Malware Analysis Report

2025-05-05 20:48

Sample ID 250418-pjzzmavpw2
Target 2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe
SHA256 2c9bb93dc2c9f841e58db43ba7dedd490cf7e0fd9e66c4b56a888e25e93a510c
Tags
defense_evasion discovery ransomware spyware stealer lockbit
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V16

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

2c9bb93dc2c9f841e58db43ba7dedd490cf7e0fd9e66c4b56a888e25e93a510c

Threat Level: Known bad

The file 2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe was found to be: Known bad.

Malicious Activity Summary

defense_evasion discovery ransomware spyware stealer lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload

Lockbit family

Renames multiple (7688) files with added filename extension

Renames multiple (1700) files with added filename extension

Reads user/profile data of web browsers

Deletes itself

Executes dropped EXE

Checks computer location settings

Drops desktop.ini file(s)

Indicator Removal: File Deletion

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in Program Files directory

System Location Discovery: System Language Discovery

Unsigned PE

Enumerates physical storage devices

Suspicious behavior: RenamesItself

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-04-18 12:22

Signatures

Lockbit family

lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload

Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2025-04-18 12:22

Reported

2025-04-18 12:24

Platform

win11-20250410-en

Max time kernel

6s

Max time network

133s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe"

Signatures

Renames multiple (1700) files with added filename extension

ransomware

Reads user/profile data of web browsers

spyware stealer

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2211465213-323295031-1970282057-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-2211465213-323295031-1970282057-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

Indicator Removal: File Deletion

defense_evasion

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\be_get.svg.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcor.dll.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AGMGPUOptIn.ini.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\adc_logo.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\sk-sk\ui-strings.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\es-419_get.svg.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\Accessories\it-IT\wordpad.exe.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\en-gb\ui-strings.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ro_get.svg.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\css\main.css C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoAcq.dll.mui.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Common Files\System\en-US\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_US\List.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Adobe\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_thumbnailview_18.svg C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\sk-sk\ui-strings.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\cs-cz\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\pt-br\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\msdasqlr.dll.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\PFM\SY______.PFM.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\uk-ua\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ca-es\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\sv-se\ui-strings.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\zh-cn\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\s_close.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\it-it\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\tr-tr\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\fr-ma\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Close2x.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\plugin.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\hu-hu\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\en-US\msaddsr.dll.mui.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\ui-strings.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\sk-sk\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\zh-cn\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\CourierStd.otf.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ro-ro\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\nl-nl\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\hr-hr\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\en_get.svg.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Snippets\ShouldNotMatch.snippets.ps1xml C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Windows NT\TableTextService\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ko-kr\ui-strings.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\images\example_icons.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-il\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main.css.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\es-es\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\zh-cn\ui-strings.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeAssignPrimaryTokenPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe

"C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe"

C:\ProgramData\CF08.tmp

"C:\ProgramData\CF08.tmp"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\CF08.tmp >> NUL

Network

Country Destination Domain Proto
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
NL 173.194.69.94:80 c.pki.goog tcp

Files

memory/3028-2-0x0000000000860000-0x0000000000870000-memory.dmp

C:\$Recycle.Bin\S-1-5-21-2211465213-323295031-1970282057-1000\IIIIIIIIIII

MD5 65cd07d178800e3b07c29db313adae26
SHA1 46bc9749a9e045723c7aaa927ca1d49fea3cf389
SHA256 d531f261ff58abe72c6d9f9bf06750027e1cf4eec4864baa52a721a7318077b8
SHA512 6555a38a69f500db808bc3262007708144950e52eae92e901e99243981651a02e91d4635f87bc48e58c826f97be13db5c7a3f2ef634b4c53477b6c20bd827a55

C:\Users\Admin\3T2S47O5t.README.txt

MD5 a614ebc98430a25bc689615a8d71a613
SHA1 f940c2db3c21f1264b05191dabf6dc41d6fb3561
SHA256 7c3de04e7a1d7a44f84994244470f05faca7fd22fd80376414c0c0a596b696f4
SHA512 d7b6192a5d9f3e9535ef14a183aeea85f9a0bb1e624d4a6420b407510102dcd018c83559d4cf6718e6455fbb03ec0256c13ccbaf2336786e94c7ee8b6408e151

F:\$RECYCLE.BIN\S-1-5-21-2211465213-323295031-1970282057-1000\DDDDDDDDDDD

MD5 7094372e299456eb662d51dbbed45598
SHA1 5e8013da50ab0e7201d395b7a6fbc939f182348d
SHA256 ad5e306dd6df4e0e05b5d39592927b3e4f234642f96aed3c4091792745392f9c
SHA512 17dcc7abf94a3821ff95bee0087ea1767b06092df7ccd83a1a8569a296cdfd27b9c6675a8da2f3888cc7e0ddcd1dc2e58fb11797ce76d1b97f559de67598243a

memory/3028-1-0x0000000000860000-0x0000000000870000-memory.dmp

memory/3028-0-0x0000000000860000-0x0000000000870000-memory.dmp

memory/3028-9481-0x0000000000860000-0x0000000000870000-memory.dmp

memory/3028-10938-0x0000000000860000-0x0000000000870000-memory.dmp

memory/3028-11985-0x0000000000860000-0x0000000000870000-memory.dmp

C:\Program Files\Windows NT\Accessories\uk-UA\wordpad.exe.mui

MD5 426fafb7bd4b3b0922bf6bf27cfefd18
SHA1 3f4c414a2e85028cdf54992adf4c46f1df495cfe
SHA256 fe31d5863f66cae6ccf1879f468eddb2eb464e5eea63dfc2d7138d39938d7c82
SHA512 9c8b0561d86d062a29e0cb3f4b51b2d20d07ba732c76a92f4a9b248ad16b25cb41f7bc5721f1225b19dd91a01233aadcfe98f312cec9d673362241ab804f28b2

C:\Program Files\Windows NT\Accessories\de-DE\wordpad.exe.mui

MD5 40bcf6fead6f1bcf8bd6b7b30d0b7aba
SHA1 7640e6e641210243a0dad58b17b698d6d25382cc
SHA256 835e510b644602b8581fc25934fbab5370b817f5230f99beb9c82fdfd8cc72cb
SHA512 b90b4c574a2da07af7803746e01b323a5b64afcc014dca7ca7c0ef788c42fff98c1b7fa607a25c1b01a5c153157f120bd74388ee600af0d56aee6dc70f0a06c1

C:\Program Files\Windows Media Player\ja-JP\mpvis.dll.mui

MD5 aeec2f3f1e490d4f4928c1b004ef5e86
SHA1 022a4878180e1ba8ee77990f8efe5690a4df2236
SHA256 a7bad2180ba74a33c306dc9c6e501444f3c5c02e368b70a4c1a58abc6335efbb
SHA512 584f1f9c4c2f3dda682693d3e973546d2796df43095e48bf84723625ebdd3e13769e9c3101e3e88f5ae4aa78d1f66cb336df1b5eb4c17c6bf03caeb88041d8c5

C:\Program Files\Windows Media Player\fr-FR\setup_wm.exe.mui

MD5 624efb18d3874bbdf99eb398db9491aa
SHA1 5ce668da5381f0cbc7e2f7d391de30f98e635e47
SHA256 f819306b1b54c8c0f597ffb9e0114f8dc9d6af21433d0ea79ae22971e65d4e12
SHA512 7c9dafb6af14da7c743321af8e234fa840c8be099933f0406986ca44df57d1a2b4d85e9215d708b8b6c086868540fe44ae664f18bd7c39d0ff51d229fa27a5bd

C:\Program Files\Windows Defender\uk-UA\MpAsDesc.dll.mui

MD5 b614ebf8aebbfa3a07b340fc76c955d1
SHA1 7b8b7f97c71e59c41a33cebf6c56c3929d6ae211
SHA256 b77982d1fff4ac594bfacccf3d24baff6e99915494598f8ab12ca36349f44cd6
SHA512 d9caafe29db645093541cd5bd8bcb896ed0dc0ec6f1603d2607cabdc26f5730e6334d31bff485c1edd702919b16fb187cf73898651a45da7949768fb2e5d3327

C:\Program Files\Windows Defender\es-ES\MpAsDesc.dll.mui

MD5 a26054ca03c45c51828276c9e51439f7
SHA1 2a9d2dadf978777152f9a719b045e02d3cde1ade
SHA256 d53525e691da06852cc409b6047b9d83f001ba09e34ea71b733938e4e1557a3b
SHA512 dccd186f7616a67f14634e79071602b754f74bdf590b1e29ebbd95570b61a2d924ff280f4298abd972974ffdefcb566eee02a5a5f26e25e88d405702810a2883

C:\Program Files\Windows Defender\de-DE\MpAsDesc.dll.mui

MD5 26dd9b5efba7568d7efd815c82e90d7c
SHA1 3fe84ebb63804069e938767a1169a50a4ce9848c
SHA256 c1d0090c7cda0ec32993bdd14061eaaac7b61475c2f587baabc415edc36c499f
SHA512 e9f8070a0c11fcb703c83c82c1357ab7a1f357deff8bf483c9246d10fed57820ba18d9aab79ea25d86869de354a7013f2869ef62c364f67102a68640b75e2506

C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui

MD5 958bfe0a3a0188c9eb3d776d04e4ee3b
SHA1 c8a81c12db3d6b28e1b5d412a25e12e8c77efaa6
SHA256 2c7b9f88dbd721c3b9ca3f41b39558d07f8fb3047482cea93833497ca7fa5e6e
SHA512 90c99120233aa1df57d605873db88f6d753d3fa1a4d149bb443026ad871992274391880788efb9c54086e57812a7c90edca4dadf8910da4e2bb5358cabe5bff5

C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui

MD5 cfcb70834cc3a9acd7095422e6e5f52f
SHA1 dccafa9e7ace21d7ce95df2d6e0a853c1e9ff3d9
SHA256 823c2586d16f69ee99d25ff24595db4910b72faf9413f67f72a3c45fa2a5796d
SHA512 68192ebcc16302189547825912a5a12646dedeb262289cd7eb2eb1f5c1246036e2feffefe73319462983474d57f8fda52cb643f359d5e6f2da29426b3471bd31

C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui

MD5 ac03a3b08be3274b44cec66afb142b6c
SHA1 d2503b82f952abadaa7affbb46c03fc52c3748ae
SHA256 6ce44912d675a6af8d85ce4bd9254d790349cc9be2b54d30f1ca3051d9ccbae4
SHA512 1d0d5b5e65f3ef08f6a25da68f3c5da3b75500ffd34ba793cc1bd522cfa307f05211e234c4ad316230b664ae482f3c2ea0c498c0aa3dc7a063a67e898b03da98

C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui

MD5 6505f3f4972008f5080a2806f65c7a17
SHA1 0fef2da9950d74043603dc1fa6cb2e6ca9ef3bbc
SHA256 229b22cdc02460902d892695ffc896446e08d342e0c91f7bcb8f6181d1e4d076
SHA512 70e1231b341bdb4f105841f695dc038a3c7280645310786ba398ca36fed826d30861bb30da5dbaf9dd4cee28efb279fea238382ae925af98033409f5a9771fa1

C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui

MD5 de585bebfef47f57b7e52497bc9f063e
SHA1 3a0509d94446c3d8544efe61846081bf689062f6
SHA256 40ce4bcf44b00faf8b36bfb3e86534b367c5d3bacca1987cf80c56b3b6fafc5c
SHA512 875c2c05480395debd72eb92687f9b73c7fe3612edd516f32fd5a4412fa14813ae41d00178c2e4ea89aa3f1d16ba13d5918d00cdc59bbf3cd53f2097a21c9942

C:\Program Files\Windows Defender\it-IT\EppManifest.dll.mui

MD5 b53c005e85870d0d57e3b98d36f308a9
SHA1 13f750db672471724a321d9fb268592c17b08ae3
SHA256 09bf62fc8d84f7e331edff97034deb1e4c0f812b571ef3825c773577dffcb046
SHA512 f7849c389499ba49ba30c5c7038422da34dd7d1d23c11d90964e1e9851597af29f777c15ebc08e427a916a5b7be4eb746935985bcfc7bd0700fad14b15d3ca78

C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui

MD5 782bf1dda395088b1eedf383e5550893
SHA1 88eaeaa79cf34b1bbdbe6cb19d3756b3f3333622
SHA256 4ac532ac389eed56b5a67a32781beedac4e13cd8eaf0d7c01e94d0554e853cc6
SHA512 773c2d0ab5ff26b3678429b15c10d75b6b7a3032b7a435e516b465b810dcf7b4aa3ca786e53a7d99ae65dd4428d2809f2e4075bc31eeb464f599e54be6eea0d1

C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui

MD5 09db8886d5d84b3c6f02ca1875e6ccf7
SHA1 98353a46a13bd69fb56ad0baf2cc2ecd4eb46300
SHA256 7615f1f709f1e925d9da938746156d568b9196e4233274b4960b9b72c44cd68f
SHA512 01095a7fc7a3348e1fb43e61599ab4d80d6db39a5a4dd119f7b1053ae24792413e969e154f0d9517346927efbcda2cd5dfb07cfe7782320b68a5a575987027bd

C:\Program Files\Windows Defender\uk-UA\EppManifest.dll.mui

MD5 4119c80d117c6f70ee3bc8788902c1b7
SHA1 5730888538644ed474249d1b2931d57d0cbeb977
SHA256 c89756a460ec05cd5a7568b086f7e7761b8ec9f678db7776f52561c94dffa855
SHA512 30f55914d9700a2f0fe4bef453917e9e377cffeee6dbce7f1ce9cb500fa70ff91546a392c60b5c20cad22f58d369a3ec1a1f3c6a14da276d4b6924b92807ffbb

C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui

MD5 9e40f2b504f613d726e8dae957b955fc
SHA1 5e14f150c2bacef488e2951f6449553f46ddb444
SHA256 cc17ca2e9c2ec8b4eb7acc490938ec652f144b2bca6c569cc6ef2ba3530ff1e8
SHA512 3103cd94b0a2afb91c355fbffb5f560b8813d719743be0c505fbced8bac83c3605581ce79a73efb0487bee70a581fb466f2edd10a86844c5b42b01869f9e6022

C:\Program Files\Windows Media Player\de-DE\wmpnssci.dll.mui

MD5 4d790fe7ccce82c5dc572a7543b573cb
SHA1 5351ddb58a2d6ccb61a65bb3a3d8eb850aa8cdbd
SHA256 7c5718c619edbb177ee2702cfb93812be0c618e2969f7e3fdcfd63b890b905a7
SHA512 265b13180acc968a73641ab81883499dfd1f217057b2ed089c3f792ecdc112add067ed0e13765dbfdfcfcaf82ec1fe3aaad92c166dfe073b7389e79308fd7283

C:\Program Files\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

MD5 55f00366c7df50e3254175045efbbadc
SHA1 52a3a51e66417ddf0a64224e66dd45d28fea6f4e
SHA256 2cf75eea5212d8e1b7b9386798bf991a6ce40800de6ee02648c505243ff5a68c
SHA512 4182fb770ffb734ed578c9487769f46548c40471bf8f386b081148c06a67f7c6d7585633cf43e50c11c866a01a1cd4e94879c47e7649f9a8af500692d9060308

C:\Program Files\Windows Media Player\de-DE\wmplayer.exe.mui

MD5 851036570e8e7611c9b34e3921c06c75
SHA1 0aae07c30bc4882ce7fc52d8fdc292a35d29bc3b
SHA256 740d4b24281dd1ae03ca38810145dbb28d058b22169c07b5d02d1c9423411239
SHA512 37ec66b6f630cd5f3c57bbeb9bcaac89146b9d1ad95101f5fd7ae3ad60d7560e9297563e895e45f9e6675af558253475d9d147432e4d0af1b2d9c0f24269c6a7

C:\Program Files\Windows Media Player\de-DE\wmlaunch.exe.mui

MD5 76567d80c4dab994f65052ac2efbc834
SHA1 4cbd056339ab13df48f4c205633bd78945d30017
SHA256 8fc61cc2ee65200852c26be0fc6d387ea18ec4343a731904a1af7bc51313fd1b
SHA512 9506fae097c1dce1ead9ce54ba5b6f9e798e140ba0ee65d3ba1b5b18617831acd5d6a010896be300590a336a8dc3c74722d2e07c470f7d9d21f1e9d762a25129

C:\Program Files\Windows Media Player\de-DE\setup_wm.exe.mui

MD5 788685a47630de34d371fdb37b337229
SHA1 a33e83c9f01aca608cc48af6b0fe4f279d918c55
SHA256 ad81170c6eaa0737666b1b13336c453f2791e57537f4d75857faf4fa3712c370
SHA512 4ab19c05a05f0e532e1f68e51838eb1e7b43a6317b8ed63e2d138e5e5ed38c20dab53e31d2b35a9df4dd2262c349cb1fae4bfd8df2f729605beea4a9b5a8b540

C:\Program Files\Windows Media Player\de-DE\mpvis.dll.mui

MD5 bb8ba38ecaafde3bd2a738f1d5baf94b
SHA1 24eac53cd5921050ee1f1a54eba790716bd480a6
SHA256 39bf3cafb57fad42d267faada92c7b0d95833e8b7c2f7fc40afe3595e32106d5
SHA512 48fe2e869cafe418a81071feadb7beeb97b382eb8d250d0eed067dd8952bc4a46a9d684d3dcd894e5a8c70353bf27826c83c23267b592e87f204631ce7419f5d

C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui

MD5 b18dc5c289935cf52c33dd7f4d57b36d
SHA1 4b61bfac315e6a30af0661f77207c5d6497eb027
SHA256 52373ee6ada6b5c26b1ca29a2855a48697092226be13746d6f81ce70afe23295
SHA512 6142fdb3a7c53d2821be8bfa24641718943103d25c3dbcdafa35b33773f88a0788eb0797af85f5326c78e0201f26271217ad6454ba1b9b59c86068ebb97c2f6d

C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui

MD5 294d7e507c64fe403873990e3315a3de
SHA1 23f1640ad549093f3b2c11ecf7064798233e12b5
SHA256 9d88c4bc63d9668c57ff323fade4059e55f184edd74abb972fe93bf985245108
SHA512 db5d37000d2685caf068a9dcc4c40adca4466a00213ddb1f830efc58ceaaa5954ddd3d710808f6d157a93d9f2cc0c02a40723eb045ae02d2211043e27dcc4cd8

C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui

MD5 a802e86432d73175f9c5d614ce1121dd
SHA1 5edd7cb3589f9690c4dc7de83c746beecee80c7e
SHA256 84e04761e8248e539c12d3f41d64408daa9df5f5b4261a949709e0c137099f06
SHA512 1d867de1a9da07da654229e665676913af85fed82e85ac851c5d8a502c4f9fbfcfb0d72cee12514a4769e668389a4dee1b4815eb77d808a118dcd657a954b455

C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui

MD5 e73d87575f4bc9f7abc9fb2c3290a5f3
SHA1 743e1ecd66df4ccd44b99cb0457945b811804ca9
SHA256 c8f00fb06672cb287bb985f45267a3dd90bb98dd1a17438d52ae2dee5dacfd68
SHA512 c418bfb4d3551a99bae1973e4e1c776ea41d1ad74e7417b3b1592ab0244deed153083d91ffb5dbdcf67b9431c950acb1b5c617175327ff2687a11a8176fda0d9

C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui

MD5 db51302e15ac067f54274dadb154b015
SHA1 7923d8e72750e61fe2730ce643f8170c95d6fd61
SHA256 93b56587cc78684b207123aa653e473923521d14a0dbaf67a436dbd88b28ae5a
SHA512 749a149bdc88d305ad8e6f0b9fa98b2fed1a8a3af2583632cb8ddc8ae08d9695a990150acd9f47a920d849586d2a8d529b18da605d90473d0ef9a1fe99089092

C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui

MD5 c73936b31861c15e3e5fec00878a7a00
SHA1 6135445aba2a6a7aaa60e9b1accb0ebf630dd7f5
SHA256 467f67a68ec91ef63b4f533c6bfdb3c53767a99dd6f0d86584443542227f16e7
SHA512 495370f7f2f02f935ef0c31f90f4905c84d5ebb9a6cf6800a4af012566cc55f096332a15f3f4a9365a3864614fb36ecb6ebf3a42fff115fd1047fe18314ecb7c

C:\Program Files\Windows Media Player\es-ES\wmpnssui.dll.mui

MD5 44c760b1c10a9ae235226808372f2440
SHA1 44eb759040ec84f0e4b80b1355893ad96bd064c3
SHA256 fad41218279cdb414621bd007ef0db84b704f01582913365d04708f439d13562
SHA512 c1facf03b50528364cb2f9a88a3094a0c9abe9daa548f641cdc238da0bafa086d6489364bc9d15b556c03b9177a98f01ce36d01a0f83592da7d65f90430b7fc1

C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui

MD5 71942e84a14b7855114edb1b3aa04fa1
SHA1 879290ed77c1c70876055fc5a8881f704d6eb8b6
SHA256 e4a4b4fc573408f43cfe7d1400033e65521d298c8f8fe29622f86eea3ea5dfb2
SHA512 9d1d42d8c339eb901f589b017541403085929f8fdfaae4c4ecd6d2c3bedfef9f5a12948359ba8a9651f235835bfdcf899d0076c2daa5ce55fe45cb64fa679fe6

C:\Program Files\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

MD5 8f82f5804c23829e309622803fd2461a
SHA1 158a72d3d5d42bf4efa15a44453fbadeef9089a2
SHA256 826470edf5c014c4e514e5cc9654184cd33c518c446c50a65955e7bea12cc477
SHA512 d4cd9a284f1a614c042f61f659055ddd617cdb2109279e3dfe217b0b1eb80b6e16016868e0b9ac25f1b8682826a6a9b117689db05c184d13efeedefdeb316b99

C:\Program Files\Windows Media Player\es-ES\wmplayer.exe.mui

MD5 017875c436f020b401ba5d56205fc04c
SHA1 70cba65749f2825906b93920e781873426cc6ce0
SHA256 e0161f13ba0966c8cc00ef973729d7261fa113daf08df820f8d8e3b14a7cae7e
SHA512 986f99ff45e977619dc6d96ddde1d7751801a9071fb53f0fe59272e18e37e87f762e192da5753f17e2d2a8e602e3490b10a950424cdf73ab567d6de5cecc63d5

C:\Program Files\Windows Media Player\es-ES\wmlaunch.exe.mui

MD5 15bea913a3b9a090c3bf8edec7ce2ef9
SHA1 b5dcb36e0c58cea52249282ac56fe4bd01ef89b3
SHA256 886aa662ecb37c1b43a619a1bd23495f3e0be1b5f674a6dbc491efe0eada77df
SHA512 db1985829599af4478e12388dd547ecbb5439b1c4b5f5ab414a26bdeef1a25dafe0919e4e8837896ab9a9cb7395a9c8ebde29e83eb71b60391a1bb2e61544ad6

C:\Program Files\Windows Media Player\es-ES\setup_wm.exe.mui

MD5 479e19f26814a59303f34c7dd8db88ee
SHA1 0665df11099419e129e5e4120e5053e4365bccf8
SHA256 3b69701f92dfebed99eeeb4bc0de9134bdb5a15e605f0253a0929a1b339f2b98
SHA512 cb1de982269354bc841b7cac9d2f1debf7bb1e00c7837bb78f97ca52ae3fdf9e9e575ab188751a70eb6effc19f0aed11bbdce9088fea2b09807ef9b401a0c066

C:\Program Files\Windows Media Player\es-ES\mpvis.dll.mui

MD5 7182c7a8bfaf59a6fe53e5129f74751e
SHA1 5bdc240fb5b91a3adaeb905671b3cfaa6fcef89f
SHA256 5b447701a9507a66f1923bd30a6f29acba3f8db94a529714d7de36d665f6e964
SHA512 f7dec14c69ac0ba2d0640ee2ddee0b877def62f740d67cadc564c017551d2e22db7f3ff2ab77f29ca752fdb7eb5deebddce9feb5ad23c587d7abda91e32e4a89

C:\Program Files\Windows Media Player\fr-FR\wmpnssui.dll.mui

MD5 8890e26f91f773d8af0aed1db26e2049
SHA1 e707a35353a582d8148899d254c93336108ee18e
SHA256 9a91035ab535986d22452bf3e181f7619cab333f0832a573c713734f0a9fcd80
SHA512 8489112051560ec0df1538d1a453bfdb88f07978bf08b476c5f944f8be7bf55c2eadae9fa793656abab956234f20cede97bce7b9b9bda7e8c2dbf2dcc3bf5c8a

C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui

MD5 e7ff60b6cec9cd4d8ac86435c757da8d
SHA1 98ed6f56f44438efff0018087a338c4261d6c4d9
SHA256 e2e76e057263a872d721f1444b678226b5960190b953810ec824fa1544e5f80e
SHA512 62f9a54721d1dfc46e1c7e1eed6f4f4626a55627f79736e9019ea73fb747170c5d7d7fa152a2774b3d4a66486e48f627bd7b7a8b49d9ea978138d4464ae5ad09

C:\Program Files\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

MD5 f54f540d3f5a73ff17d8bd873d62f2b9
SHA1 5fd902dd79aaefbf37690e13122d85b0c75894dc
SHA256 619ec6dbd9a0d7f7b83501b24737573405cfd7e19c566beb4883b79f651d210d
SHA512 5f47214b6a686cba138b80725d9aeb240a818fe91284fce0712d2560db93dec3cfb73a1dd48d411a543856c0c0a2bad744a34dccebd04845027c9b834a4fc583

C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui

MD5 ae7e0dd1a6c0bb85b8952dbd87f71e9a
SHA1 4aa143752d02a1688fc75149eebb829a6c9f7355
SHA256 c4e1eb85fdd8a2f34e60f624634b254b7d01cbc7094f5e36cf7f4c35d777e2bb
SHA512 6782e7426af2d47e1cdaa1503f0a89ce42b4fc783e0a1c176d8d64fa763f32759802be27681cc89378bed8ef4f16079d214babde5bea0f729d2077b2be81d843

C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui

MD5 35d9c482d3ba912fb5c46dd590804dce
SHA1 a8565439cfb77475261b1deb3218867eb841ec81
SHA256 cdfde3e75f68f7134a0b7a3dfaf52b7d8ebfb28d7d47e269e65dbf2246d7ad42
SHA512 937ecced9389ef9f5261fb64540c1ba3b3249bf8d18580f384df1a9c3b323dcbb1478ba461926d9be700361e05b09f7f7d395abc30e05496d1316b200b1292f1

C:\Program Files\Windows Media Player\fr-FR\mpvis.dll.mui

MD5 9e507240a6eb59809d8bc15d89b942c2
SHA1 687d50560a993e676827934a3c83392cec81f2e7
SHA256 52f4580d3a1cccd2eba1cb1f34729e893a3e95131f225b30b6c27b58ce93c2de
SHA512 98c735cb4aa0aa588430b86db6f2d4d42111cda0a21d117e28fbca238fa0273651c45da542c6593ac4b3c6f8328ec95040aa8417443d57261056e2868fa52463

C:\Program Files\Windows Media Player\it-IT\wmpnssui.dll.mui

MD5 89d39bb3ef01d499672fa351ef455885
SHA1 0e3220f74a8247fdedc69709910809d894e02cc8
SHA256 484864de8b2fda5df36e8c6ca78deb3f7858bc2778d9c019a76d9c6a90f1c8bc
SHA512 003f63d610e6f01b68cab5518100752bab645946c09a58a39d64d3e1134c5c11163f5ea5234dfa71167e1b741acb0a6cdee0fc4657c569b47627f49a3660fa1d

C:\Program Files\Windows Media Player\it-IT\wmpnssci.dll.mui

MD5 726563ca414d4eb61dfbfba2cdb9aa4d
SHA1 5b77a64a0099edfb276f3ac1e92f91da6feb34ff
SHA256 8f2ca68f300f084a4c38d7c0bf253f9d71b5845d569d0a9cb8a9ea49ef34eb59
SHA512 37607a57b1e0adc0477af2e30eacb9e1bb97925983e06a540578427a154563f003afd1797658a85aacde488fd098a0da5a31e36e41650856993a9b30cf217800

C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

MD5 3bbedcf07d47acb4e8b65fcbdb22ab1b
SHA1 799e20d0b669277831a8024902b19c8557b79588
SHA256 f629afbdb408e2ba005aed8d19ec42776820edeabcc142a1fc5db251c03fb0f2
SHA512 748c8688910452d88a79a806f3e9784a9b628e08fadf51bc3b587e8db4a3e1429d72196696874781e6f658885480b624b7aee0c01bae92292738be8be6e17599

C:\Program Files\Windows Media Player\it-IT\wmplayer.exe.mui

MD5 ccb92cfc8057f1dc85313d9027125e51
SHA1 d6d9c6e88e075910939c90b8d18f7bef461da3be
SHA256 d5e7285f33b4e8eb7b7c32f114fd76eb77bd02f451f4b6b5ddc0e4cd6e198985
SHA512 72b510e14f04d66fe1fd1b6527b871c5fb6b8e220a68dc4f6ff73959399d88dfe18c2473451c4f053941cbc52549e4351e142f5d90a94257a42b9ffd0dd6273e

C:\Program Files\Windows Media Player\it-IT\wmlaunch.exe.mui

MD5 d25afbc891befc00ddbf31df1b5f09cb
SHA1 64c0bf7f211873d1b4bfd97eac0771027a4e9d02
SHA256 a41377315335206b931c0853e22e652907b2feb28d09205b72e7d62039ea6fc7
SHA512 18315c59391479c69cbf9ae92d94734ae001d72795b0d56dcca7624019d6c1bfef2a923d2c28aae890190884c2e74399a1b019401b111e8c84501dff042cf65f

C:\Program Files\Windows Media Player\it-IT\setup_wm.exe.mui

MD5 3836e01a5abf0c1eb6344087b8128b09
SHA1 5733edc8ffad98b9f1f75fbd253134724d8fc834
SHA256 864b4fa2b6f3cb48867c9918abeed4ddc5fc301a93dcd2756c2e6525fa7f6fb7
SHA512 189ca8a59d17a14539c8594b86c99d231f1e97386bd409dd978f5770d241188e7d5394ea15529eca28ec0528cc690ba6d2acf57b4fe46d294adee985bd8e02c7

C:\Program Files\Windows Media Player\it-IT\mpvis.dll.mui

MD5 58674839a97436d7fdbad1061990858c
SHA1 ea1edbe1329ffdc66bef85e551677c1bb767344b
SHA256 f0f4d183e49f8658854eed381b684ec65d3e2a33f7aac34e1029df525e115b50
SHA512 399fc7e5b4b7ffaf3482d4ddc5c8460b1e8cbf73ca40505006b772aaf3688e604487b1419e43c3b8456fbb48aff1bc2bb0653a63e369b6b89cc1c18fb296892c

C:\Program Files\Windows Media Player\ja-JP\wmpnssui.dll.mui

MD5 066aa37cc410dfbef9d107d236608e2d
SHA1 d19391530af5dad78b2e93c8effdb31a03c45e9a
SHA256 09206e2dc4466dc25c71dc5f2c0ea0a595abe6e17e33c9ab7892e6b9f8ca7d37
SHA512 302e6c9625de332f7fb9541c4313ad619cacf3e10bd0bef90fb3fc9cc22d900b3b5357af4656c27616a0d1c7576f92a756bee3238aae0c8ea6aa8c3e101c2bed

C:\Program Files\Windows Media Player\ja-JP\wmpnssci.dll.mui

MD5 4da48e84d29bccfa022247fa2450f061
SHA1 679b36a8d3f65596853a966424cd0d5c091ce835
SHA256 b360b8a1eb987fd941f647d26b7bfae4e8cab517f2299cbfab2b6b90998a9f0b
SHA512 049495c192992093ef7bcb3cd05a344d71c1897f1af7570d556284fe8c6b33691cf46b345eae6a3e49771bb1f0d1513d080460609fd1b68bbf1e7773d7277f5f

C:\Program Files\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

MD5 e3e751680d4204b6f2dcf77a552bb6c1
SHA1 aa31e34209b76815b85c6eabe89be06e99012d56
SHA256 7004abec1cbe59d2e40d799c352143b142b62f7ba2116f7272a7499ebb3ed8a5
SHA512 3e2f4beaec81b5b5e28ac6b256b87db9f6b21a5348b6cfc325477a31b35a3c49f6c08e5241bea2ed7b5616758e7bfe9e9b02462d947bf442868953da0ec900e8

C:\Program Files\Windows Media Player\ja-JP\wmplayer.exe.mui

MD5 3e341149b56da1e35c32dbe895b35835
SHA1 4927c60238b162b8166c081833b7ac11b64d789e
SHA256 b79b6f7940b445597c23a67da2b7d1ec6d631f5c660d7e4e80507a7d9ecdee04
SHA512 36dc994ac72f2f5f92da57ebddecb9c0f7ca85c28d15b33a77328122c213b3750571b3307f168155bb5b134d69196e97083010711a956c51e76cf7075726bf89

C:\Program Files\Windows Media Player\ja-JP\wmlaunch.exe.mui

MD5 d227aa341144cb22a47cd4840bbab812
SHA1 dacf651e0ec80fdab106d79e9e15b2fa3dba9614
SHA256 76efcc597472ec31eef55a1b2789e02a73b938fd0e9e0b2a13817febc2f79d92
SHA512 db719e2ba80b139354cc1f5d4e8c9f80880145809963c305bb95423688d759c8246c8f9370bd7d208f3f8df7998dab01980ce2d95ebe3c161f9b9699b9372301

C:\Program Files\Windows Media Player\ja-JP\setup_wm.exe.mui

MD5 ec2bb1501b54d40fdb84025c5a5f6400
SHA1 878fd8a9039eb1210c4a2808fdf65a12489f93ca
SHA256 2ad0ce19dc525735edff4781dc2992093e01c9754635d8f103ead58346a031e4
SHA512 0e31a98fdf2c3f88aaaa6398a14d007cf68ca1ac30249621be6e995426f2019bdb1342fd8595a3a6829e4e1c6fadfeb532288205ed5db1dad2907aac8cda0628

C:\Program Files\Windows Media Player\uk-UA\wmpnssui.dll.mui

MD5 fbb87e36a73a24ad07ca794a9716bbe2
SHA1 1db3ee0f003078319247031585688687c1ae354b
SHA256 429f9edae16562fb584677f02c727d28a5426e56696f8d2198fe63260de051af
SHA512 f07e90cc214ca56931be821dc574850dac6a8b82ba5632bfcc845c04505697e9b45faf3490459007b8d952810e14808ced82cc74168a99b8cf77a53dfb2d1178

C:\Program Files\Windows Media Player\uk-UA\wmpnssci.dll.mui

MD5 5ebebdb2204643e11fa2ba8b0e090d1f
SHA1 5a6c2e77fbd655e2ad032f7188197417e02467a4
SHA256 a0f8c8720aa1ae2900f7e28a0488b958f48803e79ad589875134597412dc7cae
SHA512 59fd5eb9bcdca9c03ecb81b2301d9af3751d686695fa0211bd54ee7c2f3c6de041e94eeb7d82b785393fb1cec0b68afd3f15d9053524b1b4cd1d36631d461891

C:\Program Files\Windows Media Player\uk-UA\wmplayer.exe.mui

MD5 a28a2950ee4f55ebc8003da37cb22e0f
SHA1 3c77e50a3f3290fb57dc29d6e9ccefcd40cdafbf
SHA256 16f9bb44ed115c4dc0175dbb1c6f4ff7ade3afcf353a3ea1e0a8e4cc166cd592
SHA512 e9c3863ec98ab3731d518363949a7aed9294ec9a23af4fe877cd5e4dd52396876d9f2d0254b4ff0dda480d821d631342776b66bc4f8818669d9abc87d7f92b14

C:\Program Files\Windows Media Player\uk-UA\wmlaunch.exe.mui

MD5 316dde8a3e531637a3c786c977db9779
SHA1 f28931dab0bd0d2aea112fc4124fb16ed2451570
SHA256 d4c73a13653a13d8d585f0f9ba49cb617012edc985c59604e45702c308f5e18e
SHA512 9134de6873112c8b18f2f5e9f7eeb75fa36f7a103f166373bdf6b66e296e17be79eb2b6c415ad682d48b64e70d4a991e034988582e226b361871573148e3cdbd

C:\Program Files\Windows Media Player\uk-UA\setup_wm.exe.mui

MD5 5323816fad413fcbe8dad7e9ecb99b12
SHA1 7ce91fef49931eb24f789337a0560d857e1ff8ee
SHA256 222983a9b90f8fb167d86659f708f66a7df0140baccb001a7636e89e53f24f32
SHA512 a942e2d85a487c162654232c515bef88c99ee014a6c581a5233b4350d3a5bbda6679fd372c122af136274fade2701e3c4f37ee761b8dcdc0a9d280ca66d4b949

C:\Program Files\Windows Media Player\uk-UA\mpvis.dll.mui

MD5 40b56f67901e8d190536b3a1d151e48c
SHA1 82b2c85bb65b24477001043235fd8e9b81ac3295
SHA256 98482487a51a834e0cbbe84ce09cf5f84ba28d5ff86ed6f81c30482331dea61b
SHA512 3538af537e79ed9a1d462e2e818e47284e9865f1e803f32143986106d694cc2b19561329f9de99b5fb27927dedffbd079111144618e5b00ec57e5041c2d014d5

C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui

MD5 df9cc99d1d8a759a41d05de9285604bf
SHA1 29833d187ff9f1b940830e6d3955b1211147812c
SHA256 9f2bc70e918a1a88db94cda7f296522a0f48bfcb14f88ce9a3d0249c7ffe2e13
SHA512 a73088e26ac1ebcafb797958eb2d508a904038c8c42405c1421ddfe239de4116ccf320525cacb9b50626277c8bb3683fc37ef369e0d7dd4524978b4b3593e083

C:\Program Files\Windows NT\Accessories\es-ES\wordpad.exe.mui

MD5 da24889cd073caabc5176b70348cdd7b
SHA1 452f2c6576e830490108fa4a730157433ba0db01
SHA256 4b166174b87126143f41613388eaa0f7028f4313796d1886609cf6d3b27ed4ea
SHA512 2d64d052046788a7f6267bb06c6381bad499ccad4701b3b22ceee958f87a4b166ca00924560dcfae4eac871d2af878eefd22165f42d536ab0de8b9835cf8feaa

C:\Program Files\Windows NT\Accessories\fr-FR\wordpad.exe.mui

MD5 fefcc7b91080a58e3382575ec8ec4529
SHA1 d2fbfefc795f04049dff7c7f2fe7103a06dcfd8b
SHA256 654eca9448040d0fd9513221d91f480bc4367c266ceff38731cf0c998d8b3aa7
SHA512 3985945974fbdd1297a0f804907bd9bc02b3f0990791e08eef36d38ed4ff138628f12ad4a2d3667e3fcf668dce694535ed0032c29cf96d6778a3a5b49776da65

C:\Program Files\Windows NT\Accessories\it-IT\wordpad.exe.mui

MD5 0787e19d82817e319ba29a6a8ec94735
SHA1 1a9fb8f783f7a5c55adb6e81c55457124ff438f2
SHA256 e4f9feb12c8d4e31ddd93c7216443e015ba4d9eb457caf3a498dbe9bddd9a7a2
SHA512 935f9c2bd22b90c4efd1ba035ba97198bc9bc2bc3380eedb72a5411a60429327f0b0a9a932330c4d00983ff2d58f037c1719c8e7e776d134f129a52478851311

C:\Program Files\Windows NT\Accessories\ja-JP\wordpad.exe.mui

MD5 8352f46e5b8fc5688cbd9f9f1940b405
SHA1 7f5af1649599bbb098115ef70359050a6227a414
SHA256 112d96f1a29245f335ac41d29f909eeb10bda946c7b61b3933a1fc5f02054a3f
SHA512 e54aa2f9da9a3f779177bf8166419f8b704981601c31553634f36cf19a0a1541589afd7789aa687b495659a20ccb5c5d2b1283da6b845ed48821fa1fed626a78

C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui

MD5 d2331f58c6711603ad4dcde247690f1e
SHA1 04597b50e9b0ca0677e21b179038ec48ee53ad33
SHA256 a6a35c31742d16c95b6e264818f7058343dabf7dbc2bc1f732d23598f777af05
SHA512 4b95f627d8dbbbc7921f72c756827f8997f6df2727477219901c82d6820c5d1ccb781bc50260ca39b4f5a15f77a15198314b6ae64beab37a5e86b7f7228d2ea8

C:\Program Files\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

MD5 cc60cb0c6b20dde6ed2bfaf7b399223b
SHA1 f496f6156ee06ae8994762810dd89b72ecc1679b
SHA256 44693f6808b930ceedc466045c89c0e0a7882f393195aa1381937124e8c03d12
SHA512 acf0631264cb97860a88d9fc4c6f594e2aa8f6ba86e0a0377c67ee7cc833a4083b13505b9c28f99af8dc23a36e59b08afabeb2b4456ab1088de853c3fc499d2a

C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

MD5 efd41e634db4bd19046ceac11515b843
SHA1 67f9aa3711fe33710f6ba1289613ed23b248c072
SHA256 b7a09cf9000b75fd1c848c10daf35316467150e0d03a94b0b7856b0665ea307d
SHA512 2ebca497286e82a2470eac04231d838665062a8c39d5c85dfc5b8c876c1f78095a1699059e63d4d87e59a6a9bd00238b2a4ced8ed1b053a532e6670b6a6ee96a

C:\Program Files\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

MD5 5a79040e2d433dbdc9c2f14a9cd9d21c
SHA1 51d5a864d04ef12c34db0de7c831de723e74765f
SHA256 e5921750a118b8780582529ef758f31f6a6d12fcf2d7fd8894681124426430ff
SHA512 7aca3e785972eb748f45d153cd7dbf1e7884597cc371608c8543e67d10388b2af559c82c977cba3b82221498c331b09320827e93735df0afad0d09e055b1cb12

C:\Program Files\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

MD5 8af8d5d55e674a5ecae26ba941f994a8
SHA1 796b8f11cb45134f126b332fd485590ecb8f3d6e
SHA256 e5a223235afc8cf798d6bba9d493b0e56354f11f1028f2f1a27ac8301ad235d5
SHA512 04b4ebf55f07506b859c7595bcd7924734507cbfa679990148d33a9b9b83b1ae00022434129ed07b42bf427ebef4789a0ae25f756c56bc246088afe87c9b1a92

C:\Program Files\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

MD5 313f3b3c3f2e0aee3496e38db2f974d0
SHA1 6db6ae2255d90dc83f2a13883fab044e06dd4794
SHA256 ef0ae521617cc0581df54cb9488fc91ca2746e34f49d244060ce6163c08ccd1c
SHA512 9492016b3ab6bac8c87a67af8900da8e815a0412912789eebef84ac15e57d54980a53cecc66d6bcdf4bb893501fe7d43e09be931974fcc6c61b5ead658afe2c6

C:\Program Files\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

MD5 52b064f65eefb7cfd19a87d88cf37dc8
SHA1 71a9d2dd602d8864833ca4dac8a60d175220aecc
SHA256 38079cf56959d91d1b3b549d93d530c591901c2c7d1832bed0e951c4107c91c7
SHA512 cc58fa53c1db4c66b39c3900e749efff9987d8d3ddd998ba31de1b3e39bbd53ceff6bc4a862316e409f35c3252364eeb098232c3efa9723014efac3ae0922a56

C:\Program Files\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

MD5 ae8213eda6e0c374cdb60604f452ca00
SHA1 3d87c148b31d8a3c7d7c683a0b47582113ead1db
SHA256 de8af60359fed0281d5e373e2449b08929e6ec46af6332e4579003798db6ca27
SHA512 0703d8756eea54104e55dbe98c0d8b0ffa1890ca0aae8949402cf291110cbc49980b662b2898e1109675a4d5d4e1ea1a861fc018513393a34239998025386636

C:\Program Files\Internet Explorer\de-DE\iexplore.exe.mui

MD5 a5aed9b33be4e4bf77e0a8f9df513be3
SHA1 f3d145a6b9ee9b8ff862ee5be43f4660bd200c44
SHA256 c76e07a6780761ff75cf90068bb7ebf01b4f9b582a48100c5b2847a24474d6d0
SHA512 c2b5d72ce964da6bd4a08f6921de36bf9339b0af0ef407040bff1eaf0f95183df54781968eaec4ee4ed313c8bc38eeddf7c0707aaf78d4bc80debc572a3f26f2

C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui

MD5 4a2178e9b18d7fa31c9d7c72d9469eb3
SHA1 e6e8a7fb99c77bab1c626e38d19d18e58e0b8d2c
SHA256 882654b2bfea6be9a6ed385024a74dc3b32a0c4073b737dc858dde137ab75377
SHA512 fcc48b60e3592c6e456ac1d2a98e15e0d075f458051c6838415ae2b2450da193ec375d5da3fd941a3a93764993971cc393bd03895cb72287e3c932c6b9fb3a78

C:\Program Files\Internet Explorer\es-ES\iexplore.exe.mui

MD5 74a7c289040c5ed4761ff7d1911aa81d
SHA1 d7b47f8955a44e015b1d8a74a16830ac4b0f476b
SHA256 e870257212ac3c8c2d334adef1595d2160b5dd2521dfd763b415c4b34188c669
SHA512 b5d70c510aef7b71e1fa8939e2fdc255210c53a9eac93ea0739903bba2c12e38d15e9055a01fc0fac45a39ba8ce21d09e45ff05b05f770d2c2229d4213113e27

C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui

MD5 986a1a81bd6b000cbbd0c1eeebb5772a
SHA1 fbd717cab9fc4c884db44050e2503aa9035ebc7a
SHA256 a424642b366a141b4a3d34e8693b79c4bcb53588b46a4a3ced6c93a056d49dd2
SHA512 acd6b80eb73565f95c92e3df964a7a2a34570d3d2d27044c739d6bf703868036d3a393801e603ba3aeabfb42fe49dc546a6051ecc5c2954268d3179d062307d9

C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui

MD5 48c292d006f44a1dcc1bdf48abe2e8f0
SHA1 a156eccdcafc04b4a9245b2fd3f90726527960f7
SHA256 b559e7e39b9028ea0b23640841e4970c50faa4a92a679fa413fc9747767ce599
SHA512 a2ce9f0fd376bca5b3243673c688a99ddb56896ad9fbc51b1ea20e4eee28ae5ca317b01b1f49f6090b0339bd8547f779350b21ed17fc60d8b863f991d83aa44c

C:\Program Files\Internet Explorer\ja-JP\iexplore.exe.mui

MD5 d9fe0b94fe2c9d0fb91790a6ae2c7b23
SHA1 70b0b5a089c21f436d348c38c6b328aac45cf2fc
SHA256 d5d3be9ed3a99af159d74bfa205cee257aca33363c9d37c6307343bf85157923
SHA512 66696ad8d63ca0a9c822898cf033199931118fbd6971527436628ac87c106421ecf85fb7fd0b3f016e9e8e212a9c728f2d37aec5daaa7e0024c92acf25b3d1af

C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

MD5 d3aff83fcffae669977b369d34b9e38d
SHA1 f968bccc7d039f5b873f24d4ae220e71d887c0d3
SHA256 3833bec95adfd35ec0d071d410c23aeee8e9f88a1b59fe8a02c56dae2392e500
SHA512 790ab9db9f774069532c75ea12aa7b65b4678de499ce6cbaff625158f05dc8bf6069417bc30d8c738cf0c9d6fe363f7413f3bb5eaa8968ecde955dc34a51489a

C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui

MD5 092bf5e3b364008a0f47145d71efedf7
SHA1 9d90469e71b79988fda04c02a5386794463a77e3
SHA256 a6748769ac5c4f17bcf0afe8b50ee1d899de36bdca841a0c69d2a223bf40d845
SHA512 0335642d43131d589fcbb2c88282b6c5cd7e6340aa0c050cb5cfb0abf8812ed70d7f19b21cac424ec09a9b6573c49e8f48c685a2cc3e598d3ef7ed30774c9cf6

C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui

MD5 4b71deb2a35662acab2282b5816d705c
SHA1 f6d30662dcd19706ae0bb26dcdae831e4c3dbb61
SHA256 41b5b2a3f16db30b55486a65c6581b97ab47ec8f5195bcedae4e3fd732b2280c
SHA512 36c4c3c3cb70cc55b812da37a261a34c45beb83ba88544f4b2856d212099de4a779cdbb25f7c54b180ca6a91b4f210b1c74dd39d2b5a804309a31c6919b60edc

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipTsf.dll.mui

MD5 e81f02f5f3eff7687473c7f745c7c833
SHA1 51a5a885100260173fb158f4b62020b9bb28e5c2
SHA256 d69667304fab48934bfab381b75630dd8837ae85b5b1a65d6a995e5ea1fa2873
SHA512 41832b66c9bb6be2702bb5963f4eb37d278034db16396cdaa2db2a610d798af7364d40f1e5a5e340df287dbef33cf809c8a4663ca97b4634ccbcea1032876047

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\rtscom.dll.mui

MD5 0f5c0a8822dcd5b58655b20e92c4478d
SHA1 c894940cec787610ed30653b985ee71676e90c5f
SHA256 6017c073f39b4f138c150a528f9ae94ac4e451e9749680961611d8c8003929b0
SHA512 73e4e323100bc00ef72b787b19628c65bf178aa675b2ad31c0ec76c5473b28b07ed2de6b48d4d9691e0a0bbcd53f0ede23d80b0ef47bfaef69217afa3a936d80

C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipTsf.dll.mui

MD5 537d2dfeefd7d91e952215b8341e1428
SHA1 1246579483d6f9502f19ec915e09a199b3d5f20b
SHA256 1b839127b3a90351c86d38a90bead32b62fbaff2171e580fef2331edbb3645fb
SHA512 4df2cc0bca6df21de37092cafb3d8fdfa76a028731ef63c8a9a211992b349178b2612b8640f8376d51bc7566cc4b80834a248427abbaa57bfa6ebda9a69f5b7a

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipTsf.dll.mui

MD5 1bfa780dfd4ba9bdc9670e3fb3a5e39d
SHA1 3e5fca9b0902d8aa56a2a8c4a51c5c79d53823d5
SHA256 bbcbc0752c1ed119c68c474a4ef0df2c4d99219544de44d1ca2c958c0ac454b1
SHA512 7c576c68f8656818f3d2a3a918127ba04b271f1be412bd9787b13c4d57b7d97697c932257f918ebbad1319a03745d28dd89711b50aa7ca641a39dc95c1edefdb

C:\Program Files\Common Files\microsoft shared\ink\de-DE\rtscom.dll.mui

MD5 ddf06c12f110cafd155be647c084d98c
SHA1 c0bec118f530bf04396ccabddcb2105e87dc2bfa
SHA256 59b9ba4cf0720a169da3fdb7ce5d826dc588a4f375fd599e02728f2ac99e2fbd
SHA512 f8e99d4e33108c006b9d6dbbc514050d2fd6f4786104e0e2794096eb401f63a860efda9402ea15d68572ff5e8f7c37f053f0147da2d2f9ad2742e5617c2b0668

C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipTsf.dll.mui

MD5 db475586fcea37da15e457e51ac2f27b
SHA1 27d849dcca2e4cec40b7b220288e786ef6fb37a1
SHA256 2b3a269781f7a72ccdfbfdf900977c04d79dcc4e6f0c9a7b52a4b096ad26dcdd
SHA512 acd598e9492b20b30e3ec2585c2850af63a55c2898f20df8a1e9d3919bc1a78b23b6d3fc44f6582bfa85def49debc0c3031cd5efcfbb546a848a42a05d266101

C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipRes.dll.mui

MD5 4d9454c77f41a2981c5c6f663cffbe0e
SHA1 40aa9290f124abe9bf6f7b93e819340e67e4e523
SHA256 e6d46a95db1c8d5c1f693e2763184d8ae142e9bd781555e80fac1af7c1242f6b
SHA512 708cf93a069e2d4f1d5de379a4b0a1dfd67be3b5b9a9b100e99873efeb7fd68539cbbad7edfe558104c8bdcea88c22de9046a9bdc12251ad70a20db584d6ef16

C:\Program Files\Common Files\microsoft shared\ink\de-DE\InkObj.dll.mui

MD5 1a200b49a0126831ce4080b988c8d3a0
SHA1 5ceea2a90d3139df6e1f27e66d10ea67945b4eb9
SHA256 2be921e4fad3e079a2579878fff2fd8d5a9f432f7537a66ac86181229c298eef
SHA512 1fb44575bc3f9d523540f0bfd5e4db94d93436a24224053a238df758121ddf5839ae64d1665ec61c8406ad443ff90d738b2ab01adfc0c31c0ef7b14487852b06

C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui

MD5 2e492f63644a734b35032713c3dbc109
SHA1 ac344bb4db7306a3953db3e42c9c6938c89a2a8f
SHA256 9e6ab529ef7fb3b9cbbc88f062b615269bcb51f4d5c5eacf18311b68305c2d31
SHA512 505850a99daf9ccae187ec26730d0e6db8c3c3d960d656ea96d9dc71d2f62bf635c833a566c7279d611737e956440c4a1a9957bd43e00e903b0521c97b6c740c

C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui

MD5 58e5acbb55acb02965547d8ab0185a27
SHA1 024d8c11b269775c2c2314620a16f0ceaf01795c
SHA256 b5b3c5abe61d3a6fb40683304231b35c98f4e5dcf8f93d895f48f9539a4b0974
SHA512 aad6ca50920bc28b6a0dd8b1b73e59b7481b24118fefb1620fe5f41fa7d9585df785dcac2bb232b060d07897af05e9334a156d25d589c2b20da010223ac59fb3

C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui

MD5 9e068a0e78f52442f8f150e52b1b70e4
SHA1 f15d55e42bc7c1bc4fefdc189505d80f807c8017
SHA256 99040fe3d3a7637c04de7bdbca5cfe3eac4e49527a22f1f9797f4d089f91bbe1
SHA512 c4f3681712493856327f6b259234bf6aff781cd231e088c0dc172acba8362295ab716f072e93a3c1a7996570a7d475bb445a39264bcf78ee35b1b12ab4d16358

C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui

MD5 2af3a209364b4e2a4f006cbfdd353b4c
SHA1 161cf8ce99b5af2f4835fef70f6fb7a2cf4cffac
SHA256 4572a2503c266cba7828bfc9021eea4eed651e62b15138869fe9148cca338e2c
SHA512 9fb1bbe9c2a5d0ca8969d1df38310e7f04e5fbace80f8037f705c3dfc9852a329e4af69606458c725523350d5b4573eccee0b197d14408407589c2804b26b6db

C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui

MD5 891dac9b387f515edb9be64f1231c690
SHA1 8e7b675379e5e8b3ba06637bb453d7f8bd182e8b
SHA256 40e7982a931791741c1e335bacdb4676e58bcd9bb9394b262fdf5e56db642f6e
SHA512 37933473bcf4903948e07e98b466cd20a489afeee4fc3586b3a71de79c9224238bbccd8e9e0496187f4633c8abcb7df77fd819cd16da406b0e572aab322c873e

C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipTsf.dll.mui

MD5 32c7d70ae2f4e272cd8b59658ce16eff
SHA1 e9989b007476a2b0ba968903e35975e9f0261d8b
SHA256 0c34b761f162ae05fba30760d0d0e76501c900e9670c04422754c0dc76564e0e
SHA512 26d2ede6badb49ec93499bcede12901439fbd13d74f76d586640f9bf7c933721ef3237e35f266d0fcbd920dba84bc7801e521f56beaf3dba9466f7b47e2d86de

C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipRes.dll.mui

MD5 d41fce1d434b81b282c3d46c69875ad7
SHA1 0b1a84a3e095953365573371b76594765d8df366
SHA256 31dce145ccb5b143b0bf4d05e380e6126b364796ae7cf616f2936389223ad9a6
SHA512 3c9c0f863b9fff9c8f5f55f241f73387e932884256ca57bb7b0b3ddd50a54f39fce4734e4393aec995978c5975ade0cd63dde80adab7a0ba78f16cff024be045

C:\Program Files\Common Files\microsoft shared\ink\es-ES\rtscom.dll.mui

MD5 148fee6746c517446c422569ecd374aa
SHA1 2ae88ebae82b65884868faf3ff04a5169f7e9411
SHA256 42ff6fb033f5bf2a29e88f193487f2b3308d2581a7a330102ad5751e5bada3e6
SHA512 47e222e166b796b075819208b102784f743ad7e2faffb4134312b0b7dfa9127d348261f25c249ba273794f3f75789cc0f720cb1469a1b31dc5df81a52fedf5ed

C:\Program Files\Common Files\microsoft shared\ink\es-ES\InkObj.dll.mui

MD5 98bef9c47832378a65b669862326c70f
SHA1 f286a06cc3e1dd7d934018b5ce274819bdf8b8d8
SHA256 ce061cae5d8bc542df4b0d985fea778c53b4a287334f8679cf107d18a296411e
SHA512 425ca462be1c212a4617acd046e995a9f4fe3b84458b8ac040edb502d7c575e4e7e7d9ec48876f4afd6e5eb62d7b04aa35d26ed733cd35abcf08daea4cc4d2e2

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipRes.dll.mui

MD5 ebc2b5777baad6a20a1d047b05d8f0c4
SHA1 c10cd41d05eaf12a2cd1d0627fd5c547ce0e6b1c
SHA256 d58871528cc946fad7e838bdb00305563b1c5e5d52098674bea4772a4e903d2a
SHA512 b822bf91465e66d433d857ada6dc2d43886456a69a504e03d4f74f12023c404eb3ee83585fb5fbdf80795f40a8da2afbafc15b29d40109be421e3d11680565d7

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\rtscom.dll.mui

MD5 641305dc2a57e902d96496df6db1866c
SHA1 0de18740ed496fb87c0284f4cc914a343ed45fad
SHA256 9cf23650091c6d4638fa0a0d12bdd76dc46a12582fe271792bae201f122a4a71
SHA512 c600c34b56b24e9bf2029f1bb84bfb1c475857db12448ed592b46d2b905fcf8cea9c31d7552f3facd5ae9f065b6a6f3c51174ee8ba351cf8d540ce20a6dfb42a

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\InkObj.dll.mui

MD5 e5181448c9ef938afc28c0e11bf44934
SHA1 dc01fa5984239fbf47bf9c8e4190811f0ef7abaf
SHA256 345671be33c259074cb8c97369454fe6a33bfc2e42a6db2ec60545aa62c7c743
SHA512 23f47f58132492c70c379b22edd717658420b0535da9e1148a5f65db25d52a7a5ece951bac739a8b3c8be1071705525fce8af877181321dd375a0df7725b0fe1

C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipRes.dll.mui

MD5 77bdf9d78c41e115bfccdce3a5ce164f
SHA1 eed25e9986fd9107eaaecb59c3442f0c32a08b88
SHA256 cb4a50513b4a4a5829db2d01de2d2f749523da1a51d775ffa80ec42d42ac9f7a
SHA512 5af37cd5c4d95e335f26437a8688184d4b16d74d00aefe3406eff3c778edb784a454402b6ac61194dd178bfcb18ba087d2bca869dd47e61c57a244990a3c157e

C:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui

MD5 e3e4d8c17b245316f74f5994b44ef34f
SHA1 f709d565233a8e21c049a92a7704166c3ffb6ba3
SHA256 5f892b9a99dd4dea25d495afbfd4d5ae387e5606d878a02c2e6bca280b4af304
SHA512 c0b89b68391ae68abcf415388f6307728eb32eccde2c347f218366114b88a7fa7d4b1ea968b9b3916557a930ecbc594962b33fc45a489f5a802b7c21957f53bc

C:\Program Files\Common Files\microsoft shared\ink\it-IT\InkObj.dll.mui

MD5 dd1d02ce615a19a13f0e5cec930f7c6f
SHA1 270e90c0689c0558ae591cb36996b914168f8852
SHA256 7e1e5ae47c1a7cf441cf96d613d19e4804d46e350395e636f7250ad7a1028505
SHA512 88ac6177b0ede512b7c53fd783ee5219a394aa89ca740e5a8c8ade36e3fc70f246154bb3087b93f6f93a7ec158ef5e3520ae5052b04945a7b05bd196782bda41

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipTsf.dll.mui

MD5 ef4586b898b66afeb09d956c029b9c84
SHA1 599887ab4c91267cd16bd32832db934a232a1bdf
SHA256 9111aee44cc1cda01c9a3bf2780d620f3e312048e3aa2d9ac093926fb934309c
SHA512 3c4270b1bcfb69ec21f3f0d502d230a76e4d3c91f492647ffdb70515e13cc39ca0d790e566fef9aedb70d8fa77237bff1a704d7001fd842910afb2391951a3f3

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipRes.dll.mui

MD5 db1572b9a2fd846cb750f7729fcff311
SHA1 bdedac6ab8ed03c28a820419842bf11369d464dc
SHA256 30dabc8fca4ce03cdb47628e49915c53b6301f99c361888a0f8cc8ef1515bb2e
SHA512 47b3458e5ee922194f7b65e9ef07a4c4afdeaf1d4386b27528585b3519ed2c2b457655b3e5414f24c0789c8d55b22834d6a818f693eb3c00b5596279f5d34e78

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\InkObj.dll.mui

MD5 80d497e11a42f99e380fd7b4cfc0a04b
SHA1 979a2700da9fe7ba5b0a689b4f964f23130d1fdb
SHA256 10a5cd1de94565b843bda4340d058ef112d21cb92cacbe7ab3e78ec54f1151d3
SHA512 b8e48a9926eb38cf53eaf90250768b4e33838ec2e908194e2ffb8370764dc57bf9bc2eb85455af1926a9a477b5828ac8dddf70e1517a873000122b31ed905169

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipRes.dll.mui

MD5 7e5c042dbd05fde1afac526a0b2df37f
SHA1 54db5aaf5b02bcb78a398659ed495638fdd3bf4a
SHA256 aa899023f6694bf27e3cb022836a76201200c59016dab2ac6d9073a5b7e7cae0
SHA512 a0a65555eef7a368c43b02f861cdc7fa5bb5767b8dee0f3f2b8355a2becc34d2eaec8a7a1e2cb99f2c4f278f2d64383f21cfc8fefcb086d5c8d772a4d63f103a

C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui

MD5 def785802e0c258632face372a67c62e
SHA1 b1dc75a104f3fd10425cf9bd01cd71834ce9dd47
SHA256 97e8fd79bc4f745d52cb8d46c70bf32aa4d25fc579e12808f2a5a8aaa699abdb
SHA512 526207c12af11e6166b2d19575b70c962e9aa18ccac5fb1610ccf607002b3cd4ce71af38bb4d13ef8e1e253bbfff1516851116c984fd89752544e77408ac04b4

C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui

MD5 e2253bdb25ac285d47fd8f76a4d9b693
SHA1 30b47d7c401be7cc52df3ff680040f0c8e43d5bf
SHA256 b9fbe4d87d2dcaf97989244939ba18a0e81ce7b3f03392b47fb8d2805274fc12
SHA512 6e12d74bfdf4c456b7dc7248480acebe1b9d5e2a1b0440312c6e4e7e0be2d25c193ef1344e88ca6c6f79066757fca2919eb4f558b273f88383bb8818f415e052

C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui

MD5 d2a9bd91a1cce4e75e43d1d0a12b1cca
SHA1 8c1d4350a5a9d0c765fbb8396d65f178753fe460
SHA256 80f1774d1abcd418656da2c0b0113d8cf75811a4e70f784d1eacdb512c1d0601
SHA512 dd1714b11091e5d207b9d948631f200a17e43e9592474131d4b4034882dfc989b82aad04e2387c3af6eb79461f6ec733f8067fa3880c959cdcff6ba9c3117f0e

C:\Program Files\Common Files\System\ado\ja-JP\msader15.dll.mui

MD5 d9396740ace7b510b1b7df1f97ce3aeb
SHA1 e6309da90320918c5f3800e154a6c585780908bb
SHA256 485e7bc50179b61ce98f1cfd05f26f91f3583420ac347e33092cd2f5b27beecb
SHA512 b37c8bdabdb50ce61e731acc5dc3b2c87d9259ba82f1a8effc14cff6bcd71a178add4edd8e757928cb36c7aa01ad5199272929f62a432c3577dd22ac74dc6887

C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui

MD5 3fb5dc1d83293895ee123c6c545a9f05
SHA1 5a0c690ca1098a8d5a865b450d1ab17666854c02
SHA256 7beb6e52ce174167781a434dce6e4aa77ee22096991acc75a0b326069af17ee8
SHA512 1442c3ae5f8af2a857a85b2bd5830a5cf1a4207b0529d1981bcc9493c04fc930df81129b19d2ede97416d4c93e8619b4a8272b82d58b6d60d20c6cbfe12425df

C:\Program Files\Common Files\System\en-US\wab32res.dll.mui

MD5 03ee55f7166bbffa5f7b9767215ea949
SHA1 51821af065b9598289c5534372e3bfcde7db853d
SHA256 b21424b0cbf3f8aa18feac52e350e02ec34dc7635238715a28fbdeb10f88bb9b
SHA512 46db2d8e6182fa4fb88b45f5d9e39c69072667f35e02d83c3d6082b612359299978b1ef50848a4962989664b0ae0baed50e875a45e0ceb2966bb27ed080d7ff6

C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui

MD5 5d29f7b14d892b5e3658be85bd31d975
SHA1 97588cb1c7f8e90c0e875bfacbccaf4b4ea6e907
SHA256 af922925bd6e5457f5f96e95d2715044b9764e874f12e89f9cd12e5181da5eba
SHA512 de661dd5decabfe302ec4653c6883ea5d820421c7c182d3f0d3512e02dbecb780046a1323dd6d953695d3fdd29e66843b2fe9315449dbad8e6dd8c5949fc9ba8

C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui

MD5 7e45f9bd6be0214b8b0c18c6610f6483
SHA1 93cf38b06103086d1f799ac895985d34452e4741
SHA256 11d66d6b6930f095ca8214f74832f7f57bb7fbc81e54c5f0eec90986414ea5e4
SHA512 37aa9afe3f25c1087c3e2515002dcce3bdf78490a111d530e4d404b336a99d81370d03d66e67156af477651aa2e2d344c224d7829370277a2fd2d8b10cfdffac

C:\Program Files\Common Files\System\it-IT\wab32res.dll.mui

MD5 67b1e66e4981b6195addca5e193cb4f1
SHA1 e62de5f5c1d3597563216da2f52b90ccf0f17058
SHA256 a3fdf7ece2417029924d933c94d1bf566feeac90563ef6a0c03440689e45ff7d
SHA512 d6b8ad7c210bd59c280815d5b0eadb214d018ef40846f82888e8900a66ccdbe7f6c0a58b237c0d4ed375b10cc030188484383cd2645daa71f6dfdb5302a35997

C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui

MD5 d99a9b1cf059cdeeffdadf1f956fb755
SHA1 cc2fa6d9860cadb6d29bac0682ff1c260fe3a7c6
SHA256 349921a8b9bae0e632b497c1779ebc3c7417f22ff6ae75a8c42bc8a78d15c845
SHA512 c87e30a6bb73d6f8b6e60ea46ae93d25a00b2f26c5617a1505c0c7d4f634e23051b3876a3c980e5703e23b0a11fb2128bae6799e92b00dacd24160b323360ce9

C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

MD5 0e369c44a33f863f0dc42073a19becf2
SHA1 b1e2dd7ff84e8c8f7968eff5962052bfc784c87c
SHA256 d04241cab9f6f137c5c0213b196b642ee66cffd601cf98a5f066d2e7d4c37fa4
SHA512 14d4c92f8d71b1078f220acc985bf256747dfd74ed40b021035fca7b6045e5de466246a21dd53fc0bf8a9651f1c2db8ea433f0e8dbff94968ffdb2b2aee52254

C:\Program Files\Common Files\System\msadc\de-DE\msadcer.dll.mui

MD5 9d440cf8074d332961b84e494f57fc70
SHA1 55334a568035504d1fdf01b1ffb050f2080daeec
SHA256 508e42241d17a0040dbff322282762be6a603dc164efd77fb37023cd71f82f0c
SHA512 839af8f43c46ca495d155a501a982032f020bb063ea15abf8ffe47a1630e511d2b877f08c45d117639d02e0e36de3d51aa2d311b85a80224216f7a4acf8f08bb

C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui

MD5 894f4d3fd453597a5f3bf60ef19ab9d1
SHA1 f8cdd3c3059daaba44a00a9359d1c876c633f2f6
SHA256 0d5e78dad9f25726f1f30e1f39a0aea26e293be473b9070b029175ff8a1e89db
SHA512 d947d87ed1bb2f49461195569366a60f4b1732824428cba6c412ed9ee528a75168bd6f2cad76e7006d3f9aabbfa130e9b33d113674613571d98ce2196ae77fdb

C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui

MD5 0873e8ef52100f58af18bb8e6f3d8f43
SHA1 397e4b3b76bccb5902090a8c108a20459a54f8e3
SHA256 9783f9c73bd8487f46d7f30f9983c2ed1095ea16e22a03281536cfbc0de03af3
SHA512 3c56b8bcd4752003de68630e604c29fed2e49aa49a9371c101b2b358fc01e664d2c62e1be26897df82cd14f219780dabfdbb6f33b8a0f7606dd031f174eb63f0

C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

MD5 d9ef1d7919670a37aaecd7e8387b94cf
SHA1 0eed1c88f0c4520770f2e4ddeb3e5ed5f68e2a47
SHA256 f0441d53c528fcc8a9982e4f634ae27288a66930e369cda7f5c39e5b13017a1a
SHA512 238769f2f7516ded7f14af98dd0c183cfc9d99e87db8c14a61348cb45cb777b1ca33cfa2caa92b09e4eec024afafc6282ca0215e9088514362b48d9efe4968df

C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui

MD5 47f7f45e8a812b03a3e5f81dce3380ce
SHA1 a412d1592751258b5dc9e65d5b81a7e6f762b945
SHA256 1a54e15b3725389860c98046fd2d3f275173f43119493b7e57ab6d007bf64088
SHA512 0ece5a08ee731f0125e34deaa811d84f7ff211f4e74950ea1b394fdbf787270e62d54ad30996ba0edceb4fe9965cd226fd4bc7e4fbbf3f68b6ac09fef47ba6aa

C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui

MD5 196d6b71c258b31a877342d0638c0567
SHA1 38e5fb860e759decdead0865a80fd6404ce4eaa5
SHA256 bcbbb3e933ea971907436dba3a387513c71894c6c3ef65ecc1795fe12c30bf47
SHA512 da61b8da1fd55b06e25aefb0fb50d232e9cc04a2763263ba5dac88725785fc99948a0c6d0a3dc6e1cebab39e64d3f6656a952778bdf016f103ea124c0e6c3338

C:\Program Files\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

MD5 1655faddbeda83c6300051ae1bfedafa
SHA1 f977c12a8623618e74bce23308e05e01532360e5
SHA256 c9e3b6ccfe799d08cec50d251cb0e39664dd5fe1a8913b67bf5455c49d1c176a
SHA512 ca04bbe358e451fd2c1bb455dd8efab71c5af00754f2a55a6ccad6c127d426067ec4fef167650d8220a915f3bdea5d9dd723a4732e9dd81ffda6446e316a1507

C:\Program Files\Common Files\System\msadc\it-IT\msadcer.dll.mui

MD5 6b0cb8e32cfe7eb25096746e659f5ce6
SHA1 e2c5e4037732cda6539789a84b1dd70085a680f5
SHA256 cf4c8b92acf41c6de4a2b93d68ac6a2dccb168eb15848c4e43409395d1fbf751
SHA512 3eab5c494638aa3775cc8da12e97dfedc95e17df503f99de4b67aa1d5fa4c756c776cef9b6651275efa755303aef47a6166eb723ad942483620a5b8131572fe3

C:\Program Files\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

MD5 76b7c739875801a7ee063f1dd68d8289
SHA1 df08b40dc63a8f5b472afc91d27722688a07fd02
SHA256 4d14847b5fa7b091dd080c5fe4cd254c9ab819675b3449a233a07ddc10ee7183
SHA512 28f171d947fa1bef802f757790c29ea552ac2891a2d4f3195f219a5d8fcc15e0f1f53c434e8d464bac8c29bdee1bd5b81cad57f9314945b788a99aaeaa9b8ce9

C:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui

MD5 6b6d9033174dfef566c25fb893c18799
SHA1 22e08e666cec0a7f7e7035bebc7e86731ac1a182
SHA256 a1fe9b772c3999c3b428dedbe271b0bef36b73656da29ce8adc67701d4259ff5
SHA512 a3a575736a8059b7df25b7fad29ee8d1b8e9e5fc748e99555d808e07c028be3db439090033c2b26dfc48ab719dfa6cbd080105e1c77500b0f566d922b85f4ff0

C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

MD5 dd26f1ee920037bc9c9f852ad29d7dee
SHA1 561e08f94c5df67139c964497d72af8431ae4c70
SHA256 69c8d9076e855e5767925ed5afc8645a535bea46fd0d37a4c3b7a2ca5d321270
SHA512 e24fd352733b3f2875be7f99d90612ea5c97afd800f407fd15922e516f6757ef9d21d950bf68ba26d7446fa5e6dfc6f01b24f3ca410001f222964266724db452

C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

MD5 09c96d3be3156ea8297d9a138386b1fa
SHA1 fbcea3a676c72b9daabcd39547420e9f667fe143
SHA256 e9299f15b8c6e780e0fb5bb2fd64e05a2dd8af41173c0886fab55364f11362d1
SHA512 c051a7049d857e92f3d16adfc74325ef3c53533ce22c9cb9e1cf54636d16f6089c998237057ee7be07ea377a07a5ab1d03b8dc6a1c9200d466cd77a79d84244d

C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

MD5 430556fb8af743e52a522db152cc3856
SHA1 a614e5298f47ebc0c6387ef9bc93f22e792a0741
SHA256 83cb4c3504df92d388b3ea8fd52e156c74ace178998221b223583a82fd0ee9c8
SHA512 edc721412afabc5e25b6a185787b7dfbcee41f03f8e7d9a6f6b6c8f78665bcf8eefbc9a8ea9126f15dfbeb377672dfb8f4598ca3502145d58790807b1657eff5

C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

MD5 bf1eaf129f59d7b0251a8cd172a8ab65
SHA1 d520ebe6fe28eb2384d6fbda91e8e9577d04a3be
SHA256 c561d960901719191b1589deec20be915739e1e72ea3d71b6bf88bf9eaa03321
SHA512 54cf90be63045a9048f59761472bf6ec83a5673003fc1899661a5b7e9fee32baf4ed8a9ad7beb1b36f865c8d20c084047d48c323cc88c02215a4760d4e4b0bf2

C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

MD5 42164cc013c76128dba1a3cd06fd9a30
SHA1 0656bb4f56cf714277ea60b5c26cb982ec706eba
SHA256 3159ceab9a969a3db6406f4715f6021a056d644159946c5eab1fe31b915ca036
SHA512 6828f7d67f412230f06900b975884e5a6e26d5115e902885d1634a167ae50269f7f0e24596f19db591d60f72b1a012ac2bd443b1e936594303733543b48cdd63

C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

MD5 5ff99dada438a4d377cab3c77eca4fa1
SHA1 2d22429211682bc9aa551fd4690187b7caf51a6f
SHA256 23f7f8f138ebfda3c17129a41cf4871be02df162608a975bd3c3f134acb59505
SHA512 abf3c420b77beabbbff7a98c23ce0060e56b7d35b66aed7a65ebfed64cca658ab88e7e18da055ca45f29589469ef46741083cbb63b3ea571b0e33dac658052d5

C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

MD5 0779df031775ab54610dbdd05ba7a841
SHA1 cdfe747c39be2499d3514dec4ed23929aa276438
SHA256 aa5852d010602cc60301fc5ea89974a0eef7a33dca0d49048a2e1e765f14f784
SHA512 bdf34aaa138db644dfcce53ff61f07e4c00141fcfe432b83d0ca7b862e1d6842bd4f194774ec89a9d1fde8d766afa4aab2386f413735ba1e57e6762c5c17ba5b

C:\Program Files\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

MD5 2ffa66698e13afce50969bbdf429d931
SHA1 6ee2551b33451eba4dde170c4d71a2b3c334acfb
SHA256 bcf2261a0f285d1c5ea33c7294a9041cbd7b276fcc218a24ed00710c47b6436b
SHA512 faa84a7cab1f2106f5097147d40518ab066e24bc5465a917a4505411b2589a19bbe8270086b2d5db7880647ae01fc4d1cac4bf580af2e07815455a14be3a2356

C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

MD5 7338581a38b506e31e1bc4c2da38a257
SHA1 1117c4e0eecd289f16f82e955f3ea76f64d7fc95
SHA256 9c2a83e69c5344cc552f7ce14b30bac74a2f930c71663bc85d938a0ed0c60cbf
SHA512 b04ab0b16eec16e12ad43d11901de5f425426d978eaa872d3da7bf59472190d49944fc1f7c98937deb29ed819817b9b4adab842799db51b17c7da44d54c1e39d

C:\Program Files\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

MD5 9706ebe6e81f0403a4ea153f8a11d0e4
SHA1 f726471bce3d08f89420278b7412807964cfadf7
SHA256 26873b0b38232e7cd1e7f720b8790c20eaeb46f6da2db5071dd6e9e237091346
SHA512 4c14cf13405af04e81acd04dab87fb7ed118ad5ea9f402b53225c533a43987b6cc248008edac8e645a8ac6c5d3f388a80e07908d1423c4d719c2e4e042feb629

C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

MD5 478a029ed71b673c4c99485be40e2032
SHA1 849db73f9e597ce84693e8f1bf4c57478e474d32
SHA256 ba8afc2980259ed673a5c43a9d81a1394f9b2ad7035e0ef9b9cf17d14fa70ccf
SHA512 c2611b1bed3d63bccd02b96a4ceb127509cfaaf0d7ef3526795b179a139c5bc59293627a28bbc6ab85eca21ec3b97729865d41826bd960eef023ba92b3bb1b88

C:\Program Files\Common Files\System\uk-UA\wab32res.dll.mui

MD5 9c5f69ac7c47b2725f3dd0afed41e724
SHA1 add9e24bd367663385b53456103f9579ac69e266
SHA256 21c04c9ce2000e9ba10ef4705332f4d545fcbba03fb166cf705db6afc07cb23e
SHA512 3a42bfa778d14ef66a855b0623d098377d14a1ac5e5303f430bc6993eaff358f722020a74a29c6d1131ab7065c0151ae0406631678c9f4884d95524621988cde

C:\Program Files\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

MD5 71af1bbe119013b2aef706abf7b53260
SHA1 b1b6dd8d07e818fbee04771e4320e7fb0109cf74
SHA256 9bb615232d973796268e9a1cefc030a4509ca003ce63daba52d40a77125be6a7
SHA512 77a3e93c54bfe8fac8e547aefb14c9d33551d714d597413244685fe6194b2cc20f8f7daa619134be1fb34aecd31cb54fb9f26684e08643203ab8553ce11e8284

C:\Program Files\Internet Explorer\uk-UA\iexplore.exe.mui

MD5 50734ba67abe56798da0389134c79efb
SHA1 369704283f955738da9c915dce6af570362c317f
SHA256 c1ed9775616d09c5e37f3654169b50371d2b391d2ab97454d3bd73cfac732c1d
SHA512 e84b8dde76fc2a522bddbb717ca1b8d8ffee63d05b599bddfbde112515e3945dae7f6d4a7c90db2492514c552f8c928f0f20f5c263e9e7218c821f73a04243a4

C:\ProgramData\CF08.tmp

MD5 294e9f64cb1642dd89229fff0592856b
SHA1 97b148c27f3da29ba7b18d6aee8a0db9102f47c9
SHA256 917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2
SHA512 b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf

C:\Users\Admin\AppData\Local\Temp\DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD

MD5 0cefffef1045f46d02f18acee56273a2
SHA1 9de65f5be996db8ac7c9d6c9290ce92b7cfed5f3
SHA256 ca0df4b6b184bad39d12b3e104dff66127132231df7a9bb3c0bbe406cfaf4187
SHA512 a7299e73029eb68e8b2a9091d2990da2a600c3366789bc11b580125bbe9831b03a185ac685aeec816de83eddb810b3756f2cbca3cc9927dbeb71f6563619ea4e

memory/3760-19847-0x000000007FE30000-0x000000007FE31000-memory.dmp

memory/3760-19846-0x000000007FE10000-0x000000007FE11000-memory.dmp

memory/3760-19817-0x000000007FE50000-0x000000007FE51000-memory.dmp

memory/3760-19816-0x000000007FDF0000-0x000000007FDF1000-memory.dmp

memory/3760-19815-0x0000000002700000-0x0000000002710000-memory.dmp

memory/3760-19814-0x0000000002700000-0x0000000002710000-memory.dmp

memory/3760-19813-0x000000007FE70000-0x000000007FE71000-memory.dmp

Analysis: behavioral1

Detonation Overview

Submitted

2025-04-18 12:22

Reported

2025-04-18 12:24

Platform

win10v2004-20250410-en

Max time kernel

105s

Max time network

149s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe"

Signatures

Renames multiple (7688) files with added filename extension

ransomware

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2645532622-3298555945-705856666-1000\Control Panel\International\Geo\Nation C:\ProgramData\E445.tmp N/A

Deletes itself

Description Indicator Process Target
N/A N/A C:\ProgramData\E445.tmp N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\ProgramData\E445.tmp N/A

Reads user/profile data of web browsers

spyware stealer

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\$Recycle.Bin\S-1-5-21-2645532622-3298555945-705856666-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2645532622-3298555945-705856666-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

Indicator Removal: File Deletion

defense_evasion

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Java\jre-1.8\lib\ext\sunec.jar C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\sk-sk\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\selection-action-plugins\epdf\plugin.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\svgCheckboxSelected.svg.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\EmptyShare.scale-200.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\sv-SE\View3d\3DViewerProductDescription-universal.xml C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-48.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageSmallTile.scale-400.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\hr-hr\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.scale-125_contrast-white.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceYi.txt.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\DESIGNER\MSADDNDR.OLB.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL048.XML C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\lib\deploy.jar.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-black\LargeTile.scale-200.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_neutral_split.scale-125_8wekyb3d8bbwe\resources.pri C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Snippets\ShouldNotThrow.snippets.ps1xml C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ko-kr\ui-strings.js.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubMedTile.scale-125_contrast-high.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunpkcs11.jar.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\7734_20x20x32.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\ar-SA\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\1033\VBAOWS10.CHM C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-80.png.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ca-es\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\RTL\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\GenericMailSmallTile.scale-200.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\MsEdgeCrashpad\throttle_store.dat.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Snippets\ShouldExist.snippets.ps1xml.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-96.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\tr-tr\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\zh-cn\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-24_altform-lightunplated.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCalculator_10.1906.55.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\CalculatorLargeTile.contrast-black_scale-125.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\ApothecaryNewsletter.dotx.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\OFFSYMB.TTF.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\.version C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\s_close_h.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\illustrations_retina.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\themes\dark\rhp_world_icon_hover_2x.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxMediumTile.scale-150.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionGroupWideTile.scale-200.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\osfFPA\addins.xml C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\LICENSE C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\review_shared.gif.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File created C:\Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\3T2S47O5t.README.txt C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-white_targetsize-48.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-256_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\Doughboy.scale-100.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxSmallTile.scale-125.png C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Windows Defender\ja-JP\ProtectionManagement_Uninstall.mfl C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-pl.xrm-ms.3T2S47O5t C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\E445.tmp N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeAssignPrimaryTokenPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe

"C:\Users\Admin\AppData\Local\Temp\2025-04-18_41050b2b9f619cdd9916e3bdd5b9f2f9_darkside_elex_lockbit.exe"

C:\ProgramData\E445.tmp

"C:\ProgramData\E445.tmp"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\E445.tmp >> NUL

Network

Country Destination Domain Proto
US 8.8.8.8:53 c.pki.goog udp
NL 173.194.69.94:80 c.pki.goog tcp

Files

memory/5340-2-0x0000000000C90000-0x0000000000CA0000-memory.dmp

memory/5340-0-0x0000000000C90000-0x0000000000CA0000-memory.dmp

memory/5340-1-0x0000000000C90000-0x0000000000CA0000-memory.dmp

C:\$Recycle.Bin\S-1-5-21-2645532622-3298555945-705856666-1000\EEEEEEEEEEE

MD5 3a9133259c65d9d9180c4db7683b48a9
SHA1 2503bf94f097f4ad7901c101e3808922674f5a11
SHA256 eb9cd2e64b401aa3720120a12871e7159f48cdf773c10ec8495bd338bb7fe6ec
SHA512 89ded1e257ba08eb93a8a604405dfca74eb2575b80e148b31fe9053be444c5c2c1f5fc92915903f656094a035963f4d426bfbf49125b7ea58a5c9ddcb5c4f872

C:\3T2S47O5t.README.txt

MD5 a614ebc98430a25bc689615a8d71a613
SHA1 f940c2db3c21f1264b05191dabf6dc41d6fb3561
SHA256 7c3de04e7a1d7a44f84994244470f05faca7fd22fd80376414c0c0a596b696f4
SHA512 d7b6192a5d9f3e9535ef14a183aeea85f9a0bb1e624d4a6420b407510102dcd018c83559d4cf6718e6455fbb03ec0256c13ccbaf2336786e94c7ee8b6408e151

F:\$RECYCLE.BIN\S-1-5-21-2645532622-3298555945-705856666-1000\DDDDDDDDDDD

MD5 d8f4acac1878c0526724bae17fbdbd0f
SHA1 ec0203d0a273bc2445b4379951e06a1d3285379e
SHA256 0fe75d588b8ffe579f025076a24995c166d537f6e81fd899a8792f7e663180ce
SHA512 883ad205a1dbe69cf3e214f78ddd512269bd1a3f078ff02c9af09ead8ad7b7066dbea43ea37fc2abd038bd7b355e4c095f6440342fa783689f5e03b55b798999

memory/5340-8641-0x0000000000C90000-0x0000000000CA0000-memory.dmp

memory/5340-8635-0x0000000000C90000-0x0000000000CA0000-memory.dmp

memory/5340-8626-0x0000000000C90000-0x0000000000CA0000-memory.dmp

C:\Program Files\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

MD5 8c84eacac60edab686a49639fad84b74
SHA1 26a294a4a5dab0cff546e090c9e1be052c1619c1
SHA256 d7bec4b7d4d5d7dda4e8078c01d4fe7c81ee8945c3ed5ef5a4744c683bb16da0
SHA512 4937a71189f9b3b331e3f22ce56fea20a3ea50803cb6477bd33d339cbb05ccf6035e1b3b78cbcf9d697a4ebc1d76fcfd4ceae57609eaffefffdd81061c6f883f

C:\Program Files\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

MD5 eadf1b3e06cd73e4dd8f51ffceb9733e
SHA1 e0ceda89e29df7836f63e8d1eed098c6ba30c1ea
SHA256 4b46f6b2920f154e289d0fb17119d3553d8654cdc99426a8413213a9f9cccca9
SHA512 9af340d9cad2b65b6637029c76c011378f66ff3e9394faf42d0671792d6059fddcc963303a5c26ea4505a5f2677ffbf9435e4066664241149423be9e6b6755a2

C:\Program Files\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

MD5 813fae4295635a45eae5a5c125f4e466
SHA1 964436c5143d62d31acb41791538c818adb77bf2
SHA256 a7663815064ffdd46a575b4c0d0e698bae95cecde49618138dd560b76516dbde
SHA512 d647139969e81f39331e4227083e47858070d23d21acebabc46885d9a03dc9659089249693f5c01b0aad71eddf60f241b30cf5a4499ce4790e7265d453dbb55a

C:\Program Files\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

MD5 93da786a7d92313a98c2b57fc2697941
SHA1 b3f499c4c05d2f879fbf6da00cc1932682e53cd0
SHA256 1cce220c0b99aa3eba874a386c553847956d05814e303adca9f72e40bfa9f254
SHA512 50327602836e6b23b997eafbb748d4730d96168dfd4bbc2e02d391a112082c8b127428c532521380ff168c0583c426392e1abc0cbaac4701cdc10fa127681bbe

C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

MD5 cf6d4ebfa014792a91b03b224ce67f4c
SHA1 91cbe70ca062c6dfcc760753b13ad8d603edbbee
SHA256 bde1f7baf8dbf63c9b1496fe4702cd75c6a2191df76c2225fd2615825fc820da
SHA512 0890f91c48149e4302a9e051f691a0acbf034b5350c36380d5894ea9464294720c306e1c75ed4dac05cdd25255b49ee13dcd54f7f4b10dd98d6084244d9d9fb9

C:\Program Files\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

MD5 92f0edfbbef2102826fe4c47aa855a63
SHA1 f8e13effa29023c9cc5025b01bb48e63dbe3121f
SHA256 77338274de5616fb9937412b7d7b61e58844e5c77dd0ee60e3425358d0bc91d4
SHA512 1e469282feceff090c873ab6c417c80bba8e95606502fbd9d15070b7565a5b47d3791e1fdf49c16a41c107f04e9367aa347acf5df85559979039d6b05eaa9b88

C:\Program Files\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

MD5 66924a4466a1155573c6304f4f7264d5
SHA1 768313135f78acd52510bce76b1b4c82668ba03c
SHA256 07a94beb7159375a1a58941fe3a531ab603f9e2e44270560bd5610c99ca84115
SHA512 0410014becb6954b754663d7584d99afa27093a2bc0c7c40dd655dff55383f4197b874aad7a4b3b0e02b114f62a59b9b68528c83744b1d12bddc200bf6bbf496

C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui

MD5 9bda3c8c148bec0a7a29539818ee608f
SHA1 cd0e477c7696dbd37611643f068520c570fd369e
SHA256 387683db281b78d4958357ebc46282ab5710f3b2e7268899e047bf956eb2f51c
SHA512 f6d7c0ffaba8fc90a0947f55328e43c5ea6c30e7ddad88a73db0163d477688e6ea033d0954dfedc304150600292f8e63d572d1be709dd27151f7a3b3293b5e94

C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui

MD5 c5e291d64c64f8a77bd3a24105b850c8
SHA1 2e65a2092af21a4c3a2c45710dbeea2ab7c3b321
SHA256 65ca11ed5dfef386f173a0363cdf59807fb25ac961765f130442b1d48ddcba61
SHA512 1bd00c4e88d3358b4a8accc695b456b74e4ba8bc303d73b5eac87b80d986ef771b9bfb0673035a3deb8ad0862ea448f033b538ea2a00ab63ee4abdcf4c9dede0

C:\Program Files\Windows Media Player\uk-UA\wmplayer.exe.mui

MD5 8aaac296fb96ec8d74216e0253d9ecda
SHA1 5cf254b313068494cc6d2d0c43eb31a4b7f81195
SHA256 a065b8ac69e0f8279bcca57bc06478e2447541f79a4fc333c8cf6bf1725de2a3
SHA512 64e2cb1895b2064b3ea4365c2c80a2bf153ca21dd9dabbeeb542b86e5474a465f11d721b5930eb5f997bd1fd7400be9ffb5816bc26b5bf0349a0817f6590f8c0

C:\Program Files\Windows Media Player\uk-UA\wmlaunch.exe.mui

MD5 d2248bdb5137b7c510fe7b37faed1a67
SHA1 39708dd26b8eb6a24d64b423026ff6ae8ba87e13
SHA256 2d4c0c295e9402490225a7aaa7bbb872b18620e03a7fd32704e2cf02867df8a9
SHA512 08b1b8de8ad647a9d2be6f7a8a9aae9e44d7c65bf8bee6e2216f0d48dbfd3f4ca631309ba3f0be6234a2447b4debcd3f062d0001d87e4c7eb5a9469f53d73e35

C:\Program Files\Windows Media Player\uk-UA\setup_wm.exe.mui

MD5 0a7c902610bebc16f3cef9be3766c8c0
SHA1 1ee1809730f6c9b4f0028f0581797f239f462f62
SHA256 d8e3c14ead239a930def3041f8b8949beb3a74125a9cc72d47987614e9d3e370
SHA512 3ee6918ef602ac6a556dad9e1e191373cdc3ddb840a7e24301d08dbca7f0d48e704cde8fee1633b0cbf19eb43e81892b17fb862ff9226a6bcf89d7cc289ac008

C:\Program Files\Windows Media Player\uk-UA\mpvis.dll.mui

MD5 15e711df1cd808301c82b1a2f0faefe3
SHA1 1bf939a91a63c76ddfe1c867f6ebd629db5a7d15
SHA256 3933e030e153feece78d5320542ef049b266923e263200ff7e4649550d9eef9e
SHA512 ce47b6a2e52bdcb7ae27765109387f1de9afc3a7d474a88ac1271e4633f8b1fb3c7450d2f820a0394e74c0feb31e4a8d4a1ad2d68e4dd5a38ed25bef2536587c

C:\Program Files\Windows Media Player\uk-UA\wmpnssui.dll.mui

MD5 712458cb568b36b2855835201d6cf386
SHA1 18c4baa07563f75bfcb82977665891b69fed38ae
SHA256 d993a69de5a9526fe10bd398975533880a3a28a859e90bbade025e289757d8c2
SHA512 62d82cfcb94a8d146e24365c29684155da1d3b9a06c1e58217c1e3b0c25b88eec26158d7f86fa3fb53e9803c57d8da84b4ba119e1c934014f46f816365db541b

C:\Program Files\Windows Media Player\uk-UA\wmpnssci.dll.mui

MD5 ed748381b27a1c6241fa36533cba2451
SHA1 f05cda6d3028833c93b7c41b566fdc8136ec1aef
SHA256 a770b127d183880c7adb78c1a91c75161c80486b520f1172700368db9ede0177
SHA512 5d1f5e31edc5c62abbee1a689a770ebea2e09e3efea2c89f853e94395f17c889994e2a691e0ba52508a97c9f62a89ce1e873349b948986ae689045f0d17b3a39

C:\Program Files\Windows Media Player\ja-JP\mpvis.dll.mui

MD5 5b3cb71c88300f59703173e99d970f8e
SHA1 68bbc75d1084336225f2ce85cce67d22ff694af7
SHA256 ef0af0843bac7a482c903c00d971c1b3ef4928f02ad549bd32700e64af2fba31
SHA512 1b28fb17fbf31cdb02c8c3ef236679f3d8dc9ab6570edebf8125e1444434ce73e9d3a3d319e01ea8756f87a38a67c559e887c1c4e7eba29a573f6e8edf6a2245

C:\Program Files\Windows Media Player\ja-JP\setup_wm.exe.mui

MD5 8ad209ac192758e6ae665f75a17bcc38
SHA1 844b12f01e4d08924716a155e03bfe74f10818df
SHA256 587788445250c3ddbf3a9d1cbbd643e1c3aa72b29574f6bb594bded9ef3e6833
SHA512 f0b4f979d89b5faa228d8fb2a8f30dd16b00ce69b4b35a09cb46802e70e99728e6ea8f9e4c6f0404a2dec23bccbb15e8a71928e3b22ee645c3bce36b98fffdf9

C:\Program Files\Windows Media Player\ja-JP\wmlaunch.exe.mui

MD5 bb69d0def9e5e5f021dc4781ab92a5bd
SHA1 d2d7af7fe3db932564f9aede5a0e3e5fb738a47f
SHA256 261219d6a09ea0af277ae7ba5b48e13633e857f58ddb64f7db217a99805a4560
SHA512 b22f690ad2ce45cf6e892ee97eaf2883fa46813e37ba12213bc1031d5af1235f1641d3d8def174e96ab11e650d0792ae4e01f2cf48e00bad9b71a7fc5b6dd5a3

C:\Program Files\Windows Media Player\ja-JP\wmplayer.exe.mui

MD5 0fb7ddd2bc5fe4627b4aa90a895cc692
SHA1 6289f348816ba54cd8bb54a61f8fdba93832a265
SHA256 c47428e20270e8d6dfee5ffbbc5694c98ef159ac2dc5aaa11b91de2e228145f1
SHA512 6f708a57f388aad7052f65bb51f3cd623936c1a61e943efc3e2a95a763fe6a82b167da539089836213f12b7cb659c7dffda8878a51b84bed5b709aa4dc24c053

C:\Program Files\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

MD5 affffa4be592040b699b07434c1b0940
SHA1 814bdd839299c39abd2b4c52cd42118b58ca1114
SHA256 e9cf0916506fb1a2ecda9eea14b4fefdb436693d0702ad52d8d3b2314aac5e3e
SHA512 4d905a7f61c3777b75dfc9770a2e8f1cd1eec5b55deb89cd59731f0baa60b108518fce736ed4545f8908921ed8091ae01d8a93f5ceb0f040dd574f06b0ba5e42

C:\Program Files\Windows Media Player\it-IT\wmpnssui.dll.mui

MD5 c90578b352e650fec7289ac19578588e
SHA1 ac3757f01f6c340b3c57d82230e3e2857e980f99
SHA256 a1cf87b0d3c493d75de2b66ba5005ea8b3e3cc7e72fb8d2fefb69e0810204abb
SHA512 c8ad3288d995a1e6ea699164ac9403b6a47dd36d5f588394e7c41a76f3c45998c1c4faac68d50f6c4e473229390233bcc603fc3dd1dec4118033002c063d02e4

C:\Program Files\Windows Media Player\it-IT\wmpnssci.dll.mui

MD5 d503502241b3606379b227b5c2333f37
SHA1 90447a590db9b3ea655f53db11648d767a785c22
SHA256 58393f13292c3af9d67a9246cb088f4ad353764aab8ef4ae2fbb3dd165ea8733
SHA512 6584e154517b8824f8d04b9c5d3485fd63cf665591f0f5819197feecd216b3f613676cdd6c0a18f1df59bd30e75a2c4698cbdcfa7cd596c92875a92cd9168206

C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

MD5 476a7148a7bd3e1c4955a54be0e8212f
SHA1 203badc9c57ba7d7159e868ba544f73260743780
SHA256 a75f1d81c7e6f681c1aeb3001b53999b30e5f3bf22c5dfd6c8cac2d2b2133baa
SHA512 7f59605cf25ceb55aa9dab594ac2cc8485efb0cb8054162d385acc6dc2e2d7658aecd67b78896fda325d754db873ac20208cdbdf8b0b5570f272747a94567c08

C:\Program Files\Windows Media Player\it-IT\wmplayer.exe.mui

MD5 290748e02bbbe255a3f1816f79afcab4
SHA1 99caead577cd36cfc36fc798dd6139f64eda67ad
SHA256 4329e71fdb49daeb5f274b7e676441e9a4d1de61346528ce07461aa6cf1c5e28
SHA512 2219c91894d7418b9932ed61d454b79fb2794b8d178f08875d23a4c73d9dc8088b3809791f0542dbf1df0a67eab1c5e1f845760e7f837537ef7570302636d4f7

C:\Program Files\Windows Media Player\it-IT\wmlaunch.exe.mui

MD5 ec3526475d11db5a90c1399edf830ef5
SHA1 d6d772773e03f46ab755f865d9fa022893236b5d
SHA256 ea535aa012351ff998cc894e1df4c53031cbd35c879dc80e6e1be10587f1ad35
SHA512 88c8341a87fc53868fb9e011e7fc988b99553d3e83378ee9d16236f05d76492792483325d13ea935266c323594fb2a85478d171deab92e5b2f677deed7ed1324

C:\Program Files\Windows Media Player\it-IT\setup_wm.exe.mui

MD5 a1f1f424922908da43ca37b8179ee96b
SHA1 a286c0df558183451c9a38c97652e22e2bf9516c
SHA256 a468182ff04cc54b9f51b9faae44169b3871bed2419ce6f1c3ad3c96361caadf
SHA512 d6f7df6402aa6b8437c974120bc9e91dc1c710f4d84debd40ccbdd663eed9191332f4187adeb830af4eac9b97f6a0856d70184abadffb0f92e27ca82d4dc6c6b

C:\Program Files\Windows Media Player\it-IT\mpvis.dll.mui

MD5 b8048bd9013d2cd669c5717d43d16991
SHA1 f630fcefcc11e1b8265ec8229873d33e100eedbe
SHA256 2838a703cf2a0038999bedcade7349d6a0373796731d9d4e31070010e9d5f6aa
SHA512 60e8efd68ed485c6b8ea21e240a1253741e275cd6865fed8905866fcbf92e15dd7b527031e36c71bfbd4f2f21bb0859e27e62bf2f9cddfc66df13fe8240eac35

C:\Program Files\Windows Media Player\ja-JP\wmpnssui.dll.mui

MD5 2346d9ddad110565eb511a507400cb06
SHA1 36892ff77a44037ff26e58946f513690f7af8804
SHA256 e822be1cf2d832fdd0acd48050e2132763c0bdaceda817c736a3090b61943b86
SHA512 efc2cef7284368d483296846051c7c21b4595644a9dd67c4d72a7c995eff55f0fe56132e7a1227a3cd29e80822afaa13eee813a1dabdb7863d3aa5a10160ad52

C:\Program Files\Windows Media Player\ja-JP\wmpnssci.dll.mui

MD5 b78383c53d24c616f5f8804aec7bc17c
SHA1 ec8e3307445a907775ace91ff6594608b7981c55
SHA256 74cf558fc41e1864e40b2366fb55b896e6a80fe18091eabf62a98b3560f6aa1f
SHA512 e9864e5d816e3e54994489ea62d5de18cc2158a058ac2a9c9d6e4f99cb547b3969d03de03a7836c94a55eaffe7a42e5f3362a539c210c7574c3dd66b77c41e98

C:\Program Files\Windows Media Player\es-ES\wmpnssui.dll.mui

MD5 1f6a6c8ead782242d41fea5c50c61019
SHA1 4855f5ee2c211f6ad5496ddd0b35a8cd7e7a2e96
SHA256 d28fe14768fcffe5e76bd815550c0ee8323c5bb081b3a06eb9e02851452d1f9c
SHA512 153ac17768d09c3b8ddb654135813d19ad7b1a4f53f8a5d28d7d8a8c3cda042a595ea2f42e577d4ba370a7e4546f3d149dad55da606814b83a2a33e27a0f500f

C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui

MD5 db9e20a58184891042f22878af194d65
SHA1 3ddee2a14e06fbe656e16ee7eb1b9a622a2d5066
SHA256 5eb3f2d2295db389d485254805c3f4ae6d44ca683406380d4e4c00654ffa50a3
SHA512 a5df4ba8a0f56708c64e3a9561d911b49c7930cad56697148300a1bfe34872cdf3a791010962311f02662e156d95ce472334fa6e1695d93e8e91f1e695037cf4

C:\Program Files\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

MD5 bbc549b60311ce57f4235b7af38e99c2
SHA1 d0a9b7e30cf2613dc029c85c771c0688072f3bc9
SHA256 19be89e59af7f7b414f40afdab8ad6066ce8cd46b21b8013a1df5f42d030a380
SHA512 a089b779d7026e9944d341abac969d0e9b23a20495ee37dea449021bb7f0874b05a53445bc2c44ee7468599d634d906d7d4bdb2b774cc21c30586225a45233e0

C:\Program Files\Windows Media Player\es-ES\wmplayer.exe.mui

MD5 ea541e791651873865b4b5daf826b3ee
SHA1 f02453a8e35d2a3c814f02f1639539100b6afff4
SHA256 4334fbd2151dc365c9ab9e852178c1294ca53cb8c05f9cc58f0a2b58a3c4d27f
SHA512 361909dfd87036198f65855a104ab5a93703a3f1e3a86edc7c0231044bccd46f501c2d9009e8fde4458f47d6d86cbca602b065b5dbc0dd04eaa6672943d285a9

C:\Program Files\Windows Media Player\es-ES\wmlaunch.exe.mui

MD5 9fb098ecf935b60d3a627c01eaaf7ffa
SHA1 f194366bfc3c867deb537b59b9b794c3fc7d847f
SHA256 52224a9d41d862aa9dd88a3f20c5188a3af7a50ec58a79925baeafe18a21febd
SHA512 28b875a94dae1ab2a2aa38147022abd91aa674ac76b3f616ef3f6e27115aa09ef4e1fee0a5cf7c5e6740ddd8d8984539b4cb20d47a86b9b1840b838f3b9ec3ca

C:\Program Files\Windows Media Player\es-ES\setup_wm.exe.mui

MD5 6dd51fd3932f4dc6954b804286c1f7f2
SHA1 a188b051cea63afc52cc47d9cd68b091fdd3c89b
SHA256 173d47f832ac6b1e27159e5f43b02136b3738f11e09a59f45cf0481c6ff418a4
SHA512 40eec9a4e9d63be1c666125e1cbde729999c15ded52271a08daada77edc4103691dd8726838497e06ff67ed958dfda16fc6e56d7b06df4fb1a6d36782e575b6e

C:\Program Files\Windows Media Player\es-ES\mpvis.dll.mui

MD5 52e18e4c4743d56df2f0853da262a6ab
SHA1 434e6a5bcd7d37a835d94658ccec24a948f53ed5
SHA256 3f84b28cc8d6aea4726360c85cfae5ab097db9df78425e7379cfa7722178e5f9
SHA512 7d46cc271d5ac051f1971e753233182b681924dcf0df331984cbf1191f3b116e5c2514d2f3191ab53955a01f36097b9cba485920ac9adbc3f080e62a1ecb6fa7

C:\Program Files\Windows Media Player\fr-FR\wmpnssui.dll.mui

MD5 9c4b9d9f362a3820f4aa575e640cbb02
SHA1 917c1c05972b375eb924c59c160f974065e5535e
SHA256 e7c9e48b331983d7fe5dee69623e7a850824310b8d7ead5523335025f808f6cf
SHA512 13135092b2c077f6ae7ffd0f6e6e98441dff4965c11828e21ddb144e06dd8befe7f1f6ea75b9d6d0edd807699113025adbd699a6f60dd7f9a7f5e104757b33fb

C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui

MD5 6bc8af5ce333e62263c3ecca043433a3
SHA1 9abd86e179c49021b81607e98e6acf1ead8a93bb
SHA256 07b5dfdd010a0f171e80d5aef5b20f287df02a5fc619fbfdef241ac8ebe67a84
SHA512 3ea75bd257bec5deed2e3d6b7e3dd9ec8715f8fbea2acd299f1cfcaa7a3ad8d70dfb7c72f01b9f2e367f7fb113d86d6c0c63852afb7e547e69d1f736fca7a363

C:\Program Files\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

MD5 038567490bbdcd7775292bf9ed8eeb51
SHA1 68834d72aeec02db90ca1722315243c684cb64b8
SHA256 f6259017e99f23e65c351af87f579049d9bef89f0e2c9a68edcc28218523a044
SHA512 36ce1605420d5349e1ae3ad2dc028cb7f8fce1d2a8070b4676acc9307f45ea19fcd997cae40a4e016cde97ef01e7d59ddcfa039f7750a35aa158e42e59094695

C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui

MD5 69bc141fc39a09f113e47bb9bfc7da78
SHA1 984334f06c382812e2983c139fdc257a68994988
SHA256 569b0e5ca46b2007ee22bfb00300b5cc3469bec91caf5effc320368bbb751bcc
SHA512 c32b6b6eebe1f65dbb69b724b50f0dbd67cc7541285c99a5f6fc1bf950d909744090906116767827eb07b45b6bb1605e3f32b7932086bcdec0f0d335f7462cfe

C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui

MD5 7f12d2a95a9d226da1ea6300dd1ec07a
SHA1 b8ffda59eeadab6ba12943f74c6786a4a9fed5fb
SHA256 46a55929339938d7fd1d1f9b61a9d46bfdfd542ea09028a68935d8af227691fd
SHA512 3a90243f9676f09aee4c667c3c15c402061bf7fd07591288f5fd0f4f5a1ed2cfc5b7347e72ea0b93c7630502773c27a56187807e10e7aac1745a2748d6bb59bf

C:\Program Files\Windows Media Player\fr-FR\setup_wm.exe.mui

MD5 27362867a2aca22f3a1da782046af730
SHA1 c5cc12ee8ec403c5f3ccfc9d06ee4d98e211ff41
SHA256 06427e56efb46394b78ba189f26aa512c4758937367948eb7a9c23cdab6f997b
SHA512 349bb8a85e46b2cf4c7bac08a511c70421673139caa8f6614248513b07815d8450987eb2d5606fa539cb60ed261642f2d7580a211eba5d3fad7267ac75622bf6

C:\Program Files\Windows Media Player\fr-FR\mpvis.dll.mui

MD5 900970e7f98b930af89a6817263b12fd
SHA1 b40f31901c639b2b4d35569fc0da6d51df380c0c
SHA256 c410bf5fead6b9eac838d6089a4d51add7424482931c972c5084b3954569a6b4
SHA512 d993e5a0e852cbe4721ef98f0ee078510883b62af7f304f6051027c6459ce2e8fd045793e3fc4df717e112fa85d886ad0016c945522733aa2791127853f6671a

C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui

MD5 5becc4f6cf21a89ba2f772b65976e3f6
SHA1 5843b90a1c1aa7fb42af0312d13a2cdd469f40d5
SHA256 fd9818e68f0c9732cc06b9f7f75265d193a787f1c754446dceefec2c1b28542b
SHA512 0d8fc19a2a66307ea7d21f6933a60b815e7727c463a21921dba7a5d4194c154d2df05b93d14b538f2b470b7c4a427e205804c2fa655a5c7d77e8f6d6f333e500

C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui

MD5 3e0a3c98cb6168016dcc8b4ffb2563ef
SHA1 7cf3684e434044eededf7dd992bde0d9b9cf71cc
SHA256 b7e15e10ad94b282d222a85e6c20fa36e29ef8664e39b80b3737edb9a00780c5
SHA512 c26ac5d8621ab893857e17c777b580c9051f607b4c3d1b3025ac98f5fb6af3c5bab74af045fd3d53365a199893779dfd54fbd8c58ea52aaf2ca87f1f39f595d9

C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui

MD5 922b644f2bdb295b3adc80a663a047ef
SHA1 ba822b1ac0f0308acb1374feb31e792d7c13e44c
SHA256 42d3e5414f276013c08a1f95d24ecf1eeb5679036e7f137fd210a540d2c350d7
SHA512 243d5726a9431e237e2ebebf9d15480f4e34ab36e02ecf99a52589ba429e55af89a0ee0cac191e7815dbb434f90c0b9f1c2edaea1f987c151ae43d714df3557a

C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui

MD5 ed1d3c7f5e963b4feb977bdb11f80fd6
SHA1 afa2ee8d4490066c2d9b9dfdcd36c7dda94c5d34
SHA256 f1fb6320d17ae193b0f79c6a4d9a188cbdfcad1025229268e00b133db8b872f8
SHA512 a7decb1dbd359385a7fa26e542be9e3c7cb892d19ff2542866a71b24c65514221de0f453ea9fe4e92547928542d418dfe2b6ed71bb83f8fafd63007d8a3821cc

C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui

MD5 35b3fe4d688f1cd79774ef7173753129
SHA1 377d5ce3f0d27d1d02db9d8e4c7c4cd3e73d9888
SHA256 b067709e8cc46731f45f0d6068f045ab1eb09ed9ee6b967b1e11b63483cd5460
SHA512 b510e496c6d11fc124f25c9a559382559c075abcfed46f4b8355c1b31cc8e9477a5330a17d4c4b5c1a5ec0f790789a44e2e0660d81af5de35c22a911e8723dbf

C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui

MD5 4a0f70ea821925a346874f272e5c778c
SHA1 5957562ece4050894a94bd1ed4b0901c1f16865b
SHA256 4d806023d1af1417f525da243a3907e127fa7902b668cfe71475b0635f4311a1
SHA512 2e60173877524a5b745c70882a9cf91ad1aaa658aa3e144141f566a6f50c4834890efef0db48c26103004a98929384ee98d6c209a810840ff44df3d74e204a15

C:\Program Files\Windows Media Player\de-DE\wmpnssci.dll.mui

MD5 4c7a1ff7bd0c3d7d2c0d1b18ae09b3cf
SHA1 14c2632498bb504bdd7860bedb30fe0a588d8315
SHA256 280a87fe853d5a7fc8f1999e0b1cc2734cc64edd0637d96b14026a3e92c86703
SHA512 0a9dd99502dda21b47d805de77350f9b90588351eb6020741839d651d3607cb1387c1c44691ec6417f82416a2df7a34b3f2eff0aa7b83a32b30ea290a53e97ff

C:\Program Files\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

MD5 4670327d396b9a72fb9be42b5025fb86
SHA1 af39527bf22072de92e746ebccf39818c79da51c
SHA256 e2dca9f3fc703f08ac9df2d690fe7d811679a00e4ea15823c10012dac6e0e83d
SHA512 3a98b9ba9fcd123e579b72f01c7273529abb494bf6f96d7b47dfc5955e54e59b74657fd46432fe8c9260e472470fa85905f100fff19500bc19902ea43b4cc016

C:\Program Files\Windows Media Player\de-DE\wmplayer.exe.mui

MD5 0ec3f45d1c79e79a800f73198a936a74
SHA1 e223f2b15f2ca8680801e3c5b4ca640ef887989b
SHA256 d59e58a47db2c5c450314a77a4bdc34c299d82b3d963f8f55c75e70204be0cb7
SHA512 72502ffbe9aa03bdb410c893662922837cc53ab930e0d3b3465ce466c65c3f8f4fdf76e0ba54dc4e26b1a87a2c3667792189fe846ab07f1c62a9b579d3632e6e

C:\Program Files\Windows Media Player\de-DE\wmlaunch.exe.mui

MD5 e30c8bfd3c1cf06e26b6c73fb5ffd89f
SHA1 2bf2631cea613305440d6e0eeff4a761e2b2c3c4
SHA256 c58cac25855bd8a47953cf9772d29e315b916ab221daa6b12cf82d8a07ce4b3a
SHA512 7b33257fcd959267266155aa094c0b86f4d3fdd548d02043c3a796eb20c46b01194a0ed556fe551e72235e278e927b2d2dc7c4430f128cc279d895642985ac6c

C:\Program Files\Windows Media Player\de-DE\setup_wm.exe.mui

MD5 b580c8f77bcb565996cae63c74e39b72
SHA1 0b605517d20c092d11f973fc6b4b096a5a9de9d4
SHA256 2cc9aa4e89f735b3fe85c8b35b8009a6749315f3deae59112d7339195ebe0ddb
SHA512 1860e597ffa1db18686ce98ce4f064338317f91417d47709578e7bc8f4dcc444bea70e6b308997790badafb422a8250ec4ea8c89d94a685d4879e7fbeebe7024

C:\Program Files\Windows Media Player\de-DE\mpvis.dll.mui

MD5 690a896602015734d0e4dcf7e7375f2f
SHA1 c49c15275840e942556a790ffcb5c24dc074e734
SHA256 7213d2d2ae5913c64137a8fa0819bd60ca4d0fe466e8e7c2f1ba8f85ca8bd54a
SHA512 96004adc834d6222b6fd0e1b09a2bb1ceb2e857af5301560a2672057d93359d523501990ec25aff3bc8352e56dc4df2e1f341f5a5284037235fda0ec02197ff7

C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui

MD5 495c919d687bc1ed6eacab90e32e02d9
SHA1 d2f0e3712f7f0cbbd1854009d57816b8a66480d2
SHA256 66c1bf0cab577fe446b56dbbbf4ddfd7d5dcafc3283d865fc858ce1ee8456c6b
SHA512 8b60a643ccdbcfe177d04b39c6192b0e7964765dec641fd19904f869f27d60341d1b64ecfb4208a56d3ec1ac9b201e008eea74a18686f9a93e951fd6cd055da2

C:\Program Files\Windows Defender\uk-UA\EppManifest.dll.mui

MD5 a5c56b702fe1aa05557617fee6d2216c
SHA1 ec7a2160b491a4e906872cffe15f589a9e189bde
SHA256 71b89021bfd73bb9f9db80290c49f7a8a9fe5730aa4f562aba576c5d83eacef2
SHA512 13fe15b55d9f06a4d25eba1bb906e69652697f3cad025c0ebbfa21ffe06698cb4f858dfe28ddb59284f5ee4bdf663346a2455c60ca8670b7a79ee94f74fbea3b

C:\Program Files\Windows Defender\uk-UA\MpAsDesc.dll.mui

MD5 1b8e7bc72f00ce7a703fbd2545522c29
SHA1 1d04294aa6afab46b284abad6511baadd1f96286
SHA256 d28661adbc36dd9f7ffad6939e180a619472a3d4a4c02690c4d94d9b5830f92a
SHA512 a932320fe70bb1e1de572eb1c074de9a19411e7a501b4c45bce1d6bac00668806271210d964b860a27449a3bd88623e7458f9ee719e62a119332abc62aeb8304

C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui

MD5 ae1dfc5d77b346a080d3bada8fd947a0
SHA1 b0d6de58676d435c89449b5958e7a5f272c44a36
SHA256 d79d53ca3f4886603e28bb76b9418006d00652b112af44bbc626fdd59dbc3923
SHA512 b50fc801715c208195369b030a9a113b20ae8686892d8a171a24f14085dd5e8a49d1e5b2ffa6c7d28decce3d82d11f27a4b1063dcd1515e852bc8fcf6faf9573

C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui

MD5 b202ad9ac7424421da397e5595e7a43a
SHA1 4a7bf03c809dddb6e4372b367ac23386922979d6
SHA256 a20e11b581d022f4b2fb34629baca97e0f5dd6140e0dee238bef0946f89a848d
SHA512 90fdb3b468f7000c9bd360b39f94eb83df40cce07fc6af569e9b13697b09556670974ac3c426145166b0306cf2a598ada8f18b6b38eab1a14c91e32e47c6b8a6

C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui

MD5 36ae05a932ca68cb10169de7543779ac
SHA1 4f83c3582cb0a6b1dd103a4d10f29dc0da7fc98f
SHA256 924dd301f7e50dba8cc672ef0ddcc2ae55f9326044cb4b5e015324da0905b051
SHA512 e5b2faf5280770a78d211f4b64c70660d712e7a4203414ddf197bfcd363d2fd72b1f1523b07ecea6926d7ea14f36fe38ea3fe8cce73f7ad074dab3fac4ff8ff9

C:\Program Files\Windows Defender\it-IT\EppManifest.dll.mui

MD5 a59c381e455e57d70e7345d7b708741a
SHA1 8cf1fc75a3c5697bfd82aeb34121a69acf096349
SHA256 5f794b8c02d300061dc8d9439acd20c7f07b09ce23ab98441b771826f5095111
SHA512 8ee939112900b8940a2833eaa5297afe78d41cc1773ebab8cf893dd868267bd24356cdd72c1638f354b1fa8cc55e1dadcf35dc2d96dcbaef081dfaeaebba5494

C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui

MD5 4956c2660052e23ded948758929463cc
SHA1 f6db6add1cbca74ea3c5ae69c79cad2bc1b38248
SHA256 b1419f98a3b0e224a567f596622a7deb5f359138965efd012ff381135b136d27
SHA512 a0d3a940839162c50b4bc0988e374a74a3493ba3265d3bd5f2c4b0b51319690d78509dd9e4b8938a18e1ebb483947e48b6afab7e5115ab7a0c1a45bae4a8c229

C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui

MD5 6c2cb3d1135c4eafca73491833758182
SHA1 e006e189f592ef9ccb3a9cd3e9b466e8472fcf2e
SHA256 98bf69a303f9ed2c467481f5066192c367cb6e8de611803b89d270e75a02977e
SHA512 dfdafbedb3077b72122e282a2fd4a2e024b042115dd34877a5f6d4d7701d0ac65a42a1720c9e4634a434d02c9baf948b2163cc7e973341822d783967c13aaf38

C:\Program Files\Windows Defender\es-ES\MpAsDesc.dll.mui

MD5 12040ae0d8dd1200ec1b7565342bce09
SHA1 eadad47fe1a9d8d035ac27f79c5d16e31b017fa6
SHA256 68d4374fbf9a5354fca1c75ee194557b4750dac36aeb9434e4a888fc94d92c7f
SHA512 8d74f45073c974200b4716744325158c59bbe1daca148363955291600d89847c9cda79fe9fc4ecd2bf6772364d362038343d636bc1abfb77e79d4736eaf96a51

C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui

MD5 90d0e5577f187de477d4299a010c7afe
SHA1 1499fa6b15645ab292a9d10305fc771df59c5255
SHA256 866692c5ca9ee82f58f3ab07cb7e607cac757f3e8db3bc3c33bbe130799d230b
SHA512 66e36729fb2f2269ccc2c435c1b513b247928aad2066b87e376b696824f3e6554745b399356ee5fc7b43f758f2b9e757754d659174ac959c0d2ebc6030755219

C:\Program Files\Windows Defender\de-DE\MpAsDesc.dll.mui

MD5 48cee02f3a168cdab289eb2600ec6201
SHA1 be1d242c9b1de540293424398edd118cf6489ec1
SHA256 e838782363229e4d242d3ff20742bdf2f5be77574adeed0142e587ffaf34674d
SHA512 b55d052f71739b94a2dd2ba3cd971b98f979f9d49eed51666d0997ab3af0a64bb9ae3806afd27d309168c08b58532c3600cbb7a8bcfd58ab8ef003befcd8f8c0

C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui

MD5 d88591578736967a26b1a9a9a1d1f631
SHA1 43fabd7f272f80c37210703e80df5baecf7276ce
SHA256 63c40d9b188f2a3cc767282ba8131cc7411e2556d0255f3acf1fe279808991a2
SHA512 3f0e828a0313c4b9967f9fad4245b660bc950821a70fd477937f9d9da8518ee059d4e3277dc0cc82c33361d1652ea51d55eb95a461be75e03af108c58944679a

C:\Program Files\Internet Explorer\uk-UA\iexplore.exe.mui

MD5 5c09dde243f44194740e34db4b7556e8
SHA1 686a753a748882b9b1a5f653cd724243a7a2ee74
SHA256 97fe8b849b1c247ec4817e3b9d41f50685608303fba29db97ac6cabb29aa6baf
SHA512 5b2d3b6b83cacb0b5a072f9a1b07376cc42787eea2497dc354a2e53c26ddba73ef21c4d933106a0e85ed294ef35376ac72e2dac22a1c7d298e21f9528c2c7e09

C:\Program Files\Internet Explorer\ja-JP\iexplore.exe.mui

MD5 06ebde04c473f01700faf54a726176d1
SHA1 6d7ace1263b16a590f821608902d084afacc83de
SHA256 e721b3f6455659a14015994b174009d3e5538731b2af0724b94016cecc679bad
SHA512 5ee23648ccf4a9733550dfe5264eb4587ccf62362d54d4ac11258690111de423e4ee9eb14a3f149c880bae71bc7305f46947aa5df7231d23556dfd4d8e85c99b

C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui

MD5 836c6b1678ff3b75103fe028ffccef6b
SHA1 bf26001cdda7f564b6cfbcba31569e4ac178285e
SHA256 e41ac7ac43720229e612dfc11498328fde4cf8d1a8da408c83a1d8168ed58cae
SHA512 109b5cf201810735e9b15f4c5b9f345d565cf0b731ca95e6f52d38b1436030d69c4c4369a260905f7b6d92ed3024f53ab46f465fb02270e9df77a79d64b70185

C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui

MD5 96349076531f7af17a05ed2da3f47864
SHA1 e5a46733a8478384c44d81dacf0553352d56e365
SHA256 66c30b810cf7cf8e12bdeb7dc4142746ce51f5a8437f910d54013f98c792ec9f
SHA512 ebc2e7c2ee4dd9363ed559a58ea745043df4c76e8b9f93ca67f1a3529637fd2061f4c70704986fd4216196cb01fb395d14d4dda58fa3813407dc95f29da25d53

C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui

MD5 731cd18ac19d30711eaa64b62cc8707e
SHA1 7d1c415b15c7fb6f5bab76f425252ba8e6138a1e
SHA256 723d25500b6ed5a35b2838e1678a9c97338d5a17ba74df0a7468fdb72e846fed
SHA512 3c033318629f84f2076028f92f3bdec935f697ad35c72e0089d9a5cd1fd0668c72055fb7cabe59796d3b8b1e197b3c2e67ad8e6a9384a79a13969f8daf0f5e2e

C:\Program Files\Internet Explorer\de-DE\iexplore.exe.mui

MD5 4a9105334c2be02be488afc6b9dfbd94
SHA1 cdb46ff4e9ca878e54552ab7c64fc5f5ad47d648
SHA256 92a5d79741a22f6c1a9cbf2f3afcce8053eac73e843d703bbf3355b32456bed8
SHA512 8b8a781d9d7765bfe461f2fbdeab03be50bf3ca26cd217c1d9afd7f9e5fb801947d509e88d7e108e468c412a6a2da622a3c0ff46dc295729ba82c8fb75b47ebb

C:\Program Files\Internet Explorer\es-ES\iexplore.exe.mui

MD5 6d1ff9f08d724de1f18cd6207ce26e91
SHA1 65d20d0e8619679d239a7610bca67c8399760ed1
SHA256 44be7e22d38e022f2ed367a569604cc4c82a6d4eae87200034b15014f8980009
SHA512 8c8c90a1a05ffe40ff01903eb14bdb8d65d3c1e6eea658d2beec0ea392ef9e2ba0b6e7e7d5c9b4599def4c429296aed5ee4db8d2e626cf76987531416a32c484

C:\Program Files\Common Files\System\uk-UA\wab32res.dll.mui

MD5 b8f11eb6e84316aba38f229dcb82d917
SHA1 6bbfe817c94bfd0572e11f80b4836a226dc89893
SHA256 76c85b7efac85ef0b1d32e5cc79e13e962ad6f0c1c360c8a6174095d38be2bcc
SHA512 77ddd5435e6818f5664e4c3a5498d29bf409839d3710a8582b4a84009dbd93f67c343078e0989f83cbda95cfbe0e6634b554c530d791e20b24c1d7f4ba584794

C:\Program Files\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

MD5 f91bce7059c73d8cb9cfad26a7794501
SHA1 95a198d2be54fca9e0ed5f3e4675ce914a7f7228
SHA256 0ecb8ceefb32ca7380ec87a0d7471e4d76d074730b879fcbfbec455a412f8f41
SHA512 e0d0f149f1d1b12ce695881e16046f08db98804de7deda05387d2467496e092aa418a25a5600616b57e56c275afd5e8d62fc3ea0412cc2f7706c564d3e8524bb

C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

MD5 e5d293671c989b3ceea69481da20834a
SHA1 ab7074a2e69f79b0c9fd3d0b8a657e2ad58ed11d
SHA256 77509209d19c5387a585b2439b7a212e92be05eda516d72e4bcb08f8f42a6041
SHA512 1735b1da180c9dd836b9310b3866c62c38689eccd0fa000703f23ab794dc5fdfa2780fcee507c2ed4456fbc1485663199f9de4c4f5f882d5253970c466757ae9

C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

MD5 ff8aff5ebafc0f87a27a77a9811683d7
SHA1 8ccb9db1a76112d1573c8d64facdae4093a2c644
SHA256 386914a094036bcab56d4d014e3c67856982a75f91aa74677f6f302d67654ade
SHA512 0403c1d3214c80aceea29b32fd68a131d9052a0add73e70366b8793dbf98124873adace0a776a5a43f4ab6230b0ea17a4a93b639d48d8c1e8c2fd5503d9de634

C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

MD5 8cc951fd8779546d15598973e1792080
SHA1 226194fab39009a446544bc5af8948591b707a99
SHA256 e166f1ea1ad9c93960ba86fe5b8f4e26ddcae120d5f7fc629ebcf8324fc90152
SHA512 9195e019512bc6d1170c5108e131d1b13a4ebd2df3aa7c7e7f4b7a5daabef2faf1120117c312c65aad075b2e1443bca7f099165fa64f3c0e408c6cc83f7bddc5

C:\Program Files\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

MD5 eb0852b91bd73e501aa0dfc6da126c41
SHA1 08a054bffd02f0fed12f1a9a4815213e2baab878
SHA256 825cd052f7292b4e9787905a442b377dd3729927a4bbbc551f42ff9f340d596e
SHA512 ccf2ac5a610228c968bd0f91c4254474bbeb75015cd6f2bc7d309a54b27945e273d0c6ec8776d0099c6132dfd5f43f2d5e6e64561ed0a235b1326af150c273d2

C:\Program Files\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

MD5 f5f9b7f34764d92c9546552ae20b0a1d
SHA1 7e3e067a212407805063fed6a3ae7a8a4ad5a14d
SHA256 33650accfdcfad1497a1cd57d263d241fecc53bd4b19889f91aa4d10a3e57e4f
SHA512 626c173711ec02d1ca438acbed136aac70b0985786d5faac8f18f4a27b3ba6c84416e4070ccf3c688f4bd1a876c8baeef2aa2e1af4a0772e16b704cb42082b9e

C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

MD5 04645ce6096a263405a7f58c731b70fd
SHA1 d2026c8e9bbc970b6fcfcfeb420b3a13c6f86f61
SHA256 a3b8fc51a3a36ce7ea75994d4f0b83c382d5fead00cef81953051f7da83ce744
SHA512 358ed771769215cd1b77c5cba3967dc98acb76b9e50d244dfd1651baa561a3e59cb9cd1dcb0010889bf31b87ca511aa60c606b2476a3c93b713abc63ecf79849

C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

MD5 46914f8dcbfd669c87c5878d770ff856
SHA1 4d77e33c06b830c7dd6e80e136c34fd822f64bc1
SHA256 5b4847160956ca58d973a907df3121d693c857d17592e47775200d5396ed9eae
SHA512 d47a7fa42992df7de876e6d88e27dd741442a9f0301b923d449f6c9d7b2816d491754943d095755387e9778c5c9d3a06a0e63b74b14cd3f8a361cd6b50893293

C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

MD5 b233ffeb908fffae20fd54f9e41b8dfb
SHA1 c3f9c24cdc9b3d8264c7877b46b021eec3d59dc9
SHA256 d122138ccb4cfd4b7d1cb622ad437ca7bcec240c1cc7eb274e89091e3a523fa0
SHA512 831caed565c693d451f25f6407c6df0352ee01bb71c93281c9886a8103ac17a2baf0f35a723b1945c329d13f68ee9ae79c7bbd42193686068f2f51892020bfd5

C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

MD5 48d7c7b56d1e31c62da6f9ecccc2f6c1
SHA1 9f33c4888010765c97a9dfde72dfcdc71a13172d
SHA256 a5874ce53b6cbab9abf6e1b14a7bdbb775323e3cb52e0fe239d3b0b5b5af6fbc
SHA512 d33fca347aff1852d309539c5806202a16d02a1f6edae07487542714c5f4b0d927429a3580f0ad303c1513a61ee005935358ac56c41abb97c2969b2dcda2e064

C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

MD5 8388f9634ad345b43275b6a6eaf6ce81
SHA1 9b12a15e98bda26862b0152ea7f2d4441c517445
SHA256 a1b31bea29ab2c77cb7f472f600b864e8642a0a1645be9bf7769d5e5e3d99cac
SHA512 a7085c1143c18de6472080e6346178c186cfb5ad7b4d54402bc32e6374c89b9f8ba0c840aef005566cfde9b72bef316267b2bf98f31f56ead91220d4e9ae1d0b

C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

MD5 aa1be7726ac5580454fe638d1833b617
SHA1 f0a31d220e3b071ec47137c87d00daeb812ec802
SHA256 5b75d100e3d1f07aa8a019d193f93fc5c40a595e3df33aecb3f7ba61047280f9
SHA512 7bba26db0dd88336ff27e43711033cef70ac461557643e143e43e54569ea4e483779dde544bf8b0da4add58a25a6b1f0f56426859a4aab7a9457b483e4c17df4

C:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui

MD5 6e9419c592f93ac764d5fac3208c705e
SHA1 422667abc593f3ef63907ea786d703601e8c7ed9
SHA256 f801c0e7cfcbb06f12f43e2986de41db20c56408f656e9db022c4108485219e0
SHA512 18434b8f1c2f0e9f2691ac64644a6af711899dde6262f592bf62013d13a3011a4312f9102b116953e599db42e8583c0083d5226ecbf0a51dcddf8e82c83f482f

C:\Program Files\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

MD5 9a09ad84772000c96569d89ec80ca2c0
SHA1 d83d4a34206d834e7e6ae8231e85e17d92cf0aa7
SHA256 f5414a96219d94adf89ff64011e2b9ce5f5e7eff9c6b82a815f34746e224b1ee
SHA512 f1c844b65b9166c8e01e15bd6d20aa58cdfbf3965ff462aa068a4ad5f1a917b99a5dd0eaf53b83ba45aac2fcd3575be9ba687181e1718887ab3f23f7d214ebb8

C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui

MD5 5a9f59d40dd0873e2afd7d4513c5b311
SHA1 914513c960f988aa73d8f2091bea2e8742e5c977
SHA256 5257548c101f1f9cf382ff9e8eeee6a4495692c17ccb42f02f3d651da6b7c493
SHA512 beb6cfd5feeeafbe2437379da01d2c18b6fc0c12daf1597b35448aa9a64351c6cdd9513d77943cc0e6257de56b02f0d2c3d6dac0f2cda94c11336254a4bc2a7c

C:\Program Files\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

MD5 ffb59b83a2e88a2e94702dbbd5d61539
SHA1 89a6b4bbd52175a9fa50cc0931a893818f0980ad
SHA256 e205832ab90565552eacf33742e09e7f89ce7481811d0a84df9b79ff2fcae93a
SHA512 aa9a58fdc4bf902ae2c472a94a0df40be5001cec7d87b7be23ba6fcfaa9ce173dacdbc4d2b16f098ac7a95bc7de3f16fc04ffdd0466dca1d79e9b41e9c1528ca

C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

MD5 a363ec7065770e1a59f16a16c22b3978
SHA1 52d23ff12636123981bc247b5dfe0656c1ccec50
SHA256 2274472728eb0bfb0230249afff30009804ee42f5a121b4c685e8a438f02c49d
SHA512 231e769fa57a0e1fc040ae521ddec5ba0076bbcf6a4a1b7e56868d96178ca945ee3c3f0bd760244b795b138adaac3aad303325c0403d0331621a6f867dbe0e13

C:\Program Files\Common Files\System\msadc\it-IT\msadcer.dll.mui

MD5 f111b48524d44d172bf48dda4b31bc59
SHA1 2101b8f9df8421fc1615b7138ac3a39ce8e11e35
SHA256 f17bb160d180d1e64e242498281489c760308ea1fb8c619de4102994ccc745a9
SHA512 0e88ba26c7bd30362f18c0f3a5507465e865e0e371c102c33bd7c9d727cf5a4bc4fc9249c0fe4ed7c7a51d308340f86c1d6fd450973a003b96943a0264bf4721

C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui

MD5 78f3fb5ed8a1a0a61ce0f359b25292ca
SHA1 ba060b74f2834369d7d5e24a88289723a9d9d263
SHA256 d239bb2f8029576c37c3bdaa8ab2d8b6f00ba19f5c7a231d6b0b7ec0f48a3fcb
SHA512 5c21d1b7c9cf3dd432117e233f15dc5bf573b9da684af6498cc9b431c01a98e0617b5448bc312f5126a80d4c597cf222ca168cb462c650d1b5f1088e60b44628

C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

MD5 03cd894838df54601c281fee30a8c939
SHA1 0d4069c38c7d529e9ae3747bd4214446dcf5c5f7
SHA256 e7fdb3e7747ca2b5e153b9907b95129d6c37c3d04604550e2c71d95b8101a8c7
SHA512 bdd6c51b0f3e90b7da2e8ba5f0090f1772cb8a6eaf76851ca7181630d9b6d8713833d48c46d1bf7c0898ec27ac43cc5e196b32da5806bdbc1ba98c24ab14e41f

C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui

MD5 c7f81f76cde14edee4b3d0f1d3416446
SHA1 753c9020f5e033870abe5b1dcf5b684b4bc34ca3
SHA256 88b735a7aa127fc5f89ca1c86d7dc9225f511af88e40138b56f7997ebdc77d22
SHA512 460550f125e2efd7c9a5cba4db31142fb46e4491daa8ff46a48f5cda5ad712217e8901b757f1cfd4879cc2b42dc138269950479854798ecb7476acf3676ae13e

C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

MD5 14dfca7280117149dd578081d4d91574
SHA1 f43469698835934d5c9d2dc690593e05d9b6089d
SHA256 7301d2d16f556d5719d9cc4eda5f8a42e08f415c6ee201eb04c3eec82585bb48
SHA512 83f22bcabc1bfd16971c892929a9c0aec162a996c9de0184a8db3f5926d1a2f3d7d4b85536ce05ad76633b058a2a30e0051503b866cf68b59d3a54707693347a

C:\Program Files\Common Files\System\msadc\de-DE\msadcer.dll.mui

MD5 13075ce711b1672b4113f98fc79bbc2b
SHA1 77d8f5121b75dd7cf52e60c765b9f4f5bf9a46da
SHA256 5307acff8ced2832e5f38c3d63c3847796558b58cd21564010a23a9dea78cc73
SHA512 3ea8d75808c3f3b7332352d639d2ff7ae01968b496e865ea7bae5b3212d568a86c940929a86fe6aff69be188f7d8285a99e4bda17da7a59cacc2f17d2fcd55e5

C:\Program Files\Common Files\System\it-IT\wab32res.dll.mui

MD5 bd942bb531029c1705bf5a0c8b3688f1
SHA1 eb8e39a8c25b05ddd8961ed67b40144fa566ea21
SHA256 cd56ab99bff9d249e287ff540bb99255b755642c69959d6f8f02dc41d38e8283
SHA512 a6c5d272e23d9173a81e8087dcb1660cf70845edbefb414c5ad18b8568281c5d5f8abfd137b1b1469e43f45c8f4682c9b82fbbab28f3a278aa2b27a93dba19b9

C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui

MD5 f1595adfd3888f7e53c7a52210592459
SHA1 fd2897a01507a21762398848e56bf1bde7856077
SHA256 71a1f25e42e1d9b3a3af3e4cfa3540377e803b6a8ffc7d320348eef92019098e
SHA512 82cb5f7eb64b6d200fe0d5513b724d5d7e3f8e7e628e8fbd69ce08608ad9f589334bc89c9ea71fe7fe140dc7d6303076b5b89ed3fd69685ddbfbd9a0c8be0360

C:\Program Files\Common Files\System\en-US\wab32res.dll.mui

MD5 c074363e83e7f7c437b7ec41bcfe5425
SHA1 00ca9883694552902592b35d4b8574d49e47385d
SHA256 ea7a9a827dff1cdc1278c59342843bc789a5d312868cf0ce194e7c3203f2e73d
SHA512 9d06ec07e8d242b99681ab7838d215d429670c0e80b7aa879a4d55df568ed1880e77b5b5848607b856962ec7b747d0826bdf7fe97492f4dd1e082d97691cec23

C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui

MD5 b36c0586a2f344d6410a424a8408c112
SHA1 7ba37fbf5dc39d987c79824ea3e082641628b5d3
SHA256 784f8517965a9aa3be7ff43728c8bf428f28f2d1669a8d17f05bb194c58474f1
SHA512 062538d23e3d8e34e4d32368978b04d33c91374a973a7a34e986b0a5d9893780b7bbfc574022d967a37ccc5eff7c0cc5d6b8694fcedaaa14d0ec49c0a8071666

C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui

MD5 d5c6ce2bc656b4b082702a3a86aec107
SHA1 7797ad2468cdfd0418580e5eb0e22b4e9a2ff592
SHA256 885ea32aaa63a693dcd1ea07f2892b0efd0036fc1657b5210d08c7e814ccd600
SHA512 1f20092f69761e3b38ca5f2ef38e97fb51d11afeddf9c9e5ce0d95f65addc0ff503c794dd19a15760502fe11e0a6309cc22c2e3cb8262a874bd4489aa4928e20

C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui

MD5 dd4fec8d193920332460582b54693bb8
SHA1 20643fb46c935034a5f48df137f8464122151bbe
SHA256 7e8f3e0835ae1a56f0412a43ae4ba66dec8b9db678133852711bdd82ad412418
SHA512 4dc46c653118cf3d14b35c818e506389c025a3f3f824dbb358fd8ee2707f526ca3f2b31d39695908c9b4f0002d6be73e1c8f32fc1ebb91464e38538582275ef4

C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui

MD5 eec2bccb5458c555bd4d138874283b70
SHA1 90f2bd4a3077021bf26ace6a1e01b75da94bea61
SHA256 cc9649396e33137af80dee0a03dba83178db3e15921eed207d51ee62178a6639
SHA512 655ada1baeb760b8d8a192a0f659106a446a630b4e61791ba731ee683da458a300f1ed17eea1c7a4948de2fd751d680ed79a029ec0409950eb5ca60863f79628

C:\Program Files\Common Files\System\ado\ja-JP\msader15.dll.mui

MD5 7b443d1b13eed35ebfd636c2f93fbf84
SHA1 d25d230e7cac1c9b0bf08083a7280f7b00f367cd
SHA256 d74a25a09b824800f8e3855a8c61a0abe6acedbe5d16504c1a7447eab588ba73
SHA512 e3d61344277c5ffb8e3c17f3eca329751a16927d42ee0a431d7fb9ebdcbb85bccc7cfc368baa349e94d65387026aaaf1a1ccd2f0c08217a628e1d1d5ed385021

C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui

MD5 da7db4a7355092f554666ceba41bd964
SHA1 396ba0f481be6b019d46e3bd585e5699ad6e4ed5
SHA256 368c72914c10413eda5d8ccd113db951fa3acbaa643d41b083957098fb487eba
SHA512 520a03d09236fe643e6f9420db01c4eb1a3ac9cf1b8b0adb4954ee9e5577f7906f2398ff0d9c04719766730de4801366096e3d1662539490e0e6e9b09a149300

C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui

MD5 e3f661471b0a1f79548d2f2e20c79a90
SHA1 7c281bbdd20b782aad31defa5163a86b5404cb9f
SHA256 c9be9314e68d44ceafc169cf075ff3b2064f134247271888c8d0c6f3c230373e
SHA512 37fabea33ef8184bf5851c9a7ea992be09a23730bd627302529ccf21484b08eb14d02dd7fc7574bca0dd85aa1a1bcadf70c769f3379b1b92026c166842c90fff

C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui

MD5 191e617f6a873d77808f74fb8edad037
SHA1 0290276e8d4c3068c4f992176d3cc13e3f2f9bec
SHA256 30ec80191718355dc41eb2ffcccfb664162c5990e27b03423968c7b05341c806
SHA512 188ef73dde855c4a604921a20a4431cc44554ba3c4b3cc16c15a339f54517c9077fef64cb3f98354f8b2dfb25096d4bd55ccb0e29db13efb1cd3b9a315081dd9

C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui

MD5 6fe89319e290e677b1bd5a76c15f0221
SHA1 9b491e3fe1e2d597f01ba62c6da6654de4d81139
SHA256 e8271e3979b9a2be33d1dae6b800cad2d919dfd83d23276a4e1ac443d846c705
SHA512 5c88323116d3def414c1f9cda2fa42be20c7970e38725e8606c0ee769c2ee9054cde48643439475d5a8dfff50fda45712d88a0816214efe20dfdf4f954cb772b

C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui

MD5 a8bac21ec5a5c8235a9044c203914bfe
SHA1 69a1fe40fad6dba2e023067a75530eb7bf9377b3
SHA256 4ee15f73b9132f37b88c54707083773dcf4d6ef581a6037382ab7ce2969f296b
SHA512 7e432587ddb8c098410a0b9ccffb688b5685d0d7afc542c7c327c10f8aca8d994952feacf1dc44cb16cf6d048df1930f319dcbca0e1e3cdc3f63e9ccbdeb95b6

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipTsf.dll.mui

MD5 7c81450188e10751bccc93987d11cd43
SHA1 a3be3a1d304b7ba8af7d656bfce193407efe33c5
SHA256 9d06e0e687beace5b6d6cadf8a1ab40745e69c9acc503c91c13654bb17619639
SHA512 eb845eba97912100a8984f16da6d6fc9488261c97bc9d80f3103bb059398114659ac03078b0f31f7a975bdd8debeabc3c9538e62d5e824c4287a2e74835ef1a8

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipRes.dll.mui

MD5 ad983c57cfa7dfa5833f3c4db9457d17
SHA1 28d5a9a13596b6832982db1297535e638bed2f13
SHA256 7d028cd6085c352a2678f4ec22878f80a31d6e340c4ab31e529ad582ddbacfe6
SHA512 789051562dfe8756e4e3f2671e17c6eb982288e37ec82d653f5131dc97699eea7d44699280f2a4614293a571ce58fbe42105121135119c7e307a28d08ef7997a

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\InkObj.dll.mui

MD5 60d2c7bd09eb34365533d8858ea7c6be
SHA1 e1818d0a64e7d21d9ea726e76d9e4c7bbbb9b4ac
SHA256 ec0ec3d9f2a6453dcc91f96ee57cd1cff50ed86142f82ac7439711f1b02ad085
SHA512 46e63007ce7e0be6347a49374d8223d56a47012aa5ce878278fa810a7e5a4020be677ef773023f764ab546f01cc388dae281d0bcd86b70fbdf0fc2f33e751636

C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipTsf.dll.mui

MD5 33fdf353ac0ef42e2f3d7ff3b326f100
SHA1 3e9480d520d2fbae5ffd66dbc5bbbdb381420ad5
SHA256 78f4a04d85a84ee2375a59f592923d5b9d2dc09da13288b9fc73a2899236b2ba
SHA512 22487d4fc69a4f2a185b54e79b736d5510ace8c8bf858eb880e58c6434796a7cc4204be25caef51706c963182c15c1f5ffc32be1a1af66e5245c6b29e19c055c

C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipRes.dll.mui

MD5 c25df1c5fbe563f6796637df2ea11146
SHA1 9355f16a21c47b6a9598db72f8348b2e1f711032
SHA256 2822f796624d71c519efe03833c5d176c3c74bc82b7196f7f8196b804f523ead
SHA512 17262577246c32a7211da40d20d2636ea51f45c26e863376d4ac04c86fa4d3726a6b274596bc000d3056469c74efe145c4111bfb66a210d6f6fcea2f566b6a0f

C:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui

MD5 81b0229076d92407b0676dea223ea54c
SHA1 08899f84f601949a41f0d7c0376a5d51dde9f150
SHA256 e5aca7252658fe2f88b3f505fe23e283463150d296e1c1b764725bee84f65ae4
SHA512 a27292fe78716b9d40576f46347352ee7227cdcec536ba3daaf542d4e4ddc64483e4572bfb49cc95cdf75227e4b2dadf2993e84e7f1088a0cc57a0b7799d9b19

C:\Program Files\Common Files\microsoft shared\ink\it-IT\InkObj.dll.mui

MD5 908437c6eb3d2e98dac204e1c6da312e
SHA1 49965afb1c3a430581126159b11e6e333bdb7616
SHA256 3a58e49ef2bca86d7693757b5495d33617252e15bae6ceb8c7d089d25e997579
SHA512 9776b9fc68fa537b760a9383d82843679f1d15a31882621d8882ebfc689e885d7d6b850e09095b285a0fab7ba8aa0b99b2a1afac3c01e4bd33bc094fbc344906

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipTsf.dll.mui

MD5 0f167ddb15aa61030d58ac9b7ee62a1b
SHA1 10e28c2cc7ac5cbc0fe4fd52c3ca71d1b4b64f59
SHA256 6fc10ebbb061bd95de032c7426396b8c7df57a74eaea71b2730edf442e4904bb
SHA512 1e6679944d0d73fd5a422c3feb23d99e8b28ad40c29a012941d303dfaa16d7fc94b2959c5b1eb9f10eed1923f91b95dcd68aa0cda5d2b0cfcfdd062e1fa301c6

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipRes.dll.mui

MD5 31caf6872bfe377ef73f611a0367c37c
SHA1 08c96dcd341fc57acb5607084914fe06ea4e9bf8
SHA256 40aec706c4c6d02e6f697106426981d3b3131ff4cb16b464cc9f9ba51649d9d4
SHA512 e24d3e299ab7e80d58af0bb52b4701b07e1ef1b4a26bb415a9217419a17eb79eb137e5ea915fecae48c7ec0f1e628a8125de20f77f626ee2800f2f53402589f5

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\rtscom.dll.mui

MD5 b9bffbaa7fbbc79a4ea14663c6a5ff95
SHA1 e663625c56fe216664d3e779c395cce6637e28d2
SHA256 71fd9e605c7efd5e4e82f4ca78675dc649fe8cb771c7e010add95ca5678cda2b
SHA512 37bdbbb17910af39183d7a60639c2d8cfd29f86c895d5c3432500948a5999c66c404a9eb04b4abe836b62d4d2b4921703133c9add37cce8d4fab98b729054655

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\InkObj.dll.mui

MD5 a672b5ed78e25efbca6c30bbcec22d76
SHA1 bac7a056488335e5d652f15610f3b7c7142ac5af
SHA256 f930ca6cf4de7b973331c0e901d20d400a59db6379296d302f3e47d61664e30e
SHA512 e5d60731cb1a4542a4b9a86f539a1808f3af829f7a319b542e0293207173409976d82ece5ce6cccf93c6860f13abce08570c37d2c7f5b8c5463e7fe8ecd45a2a

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipTsf.dll.mui

MD5 50f6f019410eda0dc10b6edc49268aaf
SHA1 4d587baf9a60f7d9a9f8f1076cdb46520e35e7b3
SHA256 58f6cf5e0a8727e3024449cc879597d2cc19471ede7c5ddba92f3fe71c55db03
SHA512 9f12c20aa5bf36ac03c1e5a4031e8778e85855530bf1c30cb7d52efc6e27da013d262b43d2071ec0ca1bc84f5bc13537a04a274e3031d6e6dd398e42b3b8f59d

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipRes.dll.mui

MD5 a10e9c9a2248e28f66224267a4e1d5b1
SHA1 f963e28b260f9629b5434cff0d4dc19376d50195
SHA256 aaecc374e3a6ce911020f70cec7e1cbb79ebba1dd2b7319640fb91b58e312c88
SHA512 e5fd8f09eb0099acd6d497af9b67e9042cdc44aa2e55d3a70db80ac703f937024770388ed53d4bcaa4960f9def3c86c09247cc8189cedf6f8b1b0737bed34e95

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\rtscom.dll.mui

MD5 3ddd33ab46126037c168d9d99c347b83
SHA1 ccb0001064e9289ecdc00cc081cf5dadcdea37a2
SHA256 a64308903904338625e4bdb2799376557bc7dee268366881d63df71259aac2b2
SHA512 307f8d05d6533654f73ecaed244d2ba1f03a6a0983dc76d0282eb515641dcd1f210be6e9a07c4f6d0dd145ac600261af6c407fd808c8f8ca487bfbfe7a14e56f

C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipTsf.dll.mui

MD5 9c0ff1988d55cf9df9fb83ded241a975
SHA1 1a149a5ece0d89ba20b5160677d2dc67bbba112c
SHA256 0ddef677cbd680449c2b03259beb5a47ce01c0201818fe0d72de66412eba77a0
SHA512 13ff9b3fab2c1a57bc653f8f0cff50f59dbc55bd217500964d34e4a626d31d50e52faf8d146dbb49b80adfa94752e29548a150bca8c7e476f072076b49809b12

C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipRes.dll.mui

MD5 8e33c67e7b06ea8f094bc581f4c52661
SHA1 66be996d609d672aef8dd97c77a69357ae362e05
SHA256 45a40e25199bdfb5707bcf3cbfd5e796b847183aa4646495caf416fb035df2ae
SHA512 02f49d65690b82225aca5c82640280551ed85fbe9dfb36add364bd8aa5d9cf540cddc6649951d25c8ef2e77a913b0ddb9f6f3de017dc9b929e8032508491ec24

C:\Program Files\Common Files\microsoft shared\ink\de-DE\rtscom.dll.mui

MD5 ca053d56737cebce34a6f35a183f9bb9
SHA1 6b11a8002e3deb549524950dda0e39460e8a9e9f
SHA256 b109e99f71297dbd25a5c98b84e37332306b8b5ea2508ac7e983c021febb4c2f
SHA512 84d97ef33620c341bbbcd13b49f4cabba185ff15e20e9f59841a35bf10bb30081aeea3108d614e5671c1f3c398f480c564d41f884736cfbdfd998da96b6eb449

C:\Program Files\Common Files\microsoft shared\ink\de-DE\InkObj.dll.mui

MD5 0a1223b858c6b274d7f8704aec2d4eca
SHA1 b897e9ae41e4e6f87f51f552cee956354aa8814f
SHA256 739d69f7f5a6031a0f81d3510c75e2541bc039e7ef199b97be0f4c6b6b2b3092
SHA512 009eb20718149831908ae075f3f0d7576da93c6751630220c57fde2b693be2e6f1c57764f5095196a21827c76810677f5fc16538a6662d5e9d5ba791e6e4bf63

C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui

MD5 9cd7ef0482958ee0fb0ae892504cf480
SHA1 afaf350912e56602a6ae08efd9a578288c8d8cec
SHA256 42c4f9a258bc08254dff9abdf241f1fe5ff6bbe129770098c4a4cd8af0a5358c
SHA512 21502628820db91370cb2ac739c3db25c7bd08cee2a91f0ce20e7a22163a7b9ce978415fb99168bfd11863e65532438dbfe250c29ca30a76a1eed3ffa93c28b1

C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui

MD5 4ebd88a413978febe3abfba55b7d8265
SHA1 5692e224b728f445a0f8fe1c040ef6b447e05e3a
SHA256 d506b3134a096e22af98590c96b862f811dce142de60dd3013cc70c3315c3f18
SHA512 7a96cd6b2ba3f448886a259bea684e8b70c08a41f14cc8f635de95561e969a4e0b19489c1592c27efe1c4446a3040d94db8d5cdbcb26f1fc93fb7ec19a3f1d89

C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui

MD5 59a25cc3167312053d90cbc9efdda6ed
SHA1 a31389d511f437e1973c701b4e7153f4938f5fee
SHA256 b66a2246c393dda8c87d2ed2d48c0f8d1972f32bfbb4039f8156ee8ee018fa47
SHA512 9177f44a2f3d8c6f0b1cfacc4a6103e3a960d3566481932f6300ee644d0044a071f9af0ee0df5eb7ac0c33eec567cd7b9afd50ab8310fa9a6a12c3d6348449e2

C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui

MD5 eecddb826027243af55d236db3eadade
SHA1 e2dd7baddbba24bc1652d7bb0ddc1a02c5be1074
SHA256 b3a7e99191206fc7e971be9dfc59e6ed518a737b51a6da4fdab036c6af1a0517
SHA512 fef3b99ed644af12fba6065c1eb63548f83eb15a7fcdf88604c9f32eec990e18ac4facb8c51debced540f99929f700fe201e86f87f412be9e87034126ea9cf56

C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui

MD5 b4a8327da94e5a3a96e7f20544366c8b
SHA1 9366f4b461af315e08f9fc3ba2784a06242a28e6
SHA256 cb70776e9f89371655a23cccbc9ab048bdf4f7a5c34ee827d4b4e6e5d6668ec6
SHA512 7692e5257156264b90f14f72d7356af38b92d90c204235ec2da00f7f5baab4428f6f0b983aebe8d925fc21bff9b62cdf0f81e66d426fd949c2c8287192a2a045

C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipTsf.dll.mui

MD5 8292d80fcfeb631b40141df8c0c85d31
SHA1 3ab8949e7db28290012016163bd94f1823232a2a
SHA256 1a6a1cdbf01dde54517deb95a3493110ab6794a5eab0e5319c96af4a0fb12312
SHA512 056369d42b9e33d0dd4cd0d08e8ee15fa4412eb13a812ec8dc3be0c60d7a203225ce95c8a31f7e4820d75a12cee440323e9531ab4e4df20430f90f0121767d55

C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipRes.dll.mui

MD5 9748e2ecb1ad6ec5a1354439954a912c
SHA1 0eff457680164b2cc654dc2f0b7549d5c798d083
SHA256 ec3c0f34245e3d3fe34d2d773a4200d7b1c50e2e2fadd9c448a7e7026ba81618
SHA512 4677c7d89364a23c7188a1559dd25f612d7cad29ac22957891d4d7f4a2b035ab843b3d8695549548b8883b4078e40dfc9a9955df1288259d556bb484fec86523

C:\Program Files\Common Files\microsoft shared\ink\es-ES\rtscom.dll.mui

MD5 602aa943b36af0a17e9f89db39d53df0
SHA1 7b0c72d9167d3a5a5b0271dc7309e9b41a61fd0a
SHA256 b5f6cc29f21c6e9be1f07ae32edfa52ce176497671549c0772426e8b598629c5
SHA512 e2291af6e230703d57d39345f85a1d657c52bff7ecdb69bdfa4f82eb132f77bd55ce27c5ebef27d5de0e4316fa1d9a2182d81bbbf9c977bd37b47b72a2c32728

C:\Program Files\Common Files\microsoft shared\ink\es-ES\InkObj.dll.mui

MD5 35f2880fac2329da6a7f22e354112746
SHA1 9025f23de2ec1073333bfeee324a25eea4210c6f
SHA256 95aec0c4f3c7f6c20fd034ce2b7419033dc3e96faa97febc1f3be530e6972a45
SHA512 06c79894bba87af6521e02e851d80059b49eb3270fa085f4bee2bb96009fc05e7feb47b72ae8c3bcb90bd862b77b00507ebd304aa68c0a532a98cdd85e24f7a6

C:\ProgramData\E445.tmp

MD5 294e9f64cb1642dd89229fff0592856b
SHA1 97b148c27f3da29ba7b18d6aee8a0db9102f47c9
SHA256 917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2
SHA512 b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf

memory/2700-19932-0x000000007FE40000-0x000000007FE41000-memory.dmp

memory/2700-19933-0x0000000002670000-0x0000000002680000-memory.dmp

memory/2700-19936-0x000000007FE20000-0x000000007FE21000-memory.dmp

memory/2700-19935-0x000000007FDC0000-0x000000007FDC1000-memory.dmp

memory/2700-19934-0x0000000002670000-0x0000000002680000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD

MD5 bda7672f513b086a57bb461947b0fa91
SHA1 c0d564a5ebbd183e16b8b16b27f7ae3d50442691
SHA256 acbac45750d5e725bdf98dd2f63d03cc56fc3a0d0d095b50ec41a76cfe4b0f25
SHA512 87289cdea61072f902ab3f11cc09ff3f70086aa3d8db74ec954c9dfedc5f7d913956f3104ab576b0368dfc882b868b9c71ba453f201f5500d43928e59fcb885a

memory/2700-19965-0x000000007FDE0000-0x000000007FDE1000-memory.dmp

memory/2700-19966-0x000000007FE00000-0x000000007FE01000-memory.dmp