0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
118s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14-11-2024 13:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3472CB2D1AB89AAB.exe
Size

137KB
MD5

cdb5b9402d4db31b15abd8dd2eb1947d
SHA1

912c9ac3addd53685b3409c46dcb73946a74ecd3
SHA256

ba6a4d65b25c86faa7179d1aa3db48c2fc445e393d1b8c0035dbd81d27b93d54
SHA512

50280c0dc4e6d2709d2f18ff77134e029d1a123a5fcb173fab5fc4cd164b64d5b168b6286f39f6d5be7b0dcd140550692963d4fd08577a79682a833d6a6f8619
SSDEEP

3072:PLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hj2bIoKb:PstYrEMw6Bxk5zOFNtgJOCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 3472CB2D1AB89AAB

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11282) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

3472CB2D1AB89AAB.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Control Panel\International\Geo\Nation	3472CB2D1AB89AAB.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

3472CB2D1AB89AAB.exe

description ioc process

File opened (read-only) \??\F: 3472CB2D1AB89AAB.exe
File opened (read-only) \??\D: 3472CB2D1AB89AAB.exe

description	ioc	process
File opened (read-only)	\??\F:	3472CB2D1AB89AAB.exe
File opened (read-only)	\??\D:	3472CB2D1AB89AAB.exe

Drops file in Program Files directory 64 IoCs

Processes:

3472CB2D1AB89AAB.exe

description	ioc	process
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pl-pl.dll	3472CB2D1AB89AAB.exe
File created	C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\System.Windows.Input.Manipulations.resources.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\mesa3d.md	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.Interfaces.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\s_listview_18.svg.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\nl-nl\ui-strings.js.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\en-us\AppStore_icon.svg.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_KMS_ClientC2R-ul.xrm-ms	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSSOAP30.DLL	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ro-ro\ui-strings.js.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\pl-pl\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\mobile.css	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription5-ppd.xrm-ms	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-40_altform-unplated_contrast-white.png	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\de-de\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\fr-fr\ui-strings.js.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\offlineUtilities.js	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-30_altform-lightunplated.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main.css	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-pl.xrm-ms.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\RADIAL\RADIAL.ELM	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\setup_wm.exe	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vreg\onenotemui.msi.16.en-us.vreg.dat	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Diagnostics.Process.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCalculator_10.1906.55.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_scale-125.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\177.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\ImmersiveVideoPlayback\Content\Shaders\LoadedModelShaders\Platform.hlsl	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_GB\en_GB.dic.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-64_altform-unplated_contrast-white.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-36_altform-unplated.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\BadgeLogo.scale-150.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-24.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\coreclr.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MixedRealityPortalAppList.targetsize-16_altform-unplated_contrast-black.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\vccorlib140.dll	3472CB2D1AB89AAB.exe
File created	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11811.1001.18.0_x64__8wekyb3d8bbwe\Store.Purchase\Controls\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-72_altform-unplated.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-16.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\msadc\de-DE\msaddsr.dll.mui	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\nl_get.svg.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\ktab.exe.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\include\win32\bridge\AccessBridgeCallbacks.h	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_2020.1906.55.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\seqchk10imm.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Checkers.api.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\fr-ma\ui-strings.js.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\api-ms-win-crt-process-l1-1-0.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\195.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\LTR\contrast-white\SmallTile.scale-125.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Windows Media Player\setup_wm.exe	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MixedRealityPortalAppList.targetsize-40_altform-unplated_contrast-black.png	3472CB2D1AB89AAB.exe
File created	C:\Program Files\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example2.Diagnostics\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\meBoot.min.js	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Common Files\Java\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcr120.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\mshwLatin.dll	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-24.png	3472CB2D1AB89AAB.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

3472CB2D1AB89AAB.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3472CB2D1AB89AAB.exe
Interacts with shadow copies 3 TTPs 2 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Direct Volume Access
T1006

Processes:

vssadmin.exevssadmin.exe

pid process

448 vssadmin.exe
1104 vssadmin.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3472CB2D1AB89AAB.exe

pid	process
448	vssadmin.exe
1104	vssadmin.exe

Modifies registry class 1 IoCs

Processes:

StartMenuExperienceHost.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

3472CB2D1AB89AAB.exe

pid	process
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe
3420	3472CB2D1AB89AAB.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

Processes:

3472CB2D1AB89AAB.exevssvc.exe

description	pid	process
Token: SeDebugPrivilege	3420	3472CB2D1AB89AAB.exe
Token: SeRestorePrivilege	3420	3472CB2D1AB89AAB.exe
Token: SeBackupPrivilege	3420	3472CB2D1AB89AAB.exe
Token: SeTakeOwnershipPrivilege	3420	3472CB2D1AB89AAB.exe
Token: SeAuditPrivilege	3420	3472CB2D1AB89AAB.exe
Token: SeSecurityPrivilege	3420	3472CB2D1AB89AAB.exe
Token: SeIncBasePriorityPrivilege	3420	3472CB2D1AB89AAB.exe
Token: SeBackupPrivilege	4508	vssvc.exe
Token: SeRestorePrivilege	4508	vssvc.exe
Token: SeAuditPrivilege	4508	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

StartMenuExperienceHost.exe

pid process

3216 StartMenuExperienceHost.exe

pid	process
3216	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

3472CB2D1AB89AAB.execmd.execmd.exe

description	pid	process	target process
PID 3420 wrote to memory of 2924	3420	3472CB2D1AB89AAB.exe	cmd.exe
PID 3420 wrote to memory of 2924	3420	3472CB2D1AB89AAB.exe	cmd.exe
PID 2924 wrote to memory of 448	2924	cmd.exe	vssadmin.exe
PID 2924 wrote to memory of 448	2924	cmd.exe	vssadmin.exe
PID 3420 wrote to memory of 2432	3420	3472CB2D1AB89AAB.exe	cmd.exe
PID 3420 wrote to memory of 2432	3420	3472CB2D1AB89AAB.exe	cmd.exe
PID 2432 wrote to memory of 1104	2432	cmd.exe	vssadmin.exe
PID 2432 wrote to memory of 1104	2432	cmd.exe	vssadmin.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\3472CB2D1AB89AAB.exe
"C:\Users\Admin\AppData\Local\Temp\3472CB2D1AB89AAB.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3420
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2924
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:448
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2432
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1104

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4508

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:4756

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:3728

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
b9d200f027afa7c48684a0eb169b15ed

SHA1
be5e360175a53fc5635a84de8b26d11eceafaa36

SHA256
b39f1610e9d4f703a264704b791061b469618063d73ed21e971e8d55700fa02b

SHA512
26bc01a160f907e91fc820f867299f579434cc1992f741058ca209e3f374aa74e33212fd2476158327f78d1bbb7cf4ba8a26e8eb15d875a927689a05bfebc1b5

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
c7464bf7b7ab9abf7cfb8dbeb565dd84

SHA1
362eb79f84e6f89246b97a9d1dbf6cb1190ecc01

SHA256
566fc870709d5ea29b393d8976b97b448c44ac6d551b232a1bf791fe0380b50e

SHA512
cb76075d527939d545e1df6bee37b5cc20eb3a3eb7fa0a1b4be1f8425ae539b81689669be47f0d271cd31d88ec6f3fadfcb11b6b7785304e216c66c577e6ec10

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
6891f0a0bc264e7331b0f4648e0876b8

SHA1
84c9f108d979b0b50d6b0900666423877cd1952e

SHA256
fd0256a5a349fe519876a1b19f846cc35a8210d5a45d405f819765f7253892fb

SHA512
93d2843336030ce12faa5e460c17c49d70f0914190530a483443a25cacdc80614903c443037e2fee3b287a3a205bdeb79ced60887506645595a9a8aee1d4d292

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
09650512767b6e45c7337d07bc7bad51

SHA1
9f14b227d1288feec96ea31ed4c3c95ad37ba4c7

SHA256
a3d5ad448ff717fbe77615d61cee2a3ef167ffa1425dc1a8ebcf9ebf80bf7ada

SHA512
ac85451405465768d06101b93f65046342f93c95b5223b173544e3c2a3c43305f8c24e4b059f85acc1596c8d0876fadf5bda01562745efa57fb6916e9450d998

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
7532938392ac004b82f90ad6e3d4502c

SHA1
0df74385ec06c88efbd4bd143a75e7a48aba3e8d

SHA256
d557d30e1c0a23dcb21c83a40d17f1b3894a692f178d191b61b3ac2e57c0c52d

SHA512
2970d1bfeb3c5384fd4ee1c398f6e08a9a0feaf13ea3cb93d220a5a7d2a4784d21d5f632b3172ff613c95f894b7babd9c28a3f4022b8c8a9d4bc4eec93380167

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
d7a8da35f8e66ac2ebac8e31a5ff3705

SHA1
42de854dce52c1c6348013e37fb1dd1096da1266

SHA256
27070ec6a2a6f39b71e47a4bdc7f8507530315376227ef35d114014d20a4869e

SHA512
649f3e65c3924de3b533d3fb07ec887184d999c0fe87ba61bdb576f905dd187d0a540a93fea54c07e180b75f9ebbae2cd57835c57a44db1607ea3511e775913b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
4783fe1eb1cc1db502ee14bed07db10e

SHA1
7aace3c382757cea3b8b3720c930bffee3f938ee

SHA256
ab352ff76157351407a9b06f95e6b9101e5c899ab61b7b6dee888226bbe7dfc6

SHA512
421d949aace099605a518d652a0029acecc8125f46560e31f75fd781a9603af8f8c2f7d52a062f7df0fd8c1362eae0a1da2703438f26c5fb70e15f0a266986a9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
54f090713dd57954c59b150f5b14a170

SHA1
1cf2eaac30315d98018fd4097f8a7f28ecca5b20

SHA256
1a73f1b9a77024ed5a2a5e1990d7d139e377460ee91b088a0e72876ad4403dd1

SHA512
91e5e5b1ad94d7a351f8a11358f4c6c67de515db2ea2eeaf4a79f44f943f149848016fce75f75dd2c7a0341fbe8cc7afd1921828409819b6f411ae4be2341208

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
52b59a420512604f9e4b0a07e6cca1c8

SHA1
0f4f602bb48f70c9095590942314511cadf0b412

SHA256
94c513c177fc6ed20159306e74cada14d4c50a1f70192a91d527f9cea23ade69

SHA512
e761fde05e5d4ef30b77ec5f5d5085db704963142cf49c8f88bac199ee4c49e15e69374eb2913e11e7fe1b613fa2f0875a1ed898bf18237c32421977c3e9c815

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
57fe45ac74c2bada374ffb0bc961d802

SHA1
0a8ba1417b45121cf716f24cc88c038cf0ba0941

SHA256
2349479f2a9f4d535a2a825fc896e452f298af6aaa0cca13788babdbc04c7e10

SHA512
d3ffae65a2acd6bbee823410b574db3156e55982fd2336f637396ff481c33e7d7662594cd306f1a5baf119a6cc40bc150b859a6149b555cd1a0e245953250293

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
74eb653c10eb3ef19c24cd717e0e3132

SHA1
a72f45139277264013160243b797b339de7127bc

SHA256
8ad4cb9de088326ce0badb4e2eea4c0da534ac9c7813984fffab57072a739fe8

SHA512
b6fb7fcef91f6b7a7d57dd5740f0055d616f2f4bdf85ab3db5f1eb2d5ca68e994ce72fd186427c8e1bf67342d57df04759d85f841a013170f900eac5d0900eb4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
c3e628971faf35fbaf5e50937ed16818

SHA1
c05a11a29dfbae2f91fc8b5a6c30531cd477e23a

SHA256
33a78a7bcd3531ff72c396699595b469b37f7b9e7e90262379e1a73deefb26e4

SHA512
5f2f02f8e109c644c65287e8be1b5b827232fc87b3fd481c895a3e68f2f54b51a8578af3179cba1fe203427f2c0f8745eed2a5b3b6743067a149b3c548895643

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
45175f6978cafdc930475ca99624e522

SHA1
fb68fe349eaa4d71ed7f41b89e8d5e6690bdb353

SHA256
2246b772ec5098579d7c3f1a244af383e05f5ef7ab82aeacdd43cf44a9d4c47b

SHA512
5f64c85acdd034bf4663d93644d88fcdcdbe485fd53d82cca5f6a2dc27c738665638c1f628a1535e0d5bf97695475e918a3c81a76e6bd8bc065f370e34a08805

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
349e245283b648f0a1214ff17d4e2e68

SHA1
e17d3eba9be26a24a0a28bdff653254e07cb3802

SHA256
4702062a86c4aa36f03d918dfc8457654c7b925c17722b97d582a30576201f71

SHA512
92ae0ffc3149c19d93194684e7a00a7a3d05795ee84763b8e1f5eb1b5ac5d5af13b8beeec7ca4855fdf918004cc2adc51ec6cd9446e48a8c53bdd26ce5c08db1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
b5e91646e67813494016f6088238867f

SHA1
dc530fcf06f300ed62d63747047873b0cb77bc06

SHA256
c752e040e9c13670e4d44320c787f890b31dd0eff444ff3e4ee4fd507da03518

SHA512
581ef8fd98d7f26e13ee240d74f5a13c0bfa23d39affa8dafbf532ace5607d9a1f880a607f681df929750a92ccc067e9710b17ccb1eb1fae4ece4c1535104bda

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
3e402f76ae436e0f2c506933a5849ba2

SHA1
0c4577fc717e6a734a476a64296a91b8b495627a

SHA256
2018465fd0751542c42151983665eb747516709592d572244e3641a0c4d23465

SHA512
46930b8cae48cc45057e1d1177ce053710f722a2c2b3d99a9597b780c04a877d049daa614bb2e6c21df9426334b4b35cae39f9048cbfdb2794bdf8d01a82e683

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
d02195790724739bd6a2315f16fd2eed

SHA1
bebb5dade4a6072a9d05543513b0657be69c718d

SHA256
38316070a6a1f0a6008e7ab2e9912b4c8e1d41b8b9afb7425827ffa5fad3aa56

SHA512
e8245be7df8d1f798f6ff93068490aba5e9a95e99f767529115a5c7d96301195ea7d1362348d135b83354a2c3b34c3fff09944c3d423d5f63f62f933c0e7802a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
aaa4874ece7aa98d8f45b763881f5dc9

SHA1
072542f7865b0689f364094aac5e0d22ab37a446

SHA256
7f332866abfcf693caa269eb8726f39f0e5ef4ceeeb1caa16924d4f6c44e218a

SHA512
754731fcc00ded0d12a23a994d9d4ebe71d7f54e63d77dc5da700385889efbf2607d116ba1f29af4a5e4a2239395a06e4cccdfbc88ebf669acbfdd1c81b3aecb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
d24377a3fc5dcfc6a4cf0b04d2e108d4

SHA1
23b60989fb6113ead576f0ced1a5edadb2fc9761

SHA256
bc464763c0d73405826ecf47928b1131a9787120223a6ce99e534a8879ce3c26

SHA512
bfeb8c4c25c65af10d3a036cee2f8e5763aaa7801340467c2f110c0c6e32a2045de7c92c203f33095f511dab823a7c8336e844bd2bf32cf9172e7ad846c3e460

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
df0069267f6860c90bf2c75cdcf23ba9

SHA1
3456bd692cf952b4a361d2af0f7fdabc576b7dd4

SHA256
3affc455b6da99171b3e0810ed19250d87e203b04abc12dea8bb9febb52024b6

SHA512
dd755add1b7608b67faf7df842d3c945e81a131e27dec72b76844c36b0206e174aecd01ba0aa7c804b863cfd0eb4a2a4704907cd83e9a02e2a22e3add5c3fe95

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
670084e60e4e7f8e53746fa3084cc570

SHA1
1c35e7db847277f0cdd2808f4a88e39ad9ad4602

SHA256
972c1b780cfd46813e20fdc72cc5d2f9c5043b88d28722d7c6f65942d4aa4e3b

SHA512
787e79ca4c417a336a6feeac3a47b34ac2dcdacddb014df4cbc6c77cd8df67afb63c08bffa1d8a52d45e0a48dfe5663d53dae733a4bde915a0d33b912f21420a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
8345c3ca0299de5730f7cd9cb0fd4f0a

SHA1
8cce8c3fd1c0c7b4cefbd7f2d92e6a487a3356b5

SHA256
1f32670c58f7f923b7d8dabaa9e79d6a13d81a84cc9df845e76b89afc57a96e8

SHA512
79db7fd402a239fe62c1e92c67f675c5e512e02cefda8fdfaa698c1bf88292fd5e743bbf6a6074fb7e1e740b452e7cbeb19bd725a91107884fd2868be951e4b0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
a1ddb7b5a82c32e935f455cf3032e728

SHA1
8bbc08d8903c684a9493476cbaa4fe08412593f0

SHA256
c675ca14bcce6736aad765f3b530a998fd91e5883456083333502935f3a91ce8

SHA512
91f0d54df95abb4fe193b724b9662c5a07c96a45ec5db2a463addcb9fa49e1cbc2ebc3c9a9066482ff735a118331c725b2345228a35d1d008c6fc75e660897e9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
3fdb9aaa2824665437dd880ae6deb9fc

SHA1
676596869ba915e48258f02a240df3f391be1ba6

SHA256
7a8ab16f2775a35e761cee354d3b120eb4e2092eb0e614524799f3304504c027

SHA512
2acf8af879393882ea877cca23063102032ca868e3f9da7a0b5cfa62ec5bf7efcefde09d502e96035af40695498936e187533caa3f9584e8c2b1d50cf81f7c46

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
b1fd1919377cb4b95dffcb3005b62476

SHA1
a6bdbfc47aa1c0adc4b9c15da46b3f631d7df77d

SHA256
cfab345cd8396c21ee909f8e3c4a7531e0fc795e5245eaffd7f58c72af688c86

SHA512
e5ae8d6ef809d7bc998be815cc5be5c6328c3e30824179ab9d7d4efd4286ccb36eaa12a5197dd7019b562cbedbbb2aceb5fa57fc7c45f7bd9f21713d6d33fbae

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
a22df24ed113a085f20b5cc854a32737

SHA1
59835ec622378235ed035853490d6e24a3afcbf7

SHA256
9f73278cf6de9f297264f72a9d803c3336b79d90cfb5838cb2b6cd4471a73f37

SHA512
641c99dee082c4f2b8b53d53e2181d973527182c07c6e0b498d85f9655056087a7f78b8c58fd2d2b227c48e9d1b581bafa582d4acdd646719b924ba8fb6e4f60

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
552ff6591179b9c15acd290c41d25986

SHA1
c03f4de61c87d16b12307840cdc113eef2188cf7

SHA256
6a02dce02d3d3c92d7e88b37f6a8b45d7da7552b85863e94665f7fde9cd01a67

SHA512
a051602405b0f89035407fdf9b4eafbce36c3d57e487222d8948a638408401bbc8f6aa22c44f7bb785d290587d77f9a21c2081f9f807c959c2a2a47c1b39b881

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
837fab670fd5c421bedfcf74164f356f

SHA1
d5bd136b91e3b9a037379619570d1ce8a33e371f

SHA256
ff08f920f760ac15c4a49df95e7ddb281401756458846fe389550d5803791313

SHA512
70146cde602668ff6a3a9e8aa07c202b314164fb706c5e0e3e949d985a7fb7963a3ad23862fc075522b1ffbce6275d0dbfe65925ee3f005d3d1f00b14d7d507b

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
1eeb7f3e496b4c67d5663c6ebd1b57f8

SHA1
567aab8d4397b41bce3d51746b9e298a090d20ef

SHA256
3f90feca49ad90ed2ff7a3f765f6c8a520558f8b970a02284bb5f96de1afbf98

SHA512
08a2016a5acf4025f654ca07a7234ad1f6ddedbda65e9da1ca8013728bd7f9fbd55228bd702bf584bacd865e9abfb97586c8c6ae407ece8d66d27d9d3d6667c0

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
84a5310ed07fae46e6a810544786ecc4

SHA1
d03a055f8de96fb5e6a1899991ff6fd2cb1ea483

SHA256
99d92319c899be8acd78601344ad45b663fece5bd2e32499597d6ffeb491f988

SHA512
73bc69f6b3432bc513683d6a0ab5348a139ddcfa8944630b4b04504f75f3b711a9d05485252ba5c29d7190700a8114cf8fca99fbee56d3dff35effd31a0e6704

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
974d21c63862e2ecfcd75fc5b2e48b27

SHA1
250a254a58207899a6832ee541d1fec5ba704e2f

SHA256
ef71d1bbd0f31cb84e86bd5e4fcea536af2d612c779599df7f999fc558e0c909

SHA512
913f146df7f2f0a26c97674163cd063cee92178968db9b24a4dd3e918ea45697871c468477114043a8617e9f353608295ef7f797d020c2e5b3de0c8c26c962dd

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
5f00b1bf497de974fdc5c47920e1482d

SHA1
0861ab85c25beeab4067543af6894bbc5c9217c3

SHA256
2b372307170620b761c3f92846d77e2cf5ba0fc1db5134127aa6baa3cca7713a

SHA512
a2e9da5551c2b28736ca23600b3cd5dad77edfcae12acad88bbc70bbf5a623e30ebfa252beffbb540f372450315727eb26bd26b7b706d497cebcc7f779846adb

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
fd65a6b5a7f4495a37494f131d152186

SHA1
d6f9bc004832af2b9b23a4886e37360100202c38

SHA256
5518cae9b872a9007adf507ffecb4baa06ff315c1b28004134e731bd16ff82fc

SHA512
3689dced80150034fac8bda133920f6dfa258208671741b0268fd505728f4885282f9267bcc9a2cf0416b1923e4246c4e91049394ed3f45b3b0e8482b73ae93c

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
81b93801f00c95e473851f99b224962c

SHA1
0ebc01c9f06497bc101fcab4f2227ed23bbbe9eb

SHA256
5d283925575a878aca4a733f92e02ba659040a3bea330df8f1a42e1dd473f4c8

SHA512
b14ca2163cecf6d6b97a6671081ea3760a2567efccadad79881e9380a9b0b2106b55e89d1c62211b4738328328535172cc9dfc4218580d851fb1a1de66b4fcf2

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
bf83b8bad36fdd6a76d7e5bb71993f66

SHA1
87e776572253fd0a371fe5c7dc86b24e87d8c087

SHA256
c7ce817c3e48ae19c48d5fc7b0c876b582d2532b17da41110af8aca0561cc1ec

SHA512
2ab5a4c0497e7436097e1e9c2308f632dd7780343bd5b78c2c761486910ea58a4b7d4be05fb7ba5da1ce3ec79ae113a90a3b4350d2c8a20d48474d49e2b7f6dd

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
b7eaabe0f1679b6a0df71cf0653f1d88

SHA1
1ccae8432b29476ece85a5df1eb94a6b0ea8e3ce

SHA256
90208b46218ed0949f5f30fa4885fb35c47361c3ac3f5564caf67e06b38db1f1

SHA512
935cc1946cec1f07a7840a519064c6b69390c5b4eb7127dad743d17dcae836f61befff836095a2b19fd73aeda20607ca7a83ddcb8c2031cda939f94987f12ba9

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
bbe3ccb5def33cbad7de4ba451238151

SHA1
e13be62efb73fc1df3ef7ea23448d0317e53add3

SHA256
599606b9bc1ac924b10ec2e50220b5a62c7c01e7c8ae0a051749b3a7341c9a92

SHA512
05a31c9fd75bcb49b268ecdb82a1a0b5530c06e6e33a6fe35a8e010a51a9d3172b3f88f1d976ffb8f9e2d8b67f353a170b5c2cdd4ef714766afdb6e3f31e0ded

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
54ac7a23c8d82cb8ce652c5c1123c7a0

SHA1
e1c275dceca82a664f78c49011d98123075d1244

SHA256
a3a5f6487d536053a8c039522d853f975595a377c48cf2501edade0c00a109e7

SHA512
31ccaf30765b6ec24e16569284f8ffa62ec75e0fb8467e568e01603278275b646d5e66edf08d68a27044892d331377d72b2b419e4ed37c919a36a31e17ec57c1

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
3202cfcb0929918175f14007ea85c3e3

SHA1
178117c6764eccbfd3a40d816204ca8cb3e5c92d

SHA256
dde3a676bf2d4325e2098d0377be480be2474024fc159087bb14de5daa14d82c

SHA512
6b5b3c76a2e93adaaa98e394a98b0f731b282b2d43886341510d3757c914c654015502ec505256211e64fa26c8f2a9c22c92414acf13cebaa7a29362732fc216

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
9c9b2a70072512ebab9a06464e23c0eb

SHA1
d8fa138c8202b3410f4f9d81e342fc898aaf6cce

SHA256
dc62338d990b3f47523aec71e3433d53236b8abe2d5ba8485c61c5a8debc9b14

SHA512
8aedec9f80146bdc894ff3bf64fe6764a05644b8086671744dc1da6715111700789254a4393c0ab8a301e0fd61a668c9c65daaa2bed29d657cbb863b4a7038ae

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
0d3924feda1c9521140476cd809c426e

SHA1
a0f5e9257f481f7591304540475f60e9b6d7aeb2

SHA256
4a4799af1045f5c2c2bf0376ebc42853bbf32b41b421010deee57e0dd2c53840

SHA512
fc0baaf704249e59860118d715957e8c1d9e22145e2e253f9cfb7585a17f969884f614be82576f4fb0e057c25353ceaa878401dd0e7699ffa4953e38cdbcb920

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
4f00a16813dcafef92e866dcb4558007

SHA1
a73b275db879bb670a5a852ef0685184e7e68d30

SHA256
696d7e7abf724ddeacc3095dc30e687d66bfe4946bb9c787cc2f7999d8b61afc

SHA512
62e2dafcfd02edc76bebd4444f5941c6bfd39981f244ac11ddc73d79decccd782551a49afa55f6f05d81ff22e55233858196ca2615e8709c091b9ad21485c6b8

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
cb8422751772575a3e7b17e0454f07e3

SHA1
648a410f208020ef08637ef7e56936e4e6ca0d71

SHA256
970827bcd0340f2f27c1f808b63f4cbcd2b2c90c8fd5d89164b428f63da2f7e7

SHA512
f8fdfa99e1b54d503a4d4d064d2f0e6d37c7dade354a241338f4cb3d6e7e68d3bdde3b83082d4ae74330c10c50972e1f4dfc19bee9954f2476c2ff15ae90144c

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
96199957cf5d1af46a9527d44b138b2e

SHA1
cd6f0f1bcc721597716fe09959d3d4b3072a16ee

SHA256
ca774206846959402f8464a9aad0f8b399dab45ff7df816dfead9061fed32ef4

SHA512
54a253846ef2f3007ad399def96e5704a6d9d5fbbc0cb169949297c8aac60a011389fece68cb3ea048b2dca187453d8e3d501d65f25cdaab861b76dd2951b020

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
c01eb45e66fc7e35229ba719da118fc4

SHA1
e68b266105d9c120cec5a8aebdb542465a4ff82b

SHA256
673ae726acfef6bcd4f97b3c6dcd558fec516f0b4b9004d2cf1b93b75d9d2ef6

SHA512
f0e7a17a220f821abadb0e20ac4cee33e3b169600c2928ae8389de5718715abaac260718eff684ad9e1ef8bfcef2e36a0b08a8806e031a5ea4573ced2d71d903

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
69ad3a26e3fed7c1ba67a397657eebb5

SHA1
258e0a78ec978eeaadfaac3bb9963f540fa15c0a

SHA256
0dc9e69ebc0888d37bf89d945ffcf4c123001e523020956c8c4f196a99078feb

SHA512
9a58c0de994d36743341a329791a72867c47f6edc3c346225efdc1d45a0a4450ffc84c6707adcc2905f76d1118462da5c01fbffd5292644a799b1e79fba52ede

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
2fb448a3a5a9bb3fb1c6829767373504

SHA1
04312248763d4ecddff10f2e4c2c664642b707a0

SHA256
7a6e2d57d5c72b39a227192538d80e8a9ae78c4f59c040637f26b2da642e7f22

SHA512
91b0b5d62d52c56d76a6fff3372ed84f05bf8fa2ea6d900131a276e0a4c60ee2641e4708322b17c953ba92c1be28da5d5fbe130453c7b2b4ae24a95cea5cda1b

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
c487c7a39e4ae3cc6ea31d16b5411449

SHA1
633f0afbd918ff0dc717b1b05d1b67b28fe56d2c

SHA256
35961e1a71181c529b5f5eed4f43f018952ed8de5a89237cc4ff8e6539f8af47

SHA512
1ce51413e7534af16a09b98e67b5e7cc076272f93cacf2921fa9778b4ee8dd69a0699330d14a84765578ae0a6cc07b25861d2a47f72d30fd1af160f81628ff6c

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
a278ba18d52cee47ca36b2da2e96447e

SHA1
3f20ae776b02af3cf33ba7b9a3cf3bbc4f353f10

SHA256
298e62961185f2dc4ae75e7d5c8fd7a3c5f5943e310221deb6682908fc9daaf9

SHA512
a1a3ca1c512a7ac957c69a2693440016bc7479d70b63f641a28a69d03d98c3a9188c82a18493afc259b30e1233145eb752a9f9bea62a6e32e0066a17d513fbd8

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
423650bddb1e34f0993838a70c25534d

SHA1
39497de5fac0399a81615107bccab5bb9b8bd30d

SHA256
4875cc0830641fed698f305db983f3ed4e603697476c5a2baa6d427b49e6d4ef

SHA512
317bf352533d4934aa7adb68706ae5198a03ada6502e44d303086c448778cda4f14efa8a33b0d7b67dfa9b5aab4e11595edf0e2d67d4cea594c325ba6f593ad0

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
85e7a0fdc36baa2c30db522020b83959

SHA1
ac6c3f09887ba5d511dd1e560a042b60ad567aff

SHA256
e8bf0c61cc10792f8d7c1821ee1f5b636f6e8eff187387d6781af0386ab8e669

SHA512
45306c2f23e0ef0497bbb6e447efad67c759e3bd6a5de91c30e821b2b23724d65c8160a54ae15af52b228d51e9e4bb8a6df268a811ffb76b5cac35ed1156ead0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
1a4bf9a8596c5c71f6d989d3887f7c3e

SHA1
e06768757ea0097d6390dfa06732ca79ee2f130f

SHA256
aba93dc950a670241293ad5b9002fae8cb9597ed458de331b8c35a5d29218606

SHA512
f4039278192970447cc2c9061b181dfc017702ea635daa2cec17ea690b8458f78fc0bd77897d66153be3da4a340fd1c65080f07d5a1eb324afafd9bfc15970cd

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
3e9b2c45680bc326a724bdc92f66ed16

SHA1
090108b885c63629d6f432c5ed863c3345f54fa0

SHA256
b31a596d0aa5474f9b877f28b549aeb88a2339c2e9d977eab28b079c9f398617

SHA512
aad2078b4e888536d11de9e1700cb6182c225aee251e3002b26218a27c019c013b9c44658b93e446e2c92290d19d4aa1a3d67fdac9103e5cc6af59271f2d47a1

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
71504ed8b81e40f9edbadb04297e75ad

SHA1
90929acc6ed628fc3b54e3cc604ad861d6e49d96

SHA256
093e77b5a2a38285eba1790354c6ce17d2ed6bca15e52c23f2899483f2c38c34

SHA512
db313055b3202cd00fee8eca945388959477dceb401a232594b5c8ec7bc84b6c81bfbd100bc98297dafe1c11201556ffdaaecb0e57ec4597aa142df888f7562f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
d1d64a2b15ab8e012b826681699db8df

SHA1
8df1cced46889a68ca1e537d2e84aa8b161e6a94

SHA256
2f088d0e5627bf50807a7e2fffeb0bd08482567cdb4064713a2341a97499827d

SHA512
704a65327f68e8a6a493111ed7606c6992fc5e8fa3ea3bc683f4a0f30c02ed153c3a86d476d0958824effb9ddd745b17d24f3ca62a04af33ba74f8661d6fa04e

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
e969156b4562f4d938556dd0458e98ac

SHA1
98a56a7618ce01fcb4326c7eed8331341951ac71

SHA256
630c442a553983529535c3f5ee87e06a7491fde26d187eb423f05d05c035c1aa

SHA512
c68a0e412a1992df4975186e04ed7b5fd8f79e9ca119dce526796c9f85a93107c70e665a2230125fa10a58eb5c97202d69fb6e55dfd7a4330031238df73ec65b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
cbd75bdcd7dab0f0863a22b276b5c412

SHA1
6e4f2cb833a0e5b6c7037ae8fd3f68c2716ac652

SHA256
6ff7cba60e6d2f593f79cc59bbf93e476555e6ff0bbb7ef039d4728944bb061c

SHA512
c1a911d4d810263ba28d27f07912738658e9c913d8dbb68e33ef477050015a3990e845b280ad2bc98cb414a20a79a118b46e0fac4d06922b2596552824814a8b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
7ec7d8c7327c2e907f39175f45a80f62

SHA1
160a3f7a3741aaa24e126431ceed5c11cb6bb514

SHA256
acfb13674599c8e184983d959eafce18a5d23eb6df942f2da01a6a51a2ddabf8

SHA512
f179a897394863b9a062309ac9e0b767f5739146513afdd69a804c5d1e50e2f84ec7fa858fe144b72a14af751689909cdc6a8550820763ac931361ae47b1e68f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
ef60a586fde6653dfb7f113a09bf8989

SHA1
492e63ef804023e085e3cc0410704c15bc2a9aba

SHA256
70001bd844c74be110d3ef7860e837b6572e0b01f7ebf5a945c5a20896e13044

SHA512
0b687b20ffeadb94e087eb9f59c44fc1e05c73fad2c0ce6e08af33feb174fa33520515d50287c918453d5b005984577c9691ea4bff76386821f96ab117d1c52a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
89f00b6ebfa574831a03bb240a496790

SHA1
6ad9ad01b6aabaff95812bc3e9bbdf832cd7dc15

SHA256
17cdd2e9063c0b0cd694d1c4d8bd638ad03a86b8bf2a445854d1e32499cec53f

SHA512
1083150fbe0d13bb48c3fb95518d6730e402bc43a40209ddf48b19b67a558bed23746d2d7d14e6628950ea648d03972dfb69cbca0c7595ffc53c99cabd1b80eb

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
f9d4e8ba4898b33a9d9f7d899546d972

SHA1
1c59ab734bb9415105c21f552142b7b9cba76228

SHA256
ff67ae6a0617621c3988458ca8a4f03890ebc4af46df490937687662de1d81ff

SHA512
daa2993e4fd9d227345c1d0d7a0bb2908a82c130ab2e9fb61ce47af30a2e12bc7c77e00afb8e9745d8b2184622fab13b40a920567c8cc07a1a193253accf03ed

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
89d3ea189297bb3c8f3c1aa2bacb9d03

SHA1
8fa49e312c9f4a2f21cdddc79b9bcdf3142ee069

SHA256
0a5e50559277e36a9b6065c5ebdfc542ff591fce9a812951544ba932b27c1406

SHA512
8c2113169701bc4f3845192a0056cac67f1c9ec659e99a1134ad531a011cf2ce3366c18880a446b1354684ba169fbb76196fb12f31754889c631d476cca02f1f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
ff3148455ae0fbd47436b0d77c7ecfd7

SHA1
efaed6aa8fcef377433fcd45f0720b6201137fc2

SHA256
2fa25ec38ec09952ce7f8d8d0431cb4c5403e7a767e49c12a93695fcd1d57961

SHA512
db4189ea75b5aee393d1c9d80dd57f3693dbf2928c58fa7f6ddf93e290bc2d0c973f742007c1a62729a3d3eac901cd56aa6bf2a97b38b5f93375962c3e33d5bf

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
e5a5abbf65ac5a5182f77d21fab76f6f

SHA1
edf25c95e37f89082254e70a7f6e6a9bf1ab738d

SHA256
d60c0ea048ff82c929131273ef9659ad839e4e90864d12f703cec87c61506fff

SHA512
6baad8ae326526cec1cd9cc43affc78220a5b10288f0abc397afbe8f407de96b58a47c8d20188d9430edc607915f2c45278b9c51225f98f08f00f49790edbc3b

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
37d66b403afa1919c4e56d18a745c55e

SHA1
f3047460ebdb659042f0fc27abb5db669af98661

SHA256
7614ab9dabb0227941c2c99ddade921b1aa545bfc8eaa682ab23b25a509c4f0c

SHA512
176ee8cd412ae8791f77fb987428cf2a231d9d00c576a11ee971df168082f9f159a81d0e71c5ad6085b5ca80025cb52cffbf32fc569415044b2d21da2611fd97

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
d018f5d26aacd18352ab5b2a1c3919fd

SHA1
ede77c16adbe0ccb5933ca190bee24a844eb95a6

SHA256
7730d57e3698b0cc2bf1d15717bb11806e6a39900a299af8622fb3397e76e6fe

SHA512
9e8fb0b3f0638943f40acfff719c77dac6b447b824b77e893b611392c1bfecf4cc0146a1c3c032f863873a088973be1f32fee6a769ee034ab142ac69fe66ba54

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
c6e4fcbae9981709b0fdd0b48082b9e1

SHA1
430d46458cec68b5e72cdd80f55c2de15d0254b1

SHA256
b50d966b79ce5859ccee830d55150bb58ac8e60917764ae422f08524c384dc20

SHA512
eb4274364f7df0fffc9d6bdc4841c319b1e8a8aaadc2c5b9a0ad368c8e42f545adde6d6e8cc6fffffc80ee7dae7d84a8148d179d2aea186482bf8bbde2af440c

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
e870687ee8a7918daa47f742c7ca1311

SHA1
b7f1b694c5b2eff62ed6ed301129e70a227fe0cc

SHA256
c1771e3ba05b0d897ae728ffe5b971fcbc92d7e12bae07f92acadd0ac81d01b0

SHA512
436b3fe954911557e79d2529e7649fcfaa0853d8c3c80bc748096c3993e820eb2f02cc7ef5acfe86906f8fb1606609910f385f6626b297cecc0a6eaf99563ef5

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
fa818659a165ac776ebb1fe57a589884

SHA1
853ec2983d9f792d4dc341151d98f572512b5269

SHA256
9f66b4eb3c115834fa821c6c099409fad6a039d2dbaaa855a28d5d5097bf34ff

SHA512
03cb03770d6ae1801c0a4d845223a60b0efae32191054d470d5e4bd397b2534a1553020bcf2727a75488e2f1b639dfbaf36d2794be64d1b985f619e3ee20f1d5

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
7aa5b0b97b0c69866c9f53e96f5de2b8

SHA1
9b593f5876d0657d0120f623fc2e9e4321db8398

SHA256
77a3a1e978cc59f8f03993eee00f322102daadfdf35beb3f56961b7705629119

SHA512
ca5a1042f58e078528ef4564c39f93e5df5ab0607af8993e229f8883480a367aa7252aa976bf6d111c8a6f4f65123eaa01c9679b6d5e68102c5815759877c86c

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
6623e899bc104accaee131d60dc45680

SHA1
b296d4238d585cf217dfab438c30a4cfddafc0bf

SHA256
079e7cfb9820bc54f055fa3c843c55e5901989a81bc4e106563c464d4ad09a62

SHA512
9ef4d4e52c133ba65c5760f4f6042b1a9461a2cca894c1d8e81796ff841bc8193d03df89a26520091366d2b64398dc5ae6d498c4cb029d4e7cb9bc0f1b25779c

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
69a5dc69c93f01e4952900018da56113

SHA1
f981d5364939320f9cc22f32f873375cac257efe

SHA256
958ba33d43d1270b2adfd53083e2f57dacde387e39b2ad2bb37267ce82f679d1

SHA512
27a5491831df07d4e23b8ba61332c3ef7737f85957c6a38e15c15566107845c7d347a90ca34e38dbf171e52210f5d2f652f2a40638534469b6cc91d97b3fe3b9

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
71e95fab5e4e2e995c741613327cc415

SHA1
6c67d5b9455921d589706aa318ad989c0530c0bd

SHA256
edfd3b0a057d2f0ed78cf7d2165664fdeba6f2bbbb439e093f7ee9358abbf94f

SHA512
1f44e251150a103d44323f4cd6e9fb4d31d1fc2efbff3acfbdc111d9311591c81b702f76ebfbdd31e3776665f92f39904b193aba9159a76b039ec57fb99280d1

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
7db4e9b095b4e8c61e23061ab127122a

SHA1
d5c7396b4cdfa69725ae1516a1c99af3533aa814

SHA256
f8ab9d94ec0f421878de3708782a0d673068a628d2d7a962c412ebe9dd4bb02c

SHA512
9bb33c9ca2753e42707e293959efa9a63289372d3010bcd8425f1ed993a8445398c4304c4c29e0cc05d4804af3861386c53d45095affa932dccdef2efffbd210

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
3a72af353a7e620ef0ab67c52c1d9b93

SHA1
e77e015913bb6ed03f2a9a26bdda8c6c3b02e9fc

SHA256
4e481b5c58958c0a51c245215e18a28eae45f2a19693e09b4e87b10b7f0f06b5

SHA512
ba663e2adf226357a14183e9f8998981464e9b522b496fa2ccae18d5c0dd7bc234737286523f61fe148d37814739580037a34c8cbfc75c945f12f0fde720ecc9

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
9b5110bcee53314ef4aea790710d69a6

SHA1
20ea13ff913049419d76d390286f79e5e74ae6eb

SHA256
c9f82b0c52270741905c843be41a2fd8d75823906676f232dd9facc515347a35

SHA512
9e5dc7587399405d355df999b456bdad940b6e55131f26c782ac5a4829614a6a119d51b16cca985deefaae0283dbec0d62af41519c9a7dfc3b0402573f503939

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
837f079578debfd5294b9f1f5aedc366

SHA1
47851fb7087f8af67bd32dbc6c0aedd83588153c

SHA256
da79e0d312a4c1c943b08d855e878ea2e8dd37bce3ebf5d60b2fe54ce00a7725

SHA512
5e636337547f9147cfb5bec9c4759d34ce54d26066c840ea4d8e2fea9a6bc8412fbea52db94bdf48d9b0b323b07db1905a8cf267d1bd33bf3e18a9ca74e12e87

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
9a6eec12a83bfdbb63de05a8bd6354d6

SHA1
c65a1bc70b9893c7ec0af58a9c9476a6c64322f1

SHA256
1dc22ae72926c485d1e1586c03080e420e170384e64a80602c96e0ecdfff99b8

SHA512
3c4291350f32e595c7eccd5c13fc5b45e6a8fd7e1c97ad757a8ba14193aab6eb86110330953b038136f3cb02d039486b97d74b3f8ffef33993b9a28caf038425

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
3bcaa6c2b99c8f590ad3ff0c4fa3679c

SHA1
7e4b847b77afb3d5f9f3ccfefd40fdad3cb0ed80

SHA256
08486a0d0cdd85dbaeeac8506124a15c16994e0b669d75d6c02053dc05f3e5ed

SHA512
75b2f1aa05185d5546b78963d9fe42f62a1ec1b9052273739a981cde7f2a57c856fc908d8f71472f18dd959a8744b50e12e61250429822e5024cdb1a14e34894

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
631dbb4c270924f8c5b9410a48e6d39f

SHA1
e4a52e8f065951cb01f55f8315378042c70de68e

SHA256
baa96ebb4d9d410c370e33fdb643600e696cf04edfc5a4cbbe8ceb8c8270dbbe

SHA512
44ff15b9eaa967773746effd5cba85a500f12ea7367244aa08bd8e9ff87b6457c7b1cf41ccb81ff1a538d4163e4f80208fd7e0f11d7a3b75c6597c62562e2775

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
85755234097667802d05ecaa5618c66a

SHA1
0e722bde3fd4f3958ae51a54bf530038282511fa

SHA256
09416606b191c322d6f091d0511948e5cb4f36730baade740a4f984a08b7c587

SHA512
234b80eb6d2e255a19d4d8b64de52e2e246f56fd77c4bd934a5821bc073c0b031b5085c9623677e652118ec9f8ad70d85f23875ea6c2d2c421bd8fdcf64609ae

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
7185f541801297ff7f5e3e26d7d375c3

SHA1
b95ce1ad294933a78691e4303cde03fe9695f29f

SHA256
0420a5916521bfd9e83fb03599a6f7a6f1d5ed39440a380a0625f7b8eef04385

SHA512
364fca76166d7c30545c488972094bc4eb66a6dd6fd7d9cde8a31709dde6103dcd1842ac54a9bd3a8488b02b38d17657fe123d596d7a33972d16638918d9c065

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
fc8b5f7912ce0234d2d4765121dff855

SHA1
94802777674536edbbc604930df2e3bd63daf1a9

SHA256
2de78e64754ad4bc6971470a00cdb0c133fdb4177bb858d835c7e11803cf5a6f

SHA512
7f686878cf5a6945a9656d951c84b463f283cfbc91a35507300a769c160ea30c3108606801ee6eac2a75477c56e503ee0fcea420d7e273568a1b8f424c239c19

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
daf035fdaef9ccdf2b1e29934cf4c39d

SHA1
0c4df0a45356be50c6cc208fa1c0f88e2c9c5263

SHA256
acd790a888708788d2dd91f3ce1fcb5b59386c96270b91a09464a2716d5874b5

SHA512
dc4ef4efcfeea7ff8a187de61cc2e0371fbfab10a85c518fc39fe19ca271154e2fe5c364b37c6a36c0430b95994938f82fdb77a6b6670905f46c1113c0d610e2

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
0df251d59a642c0fe0b89221d4bf5c02

SHA1
659cf5e42373aef03a0839414f404027c30385b1

SHA256
f36f27cedd68d4376466f6b381a64639170bd65bf7c233bd0d60e7661cebe838

SHA512
c7bae101172a4f78672c1fe1c7f5854e8ad4ba6a905101c8b80b923e2c3a451c79bb0bb3ea17657a3b1bb0d41bff8753aea97e6e98db5e73245de542cfb48ead

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
3336b6d608ebee7c5444176096af6b08

SHA1
efc55769db6b4431d11445db9ec74c385890f89f

SHA256
1ba9f92707c00de071c00fa1ad13fb5363f4235b1aa2f522b47ab00e19872b02

SHA512
e0c59547d5d27b98f721ba643dd10a44581d9c5891cf935cd4b98faef42cad7ba3962739da869df837801a4540daa3350ec73aa823b743f91a7c807fd490b6b6

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
1f0e3281ee15d1b037e72107711cd115

SHA1
80d19a7bb0e3e9c4c1ce748d3b952c8944d2f93c

SHA256
82eb6125af5a15bb8ea25827085cbf030a591ef34fba58789245e8206a7cf43a

SHA512
0b10f1427bb20d95fa6895b87bfd91877fc3a6c8c355a541057c1e48dbb5fd6e848134f3d9a346811c556a538ad4ba2cf133f78a98a12662b2b4d3e5b95cf612

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
35bbceb368af7c3e30dacf99d7d26af6

SHA1
6befe763ed6ea784e32055f90ebf79b71000f5ca

SHA256
487796ee5bad7fc377fe5afbb64b7f533cb96fb82c2fbed5cd99ea84b1a55a92

SHA512
12deb739a9a1742a2421d38af7edfe3473d1f6c4eb79b49d2f2d695ea0bcd858a8d7b17bff36c5f72d82db531e3233f427b0bb2c99b8f648ce703099158ae64e

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
87b3be8ae5e9aa8843bbef50a16c814e

SHA1
d11fa5a5c9b98cc5cd011f0cf24172ec3487bac7

SHA256
bcbf167debf64df1b3c4a8f5b1075601143426ed038217b734208300f2d7cce2

SHA512
2ad7cd2ec3b453434d6b3b134deac2247a5665698d863b583f78a32990b539067ecc31e21b4d4640357eb927d5ab6ff33260b2030df8fde8f5508e660d483419

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
ca9f76577400da886db115f9dc851cff

SHA1
d5fdfde2e60da342839f0d2580e904d9f65fb7de

SHA256
f7e51a2a9f639ee3c0536bd2cc7d63ac5c89f7a1f3ab6c4e2ced8cbafc4591ea

SHA512
ecde2739527f082714bd7309fdefd034bf3aff2163e8c9c1a2b77a66ec4b64ae3d1464e8ae642b1f9ba4ea1452d23118c7162dc74800a1d29373ed163246429f

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
7ae94d40797c5a467fd4d9b0dcb2578e

SHA1
f6e74c27ffcc06c3606f23d439aad5544a077c59

SHA256
5b68b9caededde6fea53ef3134702431b630f9a90df88718712ddef3efce9904

SHA512
d58ece36a06366cdadc8e2151cadcdd55d6079495e57a9c2dd8541b6d001af81d4a0d594cdff6dc11ce12c1714707bd6ea3b5176fbe436140b5c13af210f13a0

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
c7cc1b55fdf4ee661f017490a595bb08

SHA1
dfc3caa790e9821ae17d1937332e0080616e9033

SHA256
baa5e016e1e44a51b0c69045a23e95654e1ef7737c586ea42d6ccbd7196cbef6

SHA512
68219b6d1f7f5f50bcc20000261059728f0a43a04ac593241fc14a8b17778c5fc0f8c52f20cbcedec25efc0a801ca6a86f32c04f86755f570b53c75ebcc2b031

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
a5a1236217707d13acfc6d7a1f31ce30

SHA1
37a909f8133bd88701164e435438f9d0760c1608

SHA256
d6f89917b177e1d8031e98ccdfc7927df6ca3629d4eec7c41bc419ba5fd4e8d3

SHA512
15c315f53d3d114b5e3e4b5fe8908cb4b68a670c88b7368d5fd5d8d4e6793dc7875dffaad4032f5f0d3d8e41e57434b8649d07cf15246b6c76fca3654e8b1d13

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
7a0a8be95190e46351cdf4d8c2d27c83

SHA1
a3c855e012caa468052a87ca2c86f55c10f3d88d

SHA256
b8968db056b42261c8d90db3c13b6c40b6ae2cc34ca5c6d9a198b5ff04e13ef1

SHA512
8044ef84a3783eb20324e50885a024bb907509cafd8b33ccdb2dbf99ef5c6c483cb0cd1b5fc97095063d418f331b1c60705cd8f80bf39de4d1f811cf054c6448

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
03aee5affefb219cc2b0ef11a62aeaf5

SHA1
8a84f9378d5904e681e65236718465358757e61d

SHA256
aea349293d3f2c8c66a77c30d7518e09a1ebeae48dd00b5b8a0ea4eb100fb122

SHA512
b4cbd4b11e1112b888d2bc99d1a0ac50d76e6f702523fb4965032a54a7555154403385d2cdc83e41063787420c80282128c120a1aa0c5998cdb6f774d391c7c9

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
b56eec73f5d0af7e7425762cf5ea94ca

SHA1
5910e0a0fcfc6f1fd0e34689a809220ce25a8560

SHA256
aecf7f5e083f3bff6224c2780173de3aa0f52e843e115af672b5ed10f00eabb4

SHA512
7136a60ad92be499e798b8d44564010633319cf162cfb951f7f7551f795db90bc7cf66348eef9ad4a093839ac096c33616cebf205ffa8461f0e1f75c181db392

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
7656c55ea27dd171e0578ebaac047577

SHA1
120e5a256155686ebdfd508b043c14d0c8249b5d

SHA256
470be67b68706d595fceda7fc1ad4161587f122b3b22bf609fa3d6f43b02b514

SHA512
6387e7066dc12267a805a737d522c9c098ede235990080612f8be3398eafc468e5d89c61f32765acfb65b39d938f423aff757aad3b9dee39e141c5fe3e942891

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
85de2d05803f56654def5bb3bdb4c065

SHA1
deead260a16c6622780a2c9a07e9500322a04f85

SHA256
a4051d72f977fdffbd3c3d22dedacbf3b9bd5e077f5f049fdf33a1d96177a77a

SHA512
a8c56a34e8b9b8c9e63679fd6ed3b8e14722133a65d8e790ba17a34d9ecd2ef48423dd442ec82bd7ad0cf8acc3cc6f10fb4586eb0c895b2af17a7e776c9ab8e5

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
44a7ddae6d4140e0a97b455dde5f4bc9

SHA1
bf31b7fba10c2ef67f9e2686d55307f1434c5896

SHA256
6b52afe615587def86be944ddb0834e08aa5f9096a2ab8e94c2c8fb337630dd3

SHA512
2feb93569f2651980b6d128869122f42727e0d37a7a8fa78f8a833ffc6380bbfd72413a6ab4177ac27c3c59d4d94833325959017e044ae9261c126a19cea2087

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
5d7c438109c7f8f33d23a61eb1ee3e58

SHA1
9eddc2516b387dcc268f852391fb3e97626ee6c4

SHA256
bc1eaf19df74c03632e7cc25679d848545650f7091e9fb49f735dadcdeeb6198

SHA512
561d2f482f96476d2dde53d02b104c0652688856fef644f0cdd441b0f69d7c3a9f09ba4002384460e473e14646258d618cffb2aca4acfe3f3ae001e242ff14cc

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
c54cd9c306bec1cc8eb4b7040081269e

SHA1
cc4845876ba82341ed9f85e5172411cd467f9cd1

SHA256
7da2ad9c8da17d357f718ed882adbd4165ff658ade01f5a4752c508b1e26cb6f

SHA512
231a0cf80dfb86943857a161986cd3f72a543d840de085ea961c80a8c52fa8acee353a3fca1a63e15b83f32a54309c0ff0247a1113932a3ee41cd4588e945c61

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
a57f45b119937cb875485286623b3a49

SHA1
d68410600cabaac5a7f65aed90082ad12d5e1a4f

SHA256
a39cdd59200c8292646be3f9c4aa7081d2d2f67ba4ef1156ba942317731c80f5

SHA512
0a2f2ba5bde906a6cbcee9b0819d33977075e6a7a8355b121f4c79448c05e5cbbcf5b3153344446b41a6b9786e6575fe558c5554a55282dca75042fbbbdff144

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
61a05e94c534c260ffa4f7c07e486555

SHA1
dc72ce18eb2563e8e84104a706c503f4a530e1ba

SHA256
954b5ac14399c142d92135c39b2978d8932b46fc2cd0b9b4cf74ad2e4b497b14

SHA512
cd51c3af94fa4901756e920035c7a0ad5736f782bdf054ea11759faf6fe133e7be3d09dfc44b072ba319f75074f3b7a9d53bdfd1d539e75d5a29cec30967df22

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
23a820bb0c2df408a2527390050fe315

SHA1
4d42879604248cd0cf2856200926c35a233eda61

SHA256
1b4fdcf5045cdd92ec6cae635d9154ea40697a4f770dc65ad883d1b862b3822e

SHA512
66198300cb460825e3853926b7ab695c93f234b72cf174a2c7fc98ff0cbb1e62bf3bd4b60bd1712037c2865c74ac9c924f9125b9693a503c879149b6e73f2924

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
78a3f08c0daaac836fa651d40b97116c

SHA1
3e3bebcfd24f7497ef698b17739e2ac126f30df1

SHA256
9a2f2f4834e679c0b654e469a0ddd83e68ffc975be7499e70db995a78b56cde8

SHA512
a99c316e315d78697c4d9b18c81d04a1027fce23f7731b1d9c835e69886e19107b16aed5b5ec73c45bf7a41ffbdc0d630e335b237246f45d2cb2fb7c30771ee3

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
ac290b60e3a348807216ceef824e133b

SHA1
72aa5a10d2b1ce47625fbbbdfc6f37ff56d3833b

SHA256
3990c9ec24343b4db3322495b0a2b4ce0639ce894ca0330531e25f82ad921ccb

SHA512
0b77f530117ccdf90e0d298f093ba1d819db21441adfd1df6e27466721f1d6214a453290796ab68b1cc23c40ff567061bf168557286cf7a0bfbcb6c639cf5863

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
71398f285b0c51f72b18e45cd2ed5785

SHA1
a3ecc26b123c19d90ea964d4279afd0484fb1de6

SHA256
a611daa58949c9b2dd5d663ad5836055acc27b06121f39d5b69246e8a1f62923

SHA512
c532b27a1d49409cac6bad2c20527d041efb1cf44c3730976a2cacbc3f2b49f6a5a2d6071630b2f3d990f421470314dc900088c23dbe6d3f3b435b5321774b6f

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
36aa9f0febd3c0909ec2bb91c5a47cb0

SHA1
1385183f0b7ab27a4ad751d4c4375f9645aa6709

SHA256
0273913e995d2b3608da20fbc678296f0fc8c839b17eb2782500825a97f4db36

SHA512
ac13a3a02381eed340bf50bee153b99b11e64c64cb20c3607a781ce9bc42e84e89be60b683f2c5fc6bc899d806d82bcfb4bf493a1f15d14ceb10439dbd7e3ca0

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
51538e752c5ff04a725c78479738cee8

SHA1
bb9ddbe6898a7f2c7bebfce4e27d2113adfd75e1

SHA256
cf12393e563516b6acdb29cecc026301b5b1101212396266871351ca82e8ede1

SHA512
f189bf28e3546a3be0da36ba42136325850713c1082b2761fcc113f6e7430b99b3a5fbf198865ce39c3e2352b7b7c9e6319f02f9a70a6a02572124de0ab80fa0

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
17d4b080a56a39f9c19d525459170b23

SHA1
0e2f1b9f48b82730e213db960b3b31d000e2bcc1

SHA256
9c3d4a75d88bac0dc1cb62e0aa88db0cdae43404bb806ca1559d8c0263b66bb9

SHA512
53d5bc7df4db3fa552effe5e9c70ee707fb0edc89651672c916edb9fe6ead7d2a5d223bfd19ac901565f0f914b23b9bf67ff8864673f72c83e44c590596978c8

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
b4530dabeac0d605b65d7b565f6ad071

SHA1
33130f317ff5dcaf0ea0ba8bec6a3c72149c6b51

SHA256
89d3ea08e2ce1779ac22e63ebf07a311eb6f231ed3c50ae1b71e8987eb51c6c0

SHA512
45b86bb4e62f11539d16be2598af272f0c62508f113ef8a8c907606783fc877c8a8b4cc41bb9fd6fcbc2f8fd5d6c68c0e386393b7cf60bace40526d5e6e43693

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
f1a327a0076fcf0c5f419570c71f3dd3

SHA1
15827e0291f9a70c8a569c3571569e3669029ffb

SHA256
4cd1dbbe1560f3c30095287ddb12c82782ed7de5dfe2970219c1b6f1df52c366

SHA512
d4001adcc9cbaae5f96540a6553489f9ff542722ab5e11b2418deec2a78e10183bf01d13cc0d3860542656d19e4163aa3c8250b4742c97b85dc00d78565e35ac

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
724b0635cfe095c667ca6133b28799f6

SHA1
7e7abe05ffaa3ff838794e01d311ba03216d9ff5

SHA256
acbea09540bc9a6ebfdb1116993f0e48e520b1ea0c5866e554ad50f9db02287e

SHA512
952cce7310ecbe6f8a5c9f25aabf223d416aa55827ce6c6146ad99a2585eea2d20bd7afd329c5d89d77b1b24c837256c52b0d50679a46c18f97e0fb83a6557ed

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
fc62a2f598e82ec22ca729b81e4c2a59

SHA1
c1f7ca772f5ead68ab77130dd88d6b953f2a98a6

SHA256
f16938382a822bb5257bb9b87f2d7228d158ee9dfa3bb0bcf3d54552468bd249

SHA512
a538d18fce924e3fad1de5342af23fd184727bb120708752878ec9709eb9cff794d264c9f1660c0700ddcfb878e4f2ee4c7769682cc3e7d6153ed18bd760f85c

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
c3b9f3e9ae70f5adf3c5753f2871ecf9

SHA1
f057c46c842a149ab4b82b81e8816b37cdaa9460

SHA256
4f9bd3ab68ffdaf4e3365c172ebf72ca60f760a6a3d235ae504622d052b350e1

SHA512
da4ec11d9e5c25e18868bc4a950e2c55f21b1390933d37533178fe6d54de62fa0ed2dad3b8530ae4b03335bec15d0f9d25d34ee8d690c0a9683da1557b1b426a

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
048d68070445d77cc4829ed462f2be8a

SHA1
792e28503f51b9a6699781ed17112f3ae6e5ae26

SHA256
8f5da0e051c2c442690a22380a23d7a2bac9b4e71053e213810664bf4c9b808b

SHA512
646a82ac624f8c2647e5597df90d38af4530db8814107a7190c25dfb218b1b0757e9510b6a84eec284e65bd8ff3af46f83731c9957ef150409c26288a1778ff7

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
e0e2662378ee617cd3b0e22177545144

SHA1
c3466bdcce65567f23d7ee6c772313e70e986d80

SHA256
55d8f2d164512c2cbeab4ff2a87417a45311e668a370c7d045e6665d73ed33b6

SHA512
71cada8c3a49dcc52223053a72ec2d91d7dd4f68741f7a639f5273021cf3fec191b6d6b76676ceae1354f9d9e63cc55dd226687ec6f50ae80deca00b55b48215

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a1825205e3e1b54ba35bf184fbdfdd68

SHA1
f06eff87887194cf2a10b508b39dde124f9f0478

SHA256
8d92039d16269233f375ed4e907032128b1f362dfdddad5ddad63465d4ec665c

SHA512
07ff85a72e1bbfed2e71a7960329d99c27236b0846c911d6810f541e2d14638d66e4827c32f6134c4e055660406b91e493b93e0f9bf64b183b8a25fcbdf6c647

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
8fc633af14509a97076aadcf7f225de2

SHA1
8a4c624ec89977a6a8a845c15b2f87f51d06b169

SHA256
b0e5f80f8bd16b26e4844fd3f562ec35086190cdbf453102345a5be2e0f4e160

SHA512
f746178c33a030342d43e0433aa5e492305e660fec589b1ae636f8e85ba746c5d227ae23061dcd728b91f9a23f53adc62f25fa4b97d68c865ddd12cc692f5fa8

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
192cc668a2dce910ec08a34cf5dae058

SHA1
1c95fc758714e4e2d9b8cafbb6353f48914215fe

SHA256
14dc4dd38dee06a6e877d8e5958341dfd7088a0dbfa9850d5012b8916c959c4c

SHA512
12ca570afe0293dd9cbb0486877dba553d37641a402e861e78c559de699cc8fb8c7005bf66434d2e69cf4218dc7f41875395c5667ecb015d0f54ac74b0117d75

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
98913ee07ca976b5ac14afabcb5e3a85

SHA1
40b80488711a8e95d378a0ae2f0086e0ddb3fc93

SHA256
16a0520c18ae82af8e1658c6d7d88ecad7f7c5a9d2fdcdf43d89d43f6ce22826

SHA512
131c42d6c694f5e5db6b6ee98104e292f19efe7d803e07e2658f36a6b075c2625fc1491732163823d88325b118dc1ac97c7ed0490eaa87db4f7ba42607b0520c

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
b1014cefc6d4aa6fbb2e1295cd97969e

SHA1
ca101b62d676c43a1463d8125a38e744c6bbeb1b

SHA256
ae3be1cc327d14f144b6c8e83513351e9c0aa37fdd762509de2206c9ccb3bcfb

SHA512
db0e42a374172a53d65fe953f9a90ce667cebcb972256ebf30c6f361e971b5ead3e2e8f55a34bb84cf8e69b6c96c8583555b9b478098b9a1ee67ab8999f647ff

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
fb3387a1ec8fe0065a727cc6862c855d

SHA1
784f88736dc41afff4f5d36df2ecf2bdf5057401

SHA256
046d638c7ec04907658a570419955d0c48951addc56922bff420d227b5ea1357

SHA512
a34ee71739cdc085a2df4a1b438be51c6a6bff8a8a231f7c18fb4f2e2e22366c4501c2ecd32b8d2fc19d598c7c1e8ea1236296fd8509d657de6418b401d2d92b

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
17703b74b6b9dcc36c02be1fef3ae428

SHA1
4890fba8b55e024ae591328af64e4d3e9e9f6103

SHA256
facfb300f53d8122c384cbde2ea79afa5beb286def783d4077be9cffcea23000

SHA512
9fc7c3ef5e0c9c01d0aeef670f96435b895756f00fe45b709b501d532c5ef7f8eb0d25cad2b04af4dff5dc8fcf5184384618baa628fa44c6ced5b82de69e430a

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
4eae1189af1d45ec7f2ea04cd60cc21f

SHA1
8dea3ef199d0f8f8cddde442361bac2edc8989fb

SHA256
d40ca1c508dac45c84577bd38d3ce678d9dd935122eb7e282add3dcb470fd97e

SHA512
fc580cfbd144263d2ac7c81297e129be0d45f6fe5f4e29b3b1aad1d148e3925ad147be2203c52f2385e875601f6e453daeaeca89e49968bde2fa4991070cc8c7

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
b5dae06da7bca6a15774549b57e956e7

SHA1
65a30b5357b3e201e1d11393c5d8da0d1f02c0ae

SHA256
dc0052fd4fa2805a69028049049812e629ae40d14b946e7cb0b64ec0f5576459

SHA512
408606a304523fea20feee98b6739bcb3e28a6a829642b153632201672de6a6baf4e65893582618bbef2780f591bd1dcab57c076477964c44cdbe566e70798c0

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
70d3fb68b1cc8009984639a7628673a2

SHA1
10c5d1ee1fa502c644c52fbe88787c12f9236748

SHA256
c417f3425631896f4a6e39fb29c082d53a7554e332460c5960d675014ad23a45

SHA512
810f059bc39fac5e06cc799096c658a6c177f6bff5fea4ede509e451fcf3f0c109bbbd74e2bf1db0274824251be1f4ef724da10df99cadddc651bd43a127b574

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
d1bd8a8c48186be0e9d54868c792cd1d

SHA1
c0cddcef7f649a3bdb992b84c050ab4dff8a4746

SHA256
b2f7cf6e867bc378a0f61c0a7f7a6f0ae2dfe677d73b89a5d3eb7eb428141112

SHA512
b8125ccbb04832e285954de915e602a43648213c561bde64c6773526b007395203657af7733b4c82a0fc27dbe243237956d954871be46da3ba65a72d2b0b983d

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
4ef3d8db74dc242f0f46e57bf2c28b97

SHA1
c156f313a7794ca671d72d63e976158b26709ee6

SHA256
3976621a21de62f557c47aa6285031a3a9a96e2e6412e124cab1255b6adba9b2

SHA512
7544167d44fd2b3212c1bff84b00376d11907911f6d7f7c7d99335698052f7b5babecd40787188b1bda16f9a28d6d4be342e24277e14a026172c1a31f832d545

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
d387163396945738a0c08f0f232edd42

SHA1
ceea5db8a1ec8150500d94f6bb854acc4da7f7e4

SHA256
af41a6f81d01f9580a8b974196ffbe45e527066188be2b08a37110d382b64365

SHA512
9d657c8caa62f9da0c0da98bd1e84b6efb11762f7ed190a89711c254143a183c6a6ff58b62961c6f69b818e6b99173c91d839e7fb7581e1050ca5c3e68bb289b

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
d6a8090da7a370f0804fb76fe15c303c

SHA1
9beebdfdf71db9297a5116b6995791024c285434

SHA256
8e7a66574fd6766e7462d377d9b0294071916ddde986869c0d71387d233fbee8

SHA512
9f5652ded9bc51b306a12702a5c0f3c6ba18f276e9c2547f43b5d51fa0e2a8ead6c3971fafab644493b2801e830b6cbba8ddd605bc356e0ead69f52a724cec2c

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
19b2f50e81ede3f108d012e8c75b9ab4

SHA1
bc4c776656fa89c3eccccdbbda5c67fc8c9d6858

SHA256
fb308cfbc8cd920142e9c2e23b334f283b92e695136183b71a72758d3dc401a0

SHA512
89334dcc40d2bc82a8622bb5c911380ad9bcd379639e26b75045548d76876e0cc225c6148c27c85f0c97f5f5fd5209da2bfde4081c96ac7b057e1132ed62664b

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
420c87223ca229b1684e11d63024db52

SHA1
64b0bb494f42b598502501acbf158e85e90baf24

SHA256
f989bbccf73a2d2739e42bdda7aa94928f5bbf9483eb057cac512550bc829856

SHA512
2d36fd7bbc4e47eb3fa025cf004c531befbca69f999a4f83a0a2162692ec7748837573333ddc64aa2ff65724a0bc019ab19ce100d09ab8b33cdc1fa2c70e2ed8

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
04a08df1a45b8bfea2ced9f8920520c9

SHA1
7c54ac290c10af5f8c5a934364e1facadd499c9b

SHA256
a71c2f7b89278be3383cc52bce904c69a049d08809390bbcad32c817cdd490f6

SHA512
68475afb43bc309736c6498cdfcdb10f35221713c53af8c46eba8c98b645895d41d2c4ef0d70ef1c487327d483ba813452dc01819ecdb5701c00f160ec6dfb77

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
a7cace72c2f15c60298006a089183b70

SHA1
c4fee6915b15c68d3f0f15db5f62b1d0b91297ec

SHA256
97747daa7995f1b5b6531b58ae7055b7047838908932d0d5eeb32d22f17d89ca

SHA512
c6725ca079a1714455d25910d0ddb6fabe5313e453b94251fa3d4acdaed8674a97b41d42fda5ea5e8841885aeaf2d1afd6b1cfcceafdabb4108dc168e3f5fdee

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
41dded6962c4d4c9290b40fc767416f0

SHA1
879e35f0a72c459a49c41e865e741562293742b3

SHA256
c282cfd625f67cea3a051aca68a8d7522784639c7c8560302eab61e434ccd9bf

SHA512
993150c20fe6f647a770285a1127323f5243f7f08848ce3702f549dd60cbbf903b4d7ccf84330e9fdfefe085b6c9560b5cd91983101547f15b33203ac7b88c6a

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
3644b1d7a45b12edd8c5bcc24bdafc02

SHA1
abe77b151d434d0ff878ec872b841bff83699c48

SHA256
cdcbe425692442ea785ef45875405db09cf6f7730acafb320015fe058efdbebb

SHA512
35e78899220873a8e634b9c284462e7884e641c1603e6634824eec9b2d62a470acf610d21bc119d5dc11e4ac9ac37d484139a202518fd2beed41bc7a2481ee16

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
4cca299786028771f81f76d2c8cf2eb6

SHA1
e475afddad2af29b02cd70281c834bcdaf12e4df

SHA256
324014b0ad34a853196650fa9a9f1fba91f597f7d7038f144561d68524edc53d

SHA512
95e156f0e55af7aa6887857f0c54e466ff5f26e802043e717f7e7a0bbc83840d7d745a7b9871e2ef445c85b0d1e482f5d75b2d2ed44aff6bb9da2537b0df584a

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
689dac399ef2055291aff9913d37ea23

SHA1
43956c4bf6b1b65de05354193767ae64a25cbd71

SHA256
7234f45b0cbdca7f4d4c1e1b9a85fb52428c19aedb9d6f5fa0817d66c388231f

SHA512
6d8a2b1d4d404e9a65be038115446bab456b0c938b9ca58cae40473266995259bcbd2ef88dc4c9c59c60a82b08de24846ed2d010b78a2ed57c9cd1e1aeabb420

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
a27a03b336edfc22a5f483225c694017

SHA1
5b88908bf371be89ddc8e99ee30fac70b28ae3c1

SHA256
d1b58e30662f37dae10f4e042e7789926aaa1d8a050181d16da18a6fd8bee113

SHA512
e0b8d253264cad2cf4a19ad6ac7721ad3526bccb0cb128c4adbdcfd42015636b93bf4ea572c4d5d65f18711f54621d94b321bef36f6199374c4f30866b2a1ba5

Download Submit