256
0ccc02a7b6d2997479fa91d1c6106c7a7a8e3c60f48866a0878589726254493a

SHA512
61e8ca182f1cc7418c6245a028b5d67256961a9bf1897af188d1b0c571e5e5968cdfabb24fb71f7ea4c8898e4d2bf95ae6052413106e6ef4e7894ff08f39452d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
81b6124798757e58f9a75756485865c4

SHA1
08944868caac6aec235e377606e7ff1722e00e52

SHA256
2c39dffc0365cb8fdef108729ccc634002b2e2924ea236a71bc0936ce8218b72

SHA512
0b1d70147f4fc6ba98cadd838cfe6e398205ab59defc0f8b52e44b5ca8f148ca9078f95e2a482f1446ab7ab3377d6f801f5df566059badc2575b3fe976a4ba71

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
ad576c6c564c52cbc0a719cac5b7f0d4

SHA1
c097051b26dacd95c6b29e5de98ff7ea04e70003

SHA256
06d8e3c20d19460af43e95faa12fd522a422f471247a1cf2ee47d4134c2169c1

SHA512
38b0fd7da1d046a91f875e88a37e983b0af34a5873b2fe032688fcec3f6b143bfd09df882efc8fda33c9de87c14b3cd740cdb27fdb71683b6dfd77647e9ecacd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
360ad37be1f9d2fabe9d0bb8019bb7e3

SHA1
00fcb62724116b01d04b20dca9b678a82ad39acf

SHA256
758ca2de2482a22b94b4a3f941df7531504ac4b97955f85c9f8602b0e51ad804

SHA512
9d80a906d4c74b3e6f485496432cf9b98fdbb5b6157b552f14cb4a3be5673254dd3bad47b386c945dbd40a0eeb7f66435a7e73d1ed223c58a11898ba92d55c97

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
63414746eb9743ac9db876ba7cb49d07

SHA1
9347abe23e8424df61e7d087d93c3d169394175f

SHA256
af53f107eef0282a393008ccd3dfec2fc6406f74ca4a0655b36233db5399d8ec

SHA512
36d89094cd575399f0237cbfb9a39293aafc30b99beacef83647a88655cb10e86c34bf3c3b99b982bc317d0ada6e8211b8ad8d525e2914f48f246e5a796c8ebf

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
d22b4b68df37453a06ed2e179ccb00d8

SHA1
969d1367fbc21fb0ed2775097af11a378693ac8d

SHA256
68f5e98bc802c6b845790d773afb4d43aea0df82fefc2e7a11832158a531cb9a

SHA512
7cfd51f68ea7c83e6ee3f3a7887531ca37b7c88384193be7124f0be48f8ec16f09ccb781fdf89a5fdd4db64a5715d0ac2b75fb6ad3394e219bd1054bdcdbf423

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
ac9e76bd008b7577249cc0bddcbb446a

SHA1
aa1a3a88d19c3a93bf4559027318724da3555651

SHA256
7a97da7c483c6af956dcec51a4457143948d46f5eb082a13ff586b68f06a25c6

SHA512
115eb6054e3a0a3b0b71bca5ccd0a3119d1fabe3a0b36c9ce1903771fb9edd9dc175ddfe8a8950f44610d19d485f03eba54558330cd941c5bf93e13182373358

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
cc68ecd15814e892856303da75e27062

SHA1
ac17179107934b0f862965c5219042078e776984

SHA256
de4b188a67e91f0fe426a77cca22fca2350ee5c6f4795e91b36fba1c544f25cd

SHA512
ea388fea92cb13ce485f76c15b21d75217a50423301fcff137172f7060e79499348d379528437bacc1d6e64211d66103a78d38f40683a1b1fb18f23bd1b7da2c

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
42a56df1d21061472b90204244aff629

SHA1
7c43eca170422704f398c61b8f6f7eb618bc4035

SHA256
f1d0439196132aed1f58c448e14e5fbbfa02a5a60340f212740bbdfbfbbf7c5c

SHA512
25419cecf1553d2a9c23a8c5e365227db2455fc8368e4f0fa66605843949042478123b7fbd2e134d3fb959ee13126b13c7ded8d641297baa8214ddacc6f08e76

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
6d5ad6107be0482b5283d2c3a28add2b

SHA1
011f48548e344ce3231aaaaf5ef15e0fe4bcccb3

SHA256
e5a4c652736e1c2cb7fb430e7537dd84b15cdfce944647174178826653b609f8

SHA512
d357f6f3d4e184b6e9598894098c65d18f7d930f65d94e66829f03b2ca19232caf723282a6996208f5b9835c58b2f92df87f0bf57c5e6d930979bb5b0c557d33

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
45901b533b5c2bd7dc5b4ad4edd7a379

SHA1
a2c6fcc588ab6fd91cb068c4d99436d1661770bb

SHA256
774c6a197f653f5edd09c9c54e534c33635bc10249898ab935e96cb5004ab9d5

SHA512
7b4d0b1cf928300c7170dabd473c277b009033262ddd82a7ada5d107ab246e53f653e28121b9e1c26568cd38e976a305d1919205b433099b524d41613f553baf

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
0b7c5b7106c2754ff1ce4d5c8558e307

SHA1
2aa1e95d9bd95833641ff7a4ace611639b8de9b2

SHA256
95dcfb479956f1179938ee0783fc3d766d0b9d0791eadd84f4dc0e08b73a8e88

SHA512
1563c57199a35b134217544cc53bb5223a15b398043e1564927e6c80120b1d948d074e46effd2de85617cd0525bb4052a7548634473069742e61cf3a1d194b40

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
b489219245b4adc1f032e9ed79911ea4

SHA1
0336eafb6f745445462ceb71f034599511af2391

SHA256
efb797a1cff92fca8609b418b9c7bd7d6b059e37744649f7270fecd2f8188814

SHA512
fe587a88eacef3de377db3926670a4a954aaf5743de62b55d0743f6934c6add0c6502f653b474f36fb2f51e3725a04d707ff5ae08bd2137b7fad6a8a56a35df2

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
ea11c5527e91344c8ef37195657821a3

SHA1
123326cad115ef6462a985bec9ecc53f6f292967

SHA256
2580806c0b7fb50775f3ea190c81da44cc71345b9f7ffc15ffcb315f0bdb4939

SHA512
4ba855173bb08edb0dd1d79af50f670081d7bcc1f8038bc4c7fbb4f250c96023d132d4734a3bc22b4ffe43ddc0b84c5a2a32cde792bc5f2a838e970559420641

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
119b3e723f179087ae9c788364f3735c

SHA1
f7488b66954d53bb3e2485deb310526cdc023bbc

SHA256
95ced8c891859536cae3358061359b4db8c7f1dc70337cfa58a157219461efac

SHA512
2dfc1b52f2dc77b1c87352cde8544dec05885404bf3df40ba74e8867a4c7482630d3ecdd777f3fd0087b36e3125eb2781425ea67ab345850c885d2c11d5e0235

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
cb8977b19aff7a9d70513871b0fbcfc5

SHA1
f6dcac056ce935d416aa3c050318ebd270df4a60

SHA256
c229bd26f6717911a9bc53f1e17664e06611d4f8a95449a273220d71e2d992c4

SHA512
df0bdacd006f6cc1e8bacf1d3e6ccca95ed46c13ec815ec53b7d3aaabd46df465dc9ca2c3d3a6102686e42757dcec8f875c31329dd425673431319e9648c839d

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
25e85e1d74fc1a3c3e6892ee858f8e22

SHA1
04243f3e31348a67bd178dd7b191b0a2dc17c534

SHA256
4649eb0280abfab00d4e876b235fc26e3fa0149eb6284208e0db9748edec7679

SHA512
26c8268a40828965a9982929fe2ddc1e93ce12eb31f9bfd17bcda16008793d974e2469c843bf5d83e442613b450470574070488f5400abcd8578d3435001c4f7

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
df486626c627cd88ca9ce4e15066c93d

SHA1
b11c2a80a4353ad6453f860515d5b88e337570f7

SHA256
af67ff523a00144bb9cb446064559d237ff4a652a6f561f07aaa20a6a5873637

SHA512
0bdc815b803fa81e3ef58976d039fd442641e97fe995b09c361043073583923b1c340582761c0aa5f5ba67fc3a716ecd7d20a7a173f167635f4f6ccd8c8f9742

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
9f56d26b68687d60575cb7108a55e9d1

SHA1
8865dedfc7addc62ade8d54d7af4b2a3c6812d1b

SHA256
59737eb280d4e7239178a2b24a68c97da4931e8e8552be65ccaae29e860695bc

SHA512
2cd840ea7c16f98c6cc69e28af16282a1864d78e91e8425d208c972c7d692c2fe311b472012b744a32fcc5b9568c0b70f9bd30fde1fb6d944f95d66dc2f8eef9

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
cd488b6ccc145ee4d772c57c80c01604

SHA1
e6bb8fa6b47b27b06fd930c4fdb5a7108e474b8d

SHA256
31a0cfca62ee31b887813817041956efca72991b93a86bd15e5790f91e0af401

SHA512
61769df97272cefc2c869c2fe60198dadf1c9bdfef4a07d6ce202e8c650444604fb3cca3f7f56054a32c6d6ff41114439cfdd97e9b36880c9ea193f3c1929652

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
ecc87ee548703c7144bea62ec322fc3c

SHA1
ba4ff1d6b0b81694b4c0851a87718074efb009d2

SHA256
5caf2f75d306d1577d71704a3ce9b7e5980488e153ee66f54c55bc1bd2743440

SHA512
e062d8066bac013cf1a9e5a006c1ca8f6a6bb5b30af86495cbf0353f07a848f4e0bbe702352aa6442a17f87134c82590c627e8c30e1b0d66abde4f4d1a4629e4

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
fd19af357a88a7ba03c4dac600b7c620

SHA1
7014da90dc1f710e6247ad3feffdfde56c1dbffc

SHA256
f3a545c2fe86d0829e53d8ccfa690807074ebd6b60551d7e9274512ca9ce26af

SHA512
46b55fa9209378b3446242e5b381665439e7ace14ce4f44274b1d5c03ea17d30a085b6f9724b3cd9ab0d906d1fb00667d64db8c061094b332d22ddcba241250b

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
855144866c39d44929c91e8733dfd7f7

SHA1
071ae0dccdb5e2a0a95d7b257ea946eeac855744

SHA256
fc9e107a581a7d036d939cc51522f00f66f11e4985206f50cd29201767d37576

SHA512
6be9eece088817336d329efad24e41058a7eff5b27aa6efa41002bd7c47814e7ad0a361fe0cbe0b94057f2ff51130d40410af99f71bff1a8dbb25347a9bdf417

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
b910f9351dae5d0be408059ddf4d2fd5

SHA1
4d8b39b67a5be4e58a117668cc76359df9cb0558

SHA256
6979c3fcb2a8a23cdefec5d5b2cc8a680d8bfd0ad9333b9ee9eea5e7d1c2b96b

SHA512
3a779049811e441eb0cb8f6fd538128b3c4bd713878a3a41fb7fc53c1fc86e3d914f519aed22036f47bdb26fb54bbda5491900abb4a3a9f1d7f3c509c2072342

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
81b8481e3858bc524f5c3f77d5cb695f

SHA1
361551e7578a2f0e8b996412048f29aee1774768

SHA256
158195080886476bb0b041633520e5141d09880d4cc01823eb95de961622ba70

SHA512
da0a33da9ff0223a5e129b2aef0295f2c03d76ef64d0320ec0b0f505ef2987e02db5805d41e1800a990e36d602c66a7c425944d9a8f03b20aec0e76d1f4c3335

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
64068a5c0eaad378ca077f2fc2f081a0

SHA1
b9108361818b9f1ca1a7f0e999e179b711520eab

SHA256
4034850229d94fd56ee7a18220eb91429de34c318ca99a66dd9f76f1e8224cae

SHA512
8acf53f934700381956b2bd5e9713dd24814c4c3a17f6bd429c509fbea26a5b9d1b8e14136e3036a63d4fc48d726f430484efd38c85fbe4c375a795fc80efa63

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
ef8c5bd32eb99b27b86e099e8c0e91ca

SHA1
6673d5d133343685b9e1ca7962b5f2be4a378db1

SHA256
5eaa04c8fb2d61ee7ea14dc83fb175df903ce82b8650409b7b2408749543d03a

SHA512
57c55654f86ca8a2b3f91db95b29ca38536a9a8b87b7858651d0b88a672ee3393f3c7d7ffb494730d1a8fbda13c5a7af2050ded4e6897d179deca980abb3de97

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
472f2c2cedf4cfc3ad08301f9a816285

SHA1
f3955beb83b4f12ed92218c10f624d5ce9e9a097

SHA256
820de92e5ddd7496d1a4fd64fda654f86687abf357c8870fa09bbd6a563efa60

SHA512
33a116dde883c8a7babd4a98a6af16e72bc2169fd7e80620ef327512b11ff67ccb5dbc04d29081a6cfa54ddb2570618a780802511a7603d87db5e5d5174c22dd

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
9384bc63a85f7815ba0b79532ae0ccfd

SHA1
864f80966401aed33a72dd8f1bad41092be62f60

SHA256
792c07297b9e2af01bd6c83d0e0cc8a980dc57a175b928c0659bafd7b0c50a15

SHA512
60efe14fdde65f6a34f2f55ec71c96450bd1f5d68137af832ce44939b19e8771a3b204ff5be716079e226869fc25d2a4ae6bafc309e000df29e565e695bb9533

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
7bb07dacc6f3c6d2e0257ca363f8fa0d

SHA1
f6b7fda1e1297e8a7caee32f606b8f66d9aec302

SHA256
fd846fb2eb2abaf8449a1df25475ab786f78bfa2e7fadf62a60a2bd07aff1daf

SHA512
5888fe815461040a0adbdecbd6d566d817e53a54c5587ea52d3baf33ab2145951a46f5a3e6526a456481eb354c0690acffc50d6605abac380c64fb44103c1861

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
9b3b5089ee8529e69846ae4530703d48

SHA1
151f3d49f80740b030916cc1e6786437b7c7eba8

SHA256
526a164060f40b1ac08c98ee887e97e3aba41c2eb2be105958f710d7487ddb83

SHA512
e8df359d02c6ee14291ed084c510187a84ad93eaa342c9a8868a837be24d5f3b9f3e3281c2ed691f074e48d11a849dbf90b0633cd5d4c4d5697b7b040292d300

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
fe2f7b770ca913f078195641938b6927

SHA1
b1a9a52e1e8a56e893e5dfcaac54c652da52fa91

SHA256
cb0fba1dd2ff8375127ee0bee6f27edea7a099c664a6de462980938a4028a1f5

SHA512
9caede2666dee3053985de688a7084c984a5f0c2f36505031dd6327c3c6a00f8fe4a410bdae6ee6bf09df023b32d77cf06f97f7598e63cf5a3a1e04c30ec8651

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
255dc7fcbf7468d39f3de489bc1e69c6

SHA1
5dd1e62da558b5ec2c94752ebf5bdc92e3a470d3

SHA256
e982f346c6910ad5b7568b156a85f7d9c026225cf992b14babbab6f92bb0c4b9

SHA512
da6e6e62a4aa13eb295aae120a02e0ed5d12f4b385708ff432a484eceda3655ebc1fa85d4ddfc81c003c4db389b284354ecee2d5c4001d534974b1f775d3962d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
a71ccf8a76ec32c43f8826228b4f4e48

SHA1
0da57b8a10b53698a0e2aa30ac20a73875d04ba6

SHA256
18c55912be2e05cdc30f6ef68c65382068cb0f4534ae9a75efd62944db19c5a2

SHA512
7d272a4ae67dd28ec1957982915b7889ff50243fcc866d1c5eef5651003ce293001cb7dec122401ea01a0608fa6bfa6edb0ef1ea05135b10ba5f163f2957cf3e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
19e73101d43ea2537e1787577f65b392

SHA1
97998a7c09651c3632899c2eaf6c9ce375a6c542

SHA256
ecb1ceba17cb2782c79630838381f594184d1c6f6a13e8e508489e7b3555780e

SHA512
99e4988cf97d7fad45e53a2b24f4a8b4a26353af548a33fd1810a205881ca1cb69cc61a6fa29dfc5127995b2e0a3878e022057364e79daaff3793026c2714b2a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
82707ea62785fedf030d4ea18bfe4b41

SHA1
1c00804585915c3d7a71aa2d3316f11c6d7e6a14

SHA256
bc97c6de9a7f6d9a96c0caf26cb8a10d4d477539068234cab3d55a4682594a90

SHA512
ce96ce327a95093aaf3e32b7e063f1cf662b147defd629ad49bf1e0e90422dd4ec14eb8ffce67101edc94aa8c1a232b8f024760261145387716105d53a95080b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
56349db9c7ea83963fa4e7fcd6648e82

SHA1
db82bd042baf686d6af4dba6570ca1e27e52a20b

SHA256
08aa696c0d25d3b879ba30adab40096f7674e79dd2746ca5373a603e50446914

SHA512
2220a68582f377aa9e6660d408bafe753f63c42cdc865cca0a38be30e39188bce955bb8e5ae5d3eb6b9b60082173c73fa0692a487f0b845ce1f8346b5f739e72

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
d3d763ba917f8eb5722b00c7635f2fa1

SHA1
94b8c11750c6212c5244b69b8f3ffdba0da097a3

SHA256
f15604ab4ceb6f72266459e6b01fb59ece004f579a671eb2dc1a81cbb25e6119

SHA512
20bebfe68f9879cf9883bada63fdb1039cb333a177995f2a1e0924109621563b0aa9a16f5bc87bef80c430f62738a1fe68ccb27b1b704cf3c4bd74af99ac5ee1

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
f0925e837cd8218e47cf7cbc1d36930c

SHA1
9c34ef8513e4996aa1c22f60dad7f7ead445ccc0

SHA256
f40cdd49b65b5c8327629dd669b8c37722033af10fcd5007074b196f3a3c8875

SHA512
837e0240b8af21347cb572b5a34125b3f24a61667491768948ab263098dd3dbf97e3fe3e800d38cc9ba2853196166420aa4645f71cabb4f269a65a44a366ac9d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
d3b20c46de32dde74b6e928e96789aab

SHA1
28491cb24ad3dc54696316355eb13d7a0308d00a

SHA256
8c4beef173f4cac02afb55b96a5f6b0fa628bc7f6a7f61b904ee160812056ed3

SHA512
fef3537635976558c29cae8f977f6d790f3a5cbb25ff474045458dcf7ed3e52d88b7164b5ff18d1ad5abecbccdb42704258471badb459393e6fe644f42255574

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
5c2d72d65d4fa0e6ea3f5282ffa8b051

SHA1
7e42564367d7a2e0179bc63cf88f5d05cc8eb893

SHA256
99d65f4263dc565afa4a7f6695b205c7fece4e51b56ac4b65b8883b721cdf964

SHA512
7876053a806fc636f92607f364e0b0cbbbe17afe6105b11baf04063afd1406c00d1ce5f151f583ea764afce7f42266e499ca036e7c38b0e4e3938e9b972d61b8

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
d0b880441d1c72b86ac6522d213a9a5c

SHA1
dfcee7f2d625395d2d2a490d984a795c7a60811f

SHA256
dfa81f2b7084cc1d072094053fda08097e286cec42ebb25f5931b089ed9ddbf1

SHA512
cc7e808e3998bf76e64a4dee281ff6fc6d2127ec29d634af8b29df662651026a12c18cc543aeaaddbb2eea167b8c423e18a2aa769c436041413f5315dedda88f

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
a1375ad06f5c0970b256f77f3248cc58

SHA1
dc77e33dca73a5446c635f1556949b5991d95f65

SHA256
c52dae4fa355265dc2b02ea58f6c0aa260cff8ef574d1c3ee895931b11dec666

SHA512
9593179a487a7cc2a70327cb2c7106e27b5f5cd5cdbaeb1659c721e5619a7f0381d4ef243fb4adb851e4ca9612aa039e1cb357da8aa8e44d18552e6fd55f899a

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
2f590b3d5c6ddf68d59e0ac51c55fa19

SHA1
667d05a71e3668e770fb5ebf3da29f71e4ef1dff

SHA256
d0c736c8cfe71dbc338b657851b739267a03179ac4c7c57c198df7c98aa95939

SHA512
129fd5bc902f3a940e16503ce7b6c38055bd346e95f16add5e0ff2831ff0848e79ffcc02e82ae66b7639b3ab2204fc52d7dda4f45c74c7618ce8462ae598d052

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
dc271362f8b82de6b63e13aaee89e055

SHA1
2d0a2c8b916a1d9f82f6b3080f305c5a32631c5f

SHA256
afd6bd912e63621b466be63f7dc807d1272261ca158621e94ac7be0266c81914

SHA512
aed836725bbc41dd374bd8f4d5865090f3809ef7f0d51d1a5db6d44a60a68da23018447b616145fdf8b0dcc6a5e819dddd69a7ad12d1bae7a44590d9bbfeee38

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
48dc2948a3fa1765d0d24907eca2b56f

SHA1
622b4ec0ddf24f63befcd3630393307f838a10f3

SHA256
577051b33c61f2482b4c6736232479fda7b842ec28f3deb105ff251a3eabdd4b

SHA512
7c29a44bbbe70b0e0988920e3db93ec515703e468676aa7434a843a662c7c5ca6ba6a9e9956ea2f2b0d04de7644d71f22b43a77255d31f5498c2c29cfcf07e65

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
4fd254c6f8a326254c4b1138babcb46f

SHA1
55ff11e336ef2101acca07a53965ad446a053fdd

SHA256
41f1574a7c54557ff1f7229bc807e992db0128d657f786e3f0182c3aaba55972

SHA512
68939648a78a201a7a454a785998c83b8e094edd69e830cf5b6df0230a199c25d72ef45624d028cb0dc75f1c47a055576877d7cbd5186e8558b00968df4602e3

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
12b300c24de2ce6f7d62a20793ac412d

SHA1
e5168ac3d810f81bcfb6ab7a8a50f0f30097deed

SHA256
a51fc5d270864c7126f05913ecb98de4f9e3196c1a4c411d7cb04419b20c5a0e

SHA512
a40f71b262862c415ef9a1ceeb8702904ccff4828de958908b1b9c5b4867bd38a325545660eaf8e8e979483453481b513130c706e1889ff4d7bc3072a04b5cdf

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
3d17faf6b168bddff0ca00ba1fc7e354

SHA1
0c616c538b627f2c606e595f109d52a3c04302a7

SHA256
563ba10fa3594d42ebea9ec33d37f4fb0c438862a6359f7bea17bc938585d697

SHA512
8c7d4658fc7570a38470c2465a7afd15148fcdb422b08db64bb26afd9ee9d0a62b0e3db78ea7d366d63e113b013a44248aed646fdd9544e23256a936e3736188

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
3436031dd66f5bd703b1f6308f04573e

SHA1
fe49a162a1781fd0bebe703fb07a10d316e4fd7a

SHA256
c5385dc3af906fd790b55240ccc4fe88552521c952ff6f495f8031bc1a428bba

SHA512
fbcb9903f47edaba025765ccd8ecb780998189dbc7f8922144a4331573da12313efce7ab9d26a118795ebc7a7469d6ce0b6646bff6dacfbe183fdbdeca0622a9

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
bd0a2afca44a509c9cfe9fd1d82154c3

SHA1
2279063a67e19c42539c505d3b4986cf3f7470a7

SHA256
e02cadde025a03c8d886bd99a4a4eff49e082ec200664e073ddbc5939983ea01

SHA512
63903887b62a3bb91ddd4b6c7825c6808d46268bf8f9a9069d8679688e0d9259e198edd9f6d8b9ebec3ead88c9f061fd3edbe6185157c4b942079738851b0db1

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
74e4b1010d88f8b717cd332736d08285

SHA1
2a66e67ea87a3595b1a791cb491b42a904b98729

SHA256
ef6dd1d6df9f16a946513859b1879ec2939c584822de2e5d8cb18e1dd7a19366

SHA512
9b37f3db0629c81b67b373c5411b2064d224c6f21921cd9b35ad9867df581898129d9c2f6e6a3748ad785554877b1bb0d42198a284f785c1ee2952e9eca5ec52

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
1dc69801309cc6ea8aabb01c2134f8d3

SHA1
076c70fa690222df7b52711668c4cdffd62db28c

SHA256
5efb62702a31a6a7903d3cc50ecb722677c82f1359668feecad7b9f258b1a9b3

SHA512
45d8dcdcbf9e19455b8b754af5b0900a5dcb0b60bad537e7870eb3558b0d87c95e3e912e8bd8f3e8f5f0b551bdc259abd20b579549c801bb9e9e595780393c9d

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
e5296f81e59838c2cc080384e005d5f3

SHA1
0426379cd750d4721112dc0853122994cd4c3337

SHA256
293b0d3dc46a615ac58d5a07a219abffe9f5300aebedc8482e58ff0c876b94f8

SHA512
8ab012a518add4b69b11546477cbd6647df12263e526f30036ec082adf32f2b2a9195d0735333b1305db03959cb8be5e9fa86cc6547e926194404042d820bd49

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
140403ea6f0b625cac8925a08fcff47f

SHA1
cdb83c637557b0f1d1a634927a77e93c4b1e2cab

SHA256
e0a0779242f751d0f88b88dd158954e5e2b776fc3f328f4db3b060ade76adfdd

SHA512
fd2779a8933601a386c1dc2ec7c594cead3bd2f473a3c4b4b1a4e87afbb41d0c47db17a9dd81d6fc27336666087c043bc77aaa10a06c80b4d1f06db9701a8c20

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
a9f3e72986da3cc927e62bd8177d5c03

SHA1
bf0661f633e2949fb5b2e33807717a631369c9dd

SHA256
188dacfc5257bc6409ddb9d0f399b93a2799694309d152510372dad9109409e8

SHA512
1255de83300c7f2fb5dbfb6c55732f289777abec37bc54af5aee6a4a3d571dae69b45772c96a283672bf7e0db3bdacc7ed9d3a19c8ea5717245591dd4d164229

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
028d8fb14d9c68b1ccccd83e793a7d15

SHA1
998a388e122756943daeb5217d78d5ba25b8a0d1

SHA256
1a96f55cfcbd8b3ce0bd74907cc04c63cd7940219657739ccf22cd38c83d3f72

SHA512
134fb562ae0a1425a25fbe379a836530ba9951165ae2db5607f8944d2e2ac3bd5faf1f09c2e7e0a2cb781e941499b42be8efec5c11bcc705287616714d524ba5

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
f6fd0e5fa1801410514d2ce931542598

SHA1
5dcd7a80d0d1b378487503f0a3c2a172bdea1f04

SHA256
ae90c91752b7b3356fa0afb56ebd9ab0ab30e3756c4e9c2bbb0a417c17ae09ea

SHA512
c0221cc21791fea2b0f6d0e7a6d8f3637426a31eb5f65ecbbd0e001f276bf260f1955678378c3ed38243be150e80f31f554632c43df9e9335d82bd19b8ea4757

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
488665ff8fe692472990e4913f8368ef

SHA1
0e8ee8a580f68a1bb3aedfdf987019f39f7811b6

SHA256
94b0fac5d0c885c537962e7c8fa9de9e2e768c03138bcc64a1e785802fc7c5c8

SHA512
382e57350de6cf3a5e8ca15302482dd920ec1afe6c9bf6d35c356eef1c5368ec60feec2aadba2069903f36891ce2814262b7c15810f3abaf6a978ad36fd7d73b

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
58b74c2572d15719499a79cf06dd67e7

SHA1
e7319271701434f01a61c30ea62ee4c74356972f

SHA256
0293d77a322fbceba03f45d7bdcf9b2e8a4977cf4bc247411e603fb9c519c926

SHA512
c9f929d9e9a1ab2af357b275a2914272f9af0673b5d7c5e48ef7f6139617e00e57914c4384864056675e903d7ed003c37c91d59e400087f400664505d27af439

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
5755be6c9a5e2c077b2588a029fc3afe

SHA1
a5ee8a35765e0e57c2e394629a17bf833c5d0e99

SHA256
825a14bbb352f68156fa3f795ef3584c1e5db3314df048f3096107cab86a22cc

SHA512
4c138b0752e1dbd29c082cb0f2c2628deeacd633abe30108ddc9de8e0410c550e34543e38dbbfd39d0b0054a541247637f393b64e1bc8320bef0df05bcfba328

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
d32daebd45dafc827cfd4085aa792e53

SHA1
50276149deb4f44bd795028cb18361d85d517b77

SHA256
9f38952c58fc41f8788dbfd0a173e3ed453f5be67d84ccfd660c127a743c73ef

SHA512
e758d3d6c7e602af94d46b2270113730a809dc3787d4a5cf4ab186021a3abc04986f5a8d8de960045440e7fa5f723e3a66c7713dbee99cb9c4825ef74a7d3143

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
96ed9980b116865c381d5ddcbcfb08c2

SHA1
608ba6ce4a7051da444e45421156303933e95306

SHA256
36d821ee23aac69646691485bd4f81ae6458ecd7d87534475ea480ccaa0333ce

SHA512
07a89bf61519ff5cd73eb6106a976ec158ffa843f94247c22db5d1647f1f2ec692e3cea3c079783388126c54e05244331b4cf1179d60b54e9624b50c08bf46d3

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
41e95dc3da4334c9e6941e95352702f1

SHA1
a4940fc46b3ee50fab690b56d2d385c4f671caa5

SHA256
89b2e685dba29d72ff9c05f87898847653bb60e5668cec6bcd731bd9283e1bbd

SHA512
d0019ae4cbef3136d93eb6ecb6b9f066fcb84db2b141e13bc3119542d6d2c27cd133ac6af5b59746ef069ccc180c09b3b69c97319bc3fab1bad4262dce5da430

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
c197097dba582ece21c92c612a806e70

SHA1
9bf7d38a5864cb1552614354f66571ec34791c24

SHA256
7e21228a0bee827a5f875152a7e52fa6ebc41f241cf66a742251d3c35bc65a1c

SHA512
7ef8813564d3f2acf7662b40cec37ac20b2ac5182caa2f59a580ac68247849cdb35344f9cae56b1f4e148af7bc2fdb6f8364a1b742350e9ce6a6a4b35bdb2aee

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
ffd643de232968ef4d5c36f935188fae

SHA1
8e9c6a1a776f87b934b45a66e71e6c4196e2d70a

SHA256
74c2b67f70028f991a8ed44ed75379564efcc2494b18a51ae9897179ed50c0fc

SHA512
a82656dec821a4a418879f60aad90b1eedfd7ceabde22090e98d3d2fb45979353bb2cf537be40e2200613c16a73cc6375a2bc665ae4d728056dab46579d38d74

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
38bc18b12278499eb1f0470b9260c8a7

SHA1
ad930a562ea2315871f39e01ef4e7a39c421946d

SHA256
861ef3b547af5c783123b1f8e2347ddf7a98f93996d99144acd9005c1b548916

SHA512
17568ce934d0be7fba87244db374f040aa787f9bbbfd843220fae8ecb306876b4ec09e37b6d2fe9aa7ce00098f55d93aaccf4d86a3abc31f7a4b4de9a8c6b47d

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
74500c1521c42d8ec246b2f0a4c4c26e

SHA1
9a2fdb37aab0cd54844939bebae62270dee55c19

SHA256
45ef6a9eb61b4ea464fb111d433200189fda40a15e65888b7428d38a1ff1c2c8

SHA512
838031d5d9cbcb5696ec284e48abc38ba58f06bef9773a74266419867c7b3c93b5d8ef6c0bb307523044bcb0a3148021e702ee2661d828318d7fca91955e1e03

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
c20d87c3d9c1f4b37c69ced74e83e901

SHA1
10c7a82972e21c3ae028f1441b091c3f85f21f88

SHA256
e3f4e578b7f60d0f949a5914c047d2a8437ecd672e444b844be09d7c4cf8187d

SHA512
76e4f293165d4f8b1791b9ca0ac48bf4a8239c8e4402bc15ff9125b64875d276df06082d69a5011c697c8d4d9bb4821659d4e0030367079baad57576adc23d3a

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
004a826e0d51e930039a9c0121cd13b6

SHA1
2fcaad8629354abdaa84673c4f01b526a0d46a71

SHA256
81b1735c8df35301b990ed5d4e6f974adb30e6e481584d7bff153d81be7dd94a

SHA512
a2d4672421627ccea937ab19d4e31efa1796b16be86c2474d5942e43d3c59518d8a40223ae03ea412eb366b8d59c81c3cf05dc3ce3f33d85f89b80a7d615f5db

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
7cb6a56d72ba8c53454f9eb478198acc

SHA1
ddef150babb0c234073e3dddde46418be9f6b410

SHA256
4cbd31d387ae6d2658f34be9a19d989aac880e1656bff171757fe14a15c6fc87

SHA512
8005414363a20de550e3f720d9c74265d2b86a79375fbf4a099ff5c627c0073527cb737197e8c7d9854082c649bfdeb5b89fbc684347702250f5ea575ad8978a

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
d27d240c4f9205b76677492950ac744d

SHA1
29d2a49a91a07b3600345969fffc072e1c04fe42

SHA256
06db1c568df331f71950525fcd5d8bdbaecf3b850725438d9a8cdd3816203a82

SHA512
4013d5ed1182338b6c2c1242d8009143232806c2802a417b59ebc9802c1f4cec8c08329c73f0c076ad8c177ef23585e5ab887e55cd29fbf4d62cee0ac779020f

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
4658b334502c3894695eee0d63951ec3

SHA1
b466ac1ca19d0c448c1cb63139389f2ba9c946cb

SHA256
3489bc634ce2ebc5428450ca81a839d5a46802d77af043c6b6ef58c4f923e10d

SHA512
404ac50f18c2d6db702304ba23d2706d1e8b0bbc25d9fb358c40afcf87a4684d542010e65157b5a5a3b83b85a0b93cf258df7bbc0f9621237544e5355af36cdc

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
2e0c22aab8c183032de328dd1cf0da90

SHA1
9c6536a65c045a65cc51c5df21f0fde448ae5eeb

SHA256
7e54ff3db71148396330a6574f1db331d574e4d7f34e030cf0e13f3ade019615

SHA512
ca6a9313c3fe8d489ae4184c353b7954a3a2a35f19ce0540515de146a4369ffdb3f2f879fab18567e71e4274cb65ebf97edd1071443c1a531638835d895a95e6

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
27efe6aea7563105bbf744e63df7778d

SHA1
a3eff2144d00c65798071581b6729f26745ab28b

SHA256
b108c3f2e413b868c5540de233ca7c7d72a024275130e720f232c83b4d94e1b5

SHA512
f5d39d6a9a2c5a33580640a040d17e3a04d762a25c7b86e4cc1a7e829eb9186684bfc79d28f966c69a49bd04381f2df9f85b2558141d3f0b7444d5c131f0722b

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
190b486d43c798918c26a3a2dc981362

SHA1
2a88a548bd637fe8eba4cf1f7bec773a28c61576

SHA256
6d8aff033b7e45dcd036c869bc9c60c236ed56c68d6ad7e5d6d3f2eb80326a54

SHA512
6ceeed756ef79b4929d02f655071f51b2fd7ac43d2b1ece9366fd6239abb75b4f05f6e1c407e4f668908610a38504bdbe76b5d32154337e66fda06ffa4d9e73b

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
f0d6f62bfaa3849645018df45b7a4bdc

SHA1
58539adb43470607beb9d1d9569c160a33ef58c0

SHA256
c397e377be176750aab393ad21c38c82c18dcd3252d4d0738372317100f210c3

SHA512
94fc8ce302fc2a2ad613d01fc8632671efbe2d623f88c65a2784b5b76d46963019ef32fdae56b3aed6b8c0f0b1833d9603c5bfe81fcf6e2ab26e99f224ac1fa5

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
5d6cbd3ca76e37ff5016801278373253

SHA1
354b13e841e77400927a8a5ca9cbceef568a2188

SHA256
6778a40ef694cbb667bd26edfa49f4ccb650236f5b3b2ee7ae7571553c4c9ad2

SHA512
84fda98b88cb03146f8657b7b062a08b2902b25c0d536be3c059c1969cb8fa31e924d522222def2fc7e5cbeb7440b6525e443458e2d9ed5581f4f2135e854e8b

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
4c38df365977e385e795b5fea945009e

SHA1
3090708a4c6a03c13e865265385d22c52ef01568

SHA256
88b9697fb558f45490ba026d41fb97ce1bbb1ab59a274d26179faed92e7f4781

SHA512
fe8c08c9729543ec0c7ec1c32e04d3d2bb5077dfff82d38678de16ad96e5ae9646441ff69e611cef9ff993ec037ac2244d6ffb4935df8fdf6455c5cd54dfc5d4

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
3ca0556a4bb74a58c453923183f4791f

SHA1
446f3acd4ff5efa1c03869a0df52d88a8df37804

SHA256
c5ad33e48c7dde8fa253c7f646fff3e5cff9ec96d2e5843073495356bd63f00e

SHA512
8bbd6aad3b2f721f6bdeae8a4c253d65121fff5eeba8ac624075eae8467a9f0c57c9025be69c92b608166012131ff87e3f3c5f3eeedb652b228c605e22b8b23f

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
598c20eb1a25da0dde1d7a12499867b1

SHA1
e6c44f51e100917512c431be6a625bf3e298394c

SHA256
ac153eb2e1ee409a4f33904db5b18f3e3749a4e89798c0731a04f421a474e898

SHA512
d8ebbe60207201920a41cb33536b7652be11942be52ef2b792c6bfbf48012b89b1d9b3796bc7156d42b90b69f17d07e48697c43533e5848fdc865260f5d993eb

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
e721e283c500c2ac61acc77539c71683

SHA1
6074068f1eae62e1e8057b5253bc176ac6c8f8f9

SHA256
de57069c2d17b0f08f8752085b6befe40942ad33b419dce7bfa724e635824a27

SHA512
57ff61bc17e596189984c9ee768d4e6af958aefc91b6f16a7ea586afda782e62ac76cc5b295b6e3ed5a2f45f7dffae152171808ebf36c74201400d2ebbd4890e

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
9631fb1e99465940ff5c48ae73d1e87b

SHA1
42059a5245f91d5fa8ed663ac20a9da7ef912a6e

SHA256
eef82cf6349af5f1c6e6cea021a4ae491b079eb3d0054f8357af1f7bd6ef5aa5

SHA512
7737a3f88abf7acab09e319d4c86be850ad86ba317ac14bea5c126c75dbb8fd4884c58117215f3bc987d11701fe2fd32d057efb02515f808475260fd11d79e30

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
215d94759573871cc892666a050d65d7

SHA1
383bed50296fbbf25468325644a72f0b66224bf1

SHA256
9ce99fcb257c9023231e20eda81541920a2048f1bc816ef1bcaa3274457625eb

SHA512
7965ce326ddbe09954db7c9e2752284bef07790ec5992ae66838bee8116c3c7acf02b52808f04746c7686947ea26f3942398a6a2d2701823a726e8359a958c5b

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
5255b4274767b934e1b1decfaf3b60b8

SHA1
a9d1bfbe9ce76fdc756e38ba78a2310bf8c0e4f3

SHA256
519cfe6846cd4fa217de51c858bfdff746d7258b8bbc12024623cd9dd416d858

SHA512
a438bb9254bf6e48a0254f58069d1df66e0a4c14d477429273dae1fbf5e5ce082c079760e0827670a5ec1d28f56fc75961bc75a114a71035152a058e451b3ce2

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
fb30b3081db76e025dade8b8e6f9bb96

SHA1
6314ece43608f9f618a7ca1304f1087e1d562fcb

SHA256
8e9b44f843a7b34b4e8e999b6657e084e73cc8926bbcb540522bab4480fe8d6b

SHA512
4eb30ff7fc90792f898d69c3be0fb3104f5621d725792b58c56278b1fdd17042e715e33fc8f0cce72368e1d9e4142236af2ec436281842e9480fa536050febd5

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
ea6e8578dd359b17cdc1ceb3ec2e96cc

SHA1
9bc23879991991cd9c3ec6b14d3673447b7c1551

SHA256
540f81737b27afbea2383d71ad117b09f85281b580468a84cd9587e44715c951

SHA512
e55d2770f3b35b48ef9ad4ca054ddf07f7ead7f59da633a04a174f4a9ae25dcfd4cfc69ee71c7d144a8787f5a79bde38229d10c825f9d2bbf6dbf06c19c2a388

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
762710b6f1bbeafc54fa9e2f17a90636

SHA1
791fac2d4e0b8bb11a70b7933515fd81122d52ed

SHA256
18cd8081f0f227af6d005367e726db3632ed7f20e8286c980a75f280c5962ac6

SHA512
6f603b0fd3131be30b3cff6f9ff06966bbf75a696104e7ad00fd79019c462e6e19d44ef00a1d56e5c88ad78c17accea155da248d5c8654025a04388b6a182ea8

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
07d9ccbfc33c5eab4ff17abff700d502

SHA1
7425a68e846c594a30ef5106eb44368d37b05ad7

SHA256
0b271312953a96a8f6f6393a9f055f20e3ac1670d069f00f080d8c7c6c5e5e91

SHA512
5816890d43182c8faf187c6d6c039806bfb0b5f8ae99fc02b1a153fc6f3f21b97c84f9dec03dfe200a500a93bd5a2f77c4f91ef52b61715bd8a5814cbba776c7

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
cdb33be605b497ddcf3f79bf28cd545c

SHA1
c3d9dd2f31e6c8dc96b28bcb9ebb5d9a4de3304d

SHA256
c44d0eefe0dba8261980728fd7de8a01a8ef042efe50b654478849b583f1cc36

SHA512
89471de95fa114e1621f5e485565bc270af0091c4436492a176ad5a8e8f530cdff9736c0cc3744b82f757970c12e4c46d7e979c14f8b0fbef6a87c81f36ac893

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
3df1b4d0a3b04d99a9d5bf8c5378b65e

SHA1
400e07d016d9d83073efb22d98803c19323d2cef

SHA256
fc073c5ed5cb70bccfce38f77fc9b7cb583da53bff3b5e6c3a11c3675c990877

SHA512
66586faa6a8bd6a129211fe8f9c96027d40d6429267022a737857dd97ca7d2a47f167fadf1152bd972f965bc627131c7830c0767eebbfffbc81310dc34bcd3b9

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
28da854fcd9cf050c3c3e5c3a4692c6b

SHA1
df2d00f8bce5f05ffa8c02ba72d95733fe3da6c8

SHA256
1b8f51899809c511fe51c7f3c3e99c2ad59e82e81356041de6c9ded3738c6e96

SHA512
e19de467f089f0bd44c3589a7bcb397b7db16b70c44a4d7299832941d91e63567c564ab01050283ae54c610b9fc189b3f756dc9ae957d7e62f9cd09424a9ce63

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
5a1c30ad40fac8e2b57cbdca53be89a1

SHA1
646938afcdb7fc34e7f664af572786c613ae1748

SHA256
b02825f235a28d9c88fd19f4e1fb879cd13ade50340421be2cb59467bd14a2e0

SHA512
2359a244558612ce7786371d6792bbbd2bf167574786b6f034e679e7c89a0043d201ac80b0f63c5f991507be21f301d3ef5d184cb6113c016b651faf9ea14e0c

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
ec62b008d213b58a1810007425a8475d

SHA1
7abc4e297796cbfc55b0cd93d41516717e10f409

SHA256
3679881d947c90c1f0c0c43517ca9d155a4a6c1edbf6072a6c2e12e6459eab6f

SHA512
cb2eb99433c9b92537fe2a0b60f1ec7ceab61a1aee37c90c96b4eeb0e989ae410b64ccbb00ed30fdfa691fa3e7d7179616f91bc81d8da09d750c2176871acda2

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
b97c89ce8cd630adabd924d33a536f92

SHA1
125151e7d5bac7448d791ab52d07e21b2bb9c5ec

SHA256
a7283f73e52f1e6ef3620ddcf4f5cdb340f7bd9ee7464be801284fdf54dd4c68

SHA512
e5e45120e36fdb84c3db7d35ec26c469421338ff4da9f46f236ed2cc9fddd220c586b3f7efaa85e2acadc5492cff672016e075ae40c9c97588fd0db0ea69c0ab

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
c50ee517400b043bbe06bf887e9ee109

SHA1
e26f2165de3bbf9cf080d5ce4046544de06edef7

SHA256
7217178758210e33ae41ad71121ddc4dfc006b1c2fccabad6808df170dad292e

SHA512
0e874d311a2dd9b8be04bcf1f33384cf1c4b4418926a29cb92bb010f89e1b60979f99356f578cdbd5fd9bdd146eeb9318f956a1dfdfcaf7855f7f1cf7b4f41cd

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
97ea32ddb31248f3a128db04a3790286

SHA1
9a9c87cde1690c040a2de467f5c6d199830c9609

SHA256
a80348657cedf0a696c9bbfd7a606d5dae8a6c7a0d3cfbc5b4aff7dac81d40ca

SHA512
9b99297f969922a439aa2a4e71785908162b3b76a0f7a90c15335c974f138fd82881efa07864ea7f276f2386b4aa6e9cf661a9ddceb730aa6889c8c44fcd1b00

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
c7dde2410f67820105c11b08a9acb333

SHA1
756a21ff2ea35713927f30546692bb3c6dadd05b

SHA256
357549e8dba6c4ba9f7e83cbaaea32c44aa6b55a3f1ca65762e3e7a0ebd1112f

SHA512
5916a6432f20ee233a9e9b50f058b91f399953ef53d0db1b778a683fbe991acaa0daf63eda319951385f237b73ec807c1995a3a884b6d1d2e37abade9a52d3a9

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
9550a86ede88ff495f5e45bc62b7d55f

SHA1
cc5b8d638632eec712769a87997f9fe79c4eb646

SHA256
ae4be202d6d82e1e0abd2d889482d53b2827667b7ed5d47ff6bdec12dab6ccfb

SHA512
2d28bc8362d4a890e9e240a83c42588a5d1d4821ef404ea849a286c54ef091f390563aa22fb522f2f34f21347f75145099094afae95b1598b7662d4817396c4d

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
275fbcb5ad8ce681cd08fed999e776d4

SHA1
d22dacd6a61d13b34376f427c2f8e9aa3d09f52f

SHA256
854149f510e06c721f147e23b4c4f45fbfa6cec02004f723f1a260a3b340d5d0

SHA512
281998206d9556faf5da23327a905ea061a696da7e15a2c3cee625e92f27acf686da6f8d1244bc63273df4984effb05d51611a5241583fccc2d02464539a60c7

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
cf502ab8a6960708e9ef495cbbefe2a1

SHA1
a0840c06ed1683296fdafa0377175d44038c25b3

SHA256
1e5bfcad9086e747442a1ba1a94f230c67720dd7a0726ac0bd596c468569c393

SHA512
baf988014eedea2c73584d6f16c7484fffc06e031b91ed4ec1c631c0cfb5a3b662a42ec934dbc839c434ca0ea4a1fe57bc01f57a64789accd1c07936067ddb7c

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
82a416c12fa7a417807432ece44f200d

SHA1
6fe7326c390cd350b61b69dafe87716318fd23c3

SHA256
c2e2770c0f9985f4ad4a47d68a5e52669f578e82f2b61004a20d14f4bd378a44

SHA512
9be2bca3398a426bb3a4199b81e94af7490b35197b5892d9e9632088899c3d5506e60fcaec042c9b7757426f27de015710473b964a441c9c1d91557fa836ad42

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
6ea0483bb437b3ebc96b6eca6fae9584

SHA1
44be6814feef6557d2bd4a050eddf0b72c22cd9f

SHA256
b6af6c23a6fb3467d23b2aedfdffa7ec8546739596d585db779f5dcf2ec151a2

SHA512
bcd049c9ab88ccee608c9cf4fa1a754473cc66fcba49097397d4bb1cba732f24d0ee8b7c37c3d2722af7f504a8fac5aa258e3352905f51fc8b483879bdad8811

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
c464f4771e1b20690b8940f9f6faf776

SHA1
e86b357f6118fa57f0e640f6cb5aa2b6c951806d

SHA256
c4362f2f4d3a3c925c5ff4daf881b3b7d3308bda73583726740287d6108c1097

SHA512
14e12c5ce1b654886843a2b4bb42546d80869c5602fdc3d77902f18b3e5f506f095dbcebea1f1d211cef279889bc9c213828135b79d07fa683bbd842e43352a4

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
d8e34c245767f103c05d6651c521c0bb

SHA1
bc70fd8c378bb9d518e7a86306ec82db49010e11

SHA256
19a193317ec264bc120c2ad3e5727d9bd74581900f6267c36b2f58e13ce17f7b

SHA512
838c764e6c2b6b2ef626c68fd9c2890b12629474bfb1b825e4dbbea6947dd5f318b33c13f8456bad7aebd563b43dc0d6968862177c735fc8a57309ff29f6fb60

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
cf1953b8a86ec5e3f7580ce29e8ec01f

SHA1
2ac02011351216d8764556992c26428399d2b74e

SHA256
38371f2b10915f00b99ba72d437a70ef5929b7f02215a32d1706381c03d1d9d6

SHA512
f71bb83e850035f05c3d13d43828b343259fd51c7547abcdc03fe3b272ce739f88e5aacbadb22df6c4e35b8f1317dc601daa3832ef246d0da19b06f0570b25a0

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
2ca8a334f8485ccfdddf141c35fe5ff1

SHA1
0bfb332f4161ec0638ddb1c92360c5060fc64c8a

SHA256
d98d9f00181380fb8787ad15f900894fe195bfbb8e010ce8f738f532b49acf94

SHA512
ed27ce3e9a150f35a3a9df6d4565c2278867f627e28635e1447d2f82137ec2be2008b914bb4e1eb11e0b18844e8ee134ff7dcf19939a6ba87832f1187bf663c9

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
718ff6b03de8dd6e30529ae92beb59a6

SHA1
0db16078ca22174a25f60667354f1dbdf3d67eac

SHA256
720eb4587a2e956bfa49a21b50f276de11c9e83233a87b7280286973cb9e1373

SHA512
79b8b04b57161e919486540079c1f196fc2f78b44b1e33b5c8c1169ebe4483af423f37cd3760bb8704ff10027c75d3db724b8cbf372d2d54f4fe8afbb44f1875

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
29b3f4901ff0764726c251671fc9bffb

SHA1
6fa6e9422309063787a191f0ad506b52b6a2fab4

SHA256
4cfbcb37ed0f313bc50abdf0e362b6534955087bb1a8f885929f85cbec8ff76c

SHA512
0a4fd5a8f73f720bb7c8503d71dad8213ce98dbe15c67db8c3a353e77e8135820df25367a944838202f85cdf64ce12fa1f181c5f57b7a1a85e0834ef83ae5be1

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
9f4ee41564c0def44ffeffc6ab7664f8

SHA1
09e1bd8cbd439059063626b8efa68f805d6ca8c2

SHA256
60e9acce51bc6820d109c3f96de42efdd22938c2a0c95a0b9eab2ea03b2a6881

SHA512
08c6560d2a163535f5c19dc9fe117c50654b78f4e50df5851b95bbaa3706d6d196e1ba9989c5988ffc30810c5b879ffd2b0e0c0b15a7781bc0e29a9e0c60f5ce

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
8818f558d365bb3bc7a514a736da6f58

SHA1
421c95c0bc6660acd2976ff487e0c02afaccee05

SHA256
30689e476bd6184e582187a04809acd593961d83ef41b4971343a04380322587

SHA512
66fc7ebcb0e08cd6d9cf324ecfc8a7006c8623d5a49a30da5aa6ef7ef3fe4da587f2468b504e4f8cba5cbf9107ec44a231b4fa235c04eca9908f813411722414

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
6ca58c3f68372676b37a1feeaee1e982

SHA1
513439016686595f4237c35e3bb16a9bfe203a1d

SHA256
628787741440bdcc6c59e73bf49a064ac84b57e8e5c90cd583ef47e3f4179a6f

SHA512
1798daee7dc493b681f45161c3e9f06f11a7afff91c928268db89471ae1dd365406ab73ca87af0d8b46fd01dd7a9febffada5acd64c920ef137bee1c64a971f4

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
084c00e0fe938008c99fe113de997b41

SHA1
3c49cbac340d459ec9b98b831e53d2055fffa8a9

SHA256
a78294e89763eefa6e5809a2e2e12dff248634a47dab3409559e907f3d82543d

SHA512
3c4cb894d369ce5943c95fe50e922ff9e1192fbe811fdf11b70ab2cf44c77d27fa8ed485cc814b2a750cb37bad96ee825fc508d6108cb88da3aa8789e6f1778c

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
780ee92e78359d4d5747db94fc66aa45

SHA1
93c3613e0155661af23050513529d55f607e2136

SHA256
35da60c7eaad3fc3c81c66bd21cf791e626d05506809fc93c0ff3706469857ce

SHA512
c45710c9f77985f9fc45c76c25cf0206972e1848ea346c20564f9152120e3b8fb5fbd484a8f3204f73c9031e3067dc8cd64432ba2701e9fdf5af3fe782559d8e

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
91fa1053207971e936e6bbad0c7e8c27

SHA1
61a6300d327ae6eb276c6143f65a58c8f269a67e

SHA256
f26d98cae64be561f1260f5cd1c2974a6dce9ffca484461b985ae1107198848d

SHA512
b2794993d695cb6950eaa65eecd44dfd4f8ee297dfbd0ef26532fa9f60639c466bacd18e557798e3e28535f4812f1e928bd4862d6bc39a3f014465836d88b832

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
42d04272230248b3f66292dbebae8db8

SHA1
6ae765f035b21e1d6fc17be1dc77f9dd50c4985a

SHA256
b6ac9df8d83928f31c00320e57f3f68cd6d542eb6ce8c063334400bd493831f6

SHA512
b93165544a57f8fe2ac8a120f11077c17a2b9499f49083bb44e8648f212e1c746e21ea6aeba99ec90bc316e722698bd548a1c10f51b068ce36307e8029c563bf

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
ae634e124f836ea195b85c26b1a8a9d0

SHA1
b2f573a5f386297f9955d4dfc8944a1e14a30037

SHA256
45c60ee55e84d574aabed0240ec23a1e7459f271c1510a62707636bf710d1691

SHA512
b115c7388c1389abd33beca0b3d5bd9516206f5c2b839c14cd7f42e7373479e7209020aae35ebddfdcc5772921451df06566fd9ca03757527185b138d471a879

Download Submit