0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
96s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2024 05:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3472CB2D1AB89AAB.exe
Size

137KB
MD5

cdb5b9402d4db31b15abd8dd2eb1947d
SHA1

912c9ac3addd53685b3409c46dcb73946a74ecd3
SHA256

ba6a4d65b25c86faa7179d1aa3db48c2fc445e393d1b8c0035dbd81d27b93d54
SHA512

50280c0dc4e6d2709d2f18ff77134e029d1a123a5fcb173fab5fc4cd164b64d5b168b6286f39f6d5be7b0dcd140550692963d4fd08577a79682a833d6a6f8619
SSDEEP

3072:PLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hj2bIoKb:PstYrEMw6Bxk5zOFNtgJOCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\Users\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 3472CB2D1AB89AAB

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11262) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\Control Panel\International\Geo\Nation	3472CB2D1AB89AAB.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	3472CB2D1AB89AAB.exe
File opened (read-only)	\??\D:	3472CB2D1AB89AAB.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\resources\strings\LocalizedStrings_ja.json	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\UIAutomationTypes.resources.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\aic_file_icons_hiContrast_wob.png.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxGamingOverlay_2.34.28001.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxManifest.xml	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\PresentationUI.resources.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Windows Photo Viewer\ja-JP\ImagingDevices.exe.mui	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\javafx\libxml2.md.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\StoreAppList.scale-200.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Xml.ReaderWriter.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\powerpnt.exe.manifest.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ro-ro\ui-strings.js	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Crashpad\settings.dat.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare71x71Logo.scale-200_contrast-black.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\VoiceRecorderSplashScreen.contrast-white_scale-125.png	3472CB2D1AB89AAB.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\resources\strings\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEERR.DLL.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Internet Explorer\ExtExport.exe.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\TestsRunningInCleanRunspace.Tests.ps1.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\WideTile.scale-125_contrast-white.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-96.png	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\plugins\rhp\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\sl-sl\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-32_contrast-black.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LiveTile\W2.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\tab_mru_darktheme.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\sk-sk\ui-strings.js	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Windows Media Player\Network Sharing\ConnectionManager.xml	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_SplashScreen.scale-200.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\FilterModule.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ThirdPartyNotices.ja-jp.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\System.Windows.Input.Manipulations.resources.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\nl-nl\ui-strings.js.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.el-gr.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-ul-oob.xrm-ms	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\GRPHFLT\PICTIM32.FLT.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql90.xsl	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Osf.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\add_reviewer.gif.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll	3472CB2D1AB89AAB.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\es\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Microsoft.People.Relevance.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square44x44\PaintAppList.scale-200.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BLENDS\BLENDS.ELM	3472CB2D1AB89AAB.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\RIPPLE\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\warning_2x.png.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\RunningLate.scale-64.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sk-sk\ui-strings.js	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe.config	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-96.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.Handles.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\arrow-down.png.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-ul-oob.xrm-ms	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteSectionGroupMedTile.scale-200.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\deploy\splash_11-lic.gif.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\nl-nl\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\System.Net.Primitives.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.Principal.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-72.png	3472CB2D1AB89AAB.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3472CB2D1AB89AAB.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
4580	vssadmin.exe
3956	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe
2656	3472CB2D1AB89AAB.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	2656	3472CB2D1AB89AAB.exe
Token: SeRestorePrivilege	2656	3472CB2D1AB89AAB.exe
Token: SeBackupPrivilege	2656	3472CB2D1AB89AAB.exe
Token: SeTakeOwnershipPrivilege	2656	3472CB2D1AB89AAB.exe
Token: SeAuditPrivilege	2656	3472CB2D1AB89AAB.exe
Token: SeSecurityPrivilege	2656	3472CB2D1AB89AAB.exe
Token: SeIncBasePriorityPrivilege	2656	3472CB2D1AB89AAB.exe
Token: SeBackupPrivilege	3568	vssvc.exe
Token: SeRestorePrivilege	3568	vssvc.exe
Token: SeAuditPrivilege	3568	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4796	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2656 wrote to memory of 1556	2656	3472CB2D1AB89AAB.exe	84
PID 2656 wrote to memory of 1556	2656	3472CB2D1AB89AAB.exe	84
PID 1556 wrote to memory of 4580	1556	cmd.exe	86
PID 1556 wrote to memory of 4580	1556	cmd.exe	86
PID 2656 wrote to memory of 2608	2656	3472CB2D1AB89AAB.exe	112
PID 2656 wrote to memory of 2608	2656	3472CB2D1AB89AAB.exe	112
PID 2608 wrote to memory of 3956	2608	cmd.exe	114
PID 2608 wrote to memory of 3956	2608	cmd.exe	114

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\3472CB2D1AB89AAB.exe
"C:\Users\Admin\AppData\Local\Temp\3472CB2D1AB89AAB.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2656
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1556
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:4580
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2608
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3956

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3568

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:4580

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:2256

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4796

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
18ab5c499dfde5158b0d899ca236b4e8

SHA1
44dd7decada1e31fecb2fa43cddf8039ce0a61ad

SHA256
b067820d0b2cd4e0d4739ec42992d0aaa834d9eb1efb708c33f85f8075e06426

SHA512
59e00d6575e5ae5852accb6a416063a9b41098ee037d3b86f1cc5639dde4a4835ecad94c1af48c77dddc94e78d4c9137ffb18abe93004d339723f3a27044588e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
349797dfdde39f8fb068b558b44e24f8

SHA1
3b6fedf62b794542a27de87c94327dec5b93f0d4

SHA256
165ee95d3414a1e73444bea8a907638bdb9de155bf8f1460bfef9e9f65aec62e

SHA512
5de941070bcbec52e99d7273f552a968e85c436d3861723aa402031b1224d4700001fcc5fcafeb483ef2223cf1053c0be4bffd1cefc3098fb451bc1d710090b6

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
3000170ba7ce0c92e51656f49d3b0ffa

SHA1
963a40dbf9bcd847de8edaa5a8c7b00fcb67f665

SHA256
4cadbd0c3553d128a31590134ca310d8a8d586c40f687cfb9bd22df849da4251

SHA512
80e999fab046a4115fbdaa7fd21121683b472347665538a15452aa177997fccc63a7e91f61c57fdccfdb8cb0d47b1589edc245ad4a471641386ef8bf0d01a7cf

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
5cb6a7ad511a05292f67676b3e575520

SHA1
80766b197e2738095d9ab894ccf06f9ffebf4dd8

SHA256
f4a18d7b22f06af147f259214628c8af5068756ca1783de1f463d7a3b05f9bf4

SHA512
c239112dff3270529d7b6b707254077f2515273421ee9fcfce91c630cd3126045bf2a1e7b23156b342018356d3bfb61866c411867c53f62a54ae71007011c54f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
d187037fb6cbf100e48fdb17f8c40c83

SHA1
bd25d91fb1a4ba32d76172531e341d7feec4d4cc

SHA256
428709e7b576b6855c9889156c4c803753eec103fbc390c6e366f5a5b600a147

SHA512
db66ae2fa856e3970111ecd25749f019af3b058afbe574c5734f19789966c58230069da9e50f016df3c6b668c89f06a7f38cabb8f32f58ff26ec610c6f1efc11

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
12ad2a022a82ac89c4a137a787c90b70

SHA1
164418c58255598db15ce91088fa52785f1f60b1

SHA256
ba02c6d3caf63f279ce87b1eebc077f3a2ceeb7135615974c21cd3982815544c

SHA512
bf2e699129a8eaa60f3d88bcbfb6ac0aa434a8383880fa0cd6e1c1f552bbc080e2db20b5a681a7d53e9c312fb3d7c6cca90d509bd0244d35a372dde039102d6c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
f25a7e4f61242593d5974b7774327aae

SHA1
ef91eadfb9162c02f0d5e718ec3fbd9995fad9f8

SHA256
af5da25a675c1cf509d0b1e022e9b9f6aa55ce4a3daadaa9c35286eebfa5143b

SHA512
a70c8e43c338f52c0c91e8fa1c8c0bf253edd79a8b7d3be32d8a22db48019053aa7e7a8c6feee78da0b09b98d77e468260c29f1935c151ab09a07e3fce33528b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
60a5b6601193c7111754a96aa7f49383

SHA1
bbc048f8943f74b73e3532e6c22c86a32df85084

SHA256
1740deea41d69415741a8cce21eede1cf2115de5c2ab85d533517e7cbaa0b11c

SHA512
dce9349fd0896f0c928db145ada296d91636e7bbf95bb579e7829591e3aa4e00b8ea354f50c199f40f405d69a9e3827d1610e62b6eb3fb5879c9ec4d1771cc9c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
5f90f752b805dbe96742535b6f393338

SHA1
16a130e74cdb7faf9ac7ace84cd748e8bc00c9a4

SHA256
b0d17a93bbb62af99e799ea03ebe193f64e1469fbd483dad612253ab79fb3c0a

SHA512
aee7789b75394b8cf17a0e1c6221efe3f612704f717be4f06d0e04d5a68280d3ed3f6a540e946f8c0c9be84e2c9a286aa1c315f721006a70ab7e41947728d12c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
2a2331948307a36ba40f45dced18a2c9

SHA1
eb854d055f7631f6282d697376cbdc66adc1d14a

SHA256
d3f51aa995236c1f621cebbc3ab447ae8c167a634d58231aaf11c4fb3a66d98b

SHA512
f89dee7e8194659c87e30807c92f4f9f38b44dc01e0398b81eed31e50be00956083454f6ccd9eea14d3df6d993479e1696c14b14c3f969531f06e1746789a24a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
4f1dc2c8d6e0b30fc21660c542930784

SHA1
f4fafd2dcca5b4cd8cbd756323fd27caab5ffefb

SHA256
d332dcae12379d42110a92953b79c36719440be4e043630b6bf7e5a593355c29

SHA512
384ff366438dbc543bb1e10a0d9328bd2c93cddf8d0b88888e7c6cf0669c0cc05d7e03e51ddff4bf3ca7e55ddbb6d7e1fe6a6523022f0e06db05e91a1dcdf3dc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
ee352366177e847fdaa5bac6ad68dda4

SHA1
505548cd7420e93cffd5a930824d28a344706a46

SHA256
05fc7d6566ac254539fbcda227d87e3b2d611a5d99e2371f9dc6fc9975073b3e

SHA512
ead2249b4ab746d64fb74057731cb47901762e218da9eb289ef69ed6b89d076e143759ce98aef537ddb6419b6e8fcdd9fc45eea55b4ad99c6c9b174e90d50c0c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
42e7b7adc3983c55bace5e174bb678c6

SHA1
b74d88c8093c0a70a586b473b86277b87372ad4a

SHA256
4da49499c64b1b05175d29c52a9b087c76c2d9ab917a9a2774c2360f1816b351

SHA512
e0baaa7f5370134935dde247b04666e5f5c74fdff9e85e60e22b1f5a5cadfa9d7e7597d77e560606cfc07aab24165575c9b26d243c4b8f09cae10733cd84b6ce

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
4dc1bc084abd39c88c76201ce8619dba

SHA1
5e835fc4b035fe743f246759cca03c14a6de5d99

SHA256
92b0439311653d9c663fec930218779d1488468eb86face1b5ac2f838b1a869a

SHA512
7e92914e703b99f85c4f20204c6bb126de05d4649c9ed492bf58c1189b26422f1253567050c7715556d047c87c05c80611b6db3f1325235994bffb9d1c25ea84

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
590140c7bacadf895ebb15e0ac8b7f0e

SHA1
9642bae59b0aae4d42800bf09daf5ca24517aa47

SHA256
afaa4966fa6abdf7784dcbfdcf3428c17431f8958a72623c5859c82dc6f823af

SHA512
d1f2e95a8d0a0187384468a82f9e9691de88d1a3e095ba9b02ce4a32a282c6f2f9b061415058ccc67df4e98cb18b9dbf5ddc7fb13566612d4d8bcbe6b6758453

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
c540a5a758b7b9a20d220743e9ddad81

SHA1
08e16a0f1e99643c2975580cf61d6fca67827ca4

SHA256
52999204f220ac12c64efeb1facb75f004a2864782094fd93a6309be623df5fd

SHA512
f3a120b139385d548f92c76222e88087b79afe839c1c76a7377e485b357526007243a70acbae8087936c8b0077c454fe9f8e73030f4a9e1efaff03f7c1c1d5d8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
e86ce09e6749f370bbef18a9ffb4da17

SHA1
c8670c85f12e1533ac9c1086af946dfbd431fc6f

SHA256
3ba8fe0f9bcc520dc0ab37ec83448ff01766b6262c011fe95fd70b4a649b0a36

SHA512
0586c646d348253570d1e0dff34c26b4809df61adc260c5b42bef5524bbd660d4e66cdfa597cbaa6514b43d769be851db277904e658bfd0f38621f089137e456

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
1e1b294f894767a4f9203c28f8b11f01

SHA1
f17ac57fcfaa1574daa037373a05324079867de3

SHA256
fad149034aca59405ecd3ed2ecc5a8eb5aefc5749b632cc2d59855a9e72111aa

SHA512
89f6aa248fcf867fdd53e2db90f9c5fa0e530c77bc1f660f20084866cf9ebef8a21cb436f7521f5a8d7b17eee9dbc08a337c4499f39711f87192cb1440ff0acc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
f70ad670b2ced6b2f90c9d048e18175a

SHA1
ce42948615724145c74677efc7d0b08bb731e331

SHA256
1b2747d41a934e3c8071790ed05f06f36cd074fe8f09262915370dbf03795630

SHA512
085ca4096972b163dfa2ae8c496b0666f4548ee54b62f4bf1766ef34a97ab3e3d7a1e49037a8d1349dffbe4e0b4e4802fad9c5abda1576afd63e9ca1e8498b4f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
9954b9e676bb88b7c2a05f4b3c6aabb9

SHA1
77dd83e884e815ed758ad08dbc9320d107b85495

SHA256
c5a57804e82dd46104af03103155abfef81f601e23e2bc36effa41f490809cfc

SHA512
36f684028b8e0e273774c8ce1c0ef018f0d707c2b88473d96a70e8b1566a381627ae30e7f949bc2efefd9c20cacadbd35168fb9a4f1e68a44afa38877ac4538d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
3cd4806d948b6faabd333c52850a49f9

SHA1
8172c6b59c146a43dfb9dc639f61443f01cc2ec8

SHA256
a10cd069a336b6ead3b1011789db7e317a6edd43cee95c7e2b8eae2615283ceb

SHA512
16e1551f7d5e84d976625cca373a322a54f67907d067680782fcb5a371ede67fd939fded2f8ecc8afd8ea7c4a523e5cc34808f4b663759c1d03ffcb36ec30779

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
ead238bfdfc101ef783d7a4f44522284

SHA1
6acae3cd772289c9dd80b29d34481f4556ae7ab5

SHA256
65c101b4b60a13945472d394d5cc023321259852378dc24c2e3708c4cf5fc87b

SHA512
373c687c712c7f01b8ee32394d9a558f9f78fb55f0c807ef6ced50a43a963c0e6c3e2006c94a2d66e107e8db48d70b99a8b71d79f3f310b390254da8c3fc6465

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
b1a8e1d7893df3b96b44900cff01ba8a

SHA1
1591ea3c8013eb56071b920cee0ede10e2dac1e9

SHA256
881e14e95be4e22799e3fdf053c30c7d134733585b8dbe4541d64e830e57c9f1

SHA512
449590522f2ce6ac05d370466701ed51f5b85ee7b99ab4b49959794d5b7226395cfab54c606b606d63e41c392cbef3a0c4abd0e3c60bca885ef06b9feaa024ec

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
06d4b39b428b69c9c7a92978325ca528

SHA1
531b2aece91163833a5af7575e4e79d95f052c7e

SHA256
33cdfd0be132e8480a699295c6f675798adf3af59648b04c13223313c683985a

SHA512
80c5d2d34acfd65416955ab935e6fb182f1bd766b1ffea0683b7001a13e4c7386d6457e1d1ac2ec250097226022630a080253ad5b42c01ac4a460b4cebc503ec

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
e4174fcb773349b01f2afc131427cf60

SHA1
bd3450e349e9d7112c5cb98e50f35c463f05435d

SHA256
ec52825c29b5c0caa51da3f1714d84dfe825ac317dc47aa215cb8bf6443d7a6a

SHA512
585361a53950d4f3aaeafc870c5359e63c4d8207b88dd111befff0b767da882543b869d5c823dcfbbc327b6bd8de7a497fae1f2febd3f1b7a5b88de19ec0e997

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
693d2f1beb89a54120d706cd73fb0d2f

SHA1
f2e612942a6e7ed3579d7cbee22bb368f705ade0

SHA256
78ef44d0562a412341e8df7d78d6fe8efb4f4f9cb5783cf068f40d5c102733f7

SHA512
07673aecf29fc49e5cc6f414c13852aaacf1a3e5fab817bf822066daf16ffb3b7ef42b13b5112d1fb2bcb11825f8f4d48be7276713e0344586a3155e745f7ed6

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
08a20e4aa923704256896122ed6250ae

SHA1
1ceff118b7f5274c6fe92eb93b3db67addee8c1f

SHA256
c982f8b80eb42fb942cdb40b16a9b20073e90ba20640a83930b214c2efcb90b2

SHA512
fca60d356d8a7f11d7cbd2893de5a2ed9d26ed74efd9589477c870282f85f77e96eff8a646f0693e8eca739963ab92ceb500060b1b1c7f315dd0a6ce9ed9e102

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
5da709a96b848efb73fdb97a7adeeceb

SHA1
2e8e6166937c67512e2e450f6d190a354f5806a1

SHA256
7df575697305477496f99719855491c48348d84780f7b216a19336af8f26ab8a

SHA512
6a167dea01593b3554b28ab2133c1856d985d91190f8a876fddfadf2e5b642d6efcdb3327c178dd4690312503d3b329cbb33e81bb74b66d6c51a403edef3c400

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
f03d4eca6e53d2813c5c1921f9ba47af

SHA1
091e83cf526bb415315b3d6bf0112864dfd9d8b1

SHA256
acc51bdcbe0d83a17b70bb550e877dcae5a9f19b382f95bc791c4d6b559d04dc

SHA512
f55216daa99e464c316abe546337835331e052d835d3a3e39158415655b4a864d5c8a40d2ad068b526a3975aeded324803d42db433b9e72be39ae441e0b4f86a

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
4028cb230b3259bad231934e914e35a2

SHA1
f2f41f4857e451dc144e2b26fb6a4994caaa047f

SHA256
f50c9461e70fdbbfff19db0f0ccb8718265fe80e38d0732d08c401b10253cbab

SHA512
049037f333d91f9f3bb5f788cd83475f8975e2049c12e55f6f2dc05c54de1d580ea256fbf908851a992d240ede2df1a4e234bd4ee0f5c7dbab1ae9cc93b63b26

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
793f569c61d529148f8ae86a2e830f70

SHA1
9899dd3411204473e98b3eaeba960a9dd9d36d3a

SHA256
9f9fc8ff6e4da19a0768d894072473d65b1ce1fa100f60670a4483bca3d72109

SHA512
a399be1d61ff8890f4845affebf905178163b5b3de9b86dceb793fc600a042b9e80d67ce94eed9f27e4b085b4c97c0fbc24aebf4cf94bc9fb11ce77aa9fd3880

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
83169e13ecdf0265c9395129ab27e95f

SHA1
d0a019597024650d284db2f1cbb42d464b9cb72f

SHA256
95b4febc7f5a64962dbe0d4afbaad0a0d12b3b8b74414096156b10ab5cd72739

SHA512
1097912e6bdef50a2d2900665a43701d5c97138984dab78f4b344c4dfb11d13fa1a7c50bed80c92cfb424eb4a8ec0ef5b149c11a0c3581810cd9ed745e1abaaa

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
60f46e4df5b172360f9417b8725a838d

SHA1
b08a593e65bfcbbc887667b4216ad82809c9b649

SHA256
d6ed4b2d0c612521fc8449434dd252c1b8cfca9dd07b21bc018bc27ec4a6a611

SHA512
894a1e57efc36f0edb8950ab718760eda2ff9a735264dc78c813bca25778094c4fd1e7196c75ad5bd83121d923af46b48f911a0b0f7ad558937f03c03c1c3530

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
371088ec2425ff93bb1e4c5c1ec3403e

SHA1
7392a75216a13c7fb98c9ab5108a6d992483eb34

SHA256
fefad381991e41341d13e21bb6c2e7c27c2e736bf47d88a6eb1a98e64bd0ccab

SHA512
0139b6195dc9e13bb820741182226b2538bda91b6a37d98274e1091d2cef67c23cde53dd5480c2e54fed2f4677b4d7b1a6b9040a0710865743fc32fc1570f2ce

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
c50ba6aaee418873272efa549937a4eb

SHA1
c38e3352fa3384b911557cbb05e8192c4927f972

SHA256
f64e6bd2120cfabeba4396923fc6e8299deea6a98192178e2192abf5f7136905

SHA512
9ed47e81c35c3bad0995ef1e4cf7e5ff4ca8fea813e41a03e014869cb6e60d9a761122f24415bb806c8b0ff9d7860beb9e97a5190b9258fa40e270c9c8606440

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
1a405c9cd96f67960fa9d4e785e24999

SHA1
125f47e5467c19c03e3b9d893d55770ae742942d

SHA256
e34a9d808f126faf89e565b12bd27b69a22bd397f1d24b02601424dba1683717

SHA512
27948b0759f493a7a6252a36f443ed19b9e5052f5837bbb3b8fed9c1d4da37cb3c2b8d09301c7e86b7f3b0c1dca518c0933e083bed546ff6c4bd48a6a234c8f4

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
d204f30016fcac41a0a67250abc8aa4f

SHA1
934ec2eade547d91570015adcbddfbb38858d40b

SHA256
a81c0e731bf641ed15fd1c11a59fd0d55d1f9ca4303727a0e75524e682c7de5d

SHA512
dfc4b0adbe4b91bfca7108313883f58207b6abe532497a2456dc8475dc918b3a2f61c6d7bef90f680a7b85f9c7691d0b4183aa3acf90b4d3af422c37c1f2d47e

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
fbcc9ab9e5884765939d257f3833f9d8

SHA1
e65c315989bcbc3eb0a258d4f0ee12ac9de3d8a2

SHA256
022d4780f7a4c75228c6c0cb2bdfe2c55df6c1b902253b72d8a0a8b9459d8c23

SHA512
f730c3b3505792ec3724a400727a7b7822a3dc5529be895f739006b8a30c76c399608af5851c7be3975ea7fe070bdfa1f4da01244bc8ac1a221c42f414207045

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
2d05f3148e035842c5b152b869381dfe

SHA1
6c31f0c1acd54f98fc33b10b18d5a4f53784b871

SHA256
e7754a84cae7dc52bfeaf45d3af08dfbc906b70dfff850cc1646cca0f2b49a4c

SHA512
4d18617b788834c55c8c44ca848e3a24145db5760908bbe413849bd747d02e9b6ea949308f13127334bfc1679d4ffbafea1d612c19b222324a25f24198bdf1ff

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
8ab3f6d3b871940a0fa41b3a4cab76fd

SHA1
3aa43d0e9a11f7791c4f182d879b31413fb38909

SHA256
676cf0ea172266b6db2241abf607b1fd237cc3f851379582b937ec57529bb3e2

SHA512
94693124ba7f2ad6b96eb015bb48c23fcef623708efa0e65281e261fe3f8047b54f5019ad40a35b084a1a1758f759d3fba908ac95fb63b40e2b14180ce63b03f

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
6c7225521266b337d0e6c9bd25d6730f

SHA1
f0e5760064af79f6efa944116fae51327f07dbfe

SHA256
c9e317c02747f76de72c8c78f55c5770f7cbd7c1596d85ec656e5d4ca7d4e2d7

SHA512
1341ad2ef05e12d611cd5d3655cfe278281b1fdd234da027b8c298e5ccf1883287da9ed610ffb71147f599b789e108e3b4ae768d875538d128f93fac95631a87

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
d208c0570712b86d02d7b89a1dda61cc

SHA1
815eb84efd098fece90cbd37cb397fa73aa4e22f

SHA256
c28e1d8478f2ca86bf0ae46753664149b6c257dd2201e52f388a933f4b0e157e

SHA512
70ee9aca8361bccc8e70dac9189a6004b0173afa92aadc9703d3763aa9b1b348f2308a31e05370021005416136e64076f73f50016a281107fff7c1b85fc8aedd

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
7f18ab0c8c72287365d0c2c06bc09b6b

SHA1
6c5326ea89cfd11bb04b17d8e0ed7807aec03df7

SHA256
2161a4b313b6a4350989fd63d6be5a8f35d079aa19e7d4ce6e2892c5ef623955

SHA512
a34768cc5ad5e31718ac78d6143d86fd73a134db64500633bfa3ed05f5e4eef61cbdc73368fe868126610961f6444183b6119fc9683e02754d4e3e6d76ce6ad3

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
6759f935b86def8685e2f7088f7bf811

SHA1
20ca9c8c32a40103bd4670ea420c39eca0f8a7f8

SHA256
ffde14bca296d57faf6ee7d063a0add9983b03d8067053b922e2052e11283a19

SHA512
9f91add3fc70c4b4f64b2e2aa54a4e2e7a9f1312499a1655ede81ba362b9389ac937beaa5582a1e741a7b5e565b2f2e597937f4e9aad94829d48021a28c4a016

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
a01dc56a065a110dee0930018b252819

SHA1
eb0cb7d06ef4e1f150c0151da54806f65221c4e8

SHA256
f78c390a0bc1150ee257323e2e69f65e21a2efce71eda92590b03c3e757bac5e

SHA512
527019b06105d697d3d9d328eeb36dbfa8eccec192e0dd0168d99ef9010f290cd139a57b826d1806fb38f8aaecfd30673077edd61e047cb2b7698b31f78768b1

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
c35e089526e3739ce0f5affd84d92b4f

SHA1
460c73aa3ac9e8f3fd3f3081bad5d65d830f2216

SHA256
774dd4043219937576cd466ddbcb74fcb50c46e51bba0f36b63b05927c971b2a

SHA512
f941dcecdb4900e83e8f696bb5f29c69ceb6cde2b766a34a0aecc40f705719108cd16cda8d33f7701d4c40f009e63722a7f679c4f8e33a2aea41e8369dbd71e1

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
b16d75d2404a8ae54dae362f3aaaea8a

SHA1
3c3b98cc3a61221e9eaac6ce96b6a0fa0f1b1fc7

SHA256
8f383172e8fe3a62ffb6bad78d941ec365c158f30aee4ac0f5bdcccd994652b1

SHA512
46aa52387211acb1e55031b6378454c18dddc0c14dfce59099dc269081efc8daaabe9aa9778ec2d581b0c933867414ef6e3fbaa2636ae08c2b7d10821a3d0180

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
bb6780482427df2705f9f30b3504cbf7

SHA1
3dcf5ee2ab0789abd9c73702ac801e1058f7523a

SHA256
254e2e5cbd857633b74020b949db2821012b94b00da0a5d835f9bb92d675e03a

SHA512
3b774ef137f208a5ba6576291e0ab56015a19c668ef2a218d3231097b8cf3aaeecffa39d8b31f7c93de796e1f334155511f76b29233bf3a5d4996217ae57ec2e

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
2479c17721a90e44e587f4f3afa52148

SHA1
69cc9714f69ec312ccf0f94de4dcac4efbfded38

SHA256
338a4dc9eefed0867f1e673f15026f830e1f743b667703db376b5e59507f97bc

SHA512
ebf615a11b66e1391f15fda7e25c7e0a0b7c8a840077b96b5252d0a454a24fe6698553502fe41616be298cd6b9402af43b98f12b5fa99910bc2bfed9d31368ad

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
9f884ad252e498b27313812968319e85

SHA1
439957d1ac241235e3929d72c27053b9696a2e3f

SHA256
7b7596f574292ca35df2473ed67588358e466bb234c5e6b79b457d6bc2130a6f

SHA512
ee6c9f485cf1d21b7d110ed799e9a4d2556354aad7a83e2a2e89108fd3969ea63b49f2f937995ff33f7ac44a78521c2152ffa04a99f988c737b231b659ba5c76

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
b9aea7e2a83572b9ccc8456b4f6a16ca

SHA1
4c21e1168de00a6d1eb9a669560bc81cd93a7136

SHA256
ab293a67519d10cbfd8c0218f9375c867aa4e032d67ae8351fbeb985f938f099

SHA512
d0460188d55401d42f615664c411419ce06dcd88a9e5c8757c74c34a99feba4eeb1d1c71d24ed3e8aa436e445692b1c5ff07864fc6b162aaade7c1e397cda0f0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
ee43ee362719baaed963230f90ffeca5

SHA1
e630b9afc43a865cf5aa262130b93af8292a41ae

SHA256
25ac9a701c7061f30ad074d9d8ba7362f483b4ddc7bd3b944e0ccd04271f484a

SHA512
91ede9b0b8e4df5af0df69ef3acc3c5dbb745ad65af20a610e72e09bdb916e27383818a37c2bd91c8a5235c31e35fc2cecb7a8628acaa5a9d8a35de118c3be27

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
86f4ee29fb6a67710ef15a40250ce02e

SHA1
1ca7df2237a810fc0b9167509f668344946ef6ba

SHA256
804623467aab6dacbd2a98b71e071ef33c22ea5823202e91ec5a395360421a2a

SHA512
d936cd1baceef5d650dd209fd4e53f8dcc1e39db1e39082ba9d70b090922e3815b3431a941ecd23b1dccfff53003d7e5abed11bd05ecfea0ce9d17cc175f5f7a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
6fdfbfd74a4b2f6f0faca7b63e04d6af

SHA1
cd72a6a098c7a7aedbefe8913e2fc09a5a636230

SHA256
9b16a6bbf4881d1b8d132b8d13647110e66a3a77df2c0182b6f724b9d03a508c

SHA512
141db823adb52a1284e5027a816a6194c31a4f98b527298c8647a9fae7fbf0a0b11bf617459fe004c74858f7cc707522ea2d02793dfd5fa812c10a89a38e3f71

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
2aae97d3df1f98fe6cb4cec6a35c9c9c

SHA1
873c9ab1907e40ebd65e9cad7cd63513af8dbb0a

SHA256
b8f92306796097bebccf69a5338bc9e1d3341ae0eeebecb9f11116c15d46d30f

SHA512
db5ee80e1afe40d17ce99c0b1d43fb06b529eca050b9e79894aab191f3649b11d2b6ae0e2757a4b731b7ac8ef6de31b18cb6af4ec6f884758e96d8c26fdfba33

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
82ef05f2928b4c9e3aa833f2f288452a

SHA1
507e51419a9d932cd01485334d55495b0b25e77f

SHA256
ef927244ce773893e4abc9608682b474ebd88a6bd5cc2468cd39bec93d44fb4d

SHA512
0bf10a9124b62ece2afaccdee51a69a719ea00fb08042fb8c883d7b5c8b4046ed381b5c7fe1dbc63b62787bb4f2265e7b57ae92b5100cef9df0dca64499cc761

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
822ceb3828635e87157a4e7e35c0aaec

SHA1
edb2f0f4ccecf372cd9acb2fb621b115b637144e

SHA256
e918a1e0cd7ac2455fb5cfc65b937aa5f3cdbc91811885c51ce5973880282b91

SHA512
22f81093711224d566a697ff6ab9b977e7a272d7628c778fecbcd64628e05860e20828cd51fe3c68ff82b96fd1597934c4e0c5adf9580c1deecbcfdfb83b0d58

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
b7a31a9ccad5ed2df77efe497d375912

SHA1
bf5d09e2b60be688289746b2296b68220572c294

SHA256
2a76343da15cc3fd0151c6144c0d9dd6454d3395711531c3fe38089696b48c55

SHA512
8344d8a4fda44723ee95398c5b7a417e618c996faaedda242f8cdb14ab6268c12944f4817f8ea554b6ff3273ff65c225bb90eac9e26db207a9e0c6c511c9ca4f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
cbae05aae60d622ec6532794961a3596

SHA1
a79faa5c5675b84fed31287a6636655743f4f5a2

SHA256
f8340b1bcbd67b708ea81462ff6f14fd895d18ef043cd96214e6ff009021e1a1

SHA512
1890ab77d628597ca25d7ceeaabef56752b2a9e473d3df697f12c491aa7659780a4cb769364e8f4cc3ac4d348a777a9939d7d49ee2e2e67be5b7edeadb41f7e2

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
6e98ddc3447758bacfab8c30c3f30a56

SHA1
333bd97e0dedbb4df07041a69dc445cf48ba67a7

SHA256
4d09ec9eea9650046e55d73c7cbcded2443a13e91222cd6d50113cde47df7eb2

SHA512
052a2953d6fcb6f6ea11eb3b5748298436d3c0aec494b891f6d4fd04f53d48f5e15b589c2dd464cf7fd7798fba28145eb78c2cfcbf8124b1739d293d50f89c4a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
4eb0589df31e3b4f272e70f16bec89ff

SHA1
34aa60c261b6a90a04fabd4f296224fba39b1b75

SHA256
64633905f9f60f9fddd9d48b4e5c2b6692e89ba8bcfe60746aac6793fedbaf50

SHA512
3943ce14751901d547124e036c9e7fc0a8e2ff4542fb7db97d32b453f412ffada6a934694aad2d6d58961a875f69a0c1bec2f7f62ec7fced90312816681f9052

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
d052caff0e00258887eb9c4700b734ff

SHA1
4c56c741615c2a09e8e3162ccd743ec6836253a5

SHA256
98eb79165f0d3aa8d506cf22f331ddd7ed528ad9bbf4cb12428943bf3ac2d768

SHA512
11d5256e2f636b6c36e4df33faa52133ff94b23504c68000a7e0aa9dd2beafb4615465befca89d4025dfd5ee54e65f1051a9b9ae75b6262f69c1af0efb908c74

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
4896ffeee44bf847ab3f5474454b4050

SHA1
aed1af4ce3c946572e0887ee46697b3f47e87b20

SHA256
7524a52676aa43aec1baa3c30483af6c8ac2f4dc2566af74c6766b12ca2667e3

SHA512
df26b734d56fe4467d5c6d909f2bf35c5d37341b73530178b5524cc22b0f76f4c8e35d0ab7c4cbb2ed66d6ef16e4b8b9704a16dcbea98dcfc97d7c38b01d58d3

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
c0cca3dcbbfc2e6954dcacb9dcdedb95

SHA1
f52a8a9b1fe17d3f80bbeddf6db5ca7415ade7bf

SHA256
9e796486517160e6ddd95d8b539a6db0c4d621574655b90287c22b924b8dc38c

SHA512
85e163dbf513720941806699399cde689edfb3d1f4600c9eff78a00b5297dbcbc75cb9b44d3695c78e6b34a1b5951860898eab299dbe96de4b4feb79e73e67d0

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
796cae0e44d43e007a3c4d665e2d8cf1

SHA1
a6caef57c07cd5d6be823cd6e970ca67826092c0

SHA256
1a84a19b09f79d6d69bd2b8c73b02d748ccd41532a777290b74351ff38107142

SHA512
1ea939311c417f44d34ba7e6a30274ba4487f4c72ee9936b8a5886b2195d5f84edb249b92aa6b1c67c1348f077df5499eae1e3bb0f528fe73b818c2a0036d93b

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
9beecbea3bb3c3c896a5b910ac4a8b4a

SHA1
79a7d7ba184b72424060542dfdec2011922ab3d2

SHA256
8ef9654f16db7972244271529397485582a30d92bb395e89650bcf182cae940d

SHA512
5cda506148f05bda095822203f6196b1fcf41c1f2771d758d78ab051348dfb01fc25de7477e80badbd3a871fc0d857e07a7e46ad3e6f2ca0575e71c387f4a8f3

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
d2a89cf609174112b614002f99d4992a

SHA1
0b6cc0bf60fc80152e2d0bfab7803fc9a5c862fe

SHA256
8f3b56923646a4d9fd33b3c00bca8eb057db36c9cdf121828886244a31c713d4

SHA512
69dae36a9008ea8a99f3eeed5a9bfeb311ea840550280aaabbf0543a946785645d8f61467d838d53ad6d0ed586fd9f5487db4f89af1ad4fe719758cdcb0586b1

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
ff1470b9ae6fce5ecb0d1bb53d06e9a4

SHA1
a78122bbfa16a7a273d3322415f971710ee71939

SHA256
938a091643c830aaf6f7074441d3541d8d6eaf7e47392974f49226233d583d18

SHA512
f36c42a2b4c7b0f23b5131db6d20506c8274c3d2fcb20e6963f1e5ad4c0ffbf1c3420fa97c3170ab921dc45a27fb4416446ac12e4f88d91888e49dcd8b3dc459

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
e12763e3612ae653f5d4c92d2de8fe8d

SHA1
5c167945357268bbb6f18a905c0d1b658c24988b

SHA256
39184f328afa6f4c27894fbef944370bc0587439bd5710b0490d81fb6a6accf4

SHA512
966e974a71961057f868975d60738695254f4da72a6c29c8040f4fab9fae4ec0f81784ab2951da34699bf097a74310a18baaa4773a5bc0f4855ab7edee93de06

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
86ff23e99a585cc41dcb3290cf68a5b2

SHA1
a6ea70609bafdc27e70958673ba4fd3e48f8abc6

SHA256
75badc13aafe246e7315fa6a6b71a7c6a1cd94ebd9a915b446bd8d35a5f2201d

SHA512
ad780f2df3ba36ff3e2e7f6c33a3c7e216652a2eb5153ee98f6e5a2ef1fea3b3c4aac238c938be03a33b74844bb7123b5cf7bc639b7aa4c35afa095a0b456593

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
93c374f752d13a9ad071e8ed1ec270c5

SHA1
de40d5c38428debbc2410c3ca99fe9170a832234

SHA256
5ba8c685159f314cd5a8569b895899af46e85c01a0b92462d6f8e339280efecf

SHA512
018ca51987fa2e3328e7845a0b355bbab715c348105628733ca59904e6f7d2abd3da990e4c9e5dc0364e4668fca6595c44cd1c58ca8e300253eb7176bb9011cf

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
dd5856c150c4aef3f95f6e3a31b8df44

SHA1
d83b433d29f7376ffc636331efa2d3d14bcd8b74

SHA256
373857ea5eae81951ad20d31c40ff0f90dcfc7179b13abcf316d8faf6d2f974e

SHA512
8c9f80ec01c80c65175049023934bae4d7bddda8dca26d3e9026796ab4bc5e5c1db5defd66d5a4dbbec54edc9086be8fb238b37511d30c7e310de42f73e81d22

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
fad3119eb80e80ebf82e6b1bab7315c4

SHA1
a375a68a08cd360a528d64570e9e9e62e8592d8a

SHA256
c684dcb63c8e41678e66683750d038ff3332c186088c9c739c6db8f51355cfe4

SHA512
54a9dd77ccd27b61ffb140992bdac1a83fafa665f3da5b791c83e6fd62b970d6e496fb3a60dc9563ebfd76cd5a5a2859d642f5eed6468f24acfce8feb0842f0a

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
002f077670668e2023ad4420ea87c6d1

SHA1
3d6f478a8d5e150c2f94be9ab37e60f3150c7f1c

SHA256
ecce397001e209c69b6f2937d2284896db70beedd998d306dcf44952762febfe

SHA512
e4a7ad0632aa1eebebaed475bd0c3d29ea7bb0f03e89f186122a6524636b24542c7dc50c04b86af48f44814c19728f56518f14912d545ad2fbd27b726f8163f7

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
f85a67983c2f40ad12235e8d03e7b575

SHA1
6f731eb2a261eed14c1c3fbfecd030fa5812a0e0

SHA256
916e1207a10187f0e3700aa81b5cd468b65c3516fd2532be089d53d6938ad78e

SHA512
ed0845cfbbc5fa70128e58b531c1380a566271971cd1ce4f1a40be55bcbaab1c2f6b9dcfdffeb1a4e5628d0b83d4ed97761e6b9cb4ee4fcc370df21bb82eed60

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
ca0dd7b844bd3c52666386d53ef82879

SHA1
7bbe4a0852565debadc5559a119d4e7f2e9b3ffe

SHA256
36eec351b4e9b4745a6becfca803318c5ca6d0152ff0caddc958defc6761ec8d

SHA512
df17a777a7066d7e9dde22a81f7cda22c64b52f20a32e4c0cf5044da63fd505e057bae5a099fac8f512aae70aecd9916671110b756b26947651e5237eba2cf00

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
18e262d12f97c045d3aa43a9301276fd

SHA1
3a42d6d32ccc4dd0b268e2d61d842395df112330

SHA256
f414055cf5d898f2efff73567e2efacc725b40fad696bff83495f96106c30130

SHA512
cbdd3e841538073ce6d505bf5113441ae42ced4f69b06e6e5f6d92d90e5e819f6bbfa776d116f471e99cd39b0d1b77e5d2cdd387ecdd2e692fa8ae7118f64a16

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
56749e603ac1f216a79eeb0c0c6c8650

SHA1
320797128b83aa64a672b4af906fd6242c85c6a6

SHA256
a7911f91f1344f18e61622e52a3447e60f355895091ae176b78146788ebe2876

SHA512
948a48746f5230361083da994d40b4efe52f499daa575c0b6f60190d0a70a0e48a6f6136fc27be5c819cc65d458d54aae34e176db3a2b10d704ab39afa4b1636

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
4762fbea2e0f25eff4abb7519de0e5da

SHA1
b163cc5682698ff67deea9feb0e175a16765988e

SHA256
10062f141a396ec029b65482f7664d7f787f60961b5457603da020c0106a0c17

SHA512
afa6e74b9b2363d88ebdaf1a19d1b56318f842acde537d51dd25876c7057fbec52aa5743cb60c43c462d26d5becd3ea572c1df2bbcd362efc470546c90b9c06a

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
900d2c60e2fba42cd8c32405e20339c9

SHA1
1d98935d3bad10229cd2f1510bdaed74d49bbfbf

SHA256
e52dd527640d45fb99e3857e531a9cfe9c360cbbc3bacc92e2c4797698cde9c8

SHA512
ee4a1b1053c191d3b266e860d7873960d4741d2d57d9baa2e536d4ec09b2aba5b64403bc6d1b105d74ef8b0c6e1af1004d06efaf74f2639e76f63635157c60e0

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
5f797144913d0237a117f5fe6bd76010

SHA1
b3c7587d78d143c5c040c69855c911503014ebeb

SHA256
729ab12fe8d544e451e6ae3e5a5bb40c69e85ecaaaf2eba921991431aedde635

SHA512
7f6bf35fab8cf5ff021100c20525ff2735804bbcff195deb340ba7b9adac6b3dc0fbfe18dadefbfadbca4c5fa2e7057b78a295a1f1769ca2b8c13a6ab4081812

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
e80aa160d1ad848e744b643f056ab43c

SHA1
9fbc38b4df77f88a9d181033a4ca55d62dfcaec8

SHA256
420d8ecb94ba9799d1e37cb1c306852e51a0ef830ed4b4495cb0545e7ecf3261

SHA512
49d492a6b729ac507335359b1372b6ea77d31c6ca3548b0758323e6a11fcf11ca1ad5f22c0b38086fe51f67cb7303c3b5e6d34275aa8e9256f396dfde8e7b627

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
8924244296a95493b0000491b28a9e3e

SHA1
539dc830c2f5708e9c437e870a68f0c2deeaa241

SHA256
95b229a84db0c9151758a4ef6c67d62b93522460997817c13d922fa19377c315

SHA512
f47eabd325698013bc64379537b4b54b8ba637965ec2158cae454e016969d7eec8d4f89b10a3c09a30ea5cd523295db0aa02126087661ba9bc4be53ec38dfc4a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
b4705a4942d8825524b8fd8a61860a7a

SHA1
5bc41a1a7e495cc43f19da72993758efb54223ef

SHA256
e9476420268107dbe3e9d0e00cf7e8de53005686273ae72c8855138a045da16a

SHA512
1a9f6ed13ddd8cb6f0d739639e38a0adf41b15d0f70fe302db239be0493caf1bd775005b4059e410cd3403ec423d4a54b6983ca00c2e0ce2e7bd5591ff3998be

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
167b51cbb70d32a1719e07f3f7a445d4

SHA1
23a1253fbc35a6d3b02d131d90d100ebab7d6d1d

SHA256
d699fdee2a09336bcb837be5fe179f4531a328aab3f4707201e10e8fe207c713

SHA512
de7883d1d97c0129fe230d0846e184258299bd84ec4ff007b2d4b01edc26c92a76c1216a9cbabca1513b98abc81c4308ae427ede43eb8b914e6e7f78e56036d3

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
1a843ac5a5c9ff06f8bf0e786de17c83

SHA1
083da3671beaef63352b5aff81ecf6ff59e68f80

SHA256
7afa1585f8effbd44fb6da431589d579ec62e53b0aa961457190bfd34fa2eb8d

SHA512
eab42d59557545c213260a4df4b1b2cccb2a03df12d81cb0df8ce962e174c5c029379f57d85ab6c68ab67c205527d2cb385516833ceb2bfd03b75db3166452b4

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
b066d4d764a1acca868a80326b23c51e

SHA1
884bebef53c2c095c97e2e697051b8ca871a35c5

SHA256
e01d06b0537fc2ec7a3195093e444d0ca9119afdd3f23937a59a65f6cad852d7

SHA512
ec31456619e51fba6ec27c1d4cf48d7200f579bebf6eac8843d32c804baf5502e4617907fa601ecbdd732314729cb4789db2ed377d4bda2faab77547790fbe1a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
e9eb9cbe5c5a74210176266e32bb6889

SHA1
85f3530a5ce2a34cc34c666a63ea4e2bc174ac6c

SHA256
f48bae092af8b77e264b2651005beed398f4edfa9277315dfb8db5ef513d13ac

SHA512
e6817b43e8b7aa5912d45d56eb97772428942f49f7d7a4c4ec01803a331dcfb05454ca6bf849d5bdddd299b81ceda4367a458341282534babadf74ca55988b8e

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
81177b02011faf411ebf4af3a12351fe

SHA1
a90dfc8f3a9e021bf0e27efa61163586d3e7e102

SHA256
ada91ee978919fb0f3cb877b63055391d4463fc868b10339186972b349e48f88

SHA512
672c2da3eb698b7d93ead552c93a7f04c405666b8350cde651f769d5198b1c02b7e726e5e7340df5e82cf1f35050a46a0f1907167305d24a82774a0277d65a22

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
38c50f6f711190dbfdf345f473cf3245

SHA1
14fc76874e3ebad4d4528e8dea278b3c52f2ca2f

SHA256
04b6350cddb261efba45fd5ba5344332d218fe5ca2feb8ec3f59ce80a799eb02

SHA512
9d9423081323f4c76fd82ebefdaabf7a0ea30cc84d0cff72c04fe1ea1f9acaf8b0c8dddbedc473ea97a9f35d7fc15c760d2a0185d24f40acf0d4d44179d1ac44

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
ad02944d10bc7dfaceeb95f57a7f9c46

SHA1
35ff59a656b05ed3c7f9564d2b98870072ab03ec

SHA256
8e4e636d2ca6950df9f6600db89510b8a22eac2ab530fa204db939ff111eba52

SHA512
db944e2c20ae22dee78b7dd1a22b38aa86063eec3a0e43d2c605f060bc7b9cc33ea074b0a96415f5df78cbe709378aa671d0ce53143d2bea32cbf7618649c161

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
a8fe86f012f163b5efb169197a911223

SHA1
f51f392e70f7bc5fcbe1b194d7a435ca5a6bfdcd

SHA256
0dda19e370c592e41b23242e8300cc53bf1f9d0f514e2bf7ed2c10c80393b150

SHA512
51d33987459a3321693f076fefc8a26cf5f7d01f6f84fcd061cb6017a925dfb75a815469d229a337e9489f566ff0ebceb65455fd2dbfebe2a75f9d8f40aaad7d

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
4117d60f74f15048742d537938ac5d18

SHA1
c5a5c9ed806082ace09108a4760c99a9f61431b5

SHA256
0e58ee3328adf3de21a6b08788487e1d9d4eef9b8f5696fc898b14d9610fd123

SHA512
a53dda664dc1582d5fc35b62abae7b8427771af1109fa0262582873d02ba69426954f1761b9e4cfa4eaa381b1d3bdf364ed7f12a7cff6afd0787bf451d3f37e5

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
dd1d177a2b329a9ef4ee2704ec978e1b

SHA1
52e8430c02f57a9d0e3cdf328b24b786e936f391

SHA256
913b60bd3438cc9a8c08de58c4e8230628a9e09db752c1c72575ee588ac75463

SHA512
593b82b9a9ca76466c6c53394cbbe87bb0bb0624e2573b4959a974d3f550c7745150e5395316c79a2eb14204250fdbb0607ee849e0721cad7b036d3e5e868edc

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
6c3c0fa815d1d7223fa4d4578d47999d

SHA1
dc2216cf4b42a1798cf751f977c07f2a3c9242fb

SHA256
06f2a116c052b5b3d4a0b659a4b13ddea6ce99603a863ffa8c42a61daff920a5

SHA512
3bcc6b4ee4efa79dee6cdcea659b0c17051d747afd22c1e034b92088a87a53460ecdb16de814ea7dfbc1a38aec3ccd2effe38d12d40ef0fb8ec9cd1347720e9b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
9fe8835f81a7f18f96ed3e56e44b023b

SHA1
1ec1f20beaebce78ddb46b563c206209f4e1f88f

SHA256
e723f98f814dd5bde992358fd023596750c8544c1acf9d58a2a6849ddef95f79

SHA512
c9291438f5605a4f009bf82c327fbd2420011681f6a3b33058f87e9ade51131e6f05357242aa52f3b9667749d713bd34d162bb73e09255de8367d05270eca317

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
efc7d6eb06d25b88d698667fa108aa09

SHA1
d130c5dc4dcbd8de02ccbf51dc4898850226cfe1

SHA256
d9d1817f8b42ad2f999631d39a3c18508378d89d8e1df5da6a8f1bf54dac1765

SHA512
9ed9f6b981c183fa4c540549c0f67734d34648edeaf89d0a33e8cc32cfdbd60383c33d0ecf3ae94113b03eca8a9e9e74984890af60d4c76e28b89f0054f7bac6

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
a81800b4c412f9917e6658e88a58ba16

SHA1
feb501987e13e9bee6cdee47319f4c632e91f8b4

SHA256
ddeedded4760d77e287c461e23c5d4643f6395222df5d446cdcbffa5cd88e7f5

SHA512
82e2f858d3cbbb2d367744bab97b3c471cdd005dc0af4424445269d773c47f62672e80696e8e619a448e64a457983fcd8ec12c677bc13e0ccaabdeadf3242cb7

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
83f2e729122383a3d168786bfa56126c

SHA1
31b5d0e692e9738fb96e860e459aec02ec0e37e5

SHA256
6fcf3b7a0159051bbe611689b18efc70047a1b931a2e1c222e758d595dc5b6a9

SHA512
0402c09a68d1768c92042c21d804c64d2a28254c9a8450d724bad753f8e02ca75dd68a6e2ec5f83ef9ec7489cee70b9763a3782c5a4602869604720390a3c823

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
92ef1a842aa1e1c376bff146eb83edc3

SHA1
1d752b289d7ac6d3e4a422ce655ea7a4906f6ba1

SHA256
fa36a8bbb761ee4576384ad619d2e2a29ed222e361f41c8c58705d1b1909ddec

SHA512
82cc830f46748acd71a2a87fdaa1162b244317f1ead7e351c5396975d1ade2d354392af20b5372db747786ab0e84fc3167b8a9e9947481d82efffcde2a00e04e

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
d9f881417992485c166a3585eb794104

SHA1
386a6090e110d2f98e6b927fce16b6b1242a765e

SHA256
7d2499b1e4a5e00c744540443348e5599a73f00c62f17ec87602c268a395a1c2

SHA512
6c2ab4e85e73a6ac177e739b24ec54b426e74558e0aac4e5e378d11ecc16cc6f97c6aa0e784d588d3e35192ffca8803a745f722d2f490a7b3602af4829f85237

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
e320828d8996924a7caad96cb887001c

SHA1
b1a3b68bf041e80f773e1f857467aa590417dc94

SHA256
a35e7d7f0939d94cd557176c9bfd9349d78e573beb9d11057d110d75e607d31a

SHA512
8f5db4eacc7afe6047ffdb3f3241e83dd36aea0f43c8a8f8e15bdbfffa78f41265981b90d255ddb0a084d28bba6228180e7e857e1bebe1ba6c965f1bca5d7a04

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
50ff0b167a275cbd1726861cf684e777

SHA1
7bc8214bb0b54cdbb250734366c86565e5c8b5d3

SHA256
706104910a3ceaf5f72c3afea67aa2af667c65ccdc26c9a6da378bd9782cb6a6

SHA512
971d43f32bc613bad17c11587d24c903b25c1f256280675f0d3c9b997293ab08fd1541f9d908ea977e25bdedf11ac8698e6e8d08aa7faeea808f47c62ee681f8

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
4704724658f0530c7eb8ffb754936878

SHA1
1e2d2ad814fddc1fd83fcbf8bf788930242a1cf7

SHA256
65d9e4d36e010b31f216d35b678bf0aa39e42dfb78140e22fb99046e17f791b8

SHA512
e6a4b29232e474fd89d88a6dc563d6efa8837097dbfb5d19044c5aaca846ab3647a6c13a937a264cb8b830928d4458d7b16731a95a53ae58794a4b96bdf09a6f

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
fbd6a8281bf2dc0d4cd01755b5c990c8

SHA1
a0aa675c120178345230e998e25110e78ace5762

SHA256
126d7061a645b82de44b14bd0191d53d475765daf340570dedf937496be41e69

SHA512
f1d0f6d06f61173c6942a7e462cdbd9c8c27aa70d9d4d45170734ecd645607c19d7af7f37e156ae22eb561f0c3ffa41ceb5c806e881e0a2ca5e00e53e146174b

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
29bf04c72caf4fd78e6e25fcf4f8eba1

SHA1
d027ac744b214d6aea9c96e9b96a8acb0a793a57

SHA256
ceba49254af49ba9191d31b2ff61179ca7df5e2589c60c4e1322b675640aa9ba

SHA512
f0e5476420f40361d55b884aac0b960ac899b748ac2ae5f07ebf3b7e3924f93354c31caacdba04797099474533fc79bc8efacfe5ee6e43e72110bcc35b4e54dd

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
9d3bac905110997d8d24a9fd6a089a97

SHA1
7b31119d15daa34316f8c5fcb998808b10d1da10

SHA256
ef5386fc5720f05df903a16c8ef66ab140574177dbfe3ff82062cb84b8e1401e

SHA512
15ea191b84ec9fc87ccaaf612e0e9bdb74db0481083919f91e71d63abf7304df6c8cc5868700bd338082d4016c0337f6a061e9b5275e82259f03350e7c44f1bd

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
1fa3dd098e94a4c3edf8638ad38e2368

SHA1
6237b73e8e97725b5d450062df4bc3613f606fd8

SHA256
a796e5689d1843c3797c2370ac1787595522dea2614b7a82d02c8b1a623e974a

SHA512
b8008dd11ecabb7d62a743f02617a7b8a8791d8dc7d5f09e1bfeedb02573c2f515f09e76ea475feb1830da131618758aaab352ce4155a017195b9bfba151a0b9

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
4dddc539a73aadb6e62cd1c145906460

SHA1
b2b061b3275370ee3f89f182ae75301ea9be2401

SHA256
9a0a2726d68a75e8cf836adf053cc9a6fd5198877e967b545ac791afa0c50f35

SHA512
654c8bb8e4bd933080214d3f194e5f2acdd30bf7ecccc1886e066aac42b08db0400176bac554eef273b241723cb8562f89dd683d82b19733bf9ff92673cf8932

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
3fbc6dee12544a4d9df7d2f98868062e

SHA1
1207c8fa45e798b45348411dc961fb9caca53ed9

SHA256
1e2452dbe286e8c45a4b607009a535c66b3c7719699ac8ed72a7f104af966ab2

SHA512
371036bc26227a46db8d9fd3bdd6ca7ba0013e7c72d355784925d1c02432247fb8f437db9a308ba5cfaa60bdd5c9e2740306b04ba985d4b226049dc463b2b90a

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
30509189d87947b3cea479da967b1126

SHA1
ce1cedae784fba1ed5492a334413de29a69cf255

SHA256
a57c0dc6f67d12ff9a8f38f5b3b1edb0f0f9cfba0e7206efa0eb239fe356b9f5

SHA512
db0c721af7f12a5ae52de2954e6441ebafddb6e386db6dc01400b4f04b3126ceefd2cfebff71bf1487ddb56a4aee06ea84e809c80d3dd45e368b3c19f334c225

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
c63858d4f6bc2aa215391da37fe7367e

SHA1
ff040ec09d2022e8a4756d88940425592870a5bc

SHA256
7438be0154713f8892daa5983680b519b718f3f77e72d8115af4ace28a3862d5

SHA512
bacc2a45d08ab9a4613474aa12a2b8fb8d758b1cc311aad0e656d3d561aa3d14bb2ccc4578fb9640dc5da52b0971065268bab8f7f15b5be93f7e51ab58c7f4ed

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
d4c7ee9c827c4ea3a8cc386ab024f2b3

SHA1
5476d14671769330770b323ad8b9f7ae63a6d56e

SHA256
87426037d8462e74ba178a66864de08cc1f482ca07d4593f6ccea7ddae140659

SHA512
72ca168f11dcdc6740ee3acd03fb3fe81360c1fe68f0deeeaf84aee1c90179637ae8d7e564cb8a08dc97341c673dbdf14b51a923c4bf31b1c2c9db6d2c9c02a2

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
38564291a74e9bb31bb13581d61c7d9e

SHA1
1859c1241591ab2f42f6084a2299475d18d437b2

SHA256
2b3bd0e895a8f752d1b2b40d124925a58950e647a7f296bf700625160eb2708a

SHA512
4c0e107590e0d2bb8d873fab93d9df42a3a5c003e11193da7e5df7ec1cd75caa5bbb37f86bbe61cfec545a3a78ea7727ac8c5e68c5cf111af3d9b0fde2455467

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
406e6a889001cc30ad2d2060cc179de8

SHA1
4bdaddb86ad373e42f79a7d26013f697a62ed146

SHA256
cf95f0674379b636461d32c1330fe829648c956ba339d602cc4f77253375f17e

SHA512
79aa7ef89f58f0a76b5e6fc37281a75a81075f03b51c7c5cc669e59b9f9a78c2b06d206d9e002497f2112d8f6d557dcd62d7a17b00af1068861d33231205d8a6

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
0ca4c09a495c2888c60f695818068e13

SHA1
0da87ef376c3a5104d5d5607cbbf9864b43898e9

SHA256
2315b53019554ea7dac71f982b2439c5cd2b94c1a4ee0c3316170810d6fdef63

SHA512
0e78fff6305ed0e49e79eb7a8835c6dd1c6ed77888a46f9af0bd8d76bba3b7862bf8ad4ebb7ff96827adda2bd2e71a6994c84695026ca535d236c9e8a29591ac

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
90bd3e015ec6dd90e1f988dcb9ff12a5

SHA1
d4cf2cc0eaa1b61981c7370db17b72ae447900bb

SHA256
1d73c46397835d7036da5358994a4f927002487b930776a48cfb611d52e0fe91

SHA512
a324048d8a87ab79b27027bbd6052e7a55fa7eaa9eaf3897738988ae7b2317de426083d7b008c256b0fc08c012290d6db7d85fb203741cdd6d66818278b3e552

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
da8289ef968c46c2a051d2351ede75b7

SHA1
b6d5d177f3a2f53336391308f773aea42a2e4b96

SHA256
328ccde067e7a9d66c4ab415f67759ec0bda048b3cbfdb2bd76121c125bf1e29

SHA512
fd8819f6810655eb49598dc6cc0313aac94d23a0bf3da3409fc9b106eead328c8995acfd5b0aebce792eb232851188fddfed232b24663c6ab8229ebc418bd85d

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
70b0388baa6c37ce3d7e3a19d43c6b4a

SHA1
17553dc526250785956b00e304f638fb2b7e39d9

SHA256
102e5e23427db8bc543219406277164e8d29e3236227fd615e09ecf41e6f205b

SHA512
d9db204eb92e4dc5ac503b48579a6ebec99839a33a1068f4d5c7010f75d9eaa2d71da5e12b77ac25015512c0915600acab3b5e15c0008461ecba0ce93fd36740

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
99987b1b85ed21846850b3a400c76403

SHA1
ce660be174340d451195f0c2a26815bf593ef39a

SHA256
7c5ed6056d3f785f19cbbefefa03ce61e9cc81ca3a37f9eb73e081552e356cbd

SHA512
28b03f29e5d3f8e69a3e1ac8dbbef62932a3ab064baffb7ceab0de8c778732074cb22026e94cc4c4aa66adaaf5c473af3affea1742ba5a626c368760f3ba9ed7

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
de40b295e23878c92315aed0d90a311e

SHA1
92edcd5c973d7f3ab66b40b9bc0728d89cd6ce60

SHA256
541ee26000108d9136ff1c56a319f53383f32e3cbaf0a28043d5721ca0b1c35f

SHA512
8692298174ebebf63a1bdcdc4b700ff61473f38e183ed40ff0c90bed90080a46fc428fa9a720a82cda5fc901ef11b5f459813e032feaeabd371284ce2c0022fd

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
d77e10bf1a0ae77dfac4662d9f9051f7

SHA1
ab5283b893626f8f9cc4d0982028351a7f83107f

SHA256
6fa24b07673b2c6a032fe07c02bf1604249f21a35196e96bd3a147332673bec8

SHA512
c1c649aedecc95bb460a7a648065d3b89b5b708c75ef0eaa7e70645c34a585d870c4ee6e719d0b935a407dac20b5e3be2569af5c2ab7974893b1d6bb1e115f9e

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
3507073fcc71fe20a9b5e6e36ce847b0

SHA1
787bb5ecd45b07e93369a863ab11010e43715a3b

SHA256
73e065f6acd45e75a645c0efdd4ff12440817a64c620a3ec30bfbf683c367e58

SHA512
dc48cf6e258a95e5254f746359ecd14f5e97ef5723cf44dc40f1e18570f21b3cf6762ad6fa0543e97700e2f26464417c0677dd903cf363cae8d40fed8889501c

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
ee0303f2382a7733ee05d24d26061ed9

SHA1
3b9c2097cd30df8c6ccc37ad3aa731b944881376

SHA256
17ae0e078b63939782f33ecf5ac1c2f4dcfafed8164917f12db4d6985588dd4a

SHA512
5c3225df4bb8bed4f63d24c25e71594cfb8c60915c6e59f7c7949ccd674917eeb00535bef4a66780c56483608e1b6e29d0a349977e0600c728e3e3c394772d7f

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
1f64c6300d6bd421d88a5a6c5b0ff73e

SHA1
bedd88af92216e5c431f03b133db0d81dbdb4050

SHA256
1bbff93059426904d12f28d46c8385e756afc105745edf1143a8d425624193ea

SHA512
62bc3752efcfb23a86275fd7a0171f3acb553363a6d4b5f2576c7ff00bcf960406dd7c428e810d6b02e8a6ff6290ba7401ef7c2786c8e5e3d90be8b7511dc1ce

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
e4b472fd7c47baeb377ebc729927c7b3

SHA1
ec2949aebdb6352be503d057866e0ebea06c5bbe

SHA256
84f50417621a09bd4be445a3fe0f6b78cdfb3a791b431a8a3eba8b6988e499c7

SHA512
dd0b6cb25bc62b0f1ac51170f978b74d5bb52581d8271964e64609d3064c25ad78fe0fd6440ee2c7529434060b389713c7ced50e38971ca3e374c44dd7da0496

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
2e872fca77b3f34568ea14f150dea910

SHA1
ede1f49e1f4f2960f6b9937104233d3030cd4323

SHA256
d4f37986a71b3eb168c178da20010c466d0975716a4d3041d29200f7eaeee77f

SHA512
fee2682d4d3049b1611d6469a9e960697ef3b9d66316055a647b8048e13afae1afee865c124b22e26011227873e08ed3b7c0c79cd6a840026b60fc7cc3f01618

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
b8fbbe2042aed3f53575bbb5a7088377

SHA1
bc6e9f4be701bd97e4be72da43f6619e778ad58a

SHA256
4bd1894e6751a4e4943fa38940150afdcbf1cef0f3d4d8f4d7fee086e2bc735b

SHA512
014ae438b5d76ae176328a60658c8bc230d72aa5ebd22603a87792826567b7190cbbda649bdc1800105fc9002bf18f1a208d9de5a8822b12e0c1e9624100ef61

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
a56d206cf3a6127e5b601a00361c2c65

SHA1
2cd3959e39b2ca3814f34e5932043378f760f731

SHA256
7621802d8e6607b20719d6cde4c91f14c417c17d60d9ff8eed414300f20b1fe0

SHA512
b63a75cc8a50435aba4da0913cc52982ced113f7af9949e71d516f6ee1da1c4a6dfdc0dfebb2ad4a7b9449f00230fb0f0595743d9083ed2f704b5ae84df50560

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
f24dd1bb7b0a43308e74a9fe6ea48199

SHA1
a88a570b96332d2e3534ac9a9ff9283e9ee1a4e9

SHA256
9800883b13487b1d136efb49569596a2a84cf5911b645aaac78ae2edeba07027

SHA512
4f9db7c4ac6d49627cc420abb0ade12cc2bf62a4795feae79144c8351af3a3b9ed1f27e99b7a832539681a47d6e46fe060a78f46f00e12e7324e853304d39b77

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
42f998acc4a742e50980231d3d54d2fe

SHA1
730aa96bf0e0c567bceacbcb65f9b02da933f24f

SHA256
cf1530e7a88c92d7a4f6822964989a9bf195cd2eb2908ae145246848ba57add1

SHA512
0d68464e5895a6746171e0a26096b4f64f877ea88f33b9804f6da44e5652f22064e438097ab84912bcf24285226b7d313e8df339aedc7351ea6cbfcf90dd02b6

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
0ab6893ccc746f7e0060b402c8003bdf

SHA1
b401600bdaf22e1e77e757836e1f8c3f717ca528

SHA256
f3e36875968dbe5edcb00d75ecf45a610f6bbf517ac536168ce33502f21aec0a

SHA512
9b947e3be63a9707a0aded209539f553f806f5c6f2ef95233db32799ecd46acc5e7bc0c82ed9e4e880eea8703c43f5e511f9d28fb73e65bca1ce726225310197

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
0e08919ef2f54c7f5ea5b7a4dd041183

SHA1
77648696880e04617eebfb1573ba5ee3c16a4c0b

SHA256
a14a38e24099ee1db136e0d0d601f168c6918574e5fb3e7f6f76b221c25131fe

SHA512
1360efd576876f83cdb27014323be996f30075ae870ece646feaab5c2beb9a24642d2e64a1922133e0c946cfbacb6c7ba8dcb19e53231453143b7c48791ba3c2

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
b3a0709f5c7355ed17dcde2c570fa90b

SHA1
e2378d9dcc3a60d1a801ec1e1b9e0071ce073d6d

SHA256
8ada192261b48c9e02529c4dbfefd2ac6b77918c521aa72977baf7692350c2eb

SHA512
a813e6598cf420380dcee5e96cefa932b01cbdd5c53985543f2ec19562689e854d5e1337fcec545f06a94b384750241d67221ef23e87b07352604327e8fc8898

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
49cc09ca2fddd8810eeb3b8e04f9aa64

SHA1
c80e1ad578b298c503629a3b5763c8e602a1ac5f

SHA256
2d1915b2097cdfd0493eb2dca7147eba4cf513caf522ffdd22fc94a66da84a65

SHA512
108854c04568d3fb260f7c5d34c53c3483b36783162af2885673692a129c52762a208762d001d39433ab94956074250dd230c94a35768aa5b852b96d99091a5a

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
c2716329461212424c8401ff98314ed0

SHA1
ae39ba7f010490f5c9b271c1aca80e5da35abc28

SHA256
3f73bceb6afa2f112827e8fe20c4e48a84161fa1aa66908cc0bff12a895eebdd

SHA512
99e7c738840012f1359b9afa16984a7910252a7cae090b866a0825249bddee0f89d3494c506f4ce708ff656973055a2d7a4920a12f0d69b0a5af5b1e9d6bb2b4

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
7de659ee84ebba4c7d9c8a9b23b36f9c

SHA1
6887699b1458d82c599a1dfb27b38321259cec29

SHA256
307ea720b4bc54a094c0509b7a4ac073ed5eb647b96cb203e510d95065187729

SHA512
797e02f8b1e8807ec0ce06d6fb5af5b7a7c054e38455728fe38b22ee21e1055bf9e1bcc065fe4561216431cac1015fd1c3111cd84a9d2453899caf72b4c0cde5

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
1303a6059dbb5cf8e0bc8b522cb8f64c

SHA1
dc8ba9cf86f26a7100357168b5c03ee38947fdf3

SHA256
876c4d0b3687c9f83af397764549e9c171380c9a01e8db827f4ba80777a4b181

SHA512
ff389d28f0b6104c9bc373df58ec2cd4e72b2eb577e131cffa00ccb38e238b548dbdc8419cb9677e232c686ce0c02d5fcc215e602357151ecf749b2e6fc0e6a0

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
67cf77c1307e4f93d0391154a7253c39

SHA1
845455ba88ba4a061af32f7eee2bbddeb56cd4fa

SHA256
8fad1cd7cbe56c9bea36e7c7b36c2901c492bb8e8ef1a3f9f00147fb48b05fa3

SHA512
d57fdfaa5ad3cb400207bea5d1f1f5635709821da7a1d9fb5f5ea600803a57a3fdf4c820cc36d61545476aa6b45164a5b95ce4c780f7dd99c518bd8b5815a547

Download Submit
C:\Users\biobio ransmoware.txt

Filesize
402B

MD5
4cca299786028771f81f76d2c8cf2eb6

SHA1
e475afddad2af29b02cd70281c834bcdaf12e4df

SHA256
324014b0ad34a853196650fa9a9f1fba91f597f7d7038f144561d68524edc53d

SHA512
95e156f0e55af7aa6887857f0c54e466ff5f26e802043e717f7e7a0bbc83840d7d745a7b9871e2ef445c85b0d1e482f5d75b2d2ed44aff6bb9da2537b0df584a

Download Submit