0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
122s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14-11-2024 13:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CC3B1F89FAA517E4.exe
Size

137KB
MD5

4aed4c0e78d355e497f2cc509ff078b5
SHA1

31a2ccfd5a679d2badc5fb66f243d4887d9ca444
SHA256

ed4e298040946a3be24dcde8303216644c2d2b78444bb1c9bfc7d17c748aeaa5
SHA512

bb251af369bd2662caef94ee96147439a75307dbfc30e2b2a63fad75af597e7981c41daec8cedb4326fb0243abbce2b681153380ccec79a38095022b85d4a804
SSDEEP

3072:CLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hv2bIoKb:CstYrEMw6Bxk5zOFNtgJSCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: CC3B1F89FAA517E4

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11259) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

CC3B1F89FAA517E4.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Control Panel\International\Geo\Nation	CC3B1F89FAA517E4.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

CC3B1F89FAA517E4.exe

description ioc process

File opened (read-only) \??\F: CC3B1F89FAA517E4.exe
File opened (read-only) \??\D: CC3B1F89FAA517E4.exe

description	ioc	process
File opened (read-only)	\??\F:	CC3B1F89FAA517E4.exe
File opened (read-only)	\??\D:	CC3B1F89FAA517E4.exe

Drops file in Program Files directory 64 IoCs

Processes:

CC3B1F89FAA517E4.exe

description	ioc	process
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\he-il\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pt-br\PlayStore_icon.svg.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\ScreenSketchSquare71x71Logo.scale-125_contrast-white.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-72_altform-unplated.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSIPC\msipc.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\BeLike.ps1.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice-install.log.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_2019.430.2026.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\jdk\dom.md	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL022.XML	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\ar-ae\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_neutral_split.scale-100_8wekyb3d8bbwe\images\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\nb-no\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Buffers.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\jvm.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-100.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-80_contrast-white.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\es\Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\WideTile.scale-125_contrast-white.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\uk-ua\ui-strings.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-ppd.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.scale-100.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Yahoo-Light.scale-200.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\msadc\en-US\msaddsr.dll.mui	CC3B1F89FAA517E4.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Resources\RetailDemo\strings\en-us\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\offsym.ttf	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Scientific.targetsize-24_contrast-white.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.NameResolution.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxWideTile.scale-100.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\sk-SK\View3d\3DViewerProductDescription-universal.xml	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_download_18.svg	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\System.ComponentModel.EventBasedAsync.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\avutil-56_ms.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteNewNoteSmallTile.scale-150.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-180.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-72_altform-unplated.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000042\assets\assets\images\assets_picker-account-addPerson-48.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\iw_get.svg.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ICE\PREVIEW.GIF	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\7-Zip\History.txt.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-ppd.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Grace-ul-oob.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Assets\WideTile.scale-200_contrast-white.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ucrtbase.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.scale-200.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\zip.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\tr-tr\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\7-Zip\Lang\mr.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\resources.pri	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-32.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-black\WideTile.scale-125_contrast-black.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\zh-tw\ui-strings.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\Background_Safety_NoObjects.jpg	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\en-gb\ui-strings.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-ppd.xrm-ms.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\close_dark.svg.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\nl-nl\ui-strings.js	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosLogoExtensions.targetsize-24.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Common Files\System\msadc\ja-JP\msdaremr.dll.mui	CC3B1F89FAA517E4.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

CC3B1F89FAA517E4.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CC3B1F89FAA517E4.exe
Interacts with shadow copies 3 TTPs 2 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Direct Volume Access
T1006

Processes:

vssadmin.exevssadmin.exe

pid process

5008 vssadmin.exe
3992 vssadmin.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CC3B1F89FAA517E4.exe

pid	process
5008	vssadmin.exe
3992	vssadmin.exe

Modifies registry class 1 IoCs

Processes:

StartMenuExperienceHost.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

CC3B1F89FAA517E4.exe

pid	process
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe
1560	CC3B1F89FAA517E4.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

Processes:

CC3B1F89FAA517E4.exevssvc.exe

description	pid	process
Token: SeDebugPrivilege	1560	CC3B1F89FAA517E4.exe
Token: SeRestorePrivilege	1560	CC3B1F89FAA517E4.exe
Token: SeBackupPrivilege	1560	CC3B1F89FAA517E4.exe
Token: SeTakeOwnershipPrivilege	1560	CC3B1F89FAA517E4.exe
Token: SeAuditPrivilege	1560	CC3B1F89FAA517E4.exe
Token: SeSecurityPrivilege	1560	CC3B1F89FAA517E4.exe
Token: SeIncBasePriorityPrivilege	1560	CC3B1F89FAA517E4.exe
Token: SeBackupPrivilege	1476	vssvc.exe
Token: SeRestorePrivilege	1476	vssvc.exe
Token: SeAuditPrivilege	1476	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

StartMenuExperienceHost.exe

pid process

2632 StartMenuExperienceHost.exe

pid	process
2632	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

CC3B1F89FAA517E4.execmd.execmd.exe

description	pid	process	target process
PID 1560 wrote to memory of 3992	1560	CC3B1F89FAA517E4.exe	cmd.exe
PID 1560 wrote to memory of 3992	1560	CC3B1F89FAA517E4.exe	cmd.exe
PID 3992 wrote to memory of 5008	3992	cmd.exe	vssadmin.exe
PID 3992 wrote to memory of 5008	3992	cmd.exe	vssadmin.exe
PID 1560 wrote to memory of 3504	1560	CC3B1F89FAA517E4.exe	cmd.exe
PID 1560 wrote to memory of 3504	1560	CC3B1F89FAA517E4.exe	cmd.exe
PID 3504 wrote to memory of 3992	3504	cmd.exe	vssadmin.exe
PID 3504 wrote to memory of 3992	3504	cmd.exe	vssadmin.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\CC3B1F89FAA517E4.exe
"C:\Users\Admin\AppData\Local\Temp\CC3B1F89FAA517E4.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1560
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3992
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:5008
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3504
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3992

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1476

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:4828

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:2360

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2632

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
024adacc7d0007af005e256fbe4603d1

SHA1
b9437e7f2784a1cfe3695de2454589d2ea2ac04e

SHA256
bfba9c2093646e7fc3726af0db4e5b9440c89aefa96eaf371c8db1d7779edb12

SHA512
a9c2bba86713e5150158bf75c583b5c4d4e8069df5d88f26152d27c6c4e962c9351f58cf53189d5d577ae3c80ee5f734531fa4e6694674fb77dc61a7d2aa2886

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
ec951328466d081bad62219cba4de34a

SHA1
47cfd31e981b74672eff77466397062049a16169

SHA256
d98e0570c247e865bcabff637bcec5cf66f13d9e526f3281847a8c065072a6a0

SHA512
8cf5d963d59f9b1fc0402eb7f5c38fc7ddaf7e29c1acafc46218d385423be0747433252216a504d26edcbf20d5f80d9b76003647651f5bb62358675dc3b2a839

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
45b165fd67b554ad1e1cb5fc9ebe4cca

SHA1
b69a93c8edd6b88eb0e54c1e31903678277fc7ab

SHA256
d547373424c3d3149bea31ac5aa716526948cd24752d3379a9926ac54ee683a0

SHA512
d36a17aebe38daf3b519bdab6645073c1017f7ff5d14b747c13182b80d5c6c7132af8ceeadc22015497a22f2ea5cf7fdf970a46cc01706ca4df7031014f8fbf9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
e7fb59ba103cbf39827444038fecfdb4

SHA1
f64fb098e642d076fc5aada423eb61813a294419

SHA256
29217b3478477826538cde75a88fc9be94f73e834071715228f0277a8c857536

SHA512
5e6a4170b980765ac5df1a972b265db19f2113b10eaed018827e3316d2c6c27cd55c68990aa3cb1e4c37af986a5e24c889a72d6664e05c6a8719e766e8f36b46

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
eef8ed96c6bee2f85394c824bed6cbc8

SHA1
e8a24d62aa7c34163edd6c80d0b7bc43cddc8b52

SHA256
4491f7eb3a9d114420f270a8230aa5ed5c21cb7014b3bfc9160d843972ee14ba

SHA512
c6330e5a3eb1fdb415011c3e11a5ff6e15f8e526cf7cdb3d9553f75db1a2b44a04b98335ee0f4fd5d589d9adb440b35843e0081e38a94aa4c982ccf52d27726e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
d846da058b70eb57536ea2c2b146cf20

SHA1
6a339f08b83b3a9a20ce854e7d844a2bad566d91

SHA256
7db91bf80c213ef84f1156187c3baeac5a9a48cf77ee375486a724807f4a9434

SHA512
9b80f6224642e475eca61d0966de98dc59237c4b0107a127efb6474733aad422dd8caa58fdaa2708685ca5985e57ed54f2d2644495276ca7fdf631d1931d67bf

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
ab15814ec1369b31552f11b1a595bd39

SHA1
cac21401b5e5edb8ea029c97149c889e9faea8d6

SHA256
16e159f84f52ab00e7e911022b37149793f612a17435606e0bdd42a50d33a2a3

SHA512
498688524b5ddcd129d3b2f586b40ba7e8abb67260d422e22012709b9e50a0600ec8e62e5cb20274927597cf4cde82c66fa9754a0dff44e6f62a4e30e4a53e3c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
2b1219df1f7a08fce029452307070b81

SHA1
94b4571f49df9f6fcceddf467019fce772e779e4

SHA256
13983c296dfbadf0cbf6ff51de878a836cb6445c27e7016b94152532b2f6dd65

SHA512
49a35e27077e41ae565bde890b77c96abfa23b9eff5e43f8a27dc4335c986cfa07473c12b8253ec841e15a547703995e2c34ba07d627fc4220a29f1f933d1170

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
c110db3e4eb1e072edf5f895606eb278

SHA1
c4f55f85668f0b92476c7a563d9da26fc8d82bb3

SHA256
def3d5bd7bb27bff9dd9805c0e222aacb773112096d45099ba0b7df0275eb831

SHA512
1c1fe2b9ff727cd94ad2bb439f166421283c82b03d333277a52ee726b99abd9e39c347eb011da08e856d0db99669129fcf65f7d61bf2706add2509d16e7d952b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
8237de8a4441dda60f1fe88d52203389

SHA1
9c387a1e320d238771558729e1a2cc07a4a23219

SHA256
b0a664e1c7dd5bb3f47cd075b88cfaa5ca0cc131f59cd492adaccfcfb49816f6

SHA512
272c1a55c08c0985f81e3c8da0b84d41808dca7ac88a3e0f6d55684925865f45ab392cf831ca0fb64083fd28391eb0fe569c41d00cc380775a89acc51a1c2dc9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
576db7e5abda0a40e8fbe26d01f47018

SHA1
2feba4fc9c4bf459568dd0933b602fd629391685

SHA256
a8cecd9e028f8526569406d508a5044bf7cfebf753e2776a8ff45ba533d82b45

SHA512
240d1de308c57531aa0281009df8568effe47ec254e5eccb79000bff53448fc3c942ba6c9bb08b537baabd16ac53d6dbcba4daf2fb34b2e7f4bac78b1c40bb16

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
1ad806fe14d8fcca312b29214e87afaa

SHA1
8018618cb38b37c324ee72dbb18d3da508740681

SHA256
e5f8a24e5c8f1a5c4b7fb9be2c8a14f64709483e1e86677726aa8f5dc78bef89

SHA512
bda7260e168529b23ddb5e3fb7e926d6e5443261ad7aa2e483d2e4e57c0ae01c289c4437b0f315e7956ff0b50ec424ea178278185de50828c2f013a64d9edcec

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
5aac12c682e1bc4116396cb8c7adf96c

SHA1
ac82b6d400d45636d7fa0643a6b89f72999a8e3e

SHA256
3b4b618f44d5c4865cf53939aa72bba7657e7dce5a8c4d5d259c9c31320bc4e4

SHA512
641772e251d9624a3edd2b278b9c3ba83d4dbfac29569806363f716f9a3a0186212802149140af23c2dee1b6eecdd771e60deaea191b252cffd4d78b0d91a10f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
607852a39f9ac65c8f9fda1c3df0b819

SHA1
7cf3cca0cd7fc40725a5d6a869774646cf843e1e

SHA256
dd5f2790a64b2ff0fae02c54c0408aeec21e462f6349bbcbe8c744bff1b00f20

SHA512
7dc73a6cfe87de7365ab42598444e6fe94c476262fc97215492ddc738140c432a55ad57064cf7864ca28f9df803a8a4238b3c870026d61c8d08fa2c818b00df6

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
473e53c7744966274a1940d27cc97c38

SHA1
2189db090a42a2bcb541d8a9e1ee89519966c6a7

SHA256
6c26e0fc9ef3072192fde0bfe0f8a459c6dea4a746175fbbe4d76bb845c3a9c6

SHA512
07bcc76653447aeef9141dee3ca8680a32c3c1a00041356c7411524069e73b64ef6e3dee14b7903e503962a998a1ad7d94924317a9a4253d4b9b93acfc05963d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
00f0378ab2cc5b3dc94f146c170d1f91

SHA1
19d71792e9b6778586beee711cfd7ab16739ca6c

SHA256
dd59a1c56d7d0d468a053b12e63e2ec349be5231d984445faa608ca865d95d1a

SHA512
36c5ea2fc61c30a5a00be9f00b3941e634f07ee959cc6f6cd68811e224e0556248537958da7c1507c7861ecdfa1840298a773f2510b8cbbbd2b06a4d3e260157

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
3071297b38547f1aa8923f2d4dff03a7

SHA1
a6eed6f0ea3ee529b01e9a186fdee49a15ad45db

SHA256
a855d8040737f20833b75b183b066398039329a61e9fa7c77d9763a43458ac2e

SHA512
419f46171021c9ca9d0450154fae0e58b09ce5cb44a0084aacd20e77ba387bd7e1f86b3c2deae6015ce5a9f9ab6c89e59826b5f917b429587cee6f001d7ab0cd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
94a56498e1670ce79aa88119a0742d13

SHA1
b56742e51566b6c760aa86fda398027a3980bb7b

SHA256
044a32310f64c0c30d1c2a9388b1ca2d9862715f1f3f0fef9eacaedaf5c86d66

SHA512
a9cf08c7ebab4313d285a17ae89f7e8ad656438ac47a2559103ca6bb8c95f8d87600b57b85617318bf34d84a4f124564f1ef7be081a179a0073b44912f1ca7eb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
e7b3474edfe0c96ccf3cd35ce565b058

SHA1
64522a06cb7f0bb5e83e4882e82ad1fb77aeb7dc

SHA256
dbb5230fcaad9432b7148006709a382361490ccc7e3431536fea4915225f20a2

SHA512
ca1726f56a635fadee066c2708db3a2ee4f6c943569af68d169047a3e40deb19eb6c35104e9c2992d57b81e6d9fc1105eac41b72a0afa8685fb394a464c5043d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
8a93ddd390ccf4244e7600d78a9373c3

SHA1
6d444a2e3a4accc52bd9fdc722294b5d9b9c8011

SHA256
c1d470490a03e839c7cbec12ec47a1f893b5412da3012b09e2534f47a375edb5

SHA512
d54fb0638767f9a4de6f35a7c00c4c4ae9321eb1370973d0b4a709024202911502d06567740697a14d65c9de9bbc7d157fdb370d25f529e33094b5677f314f66

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
aa0c3c4d43e07cc9133c87b94412412d

SHA1
182ba730da5b2921286740603b2370eae1e29e38

SHA256
98c667de125f40bd9a98879d11d276fe54fb10c1506d9154c709d5e7f048d6eb

SHA512
dba80af92bca08c5b741f9801cfe0f3174fd53f572f462eb5e9e4538736e870252945e9401897ee144caa182a3886b20615eb8582f5a1cbdaf81c538b24d7deb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
f7a4257e4fecf12812b0d16852eaa3ae

SHA1
b5534b9ad430abcd5c6fc2d81577ec2d1cfe2ad6

SHA256
aba7639b2861fc0d2553657aaf31021217fc2b45d6f1bda089c46072a13f8f7a

SHA512
938f9dc8b068c15c50c2409cc2dcfc67079a6639106e0be27412cd45bb556ee8e47fd1ec2169f515da13c37932ffe993987b0b39e80a5b7b94d322caf2c26455

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
c7d2a17c044c63e949352d00f37b59db

SHA1
c0e769e83b05c1ac01c587a98e60776936ff326c

SHA256
2ff3b5bd8675158337796dd0b546d4df76fc45ac910f55e79407c3d86de37179

SHA512
fdfef4a637039ad1dadba19bcccd6b6b7083e8fd4fdd10791c89b1523d19b9e8c5d09f2bf99b96afca89108a86f47f27518a20b3b5aa03b6a04debc5188097d1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
981b758ca716a6a20c182c905de05c9b

SHA1
d9647a621da90ffc26ef0f9fa82e1112e42d2e8e

SHA256
7942d5f54492b602b23adf30dd71a7a287c33bb105eaf491a501adc79e1028bf

SHA512
861242413f9539aff5da910a7a939629760b06498ecc68833e06e7fd0cda0adf582454a0f1509e9fbd10cb12dcf54c132cb0f951dc673f4b5fd311ea3fceca65

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
1043b21c1f401e6ec582d1ba3727436f

SHA1
5c53c843aee4a9f1cff74e4c8da7e3f59a230abe

SHA256
e0133968b256c9b44e466b78e3d88844ea90c1e7af0ce5a413c570517bdb40cd

SHA512
14ad1bc8901720f538713e82a86849f70058d801e1e7867002732fd1d653f440fc5f2e04f06d17083062a3ca8c999f7bc1f7f9968cfca941d9d24eb8a9faa4eb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
f0ebec801152a501d90446ef720e73e0

SHA1
6f179df53a7b0a29e0d7a036fdb064491e2af4a6

SHA256
103277cb5cf7f3399163881b361a3614e4bd387a92dad031bff9c03339cf57f9

SHA512
40a994c3ffe5e94bc645f8d8dcaab8283b5d84908fc5dc4974c621a55bb14e968ffb54c178bb3db1f54cc212ab5f9d7ac782f63022c0b1788400d61fdb8c4feb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
762fdacc9f94021309f8be4d746b1ca7

SHA1
786e42e5306eff44ccc42a7ca71ea91769ee89c8

SHA256
37a7aba05d26595c97e9950c5a592d1605175ec798ce0d06f3bf17bf2ad9228c

SHA512
529ce3e4704c4deb2e4f9f6b5fc11294d22b69579e73992a7558da5fc7e8c3cb4abe42596531fca6109d22bf511b9fef2972aa7a57177a5dd8bd38794384a821

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
4f363f3135df0e73934d896ade7c9855

SHA1
35e114b33a4e31da041241507b36dda0cd36c240

SHA256
bd56f816cc3b8ee3492d6392634e08543eb3a61d10058e64178a0557acabd71d

SHA512
4f8d6bf20c073600c95c21f2b49b22cec1a61b377eec565415150650d4a2567490d277d73e1e581e6f04faf0e036fe193a645f05a0224c78e811b85edd78ca0d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
25983e56fcf27dd4a66e7cfc7dd61736

SHA1
7ac85c62d52b41683cf4c7bef0caa0778cf94402

SHA256
a201ef7604460235b3f1f3c19519b1ce2580ce4873de11696d0c066315bd1759

SHA512
c4d93d7c6f76cbbdfe4afb93f813b5fc687b8419aee8247cd27f86c6ed07acbb348d34e40681f716e0f26cdf6d3916246d29d536c43f3b890876d348347fd726

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
3d574cc1389a4efcc7f972d019403b20

SHA1
c8ce0282aebff7d9d4f26f6e37ac6ff290cb7bed

SHA256
e12f50d87817781134e98f154eadc8e22547d247922a8aa0fce78c84691296a7

SHA512
56c68238efce8d2c29adacbf14fec9007fa3553e04cf6bd2f8f67764cf4d1fd46a83d299ba168caba6f06e31cf7cc204c6e467838c1d6615fa08d48e694f5128

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
44f41adfc16b2ff22932e3f8d13ccbd5

SHA1
1c58b8ed1e9df3d8b62ce0fff0a9a1408ab64239

SHA256
a497a583f92a30e1d3124753e3eba3c624f20544f7800038b9da7379ec642558

SHA512
ad47a49660ba4b4f7576e72b707c99f8cc50fc46f8380f1c5e268313f640cc5ba0f40e504c6082980267e5d03cd47296653e097a24b97886e4944f55dc497c8e

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
df7eccb3ac312bb0b0526a35cb88935f

SHA1
4b890ad0dee6d54b0d605aa2945db2e39ebc5daa

SHA256
6b8a85fb5354f9ce43e76a1b0ade34dffc92e2570e507730e55915d5ef0fd837

SHA512
5c6ee7f7e1fc1d76d9f6e1718112e14defeaf8aabd8e7c5df81bcc849ff230486ff453b2c8c372bd43a4c2be8309964dcd8f10374c505af365fb49dd9ea18131

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
c358eabfa70279d6978bb0c19df677aa

SHA1
d5ac2c5fe32a5bb3342fc6ecfff72ac1e7001403

SHA256
fc6b48aee3d4736493409eb7dc7c7e9d0d6331f025aa8f50505d3e52daafe604

SHA512
dc5f06085c1f6ea0fc1c5fbdc975203732e17b4e5143a8c6d87a7cf45f6176c541fc84dd1fe18142ca7c09c46b333018cbbcf20d837bc7e6ca4a5260804f2e5f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
a96c588f6b46a9fa99474ab7e75afe29

SHA1
3f54c730505bd89b9dfabea3786687ff1914d5b9

SHA256
b5d4f0cc375740d768420cf5b73a5eaab8b45dce7462f66ec6aaea4329a7c8ba

SHA512
5e9530ef10f0ef1bb9bb2469de33c52b388145eb7db805c0846441002dd7f4dde812b8423fe4957c82a6547bf648876adbdc5f1802470dbedad29c57bb1269c4

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
2814f105ae1200bf64cd0ab9e7a2d32b

SHA1
9c9a0e8ab78c2d0b26e67962e9bab3616334377e

SHA256
4cc3677e5a2d1dc47ee354a4df9cdd07ad995af5d4bf26e8c1239872961dae00

SHA512
220a6850a0bdef8715561d5e0a86be4e95fb211cbfd47a588aca817d4bac9a58e778968daa766776400ce6756267d7b27852c2703c3bb6858e4c8626d48d6cd5

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
03313d09d612aa1e304bc793667bf892

SHA1
d5ed8fd637f352f2d1596e5d7a59ac5dbe175464

SHA256
0d870fc6a39e1652c568638dcb9038e41c7786485a31f8fda9dc167b472d1414

SHA512
0505a2027b182d3878009126b656141ee3beacc4019332abb40ae2fea99d73af70b81f935c615ef96a42608c3cc4898b5d9e348949353769e880d58d84177d78

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
26edc01a66b7a20a81671affc5cd006e

SHA1
f968234714c11ae4adcec0a13932edf9dc99af15

SHA256
4b7e4fcc9e53095b6006601e543d6ae95264d065d042ca2aa29fda2caecc546d

SHA512
3f9bf5dafe57af7b87d56da7c68ca7e0847866b3c34661b210697f8db9ea4bdae70c9a85e13bbb24b984c3945ca42e233ba4663f90a3d645d9fd2619d410d280

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
67128eff068d5308a1a872b847612b5f

SHA1
98abf2d3a2390b3c8a70c3e28214083d12a7e070

SHA256
3504bdae3088c59bf10c3cfd10e03282d476c8bba1e7e70545e38477c11b60d1

SHA512
6c50c9ba36568107afa1c4146a0dac2a48449e92405a72c0d4e664f60874fb3466a21f271d4ca8f3ce5f27b7cf563fe1fad58e53d8bc2b15c2b1e45f7b10651a

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
df0179c8d01471f65133deefba9bdf15

SHA1
2ae558f2060eafccc00a7c07b65ee2f25c2d8d6d

SHA256
b6d46b0b9d1d6a81edfec80cde4c9eed3f129ce31903d54b0af6d1bb21331afa

SHA512
f2f484c2da1c18bfca96d3b1a408b85b92f99545f97032955bc23187c9e0d600c90c03ba4c6809c1570fb58bbc256e17e096e5f3646ff7139bdf8632845b6cea

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
2f72989a036d973c3f05e8be4e726b7d

SHA1
4607e7132ba2eac55df8ff57eb04966f8e4c9282

SHA256
7ba262a05836f1fc351300031e8e63254846cc0751df57bedcc8eb70b968075a

SHA512
2229a9741405c1b36543b2b3db1ceaf971bb26de1393b9a10619ef2fdc984946d8e25b587f475676cda78df95335ae3a059383cd75a046cbe90004d7a53ecde5

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
1e1595d31644826b11b707bb46f0256a

SHA1
8e7f327316d02653a61df103ef866d8e5baaa0aa

SHA256
8503190bb061f066861d76ceafc32b62f6fe53b3e7c08e9a4779702b29dcdcb9

SHA512
0293f726615492c57438cbfb8208310e93dd006269bc96c27ef10d792d449647ace0308359f28b58c9a0c2ce3c6b38eaafdfbad094527ce94822b93e8dca6d20

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
a98f400c6da3cde4b74d08831059c4c5

SHA1
83586db1157974ca1fa541f9cd99d0a8fadfec1e

SHA256
2586e26cb607d83e4abe2f7b3ea9362930de418c80d614222c2144e76aa1b1bf

SHA512
9b58a97adff0e45c738e209b9f72b9ac23ea0c11ec6c172ef0c6a4bb4c691f81f65517f688f07654a81a418bf54e762b74ce88a2d6efd459a6777b86d4ebd5d9

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
4167de751cb3a95fc180640ba23bdef0

SHA1
8804bf3a2592fd8a68ca8a16ed4c644183c3ecf5

SHA256
8e29c90fc8d07054ad6670a0d3b08f4ae033864aac3e92a7d563d92554dd5ddc

SHA512
6fa5a3a68eca0cf66994f284e016e29441f0a4ae7e9a86dbea5d82c1c26077912250d7060c625cf387602551d4c00525b89ca8c5d6231ac0fc6979ff279e5af0

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
febe87c58f0a43dd077aaccc833198c7

SHA1
d023547fe668ede292a940ec07e1c52ad34f6aec

SHA256
9ecf0686d9a8851cd7fd33ed23dd3451f56e64ef5623f4b19cdd486ec7a7ae69

SHA512
ae7c8671204b62f16d4afc19f4d2b2b07fb298c5d5f93907cb11db1f6dbb7df00962e7e26f37f4f90a634a8890faea8038aacd27fb7a81fef9a36bbaa1a29679

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
60e7d1d6a3a134ffd76a44eb092897e4

SHA1
8d824a452c0d53e76a32a904aba5d22aed199e7f

SHA256
83e34658566202b5e592c5a86b4818a2583582cbabee24b0c014f2736544ffa5

SHA512
33a4c5dce64e5d22aa57ad5ded641d6baf6e5e81167d0df0b218cf3d914105924b9fcade6a3825bafa85adb5159f1b7f7314ff2076faffbb00ddd5f4efb5e3d2

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
8a78d909603e59769dcbce648dc398fe

SHA1
79e402aa7252d28e14290fb5ea4cece9d87547d7

SHA256
50950956c2484ac2374af4614b8dfa328000ede910cd0e284bd461c553a0b180

SHA512
bb7c201932321982b590d40035c19c9d02d0b63615f6c0106e1c01bd6ec25fd18424f3265a738f27924b32faa7ab95cdd1c2a8fd00eff52c199ea037f8d49e1b

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
cdbf606965f54ba57cad003e88fd0fea

SHA1
63ec4e73317838002d164e28ce053f914cd615bc

SHA256
237f5223ad97e734cb625595bd089a7e3afa834bbc32902c67beb16bd6eff3da

SHA512
33da97f2db7cd3e9530e3f7d56c626a6cd1d737603ecd00620d3f297fe7b6a4713c19f59de379ace54e256ce9b6defc862d280701ce73ef2240371db7f88a1e1

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
dfacb0e5708bf1c81760b7718fa39320

SHA1
281c553e49ff35816eaa07e9a44da32c1b645c63

SHA256
6800c292bb9f8d260d221de7e31c629b4f7c4209f0f2ca84b551a521d12f92ae

SHA512
0a124252981a625596b012a990b1335d23170fff64cc4000dcd238984d6dab1c57a057d5ff87911d86902bb11a78cfd64a2e4c7ba76cd7f64d17f7e38c975a4c

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
c450246b2461a36e905e35e2f5ff0e44

SHA1
ff650825700e34a4959e5ae5949fcaa8ab23dc62

SHA256
9de40fc0df4c9e77ca41b7caf1b3bae08c44d687c2ce72fef9b238bb3aba5863

SHA512
4b3aadddc6499cbef50da0f0a2fc1df314878fb033cad4ee24f24f9725cee7e178d5917352f8615e502219dfd58728af29829f92963f2ea32bd2acdb5c757c81

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
3575feed814bffbf89e930404e8d4e4f

SHA1
a9185a21b1e0657eb37343d5aafc761015f8e437

SHA256
823d9075b0481700b10c413175bccc7466ee8d149398d1b5e990faf43481bbc4

SHA512
a08c3efb09ce945460ce6dad64aca98f8b4c1aaa33830b416dffad6d7392b99a4bb3df55ef6dda82ed72d929fb21e76832d4cf76ae84ac640613155a8e840e24

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
a58da1edb0101eec3ca50f71089ae3fc

SHA1
44013472885ecc2f0fb910a09baccbc363d3a28e

SHA256
14b27b31383217b17e18f9efe44692c32c20bf9980e1523117ef3f349978b905

SHA512
c22532f879cde05ccea843da8b1cbe390258da45d86c60220bca6d55dff8c307dfec472e9278448fdf3f296f80c30ae9bb11ca611238ea110b4433eaab65bd64

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
0d8853e1f4fd027c3757cd48c8bf93d3

SHA1
ceed972fe7c711e329113993bf85f6b4de9615fb

SHA256
56c570612fe4cae1b5798c5eaa541719f399082301f70d35b9525283747fd8ed

SHA512
db0b577ee67742274200e0d0538c7c51f1ef9bc66dc306afd017dda53f5b3c3baa268fe50a9889dfd867db5d7e259055faca241c3bce3e44de61ca6337d64916

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
fb311bad4c582a10ece00b012709833a

SHA1
72358e3916e72f9281e06ecfad1081a04d280200

SHA256
34e6aa198b7fb7f502e22c26ec15f1b0b2f5b9b1d03b859d776ceafbf261da28

SHA512
2a31eb5417401ccd86662239f0d3a19a86a95aa03fb6a3f0fc9cc5b3651fda18befe21d54329d3ad4f548c3aa3c77cc3979fd7359490dca537d3de05329a8a57

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
d9f4273d99932dd616e1a3db7c17a295

SHA1
e9ccec8e1241a849278aadd7600820191b4cd9d1

SHA256
ff279f695d9097f923deb0b2bbd4720b7a99928a8ed8ac83e782634cb3f89663

SHA512
a3bc49108f8dd7900e71b2e904a67d3a67a610e6d1fc38a39144da081889ed8792e777e301aceee84fa8d9f99370949b42bed5e8ba1ca8ba090f123f9ad2b61f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
3a154d6cae2c877ff5b61863309a70d5

SHA1
755f29be63b05274cbcf76f5219ce6a49a5f60ff

SHA256
be6eda80083c8ee988dd91532b41a126dbaccb6267c68a6fdc988bc022a0a167

SHA512
8b7b8efe002f2f8dfc018902442fbfb37397fd8cada9f688aac0f17be4c371880a790d19f4e2147121366c2a8c76e1a9d7df577d45e3d98a853a646424fc6d15

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
9b88963707df7028bab16c651edb1081

SHA1
2b0e1aa9bc678287ae1bffdb4c32ed449fcde1a2

SHA256
9cf9e9ea367dba6cf65e71f6a7b93f9d9aaa884fc6b7cac47dc1372d3f0a8aed

SHA512
8c082407565245562e8448a8ec6a4f707d59f43a37198cc87302af5fd46723cb78fa8dc84e244bc1460db7d14341567956d37f1bff0049b4448fc5eebf8c9082

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
cffb4e2bea477ccee2d6011de2544246

SHA1
a30f1227ad4d40d8ffc2b4a30b35cc20a786320d

SHA256
5862ffb606afffe47db998aad53f0e947ec404fef164b5d34e3f84477e1fae49

SHA512
163491bb83e905eeb3ab4fb487bf7c86ea835ec7ececdc18bbdafd874e1a91e99d930efe5057e12641b3ad03f969ac0bc71b9be69ef43879cc5184edf6345f7d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
f3eb0917aa8cecf10df5d9c4bd208273

SHA1
9c180da07de5d875568df9b68880b5a0f3e1b799

SHA256
77ab0e03448f16ab74cd3b55d762b33659006874808d8e8676119f8e8a4a60cc

SHA512
14557f5afe2c1162b99282f8c6cb3c8ac47f30acd509f4b0a159a0680de0a88ec3e0043e8a945ea7efa8e723bd7b264d0715181407c7ab95cf4e6365d8e13198

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
7e7f29710a9377be76f74dd37f3c3640

SHA1
6fe530ae5a987621cc1176cbec0ecdfe1a3b0b59

SHA256
6f40e1ab0b34fcb7b3e036b68915790e7a83335a4462f507cc1454a1857499e7

SHA512
ee94e3d9a19383553d379b70df3bce970080be21f40171f2641ce3ee7f70a7c7a3c3f5bb6a99d395b008ee737506dc9bcc5c44a946ecff0ef29428e9b91ff5b5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
2409dfe2c6dc87cc826576b695750838

SHA1
e7594f38baa4b3950659a08f05b6930a142d8d86

SHA256
650dc3e4092bf107f5f51097cdba5a0efe310509635cc59f54cf054e41d43f15

SHA512
615a239242d534aa001b48d0abe2e94b3e644018ac4146a99d953802c9fb6b2873f749cfd3c14aecd2ae83f571dd0cf58e9f3d1d12845be42590b3d1ea5e1192

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
a8cd47019f3a5f34cdd90cc86c191206

SHA1
778bdd8ca0d6c968f148eaad0e6f707e421943fd

SHA256
e4e6b2cd919dc15863c2693d7578550ccdeabc8c3b6e32194026820a070820f3

SHA512
1128bfbbf888eb7ca3b52d700842c64f740ea52d534972dbcbcc8a81b3b30df6a5d041ef5a5f0afd5cf588d21cce56462c24a8512375b7ee56d99db2202c4d9b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
104a3de6ba4c43c4beb3b2e36dc68377

SHA1
a7e91f68c24dc583b4dab780d45efca9c1bfa7dd

SHA256
ba8cfb2314bdf89bc6d453b50c49584d81fa80c7725907ed4e6ac7cb34f6bf02

SHA512
d2bf849912c75d45d8bb84e273e7d8847912120b1b4210d2a84b4bd243bf7995b04b7864f71bf89f62137caa60656dfd5d518c073cc8620c8db1ab28db14da62

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
1f68381832bfec67f976e8db70a8ad2e

SHA1
f277ec1fcd5f77ed18e635ef42e13753a8a46b0e

SHA256
78f48f5ed6661e2586b8f85fd9c4ac31b28cd4bcc903271ae3b088c884275f39

SHA512
34625c06317012a86e551792b112c6eb18ba7cbc9429d0dceaed3d94d091b619163d87cf5025f32d279fb0f3bed233706ce1de1257c2956b31be260c327c1b07

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
f982968151d374c909c214403f89f300

SHA1
6c2fe2b6f6585bff3c6ca067fabba2be67f06e92

SHA256
8637fe09cc1db07997b4c9b2dde3ccede2315c5ff402db0bfcdecb4bbe42ec09

SHA512
a19f4d7b87c76e9df0abb2d6e73c1fabf4c18177479942c1c75c3ec69e227c1ddb2096cfc32edf7b391358fd97cc15eb0574b67fee49e29a2640d722bb6a8a91

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
cd00a4bb635628661241ba51c4098ca5

SHA1
4141d88b79850fac30705553af8770eb8ba8d634

SHA256
d04331caf9dafc3fe835cb3cee5f34a6135dea77ab23cd2e5a77d564dafc6c84

SHA512
ccd946489267e4e71598e055fd1502c20f03f759aaf9a7ce7e4c89c2b0b72dd1debb81927ce370932fa1d41a733d8af9ea3ee0176dd4363f6df59c89c9e4f917

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
ee0e44effa15f1592a49a6ab068d4b56

SHA1
43da26922d9420fde3608f1096d6be345800f67b

SHA256
bdd0191bf4613d8b7edcfabf7cc18e0213db5496fa003517d37c8c506e254cf1

SHA512
c36cd0e017d2648c1bc50cfe5b5219ce04959bae5e2387f95a8e33c2ce4c38582c8129b4a41ccc9fd3b030a78c01d68f7bb1c3b9ddc69e9d18c5710b446fa62c

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
dc414391cfe3eedf1e04c9afd55edcb4

SHA1
1c0350d89fc0bc7a433c9568e7d652045a32afae

SHA256
69024e51122b85fe4877ee69c287880c24918d2a313efe5e38461e02ec476c66

SHA512
04e8dbdf9ba05a446277c980b7cc77aa6a7387ab9169964fdcdd2950d73ca045ea2145e3a95e7e84c959b261a15901fb192dc85dd67cd09d1b259d6d12114f0e

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
7a7f503b2a8b185d2d2f25dd422ada09

SHA1
bf22290218542c7a44557241afe5fd9372bfd4f5

SHA256
09cef35ec3c9a8467c68af7b39516318528a1cb3dbb44ba9df52aecaa3da95d8

SHA512
29511d01eebd10a47bb74ae2e0f7ed110ea5b993fd5fafc2a6933cd7fc792bd7a842933899012f55b4c0be6e4132ef2a3fa99aa57809e146a376c2f30dc0eab1

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
25eb36b2b04948c1a274d27332896e29

SHA1
74274e70fb4efaf4a1d53cd7c4ab0127fa964c5d

SHA256
f9415d7fc568a2b4f0a6dc2a4d3a02676f754f515bf2ee9913926eb2725bb162

SHA512
2fcb5dd24961c62bf2ed6662daa84e4e6ff13b7992f9031e71d4827287269019b8f36177573fb6a2bb75dcc5bb14eead53f1107e6c83ad6c4e7cdad33ff38029

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
341753a668bd6cb768d29536c4992e4d

SHA1
6dfb97c5caefa4201063b05efa16d41764f2429e

SHA256
7f037a2324f10f7226678de17b98b156106af4a584e97e28884462ede9c81274

SHA512
d9368315b07dd0d1e6b314260b31072856c4bac8d5b6ea3dcbfa5fd6e5c7c05113e7cd819ddb5b124be84ead0026c2eb421938a41b82f8e169d7e050fc3cbaee

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
6ca8126760c27362fd66328ed9aee4ef

SHA1
d7a561dddeefce6c1b6647715ae6ed576a37c430

SHA256
413e8cc0ed2ac9f53997201375a1297e34aed6bcf778035d2f54e24dae38e963

SHA512
ce5fc1ae4d0b54058d6b38c49a5a38c41418eb6035b9ecc25356ac86b0b23daaefca1c20a529e3da11bb75c888dbe723ec7205c3700c733bfd5ec58785c538da

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
08f9e414f860af8a7312d15b2c8a49f0

SHA1
332182bef946c223ef93ae25df921e8c60e059a3

SHA256
3f9363bf00c3fbc7058fbc43fa053110e4a3e662f6d65943556feda074cded98

SHA512
2c0e3cf07b1ec309d290c60c47b7a05d9b5f769c1a9296657c383e0b7d63ef7d69ad7c5eb634baf42769196b49cf7c756b6b0579a1d586be6cf138a418549a6c

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
580f0735768c934b1cb7bb4c27afb844

SHA1
55b793f49996b4c6addc9c7ca1b298390a70d480

SHA256
d45a9f356e363fb42a25e51af3aebc4a0a50fb6362cf2f4534847d14f5ad8c38

SHA512
5c9f4b187a004ab9358a829bb7c01645cea348e02f892c204564436a491d828d991244aabbb919b29224d898a71d0311028156c81c631583118c2d1b0b3893b9

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
0225904dcafb6bf9e725c5d2569aaed2

SHA1
c8c4c12ac46c207600c9d95264f7ed833cd1f878

SHA256
42e0a909cf765235e8db1755ca080b925dd9850b22f2a4a062297bba9c1f63e4

SHA512
af9b8fd35fc00628058cedc280e972dc10381648e82a5f715d6a52ad709ea17cdf955e4f9efc5335c3314f865e70c9d4dded14d293249c555883de6058ed85d6

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
d19db38a51b8a764580a21aae9667179

SHA1
89b9b2debac5037d222feb854030b7ae205f1e3c

SHA256
c0686e4e75ea40cfc86d585876649b8bc86a90ac023ce5342b0c5d3fe5704db6

SHA512
b47feaeb78ba6a9cb9251f4668817f0359f65d01bae1b8e444b8aa0adae3c6c8ebd9e6fcb92630c644bbee50b56c88dfcd35121812ad56784fa2dfe41b124ea0

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
cc267f607ecdb52aff2f124093cba796

SHA1
5dba9cb26fac8a1ca76e1f0e93cc0500082a6ea1

SHA256
78716f3d5a461af56c722d6bc06b75f48c9596a6958e7484c1cd9ea8663e3e45

SHA512
3da37b85c466ef1f083215374a7b5b9f9fa1d378854ff21f516aaaaf6641aa0caa56f58208ea1037f166bac0e7da00c1f5c6a54ba85dc97d4f572a4ec3a96263

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
c92a956596c5838e9f40e5640082bb5c

SHA1
bff0a3c71fd482cc89bc449cb53bbb1fb2bced01

SHA256
a8cd047e42d21bccc9f8da51b29af2520aaa61ebf71fdfc4a978424e6180a138

SHA512
e4824bb86d1f00feaf3d6e2be56e6a8557e8ea173ed6303a866493076f5beef58aea7f3c1af9d4e76a3237333824f4da8a4ee2d4e2546c484205330b093b46f5

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
16960a97c2a1683878947fec392b768d

SHA1
f62974ef1e553a284498b542db7bd11c7ce94334

SHA256
e28790c105da9675545914271e3f8728eddf8546c8a7bee93601284d5abc9c19

SHA512
4ac046f0d9667e36a300806435c27aba605f95488e69ffab4367395060cdaefe192d643074949ec9b34d2e6c8f06053b835199ccdc637a4f5b6836a619684bdc

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
5b61d1a637b7393e62373ae634352201

SHA1
e59ded37a33e5aa3a36167311eda05bd0a5ff9c3

SHA256
e261a82ab5242b10af36ec5bd64ef983a1c022905b7df40afe731277c4ee8fd1

SHA512
4f1024f1f5a565bfa210784228e1c7b7bb10b38f2d02e53b94df2931bab49717eccab3524c22881074e1485c5502bc06136f6c1107e7173684e63dabb4ef4fd3

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
183953a8591a4aa7ad95b23560ed4bdf

SHA1
a893cb7714719e0f53cdee0e940388a0331b2fa0

SHA256
8dd73ff451ee797717f1f98f8645f6648d517dfd9bf16d34edf989466696782f

SHA512
b680a42a530568e65a67d78ea673c420010821f65d62e17a408c8081e3170a7d89c832a7eb8bd648bb7f3c261c76aff945405c7387d7bfbc4ba0384de8ff1abc

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
750e8bc153a60e3fe591f17a3823dadf

SHA1
13e9c2c747cacdfcebe2ae8d630e57c936ec6a54

SHA256
7ba9698458d9028e277f8038f7039426b0766317c840b194fa378566856baed9

SHA512
d4be637277845d9b0a2f133d5f134274e49dbeb17a0b607cde745b29634c6c60cfd49110f72e81f5ceacbda11edca3dec23aca98039bda344f94949a6b64e7fd

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
db808b6cf6d3cbb4f3dd55f7d9ec8456

SHA1
cae19f40fe3141a6c4d31473c871f31075a4db36

SHA256
d1d1d3b47cbf1606f358278c2c96201f6b254da86195089abf3fe96742e86361

SHA512
25c5e03e890e98e5c92c94f1382a61aaa335ff93a1018ec527ee21e265f61d9a0b621ccf9d9f7b9a50b3a3afbc313483f99352fb41874c70771e5c464decaa3b

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
f1c09f1a28e352d64f69afc40b9595af

SHA1
a7cfbf0f639619fcc58add8c5615356cd836817e

SHA256
b9d38c6bcd2761b42ce566da6b435545729cee3208bd6db804b59003cd7412ba

SHA512
a9290fafe9006ce075320bbdcd1c60194800620516af101b651e88c217003056f054e7d8e1907eb684c1d2a23ca8f529fd948b732858dabbdea3c5b0ff5a4686

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
b452d804f89f6511d9b11ed8c1d27398

SHA1
13364a07e7e2a5fb6acedb97a7171cbd9c0b87c2

SHA256
0a464e62f8516fe5f01fd19ed5ecb663e5d4d8913b4569ffffb1c8767a49d450

SHA512
dc4e3220f3b7fe004858533d361b9163e2207bd16913e493f84ff5c7df14a2eea411b3d84871806d94be0ff40ed7b7e428427b56389a1416cf56dd05f660948c

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
f68b3520821feed91b30247ca3f3bdc0

SHA1
fe4ed0fdb260bebc679a64636fb5d05e22acfdd6

SHA256
c2293314cecd6968af885fe973ba411dde4b724ea4914678a711690c7cf562e5

SHA512
d616a1d5b14bf1e703a2b86570f3fc08e3faa4de363febcba0df715a50fb907b55c350a46434f6c65cfd50e8dd68dd83c08f37e10d119607c9a791dd6ef7b24c

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
e122e42af60a6b24b80a75be136dad7a

SHA1
eacf502148e284e1ab162ac9a9535aa1d66b458e

SHA256
b232cd80739607a5b93eb7c146102e4afe2c048ed71c7a954790bb5658fb342d

SHA512
b11de758e424dd151ad14724c28a1fc14eb041ed5ceafee36b9ca462c18c7683db0c735d4795478ee992c05b185936fddab93772293fbb94cbd280b1fe2e3261

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
0101cb03a31790e5138e8d4422b16e89

SHA1
16f380b507068e2ac9364d4e2fce2b5e1ad28ece

SHA256
248365c11673d32dd767f0784841397690c57e6334515f0fc6cc6f6902512d77

SHA512
b32e0e1ea215c5a72e0219da41d60301c4ceb6f3d8b29e3bc178bab6ea6724a8b25b544bcff8361de710528b40cd3b699ce2dbc8a98bd14fc905674d1894d5bd

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
81c594d5475d0bb59da8fca84c916007

SHA1
115fc6dd31d55c8d10e236144b2c5634ca79cf2e

SHA256
1f42868c6f5620a1338510103595b67f8fe1476ce4d46ac74b0eb6937ac03f32

SHA512
46d2ea3fed4fb72aa205f94f20667bce5d30a9994acac8b877ea4eaeef24885fd137c05404f5e146b65292035db0a8a07e032f3a3d62285fa0095cc3f42a4e20

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
bf0bc74a63234d2095d81f5b23cd5b25

SHA1
41f938e2ba417c004c279b78c57eb71a58da445b

SHA256
e343fb28d4a4d51c9d63b3855879e92463b32ff74b73001eec2df49b4668c302

SHA512
ea85f866ed62baa191c0e6108ea2836fbd3da91252ef556071e68e6f51387144d9c0f0075bac2e139a30fd089b98b896234b2a138f18ff39033f218cf40b7bd4

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
266f9ee4070dcee4739a779ac148fd95

SHA1
1a0bfc7eb97f12faad9cdd5dc8a68e31b489dc2b

SHA256
09d8c99cacfce9ff1b457aa2e56a171508451ff6be82befaf2e744ae3bddab60

SHA512
592cdcc6c4a28ee62af585336dd24669d5ebb06392de8c75c6004523274aad43cec5dcdb605b5917fd51a82d3c0f05537127e74675cafd669def1e1d042876a8

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
972978d68017621a2e08b234c01d343c

SHA1
fb3dfd3fcd0e26122643add712132fdf6cd12f31

SHA256
956561468446200757c35149c511e85bac28d43caf780d8e451886c9fadef045

SHA512
0ffe7269f399f4377fb4fe3ffc6d0038f9a1a465feaaaa7b74bdca129711a8b9d11e8158ed2f2cb19586266b5bce15edea87ae651891b40bbaadfe53d570cef2

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
f8c00a1b650ae3fdf4cb4dea0222b856

SHA1
0436d2d52fa712b2fed40a31e751d51762a79819

SHA256
7ee28e0246bdb0146c50a164c7b4fb7bdb49e61c08c1912cdd949ccd37e9bd09

SHA512
2e8fb0bf90ddcf36d3772393fe9b8c66e124e3852afd480480b615b82866a02e329f93570a7c1a9f4dcea9c38ec77a04af1d4ab7d6833e4b1bedf4d154281110

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
ade5e922b6e1feeb8fb2fac31a5eafa4

SHA1
70f072dfe49822a72a043659490186cc319a3a3a

SHA256
4125074221bba65c0a39990dbd7109e0b39af674f148f0615b0d4da5253a04a3

SHA512
206d79d82669493d906db8d70fbb374a70c1f8a2b498c20a7f57ea9852f487ac6f1e1f9b4faaa797c3385b3b662ff528dd590f844ea616d2429830455d09e94a

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
c30416b98b01005e7f7d489ef3e2cf95

SHA1
761a3e18a46c8142ad5d939d653248f08a7e3330

SHA256
28e8542143a6de6a9162309669f608e41d87be76b9cff3d09ec1973f13635dce

SHA512
4523996b4ad95970f9f90ead18533422fb07c7196822c5dfea9e129f7aa2825bd4dda08109e1f960c580c32c9f8a3301334f0ebd2ed99007f06d064eda5aff22

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
2b883cf22d8ac9f294021e71d2132964

SHA1
10141b46c8df19f5132589e9d2e862f8c29cf56c

SHA256
0c62c532f12d372856a2c3ccd5fbd4c3c691fe135cdbca218d248c3eeccfc05f

SHA512
cdff85089e01e19eb9976b6e1aae5998b865696b104e555f7caacd705f33362cabab8a7c9f1d8556e130d46cabdfe617218fd0c6eb93b6c1b43f1393ca432929

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
865ca799136ee3de487925c55866b7de

SHA1
a95b3e00975295742f1d4083748038cd746f432e

SHA256
c0eae566c272e4734a0000a33c1c7834721ee92dad1dfd93c13400837d462c70

SHA512
5e77b6512e47b77237cffb12ed50e6e7fab610aa63ee02a52c8be52f706826b3d4ffc72f10927e70ff5666218b0842fe7fed8ad5d7956150c6afbc518fe18555

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
624efeaedff3ae0b8bec755c9022d6d8

SHA1
b9a1bee7ca6e97acbb34a788f5313641048f0f4c

SHA256
9ef7e4f7df70619caa54382b938e43572fbd115d077d27f917f9e5e2b4c798ff

SHA512
1a2caa72f87997f4332bf6ff4f63f051e50bba54482a54085473b4cdf4baae9289310f10da4dce1767593b73d4d38d7a118d4c20eb757f9834c290e0d556cb5f

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
91ba0b90205a341ce2657fc0f99d59c5

SHA1
f90c2698af33a61fe03f53f4884c0520b026ad75

SHA256
2f89484751b5f081981c67f9640e1bacbac8f651a13f549b0f3e0997faacb420

SHA512
41689834b456b133256998aa2d3d63a9e0110f918c8bc4fe1d41312aa471ad791e6f34c7750f8663b1edcc758da8271341eacbb844abbaf5acfdc2511c7bd0cc

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
48a6b0c551c52417382062a6b432b9b2

SHA1
065d1bf45f2a3b9dfcdce18eb1233a21d1e9a205

SHA256
7dcc2c42d659061fe6d71fdd684e7a3e4b31f3a80f02bddb6feffbe654a6f2f9

SHA512
765f9eb0cc4de2ceccf53491d17b3707e1691ae15166eecabac69eed0b34dad8432b7f043e8d0699e12c9803d2bb717abc84f577f0b7bb4693a008bbea840487

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
e94b5ee2c53d6b6561ac04abf8ea760f

SHA1
4e1be82f18bd932a53466ab9e91b9b2765fb95b4

SHA256
25fa02e2961ab7defe05408b8832a8a34b305f1f29357e25ac7d836534efed36

SHA512
a65b9b47fbb8434ac7d69ef43b0368ac5b437dbbf800d4ec5879ba8153eeeb457bf5e04ef67aeaeb11f87f7f937dd8101a3168b73494ea30a835a5e209e90597

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
c4de7f027c7f510f1936bd4ec53d398b

SHA1
bf6251557f54ef769aff58e4b9a76e34764c1adb

SHA256
db48f96a00e061525f1e0198181d1336f56731c9e9e36e65bc3702cee6143aa3

SHA512
62716270b9d1ed4ecdf4132d99157f2b177b0246cd0ce22f1589106b60c4e5d4d3acfc022baa4be73ebe70573a0009e03b6a9c43a13e2e2ebcdcbe180cd7e3a1

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
8754cecc1e384146588e0047473ba979

SHA1
58147a11c90b3897591b84a4112851be114040f0

SHA256
cb4ffcc07b4b955185252ad89c8d9dd22380b783617abfe01d3e27e2eea61682

SHA512
8a829504164a62b2a0d848a18c729c389eec216ab5aed29814a91b774d2ff28e7375744f7211a21b08437f21169e012c13d8fdd54ebae416932fd4dc6d9385ee

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
676bc58a79761583cd8a73843b818b1f

SHA1
f01718a168bbffea8244aa96e36bd0eb9ed5a7c7

SHA256
2bd44d2cfa4cc62623bdbd87b57b4f162142411d7cde2fd69826e43cb1ebd1e5

SHA512
9df7632565cd275b9f26626a0e26ff03e97efa40f6fac824097dbb9ff3ccc06de553806824aa2b44202f18e18c2180a2f2634b3b08fa902aa8674024074934d8

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
6ab409707d506782976fa387d3444e4d

SHA1
c37d48caf8cabf79dda5a9541eb43019ab4b62e0

SHA256
fab6ad0b1e071b688122874ef58914d65398540941f80fccd08e12220cc9253c

SHA512
022c192aa40732a4eee188556e6a8d26ef875596d11d20a2b8aae6fcf1b000cb1a77b7ad7c445fdfb8a116df710294e8708965340c0f54a36d5da41ccc01076f

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
f933a3a76ead7d2eb6d497c6d97e3822

SHA1
ec17f878409ebcb748d474a702e8575c686d8f80

SHA256
47e71be8aac1e28b747d433bfd2fc9a9ccab59f43e515dc6ee1d2537258a9561

SHA512
7f5470181e72de30bb0f1dd9c5ee2e79ec3c12352bc54618876e978bbc5819624e91912ad552daf876f3134cd3bf03084edbd00021c8d9b4e8245e27ca4f37cd

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
6d96cc32f0725439b462101169cbb350

SHA1
e2a0890c51b41439ce6a24b93fcb74ad2fabd4b2

SHA256
2c9968d1f1df91b20f70c557b82c078013d8b2df3490b7d027534cd3c37f8d59

SHA512
27475b0a5e2f4f5799af1f287a36b8aad196cbb9e3b7812d01f406ec699f01f017a4e24fa0e476de483848aea21b3365cd08f10d5a5ac4020faa2706e4e6297d

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
aab62cc74e63c5575540e6141f88577c

SHA1
730c95bbbebf107a7a8e8dc5d751e9049842cb4b

SHA256
ab1a89f873ef5ecc55d9b6ed00f945606dfba4f60feb6ca8924df3a6d5b333c3

SHA512
e0cfb47840715fc35414470f060bc6d38a37b5b5aa2b647eafb97e7a66d4183b1ff8751e7edc9fa124e37c31fa0f633c2889ceaf8085f449145523cc3edf1903

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
874e5bc571313194820c21a2fc64fe26

SHA1
6c4e0d6bbb2e88e392025df9f111faf3f6b38b5c

SHA256
c83ba0de19f0351d4828a7650c9e5d878f2211db4f146b307b0f65a09e4a7142

SHA512
7ea4a79a0a33705ffb334cf6a1f0a3550ae563e694fec3f45e59aff0ecc0fe418d8700311c9d3e4da0c497a373c7f0f2c8f1a4a3daec4105b14e19e46c63b2eb

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
42642007d1b3aaec6d1e4c3c09ef7129

SHA1
51854f1b38c4e0ef4e3b3d5bc12bea764a3224b0

SHA256
96dea471b93863db7ef049f13571ffb3eaf1ea3e577580ce5d129f7a4761fa36

SHA512
5f7184860dcdc51fc6997b34ca85636cc3f598618711755d3171a34d61ca601d0fc9eba67765f46aa578155f8534a20fc32671c5fbb62fb6bcd3580a720ee9a2

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
323305e742b1a3accb8980bc0ddee26f

SHA1
6e909969261489745db0b5c0d23df1c3f2d22bf8

SHA256
5fa193dfb3b4f68a0dbd95478474a6edfb75b0706dc77aea0710f117eade213e

SHA512
8663cb1f15ace6376c6086c451aa0ea048b818100e90c2912923ddf567be58e9ef5fba486775a322813c6b5d76f92014bd3d3972df6a299764a294e2582a0db2

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
32cdd2d33a79538592c69bb87df112eb

SHA1
26db5ea890698633561c4a8f8ce24a1f37ccd064

SHA256
8443263831a33f7815a0017d9e5db23736528d485d576e4f060f1cdd8901fd09

SHA512
d44764ba9a2bdee6810214e8efd744b63dacfe615fad437791dfeb7750da1dfc1b6098ebdeac14fb6d6cc4109971caa38099289ead560cb404af060066e396e9

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
4edf48edff5df34ccc01654ab61132ca

SHA1
2e447d77668c1949e83f850c9ae59f41a5d5c53d

SHA256
1e465063ea2a8048b64db643b809aafe2f0391f6fa78c048481d12ec100eb5e8

SHA512
ca66c3fd59fe96198ab8ed7051c13a57cd3266f4b4e35db7f6fbcb713b610b7e03989897d5830a42fdcc960260e18591fdb35b77fed98a4035d9b105ec0f4377

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
e5e3eb396c2a173ab4c85882c0daacd2

SHA1
127f1b45ca032a2f1225c1b17c1d8d8648ecba02

SHA256
616413b2be8244fadf7cad63076c3b2236ab3ae9bc87f4a4ea8679ce7f0728ba

SHA512
59b9911e1355646b6bd3a62c3fb76fa0ca5f57fc86d27bfb1e43b54938136950fce2ca1ace9bb0d294ead4fd3e06f3d1c97adcc6fc896ace1523384c52688a2f

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
3c37dae32df4e13aa35da21dcee6eacc

SHA1
096d9a569585e376ebb3886436be401aa9837754

SHA256
70e5388a95bcbb431e2ce8aef5da913a0519a958e01f7dafe2584fae88e06eb0

SHA512
6e9cd8015ac09dc480aff0f37a6fa83a17f9f1a7b875f85a4e1e80779cc965ec89e8cac3f296699e3895abf5836c22f3a4254e3e8b1175bfc9d100b657410aff

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
b19875277ade43c5bc38df7e94faa9e3

SHA1
77c648fe98c9a8877999924ff87d75ddeb8e80d6

SHA256
63064acee21ec7c0a2efecf0f74e954d4314cf44a068197c1026e06dac33fa6d

SHA512
ddc222cc6a9b275afd9ff5c1a3cc7264e77c2be48709c8372c5332cb17dd1747bd96e4da3a296a10fae7a998d358e3bd7b6b024b4ad0820d0802fa118e886ac5

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
7cdbe641496dc35cd1787a84ebb100aa

SHA1
c4cd2eddee55183cc7cf01c4bc66c6cda8b20e6b

SHA256
a5e8d24b5e5736840238f68c0f491ac427035b1d711e8a3916f8cfbe0ffcde03

SHA512
c31fb28daffc5aeadb1aa2d7b42d4964f36a9e84859b8624125239f5594c444060ad3db6cabba5c4d357821af8f07113b2c972778aa4d3d618fb8a572ae77efe

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
fec028080a4030c5402aa42502bced7b

SHA1
f145a6baef91f8801d3180878a614f359126b7e3

SHA256
efbfd91d9524a47acd40a2e081853f6e988669865f961bf9a882c3de73caf079

SHA512
7b317faad60115e18d0f43da830c9525f68dc9d41b3341ccc4fc3b3c9800c4d1ec608e1f7b8213aef02c6b68f1eb6614ee0da2897830829fb7f8f5884b6e8eec

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
52a84c3d46c4f6b19c8bfc95ee797e25

SHA1
6b84e53449fcc7d71fb48bda8d2a50fb82e3ac50

SHA256
a328b45838066d1d89ef7614c6ca1aff62b00482eef4cea221865a71c1ebc500

SHA512
fbd406533e5863485892b2bb91e20a9dbd2358f09c2a76216b7e887fa4ec0e56714dfe18b793999383499e14fb3272a61ccfad0c5a8a9369fc4ec7da2096e588

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
9f5a7de274f6a27458e3cd75375bc30b

SHA1
94af04e7200fb705c4109ba386b4e2af9aae4f1e

SHA256
4fd769d748d2267c3588cf54a7ce9e41db3e982ffeb26eeef47f3c9b53c4172a

SHA512
cdea97a47d991b27e7a803a8f84f1c013d1f44cc2f5acd08b272a0f916dfaea0899b83ec23c86dae393afa767966bf52b2be5d7ba9f8502c338d41279411bb9c

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
b7d61f1b6ba587a3d9147c586ff95174

SHA1
e77a5bf29a5f2564cb4280e1cf975a1e73feefcd

SHA256
23b1556d81de627b139a7ac2780859e10fcdc2c7cdeffbb23c15407a9ce4c676

SHA512
021c04f565cb9f07bcf452b5d83477c9e3d402fb9b2de1b474673e68f74fa3c0eb6494d179e7f7c7fccf2ab65eb53ef109515886bad05d776ce582283ef8acb1

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
f99d21284eeb846cdb6e0a06da87cb35

SHA1
c00ab7116699ebb2ba5baaafb89782cfe940ec9e

SHA256
89bd63de058cb2f580f59f5f646e53e23a313f08281b7827cc1ab7b7b883ebd4

SHA512
e53be70f0d6aa79b367c96455e7dd869ef4061ee3059ea35b1a7c6e56db9a8284186fcf9ada0d23d0b4b9b7a0475d91fa36327621bdff2a4a01b906fe5eb4a86

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
fbdf635f8824e7279b48f201cebf05b7

SHA1
fd8695c80c6637dfb8cd802a9efa43bcc1a7f9ab

SHA256
7e98c35d0aa78393ce9e083c6d3a53a603bedfad41e90b5e4f868dc3f0c33cf2

SHA512
a0f96f3c0689cb43745e5f710a722f0a3183940f2d8a75e7454c55808e7f57504f6ecc8c3993af76c45235dfe1d9575fa6ccd3ad49492de31d69e8df681c255a

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
188f122dc20cf651eb4a951a20f62651

SHA1
09882b45c861e8d9b39b77f279150403444bab39

SHA256
6e223df1fd8bd9cfa8f49343daf7a261a697aa24c41172e6d90498388e261df8

SHA512
d694d9972c33727b797520ce25ce0ab6287cbe0c82a0421e03018471fc4eb68cf23c3346ae98e9c7e7d6a152172ddf385ff2c01851014c6667b619bd5e6528ef

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
491bcba32abe3120587f1f1a9065d04a

SHA1
ab90f7758917ab13b3b8aa60dc09451f0ddb5db5

SHA256
6fad22b69bf2b4de4bb7fb0f3f6eed58c505d71d7b60d5d57354b0d286356e20

SHA512
fcd96ff8abae766da0d21f749bfa9234184459699a24564139672fa99bead39061c06df8e40921cd07a0792a833226d626662d0fda8d20428d7df0e15e478991

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
d8fef23bcca2ada10055ad2f417909c1

SHA1
7f6a2cab88fc29b1d5a0b03ba30ea11c07ba40b8

SHA256
16fb55ed5ea692b4d2147c1e32b48828e7a2e5fe5d2177c1f48aab6d7605563e

SHA512
08f5ec81c893cc5179453c05315f52892dadc3e907116eee0bc2e82a1cf8d0b8728f95db06660fe33ad7ada68e19ef77481834535180b6c8e0416df54b9e5fca

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
13df2eb0f391ca0ce1c543b7d886657b

SHA1
389f885d9c4b1b83cd1e42f64cd0e29255987464

SHA256
31155014b6c036efe7901e4d5ed040dd086211b33e8e6b6dba47896d7024f1be

SHA512
3841f1bc01826c7ef7c589911a802f6467cf66cc16cf2174465a6db199721d7d32349073406178b18388a500e0da43de325774464f3ba36d5eb6c7d57ed122b0

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
fb0c096c18c454ca58b52e66766526a5

SHA1
f35d59b24e744defec377d41aea785e8b0b95f24

SHA256
a2a4c50b84adb942822f15533295894cd1e41bb8f31eb9b4f982405ee9c0dd73

SHA512
ed3253bef3686cf2a6512d214f05e49ad1b59b65cf4c391380faf3c4542acfd1805980538ca742d36a041be27b57435d8139564e80c843d70313bd1f4fc1a1ab

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
2b40b3c34f45d1ac23a182582126d2d1

SHA1
ebe0aa4a69501acb680ddafc480b858f2366a361

SHA256
c93d1750a8d8699526ce92257a7ad6d86e35c58912d0622c5d09bfd69a87a1e1

SHA512
17d150b1d9177632334366bc3f3b1b5fe47300885e325a1d9242439130f43881e52aa286f23cacd89b083870d74f5a6d69beaca6c094d9b6b39d925211f65a88

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
afa1791e5db453a656e094bf7165df75

SHA1
190d9cd6aaf6f2a4ca17907011e21fb6ce4e516c

SHA256
9239d65d4e216ddfc1b8c3e8f292702a0dd9e9daf49e1ebed082579ac5821d80

SHA512
fadf8a5eb80c82a2861f5e8fea75baf7dfddd3de3e3112f81b184a6ecd9fda2c467ffbd77a7902afa668aa8c2df335e9bb5311058258f0932b20c54da879cf90

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
2cdcd629c604a3af6676fa151c062d9a

SHA1
a7cdf671f3d96a5b256dc90bb83754f3d6c98321

SHA256
3447bb45e03a2106b9f75b853696d0436b3e2746874956973c7aeb2aa76c94e0

SHA512
e0f62d628349facca5cfc7f67d5eeef1e5c655c8842c73630cf19b0fcbf76ed47dc6c989b8f3c9efed4e79da80485a0dcd6c4b8ade14bbf54d633987e8a89369

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
b9e0ae288bc0f3a07cf044f0cd14bd59

SHA1
f07159bdfe8cc8019ee6088b509625de1bee53f0

SHA256
ad7c20ff33f6e3001576dfe971393a328ddd18e3f0c409e9cbfb62f0643ae87d

SHA512
8a6b58eeca0c763e8b6568bca22306a9049a7014e05a9bc9051ba05972e466af3b79016386b3aedbe460b13d530b1aad9bab51e2f7822012beb09b0ff077275e

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
ccb89960ea299e239533ec5cfa799a6d

SHA1
a46008a0ca9282e8b8447c8cd70d68eb4c153171

SHA256
806185605fc31efca766b5f1049d83a23e57db5675bdaf6026c7ca3cd8be1077

SHA512
ecf497a30261223311b3ef50e454e659438e505bb5172c9dc20b3df3f775a4d6fce2b4a9b01b19f114f156699e40748b62f2922fddcc7ec8bd86dbc5b3c4e939

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
085ab4d21468f8c42db10a4c677b706c

SHA1
77ffb58bd5fb0874fea9bdd273479468368208ef

SHA256
a971b6d2793fdcfeedfd6f5ca18bedd3d44977f826129fedc31d7aa88fd00607

SHA512
f37fb4d21d33059cec8d220d600fc9cbc85127cc23a463b4041beb098493158688bc8c640b0b5fd5f5b251b7ab00c1ba6567b43ed0253da42bf18828ce755884

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
eaa078b7858eb9b48d61c480cd1e9fa7

SHA1
cf6362733c5994b712c72357be1878c476312bf0

SHA256
64317f6ef65d065d34af71920b18e06fade252ec91a743c82e1f949bf968eae2

SHA512
80c0946d3f1ead29973ebb4cefed3d6c31738d2a548d93544ec64204932aedbf4a8dedef031b192aa0b363ff488d49a9cbe8acd3ae80f4818f17db3c05e7df88

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
1dcb65070fab379de19f44faa24185ce

SHA1
0f0c604b2f2e07927bbbd3d0ddb66d3c94e12547

SHA256
403bde23cab7c1365131bd1074703ecfe0b18e4fb74eb3186ed8a4e99505d47e

SHA512
36e02acf1adab85b83e156eeca4f73f8e342585792f11db84e66eb878f08f25de45045d17856adde1446f3805c5be2520e6f1f7c66d84ba848c07cb9c1657695

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
310ac0d4c1a688e8de3375eae0417659

SHA1
d263a055b46c064d743745e922070a18c6a37a15

SHA256
43ffc791f006191f1dde0caebb43c9f6095f4b2d1737977144f9bf13b47f5db5

SHA512
e86f5192175c2071538598aac6dc481f806fae4e90d4b6db18d4e7c9e97109c33da8e504b917b36bcce48b49316e5123e9b4debb52004a4142cad05e208d0b52

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
712fe6850984e225c3b801aac8176e48

SHA1
5234450ee406e36a09fa24ef8226390e7daf18ca

SHA256
f896f3bdb9fc78d78b26f827d4c04537df9c81484ed5c207a47284466aadfabb

SHA512
c0f56f68eb23bd61a2aa4405e20b8f28cb1959f5b4f8e45345c4a14120e56c5aef3f90f58f2888d3f8d08848d834a51dec513b993e8a7586247f9d6dc0ef1838

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
35e12534b477dbbc950008d0b9e48b2f

SHA1
8c8915df37f9345ccdf65df19401955a666adabd

SHA256
e296f4114f97cd3dfbbe03ea3ffbeb2d53578a417c9e9d02c6f6ac850b96c85c

SHA512
4842b68f65b5399cff2235d00e84976bd95a56fb739d3dadee451a1fc8469fb2941ba3f899c59a2dcaff4766585bdab19e9344d44adbb85c5c7302dc865b6fab

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
41fa23f33a477f4987a88f1ceb33d503

SHA1
4b5bd41bfac7d4091c0117cb2c2ec71b66b18a3b

SHA256
781532bcb9b35505207a5572ec2fa2ba9e9f6c5c03d6bdfe16a6830339c03161

SHA512
7a437231289103139895455d95af77fafc647ac12eb23ae862739422950031e3b01cba114b3a47e9a736e0ff3ae6407fde22f1cfb710d33654d7a28b9d63ded4

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
a27a03b336edfc22a5f483225c694017

SHA1
5b88908bf371be89ddc8e99ee30fac70b28ae3c1

SHA256
d1b58e30662f37dae10f4e042e7789926aaa1d8a050181d16da18a6fd8bee113

SHA512
e0b8d253264cad2cf4a19ad6ac7721ad3526bccb0cb128c4adbdcfd42015636b93bf4ea572c4d5d65f18711f54621d94b321bef36f6199374c4f30866b2a1ba5

Download Submit