Malware Analysis Report

2025-05-05 20:48

Sample ID 250421-hgescaxkv4
Target 32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe
SHA256 32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce
Tags
lockbit defense_evasion discovery ransomware spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V16

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce

Threat Level: Known bad

The file 32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe was found to be: Known bad.

Malicious Activity Summary

lockbit defense_evasion discovery ransomware spyware stealer

Rule to detect Lockbit 3.0 ransomware Windows payload

Lockbit family

Renames multiple (7580) files with added filename extension

Renames multiple (7596) files with added filename extension

Executes dropped EXE

Checks computer location settings

Reads user/profile data of web browsers

Deletes itself

Indicator Removal: File Deletion

Drops desktop.ini file(s)

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in Program Files directory

Unsigned PE

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: RenamesItself

Suspicious use of WriteProcessMemory

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-04-21 06:42

Signatures

Lockbit family

lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload

Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-04-21 06:42

Reported

2025-04-21 06:44

Platform

win10v2004-20250410-en

Max time kernel

105s

Max time network

141s

Command Line

"C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe"

Signatures

Renames multiple (7596) files with added filename extension

ransomware

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2362875047-775336530-2205312478-1000\Control Panel\International\Geo\Nation C:\ProgramData\1D47.tmp N/A

Deletes itself

Description Indicator Process Target
N/A N/A C:\ProgramData\1D47.tmp N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\ProgramData\1D47.tmp N/A

Reads user/profile data of web browsers

spyware stealer

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\$Recycle.Bin\S-1-5-21-2362875047-775336530-2205312478-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2362875047-775336530-2205312478-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A

Indicator Removal: File Deletion

defense_evasion

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\AppxBlockMap.xml C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11910.1002.5.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\StoreBadgeLogo.scale-100.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\id\msipc.dll.mui.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ppd.xrm-ms.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons2x.png.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fr-ma\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ca-es\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-16_altform-lightunplated.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\IrisProtocol.winmd C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\CT_ROOTS.XML.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionMedTile.scale-400.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\30.jpg C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial4-ppd.xrm-ms.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\adcvbs.inc.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Download_on_the_App_Store_Badge_ru_135x40.svg.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\sl-si\ui-strings.js C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\pt-br\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\LinkedInboxSmallTile.scale-150.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Windows Media Player\fr-FR\wmpnetwk.exe.mui.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TabTip.exe.mui C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\en-gb\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\server_lg.gif.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Subscription-ul-oob.xrm-ms.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\cross.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\rhp_world_icon.png.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\AppxMetadata\CodeIntegrity.cat C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.dll.config.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\en.ttt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxSmallTile.scale-400.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageAppList.targetsize-96_contrast-white.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\back-arrow-hover.svg C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-30_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-pl.xrm-ms.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sk-sk\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-60_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-20_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-140.png.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\da-dk\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Windows Defender\uk-UA\ProtectionManagement.dll.mui.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\ui-strings.js C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-80.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\de-de\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\AppxSignature.p7x C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe\AppxBlockMap.xml C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial2-ppd.xrm-ms.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files\Common Files\System\ado\it-IT\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\en-US\ImagingDevices.exe.mui C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.34.28001.0_x64__8wekyb3d8bbwe\AppxMetadata\CodeIntegrity.cat C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteMediumTile.scale-400.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Folder-48.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\STARTUP\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ne.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fr-ma\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Store.Purchase\Resources\DefaultResourceDictionary.xaml C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\hand.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\1D47.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeAssignPrimaryTokenPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe

"C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe"

C:\ProgramData\1D47.tmp

"C:\ProgramData\1D47.tmp"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\1D47.tmp >> NUL

Network

Country Destination Domain Proto
US 8.8.8.8:53 c.pki.goog udp
DE 172.217.16.67:80 c.pki.goog tcp

Files

memory/400-2-0x00000000030D0000-0x00000000030E0000-memory.dmp

memory/400-1-0x00000000030D0000-0x00000000030E0000-memory.dmp

memory/400-0-0x00000000030D0000-0x00000000030E0000-memory.dmp

C:\$Recycle.Bin\S-1-5-21-2362875047-775336530-2205312478-1000\QQQQQQQQQQQ

MD5 b547422ae07672d8a2ebc1184d6de9d2
SHA1 86a21c668fa6c98a485b938a1fdf8aaaff52f372
SHA256 08a0aeb40e94053d720ed4402b5238b77ce92a26b9b32b545833ecebecb8c78a
SHA512 c35f39ee0f6c3d2a8ce66d687dad5ee6c9ae4201368ef3c9d938ba588e7baae9f310a55132065195a13dfc5f7bab1cb8936e756921121f915b16f3a3ea660d7a

C:\8EHvbWVkC.README.txt

MD5 5f71a5ea8be73a0112c0f2444a80e1c3
SHA1 406c28bfaa47995a7c315655988ec87653800647
SHA256 3064980f19dbbd64ebf656ddaefd330a14d9b70942260954ca582cb6deb57df3
SHA512 f58aa09de223a85d92eb93e944a0e4e1c3236e4f685099eb64215f1f986d13a78f9c796a7ae0a1b8f9d42487338ed533e91499ce4dbf9cd13675845de4d4ba7c

F:\$RECYCLE.BIN\S-1-5-21-2362875047-775336530-2205312478-1000\DDDDDDDDDDD

MD5 5fc1d6312087b53db73420bfa949d0f2
SHA1 2ad85dcedeab30cc3728e344634255aa3868ecd5
SHA256 ce4668dd557081dc911b2affb557ac97edb94c4dfaeb9cf311480cff71867738
SHA512 3b908bb86723bea85fa8d26938ea80b7d89f30136335c8c0e13af330bade971889a860ccee3c04e123792f3427b7b6246419e01fd980af98ffe5c84d04fafa45

memory/400-7062-0x00000000030D0000-0x00000000030E0000-memory.dmp

memory/400-8049-0x00000000030D0000-0x00000000030E0000-memory.dmp

memory/400-8978-0x00000000030D0000-0x00000000030E0000-memory.dmp

C:\Program Files\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

MD5 fd66baf29aef48523ffbd02bf731fb51
SHA1 03f52b11cffe82417a3b8aad2552ce7877eedf63
SHA256 1456fa029bd4e0708872820bdbca2140ea9b0e134093325f4f42cfad78538b53
SHA512 bc28595a774a181f401bf47cbd4ad60c5784b03ebfe6a58fd18a5e4f7b49328bc61c912e16757d1b1840c2569b9fba1f4c7f98014e49018493d46612d37759a2

C:\Program Files\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

MD5 a6b3113f82e9ff91e39c8718e3c3a0f6
SHA1 057b8be8e5d295d315db00be0fa5191bde7a5ffe
SHA256 c2b6fb99764dd8dd37ca2bdde20f5a75247555e56d801aad7cc6054ac5774f3c
SHA512 0bcd28046b0c262367ec00c5a0885a4e065e1e4b50c7e6488d7346e5fef52852f6760c32fe4959a84a1bc9264957ea27b4297e65e957bba00f7e921d3f8e1543

C:\Program Files\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

MD5 7ea5e136219441925889b0399345015d
SHA1 382443a40a3b6c71c24c6ce9b435519efd663f83
SHA256 7dc6aa8676db45ecc0afa55882fbb8defacb93413f419944eb07a4266cc8dc1c
SHA512 a7cad62d918c19cea50fe9a22259bf0e21e601cf22428d8025830961911cf1dd81f93e00575ae90d342b690f3dade2585cd33a81370ea5370c69d26c3310b43d

C:\Program Files\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

MD5 d34b420df61ae3fcdfc3921667794af0
SHA1 6bee4612117afa6fb06a56a7fabf12e43cd91d16
SHA256 9ad53e76a8db0a9dc05cf82384aa005bafa8668f194ad4733345f86995e1967d
SHA512 84cc839fe0d9e256d14b45b21cf3bcfaa595393922348535d9f03a52e93b59bbd64303c8b7e0dd41e5aad6c7e8eeb2fb6fd3510ccb26fa4acc6ee951658ecf18

C:\Program Files\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

MD5 f558d9ade6f3c87abfede2dfe9556049
SHA1 0729c7d7d49c3d91b1da1e39d503e5d15f57f61f
SHA256 05e459ca655b72fc0a5766a5d6bf1ab73ae15caed323671b1848381570027a34
SHA512 9af6ecdc9944fa5588c7cf39e0cabb66f5a1856d41b497b8333f5f4ee730094b285ef887cca3fd3f22ff3aedc4e4370f2f5ad05cd69f3096841b6268bf45058d

C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

MD5 4eb9ac40a5a85f9d1b92b3a3c6d0ec8f
SHA1 b0edc11a6a8ce64c44d3fd422bb39c2c7dc0c9af
SHA256 c51b1aa4178171381755f2f0110d9aa663c10f06da8e7754534d702bf6f198b7
SHA512 e85d39a4b0e8891f1ea1fe853da9d5b87d4a6f3c73e0ab4b6202bfa0e6de1d52814a3a650e9b456be561625ec9dc990d10c5f1e86231568868f24ed0a31e90b9

C:\Program Files\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

MD5 03ba49d56caf18e3c7c69c532efb5cf9
SHA1 317136d16cb0de684288facbb394ea4d4586e546
SHA256 67bed94e00fffc0b896a9797408efdbb61d3069c8692ca54407912d13c0ff04e
SHA512 31076b92bd9ab6f043cb5402cadd9c26d10f101d177ddb1da2640d62359392bfbb4f51d9c32e3afa3288e49b9117e086012c66860c3ead0da3a385cf909c6eb0

C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui

MD5 ffae9a792b7e37a5083ed709bb9adad1
SHA1 a573f11c90546980f018f2668ef4d7f1b2767dce
SHA256 97ba6725977b00ae321dd198133ce936b7fde445b1ceb129bf1334b993a97c13
SHA512 b9dadeb0b938c8d70cb91d1352d31f075a6b8f920e49adcd2c57605b0d4d6c684ace1523ded3fd16ab77208df72c61f8fb666cfa04b2d91aeaf054e4dd19b16d

C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui

MD5 b8276ab6609468094d8e0df3af3d37e2
SHA1 b237dd30c5bdb42586a99ee4a88d6b5683fb1ebc
SHA256 6eccff6fd777b34a261b2193c49d8cea244b90fcef3abc5fb05ca197c564fbf2
SHA512 259575b2a3de4e0506d741e2a6c8667e22f8577a2765530a2e6cdf9ef7525c9221cc3cb7f3d1f41f9582eb926560f746fe2895c90a7cb2dfa006adc7e7adf768

C:\Program Files\Windows Media Player\uk-UA\wmplayer.exe.mui

MD5 26b746d17e365c1cf0bb92c6623d5447
SHA1 6d141e83038a9789de4aaa2da9166ce9b1f4b472
SHA256 0812adb53c6ed6ed0bc841fbb4ccd381729e88cd425da4ba1b3ec28a0bf350a3
SHA512 97f8fa0f785e39dd3ef5e86ed094e083302b3718073a13670a3f4610ce7e2833be8d2714947ae7ecb223062dc3f72a05868f27ebc14146fa7d66e30fb0c852c8

C:\Program Files\Windows Media Player\uk-UA\wmlaunch.exe.mui

MD5 1a599decbd6f8418fbb902c2aef11a08
SHA1 cfa80a77f51af34d187029394a606ccebc1ec6f3
SHA256 fa1f37dbf9faf633a4307ba17c13282a17e086b3ad3cef55ba9c7e0aea35ae41
SHA512 7a02760a87c4adcfb00d9ab8ab35b1c5e48532fb83c7718aa7dbf4a947f7e08c275b211b5cafa202b79cdce7e6c9564005ad705b9f012162912d7eda71fd5621

C:\Program Files\Windows Media Player\uk-UA\setup_wm.exe.mui

MD5 61b8975098f70009bd3ce9e197348138
SHA1 ef3e6c99de5b3898fb8f1e02d08ecb57bcf92de9
SHA256 1cb2109a48f368151738e36b06d683057567172396a1035b7c5c8ac75c439605
SHA512 0de0322d8bd46a68dbe196b558003d7268353fb96b4f2e221e921203b7a31aa94ff9b2a4438de5f32c6d90346c6f33eee45e7928be0e470705072f0221dfd5c5

C:\Program Files\Windows Media Player\uk-UA\mpvis.dll.mui

MD5 0e0711d0be39b34833da33a91f105be9
SHA1 76d3ba0f5c97c07c3925dd9c70f6f498c1c39b7c
SHA256 fe712b594bf65f77f9b79252ec8e42ffee6239d9e9bd7cbf60e60afde24d3b27
SHA512 6ec1651fb8de2ee00eff851b9b6c83bbc6f1bc4bbc4bf85e6db59e0f75d77affa8df3597e9e5186a702dd556b4322dfa93b91c936b7b5cce5bb1859dbc59ab28

C:\Program Files\Windows Media Player\uk-UA\wmpnssui.dll.mui

MD5 59bf7c894deef4f11f13f2fe59ce2caa
SHA1 073958699380d2458d5f6ef73549835f71aba726
SHA256 e7ba5ef1b018e67fc1a737220881d75391be0f57df4514504b4831f462a78ddf
SHA512 a32664224ec07b33d608015cec465d0a100b184421b3836aa7dc1965a3885fb35a46e776fd44f37abc2a27d042cde86571abf26b2450163a78d69839719bf110

C:\Program Files\Windows Media Player\uk-UA\wmpnssci.dll.mui

MD5 58fadf6a60acd234a2204433d5b95ac1
SHA1 6650cb121c1bd6ae8e07ed8f088ab3da7d9f49ad
SHA256 21eb6b77f68c66c0b0bfbcc0c4ac16fbb2e866470f71ea2bd51db34dc920bda5
SHA512 059e472769ba58db885a7c84f159415b5692e4ba701961f3a79f5a7dfacddd5f455e1f85479b0a337c9a9c951244a0b6b16f02fa29e2fd9cbce54f6a72de717a

C:\Program Files\Windows Media Player\ja-JP\wmplayer.exe.mui

MD5 5602632fc0409e5bbc29e7348c1d3d65
SHA1 d2ff29a9ddf0e186f2dc54af755a843bc2caeba1
SHA256 2419f0e1fa1cc28648109878095cb21331d4415a8edf7331952dfc919c1d4ded
SHA512 a50104f392392b1420ade0df89862c98d36142b303ee936da46cfa4df0f69fb12edf43a2e9590c84d8eeb1b27916a40389e13b4b8dde9816dc0da4080198dcd4

C:\Program Files\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

MD5 3f642c0b78a84e9a55a15310040d1f97
SHA1 9786ba159f5652a1e1e82cf3e2c204ad9797e98a
SHA256 6b543e9eb59eaeb66695c28b23b686f0125928b07c4365d97be2d31f678c926c
SHA512 6ccce6f4f09ec0298a30b73139cb33c546b15a9ce2246e889053f3f5edd1f238b3894d92994e4761a74996d1a175ab4a357c1ef8f576581f15d9da49434d5a16

C:\Program Files\Windows Media Player\ja-JP\wmlaunch.exe.mui

MD5 cebb2900995fcb8e4ec1eb1d81305238
SHA1 08097f5a337c2816b9f1f4883ad2cef5a9046ec4
SHA256 45fea476f747d26143c090c23ff76e57332717598c11b3fc67760d8c8881a736
SHA512 8cba318fa2fd18812f3837d1183c17b882eed1673984f6f0316dbcf522cd1a35be064f9efc67be9ca9a8996ff00fddb3d8dc29d8e68d03265b067f747af2e29a

C:\Program Files\Windows Media Player\ja-JP\setup_wm.exe.mui

MD5 15fe28ed2c505fdd484ba38cf73ebff6
SHA1 07ba5cf84c577e4a7d1279cdb6c0f68de690e255
SHA256 7415855a4ab1592db3b6ef498126150fc6d35eef0c795087c3d3ed8b762d2880
SHA512 18a13218f877121b80efbc4fd6c1c7d3712033dc24c102e3a0e8a66b2a2fe11477ad7df1f27a05b7c879664dfd35d734e2372450307e15953248e0bc09c05140

C:\Program Files\Windows Media Player\ja-JP\mpvis.dll.mui

MD5 f9e52535c1b02186f1406004a42f7da8
SHA1 e39de4e342b81e517297dcb7ff5dced7134062ad
SHA256 2ccf6346c3c5a066d5961b497e3e66588e983cf6b2588cb7e0053ba4b59a1572
SHA512 55cbe4ad356923c05f84df539320316de4e212385e748e83d6a60d323b19b92f915c240eca022e4153b76b3531178d158e547b286e22a03bad834481a700606a

C:\Program Files\Windows Media Player\ja-JP\wmpnssui.dll.mui

MD5 a7269e33539bf1bcabebf4737c47f31a
SHA1 e43161747a130db19eac59517e3b1360562c0ed2
SHA256 15fafb6a936c1769239223855b79f92345144a912cc996cef83d5a96b23a529d
SHA512 1fc5ac698be56d61296a9411c8f5685267bcc1008cbc3cad3923fafb1f03de85bc8c5840768fa26e8dcc5d55a20bdd2e7ae243a4cedf2c05e266075d94b0cd5e

C:\Program Files\Windows Media Player\ja-JP\wmpnssci.dll.mui

MD5 d4c8f64b9dc8839fba2a213e9544599a
SHA1 ac317851d5d53966afc38c9cf70a86ac378d4fbc
SHA256 ddc8b43df769d9e7eddb66808e87c697ea2bd8106ccb65ef597ca95b5767f6e2
SHA512 d932f38291d02c94bfa1dd5c5c068334dd14111065f807b39f5a6cb6ffeaa84db6b3f0360b5d9c43db189036ec02cac037c042fe839fdfaa910938edab3cc7c0

C:\Program Files\Windows Media Player\it-IT\mpvis.dll.mui

MD5 3793dbdfb47842a087dc4fd001a1bd88
SHA1 6a9a574ba6c5f0c9ac19e1fb00207e36f0d078fb
SHA256 a772391dbdcde2fc97e8f670d7a8bc3f471bb2a191da913cf9ac0b227700a310
SHA512 ba6b873fa4f1ab369e714dce1d3f5746c11c71effe067b4a1d74ee3c9aae3f5b6100d8413ccdb98227a3217b390f1160d2d4bb4aa0f332737edb6592cc32020f

C:\Program Files\Windows Media Player\it-IT\setup_wm.exe.mui

MD5 629f1e0f972e0d9e3e4838c24ff46a0a
SHA1 73843600bc5811832c4554763f8e47e94d92dc6c
SHA256 e0e27a8ad2f80b937cc5fbc3cb987d351e14efeb613efb85388fdc5ff632433f
SHA512 470ec32022666feb5bcbf37dfb01296a5956a9a8b3cf9595bd93ab3edcc629e3a281f5cd6b4ea0e73768b7d3146222bad475416407d69a2247c0f1663a122c43

C:\Program Files\Windows Media Player\it-IT\wmlaunch.exe.mui

MD5 84dada0d6fb8019a70e63d666ccf63c6
SHA1 0693cddf3ceeaafb818d2b7e314a99c6cdc3c1a9
SHA256 90650948fc4d7b21e3af382e8f8dea64f42e2096ccd3b5283c71108773f4c332
SHA512 18302576c7364a0a0aef4b9bcbe2067accc5e7c0ebbd135d33292499d2ca24b862b329a2a276e4a2d11e5e8340d4a4cd8efc41369756fbc8116f6222ad65f075

C:\Program Files\Windows Media Player\it-IT\wmplayer.exe.mui

MD5 2c73899b43645f91d3097a1bbdc0ee6e
SHA1 b195aef07dfa0db87af0971a9fa8b9f9fb99d084
SHA256 f66c3013a6a1a5501faa36b1baf47eeeb96688dc098c8b442db5466c734e499a
SHA512 eb673b16f3f1fc57723a2d0f531ad349bdca7d50148b6f612bdf80e110ff431dffb56417db93b025f36e32df60bd2644952bfa18168a96d381588ef384dde88a

C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

MD5 ad66c59d5794dd7237048deadb5ac838
SHA1 5ded5f3e3a0df985ddb844efc9f770f4dbf5add5
SHA256 ce7a0ee2925bca891b4022e37bc9a5cc1dc4d9ada172a2d37612c04d0a922732
SHA512 12fad698a6df86bc7397c7dcd468b4e07faaea42d6c2e676e498f1336708b50d616a69469ba2a4b6c7e8828f4b46399f6b34a1d1e2569f318a6f8512bd38d904

C:\Program Files\Windows Media Player\it-IT\wmpnssui.dll.mui

MD5 6f0e2d038847006a608f88d89ec83190
SHA1 8bc730a1626b22933a819ebd7fbbed50043ce7f2
SHA256 c81f26d600b2971d20010e75135799429ff857d85aea20cec9df4bfc1432168b
SHA512 596b61a13d0a4d5466e7822685b39dd9db48c5486f09550e0bae558b5df8341b14f4f83c181ee96a64fabfcbae2af9bcb29b7045430d91d36e8b08579852b2e6

C:\Program Files\Windows Media Player\it-IT\wmpnssci.dll.mui

MD5 4d96882ded7d5e893e3b9d0da7bd590a
SHA1 f1615f47ca05ead7742247bc630d8eb7637c4445
SHA256 a55cb00153815cb833a7d6ec567e3d73ceda5d15c62f72c92611dd97abdf7b15
SHA512 ea9550887d9bf3f626a6573de9746c9fb98d37b354c081ff135758f672bb71cd9dfc7b91ec49a7cda19be37aaf56fcc7a465b7e9324cdddc9982ce8d6b55a653

C:\Program Files\Windows Media Player\fr-FR\mpvis.dll.mui

MD5 ede77b0231185fe09e7de2a10575d702
SHA1 88db5f9502d024d595f9946ee79a755904a6dcb8
SHA256 4c90526b522d6eb8613f1769bd90147290a64a9af26f6e1fd6613d14d94340f1
SHA512 90178ee9e3f8084a539d662c5c07de24159b2af49aa6882bc32fabecb419f14fd07cbf12460060aa52ecff858f5afce6683ba9f895d25e232486e89cfdebafaa

C:\Program Files\Windows Media Player\fr-FR\setup_wm.exe.mui

MD5 19a4c98a595d0ca9a8e5ce71a7ed367e
SHA1 6a08443b2ade6f8a7f1f16b9e3a737ad5e493e89
SHA256 a8f7eeef3e5ddcd287cbb558ce2bbcde22cbd43e8f64c4ffd2392b6b7395affa
SHA512 c2d944a2b097916d7ef058a5c40231e3eb0286748ae11fbc337d49f57803944bf36f2b53af15e8e698cf75a72571d8d72bcea63776dd7d56d8c4dd61ae1ebca4

C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui

MD5 933931963164d7a3fa2ecb08019ac3e6
SHA1 a840d52c3e54bde32350cf89646811747ce850ee
SHA256 726dc8ee391fa61bda15c3d856a8b8656a328979d1f60eafb9fae442ae1cec40
SHA512 a373de9a61e3afda2b9666b75c74aa5d6f331cb1c49a94cd58cf07dc5ddca53d529fe66ec21afc8a8ee3524da66e34c9f955a7608106d3e301725df8cb8977ee

C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui

MD5 e3e1174354bcd4afa00a1efeed5b2d03
SHA1 f28daaaeeabc5daa432811e6be71200024e7709a
SHA256 f3441b361106b7902bf865bc50c16de04d9063f9cf3cd5c6f33e4fa21b93c70b
SHA512 73196cb1cbb6b1160fcab3b1ccaf89c18ecc234b111d8b1c9544ed8a0bbd7fed03e0917345ce2b6c17f69c2c929e0716723d68282b8ab20b4a3df0218f1da8c4

C:\Program Files\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

MD5 89c7b27f4f4035c42c12e1912817352f
SHA1 761037ef5aa8abc042cafbcd5a67c574cbbb7737
SHA256 5de7e29352c79d992772be5e5ec12567f4c93863117a5470c3fc2adfa37cea39
SHA512 09104c49bfae491ea0e168f3ec6f88883f743508a658bd89ec86c9bb5a049ec30e29d9b493c4807281086af66bd6b504f6da58be11bf8985a857a2d0b4107969

C:\Program Files\Windows Media Player\fr-FR\wmpnssui.dll.mui

MD5 64ff5d4c5389c32f9ac33c45354e0ef8
SHA1 5879a641e54c38ef64c8de10b50f4b0d6905937d
SHA256 73a142dffa2003975ae940825168ab887531876705ff43f92302ef606155cb7b
SHA512 1518cdc434d7e6427986965a2199c94483e841a32617e52d2432ebe5608bfd6d53caa121f8116c9cb9ecc41e680aead17128c661a6bf9c1f76296c1eb4083368

C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui

MD5 06637ed099426b5c738a79461eb6b498
SHA1 478e838be17f1d29564cdd42b421f221a9fafa94
SHA256 f792246321b994663a90e07f4ce1e4e01761be7dce1ef5107e7a5aae64bd2b2d
SHA512 f60bddbcae49260f8eee0191308869a2d32e663ab7e01f3212b1620047f4df645387403b6d0ad7fbab843c9bb2ada6c0d70bcf9de23541971ce1e9e7f04c90e7

C:\Program Files\Windows Media Player\es-ES\mpvis.dll.mui

MD5 d7504efd515af08ce35b718db3f81e6f
SHA1 97c85b5b0f00a17a3c59e1a350038f9b8e82d699
SHA256 cd09ffc6337be3495a1ac578fb0792063728e520308c0c565c93d4f6861a23ef
SHA512 3829e7494a4e3d8ab22fbcc42070c7108c8b4914246ab97799613382ec6fd3b0d4c4c482dae74502ded0aeb701f93cafbb5b1da7aa316e56ca29276c0735656d

C:\Program Files\Windows Media Player\es-ES\setup_wm.exe.mui

MD5 bb9a4f7ecddfa28bae1f9d412a40ec9d
SHA1 24b19ec3f97ee5a8a73b25b4ca38dd78b2847e71
SHA256 aa11c074ec2da525eb2b46b24172bc0f2e557af9cafa4a906c703f4661764d2d
SHA512 ef74e7e9b36e48ab082ed6f39ecb5e2a02302fc639b0129421014d7bdb2657ef0e69f5dc67592ad3e47da626d80c3fc379d08810962f4e05dc9941faf68782a4

C:\Program Files\Windows Media Player\es-ES\wmlaunch.exe.mui

MD5 c8c5345cc9f97f0ba991caca200d4182
SHA1 eb2f8e0ba5c57f8e16fdedc3b02439ce9cf50c68
SHA256 fcc1db0b0263bc6cf931f22a16ac4c4621120463f5359d7072934b87e9f4f2b5
SHA512 95d6c10ae553011ac117a7810c2cbfdd02d965e6b9419b09b0f32f726917d9bc1d6fd4a2f4a336ea228e153ed12dc1c096f16c3a4aae9244fefcd2f36bc88878

C:\Program Files\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

MD5 647dbe4c89548ec9125ceeb9f8f527f9
SHA1 72fd33863ff94cc87c3177672b2109bfa97109e9
SHA256 16fb94aea4d7aa67e5a704f4fdc0fb8f399a2d982af1fb61f8ce7109fa8fd7e7
SHA512 a67b03d55e16ed34cc0dd629deee3aa4473e6546cc103f4141d6947ac34bca453913b02f15272b8d87da59fdb5bf48e9128781f173e5d33968a0adb6c16214aa

C:\Program Files\Windows Media Player\es-ES\wmpnssui.dll.mui

MD5 be725fb0bfcca9de3ed431b812ee95f3
SHA1 3d62426e0b2d4b5832478c96068e5db705021e60
SHA256 51aa540ceedf798257d11711b1636fd8a1745989feb9bdfe31f569ac314b3f8c
SHA512 d0c0e47b6ed7b6e28ec2c041d756aa7ce61eaf03d831c0ee78987059acc752181dc8dafd8c400495f600e1d463eb339c9a39fdf0cb59a052ff4712afea41b915

C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui

MD5 3e716e06856db499ffcc796f228aceb0
SHA1 5c15b21ae4a2acc94b8f22961f8b924401f21d8d
SHA256 b5d16c950ec3c2e00dc00a5d31151f71984c2e80a1a6215cbd11f5c215b144e9
SHA512 91e98d131623904d9f90846e1b22d87e176ffd905d6b0e95f76cc0ecc0cf22e43513f55ab73d72644e92990421a776cb957d4a8f099b23e4c061f432127ffd75

C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui

MD5 ff163e1b9fac8865284b0ddda561982d
SHA1 749276b3e5779bd74e3cb1df694f03901b656e3a
SHA256 4222de15b2b468880028c4cbca2a7d21789bed39bbfd3f72005e989ba4738d5c
SHA512 ec463ae63ec9adf1be62a02bff7a537d8ff07f3cab7ec303f3b37e076486f4ac08e1e08422fd80a5d33219abf7737d44ee9375939bc2d58a9cb2bf1f702fad44

C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui

MD5 ec5447f3b8b3e5d7e804f471a3b7b9c5
SHA1 5d7792ad032b3284203428a3c1a0d2064f3705bb
SHA256 4be240993b21c6e47f9e794109b767d1d9d35da03743892aceb9b210e200955b
SHA512 b7671ffcb3300b15f19856b9e6b6b4bbdad2805c64541347b82842bcc7a90939348179c4e038ef4c12bb16a84761dfe519973f2b98de6ef1b62c0ac27f8878c9

C:\Program Files\Windows Media Player\es-ES\wmplayer.exe.mui

MD5 aa5aa7255f890d39af55eb8533c5a650
SHA1 231a0d607064c1cbbe62d3b4be8d51833acc6322
SHA256 f5f47ad0500b23a4ea5ee534453f711d205632f03203553122eae1ffe8ef12a9
SHA512 5d0daa9fe4f934608f24c6ec8537906d30fd30ae91742ec34b29213e5119939edf70478f0901d26d7acdcbca39c1694dbb669c52b90118a617e3ebb8a2ff1ee5

C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui

MD5 32197536ef5db6bf82950a7cd41f29a2
SHA1 7e6e06459ad7becd7ba4dbbe3a08fc704f999d5b
SHA256 7f9a39832bfbdb66a8bd7f72fb084eb01f1a4ad0d5bc33d635ce50fd657dc8dc
SHA512 00d5a48ab496760c0b71c0fedb7f5f35489d866ce83bc082dec84e08bd56d2d874d0e92faaebba31075600527ac628d2d4c7d05d818e9434ccb3029e7605efce

C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui

MD5 d52728d960fbaaa443bad710da35d7b1
SHA1 834221ffb62429380afc8c0402b06f5ab63f1811
SHA256 36ce8eeaa631c661da600eadd6ff57a5d9fc605f9c954e9353682c1d24e2a2a0
SHA512 dc2ee7f81db10b58db74d185131980585e79c4fe7cb7cd78ee3320d46e57de41166b19b3e249f326cdc5dc789cb06457de64c17454b6dd34211c647bdb16699a

C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui

MD5 d37c80965b9e3c9afbb4cd1ae416048b
SHA1 a63912a7624ece72a90f1bbb9543ff5642cf12ee
SHA256 f76e536496d26c4f2baf2bfcc44b9560cc6d35ffc9660851e133837acba8e55c
SHA512 28eaba188392f39ffcf082c886daf06723e09811b1fad5f71021bb94cb85e089542f08f0c3149ff6217e9fe60fbe9c8b272d4a5c1441541aa915096f9d507c67

C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui

MD5 c8c12bd94a7e9e2898420cf0510beb43
SHA1 94c790449ccdd497e195f0935a881de943370f20
SHA256 d067f9ca169279ff3f2bb9edcd00dd7ea999fd068dcd9f8157e31abd398242f4
SHA512 728b91419f17bd419da2d639f1c4417916b3d7a741461b26d643937787355000a82054067537f05ef40891e3d132d3d5e0b8b2f551abec903aaca5cc5abaefe1

C:\Program Files\Windows Media Player\de-DE\mpvis.dll.mui

MD5 54b895caa2a07dada83ad77e7f353f84
SHA1 7de86c8425b055200654d74935d4813f15096ab7
SHA256 7b97ae9da40e1cfd3d2057e26c4dd1c1f6aa379afe9bab9461bc0efd6713ac5a
SHA512 6b815cc133ad3ca60f54abc7d934f96e60d21c126bc9c13d4171e65b94536202f93fc3116108f31d18f9f90270e92e74941efa820ddc9cb4a1ca83f1c4a83780

C:\Program Files\Windows Media Player\de-DE\setup_wm.exe.mui

MD5 1ca6ba546ef8dbc13e19c4d308037439
SHA1 8f3ef9074f93a21d7546524c159c761aff89d937
SHA256 0239ae469c74c3bec16edcaa05a0dc6f2f37958ddc0bc97d9b86e92c8a43c015
SHA512 fc5fa31ad49161fc70e696042ca8659c142201bdf2a8ca6965ddd2d0317da238b9fa8b0154ec321d5cf9c06218b62e4ff724d33ffc8001e9a1426fd3313c585b

C:\Program Files\Windows Media Player\de-DE\wmlaunch.exe.mui

MD5 fff9fda1db2e19e910116dc26fb442a6
SHA1 51192c1c16738b7f7f702f8e716623e8f7c592e5
SHA256 62c51eb18d6f03a0822635c44bf8ddd95f9f9f0cc75b654c3b64f0a5ecb6c9bd
SHA512 3b257ff98177bc376263ef72358e7bb12fcdd8704fb75ffdeea2136fd37eb4a24a2aab1ba25468906e0528dbf3950faa5530048a9adef2a178a634e906058ffb

C:\Program Files\Windows Media Player\de-DE\wmplayer.exe.mui

MD5 344a00e4755dfdf9d5e25d2effd12054
SHA1 0148cbff33120fb028fd08d560eef06800fb6800
SHA256 b1ca3a9cff92cbc4f13241b4e80fac9b10c88b60063f77ab85a6b842d04f215e
SHA512 94520154f29ed5098158b2ff1e1b6e2945f33ea3029b0caa01a58a64a87ed74aa0d853d087231efc2b9f7b4457144df3bdd7ebee94442ca854c69c9d21e8b880

C:\Program Files\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

MD5 01504da076c12492aeea7f6b4a90ae49
SHA1 d4e3c5d38131a29e81be2dcf883aec1b4606546d
SHA256 0e502fcad31b1471175cbb9e11f76995b209055d0f81ce714cff208678fceb1d
SHA512 99e3a28070957cb4778792a9626ceaa6339abfd561050c3ff331e7b0821751daeecac0e893b4a65b97e21b8182b0f9cfe2ff41f4d17b3d395e4229355c90aca5

C:\Program Files\Windows Defender\uk-UA\MpAsDesc.dll.mui

MD5 37d5d3944319b98aa9f59fca1ed45c79
SHA1 f7c85502d87cba13dcfb03e3a6365a928566e200
SHA256 c0328aed0053819310f94e87e97a5284a32f183158e6a7e4b108aebb75bda8d9
SHA512 a6e8af3e2ffc9e7f9dfb91f5a849254bc12640e6b03c2a72410c3dfd18d1b1c1560c37e4c043abc307322dfd01ca47913e3e67c825fdc73eda7e10de16dc3a8c

C:\Program Files\Windows Defender\uk-UA\EppManifest.dll.mui

MD5 48a497354f311dd34b6273c98fc16ec0
SHA1 1709a8eb1f0dc556d206faaee08087d93f9fd9e5
SHA256 660bbc79403e20d26c7b9a770992171ca6a20b8756bafaa78df7e5ec68fbcf74
SHA512 f31b408a17697f45794e58bbe92800e372e1a01df51d7016d3f1d37ab967612b48056cb420fd2d0ae5508c7f04208f93ac3fa7f15162046fddd420324a8ac3f8

C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui

MD5 e6f1be92abd87334cbc8ffedb085dadc
SHA1 cf22a4f90dc9eee27cf0350745b0e7a2fd68be31
SHA256 4e94f13fc1ac04443cb36766a3615ad3901ec8b0fade7ac3c5374100773bbde3
SHA512 84602baae686097adad1342ae8dddea2b76f9e294f8fbaf3ba961b6acea270d7553be8240515ab48547e5493f659bf96342887a77fba6d5121cf261fa0a0a2c3

C:\Program Files\Windows Media Player\de-DE\wmpnssci.dll.mui

MD5 ca9150c7260c1df0561ee2b80a9947bc
SHA1 5fa5505425e28ff91672ed6e708e0941263bc6f3
SHA256 0218fa1bbe06c9dd1821416b39fef18db45edc1d381c6cdff7b55b6c2d46a7c2
SHA512 4f3256a59ad133dae84f0e8cc970225d553d096aa9abcfda49595cf3c4bd7404a0d6880ae15115fefeede9cc87d29d068c4cc15770b73fb5a3236adb48541dd8

C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui

MD5 5412943d074713cf9d9fc8ec3fb03a50
SHA1 41e961bfdcf17f288e2a330734ab19e6093ca0e4
SHA256 3ebe98bd3b34b1d32abdcb1e09d1947551bf6627841ac0450566f3a8daaeb6b9
SHA512 3022d53d41282da43e31e8b743e0bc908f717e33210cc379962a4a5270b9d738ec6f167e0dc44dedc084ac7a6b714a75f59b5080ccee4554d9805d5055ba4c6d

C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui

MD5 57608074d72e71ad45a2e3db03edee61
SHA1 1041aff9079e7cd2e90b786fc40cea74c60fc6f8
SHA256 237f3960b767a50782eaa472172184985d16b0feb22eaec4d1853165049506c9
SHA512 50f213e35bf8d9cbe5898ad54ef2a69fbe195e08995df7e3c266751ce74e82a8fc29734425c80ba03cdfa9f6046dd01420d48bb589e8a9f9864e61214d9ce832

C:\Program Files\Windows Defender\it-IT\EppManifest.dll.mui

MD5 629fc029cceb806d8f5bb43dd667b7a8
SHA1 0f7646a931660e808b4a8c90a905ff1054372233
SHA256 f8e985fc67e0ee6d542c967ec598e71062a404b0e909ae58a0307430658bfe1d
SHA512 5ba645af148d6bf1b0be99cea1a0043165a4e53d54f71fcdd468a92c9e2ae32dbe398f845d2f866c22f1d687e372c558c06e9d835ddad9a4d8c5519fc165cebb

C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui

MD5 4ffaae19a1ed2f6948cb71f3d4549ca6
SHA1 f7d2c0377b029cc3c834e988888b5787eaa6226d
SHA256 d7c336c2c9f4b682e2e2b8f5af40cdad1c2864c4a70dce29172901072f9f249a
SHA512 e0b77bcb40e20d209a727f692cb474d1167a2660c9db7ef766f20edf7255f8751f270d5c3fd18e2d52f4ea2885c51ecfd5cd34077bf80a16854f008551307740

C:\Program Files\Windows Defender\es-ES\MpAsDesc.dll.mui

MD5 06542a31e9c52e70716978615644f22a
SHA1 f83ab30f0152827cae96fb5bf82c1872a0b19a36
SHA256 040bb36ca58750575a467561d76535aaf7af3bdcdc4e677aaee1a16567e7b7d1
SHA512 43c22e277f1a939a3d83f21ae1e3db705d04d3c83a3db96b771e1c21bc7b5e9e77f8ee3ef87fa608274581d2fff65bb12d3d734d497198df17e7d37cb6e0920d

C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui

MD5 29575a69b728b17e44b8321ed7a70e3c
SHA1 d73327b1095f04ca334d9e4491664a2cc4c954c6
SHA256 61d32752fb2c0a76cddb887fed19ceac825666405ee2d4094ec781727741c965
SHA512 d826398ba1eb076239259dda52d2465af1037188ac4a100342257a63139e844c8cb60df11062ddb017cfd60104359fc61724eae3621e4e2fa24ab03da8341270

C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui

MD5 05efef787c24b9c37a8d71435c11255e
SHA1 52c6bce9c2671c0abcb58abb4ecb44546a6eec4a
SHA256 b454b9fd0e425bca844a18e809f0fa5a82c979d6fc67229e4dd72d6b4acdb6fd
SHA512 9d84de80e57f740276109e3287d0590bc7417f67d23f79721127bf7957ffad392e608f67baa434edf7ed682f0a544e326d04f5b4b2c367b19c3947f8f99f1a16

C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui

MD5 fd0e809c180389d43bd488e4584daf25
SHA1 e1839b0a47f3b3d00571cbd143d9933332bfe31d
SHA256 1414378dc975bac1143f9c22fbb235529c57d0fbebc68f832ea74c82b3070bb9
SHA512 be0d79c6e25cbb5188494cfcd4e82911d81ae6b9cd7924a6e348cb70fdcdaa4d71457b9d78e4241ca55f9671d52286a152b8d7bc694a2f5fb99f25c9f5818d08

C:\Program Files\Windows Defender\de-DE\MpAsDesc.dll.mui

MD5 96798c21e294a1e63d81df9a1515be24
SHA1 9ade3024dc3158b24f6cfb893bf786a9d735533c
SHA256 373c5f7a2590bf19c048d81c9c0a6d8142ae9a3f345c8d37d1d19a7245bb7c87
SHA512 82bc70b2118944eac44ad4d43fdbe5ecb7c45d0f14213437561561c25477ff91ebf9700fa8d2c27c01ff36aab24d56bca8c5e15de08c26f5e1c711420852e4e3

C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui

MD5 dc5a7a8bfde311d84cb4679327d0684c
SHA1 f0e6fdc6af05e3d97b05490396c8af51dbd04630
SHA256 2e8b53465ca9fbbce22f98fa510796595f72e842ea20b67eecc2f5ecdcc56b29
SHA512 b2d2beab80126758ef3f66c567a2b74ef3ae4a282c51053d1bbd0cf8eba5c4f57fba2231768d743625178be64e6aaee9224210cb5fcf7ebfe3e32bb48746cb3c

C:\Program Files\Internet Explorer\uk-UA\iexplore.exe.mui

MD5 ba4a10a79bc86639c50f0ebb9060c08b
SHA1 7fb2861e693693ae97d41b6d298cd560ebf0a6c3
SHA256 9d24995c6671b7fca7f09c407fe95f6401eb24c5630fc49fab2d28897c660935
SHA512 376e97c3912e7c883b34f62d9d6e3e5a4aa06e179546ccf39809a54b406b7c79a52fd65ff2a8ab830614ce514da62d566db9a45de1ead3b13c555666f4113d76

C:\Program Files\Internet Explorer\ja-JP\iexplore.exe.mui

MD5 d6adaf43210d8989b804308379932878
SHA1 a5516ddbf7b9b5069e648f3279acd948bd6cfd1d
SHA256 af5c9ba4367d877ab28630708f72ad826372d2f100693e11d1668ca98706d905
SHA512 849eecb4f43591aa5c40043883ed589ba30f6f6688cfbe14b432601334a41ba2de3a577ea45262705619138e80a95bc6786a102a9aebfbc958006f3eeb4acc1d

C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui

MD5 26e9fbed5ed4e7eeb8461e03fa546a35
SHA1 90e13bc9ca8d01120df2a51447443969e166d12f
SHA256 67e539e5df2946f4c2e88a2d37080a87dc7d8729c7bf8017425ccbc7fb774221
SHA512 36ff8cf9cfed4cc6b973ee2041a21d6a385c32b428c7b833fb583619a072f446c2aa3641b0a9060558480d3525349e0ac69d07b2043d0ede328c8f6b8447f81f

C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui

MD5 b4610b731df82b7d914d7a2ae991f43d
SHA1 b236528b4e95e7947d12a25759c4b9bb842b1de4
SHA256 b6ea24026c995b4523dce3d430052c4db2572685202a9545f2b8f2bfb8795110
SHA512 3a420b9de1feba3d3a86851f2411b50f689d9565a88b7fff91d03e47aa0e212c1a82b8d3be4d49546150e7cd63a9bdcdb24ab96f185a09c9484fa2d7124d6711

C:\Program Files\Internet Explorer\es-ES\iexplore.exe.mui

MD5 eca9fd209ac985a8be63f0b7d1a6a51d
SHA1 b8801ffd2af9381daa97ab1eddf3a45202631c5c
SHA256 7cbc70b6f67a596ef7c31a41052fd2596b8bee6b07fea7dd79eed05a4f785039
SHA512 a6e424b3facab456927ba4aa3c816c937bcb0d2f6785868394a03dd0ca1ac45e704ad5295bee27a2fd991489195cb8e95ea70f9789aedf775616fba3519da6ed

C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui

MD5 edbc6165acae30e0912ba2685f5ef44f
SHA1 a1f4ee9b7a0e2847f700ff71ef745ea547d82f15
SHA256 16508f4ba93bc61b1d16ab6ac8b281cba864a099335b8cdaf47abb2c9b49b6d9
SHA512 6fa36106a4b5f5c1abbfd77695292794677945be7efe9c2dfe485526554f31d361008182c09fe4cef4835ba79a467eee5f77f544f746c40103aa237a9b08fb70

C:\Program Files\Internet Explorer\de-DE\iexplore.exe.mui

MD5 77becb1eceaa3b7726db47f08fbabe4d
SHA1 d2fbc373db59974954d02c6b31a467f4f61383ca
SHA256 6b3fd45da397c37a62af46e7876420b783285dd0853566c253d13ba7f04d23e0
SHA512 014b442d03099e5e7d150d7fffb33c50e2a6fe764b0608b892dd945235a3db5b644cfca11507438a6abb0334c618a8234ff8f156a607df349e21d4f6d8e6960d

C:\Program Files\Common Files\System\uk-UA\wab32res.dll.mui

MD5 f5c137ccb394f08413c4aa66183121ca
SHA1 af9fed9c5f634e020cdb60f072a1abfa7440ed8c
SHA256 25a247938d866c36cd1a1ccf81e035a325323891c71eda84e69a00cef4e247dc
SHA512 4a51d8a28e3eecfd91b0cc8d600bf50d944533660c7f22aa12ec041e7236f08dee0ad42ec683a209fed88678e2c7c65f4940e412fce14ea65085f58ad6d24373

C:\Program Files\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

MD5 95c9d6fec00a2a92b9398b0204ca12d7
SHA1 3b1454045bcd8f33966569dd100d8cec7f849ae0
SHA256 2818b31ad53f8af89d16e72fab167079dc1c1c90de6a3b47e096bc453a975667
SHA512 c2ef2658ccd476d320105eee435a02626937a8aeb9b809c82bc17e18968cb9707aad2e077d2256ab56cb4d45aaedce322ad0719ec6c631d22e80bfe63e80fef6

C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

MD5 75ad14b091d36233225cc4fe93c50bba
SHA1 017daa30dabfe138cbe4cc10b061e6fbe4248377
SHA256 27d2bd2974409c681bb074dd0acb015be6e934a9ebf1b43635e8bf07896f61e7
SHA512 58b9595c10360e5a31bfbab8f1dba7688863bc2d972e47f435bfbd317532e67835ab69b0ba2d3bce8f1df68f96236b74a49edfd6baa2b263a0d7584294839a6e

C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

MD5 5daa05e5861acf08cf76364912a31bdf
SHA1 8837d39d4d8f72790698101812a0010b73f6f741
SHA256 4d463f17f8827669bc2c876c8347c1bae103e84c79411d74c82c1ac87f80c799
SHA512 794320b3d8f081806505a7475f7e50beca341fc92f92cedacfe7c7936f0ee5afb62fa1b19dfca9f8d3ceaa3fabe5399b5893566bd3699aec535da42f95e96074

C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

MD5 2f89502988d3357a9eda0ae959372399
SHA1 46d2499a1f9e657a574799ed9da8e1db67b7b5d6
SHA256 88f88978775ce637ef6abbab144fb3d81736fa121d864f79e99e91d66561ece4
SHA512 1b4187d0adfda12ae6a4cb25c6e7fc801568104c10ecdd108fe232a9ca393081dca29168f0b90c452e769e6a4dc99162cfdbae8704c747e4ab98a1010030671d

C:\Program Files\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

MD5 735544a19129ecca8e7590b33a722f72
SHA1 8c2e25f9ce3ff81af9f84144769c0dbca7283794
SHA256 27b7c049cbdc2b8df30811d935edeca1bb7d24be561220adf6d7ddfd18a9da0f
SHA512 c68445cef0e1395ac3a819479ff29d94fd0c0b3e90d9cdf061717e843bfbbe5236f00bc45798554f19c2b5df7af5885a18de6b8fa7945a2ee896c2f052bf7e4d

C:\Program Files\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

MD5 b3738bdb3095985b0d872102c24d5735
SHA1 3b1758df7c9b9ad390359a2f6e3bf3e4feed5fcd
SHA256 6c60457227f7545e272bbe4b02254f632ba16f6f5733683b82d72117826e54e1
SHA512 6b0a5ed750b6212c00d3ac3f20ed2ba45175bd0502acf9301d25303735f8775ab51fef532cab7e1f4180fb98b526de478a71627a69bfc03f62208db7ff79e8cd

C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

MD5 284ed0876179a81ba1a8c2a1db6a344a
SHA1 9244888ee6d8aecec0e49b0cdd445403f676d1bd
SHA256 930113cac83db5dd884c72fba8f273ec046ce456b8e59daaeffa9508777e1caf
SHA512 0e7eb35ee72ac644edf524ec8980165b1facca38c200df9060155ffb1c113e9469fcabff4f499525a06dd59375932a8d945cad8111e14c3913a67daf7b8f76f2

C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

MD5 5e02fd924fb5c35fca9b26806e15a572
SHA1 cda67e71caf9f01ace629952c9942a7c8a4bb1bd
SHA256 5646cc4712b43fe0f46618978f58d9b25cc789cad81fbdccbea071feeda2bec0
SHA512 28ce5a7a7961ce3542593f22319b3fa98bf0f4841eab6c7ea2f14dd5f0d362beae6d4f8655e344c9133e25dc638f01e3bf510d69d0a53741346e199cb6a424ec

C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

MD5 40ea81f174f91d5022c61179b950e3c2
SHA1 ba63298d1e560335414d0a4bdbd8778ce6f5c3a5
SHA256 e3dbacf0c9bd757af832753035d3cf01c7e132cd11265ae748a3ac4c7b728da6
SHA512 fcf829e78685f842b5bb83a597104b2c19e8fa52ccf5b16f109bfa63ce9bab51612b9a26bc47fa35f7cd2f2e1c80d5f29c3c0a2f0a5b2e307fe5113a60280b9f

C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

MD5 8540e596f551a5aa1464147512da769d
SHA1 0697af64b3022a7ecdce832796c3e40e0803103b
SHA256 7bdd8f97559c92ccc10f18857a44da427275f6a42cf7184da9085e0fbe522111
SHA512 fd50552410e3e320ea78a235f485f88e14d3cfedc326884c4f6b3e236bea243abd6789d3ed3acfcfe3fe2ff700266ba6d42d61a8172a364ba7209e0bf51f52b6

C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

MD5 a3fc3870223c7ea240c481955a4013d1
SHA1 9dde6c6f0a05b8e06974bc6fe13146816539e689
SHA256 6b665379539434fdfa506b69c6bc1e122542efdb980e8ba6ae17960dc1823c08
SHA512 e927b36fcafd37227eb49d37177cc47b009fcb9aacdafdc0aa03d812af58944d6b265e6a124d9112a136ad44bf59462a85a9168c28fe80b9c95ae8c9c1eb720c

C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

MD5 4329ceed9e8e8f7b4fbd3f818353659c
SHA1 ff865222623e76bc03f3ff398fb83dd041c364c6
SHA256 6b5825a281ccceca2eb0011772253e5722a9dacb2a73c613587bcbfede9eb668
SHA512 fd9c8d588c5ef3e5fae71b45889054bd5cfd96984ae04ea947840de5c7cb91e7e2da53b399f41aca2bb6f5d65f6a863ae7b321142ff3314990e95792050f2f98

C:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui

MD5 21495d3eafb2232b55d5a8704ba2111d
SHA1 458444143190aab28478b54f9953d2865b499752
SHA256 6afe9bfe4b84ceb2dad4720dc39876008b53d8adfe3704baca269a4ddf7939a1
SHA512 403ea9b45bda7eaf1c9289df81494a2e60cec7d9089850ca0b0775c4d4dbe94d56c3e2b8190896dc6425ce39835e4724282388adc7ef21b513563dc9534f00c1

C:\Program Files\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

MD5 e33db741cbd1b8cbb7b70467634da34c
SHA1 bf7b1d6bdcfbfe7f570e78d5944386a3e6e82c01
SHA256 509881ab9fecd7da79d9fe6b697aea3a0a13ad7a2d135e100b2f6c285565e88b
SHA512 908e33db3f67dac32df0d7c5d8a7ad92c06197bab5da1d0c4e4406d8c8d0b13917fa2379967dc46c53793777d7791df5c17c9ec6270397a2613ce8aa74727f9a

C:\Program Files\Common Files\System\msadc\it-IT\msadcer.dll.mui

MD5 f95c915b4954d1d967752a590353433c
SHA1 4500bd94ed3953c3dc141422bcca4dced4530dcb
SHA256 2197c75667cd1c4c38dd109e540c86904d9e1a2a07f7ab28f86bd3a63f3b03fa
SHA512 8bbe84ad9a9591f30a22297e0980f9856ae424e0882be4ff91c497408cd632608f0fb4945f7a4c71a9ad548efdbbae0fb94a4148bf34edb87bc0cbdb56eba458

C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui

MD5 0c7d54b1692fb2fcf41bc4d52b1795c7
SHA1 7c74db9144697bb1e309b991c98f9b3bfd5565e5
SHA256 de160084df95a3916e85bb79caef114a344d20ffcda24259dcefb3c93553c9c0
SHA512 dbf94dae70afaf3e5ed239e752a69fb61b4fef7bc2b3ea4ddfe0fdb6055722fb7d7c924b018540a2187767c213ff16568a3b2c7f352cbefc1b883859b42aa3b7

C:\Program Files\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

MD5 32e002f64fc60a4d5eebd93cb9ae02d9
SHA1 81b06def84a0f878ba2ba0d48ab91e0ffdb1845f
SHA256 bc3cd88db3ecabc49120bd8c173e4092a17fcf4dcaff06d08f6f43041a7c3d47
SHA512 01ae724a0bee3d1fcebbd8ad3977dfcf1888d303f2c86034c835e664b062f024991f7fd4c61eb8951d19b74e899cd5e06701c94648b8c00d395aea6eda1ae6ad

C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

MD5 281fcc45b5503a0974e11ced14a0520d
SHA1 f446422ea0a903aa98e4925adf567d3fe8d49614
SHA256 f99082b6a914c6e80bdfb872f41d6d29ca4692b11b4e7462e2ad6f5e3a5f7d5f
SHA512 aec1a6a0fe3560b7558c97408682474f634501ae856b5da8559a048fa4bc64c8b330c2929a7c041b18b24c39a93c710e1a6c4813013dd9afca6fba1ffc852aa3

C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui

MD5 1cf75c3abac66722feb3064811bb563d
SHA1 23657e9153a06887a8a6f4e53829037ea753ed98
SHA256 24ea514f2e4908f696c4520d8796c47936bb728df91b04f8d14afd43288e1f68
SHA512 e42aaf04c62f53a343be1c4b179ddd388b16868611505027f78aa299dd8cb5d75523d3b22f642375a108041f28296974eaeb0f44e2aee6cf955864321a7a984e

C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

MD5 bc66d118318108f5835029b356d3057e
SHA1 4b2aeb305b53e11beaebaaa3ad24becfafee1cf3
SHA256 4b239b8d2b1b79607c78640d0713011e87452dfb8bf1a6eda1ea634fa9a9d0ab
SHA512 98ea6497e51e5d78d1ef21156c514880bec7f98a521f99e66bf1487bda069033e923d9795e25918e2f2e8ab2cfd3339b6fdf70e3bad354b6e738ddbe2fc58d60

C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui

MD5 4c28c1c1dfbd623d6b324cb5aa0e92ef
SHA1 93ecd78c9f3b47ece0fa54fab0147c2221ff5100
SHA256 4302468f9b2806daa3d72e36a411d5499e2bd2c7fe6f2fa517707ea4f43c5e31
SHA512 fab8e5b5975874e294761af040db1c6526939b91a69e4f34adfedb875854c5e7ab066ce3589e76d38b7bdb1bcbf9e1d979c9bc02ca5ac7ba6c46e33e7bc9aec7

C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui

MD5 540ace69dd17be0ee98987e9dcb6b371
SHA1 aef1145a13d5835ca4f5bba3fec6771d6bea6886
SHA256 dd2f86d1bfb69ef774be86a91d45ff5c4d2b8277ce56add9a2a17460fc72741f
SHA512 6a9d081ede51eb17cf31f420505b046b64d8457c8fda66d8046a1c36c34ff50a2e1cac5b29e9892e98263cab859a92e5caff9964515a3291327cbf14a2a0e340

C:\Program Files\Common Files\System\msadc\de-DE\msadcer.dll.mui

MD5 0488e18c59c2b4dc0a9a6c0e55d408f4
SHA1 0693c6c15987db8764845adc6cd9e168ef57bfa7
SHA256 e2cd8575089de808dc71f5b02bcbabc1c8513156ebf9c089a6daf69343648f8f
SHA512 b359ca34a448c0785c4b7dcad5194d130be80906f245d9417e4ae046c9e02c176a6c1ae36cd68b1a62e854af2d43dc5ac6df4ddf275bc44e9f7e9c6cff17a404

C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui

MD5 bd2b75b2402241ecb3036554d3d765af
SHA1 d9f2afa651f10d8eb31bcb0b4e594d05e9d88bd9
SHA256 5df6f26f772c89b181b5be4c8a70c2d54b28ea91d51ca5b7a821d40d4c27e853
SHA512 545a45322af401ae3cf7c70f368679a24e1b736ce619032f43f87ab1027a9a4df8c8993874d03bd153e00b4f8b1507fc4a492f9973631593eeee53d3664ac53f

C:\Program Files\Common Files\System\it-IT\wab32res.dll.mui

MD5 badbefe5cd4328d2e60e703fdfaaba56
SHA1 0e38369f2846a7d27f016576f28873aae81d9348
SHA256 b5489af50de058ed6e597e51b728aa8338ccbfb96e00b05b4b50d969f9b509f7
SHA512 c8410c30a1365135465a61aa4ccbee27380f9ebfb4c5df2d19ad306148b7972826c415d51901758830472dd83b97c96ca64d803b94489e9e6b62a547e271d701

C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui

MD5 b64b19dab914ebec38effe74607c5dfc
SHA1 da411f75cb208c9f8bbc9376450082ce3b5e5ab0
SHA256 0079b70c31f8ba4371f5e9b6602b14b97f95a54afd6d22cd8002c8db5f349877
SHA512 0176ade226d57450bb73ddee502a95403204f7c16546a20770fc29821de96bc2563ebccb7e7f1fa11f1f5ba1c26b0c0cb30982a0f69b800978879a7a3bae29a0

C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

MD5 979b57b47b266bb0e019ebcfbf50a63e
SHA1 220b1529c0ab20c8f9c132cbeab37d44ac01911f
SHA256 35cc831b4baf59c5ef389945f392849f31ea42e7b7ad6853b6be98b2333bbc01
SHA512 09b185a019bb4862bf7912bba6b407c13343ecb66908796a73a47fc4b8ed749dc55e5afda17cfe232fcd3acbc25d08cbac398818a0b2cd33cc64c58261656cc0

C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui

MD5 89f7ef95dc6062b163804b115f8d8bef
SHA1 624ff3f2feaadf825725f1d48e07608e498295f8
SHA256 fde7123c3fb117766b9268a98ebf117abed2851366254e8930504fb97d11e7c5
SHA512 4748e4ef64982378d4ad23d9f89ec6fb796a42266be4d127369adf05a0f5f62d0d8a03b8b81b8f1781faa9ffb36b44617ebc020353c617b81158014243037188

C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui

MD5 8de5c95b8e2b73cdfb5e3dacb1f10e06
SHA1 64aa51dbef4d6c5eef47d651d300ecf7d1402d3e
SHA256 4cb06b40001f0c99b1520f093f59e463dc36bee7c1169e5a6513358b8902812c
SHA512 5d47e5659c3766609a24e1ff5fb60c0eba6581d3fe72f865dd458a199ed9c7036cc73d27af3a72354f75f0212f777df7eaa8774f9718193cd9cf6c04e24e3391

C:\Program Files\Common Files\System\en-US\wab32res.dll.mui

MD5 e73b44678cb01af50cfd1932b9131257
SHA1 2b001c9609b6dfb1b6cbe2ed5d95a7cdd1d91820
SHA256 55b064996b967d0130320d51e1e63dfc6c85cb38142f1276ffe9720aef761faa
SHA512 23d76d5ab40786a15179820cedeed02e73a44c62d3aa85940f939cc6c8f09a3df7075ecda5719ced6d801fc07fdb8330d645b3d7354f48f13769717712480e40

C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui

MD5 67ed078ec0def3af9fffd6c70ad032c1
SHA1 b198ac43f237795ccaf61d59ef58ad8d5c39ccfe
SHA256 c5383cdb705a824792d0d6643f1c2a7572aba525c5ec8be8cc4009992451c4e4
SHA512 41a3f2fe73620832784ba3df026e0a0ec058214826f09574b54d1eba2d17f00923404c2830ea0151060e97f94db293691c8d1e0d82e4473525c9457fa7a2bcac

C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui

MD5 1f56a8c1af16fb1703635902278cf528
SHA1 556759f8e6cd3e14de5958f64f024b7f8410749d
SHA256 8add5620e44e7fbb0036d4c187ba791f8d59c7a69cc2df31fe3da5ae3b5b9923
SHA512 be5d385b80eb191216bff1a26422016c7ace838f18f617cb0f18cb2717253edcbfd079310423396708b52cf4c632eca0290313464fc5c36c5ad8ee740ec65bed

C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui

MD5 c5f663849aed6891f4ca36b617dad953
SHA1 5d1af4813068a237edba0d2a54b7cd0a6959d493
SHA256 f0df97a4ca3fb482f29a5579543f6dbe71909de707a8af53cba96deb9dfaeab4
SHA512 51f528beadd09b5bcc43ba6ecd43a2f6c69110302a521f03406bb7721231e1848d00357c8951d3a081d654d16c563afdbdf561fc0f8d9be4dd54b6bedc91d421

C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui

MD5 fffa6b3310b985d6167b95524def55fc
SHA1 5b8df5d491656809474e620ea6d349b5e2033e21
SHA256 3fe4f814e3a3168169104a8b14a77c8ee9771b6a4cb03ced64ae75836381b7d4
SHA512 9ff5def560e29fcf0877961266c6f1e7bc0208dc76fba3f9684b3da4fc339231115835d0c55e4387655dd96dffe8ec14f21478da9902a34e8dcf1bbefcf9c9bf

C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui

MD5 0be2ca1d81eac7ede5b47ef20fd35e48
SHA1 61a8beeb27a575a20104f86dd9fa0b0f6960e685
SHA256 d94a27e5e60aa150cd78fdcec34744ee6d87dce4ddcf3887de4b832aeda257c7
SHA512 1fef9fafe477bff4f2daba944743c46571148632420c7ca92a20b9735796f28b60dab8bc3989499b4e344ea84be52958bd154db4edec1ffae8e776301e2a4105

C:\Program Files\Common Files\System\ado\ja-JP\msader15.dll.mui

MD5 278297edfe00f65acf73f8412acf1959
SHA1 23daca588611841a2cd59711edd913a2dc14cd06
SHA256 df0f252f99ac13fa81b9a4a7d046f04e60b9ba4aac46315eac8fd6596e56400e
SHA512 215a8894a5dda35789a7c99e0df6288dcdec0983d6d8615618f913b78fe8e2b32f0e98878da9bc9d0591f8f4db8d36b0e810635c9256237de1f31f384f1b18c9

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipTsf.dll.mui

MD5 fc2ad576aad845f61af4eb228ed44753
SHA1 26f45754e1ca51eec9bc044778cfd889c1c0348a
SHA256 14e38b4b3964c349e0be96b7fd4af4803c1faa2e8b45aa01bc72f0a53e5ecdd2
SHA512 7d9c8bb7a9accd156d8e6dc2696cfb34210e6ab218124b045f00e87d131699cff62cfd2d138f1c46b820dec7913b7c7f56e15cf93113a08671add1568b37604f

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipRes.dll.mui

MD5 c86fed9b48d486d4405109b8818e7013
SHA1 7cb0f4b7cc41180c707c10d0e5dd0e82db732c7e
SHA256 86331a81602e87c84b283d39db6b8ff940ea07ac3befd05f916176413ce15bf1
SHA512 2c0bae7046c95dd4fdc15854aa224ced03e6418c14c49a3f69e4a301cef59d6804ada307c7c2a02846f81d24907dfa206e5153f807dac7fc2e7db809331011a3

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\InkObj.dll.mui

MD5 dd72d298d663c88d21c46b0dff4068ca
SHA1 a2f9ab43eaf72695558432da269f28bd34bee464
SHA256 30177f572f8e910c56c141a5c1d14ed7e35c1eceeaac5f09bfb98c1e2defee46
SHA512 969d6b8b0d3025d08ea047e5a36a97c03cb06b8f683ad4ea92760f24b74fc60b8094b89beaf8549a63405e023c0f14ad414c096bcde241e4f523d47cb32d59c5

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\rtscom.dll.mui

MD5 53a5e3ad0bcd611173eff1b6f3de8567
SHA1 6e591484b961714ed23e78c7c007e33a2a12435d
SHA256 9305c34fabd9442da07cd6440dc886d752a045c82ccd5565cad891c8a7193d7c
SHA512 e35c2a0cfe15e7c66eb6309d422c35621b998a8b652435ba7b885a0819eea30bb7b338e8171149e4b83e5bb97f99bdb4dbca663434b8856a21b0e78cab36c659

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipRes.dll.mui

MD5 5ab759e1ec0302c4a941d20f9d454d82
SHA1 301d000b794050e3199a96a026ba9f664e4a004d
SHA256 05f05d99c401d4097f217a3c61faf8bd555835a128232275fa8f63a6ccbbbabc
SHA512 d240e37cdc30bfd83af751577bea05fdb10a402f64ca8cd7aed36f957a7b01cf81439bd33116dee918bd6a0020133e7d6d956726cd88f0dd17a1e7714d486ab6

C:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui

MD5 fb620ad2aeb84035e6497fa2d037270a
SHA1 2fe9977cd341b65442f15f26d38ec4ac4330d676
SHA256 8baf41017fef465db7b138a0aa1a0bf08866104ba9211b60ae2ace21470918de
SHA512 cb5d27dd6e4c14cf93a262068a9e8dd6ddc871036845d551feb1b604123580ef12e0a07c8000e4ad3107330f683714f7bfa68269d7154a0fceee8ff84e43fd86

C:\Program Files\Common Files\microsoft shared\ink\it-IT\InkObj.dll.mui

MD5 0229d5d06f34d4afe6747636a5c5ad0b
SHA1 3d4fbbc59fc9a9b010786c167932e21054d71788
SHA256 e27b5faf9abb1f9092f066d6588ea255d7603f1bd65dfe34a1aca52267f8008a
SHA512 f1bdc122d0001b1bf3c9289d445cedb91a1ee4f4017cc48aa3a709699265ed2e21db8605c96e6d3c4bbc477bfb721ab35d1369bf9688c09c910d49c442a47221

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipTsf.dll.mui

MD5 51cb433d25002d1998202ab4a4758cfa
SHA1 99d87c250fced481a61c95bd842a8093d418cee5
SHA256 e99419f03eb471a05d14ef76b2543dcb300fca3423e35a56acf3f5ba33cac7b2
SHA512 8d8f415ffc543d2bf6e8d802b5f4c290e73b0fa52ab25e34ba8edc3cb7db7e411551a6f0cbc449170a8050eb48087e4ddcfb2e1b7a58c3eae745aae8152509d0

C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipTsf.dll.mui

MD5 a3b4ea0cc9db04dbb919e88b70fe8698
SHA1 43fd42a32bf50d7535db4e183303e036fdda5370
SHA256 aa6d84d35f68e286cc5e268b2d7679f3fe4f4bd93a43797608900730855785eb
SHA512 042e5978c79124f3798ac4415de1d170533d6317292bdc459315d08d6987d5cad4cf95c437b00bb125ee2c150e3505808768552edd759948f03b9a230f8dee61

C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipRes.dll.mui

MD5 b8a085404b271e83c5e8e6fe4d83b402
SHA1 4bb919f9f77992edbc74a2f1f3ab333a67a822bb
SHA256 e146b31e8e94119b393d0e5d4306fbbe53e672a96f6805f7cdeec16a1f61f5d7
SHA512 e92391bec79c2fca0fbd9f4a95d273800e7a64461f988a76562b9d1c2c18b182cc4c7424984aeca0704b9c6bac4b0f3297ddf9c89bdeb950efc4938343263f06

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\InkObj.dll.mui

MD5 12ea65ff8acaa2955f4b7fb54bd71fad
SHA1 d54aad170d13a666a715d24ca825b0b844b6a657
SHA256 4cd4be5f102fbc806cb893b82da91e54e17a4b103eff524e4afb24de28c1e507
SHA512 9fafff010962fe397143b915334de5038fdece03ae57ee3f5a4676aee1fd18756888b2155b295c7ea08619aa866063d85a1db3323020a4de424db53f152b476f

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\rtscom.dll.mui

MD5 b7ead2b0092a8cc8d4c4021cdfab72b1
SHA1 c601e5baad1df7449c222f84f51a34e3c3607fb2
SHA256 9f47b83ec2767fd749d95111164d3b217a7bfce4d148c376d2545ca7710348e9
SHA512 4751dab9255d1061a77b40d9e46941bbc5f663cee4672dddbb28a5004283d17371742aa78f354bb5687e3e870986330a7a365576dc2f529b02da33608045d398

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipRes.dll.mui

MD5 691740e1f313a760cbd92b3a0a5781e1
SHA1 f827144761df07a2debbf04c182dad4ad81ad12c
SHA256 4de7a608cd6d4e99ae187186d5294c9b3463a1709753b2ae2f8657baf5d86430
SHA512 27625415e2bcdccc57cf4ad65b8903f9ad0c006bd6d2479bacd6f25ac2418ce3ee109a3f5ea80f02e39fb7b7c843dca86efa0e8d6373774dc9b7c434786fdf4d

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipTsf.dll.mui

MD5 23f3c3e2f24c4e63d949502d514f5dea
SHA1 1c1760f8187acc894555c9965f0792e0a0045c52
SHA256 a6a82687f244d28fd5a8c04c1847b3f2bc6eeb9ae275414b0e4c97c4aa81b0cf
SHA512 608fe585297e57430d7c607558f6ea94ba8f44e49b508dd767559a679b5281344a83f5967aec316e9fa637e903c4afee8b6c268514e3d4e93bd63b6ce0c26205

C:\Program Files\Common Files\microsoft shared\ink\es-ES\InkObj.dll.mui

MD5 7e9ef0d6b8c8c584503aa39187831406
SHA1 8aa67d546eb834bd3aacb2627681f2e9913830d6
SHA256 fa2af2e958b88878f239f11f01b7f409d30c65fb77777e4c60cee07aa1a1a1b7
SHA512 f7dd2789de1f6475c8499c6c18fdb843f3a4ba7876184df8e6b49d8262860d5223a171240b14ce93d006d6d6b77a8948a9c5449c67678009f257bb13c48cc2c3

C:\Program Files\Common Files\microsoft shared\ink\es-ES\rtscom.dll.mui

MD5 c55c1e0b7d8451e567439ec5abedf3c8
SHA1 4323266fa46aa09763950f4b80c14ce35b75a2d6
SHA256 0dc87a425c63e853cfd7c726a0268abf8c921a26db5552ad8b6c30c743ef78eb
SHA512 e924e9cc00558e2bc62cc4e1b33da7ffb450235252756837a2f43671e077884e546f0901b8d1793fd9a30136e3d651053e19c8024c13a3c328f62cda587b6798

C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipRes.dll.mui

MD5 b52afc667491382a607dfb4e32195162
SHA1 2d29a7d894e6c1bbad44821df7a7ec86355fd1ad
SHA256 2fb11bac10d7a203d16416f424c20f1babf06487fb1a3e897157e86f2344d741
SHA512 259e7f69fe6b99992c16f50df0d262dffc4367c403095dc81a02b2ab0a4b2d78a2842ac50f98065dab1ed5044485ea97d2c47729c208e9c4c8307e4554094bd6

C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipTsf.dll.mui

MD5 909328257d72c31f13330434f811aa21
SHA1 5a0fb9559eb163d681de40cb55434a5ca1bc9e10
SHA256 55049ca41fbd0185e3e4986bcfda1cdd5af11bee6e188c08c67a128c7698acea
SHA512 4f7e8703b0396f40d019fd14a562c18cc25ced777ebe4198002a553acbc45d4908379a86bf7551fcbb75a2e2037e6f78dda766c0ca5371b463ff8f09b52412eb

C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui

MD5 2dcedc4e24e73e7c80995e2e22e6bf3b
SHA1 7e8901b81825f13231479faf786fac5e0a0df7db
SHA256 86df85d5cba40c84b001c48df6cfa59916c7a169b1d01f494dd6c5b0cd0a1b46
SHA512 d94954c8554b7812b20dce98dc213296aed712d26ef8dcde61dfc153e2d37dffa483c5e3a36057ded3f3ed3fbcf9dd0943367b1502ba22a57391b39e8c323ca7

C:\Program Files\Common Files\microsoft shared\ink\de-DE\InkObj.dll.mui

MD5 93f7b5f336884f12f5966ba2c1f874fe
SHA1 4271985f3dc4d6364eb3977c19a920fdef4caf39
SHA256 63338ca1b4b6f748d15cf791ea6da38f8799c9682cec238dfc16a93c8c0a0917
SHA512 b9099ad6b0a3b68dfee39b186fdcf57ba7a8a154518d94aeda64d40c81a76689c2d56782fe89be11d3e952eca6fcc151c9be2a4696b138edacfb129181743219

C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui

MD5 3e7957d2a371543df9594bc5e8b23bb6
SHA1 cf51dad4b1dc88401a7b5aac8c45e2ddbd4a9493
SHA256 ea57f87919857e3a0618370ad28e8892681131f87cdb5c9d0d4619ee6ba81f70
SHA512 81ef11a168d99cf7b2ec200f9cc7db58acd0bc105466b1d837d3bbe7c9b48143996ce1c71ec25e748810e0cec8968201d7a58931a2db8361196bdb870265fec0

C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui

MD5 ff5ef6f17a99035a8b8c56c7707bd059
SHA1 70eaca88ef56c808c890225af929ac3934341dd5
SHA256 16d9e94c7263377a910473cbb0fc1263818ffaee546deaf67d6f8b39ef1d9caa
SHA512 a45bcedc604e4eff05e5235fc8b9e76ac29f15f81811125e835c1a4376a779d592c2523f36548d8ff5293e6433426d104219edd34211555f5b98e1f793724d85

C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui

MD5 fb36fc1ce735e7b33d47958fa39e1dd7
SHA1 96cb2d1eb85be6cb5329564e0684e34895952b01
SHA256 f0479b74092d69837b38ef751f8ede9ac0dd16cb26147163a52fde9f6e853563
SHA512 82eb03edcb0d7f18f2e1d2b55a840911a9f020e6725811b9deceefd6aeaae9fd2d9fc8a044ffb91623ab6ebb904228c326ed305f5c1c923987e55f2179dd698e

C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui

MD5 3b9e68246ffc0fb82d8a52da4048daad
SHA1 1599db08179c751ce6715254ffcb8f75b0c33ae8
SHA256 25c05a5f268bc3623d7db2014068cec0c5bca7ad38c52fad7192ec9ed104698a
SHA512 831ef2beb0034379c82f367da0e78ddfc9a6e9ff2c997ec1644df24348841e2f5d99f9d491a630954e700702d77a99594ee2ca16d53e714b4b8ef9603fe05c11

C:\Program Files\Common Files\microsoft shared\ink\de-DE\rtscom.dll.mui

MD5 acdaa30d69498d4e98860a0632f8923b
SHA1 75491306ff38d27686d50d6fe18a930a44e49b4b
SHA256 62edee60fa45ea66255889c42f9c886d51dda47f7f43b68a68e2c8a4999f0924
SHA512 cd3d3a5b6bfe862459b4fe9deee8a1dfe18e26f3981a16b6b2baa7cfcdc6626bbf48062aadb21389b13e078ef02fc4626cc4bb33555f1ebc4e3b5c6bffa21352

C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipRes.dll.mui

MD5 04db903237afe4410bf97b71516b63a7
SHA1 e783cf21ad15e82719f2c4bd16e851d9be56095c
SHA256 e74d5172cf34bc897d893d4db5b6a8b0d6f4081d027f362c580c15f1622667c4
SHA512 1bbdad7f5042a2a012a32ffa749d4cff2de60fb5a627f0246511a70d25e8dea8c886c0fb5ad86ebb5a93bcfac63c625fe6bdd8e96dee199528c8242d81fcd016

C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipTsf.dll.mui

MD5 8831914bb6c18f9c41e2e171a1a5d03d
SHA1 6a1512ae45863f19687253deef854323904514d8
SHA256 69360fedb5790f776f4182d21fac42546013fcb8e84e4b57e75315d4acdd794a
SHA512 170fffa39c188ab825b7c5e259bf24107abe8a8b36c258deec4a33731b6a7350ede5af4e983b3de56bf326023e541a4ae1e590f1fd2a1ca178b15719dcb05b98

C:\ProgramData\1D47.tmp

MD5 294e9f64cb1642dd89229fff0592856b
SHA1 97b148c27f3da29ba7b18d6aee8a0db9102f47c9
SHA256 917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2
SHA512 b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf

memory/3652-19280-0x0000000000401000-0x0000000000404000-memory.dmp

memory/3652-19281-0x0000000000400000-0x0000000000407000-memory.dmp

memory/3652-19282-0x0000000000400000-0x0000000000407000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

MD5 5628f2999a464cfe282d3e0c9ccf2157
SHA1 2907f515b1fe166b237885fa73431c3b2d3d88a8
SHA256 431d8f04be506a7d20ee61eb8040a43ca8304f6300f06e4b5b61d792726e7675
SHA512 ab80968b94c2075738e62c409af706660817a90e6b53fef1b843d4303e1e94af7f957cc1b294e0b0ba8824a490840bbbc7a04f6544a81cd57682f2f558f57edf

Analysis: behavioral2

Detonation Overview

Submitted

2025-04-21 06:42

Reported

2025-04-21 06:44

Platform

win11-20250410-en

Max time kernel

100s

Max time network

104s

Command Line

"C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe"

Signatures

Renames multiple (7580) files with added filename extension

ransomware

Deletes itself

Description Indicator Process Target
N/A N/A C:\ProgramData\1E41.tmp N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\ProgramData\1E41.tmp N/A

Reads user/profile data of web browsers

spyware stealer

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\$Recycle.Bin\S-1-5-21-2627618461-2240074273-3604016983-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2627618461-2240074273-3604016983-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A

Indicator Removal: File Deletion

defense_evasion

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\WindowsApps\Microsoft.GamingApp_2105.900.24.0_x64__8wekyb3d8bbwe\Assets\Xbox_AppList.scale-200_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ARCTIC\ARCTIC.INF.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusDemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\zh-cn\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\sl-si\ui-strings.js C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Todos_0.33.33351.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Square44x44Logo.scale-100.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Images\contrast-black\PowerAutomateWide310x150Logo.scale-125.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\index.win32.bundle C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\lib\net.properties C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files\Common Files\System\msadc\it-IT\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-48_contrast-black.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_21.21030.25003.0_x64__8wekyb3d8bbwe\AppxMetadata\CodeIntegrity.cat C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.29231.0_x64__8wekyb3d8bbwe\logo.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SnipSketchAppList.targetsize-60_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Images\PowerAutomateSquare150x150Logo.scale-140.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1909.12456.0_x64__8wekyb3d8bbwe\resources.pri C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files\Windows Defender\es-ES\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ko-kr\ui-strings.js C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\new_icons_retina.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeWideTile.scale-125.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Generic-Light.scale-125.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ie\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\EssentialLetter.dotx C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\PUSH.WAV.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\pt-BR\tipresx.dll.mui.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\it-IT\msaddsr.dll.mui.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-commonjs\common\isConformant.js C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2103.1172.0_x64__8wekyb3d8bbwe\Assets\FeedbackHubAppList.targetsize-32_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\Snooze.scale-80.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_21.21030.25003.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\ShareProvider_CopyLink24x24.scale-125.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Getstarted_10.2.41172.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\TipsSmallTile.scale-200_contrast-black.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Resources\1033\msmdsrv.rll C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\en-US\PSGet.Resource.psd1.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\AppIcon.targetsize-30.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Resources\gl-es\Resources.resw C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.BingWeather_1.0.6.0_x64__8wekyb3d8bbwe\Assets\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL044.XML.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\nl-nl\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\dark\vscroll-thumb.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2102.13.0_x64__8wekyb3d8bbwe\Assets\contrast-white\NotepadAppList.targetsize-40_altform-lightunplated.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsAppList.targetsize-36_altform-lightunplated_contrast-white.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\WeatherAppList.targetsize-24_altform-unplated_contrast-white.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\da-dk\ui-strings.js.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN011.XML.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ko-kr\ui-strings.js C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ja-jp\8EHvbWVkC.README.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\Popup.js C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.40831.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-20_altform-unplated_contrast-black.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-ul-phn.xrm-ms.8EHvbWVkC C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-64_altform-lightunplated_contrast-black.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_21.21030.25003.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\PhotosMedTile.scale-100.png C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingNews_1.0.6.0_neutral_split.scale-125_8wekyb3d8bbwe\resources.pri C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft Help\MS.GRAPH.16.1033.hxn C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL.HXS C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\1E41.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeAssignPrimaryTokenPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe

"C:\Users\Admin\AppData\Local\Temp\32ea523752fe1db8f2a96e201bd0d6f223dce7f2cebe8fb4260d12e0c0dda4ce.exe"

C:\ProgramData\1E41.tmp

"C:\ProgramData\1E41.tmp"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\1E41.tmp >> NUL

Network

Files

memory/4028-2-0x00000000028A0000-0x00000000028B0000-memory.dmp

C:\$Recycle.Bin\S-1-5-21-2627618461-2240074273-3604016983-1000\WWWWWWWWWWW

MD5 c3d812821f8d569746413c2a7992f04c
SHA1 e7465d56177d2e57ce4811dbd28611ecfb2ebd54
SHA256 30799c7bc11331b38dac0d142654261d6a2cf21e975efe4c689de2d0a50dce50
SHA512 92f8eace7cdb6efbbca40d46bd007aace255af56ddb09de477bfba66b07f63d34a322b6b8faf5b1e97568e99a5111b377ef83b4362682fef01ae2ef6533e23d0

F:\$RECYCLE.BIN\S-1-5-21-2627618461-2240074273-3604016983-1000\DDDDDDDDDDD

MD5 f8c62b26b652a8d24ea9af54f17bfebb
SHA1 e5431b33a25fc66d00345314aca7b08fadd6e056
SHA256 743b5e8546dc607619e5206be5516189cdc6bb16982d6433fbdc4004e2a60427
SHA512 9fb0b1f6b5be4d15db2859321b47998b7fc3166effaad24782702c5a829c63d57f2286a23a1333f31d562bf30d2fc11a0c797f52fe606b0278a25fdf9c914ab3

C:\8EHvbWVkC.README.txt

MD5 5f71a5ea8be73a0112c0f2444a80e1c3
SHA1 406c28bfaa47995a7c315655988ec87653800647
SHA256 3064980f19dbbd64ebf656ddaefd330a14d9b70942260954ca582cb6deb57df3
SHA512 f58aa09de223a85d92eb93e944a0e4e1c3236e4f685099eb64215f1f986d13a78f9c796a7ae0a1b8f9d42487338ed533e91499ce4dbf9cd13675845de4d4ba7c

memory/4028-1-0x00000000028A0000-0x00000000028B0000-memory.dmp

memory/4028-0-0x00000000028A0000-0x00000000028B0000-memory.dmp

memory/4028-7833-0x00000000028A0000-0x00000000028B0000-memory.dmp

memory/4028-8938-0x00000000028A0000-0x00000000028B0000-memory.dmp

memory/4028-10352-0x00000000028A0000-0x00000000028B0000-memory.dmp

C:\Program Files\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

MD5 3ca8051e5cfd8626c54367ed86f95e7f
SHA1 8c4f1aaa160142ced394ae3753d35f4b56a3a485
SHA256 d6d72a13d3f2405ed8adc2d45d53e27ae6f46ea906150bf2c2cba0e7b955035b
SHA512 51202fdbb7380883008e454ec69e060764f0f6873acc98c77dcb7008376b53e8f991f98751bac74ac72fc410b9ed8ad4899fe0c31ef082d2c8653badec8db420

C:\Program Files\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

MD5 cae71a9f48fcc8f2e80c86bb7aa2661e
SHA1 c47946a10902f6e8a5a268491d5d83f128d71e80
SHA256 a60bd01471b2a42a624003321335150d8087d956d8459741d10f2d0a1916f180
SHA512 a475c4b9a7235d25452b6f4d75dfa1d2b6ebcaf4c4ed26a312da54487a9eb50bb7510e28ed25e59aa3a0d25b97854cfc828eabf02b35e26d92d5c437fe36613d

C:\Program Files\Windows NT\Accessories\es-ES\wordpad.exe.mui

MD5 40cfe54fda1ac5841d2bff782c61984d
SHA1 e496a1b89245a74e070287d6537c19a221e99bdf
SHA256 6f393c37a611dfb529159ad05bdf14571f75297e5c507447a8fbd7e271101fa1
SHA512 fb52c88389bacf484b11b058f0e6c37bd40e2e053e99c92d9d4590cab62fcae03e1e9a53408d085fb5f6a0b4826d4ae1ead026ee8790aa46777260f67cd59fb9

C:\Program Files\Windows NT\Accessories\de-DE\wordpad.exe.mui

MD5 2584f465fba5e351789149175bf4a7d7
SHA1 4e8b2c7fb4afd4c3df389e7bdfa182212953e407
SHA256 d54fd6d7c8d4a0280bb458f396c9bf6735517f837f8def026943f8137b42cc94
SHA512 cfd0a8126781972569ac98b6991c4ad43465cfe0e357bba52c7a78f12e9e958bbbbb6d7086e61e19333707df84e7f86eb863b98ec9d9985154cd7274678e3aa5

C:\Program Files\Windows Media Player\uk-UA\wmpnssui.dll.mui

MD5 ac4a563163e1014eb677ad17e470a766
SHA1 a8775cecfda3fa3876fa1ee0e96e34ced6e97474
SHA256 3c9bfc093d3e99feae8d063ae1ad3b7b8275cec05f6a3014d8c90c7efdfe3a51
SHA512 b3faf6ff45b526691e4ca73762fafe2f09616bf05bc239bfd7f2013a8922b6b493751e088ab9e637fef0abe53e5dcc0e45a908110c1a40f0bc7fb0a75ea90fae

C:\Program Files\Windows Media Player\uk-UA\wmpnssci.dll.mui

MD5 93ce4f91566ca40b7cdf90aeb9fc4332
SHA1 c240a572f3989f2b58ba0da3d8e052a288fe2097
SHA256 c82e44349221f99982e18a3a1ca6b9c430ba09fbd28302e8575f1e1309b06e36
SHA512 7344e4e17286b1992fcfd2c69ae528f0884fba1ac6683a4fc74bb3b7ac7afc4cd121a3b20c6454fea2e362d5c99baa3259b6b46ec25883332af0fcbb27e9efda

C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui

MD5 4820dc576a845b83772e1588cf3ee53e
SHA1 a5bb4872f1507122b43eb943cf4dde260b476aa1
SHA256 1f2b6429ace83c9f0f40d80b1a0626e7495981d7dd68a9f6994d98964f0d2814
SHA512 3edb389e4e31e9504e569352d9441809845c1c911ad6934a709f6e5ebdd3bc4483daba6d702620f6673855c00601c327916633cb77bb359f431d3657204c8e21

C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui

MD5 ecc20ed37f88cac92cb4446936ea3d03
SHA1 e60b86ece98110970daa931851ede3eba45226b7
SHA256 58a61723519ed1eb89afb2a684385e26e342a25ba38ed70c03e004659a544d5a
SHA512 d7a132bf473bb04140e08dd67dd9f6d8e9c9322cf7bd19f205b010161a3bf363d23e55f21564941e636177db5fc043910589acb4008a1f4c8312c73e6eb4da20

C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui

MD5 42821e8337caa5d6eeb40b0711503206
SHA1 0f8d0713dc593ad8ee85a10d023ec98884ec4b24
SHA256 6e704c63de554db0f2a7119b91b305bc33fffbe67dc2a3e50c9ebec664256d86
SHA512 3bda65823d490d0985e11427d83ed7dbe51d2e8049ab6f589a4af0c18c9cedb2086346cbf5ae0b0a1597b821a42002eba0e4f873448cfa9f0e3e6f87cdee4b8b

C:\Program Files\Windows Defender\de-DE\MpAsDesc.dll.mui

MD5 122fad469d8a2322fd689cfae67d02e7
SHA1 4b7903be4844911495b33dd1db1955815c184bd6
SHA256 247444f3af5b665c2bdc3b7d9d7a13db719225d660c5c75329d943a569c0ee30
SHA512 b8eca4c972a4bdc05894ead50422a0f8fd54bf592f40425babd53804a5c27eb36a19cd20b92a223467e46cd8e6bc4253ca34760c426d5c630dc8c20da506204e

C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui

MD5 d3a4a58185b2ecd59467f3f6766fc5f6
SHA1 d33cf70de2bb509f5b8a0b03cc1500526393163e
SHA256 9acea3dcab789f49100c94c5105aa843ce05fc7df044a0a9e4c91f1daeaa9588
SHA512 989316495dfdf8053461dc7a16beaf903d912b371ce278bc09eea35581d564d8f602d5298e7b3424531f39dcd3adb8335edfbea0b1d09c13252da6bde69bfd4f

C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui

MD5 48aa95f087b96a1a370d77ff2b016acc
SHA1 e138fdfe5b5d4f318ae4d2c576cfef978247fdd1
SHA256 63651e679de9b6ccd7253ba4315875893eb323b344927ecc852ac3179de550a5
SHA512 52d2e9c16fdda8d92b7a177c67c5b21ad5a449e18b32c252313445af2c8c1f046240f46c5a9f7bab4093dd66b39ee0dafef7901dbacbeab963ff8e19d880850f

C:\Program Files\Windows Defender\es-ES\MpAsDesc.dll.mui

MD5 8212b99c6fa744579dd3f50ada918892
SHA1 190383a60337323130a27961ae27965fca803bc3
SHA256 367b1a95d7ca64488187f7318ca0eeefcb243c60615a189ce090fcd356fd1101
SHA512 c590ab945a1c3b9847750994adffb20a3826c393eaca887140e0ac352cb4ba861ee0e9ad469b781e4a3eaef17124059f2d488c5613328fcc122e4b9419692bf9

C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui

MD5 2cd4242f1e536ce9b25f5958acc3a013
SHA1 a02de44415fe3dcbf007884f9d99a6527696b1dc
SHA256 19408d16929e9b8244abb39c346ff437fb5dc2084f852e496e270fa28107ec49
SHA512 505c11e3ac5aba5c56111b214b11c50dbee843b8a33714eb89937f0817b8e2f8666af7642489382a5f0c582d8cd096dd2f9b73c4460350c233b7e8df9dd0c7cc

C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui

MD5 aba5e60d9095e40713003d19827ecd6a
SHA1 74ea25a1cff14cbca13f05a621a731c2d3c62252
SHA256 3b7e56d103ca1a69e459602c20febf34f5f7f9438d164b617b4c6b666fc2ee53
SHA512 d621eed3d0ed087b53bd46fde306931733a02515155530eb9483733aedc1b158655fe596cf35569aafe95a8b5bcdbc24792de6f79665f6a5ac5b88e92140b937

C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui

MD5 08bf1c361b1d147e4b8732398da82638
SHA1 23f46c84d21bc7cd1e2bde46c68d9c478a7012ac
SHA256 1d8d135491a898ed62f8b5415418f483adc4391f83448fe0cf5affba0381977c
SHA512 563ba49e6c126c7eeed3d06d786283b3a50e1c966b5638eb0e5bc5660528b589a1fc789a3b929bd2444552afe7fb4cb01d04e7b37b89ae8c7c18c1cbddccd23e

C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui

MD5 f2945ed63af4eee39556331f71a86e47
SHA1 88be5cfac50fbd3eef98a505edcf68a2575e0d94
SHA256 9816638479ca2d2604f5aba0fa7ba032f6a17ec41b01ff8568421a73bd76cf99
SHA512 e4d21b13c69de18c6004cef7b8e5a6c2f61679a2969ea1ead0fb381e9cd0635d9444093d5042bfc59b1a9a0a4e9af32be6fad29cdc25c45538fa363959c5f431

C:\Program Files\Windows Media Player\de-DE\wmlaunch.exe.mui

MD5 871d013d2ab99b1e7aeac28f4cc200d4
SHA1 3474eb49f0462ab4a19a0d0fc73b9c4da3c8740d
SHA256 7484e818091ead0a8866cc1545e10acfb88e4b03c995c2200126570c82d68c38
SHA512 834cfe94f7fcb7c187dd1aad07ef6072656eb49a3d16cf3a170a437ad2aa54f4317658bef4de1fe475dca91ca7134ac10683b21889bbfcc721ed3d3bddd35fd9

C:\Program Files\Windows Media Player\de-DE\setup_wm.exe.mui

MD5 cf148d37349ff73c59ff81875d4d4b6b
SHA1 f615f4155cf85b6678479e45d53aa5abde4bb1e6
SHA256 d67c39412a85503326f50bf1aae1cd12d68f263f1f83abc31d52d24003aea0ba
SHA512 e50e7486263f41d72ffa18df289979aa36186310b786d68a59c2dfc1b55be85458eecd023b095b570ee990f6e7ea6b3231a7adfa4d064380973c69dba24f93a6

C:\Program Files\Windows Defender\uk-UA\EppManifest.dll.mui

MD5 fdc832ddcc6cea3a6947642de9121142
SHA1 de0b273a3a4fa465588a6d0aec277d465ccc112d
SHA256 27e9d9edfa90b3e26beb6eacabf6ab36a2a68f7bffe7c46c190a1454e654270a
SHA512 52e594fc018ea8a8d7264528582a5308054df48c3b0d8b4ffeae409cd0b40c1159de6d90a530f2aa563d92c6fcdbfa863afb0cc1b152b0e1436593c52f0ca96b

C:\Program Files\Windows Defender\it-IT\EppManifest.dll.mui

MD5 57e6fe0cf1a796e5006902713c2af1be
SHA1 dd90d123fa1db9ab87b85b569cb540d896605c61
SHA256 99ac6c10777f19b1ec1093e6270737aa64427683c9db96639510fa5b42600660
SHA512 7af080d2a9719d0538fdf1fc9826a38e122d2390665ada670286b0f282d3d97b23ec5d9997d01625b0d699b062f1d947eb9fc252dfd77ad6fb4acb347b90606d

C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui

MD5 f4e1669fa550274c28c9bfce1fb0c6ea
SHA1 4e5ee8fa205ab60dbf3ab13f70dfa8caa02893cd
SHA256 a99cf3d6a518545ebb1b4bd7955bbe30ba6c4f7ba11c1bd891bb14ccc388d71a
SHA512 e52a1b785651eea796d107bdc41ed77907897476800c84493bba55f768f013f85f661ee2b2803e2e84b596763b365ebdba6112684aa91f7bbfeb09878c2e050e

C:\Program Files\Windows Media Player\de-DE\wmpnssci.dll.mui

MD5 22450a38fe12882a8c448e614b62aaf6
SHA1 2ba2fed0f21ff978cee59505480746e1a97e1cbf
SHA256 3de2f7aa08870bae9663cff3f238905c974b2401ef3b8be482bb3a73c2d85c5b
SHA512 3ec5016c8e32f2c2638dbc2caa6b2632c00f62d5afa94081c94e81bc630f3d69468b210d78c4a5cd9181c7f89c4a850b107ae6e7261d737a0808224734b05789

C:\Program Files\Windows Media Player\de-DE\wmplayer.exe.mui

MD5 8ec5ec67505c22cd10f2f01676c409bc
SHA1 38cf2975f547bad31f054928e5a8830631ef863f
SHA256 ce2460e519b5307ceb6d542c52e34e6538cc7558ae5e7b6c6dd9572c4d8316cb
SHA512 cdd54704c5623631de78854428c98eea304856b95289b2cda77e5200d2625d89858f6c42f07bca10a2753b4fac3f12de4898a1635ab9f348e1ab31c292a6c28c

C:\Program Files\Windows Media Player\de-DE\mpvis.dll.mui

MD5 b19ece353ac392c09cece53ae55bc532
SHA1 3bdc932d426aed0ac271751e2d6306a9309fa887
SHA256 d51cf625adba6f6bd60822f85abbd64202caf2541f21e53684d7f01334bb6fc5
SHA512 ae2166e4aae45ed42d098ade97a46afb5d0624300e158411bab7f9976287cc001bd86ac96ad02f0eb552ba6db29589d20f4aae3bd58d4e2adb55311b000c7779

C:\Program Files\Windows Defender\uk-UA\MpAsDesc.dll.mui

MD5 611547b7f67ad8a31ba3ee0bd2973c6d
SHA1 9a4e4ad8e3eeb7e6a2722396cbad9ca80788852a
SHA256 e1e26f3ef19a3912407f99695400b9cad6af842402974c36ef2da93ea57192c0
SHA512 213fd95636dc11d3e7adf1828c18251035c051c4cf90e29d5045efaefdcbd3aca7424180c52afe71b3ca1e13be0240209adb2867e037c4d5aa8baceb63d2a70a

C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui

MD5 ec4adaf2332a7408b9158cfabbcf7cc4
SHA1 53ee3c97b272bcf969ae237dcf272fa4f5f5b92f
SHA256 54ddbaaf7050c3ca10de46a8e0f1389e2889ef4e0725e593b9f2e7f9653f9fbc
SHA512 e5407a2054bcf80d6d8aa2fef875eb975ccb552986d72e8a72b1059c944354c4ca234403d0d32f4e65ed31540bf3177d99df0d7643b1f91743bf29401c9616a3

C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui

MD5 90dbe408357fce2eeb96a4a153c44d50
SHA1 983a464735f937b8ea5dd3f791475e48c124abcf
SHA256 b588cc9bdc1cb8076918df3be1cb8af834d063946c86ae67e43c644410c8376f
SHA512 db8b58fbd9ea81563ed74c53c24660478802f9a06af019a6450147db4eb3489b9952cb6560c47b63a7c319ed7d36b28750df95243cfd577551d456c16c9c6c3c

C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui

MD5 1c32800adba5f0b3540332b1608d5acd
SHA1 106622c7eef7a5336695b27bab00670457b46944
SHA256 aab2a2fd9775f8d0f6a9de6a094f9785a35121a16c38159e678cf79cece4cda3
SHA512 0f5fdfe5e1f995ad71226c7f1a62560b839199ff1af9f68164a17f58994966a32f4501cfef9942338fb39f261463f9be2f24d1bec2eda02169a1dc18080a952a

C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui

MD5 b156ab249d78ebee715980c84532c0a4
SHA1 1a3106db5aa6b90fef6b23ec2e07200e72fee251
SHA256 774c971090dff797702f62ce53249a0e385e88db31dc4b6d3dd9bd569ce5107a
SHA512 9352c81bf7ccda8fc82a2379ab02ad974b32a96b68064b88c5a26819255e9ba9bfa8be05cba8564bf5f276f96090e5bbc5b53d490446346ebc2cd5bfa052d1fa

C:\Program Files\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

MD5 dbaa2b0531a8159f6fe6f6c9f11dd2d2
SHA1 18d41b548b163b0b4bf9fd8ff6f2dbecba437a7c
SHA256 c2a58651ac0d764bfd1b33f973e3b493aa4eed5dad7fe6957eabcadb955a25d9
SHA512 b87e39795c1fac52d4713a2f844816d6037dc546e9ae2b62573e2e3db92a564db1d7280d6611105907f09c019c2185f18899e43ac24e2b3731bb87d425f2e325

C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui

MD5 eec5002f6078a88127f7edccb21a98c0
SHA1 4d6192c39cfad8e63b86843bc1bd369b0f119d63
SHA256 3b6c47fbb781caf55829da349c2884ce69fe351d0042e54b3d73611578970532
SHA512 4f369153ae7bd78000f371636a089ff97a6f2e2bce93145c9f823d4b55552dbad6ead6965036aaab730b5dd7cbe460a9a273d9b090a791d903c098f51135bddb

C:\Program Files\Windows Media Player\es-ES\wmpnssui.dll.mui

MD5 6c0bc8eb8355991e623a81e63dfd389e
SHA1 2d6e3d2e4d7055a321f5a778a935673b37aa14ef
SHA256 fb1b2b2aad0f1ae0ac34c1fd494697964561d9e7bd9a155debb14231112b6ec6
SHA512 1d3386512732172e38695a2a19d3f7aec402dc35e0e99dbf26fe3437f43ff96c9941989bc3f3e896045c9df96b6d1bba9cdcc6bc69b23c1162c80367624e6b42

C:\Program Files\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

MD5 00c760fab4f26cc0647f8464e5824ccd
SHA1 dfaa6ce4903b8f500ac32cc73388a42eaa53bf01
SHA256 19db2216c009b72f2cf87dbef767e5b524f79a5de7c0dc620aef474885fac24d
SHA512 c2d417c87c3c69c8cc9f7c45b4f3fc77bb84de8c694b9a414c3141b9135f651f7e71bf6591dc161cc16e681bd42ebbbd677075ce82173e1098865ae2e1776866

C:\Program Files\Windows Media Player\es-ES\wmplayer.exe.mui

MD5 127362431e29dee4d790f7726bb3ba66
SHA1 0a1fae7cd39b5b4b59e1d959a58014217019e837
SHA256 b0b54186c76f1b6b6ebe809f8cae1d6c81742a057ba0150b5feaadea0c58e607
SHA512 11941d3a6ca260e5dff0d5161fedb56a7e06f8c97889a8cccc5933a7fe460c7091ccbbaa51b255291eb120d0a97a43c08f1c1ab39f7b31968ee3dd06921a90f5

C:\Program Files\Windows Media Player\es-ES\wmlaunch.exe.mui

MD5 e31d473722e652b79b03f72a08c36174
SHA1 fb0d57945a6333c4de42e0d08851f7fafd2679ad
SHA256 f57acf1c555f4f13f63080d1e383f78391adc2e631976b80f0f369eabdb398d7
SHA512 51b551134ccf3e240f248fb3ceca6d887909d5cf4f3485adb1c25b7ae892824a78f4292ba82b226910d88e42b8548f93b8beef392cd14b9f8adf5b8646383dc2

C:\Program Files\Windows Media Player\es-ES\setup_wm.exe.mui

MD5 c9743bfcdfe3ef69c5823174074f0a98
SHA1 c1f476b5c1372c4212ce358f08a0e04c9f7ec077
SHA256 4aa4c4598272b9a3f56b320964cd5ec7fb8580d31d66de5b65cc890a5480f017
SHA512 fe217b7aba8d631754907b6f52a432fbc00aa152757a4a0ec3fc4f735e44eb0c6fffb46b76b3e9ef0d248a1e2497db27012f8fbf7c320512af43727b3f2f245f

C:\Program Files\Windows Media Player\es-ES\mpvis.dll.mui

MD5 13c48f57de10c7f94cfdb05a212e9cff
SHA1 2818590e475a43d3b0b7c5e8f2e32586c787f6dd
SHA256 3ccb9ea8f98bdfc421169d682f037c1648f83b6b891ecccaa5ac0bac19c14bc0
SHA512 1bcf1aa445fff993172e8f06995a791e0356eddc71eedb90d0715a59e785e7e47ee4d53e1ff416ca81ba94bb9cc3003bd78b652edd45c1afda64efaf53c595d4

C:\Program Files\Windows Media Player\fr-FR\wmpnssui.dll.mui

MD5 5d64db918b2ddae45462465074714768
SHA1 a054a85d0ff19e53d394512a1217bf9ce3dcce77
SHA256 97def9e7b004a292eb9a3c0ea35131a156e8dd162109df9f120086df81475e23
SHA512 85ce5d0fd392bb61f9ae21d0fce37cc0ac7fa225b8c39c9f5b807b604dadd9ef03a19f58191cd3910b8f56ab389b35df82ba52db907cf1bc2d2f111d1c74fb0f

C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui

MD5 8d9849e9bab94ffc7c6b0dc16e1089e7
SHA1 9630108937a89ee096b3976fd9edf3e4b42b1289
SHA256 f44b2ea4ea0e7f3211849de402e7eaa0017b26db4f904b88d721776466b40e87
SHA512 6fa4584f1f87697cfd6249d8cb21ecdf18d2779be35a1a067336e1cfaa88ecb06244191666c8ac36982ca98bbb30dc1060ae264cd28c1a0d54b464b135e3a927

C:\Program Files\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

MD5 386d4fb85600c96430b4195910a11e56
SHA1 2d8cdffa58dd9ad9681aca4331dd111421541ecc
SHA256 ea83bfa49e7e1dc144aa0091c237bed3281647d57544bb5bac58ce668c0c378a
SHA512 d1638689376dcc4873105dd819cef4fd3201d9e6e794a4483273e279592e5791bca52ac47e74820d5455a5d18feb452093767d2c5e8647239bfa5f80fdd4de2d

C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui

MD5 c296481f620e94530cad1eca8228541a
SHA1 eacdae1968a904cb1e56b43c350fdced0bc7feeb
SHA256 f1a25fe912bd7285789640b3b3d1bc45cff870f91916bff49b7c104be9a5c76c
SHA512 c9fc2cc199bbd67a04df33e2873c539de27c099260d73579e34a4034e56ad99f317cb872e257581419af3cac81d7c877bb04df2ec05a7cdfbc200eb5966bf04d

C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui

MD5 f03e8d5165a7c7c58fbac7406617720f
SHA1 4b3856b23f19b4559a48c11a450a8cc9ad786f20
SHA256 fc79c8ebfcbc40c31d8c066278ad0848785d62c033892a8d0958e1f6a6d83240
SHA512 46bd0075cda373fc4b488a0877cc1502d42ce3365c58beafdce0b0a2fcf4709ab590cdf918416eb2e0cc658b070337a3971d446fb07549d0327a4a97caae6718

C:\Program Files\Windows Media Player\fr-FR\setup_wm.exe.mui

MD5 2383600322d1ddf670530f85bddcf47d
SHA1 a14889839083310fd6d7850f14a771cc99914183
SHA256 f611da07b52d253d34bb4adc0ea5595ccee7d33675856b1d08fdd20ddff9a759
SHA512 40dffaab0be53e1d1e9eb64438e21028e7462d18d2c438a1bb54a5d278fa8608717a6ba5e684e11c452da81ef0ab4a02a5cd420948777f5d868e19b02dd9ddce

C:\Program Files\Windows Media Player\fr-FR\mpvis.dll.mui

MD5 b9cb9bf8f81e98f845d72b9e2ab36228
SHA1 399dba482c60ab498fb7d35cad991239f05d9655
SHA256 bca49713da96e0786ba4fc8686db9e03bf1bc830b9cb36651bd3a78557d76ba2
SHA512 5b020c541542bdd28e2158843c9909ffcdd8b0784771015545ebc8b33ff801046479dea76e29a6fb7a7ad0c8e5aa4a064fb280ac1a464cba595c90638d4fe39d

C:\Program Files\Windows Media Player\it-IT\wmpnssui.dll.mui

MD5 4852013ba85ee8bda1d716269b9ad4fb
SHA1 c8665328cc7959ea30b3176492954d2877eaf9d9
SHA256 39de3e831dbc78a71ec7d45b0603c4b5c5cf67cf1548d668426897cd2f4da6ab
SHA512 22ec4c87d571b8cfb794e905623b532e67560ce7d9bf24b13985c840f96d326ef9a3ae06932cbb8dcafc3990a6d448199531f9488aa0378136480ac0dc52c02e

C:\Program Files\Windows Media Player\it-IT\setup_wm.exe.mui

MD5 93ebc81f03efa8a9dac431c3b4df02ce
SHA1 3575ac9f2fd3bf75b533e5567d042ce4c3cec50a
SHA256 71e9c4f2311d934e46528bf46bce7780ef7ac409c5be5419c875e780100d5587
SHA512 83138a37da21d528b57da9b2a2a45ab764b4d8f51abd139f2dfed23708afcacd278a79443e09bcc35bb470709ab46ba70071c82d4c73d5aa8f7113bf403152b5

C:\Program Files\Windows Media Player\it-IT\mpvis.dll.mui

MD5 64f16f23532833afc36bcd8fc68a93b7
SHA1 812d85f28b78d686282abf44c1eb52cc972b4307
SHA256 4bc9bb97be1d57712d14e367f6985c21ad3eee1569a46dfd9dbe7956ec58b069
SHA512 f939fca2e67ee90318d0d251e74f3b6658c690eee13b45c666ff13aeac2b8a3c6faa064bbaa47ffdf405b9060b385a16236e0110c568eae81c9def228200d4c7

C:\Program Files\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

MD5 f787fdda7493ece25d0642c4e8500ed5
SHA1 ca4520107b2c9bd2a9e825ffb19a8243a50b01db
SHA256 01e11d59bb4431a6bf3e302f4abc1244fec28788cdfec005913d19a3ac893d93
SHA512 61ff59146d8218219d4dda99b2cb026dd155239597040a7af03dac208fa997db6445dfbdaba437ccf30f0a60004fd87c2a6287676e58e1dafefbaf27e0c9d717

C:\Program Files\Windows Media Player\ja-JP\wmplayer.exe.mui

MD5 e1f62e07506a5413c194535dd1f33cc3
SHA1 2d225c04e1e927c99f444ac37acbb4e69fea7ad1
SHA256 b4945b92ab13530faa88640f88f08337d18610bc52480015064988bcc642c9c5
SHA512 0217e688270b8183a41f0c50408d474ff18f9db7e35509ee0c7a6ab3f04ba303be729dc90df55d17e9fc425ce73af2ea0e23036e934726e3be2a2952af0aa046

C:\Program Files\Windows Media Player\it-IT\wmpnssci.dll.mui

MD5 3783bb83f5c399ef56df99828faf1665
SHA1 b8e01a304efd4a7445c8d1a4ace41bf22672eb50
SHA256 9315bca786b7aa8f7b5d6c2526f68895c1bb976e03f084c53947f89ff8859d46
SHA512 f5138ca3c9e634262087972efe36360182ac133845f4957a4fa594fecfe9435807d750222cd3716e4cf227754d8a132dc4d7f6f16c5d46b921abb7fb79de8c44

C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

MD5 a0f5521cea0c553c0e13790bdbf1e6c4
SHA1 8440196f630fbf054b2f2bf07b21108b4951afbf
SHA256 5e8b137b37ba3e38b44509d40240bfd96cf26bae935305c420c04db3117ca41c
SHA512 00a4f55d8238940bd779c58e9a0b5cf513e1ffd721c1f65cd669ea7489b516b3e66606aa6425ae696fe9302902e265c87680dbf445d3d34853f4ff802d3f9c1f

C:\Program Files\Windows Media Player\it-IT\wmplayer.exe.mui

MD5 7eb1c4ad891e844fe7f4c2c5ad918021
SHA1 e62b761223ce32203ffc34c1578d9643c8654c69
SHA256 ad798bb5dc383e491b12dbd5d9c703d5f69f0243ab1560bc78fa5d8e167371eb
SHA512 1d5ce5c93cea6cc30ca2fc647dd6c18609a41bbae23754e5128d63cea304ec654f9899cb769b691e8acf682fa683b34d8e0272891b5d2799ea43b6abac99f77f

C:\Program Files\Windows Media Player\it-IT\wmlaunch.exe.mui

MD5 2a5aa1d21e5aadd0ca9afae75aef11b0
SHA1 8afc4b427c2eb940db489ee94a8d46e4bb07d0ac
SHA256 7fb4e7f08414acc4fa62473fb96770a1029641350fe0c58ab607c424c54bb3c7
SHA512 bccd5340871b4223c813362051a4c7b33921b8a1032d74ee92de36ee1f1f4e76df33baf386788ddb5cf0933c3cb9a236bf5ae842e505914473c1911158c55358

C:\Program Files\Windows Media Player\ja-JP\wmpnssui.dll.mui

MD5 a2eee0f31b2c043940d069790da7b2a2
SHA1 6e4fd71627fd6afb9e67f1441bca073b9d06aa66
SHA256 a624697ff5dd312c873e869cb832ac992bbba670393f923a869594f17f41e63b
SHA512 831b5900e87d87c0c7c44a36e6570953a879bb928390a6555e7bdc6366961b64bdf2305ecdac6c84b00220678aaee37c6a7540f4582a5967c5ab2b2e79f6d14c

C:\Program Files\Windows Media Player\ja-JP\wmpnssci.dll.mui

MD5 516179e1086b714ca8e9a558e30ef3ef
SHA1 560ddacefddd0b23d3a22a2c0346b078d003ebf3
SHA256 7004131cd6a6db5bf7b439582ea64f8aa648c6811abd53bbae7adadb40ae0b0d
SHA512 907d4409ca563a3e62469ea30180b4847a9f5e206210fd60dcc51264914587ff71aa525b0b313e2ad424563403e1708a8473b9e44b16dca9c37bacd054a408bf

C:\Program Files\Windows Media Player\ja-JP\wmlaunch.exe.mui

MD5 4a63578def5f8dab0d6e88820119ac55
SHA1 1f10e12a09d312519ec36080a9e76efd4480c7c4
SHA256 c822a71fbffbc3cbd39a9de5bd3a4b2c6ab745c9adbd45783955d64f500fb4b9
SHA512 6d9076dad3ebb6f8c2997a6d3da893b2c26659259a62a92632f0e940265ca4c30a84ebe38979764fd32340733b75a7dbc41609fd294f95d6fed7a208a33dcc1e

C:\Program Files\Windows Media Player\ja-JP\setup_wm.exe.mui

MD5 bac1ee6deeddb9d4fd211c60c00dbc38
SHA1 091d8b8f159a92836d497a559562b34c95100343
SHA256 7f1bbf44b81006f4a2dc493e0938252ff17e5843cc77717d9bebb731a9b83f83
SHA512 57aeca0d3a3c7443232e42b8e6ede47ac03dc55ff05e0a93860873ce037fa4b39e0df75e7229a4107fca23f09c3d2a3c40a3607e5dca13e1c4b951564b973b76

C:\Program Files\Windows Media Player\ja-JP\mpvis.dll.mui

MD5 0224ad94c83e2f8def23e10497cdb1f9
SHA1 f0a27c871da03d6756e48f1b16f3e86d67dc1ac8
SHA256 d6e6e7792ace9aec5c7f2ccb33f9c1a316172e418f088c170f11181c60709045
SHA512 d22dbfd2088f6a0f52998eb375bef3f5b0aea87dfa074a1615f3b2d65af8715440b61e5f80a8891af4d998e3ce6bec5a8da12caa36f73fb951c1403587cab309

C:\Program Files\Windows Media Player\uk-UA\wmplayer.exe.mui

MD5 325290164092cee372e6a17fd0d01f04
SHA1 3840f72632d0d1ba62ee11035a1a1e8b2c83c7b5
SHA256 4b60b7ea233926c9ff66a8a7d2b59d3243fac5c05d8e9bc112101f5cd25e06b7
SHA512 9e98c0c922e6ea3d1b13e69a1faf086541f8aa352583f4bcc11c90cd27f381769fc9396029bf59845efd3d67a5f06fee98e21c26e6c4c9440a945674d449e9d5

C:\Program Files\Windows Media Player\uk-UA\wmlaunch.exe.mui

MD5 2cc36fa49ca7ffbdd9db7434c57d3799
SHA1 aeb34cdd34edda297e8ae0054330c80c49d6d796
SHA256 6a25a31d7a6985ae691e5eaf1adb1089fec31a00ef0a1bd35f2fb6438a7e8cae
SHA512 60e2a57239ec4fe6943675fd76f1b63648fbadfee0bdd1ce11b1200b63cd12007507f7737b17b04db375da8ae1e6e8dc00c0f769eac3ca2bbc75c1b110a2d5f5

C:\Program Files\Windows Media Player\uk-UA\setup_wm.exe.mui

MD5 3e59227a185d67ec31bbea3bbce330ee
SHA1 ed2fcd4605ecd0e4f27ace669d1e66eeec1ac98e
SHA256 13a9ecdfdacf2721a7f13b77ecdc6d738730085826a6c7892b86c1cafb50c046
SHA512 4b3c95652147e070bcdf9f95de8675bae1352132b6e751353ba1a7230b6681454ee0758804204d9a469937cde890a10e0e979ca97e2f63768dcb0d701a6a60be

C:\Program Files\Windows Media Player\uk-UA\mpvis.dll.mui

MD5 f64013b0a0825d48b02296febbda62f2
SHA1 e92be5da821d4e490aae0283a045fd272de19853
SHA256 bcf2f99e24d411fcf9937f5fd57002276a9ebbd96770802ef5145740e6187dc4
SHA512 5f2dffc6779a157073f16ac93ef70773e1c6178d0ce639fae766f5691b42a53d7a72a575fe9d80ae3ddb940ee1f9d8f97f91e223c66f8ec8d3ac9211154daea6

C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui

MD5 33f033bf59b0ebf241bc1c7c5383b212
SHA1 52b2b3109ee1aa3750a6c0fdbcb20b082857bdf3
SHA256 39e51c0b56dd11f9c6643956381e19bc61205730075243ab326ad03596f76232
SHA512 283f0576fcf6a9b81164fee8c89a32fe4062a58d960e7bb405486d375a4d2af44d012225edcd367cb11af6cd3738995c1aa4893d3d2c7f25b489ef510ca6b404

C:\Program Files\Windows NT\Accessories\fr-FR\wordpad.exe.mui

MD5 9e2de77bd383b09f3832bab6923e8dc0
SHA1 426466e522f45f8f8f236886aa2736881aabad2f
SHA256 154ed75bf6ef235441bec317ef535f3502c7284d2c557d64c4e81382b86a2b01
SHA512 411dad8a13e9d56a162eda3ef4624d3e4a9a8c7efc9a4882efcfdccc0a76936fb254a9e01fd2f2132957a7edcac44ad1605986cc52c6b245a905c466ca006334

C:\Program Files\Windows NT\Accessories\it-IT\wordpad.exe.mui

MD5 e6fcf6ee155a715a5226f6957d075463
SHA1 78c99438494611b8af687c10534bba1c83b2fb71
SHA256 c5a015e9496c1c82ed13709bf76dc96fb45fb14a986e679b245d55393b7e8bed
SHA512 83612846a8e4b7ff8bf94de002fa3ea63a404fb9617577406eb7928ddb4f1554e0fbd17ef8552bced04d5cc0c2ff4813a43c00f334b3e29b44b6d8538e333d21

C:\Program Files\Windows NT\Accessories\ja-JP\wordpad.exe.mui

MD5 415fea3a2eaf47918eb00aeee09598f6
SHA1 d269bb71438bbc7ec746c0216f560ec38d9de167
SHA256 b618cf94a6e64cfb90d3e895fca6675ab71d752d0849a34cdae7985d30b1f3ad
SHA512 00b32a7b1f11940ee3c89851f978c731af34451673d46dcf167a9b9a0681be99ae8e6f30e9117ec07d473fdbc1a7967366281fc0be6091cd741d68401ebb0d1b

C:\Program Files\Windows NT\Accessories\uk-UA\wordpad.exe.mui

MD5 2ccdd27a9f4d8c8f106f2c0e1929dbb5
SHA1 c33172f0cf0ae8e1fd82cee22f8aa85d661c20b7
SHA256 83c655128e0214358343a2a4e2cae83cadc86318f3a108ba813fb550a2c5f4c9
SHA512 69b90399c0695327135e6e6fb731e2a60130cc5fafb4572ea304d95c18e28cae119725befe9fba1e504171fa58e92a105ee1036941d8f584e6f6dd8de71899e4

C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui

MD5 25873e38cb14ad99c9c7985fa948483d
SHA1 ba0c5f8ea2279cf81561949258cd5db84d77a337
SHA256 569b993d937944fc476fed1239c122073c50eccafe38a819e0c49fa9c6d67e14
SHA512 07e48a517fef37078362aeb75f85ff8e9a31c182d5eb2cc27245a5371463617a6df353123b96fcdf7303fc0aef1096c541e832e6cff05d2da8afffa9317d6b8f

C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

MD5 31efe7171f24dd267640ce1d802aa02d
SHA1 922bcb08e71f287f0e79f9aac8b7193f35d7961b
SHA256 0f78061f02112d74ba3c548a5f14f2225872bba6cfe169474d1d81e79d7d3e95
SHA512 39802b23db7196b07639de2872f00552296a2298f26706d3a91735558e6fc02deecba1141de35bffb6efc472590c4aa301fb92b1ac983034115115953a29883b

C:\Program Files\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

MD5 fe5b10d07951a2082da96af1eb2f3d0f
SHA1 7f7dd20a987a2a8b5c377277cc53bbce772c6365
SHA256 0ff7f38e91f0863881005bad0e0090c3fd67cb91a899d57dfac4207034c1af0a
SHA512 9b83140055f95d106900ca335ebd92b2d024e611274e4915269bc547bb4c99d3b37ac00720962350d93e1b012c23416ceac07d63aa3e4dbe784f354541cd1a05

C:\Program Files\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

MD5 541c00b07ebf5c4c3d87f86123e8c1a7
SHA1 edd5929b850bdbdd1093680fd45a81c0fc3ae819
SHA256 94575b6008d0c372e1153c65e668122037b7c3529e6d9518cc75af869bb5cf7a
SHA512 4333e00f29f70a63bf5b2e0850d3ecd2115baf178e62c66231e797e77b00e54c90698d9c2292646c546b8e638239fc5fba6b627d704151d4b9a553d446c5ba7e

C:\Program Files\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

MD5 4945d696bdf5369a723865dd5491f139
SHA1 ee1845577b445c784d98ddbfaf4e54021da93ea7
SHA256 6400e8564d22c32b5947d55d8b6f758aab4cc276d66d914fc9d64f2a5e044f25
SHA512 d480001c21f5ce6b8e3603ae76f2ee98209d8209800451d10caf227e0839356bab10385b1ce84563a4de820eaf7ef4c7664067e807d5389965dcee73501dd448

C:\Program Files\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

MD5 35aca3140b9e5dfbf95d4a14d22d6459
SHA1 9b8f873ebdfddfd04c576f0df80db151c751f10a
SHA256 079c1e55120665ceb20485d1a6f67bc67130c7d17d75009ee00efe8253163094
SHA512 7af54e7e961bcb79704df1fff9aeef80b4e067e750d6f4bb67634877be155bb55ca8db96f28d712b04f078749e2072e96562cf753f257466a57f2c3174a17d36

C:\Program Files\Internet Explorer\de-DE\iexplore.exe.mui

MD5 2cf5a8834502ffe904765d916e34e57f
SHA1 7fe79ecd4d474eebe917d2cc855b76531053ad28
SHA256 f740524e77797b6b6f50539e28edab9e7ae18ce0356129ed9d81064113159749
SHA512 20a048d2b54be1f25f8f3cca75ca952f55cae5968595efa4ef49af8544355834303a2c06fdc89e69514f34786117d54235b66af3db40f1806121ad6cc5cacf7e

C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui

MD5 cffeee9e21363006daaca713f7ee650d
SHA1 bc73fff0538be0fe9c57b809c7ee26c925f1db60
SHA256 b58d18fe028691ea9bd38107a339fe77db43033ad63950c9c9c21056d7c44f18
SHA512 090d8d240451f925d102890df428ce3e5034d5c9ca6bff004bb2e426551adf5f8c7dcf641f68631d449b9f84e3ab7362a177e0398ec825126d71532d20aa72c7

C:\Program Files\Internet Explorer\es-ES\iexplore.exe.mui

MD5 86f7743df6ef13028f3525f7731ea92e
SHA1 5453c0e0d5e9d10c54f7f8f70f041ecb6799eff2
SHA256 a29d6edd4462d719e7fa0ab0088b397ba7bbaf8fda1a5050f77fb5ee9b190b92
SHA512 a22c011b2a9cdc7fbf89fcd2d591b1a2a7d09ef232d36c4649e0266aa4969424171febae2483e19c350a6bfd7db8656abdc82fac3415d80a09c6e5c954eb7239

C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui

MD5 980b29c427b4f7f47c3ff73901aab166
SHA1 64ade59bb14698f3d497cc59c796384db033f23b
SHA256 d98dcb91b902e5edcfd5cdc1402b5dc61482547e2e3a368451e1fdf09c51d486
SHA512 600da76f1515aa4177b1e8e87c4007d9d0d465a62afee98778e4df212c9331adee10b80088e0317cbe83b0a1ddb5415424fc2acd1714dfbc8af75593d5c990fd

C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui

MD5 767781d6305853d331cc37e1231b0edd
SHA1 af1be014d5e82da708e210b6918abb32d5eec1a0
SHA256 b3732aab75ba8607e2e551785125a2da20f1fd3f92fd2b8452934dc81cb616fc
SHA512 51584fe36bc22f3fa06c0c397aed774ee083392baa7e5976a405c87a6d8a46f50c20b902d5a00c939096fcd5ed2406c3782ff448c3bc2d3ebdd2dea6fbf3efda

C:\Program Files\Internet Explorer\ja-JP\iexplore.exe.mui

MD5 782184dd18f51ab5fde4ea931cbf72b3
SHA1 a025d889f49da5a939240fc789f26f914759808e
SHA256 df43ae957bab512a9f496ea1f36ba077d7c572a6ee40ceead4fd2a35ce550248
SHA512 3125494892d38085182a02d3955f2771684ad7469d2114e00e3b7415909584f5ced499e058bd567ad9d01bad8efeee88561416459b4f8d3005c10d2ae55b7e8e

C:\Program Files\Internet Explorer\uk-UA\iexplore.exe.mui

MD5 8dfc23ef53ff19f41b145cd8b977ed5b
SHA1 d8f09f87df6a81ac8d6c61af70f446f45ca7154a
SHA256 6512366ca054f947569bb49e67e20b7695de9565531f10558d2d6baca28a20a8
SHA512 c023e4c5351b49df35673dbb86018fedaf040b1eb15a5fd62248ef376991047bea39249b5e7a0ad5a9411a773f967a446bf1fa4ac1263375b08eadd50f11faf5

C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

MD5 fc18f7396b241d8b92875103e7dda114
SHA1 b5ff05a72698674759bf30c3d0785f12306ea791
SHA256 38beb6c7b66d654f9ea2ea45fbe383a99b938d0e0c1b81ae2fee7e8dbe92bbd7
SHA512 a17aa6aea2bbcfa0cfe345be21a80dd77da69ce8a20338bbe7f362fae1c94a0392e71913ef6b17cf6a03f22e80149bf2fbe8c5e3af293465d40fccd83ada6fcc

C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui

MD5 988d9ad61f1db92c1dd0434fb96b6207
SHA1 b3492d30a903252f90e3b269ca32cec4e4efa1f3
SHA256 6808ef3931eccc712281ac6b9ece49aa9b0a2af7e10cce195514fd5efe783461
SHA512 38b69279708f597251bb2773ec157253c76269a4f5856adce7852b60a8f8ace877d0f11370f33c80710f51c5735c15c7133a203a4566a8ec0df64522c4f32725

C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui

MD5 25f80eab804b4c73f2e8ca0b46c49c8b
SHA1 a70ee3312f70caf10982129bc1b08b4a49293a89
SHA256 000eb127fc1e2a0a707c841ce80e6cce1e44afc439de070fdb99d55f7f13d2fa
SHA512 b7be4231cd5155f41f8ea6ba483e367263b8b337ca5db47ef97f592afb127f35ee8e19ef13a15cc886226d9ec28e08b78715f30040dc9349c0d50ab4a4a5b3e2

C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui

MD5 9fb2e8d6800566f1802eb0667d32bfbd
SHA1 2c4bd7c74e2ae0872b2b4d631bcf2053b39300fa
SHA256 7f3271d96f9766ddbe987efcc8fbdcf73d80057ea78f19e886939c9242944a14
SHA512 5f826cb628d20bd3bd0af7ceb2ce0554188bfccb84f14d4cee7171e722439af5cb2932976d1afb12dc8b364860a58a3e6355bcda19f142cadac6aa344509b3bd

C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui

MD5 713e77f3aabbf17304d3a509cdc50617
SHA1 befc9b17b45786e4e92e26ac3f10cf0210e67e1d
SHA256 5b52777e139dd1d3df26fb781abd7346763c99b008e88868597569e6ec141b5c
SHA512 5499b84722c94c480878d42c3ddf9ffc840614df869588b9ed68546d6cf54c89036340887b76c31cc1b750cc08bd187251a8c23ab4a31b316829cdb7e7928fbb

C:\Program Files\Common Files\System\en-US\wab32res.dll.mui

MD5 1b8a3328815d5bca7a5a1d48f0bb05fa
SHA1 ac926b241d6888fa5ad5a511d1584c92092173d3
SHA256 34df8fef22f2eb6ea8620f0e224419b92a89519b2b18f53c09bef63071245363
SHA512 3511412f3920b249a8a4a8943030c424bdc32b9ab57472d3a3ad89226d8f0ccdc8f33b9d3f9e8a10b88008195c93729822f260a148e11fc5eff02c3d3ea5f863

C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui

MD5 5b2d42297fdb2586dc4417b2bbd52086
SHA1 42d765b28e8f1a0e379ebb63f93308ca3967fe63
SHA256 ebf69b56ae0e9018938d06354ec3f8dbee425805bb8ba8aa928c154c79132732
SHA512 4defeaf1fbec3de6e9d686aa256c361ce511420693a7be233a7b00407f1d6a725a0f7b9a487cc9dd049c73704596d32bd9f9a02c530bff4c8490308fe405fa5c

C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui

MD5 d98066e91866fc02546641dc46c1495d
SHA1 bd71ba7af2abf95d76e19f241c6fb876ab5464de
SHA256 0f2ec6c6fe23eec5fe52036be5a0427e67feca5cf14b8c302c5833e6bcf39262
SHA512 a0f5f72e8d614dfe50f376ce54fe46b3cc2ad0b6cbbe84f2801f2dd48668ac1912fdaf973b8a59515f776842a6c679c8e423e6b923dffcc5a55750cbc7dff839

C:\Program Files\Common Files\System\it-IT\wab32res.dll.mui

MD5 376c30f3f1620a88c563cdb84bf41e0c
SHA1 c7c9783aae38472585201ac969d7e05b8b6fbe2a
SHA256 de8c46ebea838894ba70cafc1a38cd223201383e503888d9c3b0d604a8e9b489
SHA512 7a1c5c645361a9f5a528c9ad6b483cceebebf0a30987f02178a105e361bdfe2d6a1775fa57da20c11f76d70d6e90bbb7f8a4c6e04b4742f26e1776d0cf0399f7

C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui

MD5 a29c9393dfa988d8825b80e200b6df5c
SHA1 6aae84ab0e67ca75c39124c24824d56ab0371895
SHA256 65094201038a9dc3727998588cb90441c4da6f059878b7a645983d35559c6276
SHA512 69c8cc1821ae4e95dfeeeab01d2c9b84dd7404d249a3d582a1ff3ab7d1486b1d39a95bba00ba18b0a44cc4447098714e1110a724621c52f8db7e2f607e9c983e

C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

MD5 8aeb521cab99bce5302bdf7dd9ec0b18
SHA1 d1cae2318d299d6501583ce505263236480e86e1
SHA256 82479a7c597227e9b4f1b1cfa5a1544f477490b60343f35a412cfcc8c7525390
SHA512 be197e3d52a9d45944263aa9b70c921abfbbeef9d79f006c2d0df862594e932b0597c47ae30ec7ad3cec187fda9ebda5612760244e1e86d4fdac10de98b1659c

C:\Program Files\Common Files\System\msadc\de-DE\msadcer.dll.mui

MD5 427118ff714003ec1e65c6e6bb69bbd9
SHA1 0b140a4c41a87be959171968ee041fd783d02ecd
SHA256 e06b8c539737abc4a182d6fe344ec9659ed8da640aca05e6db020ea95a2c2b52
SHA512 ce9b141f509f6f5d0aeb81c869ee90b7eaaa4dd13d38d2a3a4ad7ec4959b3e29f15b083164a00e210ff9cc6229da7a65edf737287584dfc73ef9cdd2aa388e93

C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui

MD5 24f13420496ee0a2664152a02695354d
SHA1 bb4d05e0abcc2cd7f39647247a5be720792383ab
SHA256 b7db2a06d138bee59545ac5ece3f905d80a027904801b14fae5ff54d5ff89b02
SHA512 022040f278a40e3a763297632e7925c08aa6cf2f4ac7bdd0c381020ae03de509dd75cc7a57710975838e91e9dc9674d4b9534f84eb3ef5a0dea5dd6605c402d5

C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui

MD5 f706e795254d4fb69acb31f9a4880e65
SHA1 fafef245d2bf0fb7f9b07d64e332040b0da826aa
SHA256 3784452adab80394c5b3f047a7488a5fc73293edf81b6e983b72538d1e540837
SHA512 adb0d6cea10f8720fdab91848351018309d3efb9c2691d2ec1f262d27988b1539cf96e8160a86131ca9a4f37163f9c3bacdbf0847542f704620ebe15ef7cea6f

C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

MD5 81abaadb9b3ce0b86a4636a2a3ac780d
SHA1 b1a71eb77b473274ce09d2add0ec0b84ce736fc7
SHA256 50d3376becb343b5911f439fca0352f0f46afa42069fec1c0617c6c7ec8b066d
SHA512 2f5084f1224913dd334f6e1d61a09ae82f6fc9ffc573ffbf9986fea20750b04957e73bc8b1b09248752099b2cd35cd9ca130bef46a428bcd0e5427f416bf822f

C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui

MD5 3f5a7079371b58df89afb11f566386ff
SHA1 31d5679d7a65a4c5c7649af8adbfa3d7907eabc0
SHA256 dc3ee42e24aa4fd9e4e846cc20b24add8bc5079aa8432e193ef5d7eaaf10abed
SHA512 aa83dcd629c9d2ada4d6266dbe1f8d5379bb615cb4994838de5a116f57939c4a51ce91362fed862e05f9da6356b4587c4dec5f546cf08d45f18c5cac3f5eec02

C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

MD5 0ab1d88b53a169efb7d5e676512352a9
SHA1 ea0e318ee629f2c18f7d239d1e40f6065e8454db
SHA256 de0eb3ec9e5b434baf6fd54c58b49084eb766df105fec80fd33fa07e2716c6d5
SHA512 88a45033bd2c60754d6eadada954fc2068d38753ecbf094b8a1f08e186c7da287e3be61a2a2aa0d70b9e6f1a2b8cb929e31a363e03faa0bc45c2f6559a7a246f

C:\Program Files\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

MD5 1836d427c6feddec98d17a22302c932f
SHA1 9e81faa573e050f0a57f9fd86e2e8195b00722af
SHA256 ab096bf3db133afa96b4c83bac0ec5bc4a52ca89e7f3b6847589bbd3fdb0ee1e
SHA512 ffe9ec9e991ae43aec26041ca76c500c7d3df0ba29a2d905cf0fee70a2732deb506c17f1fbdd2318c846b26000d39d2ae3ac69e13e4b8109e0f41222a0643fbb

C:\Program Files\Common Files\System\msadc\it-IT\msadcer.dll.mui

MD5 2d359883fe8f8b99daaaca26bc25744c
SHA1 3238f36b31c41a1147b4ee08e90a8d5971fb4cf3
SHA256 1f4c145b417e91f7592cf12e614e67b29171b6f487fb602d0c4fe80696283525
SHA512 3a045b7fd6165207267ba2c6fb071f33b7b626a785d1923596a2959198e7caf224d6b9c4dc4d207cf7c409f9610efe71c5df6e63942a3d1c313546fd6c7375cb

C:\Program Files\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

MD5 fdf058771580df146324fdf781dea053
SHA1 2a339612df08147680c5bbbf378b2d342d0baf83
SHA256 c08eeb0cbae10e840f7a0d25cb3e2787541b0f99335046d3e7159113d1fab2d5
SHA512 d2de7feb971fbfaab72621e48481c0e520f4411e581ffc0ca34d975dbeac1d6eff670965c4c2851d65c0f54165c963b965c3b333a749ecd71671abe7d09e28ba

C:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui

MD5 1a8f5a1a191f79a8ae4b203980f2fd1f
SHA1 21c16bedfda14d649bc10a7c8999bbb896ed4bff
SHA256 5769a18c93bf4a5ea466fe33331c675f748f5f4014f248a26cbb6c4095854807
SHA512 2b3e7477b85e8005db7ba89df15c2b9704bcb5f164976e05699f15a7d5b582b6d1caa5df6e69608316889974ca965f23cace364ce84435fcc3d0a08af178cd07

C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

MD5 51573d9a3250ba2ca7095402e914a528
SHA1 83e7c057d5442ed856d6a1dc05d8df3603518373
SHA256 bfe0811b612655d5ed41cc7c7bb45cc9dd95774435821740b72f454a8b14f99d
SHA512 cb88c018193800dd47f52f9c16205fc0aaad09ccc6bdc85746301c72bf667a4346ffedb4da685364e8bb3d12a17d0e09927f4b9b6a19edad2cbbb784669d2f7c

C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

MD5 835c167b0f2aa2be5dddda952c37766a
SHA1 0f7419d659e4f00499a360e6d7883bb3d7c71a42
SHA256 d9d593a84dbb95308c4715e074dabefc86ee536b00b36d74ba1639da71e298dc
SHA512 a65f1b53f8f3212671d25a204bc1e50cb33fc6826f4a03edce05179c63cd57952b22e2a2c3bfc4965c0bb7e5f1a26ac0fcbe479dc49cd6f2c70f7592b30b5821

C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

MD5 63e46dcbb64f46faa7e4693a7d4e5d59
SHA1 a6bb9b05202290e3b81ff37bcabbac7f68cc0b96
SHA256 9347fae8821206c8a61aa469a04a84e729bb2872fb66ad42b89dbaf558606a17
SHA512 185920965ad47cbfbde399b8f4d91b26c31219d9d4af06ce854d9fcbf80dacaaa1c21bd76919cd6db65544a5f8007a35262e5cb85eee02bd4df986e08887991e

C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

MD5 673b31311503f2ae771e96d499bf8a09
SHA1 cfe3872548a6e4ce422dcd2f54580e1931d79625
SHA256 3c67bbba45f49bb8975c45dc558b287964a245b3d031c37e3d548d4526eebdc8
SHA512 1fa53f06bcee912d23c781e49849a407b6b596b429adcf2545f1335839979ededb5005322c0d2b60354f3696083efe15164badbadb40209167e5a2ef7c69ec74

C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui

MD5 cf0217c3d9c512d7fae63c56ed4ac6eb
SHA1 ba2cbea413ba64c2ff8f252e7b2e035301642990
SHA256 7f5b387665e9b1e563ec2ebc26a6ffc884d5f5d90d772c3755d414447f62c5d2
SHA512 d08e986d20bd1755f9f5954475b7b937120d5d069dea541d6352698a841246ec63c9603d97f3672368544bea6c5346c0b7688f12f6f00d0e6ab9217e81f10f55

C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui

MD5 0fd5498db6e6fd80cfc5a92d2c24989e
SHA1 2269821be47bfa44eca7c220b0f116ae0c561c5e
SHA256 d70fb6def949356e27f61dec5743f58c0618170ce20020d9a08f9b9c02860c4b
SHA512 a74d448aa9e5e12391398a9c98708b3d9abafb1f0f0324b961b9f10febdce336f8104f86a07d4253f28a0c1de878e4a4e8559a45e08066b843d3dbc9b9cfec81

C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui

MD5 453e0599c2687cc5512ce3ffe2b5e274
SHA1 01c13ca35a07c058df2ca325f0291f6f6fd61204
SHA256 fda43ea17e7701548d46a06bf161727d453ad15498b81d07475dc63f4c3a3ba6
SHA512 5cd12aaa4f78e960e0793ed007ea8f06ea1365e7f01eb8847fb67d21d8e12247b902cb1c899201169f6c9ec261b7a12dd2f3ed96f0b581c9df9e3940daec4e2a

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipTsf.dll.mui

MD5 ec0538bdc8e0d97579a20372d965a81e
SHA1 5471e81a5b694741f7fbe72f7486f75f653e2493
SHA256 89837b8514a70747c8723edc89983766cad28a1814f966eea54b78f6b3890cfd
SHA512 aa391074d27574b1e99d4d803188bda1d6c97295702d95fe449aaecd4087591dfeb43e01fdc3485298122288e313b7ce379762ec7a052886c6806e15ff3d1769

C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipRes.dll.mui

MD5 7ffb7866644fba7d6f402e185373794a
SHA1 45dea2c4e127f0698e4e0c9b8d3fb0c18cc560f2
SHA256 41d93d7f436a0a0c13dee3dd0de34be8e7a2c51ea03334b7e31a7d89294e1b58
SHA512 f00682a629a8f4fbbf196b3c726d81c201f1d843a28571d6480ceb7b2ff09633e248a9a2987a30fe2b99f3b73cd327a3f328ed2d3323d7d1c3b7542d0d13a149

C:\Program Files\Common Files\System\ado\ja-JP\msader15.dll.mui

MD5 42dc2be02799969b5184d6651a240873
SHA1 282a86bd7f464af3b26976507f5ed8244366b24a
SHA256 80711ada442bd0c5dabd57a70064a82e7fa05bec9e2e40a312b66fb257b3e6aa
SHA512 0ed5870c737e41f8d61ec3dd64ace34c1accf7db0439a3db7f89523e41ebcd2e8f8503567b23a5c5c1d76e8ed4d536932346e7cbea0de07dc887d3bcc84265a3

C:\Program Files\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

MD5 c06fa9db0db63d10ee014ececa65af76
SHA1 492e8619283511c76571804b2bcb15aa19ed28e9
SHA256 ac920cab307983dc80b19ce6848ab027829645075420ff55524f550a65a9ba20
SHA512 188d81b87a4c6732742d0a340e0deccc1703763d61ee62be73d4550b39291968caa0ec41fc5fae3df55ef272adc8772e992f51329f1eafc3e88d1482a0cc7978

C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

MD5 cf251d1ce75e3f8bcf7c2d98caf7d0cf
SHA1 05f5a5552b47b166c34b8336d865f4fe56f5d39e
SHA256 6e8514924ea6e430cea8c4fa4f1ab6384856b02c928f4b9aec2d2163f90f431c
SHA512 96f227c7dc29869d27b7cbf7395eefa15dd095a112e49982aaaa18c692c16c2d0bf6a43a71340ed0109743b681ee61541f895dbe2dd1c480528b0600492de935

C:\Program Files\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

MD5 fdd256d01f1eee1f64dfdb94c330bc8a
SHA1 fdb1505d2f3d8fdc429986724edcc4d6d7bf362a
SHA256 7c4570bbc7b76f330108e2f1b92104e4fc845a6f00c9ed2914ff673e8e5fe2ee
SHA512 5c9373b9a61b4289333bb76f360c9c51f8d8dcb8ee0b8b488ece6537f03ba84cc710b7fb39a7c9512eb4d32b4acf22998f4cd705dde36824da7567a19a3ff844

C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

MD5 2e76f3c93a1dd2b82bc13a8af6a85718
SHA1 cf87137c89d4ebccdc3712256d1ea57737577d7e
SHA256 73e79bf2db970d65071e458efd79cc3ee85354d91fbb5dbc3a6cad1084bff68f
SHA512 6b0ef52da5e33f8082a48e1747f15cda410d9a2547d57c6649579575c9be3a43b7f007013830a4473c78b29e0f846b8fd8d5b425ac6e46b16049cdf81dd7c2f1

C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

MD5 ff3871ca74bac7e0a442cb09cad574ee
SHA1 132dc3144cd8386bcb1645dcfa4328f536764b44
SHA256 982310721e963867005d2e3c9ff5197c6ff1a48fea2bbc0d541f4e8cb6c2fa7e
SHA512 93076d3c2fea629bbcb19b5c41514c229816d19cc1b0a889bbe2708f5453b5d277f98d6515d055b707ba5ed727b30f094096dc9442c4f8694bf2507888c8270a

C:\Program Files\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

MD5 3fbf8f88efbfa88bec8788e144fe120f
SHA1 fe0c68fc7bba064c2c9360f4ece4eabbfe1298c6
SHA256 2d3588f5e17fc8fea2edffded6f3e0686d577232a251e0a9c024a1c70fcd2efa
SHA512 237b96c080004e5e2fb578bcbe8885840ebea1be2c241fcd88bd14319ce1dd4938221a81672da3869a231cd221fb07559488274cc5f0926befa4af8ee62597a9

C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

MD5 4fa5cece76b4575b1f5279425433ad9a
SHA1 eeb4eb1470a319c0320fdd1de9e932adcad11ae8
SHA256 65ac959730192f310cfd8bb54aa8d6c570efb4aaa64c2545f3b14c6d96de63c1
SHA512 5b19adc61ff11abc6847e35e5d645a48a409ed4bac5e2ffe069503248f45e3258b2e3e70d39e2973efbdf35ee8171c17a0601ca65c835ed462367255123cec91

C:\Program Files\Common Files\System\uk-UA\wab32res.dll.mui

MD5 46d414e0570e1d830fd6b53831a4d3f0
SHA1 d344fe21242c984473f794e3ec468ffd41576980
SHA256 404e028831f18098f5a3e55cdb3d56d4fb01190132f8dbff87e5ff4b53acd638
SHA512 56959e32ba5263413497ebdf9d2eb2e29a41c9e43f251f97cc3829ab740b362f3dfaae956d5daace3575e135c3d382950a97a84fe086050f842bbdf6208005b6

C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipTsf.dll.mui

MD5 c43c73a5e0c3a8c59407788ccfde2469
SHA1 ae3672e7792d23ec988eaec5b72a66d65015afb4
SHA256 a8e145b84374b2f03da921a2e31729e23873dcfbcd6c51afaba51dc60288dff4
SHA512 bec2ddbf0d5ec41e90e06219c24bd83093e2a44f72ea920053ff1f6404dc6582832d5c8eb281efaf3d152ca51244b78c39261e912a19654a0c004e13693e8e07

C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipRes.dll.mui

MD5 05f247869be112e912e6d8e78dee695e
SHA1 4d3d733faea7b63aa36180da2dadd90fd254f185
SHA256 679f6e38298801dbd0a0dbc8e923df3b786899664d86bc12ad0a005b204ebac4
SHA512 5ab83fb5702d710ef381766e44e1632d55ef7e06ef7573a18713969d12ee99a3ac15b9f394242fbe4f21c7ad208ae3966ea8dfecb9440d19a01996d4d7ebd92b

C:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui

MD5 b436b12fa7767c21249084c3284eac19
SHA1 ce9add487da68c57d16cf7e850cb0d17fcf7f049
SHA256 9c498befa90942a9847fa054d42769ffc9ccb2b65d63127d79069b20b732d620
SHA512 cbc3e8276296bb4c5124710103cecaaba02b80bf421b28a7cc8927922e3db2261d844ccf87279b560302631e2e516a1c79c4419b5f5c623f13c0fadea5ce712b

C:\Program Files\Common Files\microsoft shared\ink\it-IT\InkObj.dll.mui

MD5 9df552c75c1d9eddebd68a15b7d58ac1
SHA1 a46f8514640f4958a3b514993fc71f7e1f558bbe
SHA256 9f0a04612d69af4f9e9bc30a7dc47fcace026242b7053617ef1b1dd3c312d82b
SHA512 68b197c512a590c4319165a5f03ecfb5fdc445dac95c5a4be96902bef5ae5c6d3b5db71af78244eb8091117a79fa2a60eef25db4d3dbaeaee9c0197cd6da7156

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipTsf.dll.mui

MD5 b3138a0e0f04d7b0a507f7faf8d960a3
SHA1 8b8b3c9bc73fe8710a35e0e580d7d06dbc803798
SHA256 3d1971bfc8131df5fa0e17bffa5a78f6b229f7b580da659c708c21110822839b
SHA512 7c8fc9c6f12a9f04a623331dc76a8ae1b24f3e7a0acf89ca79723d8a0cb6d70f123270fafdba6c204273e2615b6b393095adec1a8404ffd3a78cd5b8f9f38123

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipRes.dll.mui

MD5 7d0d81a004328c3db9aa52d531d29bda
SHA1 d0119125e171693425a8a241c65661559c49268a
SHA256 880da0b15ea3e08cbc4193db1a5ab8d52f42a8d704bec7a003c8e9826d00bb9c
SHA512 62a71da131fe0521e4d6292a8d9b94779915b1e98b3b68714df1b62b1293e1a9b583707af27288fcad90ea4cc596d09b370c9a364610cb779da7de002224b863

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\rtscom.dll.mui

MD5 eb902bdc79d470913159cf37f85e158d
SHA1 4e8f59d2f77b0962e6ba2b6920920c395f6216f7
SHA256 7e7c283a365b5ad12e73066451964ba5f336d013a683d36637a838799c42b8f9
SHA512 f6ce66123738e9a82f7747313d18006f8ba6987c7e5b2207e6672fef93eac62f51b66d02e19c7bf2ed4bdfa5da90e29859a75db1009bcccfcfb99a0d0d17c009

C:\Program Files\Common Files\microsoft shared\ink\ja-JP\InkObj.dll.mui

MD5 aadf1328bb632f02359c6693c01f36bd
SHA1 230d0a4f5c3b0f4c6307d534bba1203022593965
SHA256 9707def25f14a2344130687a387e53c0e1674376e51d461bf283d685c44e9142
SHA512 6c3d46b6c9366cf0f0efd71cfc9a6b77ba25f8c3725d5b1806d7481d434c6aacce8ab0ef58a80eefc504047c9112765dd0a02e1aad576f75b183401b66ba7597

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\InkObj.dll.mui

MD5 cb5ff7224507319c0819cdf6465fd848
SHA1 015a69f5a2f34fcd99719549e191f6ad921720d3
SHA256 49044fb61e19436207a2b788adf2c380bbf29f2f23d08944e9323b495b74e1dd
SHA512 fa6de14def67928a71225a9e8a1cca709287d92c6af64a1e704cb7ef0a52b73adf81dae02a9070a56cb140808c31b436dc4e51b25e2ccd0cf7e6f8af01cd1e17

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\rtscom.dll.mui

MD5 10c1c752df6a2afa51511132c473a728
SHA1 35f39a75c34181648c4817d07ec0edcf7723a019
SHA256 f68e776cabb10cc913dd2ca6df46faf99ef6cc2ce4b78011db83ed7002b8e2aa
SHA512 de57b250f1ed55cab94b4052355672ebd569bb34234aa61c1d6c27d1cb1bd30a089e21983631b7574ca99764d4af15f8ba653510cd124454bc6bf583edb1bdd0

C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui

MD5 de240f2cb19735c57881122efc325e8e
SHA1 5a2b016d698eb8429da0ba59a88ac4bf1dcab23e
SHA256 aa21803418c18204a513c095934e171bbd693e5acaacc67402c286047d66e355
SHA512 33f09494d7fe7583e990513069662c255eeecf3c0e2646330deb76a583c881874b940852934c72d0ec70d8cfe1c0f609f1c90533a2df5b106ed41cab232982cc

C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui

MD5 f531621577e41b71ad4d3205a82aa5bb
SHA1 4ac8756fb2314725ce0b5b36daee508b81e12bce
SHA256 149cea8ea9636b04027354a660f6cab6c254ae73400304f7f00c3ae3299f53cf
SHA512 ffe7d482e125984db2385582a4acec7c2086ab3735e8bb17f9f83acfa55b5dd7f30e2146e5136d4d7778d1e9d6754d85eba1c62c6bfcce99ddb0a4c0cf5da744

C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui

MD5 d8919e7c88c81d18c8e37afe4db475d2
SHA1 e697a95da43a7d92007cd281b52521d69ecc62fc
SHA256 f11046cee336a211f438eb09d585784c1f8f0d4c7476868f2049db54a46966cf
SHA512 15ed5ed82da97f224e5ce9139b2eb955a89d7aadd72bdf5410a21702d6e4e6b0ed7375495e059c60b4805a2deca9f7b536bcc8d3be8f103e33a5a5b738f15cf9

C:\Program Files\Common Files\microsoft shared\ink\de-DE\rtscom.dll.mui

MD5 d104db82ad584a94a2d0e17a831533a7
SHA1 5f09eb25da60234e9af63faebd5f88527f99dcf3
SHA256 025ed18ef2cdf1cf6a92ac12d78949371b63e39b7c2a252ed345b7ef86510a8a
SHA512 4d5789b168b666ff862f622a32543d75661a3f5b82525fa1e501d13ba12d8f96bc0bd59fe1f046ffa4b87a180fc2fba61c570c1059a65031cc88efe7117a30a2

C:\Program Files\Common Files\microsoft shared\ink\de-DE\InkObj.dll.mui

MD5 34d388f157ad8fc2ca74148979ba2f90
SHA1 eefbd7ade8f8c59a85b724963ba77276b8d45d9b
SHA256 a91d2b698a5119bd1389a4961ae66599260164f105f776dae6bc334ebba18602
SHA512 c5993a8c8fe21a88bba26d0455516c7ba155cb1f193a24e3670d74138eadd5503da4968957c35941576010930b8620056b7ad37b759a1049f93a5ebbee25fe32

C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui

MD5 1120cc3c2aeb54bc2df89a09e99a3273
SHA1 697f775e6aa17316d1c68a10e9dce8472bf4cff5
SHA256 b513c21d3031f266cd6dc1e531010638a10c8bd0bc5bee58bf7133b7f06de415
SHA512 aefa3c6981bd9001a32200445513e8a3d7ca8cf8aa5b75c8f619cbd16ff008be573812684632ddd1580e6935d72c25c806ba6dd307ba3b420b26293f89da8ea8

C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipRes.dll.mui

MD5 6d814f392da78b816c9a6ea63bbaa66d
SHA1 cee6502298e1c39ef6e23fa1f5f61a11c24c1455
SHA256 4860828a694ea1c20d92b96e9893ebf71d7cc888eebd83777637cd2a463e671e
SHA512 5b5a273e7f928eebe51a08e855b9ac0ba98f7507e9e98733d757c2402b19f2d57b2175ed60bd041bb416687ffebb738c53f6a01c5b726c1edf977ee5f6b58636

C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipTsf.dll.mui

MD5 a1b0efa7204561e32ce04eea0b54f40e
SHA1 97318342015ed779b20cd0113f30a7f8749cab5e
SHA256 2f9701f4a543db11dcdb9669b0101f14318725724f49b234fe55a841b68d6c0a
SHA512 1b1d82d6446dfa16f3c40986d2626a9cfcc39b50161dd1fbbba9836580d828bd9bcb814e7b06e0da597c184408e36dd21748fcb5b641f373810f9fef0d97d7f6

C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui

MD5 5f017200504ebf43f629f8c163ae1033
SHA1 5b460b17e42a8be2de4f49a3b94c59b71ddb35f0
SHA256 08a35d85a4302a11220481bd4a059f79098eb5e4bb03923d90df0ba3ac5ba8fb
SHA512 24a1482d9f350013f8d087f6394791c1a6a046ff72658c70e6c1481e13e2343ac5c3e2b6736348000a26e42cc96fa1dfab29a82885272afd64f5ba55e71bfc41

C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipTsf.dll.mui

MD5 5225e7f810c31a2ee1f95d44c61cf25e
SHA1 eb192d353c5622e40b5f2a6c62f397e14d30318a
SHA256 e5e3fe7b79988ceb03419efecef50f64a02fb1eb58b203aeb94b8509c44012fe
SHA512 da0ff069c6e88024078ab3efe5bd44e980c7f6d214c4cf05a632262f5c50e7f61617553e082944021491e2b685f24fb913e1c52da214244f631717d59ea3b00f

C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipRes.dll.mui

MD5 8d255bff14f104c3448e9d061be8b535
SHA1 06751f54c2b0dabe54c05199a11c736a9dd80a36
SHA256 460d9a2ed43c7a75312c05ae415abd0c700ea5dc36817ac4e7252b9cb19551a6
SHA512 a3b4f1bfb5500eb75697d323f1475685c0865d5c6454eaa79d91347deb0f7a29ab63f1edcf747a027f357ca55edce4db040785671beb7ba6327a468b9f717f0f

C:\Program Files\Common Files\microsoft shared\ink\es-ES\rtscom.dll.mui

MD5 797788098a5f572fcd240a10853ca258
SHA1 97c190e76e1c41c1d97f944a82eff865f20bbffd
SHA256 b998bb82165af7416e158691a5da35d260d84206e02540df186487789e4f3618
SHA512 b391c68b1b25acbd08d05e61f9491d8b888152dc1f924435e59edb766a98be52059d5b8c72d3c2342b88e303fdd508523d0c89b97c770d866fbd9cfcb2e1b16a

C:\Program Files\Common Files\microsoft shared\ink\es-ES\InkObj.dll.mui

MD5 9f6f029a43e3f9c9042c573ec1ebe6d9
SHA1 2df8d86a38a169df06871eadef7605cc91ad3c98
SHA256 c337ec58b01f5b0c6f02842c62ac6c5ea848065392ae905a7119819f1c0aadd3
SHA512 be4f11eedf2e2ff8291646399f1100409ce5cd7a2e1446d0a6a5c437d4fc62730404c8ef467423e305041ca35f3837919a91c6b94c88898ac0291d41c853a405

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipTsf.dll.mui

MD5 f1dbefe586980c09472ef00d94ba37a5
SHA1 ac790e6d4cc6899c3896d1961b5ebcd4a64cce81
SHA256 76ec1a20940e791c42787c349621b843dd7eb6373fa92115e0ef71c3fd823e14
SHA512 451632bff6941c8a1f239f6a8f7906f41232cb518b95803b0f5c3f6e4939f6c2e5121b096ab9529668840d532bf5e579d862358cadfbaa5951deac8c5a500bec

C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipRes.dll.mui

MD5 35b73b5f58e5300ef6cf80533298ecbb
SHA1 035366f02444a262995ce7a6c337391a3d4c4e1a
SHA256 64c6bfc9f248d4107dfad9a3f901f0b13dde7906788f3d846b9921bd68f0ed0c
SHA512 a280e361853b2d724c9cc19e0bc3b293fbd8ac32d4ed287ed9c601dc391a296f744f9f3f058c7ca84df8b2928af6b5aff02e268e07d17b3ce3e0254e72695835

C:\ProgramData\1E41.tmp

MD5 294e9f64cb1642dd89229fff0592856b
SHA1 97b148c27f3da29ba7b18d6aee8a0db9102f47c9
SHA256 917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2
SHA512 b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf

memory/1300-20128-0x000000007FDF0000-0x000000007FDF1000-memory.dmp

memory/1300-20127-0x000000007FE50000-0x000000007FE51000-memory.dmp

memory/1300-20126-0x0000000002580000-0x0000000002590000-memory.dmp

memory/1300-20125-0x0000000002580000-0x0000000002590000-memory.dmp

memory/1300-20124-0x000000007FE70000-0x000000007FE71000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD

MD5 a07cf35178976de6a1a03172bfebd43d
SHA1 16a8796349ad189a084171c7a12745fcfd2efff9
SHA256 d40a851b6679d721ee918432862da135e80563cbe4415f036d0f98d0d7f7e7b1
SHA512 a1758c17b640a2431bd101a49e826edfc4f03930d0679f8764a6b2350397ffee10be2a9a53b61f0658de335efc0e05aa5e0f09992789b28d4e91bf0c02f23604

memory/1300-20158-0x000000007FE30000-0x000000007FE31000-memory.dmp

memory/1300-20157-0x000000007FE10000-0x000000007FE11000-memory.dmp