0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
96s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15-11-2024 02:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CC3B1F89FAA517E4.exe
Size

137KB
MD5

4aed4c0e78d355e497f2cc509ff078b5
SHA1

31a2ccfd5a679d2badc5fb66f243d4887d9ca444
SHA256

ed4e298040946a3be24dcde8303216644c2d2b78444bb1c9bfc7d17c748aeaa5
SHA512

bb251af369bd2662caef94ee96147439a75307dbfc30e2b2a63fad75af597e7981c41daec8cedb4326fb0243abbce2b681153380ccec79a38095022b85d4a804
SSDEEP

3072:CLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hv2bIoKb:CstYrEMw6Bxk5zOFNtgJSCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: CC3B1F89FAA517E4

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11240) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

CC3B1F89FAA517E4.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000\Control Panel\International\Geo\Nation	CC3B1F89FAA517E4.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

CC3B1F89FAA517E4.exe

description ioc process

File opened (read-only) \??\F: CC3B1F89FAA517E4.exe
File opened (read-only) \??\D: CC3B1F89FAA517E4.exe

description	ioc	process
File opened (read-only)	\??\F:	CC3B1F89FAA517E4.exe
File opened (read-only)	\??\D:	CC3B1F89FAA517E4.exe

Drops file in Program Files directory 64 IoCs

Processes:

CC3B1F89FAA517E4.exe

description	ioc	process
File created	C:\Program Files\VideoLAN\VLC\locale\km\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\ru-ru\ui-strings.js	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-util-l1-1-0.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-30.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-24_altform-unplated.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\InsiderHubAppList.scale-125_contrast-black.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\StoreAppList.scale-200_altform-lightunplated.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filter-hover_32.svg.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxManifest.xml	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.targetsize-20_altform-unplated.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-runtime-l1-1-0.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.scale-100.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\System.Windows.Controls.Ribbon.resources.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\jawt.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.scale-125_contrast-white.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailLargeTile.scale-100.png	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\nls\nl-nl\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNewNoteSmallTile.scale-400.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.scale-400.png	CC3B1F89FAA517E4.exe
File created	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Microsoft.Support.SDK\Assets\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\[email protected]=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\_Resources\14.rsrc	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\rt.jar.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACETXT.DLL.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ca.txt.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\resources\strings\LocalizedStrings_sv.json	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\css\main.css	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\es-es\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\ReachFramework.resources.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.v11.1.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File created	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Examples\Validator\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-gb\ui-strings.js	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSIPC\lv\msipc.dll.mui.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-ppd.xrm-ms.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_K_COL.HXK.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Design.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\concrt140.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.scale-200_contrast-black.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-pl.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\Microsoft.PackageManagement.MsiProvider.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\CANYON\CANYON.INF	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\ProtectionManagement.dll.mui.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxSmallTile.scale-100.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\msdasqlr.dll.mui	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\css\main.css.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\accessibility.properties	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-256_contrast-black.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons_retina.png.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\nb-no\ui-strings.js	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_KMS_Client-ppd.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\next-arrow-down.svg	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\NewComment.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Controls.Ribbon.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\3082\MSO.ACL	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\az-Latn-AZ\View3d\3DViewerProductDescription-universal.xml	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\BeLessThan.Tests.ps1.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-30_altform-unplated.png	CC3B1F89FAA517E4.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\AppCore\Location\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\IEEE2006OfficeOnline.xsl	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libspdif_plugin.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

CC3B1F89FAA517E4.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CC3B1F89FAA517E4.exe
Interacts with shadow copies 3 TTPs 2 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Direct Volume Access
T1006

Processes:

vssadmin.exevssadmin.exe

pid process

4912 vssadmin.exe
3424 vssadmin.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CC3B1F89FAA517E4.exe

pid	process
4912	vssadmin.exe
3424	vssadmin.exe

Modifies registry class 1 IoCs

Processes:

StartMenuExperienceHost.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

CC3B1F89FAA517E4.exe

pid	process
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe
2844	CC3B1F89FAA517E4.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

Processes:

CC3B1F89FAA517E4.exevssvc.exe

description	pid	process
Token: SeDebugPrivilege	2844	CC3B1F89FAA517E4.exe
Token: SeRestorePrivilege	2844	CC3B1F89FAA517E4.exe
Token: SeBackupPrivilege	2844	CC3B1F89FAA517E4.exe
Token: SeTakeOwnershipPrivilege	2844	CC3B1F89FAA517E4.exe
Token: SeAuditPrivilege	2844	CC3B1F89FAA517E4.exe
Token: SeSecurityPrivilege	2844	CC3B1F89FAA517E4.exe
Token: SeIncBasePriorityPrivilege	2844	CC3B1F89FAA517E4.exe
Token: SeBackupPrivilege	1012	vssvc.exe
Token: SeRestorePrivilege	1012	vssvc.exe
Token: SeAuditPrivilege	1012	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

StartMenuExperienceHost.exe

pid process

2268 StartMenuExperienceHost.exe

pid	process
2268	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

CC3B1F89FAA517E4.execmd.execmd.exe

description	pid	process	target process
PID 2844 wrote to memory of 1540	2844	CC3B1F89FAA517E4.exe	cmd.exe
PID 2844 wrote to memory of 1540	2844	CC3B1F89FAA517E4.exe	cmd.exe
PID 1540 wrote to memory of 4912	1540	cmd.exe	vssadmin.exe
PID 1540 wrote to memory of 4912	1540	cmd.exe	vssadmin.exe
PID 2844 wrote to memory of 3996	2844	CC3B1F89FAA517E4.exe	cmd.exe
PID 2844 wrote to memory of 3996	2844	CC3B1F89FAA517E4.exe	cmd.exe
PID 3996 wrote to memory of 3424	3996	cmd.exe	vssadmin.exe
PID 3996 wrote to memory of 3424	3996	cmd.exe	vssadmin.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\CC3B1F89FAA517E4.exe
"C:\Users\Admin\AppData\Local\Temp\CC3B1F89FAA517E4.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2844
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1540
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:4912
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3996
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:3424

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1012

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:276

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:4136

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
6f7c6063876370f3bc44131f3eebb001

SHA1
623828870197d7b65029dfe84f2282915384c75a

SHA256
dd60950e5b6839f4a7decaa4fecabef00f507e59b3240fbc7972f215deb1dc10

SHA512
84cf69f3786a705dd9b44a191114214273ba7a04dcefa6314b61f7b34f0de97025072d047dd16f0846313c2bd83a0d3024e4a104184fee46c2a6ca4e0cbef849

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
d52e7860b20efa7ec90a136e2c94d040

SHA1
614cf5496084dcb821b1fd22ebd3e2af90385cef

SHA256
2811bf87283a1c0b2b379e041a233e39eb0b0e5cad03ca64c2541985266ec220

SHA512
69555c45edbab9191c059c94502af380436753293c436ee4b9de656b5bf18544a6fba0583034f3669b95ca239dfda2d8f9ca3a5c6eaa02f4a26355ee9b31c341

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
d328176e0e4222403222c07a0704eea4

SHA1
81446822503ead269596503098362a2dcbe371fa

SHA256
904c2387bae9e953a6759f5e93db675eab6a0373241c804458d078e3f1dc31e8

SHA512
2adf96cb59bf85c57b1fe903eb02484bccf43fb1da0510f9edfc065d2f168d807da0ba11ab0ec541a2cd449b6f17a84fd7278b4aa07f77eed92d19e67a39f7c9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
f98875d93e25dc8406a293316488d661

SHA1
7ba0040a305fe641eaf19c7c62cbd3f874413382

SHA256
3f3bf7828d5d71eef9d094d00ef4259cc4058034e1934144fabef34bd0e4bfff

SHA512
1730eacdc83ec85292b24a5ce7e1b57f896e729f5fd4fd639f16da1a57818c99b90709e68205ff29dd34fc3dd56064ce9b7cc02396584a5663e39ffddf1fafcd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
a8954e82e05b22c98e22f168a8fb8552

SHA1
0bcce494910ffe4449ee5efe3c63cae70e9bdaa1

SHA256
92078a03d630ac70807cfaea76ad475e153133b2647bb5ea8d30dc813b6a7666

SHA512
949cb6c93b2c877f2d521fbcea8b996a357d870d9223d211830766fdb1eaefcf5186e8dc7e75b7defbbf780e4ac76ba5f2ff465ac3549b5857796bfe4319bf5e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
4294e62a154b5cf44735a243f0b8f637

SHA1
1c0e8023f27799ec4f1b00eb0357537a2ec31d89

SHA256
15a677988a3b6b4700689b09f9ce90c74c824544c23c8329486288bb689b651b

SHA512
3548a15571f948abb3d0324ae70c26bcc1d909b382a705445d0f0aaaff9ba8b2168508f7d6afba130d6c5fbee3086245b1831b38221d99c3dcc0e30660af6e3b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
d3d85b8bc34c3f07d574139f16792bac

SHA1
651e719f4839766cd8571436348db9c50676e9db

SHA256
3c5c17e517471b5a3d6fb3826204ddbe2a4d37a5663cf8532fdcb35061d66bbc

SHA512
40e80b1a853f3072235272edbad8333f3918d87a73eb16d7b37c486d55ccfa4850301f31065382d5b41e7611cc1f9884ad29a8594a2460d9fe5cfe159d325a8a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
0cf0098f3460252716312d3e890b7c38

SHA1
d5b569a52ed7b42c6627c41c4b2e9703044bfcd7

SHA256
b3b7f5d581ddb2e5fb2617b06c4346bbabc5b003ed343ccfc3f8699e9aaf4b39

SHA512
e162de156fb86f00ddf9d78af5b5f61ba8f7a9bd1375a8118e6f17f41354bf929f28c4ef6ed7299ad5f5ea3cf1b072336afcd92baed5e4a63e23047b278ef404

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
7d327e3d587699890e1f83b582f7c156

SHA1
1be41ec16e32d7e777d07092d6af57e8549b7fcd

SHA256
67983e955307caa891a13357e31fa553730a0bce64f1fb2a62c5024e1c5aa1e9

SHA512
3a9b71f9802e9fba1e88fce9edadea9219b266ec2336a819726b1cd14e06644684af6014dfd304bc2db42544e51b3fdf9d222b91f1f7913f279b8babef2f5c4a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
4fe78abd316c26dda2859c5308032ac2

SHA1
e96b861599e1bd6ae6cbd1d1623bc3c3bff8e3e6

SHA256
8478e334ab6c27344c5b0b3684d59534b503961a982108507526b9303d88c829

SHA512
e83acbd1ddead57081d98802bbdb46622ced2a66b5bcd7cc65f119fb47bd7c81fe1936e3a0e4ab356ca4551c49b727f1a2d8ad49e3871e1a867f96f079bfc8f5

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
911c3f8073731a13759b4a60b933c1c1

SHA1
0cdfc9c37c71f3209e7f7e2e8d2ba45a5e33e763

SHA256
88d678e6cbbc5b03b3699e275459dfc7dabed433e9118d8cd0b0b1fffae02ce3

SHA512
d2289a6850f82691b2a54f02892543c43b695c0e8fb4844d2cb48ad8a6ccea319a440ae3cbbe4ed5710295ac190ef2bcff54ba070ae571a2bccdc1165b4822b1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
73d101e9c70f3e568a4c6639cfdfcd2a

SHA1
6418f68fe69c31f99939e1aa0138291ee5b65b4f

SHA256
0ea66a452673ba74d8305e99511710b2cb6df36d0232992942d0ddc1f67b890a

SHA512
096a697707d87e4933b6538750d294fc4d58f81bdb9d285b39cc044e6c3af72eb56b829d77ac06ba80a072c32b778b023c5e7401891f984063631d2900edc6f2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
df978f4ce7d2c261d86b8bda8f32ad73

SHA1
7541fc93fd0bdca9b97c30f23955831c48c11d83

SHA256
300bad4b7b725e4c20bc43e85dd86565939d6574e95dab437c979c4656f0546c

SHA512
2f3fa0f2846a8bdbab828f5bcdffc82cc8c9a0a24fa9fac7d127c146632ff6095adc9cd7a149adca1656e995ac640aa2545eb043d25e913bbff5479812d23581

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
0ffcd343eccb5e24e043209be08cefa1

SHA1
6ec5af63e4cb2dde3f79feb711489fdcf7136155

SHA256
5934590d675c4975fb17f3ef26ffae16714e99222ee92dd1384c29ef82370288

SHA512
b72eaf2d3e36b8a81060880cf0006e3fdff241acc619e82494ac53b7212b32708c6fc0d2fc173170a3ebb920b66657ff216728743b4c56180619b48c8e6b4118

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
51f5bce91246817588ba2dc14f3fd752

SHA1
a60add52cf8170cc57963f6acc0b4e2386f9ae2f

SHA256
74ae96dad818998b2844a10d413a151b0f7b97f3e89883f67779a8c49c5cb0ea

SHA512
1cb10503d7833c2da7ca1d06e752266692c514d3f16952dea478d10e1063854608542c4a58b05a3c9b6ecf1a17d4fe2859917c2c64454fe84e70d4cd7dab2708

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
ff7e68c7ecfb8918c7c3998757fd28c6

SHA1
8098820c085803dfbf5b0892634c4d76fd3fe6c2

SHA256
ff02a90f9e1324652189842115ddff6881e0ad59c444889efbe335a27d4efc2d

SHA512
34fa4ee25ec9c6ffca1085e677bea37334afc410a3b4c40f1e672a41dc9ad11423e7ac5f0ca929ce7b286c4873ba4b75a056da6c3ba8cca78d16da6052f4f34a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
535fb6d254b66e5bea2d37e0da8e3b9f

SHA1
b61887fdea92e140bc4a0390a40891d8743f175a

SHA256
c5efd848d57abcab362ed9fa878560c3acbeab9adea9f69c58b5df5bbb714f36

SHA512
e13d2831c7b45e30b68d8c6caf466b79994b267ef45d58818c9d337bf81401c56f8da36f80f7e8cd1493d4571814da77462d561e7bb2fb35f76904e5d40974b8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
92bec539c2362737916b988e660c24ca

SHA1
7a9f8becebf31f1cf8ff39168b634134753f4839

SHA256
b69f5b7408e78f8cb0d70f458873d7fb7890d7ccf8ce99f530e150406108382c

SHA512
b4ddfbe1b43969409c1b7be3c7db5759c7ba29681313714fd29712124e6bbfc2f4d6a91c960ef5a967657b7f919f7a51bf700493f91a39d44b80e97f6da21e34

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
c34ba30c9feeee3a3c99d5df10208693

SHA1
75426ba51b707022f7c1a11b880a2b882d8147cd

SHA256
61045b5a1d20ad66e6665ccfb72ce5cff61c67214034ee45ff5fe42823379316

SHA512
df4ad8e0f42a90b333586c6c8d7186b1a687165a45f74d01477e30f5eb6bbb19a2111418fbde7dadd5ac8eb4d589265c178bcabb4701257b765812818eeade34

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
cebbbba410a14d91ff9732e173724e1e

SHA1
5e1a670e9e335dda49352d4bc48543b4316eac88

SHA256
169ec8c3b4423c91b2efdf12798060f4d56d11bfef97be50a5fe3c5b95730109

SHA512
50249fcc3bd1784de5a2046968a17fca676b371d5eb7228c37c7fdbe8a304461f2cae41392ddc0230fda408077cbf36156de6a19038deadbb0db03f35af6a90c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
cfe6488b159f107316642a250c4be773

SHA1
91cfff34d79b96c8c8644a121b76b5d3acd9ae73

SHA256
a9fac6af135e44700e86770a423ce0172d999b873327abc013a5dc70e355ce46

SHA512
f85b273790d9114b1ad6fdf2304ba1457f84fd4cd3e23bd8576ea2e4e163afaac0c11b244a06657ab0e0998d5dbbca2613dcd52f4063ef0febe6b16015c2ffb0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
ae38b3898b48a2ab955d75efb2bbd304

SHA1
b3b6735a53449f27f65b86141c0d11caa39d2ddc

SHA256
104ce03f4e3e69f06e5e9cc7a8b8837060bf87b9b371538c79a4dc37e9890fe6

SHA512
3e2e60600234f2b74207becfd2c84aaea3d76bd013a2b3a1be2e33d7ab7ad5c5703dec26ba64385f51784a3a338e86d4700ab1e2ddcdb439761bcced4ff08263

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
e710f416d7f327a6cd1507e17252e7a7

SHA1
1b9344032985c2596bbbbd92f4d05076df06362d

SHA256
681344521383f8c3fc88e5caa6c252d2e79465126cf52b3327bab2441ecaff77

SHA512
ff386f3d4de8b3152c64446488d000eda6f3be5389c5454b8b06f53743f64ec82e12b668219e425cb9d6da053d918959e0f863713728eaef7e32473cc70ad6bd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
cb0a698156fa8e69e404a6c31a5ee2fd

SHA1
101410a8bc455479e107cbd4591b32553424b60c

SHA256
7f9b8605082d2240799ffa5e8b4c2bdd6a2bfe8ae59ee45762d5bd775b7f00da

SHA512
fb4b4413e35d5bfe1e8368022c778a9f0e0c91e95c68a5ed34dc0a373b226efe99b91e4d66c9e66d9c81b1b6d0283701abfdd2fc874fb8bc2fade2c99b3252e0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
f2ee54571948446602e0348e088f8e30

SHA1
72ad6824a55424005d5fbc3ab5bddd9c2983ba7f

SHA256
c1acddf0627f29305db89ef6047e6cec7089cc18118e87761159d92c6700c6bc

SHA512
ccf99bcf8f31d30a4c97dde8cb18c9a593e130987cea1699540eb6db3979a08b681ed5ff72811e7ac4a7f0b42bcd3fa953b4b4678fdb5759c20929ce2e7fce8b

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
a7531e772eac5a24e7d9fd79e112c17d

SHA1
6974ab7d60772872a59b764264eae6de1d1f0de0

SHA256
4784c3b0cafe2625d7662fa991ac0eb14f8643b3541e85de896b1501a5f22a5c

SHA512
085f8c3739f7e1dc0f6932866a580fe1af2ff1776c4119f7f76b3c033ff1674fe0b2d19938e747b6b676347e3c8a5e67b2e377c77f518e97e8bfe1802421405c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
9deefd571c4e9dc54bd483e712659a26

SHA1
50c04db9e90395334d908cb9834f5f3c7715c485

SHA256
50b821e8fa24cafc8910369bd9dc82a2229e953cb6f170533978a6f19400506a

SHA512
7245a9762487b8d219d81732ea38634f23e0e670e9d359d5e11f0aa4e8a791ab5658c9b5e406c9778e56209d31c932a77805e5ca53b350e68c7a14fbd2856bd0

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
91c0213ce5dc485455c393e6f70d21cd

SHA1
5c601cc54587aa83a8ca825467ea9a818a1156f7

SHA256
ec2f42757dcb6646420f922b5470d55533a97346fc10e4b9ff22f56e87aa1172

SHA512
c306211dadebbd5e365996e322cc5e9733a214c9eb3b815b642542eabc6f1594e2ee692c7a050c36557fb2580a9921675d10ebea4a081d063e7cae5e06b0302b

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
985e6733c5ae149d7fc717272a1bc658

SHA1
431c38a2633e474ed9372601d4d4ebfc92e8e379

SHA256
90594cb056ee95135109e401bfd7cd84369af2a89598c5483aa3f0ada6daa11e

SHA512
e9b191479fcdb8e73eb56addc6937e861866b91146705420db1c14249b15c47a123472749ba57a59ce70188b80d440a8c2a135382edce37ef794f2ce486ac8bc

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
0aa3bc4ed0758fb2697bf1fb913f8764

SHA1
98d9fe79b7babf49c4037aefbcac7e8ebed32c07

SHA256
a83770f14c75b62a51ca908a664145b80e74cf3c2751b768a288686172cf8848

SHA512
234d910047feb2d49ca5aef515d1972f7bf8d8a313e22f79764576243191460864ea2248df3e1cb6ee762ec0ebab45aac5fb3915feb64e3d46ebf9bf9490e32e

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
4d66d0330ec558ab0636798dca9b417d

SHA1
9696f3744a41f69719b410831dfb0bb7fa5d1cc1

SHA256
bd83471f8e4ddc051002177b4215ddde59073bb6263f5c3cbfcc81611dd87be3

SHA512
1d0b152b07f6a5f7fc650645938c03e2b6b9925ea5fa44daf554d2afa3b7406613c14575be3cb4cabe006de3df221814e071bfda8039bfa3a6b3f8b85caecfdc

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
31238c1e13ca3258b08dbfc14468602a

SHA1
56d65b32aa00d16b8cd75a25c23d4044421fc030

SHA256
3023dc2808762c6c82b92654b4820be0ee5ac0a36aa08a73c9ee69f0e8b19629

SHA512
2322783f1dd3345d8226d0e17880f0d8c785da6ae9b8b8d4a4c991559b1fb24789344507e298a23ee8bcba335b457bba0d2e117bc01eb08c8877a199197afad1

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
c0ae3f36d2a815156968a5240d679ec2

SHA1
a28793afb6144daf5d707763fc90a34afd197d24

SHA256
adb151d0bfb2e04baa888c4b0f2e91a0ece3fd86968c7a5cba13579df002f09a

SHA512
aa19985422958d3fdecbaed412a9496583416dd1905c31bf508d1650571d4afc731bb12cbaafb894810ef1c28df50a2ce8ad23b3a9c4849127dc1524027c2acb

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
4acf8e1181940a05a46c91b9b0348e71

SHA1
5b5acf640752a8c788ddeb86c10361aecf95c6d4

SHA256
c6f6d48c1d6d3d59ba835efa4f2978c87da788af02c065c4b45ac770429ac0fd

SHA512
d46779cf5524899bbd1831105ed7ea8a978a9edecf7cab712b047a068c767f5b7d901b2fb1900cb594f2bb569802fabca45e0987dee81e10fa3e6f260266a3ed

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
d462bb6745fc6f8efa16ca070dfceebd

SHA1
49527211bbb36527cbdf320cfa960617ab632d04

SHA256
b17220b6d1c936793852ed9dce3092b413ae025f4c50c6cde7c5cc4b43015d70

SHA512
19719e37d3586ccd22eac2f90f23aea1bf6a7e84873a8a86cb240b044891c2166e083b18f6a611e49881ddbf3dca875975e6a9e8ff54c5cbee689b14b894587d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
ee6c8067ffc2dcd08ba0f856d3f45aa1

SHA1
2bb2adcc49a725a18c8773b38b5571ce9cc8ed7b

SHA256
743582ca7d8337f1346ea4deeadc9c466ce2a25d2f4f4b64fb57a3e686d2fda0

SHA512
9bd20bd4d368284876a4224af71a8d815337532b1cabceb43fb4de78eb04b39bf5040a5e50ed76dc87159c54c91e707eca873e0821ff75a3c1c65c48f9d91edf

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
40cc4d76efc11e95297da9f959b99016

SHA1
208901c4385b7d7de93355696c38880f677f347e

SHA256
dc3fdb59e4725f361968a6e1e0253db0ac2e6624e996260cd8683faa4002b582

SHA512
689ef0f4450706c3019206853e6aab7a75f815f7b8ee1e89a22dd492bb6c5875038970eba5174b54d10eedad62ead15f613c8e0b97efdec47bd6d10c6956344f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
0938add6736b73c0cf61ad380f19c329

SHA1
35958e3a5d24e2f7f9a99811953e4bf490f4b71b

SHA256
b620604298d2820667f4e4d4e0795a793237e7b5bd3bbf854d4df2c035c6329a

SHA512
f8232030bf41e022b1c1dbb6a8bc3f4b576354e806934f87caf629e28cf7d90fe47e8bb5e53b73137223d6996cd5e9a985b82c8c678219d5b379a8841e9c21f6

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
756e57db59c4940c07c9fab901b6c738

SHA1
85ffd10f7acb5ad7091f3d1fcfcd5e1763a4622e

SHA256
baa0220ced7974e0d80c2d4c7fcb54c461e161a85ea227e988ae1922ca56e542

SHA512
9b151249edd6c586207e87472415b71e087261f537d583f4cb13c2186696a1b4766ed893683245c0f5bc763a996d3a2ed75823db5e352b6d2dbc276b5c0ab464

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
bc7173f1e00c9188833c709afba08281

SHA1
f6401b7aa6ba435bb128eedd1473baa255788309

SHA256
361bcdd613d37456c8fc59455d89b4a7008ceb9257dc84de0ca3f89317511409

SHA512
3d85273949db9df456fc08ed867b7dddd33a2ce44a2f959613fae12afed94086373d4ccbd5bf26ec1399a49420cb95c1562bbb532fab0b1ed6bcd4aa7f0ee9fe

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
0bc60004cb54295278800f67df446ac3

SHA1
febddea21cd85c70e462814ca2c6779df8488fe3

SHA256
2796172554a69a2c8f095f4ea354846023d3ea9e017e5724954dba6ce3ab20d8

SHA512
0fd11723ecbc4a4827970b4915be1f0f0d9560476e48555c3a291abbc34350ca70a8dac5475d844d6d604b621c957716109b6ce762ed5622d67d8a85f941bc00

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
dad1dbd1e8e21a8b8e2bcf210dbfd8a1

SHA1
8cba454ad9671337a8d90cc0dadeaf0e9d066524

SHA256
cc7a77d7833dde8f06bca2a266fc3d2c9555c1a5085812bd26885f61dc1e8d1e

SHA512
4defac7184df64e21bf159d81746938948018dd2d64e527f6e4022f75f10c610e6b6bae9709818064a01ccdbf22fd0fc5e7a7fb160c09c1619d79a4275d44451

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
20a91a35342b3bf7e6399369071b2b60

SHA1
628373da19478f5de1cba3f79bbfb96364d7b651

SHA256
b4db50732577db7d1f3f8b98cea04f1f98c11f07d3fcbcd787947c0a7ea39721

SHA512
e1af08d34d60044c4d038f539c8ed76d13be554b02d96e0d077e3f38cc18e7be993913da927d7d9d0d19e49863a369bbf33be1134a865e6e403ce45d8d0d4543

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
89f9af9ee410452fcc7138713f409f0d

SHA1
f0b5419956af04e707198ac591431136761bcf7c

SHA256
7b55b34a96526339e1ff9ed5a0df2eec07ad98ea14d32caa8e39fa75f1fba305

SHA512
115ede6b17a9d3bc6e884e7e6f5b49222505a1764a817c532ba1854c8cac50dfff42222dc62d375a57757305c16b9c5164f4331eac9fbb2d86bc2e7822b74ef5

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
347a9a9910a494770cacf45c26a9b9f0

SHA1
553968436d7509f79000946a2b122d7957de9431

SHA256
b4afa7e3ccac4a19ee195328f734ef8f82cfe081d7167ea7f10c4bacf42d487a

SHA512
e6c2356ec138e379944ceb401b847b1f9af516a3bec2987c90cda43b192c009028c0e246734fd799a2d06ac2c01afa6ce42bc20251cf3a4fdf9578186119f1d3

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
021c75efb431b5ba4024e31d40c6e09a

SHA1
ef27a2d93044a75e7aa7e3bb96f6d3c96be675c2

SHA256
fac7e387f2376689773f301dfe2617b9e7dc6962890e534cbbd6c0105a990453

SHA512
51820e88102c830b57195fa1b3080ded6f8d67d0f8a0ac6773623cbdd8d4b558c7a416ae4a1c8c8144f7001b97c0d3ecc273788d40f841d5b78d32e12358865a

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
47debd0dee5391be51a0c18f833340f5

SHA1
f071726d6e5d53abfa23f54bfa300fe65a39678e

SHA256
01deefe3515d16f2c77ef3104a4b1ac99028f9d909bd8a44505f4f88e6c8da77

SHA512
a50d2b32e64701102b2469c2b1b244f06d696b8fbb027681a4c659826345eaa1d850303c37df970719df9287350c731c87eca510559df9d4d9131b2c938a660b

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
f73e5c221a030b4216e98dbdf4c0ad1a

SHA1
ae6f7f0a8a9427166b3db1771701a1e2d5f63edb

SHA256
0f66f859b902b9aae97e9709c5b942f2cf49eb98c94fe0c90ac5f78463951514

SHA512
1e470194194a9fbc765746ad296fcb24ab064d40996b517a9149b9a453d1904c51c8565427fa0479674d4c771fde6ad96881c2119e8fb56652c244ee33a8e6d1

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
bf463bc8cfc59b6348177952ff2ab272

SHA1
3a1766b8ca88b42bd6d6149435d19866d3031127

SHA256
fa54cb72ce16a3a0526eb4923c9b5b19046d70fbd841a7f7180f8d297507447b

SHA512
52d311f021862b2e608b8da4ac671149bd8deb579a5e836623ff51630f931baa5a38ee2400a01b37afb0e5211cca1fa9fa1153efa2f3a1d9c2d4b13f1353e0f8

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
07eb0cbf332451b87f5805528d974031

SHA1
9228f680e9607bd5d5166bd510aad03b04bbbdcb

SHA256
7a3e983634d266a2bd1632a14caa2a5a569bd108de11ecdd380531f53db3eda4

SHA512
0d5824117e9a9e8e2ccda97d59007f1f4c7f0dc9be1fe3217cba06f6c95313b0bb746a6c9bf3b1015dbf1a4bddaa93fe11fbb85c08d8d8564f1bf6960ced4977

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
e012c7bf47f3fc9bbc1d4f3e50787169

SHA1
2dbb2f895359b1ccaf3f3759bd7a8e03e26595c2

SHA256
8ad91b19f86b8f428cc76c30a556558e96cdc5cfed253b98dfdc53614351efeb

SHA512
f5a237d9fe21c8265edb0d1b6f3708562d2561c3b8cc6c8b90c3c183b934e9a502b726c4e2eb6cd96b7977961fe5fb707afa7b390c24f856956157a8b2f60373

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
2a4eaaecc2499f979d607020296cc084

SHA1
907385686af9fe82150b1d7aca532397cfd02e8c

SHA256
af2c0b46fc228c1ad5ebb96c6499e933c956f53810d5a1100b6a7381a0990b27

SHA512
0a23da65a7d678a7f28e631152116951ae90fb60482e14a76e59f1bd0356ee6be2f2fef307f8519f29dca3ba0923ae60bec2595198bfba9ffa467ef96ade2e0b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
7d880d53f82ef1051264e4dfa8e4f692

SHA1
533c8f6a73226f0ad80fcc572908c82cf5e747c1

SHA256
2daa1133f50b9cf5d14fccfc81b23c8665c5ca170c17b9ce0fca32a3d16ae7c1

SHA512
f781bb6d7a6dd4bef3e1f85843bb19eb904b279bad34c0a98a7ec890c75627b4b19703d689ef06effa470a5f72c21aef48d20777c9e27164d8926c193048c35c

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
4d32d4df2096cfba3036b62cee529bed

SHA1
a1e98d2dbdc6899b98c9159538e20194229bdeeb

SHA256
49c5d0862721912be4e99a4e00df30888405f0a4b199308b18f589b32d7d0eed

SHA512
d2769afaeab020981b314f60cc5461eabe1df769c4100728c1080951720f56e1961e0691db1cc082fb5436f866f4fae020c6b102f1d4329a3ca92a02984fb255

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
0333893d156ac295cb62ee32a12d8a32

SHA1
cb05fa97dfd25d34eafa6772f1627ef972f0992b

SHA256
5633ca90287a8dee5ce97334b2356bc5699f97b542f27eb68ae90753eafc8fe3

SHA512
b8176621242569f6bd68863c99d0438e06aeb4d44356636b8143a0274f836c2b4d5df8c9a97913e137c64071b546d1e79c674b0900aab3d3a5bc421f94bb3868

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
12b43b17271e89404a38657c7b56b4d7

SHA1
a72682aa75fea1681ed1671dfb53a55a5c156112

SHA256
01f9daf9ffcbaf6320b4946d8296e29220e51108f8f87d4473d1048059fed328

SHA512
26d1d3d5f86a25c693aedb031a970e5c01b469aef466aad08a163c33657741c273b7c431ec95fc8163ce9b83e7ac0e5f819c4cc2a3418a22739edf95194da05c

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
6be4df72f92103d9183fb772f6123939

SHA1
6741d89d7ec6c160152b83d1412b26697f19dd6d

SHA256
cdd6cd73a9a32a89527ee97bcfe84deb79458cf0dfd83233f4b7fed36f93ce51

SHA512
20035d337460177452bbc37aee4ccd1d23973807e13b808ffc89946af40eea8231a87efac74c089f5e1f0c8d1449e093621111d37f2481d52d355c0c7ac60cf9

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
20873af63834c05a0be1a44c36f74f5b

SHA1
6083868ccd28d03abe867fe9dbac0fd4bec71a90

SHA256
17b84979dfa2e59ef36b36e90df5857994b5e475d33612f84e2095cc600f2d56

SHA512
c93fa66cfb7b23abea37ff52fb4e143ec24164755503dafda17884ae57c58721146d16d25b4538f6d7940443c3aeb7d0861d0ad7dd97d08715e3b1100080f7e8

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
1538d111c74e1f0b5bfce41c760292d8

SHA1
c6b0952f98bec0367ef02877f145123557f7ffb1

SHA256
40391ea45f5717a25520cd69be8d5388ea8a79ee1d207d9a295e69a1b1125f6c

SHA512
130fc92e3e3e825ac2cde97c3b82655631219ac6f098fd44a32e5bf1f9e29371a5343ded6d6a603817b6f0e64c59ee0efe58344a5abebeefba7fb06cefa6a1b9

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
d67e070b370d8110d3cf971f7404ab40

SHA1
e840eb68ca44931a753a07a6c040331433a6ed18

SHA256
d57146ede9056bf62537cad639b1b866c6092763ae621993804d505db054f7ed

SHA512
fd903096958ecb4af3e2963c839d4570dc62c244d9a5a8d31835292b098a350e5647d39e63b78136b62f7160f5a28ae73a53d7587ba0e5461f2b10e1f8c07748

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
8512b769c32e4316986122ad39b6d429

SHA1
5fe9353a3e6b5e321c700046b05a2887ee3479ec

SHA256
b566b80dd75dc7336979f30949f6c6c8e32b7a578cdb2399a4d33da92358c910

SHA512
cbce1d7b46a2129ed2aac3182533470c13d97dbe27a0c2850ab56bc9077d842084e333d3351cb96aa589303081bda32e087e464e00dbe576ad103c0692666a52

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
aaf679c15515e495d89612a32d0004f5

SHA1
4d24c6bd14d873041a80c0c69f08aec4c233f620

SHA256
7141e712372c01dcdfc76ce8220891703e7ff157863a0b21ebfc5db7adef0151

SHA512
b6d7644f97ee600b5839f26cc4f6f94aad143fa5f0f95652c39ea260baca8cb0df8fc77305c8d88b828f1cc2e5d0185ce713bfdc89427563594ce96d3a411406

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
a6debf0b5e42824e8326a115bc9f7834

SHA1
90167432d0cc41d366fb85af6c6a862070f26ce7

SHA256
c15fa4bfb08aa82961a842f49cb1467cdb33a72bad6279b9ca116487682222d5

SHA512
917ba94df4483909baa1e9d795a0f40137bc88c6eaf5c434c3225133a77e3e1752861a5069bb16df4132f04885aec90070abcfa94a3e368023f3817916830239

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
2fd6b462a74640b688601b554628ec0f

SHA1
7ff2bcd4fc9e27d4c9090860e4e60b3b2e430b13

SHA256
b09eb1c3d03cd82c06a201002659771de59f723389dafe2798b30b97964af3f8

SHA512
1c3c826314bfeec55ef3b73dff030445cab369ef8319b0b41e0ed7f2ddf21b4a5b870334c019084d8720985a2f83fe09abf540f778341ed41341e5e5197beeba

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
9bcf1676dd23a0872a9a320b8bd2a7d5

SHA1
577e79a02ee96f29b05334f78014a6dc0d60444d

SHA256
3c995f0a9f0dec531c76ee2a2312dde7e9a9b049eb4926d9dd54b34dc290c74b

SHA512
0321a40e84a0fb372e6c812cf002fa28ccb231cc9a75083b81621769edbdf7a519cf4abfeb701f7871cded5f99d94fe6faccf7209e8dd1dea9200918c9712183

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
d36c91203ec2d77daa755bcf6e9afba3

SHA1
552c95ab46a897e44e7d5c84f55781cd7ee88d55

SHA256
6c02302181f6d26b6b6425b7e3e0f9056390c06202a0eddd2104db32cda464cf

SHA512
dab7a7d44b92eec95c606619ea82d048d69190409273298feda56bc155bd72f7692ebfde0c32280739296f8892afb63f3e938a4942808557108338f49a8f34b8

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
5ef37f01b87443c964d8bd1cb4053e5a

SHA1
d2176fb345fcca668c693e349a7cf098cca76e41

SHA256
1265cdfc5cec6563398043478ea11ff8748d64be0b06fce358b739a3b017960f

SHA512
8f0a80f7498e0249517c7b4eff92457c426e96bc8a2a3d50b90b298bc16e7f093c1038bc20815458ce14abb1a7e290d64f89129c5a10d5e244bc14bd1cd0f35b

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
50b2413e60537a01bf0ea16cb037b879

SHA1
27cfb2bd314c105dca7c48161c307d57a54bb5d0

SHA256
f3d118670378ac79647eec114131af62d45332ad37954a4ac1bcd67e647f1d49

SHA512
efc8dd5e43a0ed95365cfd349530c8063dd592cddc7bd4a7b188d48c3f9135be31572273e80cc6ccc0124b0559a601f9a12c940aa1a15c7a68c904b9fa451e29

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
5420d6181365d8d704dc20a42313a5eb

SHA1
85906931944772d86334764738a002469b75b24c

SHA256
745576448e5856676c05c6d353557fa5427369bbf06195c7da59c8660cc71cf0

SHA512
4e095568a799ea66b1f52ee438c9fa400e65356eab6c497a975bc20c2a7632a82362e6e604ef109413a179e41e05993e0e097fa61fbf27c5b94c84619380ee7d

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
eda45108aa67a497567922c96f021eaf

SHA1
f9d7b8bf6cea6fbd62a96e21be6dada7ae501ddb

SHA256
2f7c9f9ad4009a18e741bae8c501f651f1396ae1b65911f33b382e263bf80b13

SHA512
200862bbe070f8368730cab6520653511d04316346a8465f6dd9b2e662c74ce7b5cfed544bc54973c0539012b1d1cd5a3eb39bc3f8d19bfb8536d2856d7cbef6

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
a578afaa99dfd7d6b853786a4c91346f

SHA1
c752fe1cd79ea3228745134cd7e2fa69a5a287b5

SHA256
48d767b90d99a6500dc25708aef11ed4dfbb9c2b21ee05b4ccaf7d0f79a638f4

SHA512
92af07cf327e394c2092f3c4a8370d0e83e94c6be07e61dc578688287b32511519478628b31accfcd3c1a0ae0419ca631db8375b3b37efeb9fb2a4e54e78f5ee

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
5f8037d0ca1236c4c136822bcf5c3637

SHA1
3d3a22b107b9ac3c499e6b802dfeecac4f6d3159

SHA256
d6412cfb8eb8f2c2f608dcadeeca6f61ea122fb536fbeb836e9cd42f26e85978

SHA512
692fb218244fb5ac17168b86e9a9a2ff7728b563e4c66b3686a1b2f469da752536c60d1937f5af02421bbd24004a015414a74ca4df6931381074eb734f592814

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
c294936462e95a11cf9716f13e9ddd9f

SHA1
9c00d09b785798bc5b82e683dd0a8735afcc2073

SHA256
2469a5132ddf05273e0c63be0d712c6c93051a17733825ae0170eecccdf1bcad

SHA512
90e1b27a9b5093deaeaec6a8b67bdca149252776ce2323278c146293aac51399092ec9a2643de905b4c398cdc1271d9eb12ce800264a81dedc9b3b7e2a70688b

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
5754cd85d964a103da7b212e2b46367b

SHA1
75cded29582cde40f70dbe9964a1e1173b3b62a0

SHA256
1a7830a1a4e964a6126b8bf6dcec9a579871487e9f36c96cdfe14f92ef889f3f

SHA512
fe05093636e15196bea7a33e8035132077f7f5551859663da18a8b9acbb74ba0fc7b27c888ef6b20f0b5e3b8661a45cbaabeec0fb62a194e1555583ea6bdfb0d

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
2cb6841ec0a18140ac5d60a2800d0263

SHA1
ee2a28dc8ab4bef23afe3b54794329900b6be33e

SHA256
b8ebc058d4a446ac5a8de81b9e75ea2e6ae2145a4167c2bb9ae6b6d80bd45a4c

SHA512
b08068b64569c0ce8dade049487d714a0b1e23fc4e223389185766b4feb174b2ebab1ce5a5a3859b69a793ddf5f4bbd3e203aa9c1c90f17ceeacb91b5d89c822

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
4ddfdeb8a25a3c56c1f6a5343605435d

SHA1
2ba2e40c7eab8914e004c8f513776eeb0cbc6c49

SHA256
af87d0295a41268d7e15719d7ee1494d9acc1d13624798aef80c69f80e154b5a

SHA512
2c7952f31543cf2f44dd26a5deef808d04f7b021100b6d73130161d84987ac6d3ffbc843c2d127e5690627c20ffc94c32950085a04e497f18b2c54aba7ef114a

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
59f0e65ee0ab2122ef41e3237cfddd8b

SHA1
36809cf622c6d236514b50c1fc99b7a3ce662528

SHA256
d4690fe952dac5c23a203c491731e46ed0a4d0d23c17f88f7900f71b51514494

SHA512
62c3657992d2e2c0216d9fc4558dad0a58e9518db1afe46b6f687177e6f4e0517a78def3c8f130749d4dc02ea809d654dcde5055e39a5214d47a8d5e6ebe591c

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
63ced1f08e7452516801909e44fd5dca

SHA1
322ce6c9173cfd5777e090bc0903821f1ae5dc09

SHA256
f429096bd10be34580f0acd13fcc1b2aa7639b58d22213d9cb944a06103d914a

SHA512
5d7cc1e392cc57127a202cdfb9b24499386457d8cc2a7c3b65df43c89a24ca9909aa8192e08da61788d4dab493444655941dcb28d2288183ed05882710ec16e6

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
59e9a59e5155bb80f301915158f1e2af

SHA1
0a5efb150b2786ae970d9c34c92e30b07787b0b0

SHA256
c5989c78ce97d4dd0677836a04ef18cb2f5fcf04b143539bb07223e9e1baac99

SHA512
a9c2c7e473a5c52c857e6bbaac83dfb6ba3400cd7ff9b4dd60ba8aee253c4f201506c84fc46ba794d4bd648377ba5f63503cba14d61ef6ec496712bf4b2b07b7

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
92b865d12cce6c97929e2527168c2a83

SHA1
ff3d72b8f6144e072771512d1e6f08e09eaab168

SHA256
ea0d5b0f4fb5272d3014753544b33eb586a4c6fc5cf6ab896c7323cd47fbb472

SHA512
7bb143979dc18cd9fac7407c809e9322989cf447b626135575cf8db88a070ee2ea2f5520a13e273e358a0851547fbac31d57255128982e576f5adb87f6028ea9

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
1bb0b74ae75b1fbac21cbd7faf659f45

SHA1
c1ed05dd9f0dd742880298dae353d0b21fa10bb7

SHA256
7ff9c9bcc4dd1b5be6ce18c62305491d8e7107a47304df07d15712b274edb2ec

SHA512
1bcd1310b9ea241c123d203d31b5b11ffed2070b83989de5ab1037544aab4824379e64bc93751752ad44bfe1170c790f3229be5cf566e25b76b53337878432b0

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
3da26e774d2a0d9cacf6a3f39dd54b74

SHA1
1564412eba9ccfe19421fdca89f1720cfeccaa1c

SHA256
50700b0926701b4f870b659c5e3bd6a188a6735dc47ed9482fe3c2b7e83c0dff

SHA512
0db1d5297048b81a52565206a2bcca64c45935f7335f17c2964d4fb5dabf87269fdc326c409a68d8f4d4d76c29e9f565de2924a747a3ba4713f7bff5ecc65219

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
9ad80f56d8259ed95dee0763f057bc30

SHA1
a04384f0ac98624590cf8e2636cc0b5bfc258738

SHA256
27727df359f9026dc21e56c0ee8693cd325371bcce5325c12768dcf43a565bda

SHA512
e9795f8745a8d0c6e68faba3fd9d1b601a979b73443748f006f2e642a59a76ed78fd8381be094d6f48d9c75839d9522297ed7862091d0662b31d58ae10b4da5e

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
72455d118ed7ac958d8bd80b76a6cd96

SHA1
58e5de8d8a0bd0a5dfef5cb575625e46a54830d0

SHA256
e65dbddf5e6efa9e22e863d2557025f33883f5d7d1f6387fbcd9109e680a80e7

SHA512
d67c571aa45d3730d909bd47539974e7f33b9dd4eee4b1b8d85c585a1199ac32796512a0464f71d302a51e01da898698ba49d1c233160ef0c79fed6c9c004603

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
5922861dd8e234f7b9bcb9c3979bd62a

SHA1
08fe0c7b1e907993e58c1f8f397784d8aa22e40b

SHA256
b921099b990fbefe3fe0a839d52587a38b0fa28aeb5085efc33edb4cc91834aa

SHA512
9fa53bdf84af3ec0815b03aca66d61efa1c31b9b19df0113df7370ab6caef906383140522ed22eca4fc0715b4158f557e3d73abc693d12601f1fe5a7eb959b86

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
6194ad56458f06d65bc416e78a6307bf

SHA1
7aee3d3782eb2f00ff684ca70fe9d1339abd2ee9

SHA256
f32acee936010b38ed6eadbad7414a0e0e0f83ff36400eedc4b14eb4c400547c

SHA512
635f2080b062371c4d2572682b600ca7db22b68a4caa7522400201bb8699b9044d00ce35e6aa2132c6c4216955ff1361c7bbd6e0a32f116b9e0a8da17622915b

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
7f952d5456869dafa5e2bf83b10c516c

SHA1
c7a8a9633c3c63044616bbd8747d355f430598e3

SHA256
618dd024e5a2f730d1a2e95ccc78f6ce38ecbe29a749ee6890666a2a66659f07

SHA512
47a246d539a3817b97f39c3ceb39ec674b001a9af8960f659a3ef30354c92381c789586827216373c39014de5936d9665eb2102a042fd62f63ab906f630c821a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
70252eade8a2f7e2bf409e9323a4fc90

SHA1
a5695fa51c5458bbfa11565302ba0ec04e6a2327

SHA256
50fe8a9e6a114fde5a86f8f90be70da1f9ac26ecc2a32477bd1860ba15b41bb7

SHA512
abf98eb80f0f5c3326e098a82498d6d9325ac0b2f32c23bd06390613e6e94d5ce76b85cb95049f8ec589e4c63dc9b9d07a4f0b5c9ef0103a6fd53163561daf9a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
57dffbe986e6a20e2008a35983eb97e3

SHA1
72aac3e20e7c783052b846c8561f6bb8b3831a27

SHA256
ee9a60ca79ba8a3fd47f1a74c95561a37cc1390576061bcbdedbf30dbcaea12a

SHA512
aeec50b9638ae373b22af73efad01a1315b42ae3b32dfb174a02f8a68b3bfcdf88175e4a2c1490d73ab7797006ba12563cf9395c1622d150938076996f15140a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
40939ed47bcbd58bbc67e504b01ef942

SHA1
37b02f582bb6a91e537583df30dc0387eab0aa47

SHA256
77fa16f3fd792597490b8eadece544439667a37d267fc36c74d4c6c4b6798e07

SHA512
a4f4f73488981f96c23ab5fa6120317416886293ec2ef780c9a49289fe434da6dc64bafd96c057c6e2f7e95760df7de8fc437ee01d7bfc75f165d88b47bb2c6c

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
15d3ae469c18cdbd53f2d9be33248e17

SHA1
2ae44a055b38b3b543fa320ec4420db931592696

SHA256
ac81626651bbc6d44a8bd02fed996b3e3d27ddc3c2431ada21d97b0360230637

SHA512
3a52abc5c2201136a76435908f60857c561d9e97ced693f591009664a3dde664f71c7c07d2c48110b1e19b227d7749619d3b30bb11858e051c1b690f9e14e4d5

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
b675a606f764f75506deb47fac84bedc

SHA1
aeedd1ff90d254da5825ac649ebaf979b5f40f66

SHA256
fd4f349adcd0d02741e9f193e38f7d8fa4d2e6d6495052e28285136c5bea7620

SHA512
5512edfe2bad01296fa907bda1e5393c45745ab38c542c0fa6144c0b5f59f499b45e43987624db394a6b8a0303b4dc1ddb3f55b9d4441c6d34dc785d00b83e2c

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
dcd64f1232a0053a6187af23f460951e

SHA1
cacd4846f10f9803b188a3192af62c2f98ed35ce

SHA256
9818938a89307c730ae55503337030673481daa587e12b97183b44004d9a1b44

SHA512
6b8093ff20f46a171820aa6d2ae2802d967fb24a062c66356d7483525215a6cbfb0a8d3d1ec2a57c1e9e4d8bd0f6f3df441c1b72b1da4f0d0f8673a608c4bd88

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
9950fb147ed78e7044b7735eb3fb5f0c

SHA1
2711c31d5d5d03b003a07b951dfb608e8360ec7f

SHA256
9b1135e752799a717be3060ead6d80fcf54f1f4b46ca8b7b2e5ee1fb5d1bb76e

SHA512
8a0f99d44efb928791ccf68daae5da0a2e3740bc466a4dcbfcb163747ba803a0bb8d3717cc62eb7f258d2d2cb05722a14ebe18b0cab1b6cb3e24fb1d3262688c

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
a822c0b8e75eae085aa2cb19a48f2c46

SHA1
9bcfad79f95e509505c812c8ae927d6046d6076e

SHA256
3c94a30cf2c806911da7811c9639ec3dd3fc557af64c878cdd3ac379b0550da1

SHA512
7d8f4e5d376fc95c647df62767a0da475a71b73b177c8aafd5929e15487e607e3f3f3b4a5b2b157766c554a6b66899f0c988c62f20370aaba4df6575de7103b6

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
13ae10c44e5e9b67848d1ec1d607408b

SHA1
bf98c180c1a99ab19f2aa076937ab9f8326ee1bc

SHA256
f38811f1760aaf014d2609702999d8e119b7b2210604b02d74ac3c06dcc3a7e1

SHA512
206167165d3cbf324c8d708df92d426e80235ef33ea57084ca7e70e6290d176ef234e8f8ae5d55a286386d9f5dab02bd38c98ed5e6fb6edd7bb1e9b8ffbb1813

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
0fc70286e25bc3c7838fa30eb9c0b977

SHA1
70f402d9248d4a13b6f07b48be4f29eebb00bb81

SHA256
e4e6e627f5654622353fa9a88e6ce6f25ee2a4d8e2f509c5134716822379b867

SHA512
9396fc42c15b0ca2294b45f6865d6cbf74ac0a0f64d54f5b033b218c939c9aab15fd2e382be4cd09e2575a8d6413a5a7fda5297e7061bc21858a4c8e4b9d1d86

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
1fb04392f2cf5f5ba0ad25d4a7867106

SHA1
09affca5a4bba4d5f7ddeae67298f3f4807066d6

SHA256
f11c4bff2a078ac98518c1b533e38fb939642ee3fbbe775f065f21115d129357

SHA512
fb5f6ee69f4e66fb19e5d47e3b0cee181c5104f34315a5daa5861a778a55d1211bed2f28694ba6936da2eb1962340ee42938ca8fe4a4c01f954ca1fde2aa7ca8

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
8e7c5efabd62493f97e40057bd390412

SHA1
39b0bbc53460a2c1c7fefb05ccf120508eb8373e

SHA256
340c5925cb8c54d89dea24b22d880853289f5cfc38b01fb956a8b0f4e2d61c76

SHA512
c4ef9c647b253e092a602e40a975714e1dfdd2daad8660d7d578986f3ff3e8ede341119b040c3f1040522e133fb5660e398ed1782c8b33a2c058fb18fa957cc9

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
7911ffdf6f01b6f0ccbd3583e119ff5a

SHA1
894d42d638fc16032b16e0eccf08af580d144663

SHA256
dd25254a4685599b774151fe3d93bbc884cd74dd25ac9ce76ea2126adebdfbcd

SHA512
c13bde7abdcfedefaa092dc7a0e6db863df10fcd74dc1262bb61f761187b9fc91451cee3ff5bdb013421677c1c5b75312d6d4b54859092fc557035ae221af1f3

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
0af6ab69f2441218d26cd5a7b020a368

SHA1
a86ec0e29339098596b53dbe094ca8498ca9f425

SHA256
c3c2663420d28b9485b9feaf2ce93068ebcd1dc233bb908c7e5ca58e770afbe2

SHA512
1466a7d70348c31aec16c1e3e284c44e59e74ae2589eeb7411bb2086def90fce7c5270d8d84b9677c69cfb8d19eff8990e3968f2993d810353b38bf7636ea38b

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
6d935ee5da2ea3053b22b7a02006382e

SHA1
e84d6e8c872ad99535c8e100164cd9f485ca2c97

SHA256
4ac7ad90180c39e65d4cd1a6b1fb5431a90877065904b153f2eee9bd0356c968

SHA512
398ea0280fc8455fc7395d87dcd9aa7ad7c041138bca3e92a15e2e1ded5d6164c7650b13ac427e20d09af15d73427288fa9941a61273aa277fc48be7b6a660cf

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
5d624792dd40dc51d43596305f5c028c

SHA1
d892b199e023e279f91474498126a0d6d8eb3a5a

SHA256
b84cd45f65d37dbd8798cffa36949b25f767451b04146f58e5e5d232f3d4ea9e

SHA512
2716aba3b09c8fd6c2629e45064aa866c23913b0e480e92bfa1dca96893c7cedbdd32dedfbc2e107efe6365d4d081a7be84b29b3e2fed6ce19f0cdb3b87b7010

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
9b4acecf4e5c4fdbe34babc2cf2f6d11

SHA1
b8a66e479da34a71d647779f7be4a7e51160c562

SHA256
cf90cddeae96bd5b06e2bfe4f33ed15007a97d263aa7859d414ffc575d3b204c

SHA512
9ebeb1b88722b040964a53b7f1da1e0c1cf89b25be706def380a7d305c5f2286d1a86038534e12d7439344efc20e4d53174eea2512921fad784fbaf2209f3144

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
a88899cc662b67c29867cb3220416f7b

SHA1
91c3d6970f127d66e4ed85ff70993260c1aaa2c7

SHA256
e3b981c6d45129aaea44db55a891bcc306c3ed60f05a5b48bb2d4846bf9f406c

SHA512
eaedbb8db5db56daf1d602375cc6c93958f7ff96d63e9ba2b7ec7af8e3fb490e36e458ff8c8dc8e17f5c0a8a459a592ea0efcbd0c5c4cdb9d7916f94b69be771

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
c38aba6adeee9c5083f941fd6c5a2b63

SHA1
df87c418cc0fb3a226e48ed052ec93d3225a949d

SHA256
a541461eb3627facd55f655d1dca539e3b72154105a7c1f833e4b54b1287094d

SHA512
a841b2c3a393b56790a94cf902c37a4ebbe83ada38a74f7173ef5e5628628b67d773eb644e13ee6ad2c999796966f314bee9a9d700c7d17d983b135a9364dc91

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
ed799c147db8136cbf9921c0d895a063

SHA1
e3c55fdfa513d8ed8f036f3fe62674a8c27f50cd

SHA256
245b21cc2159d7b7b18029402196e217d1c3ebff6656a783dffceeb41d2bc7d1

SHA512
20d98009f512e13990c4c88573f5557b32d450be6a64635ead5fd7108db0d0f5e4b80200acf1d18ac682ab22b7795704141afdfe52dc68e3ec4162cf189b4d28

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
ade0586bf8c3d20fecc4a16789a87cea

SHA1
ab7f2ec7c45d9a92fff72d87d99a5f9e7d5249ec

SHA256
177e8d8c9820bbebac661740a3729fd3188f49c6127345bbb4bcf4ccfaca07ae

SHA512
6c835c743b7c9fb9dbd8ad4d01abd158098583cfa08a29174e226615503a11d35020fe84cf49a512ac1e4ec08e85a06189f5542583910dc15761405b70d47212

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
02dd9050b824348e6e48b162cd15f473

SHA1
d72601b20350e871c37f6b307c7f81ac227c7a98

SHA256
8d098f9eeabfa3ad1857824c8ab6016e96b11187e8e7e7a9d6d05922953be98d

SHA512
c0b9792ec02b3904e0de9aedb5f949dc1fa2b697729bec0cf323f46215965ae9baebcbb64c08072f5983ef2ca8123afb0964cff7cf2015b35630f1683ebaa5d9

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
434208d0ee3db2f1079440f201552c81

SHA1
da28826f3f14a2ea7ca14cb3cfc738fc8a648d59

SHA256
c4547d99ff4f509330b4616cbca7b3ddc2ec05fac544e10fd9951953e8da1724

SHA512
c4743fd1d1682680218afa412ca4748578869d33f281200ed8e79d98f7f97127e28c50ce392a6feb68ce6adf960c8bff241f358c2228abfecc1ca36e6a09694f

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
f05e82087cc3beaf93ecf9f5fd543801

SHA1
44733d02d68dff690a50eb7c4e535e6cb5c62448

SHA256
a61969330b68a48229e03e4a1108d46935242f742950769aa20db628e769f814

SHA512
0848bf7ea7c252824772d27f44f9f79526b079504067aabcde2b0087f0bf1bfb1fa1e13f9c8a8d50f76e3ffad9904e65f128a612b90c191008c6d3245c220ff6

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
9cc707ca342408c272bd8566c1564e48

SHA1
47cdd8eea0031685f6b80a0b134b42a9dc961027

SHA256
98ec52c0f220002317db1c70c0ac0c2bbf959aa5c9dff5d806fad24a3a4f58fb

SHA512
4affb52493b9b28045e8424d2244f5f917c556d1225603e667c3b1c6601415b2b0248788669cf191d0a9cdef69791ca1d3f72606838757138f0d9fd19a4c72d1

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
2a3c642c178a7cccd85514fef6fac172

SHA1
9321a05e9318f24c2254a1bd16c3bead8a42f1ed

SHA256
2aaa3f6fc4ef03046861d1084d1c7bcbd79e0af3c27962f798c077b7d74bdc52

SHA512
fa58db9ad870d763813de71b44618bff6ad06581b79d63725674d8647c8bf7ae5cf51907bf0144dbc767466b49ccc336660abf2e3010dca703df5edd2aebeafd

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
8fd1bf11d53a42cf4a31ae2947375da3

SHA1
3b17f03a802e467ee0fef89e3726bb87a0c8e2a4

SHA256
7ea81eda070664120cd96381832b8935df0e5dffd44f209ef4da80d46331d1be

SHA512
341766d6528cd3c5c8c3e22b5312b9aaeacf50067aa40b67628ceebb4075e4f6b09d1f38ed6494568a21cf1c4521db2d9cd65556aff0ab3831160e6b0b1ea3ff

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
ddfdef574660367c5f21ddc90d572fc0

SHA1
6cf501bbe6249f4891c6c8d9f8431558ffbfa0b1

SHA256
86c2cdddc0659c26f36ba756ffff0f46c4077662f86e7fb887b6b7bac6d1495c

SHA512
8147ac7f0bfa7b20fe6bb98b6ace58fd313f7d6e8b58de08f677edb730650bf5ee016f4c45d02e06e57e62c24fb331da61bd68be51cf5f45e49458929a806557

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
37825d9ecfebf3b08fce9e4a62046049

SHA1
79390ad580b037e2292512d2386f79195a3ca33e

SHA256
bed85f09a923b7131262141100abfe8fde0634961cff7cd537ea3515b5ec87e6

SHA512
ce046e8f16c09925441372dbffe6099953db9129820f0663665ff85fc9970b21517d73f5a872cd911e4e281cfe7c99d7d59cfa2bb2720517924050362ce46fb0

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
398843a3895f4587074f69203349d4dd

SHA1
c3568ff6a4163f516c2d3f70ebf102823bca9f74

SHA256
30eef212e1f14c6757ac02b5cbdb7720f631cfee7c2c83ce9cfe90192c184dda

SHA512
f8e6d2fb592b46923aabc0ff7314b1767f24c4a105cec234300571686d264e2e4f4d977cd3063358a7bc46c40ce09b78cb074530b29f490fbadbb7b0b349a661

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
4c19a0ce5430abb5ab5ee57ac2987d2a

SHA1
3225d7b7d4c09db764f96e41e6f96d60084a3afa

SHA256
cd4b0fb34bc14b86f3c4d0b7edd581551ca34126809d84ed1e2077e4a2e17843

SHA512
158d07da21db747f39f6f80ae81d3ffa254056f2e8c03efe916322b0a5ef073757903dbf688dbcc5ce647bd00a0126e0ff452f4127e621c20471fae660079a0f

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
56dd3614d2df194933cd777d612a6574

SHA1
4b9b7c6ef1d4c843222a320ad9545f9db72121a1

SHA256
87a2596b194bf46174e9c912d6fae8acd0747ad38cc9aff420bd1fd56fc8012b

SHA512
508e0899f4fec59e8106037abc20e4fa0fcd2fb3760584edd1ebd2c5803b002213e5e290b066367bcb58303f9987ffc6476d1b2dc52a645e63139d08db77f6cc

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
aae6df23db4b052326a4737d38d8ed1f

SHA1
34109ea40ccfae8c9c665b5c4859cffe7ae2f43e

SHA256
7eb77540bd8d3f9225b5ea949c4180fb49e94b4f9f0752723af32f2a69d65ba0

SHA512
a342f3cb002849896e79812811fe254aa8f458cac6d26b17bc7174d55c8dd74515828b05a4c33d9da22b0e843cedd9e17f218bec3784731b310bd7e2e38e2dbf

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
bdbfa969194bcdfd58f12030fd7ab53c

SHA1
68ba57858a78073cee2cee16ed90d77860ad6e36

SHA256
a8b92e43ec8d8ae3142e101edbd990496a833d35f9b588a51225dfd620550339

SHA512
7ff49f8aa72629fafe3412b835ef38551d37f4909e3fd2b424d3cd6dd9f8de64bae7341b6f2d5c043e3e3aea9fdef3f60b879772d06876381dc844ececfba3d2

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
365d4413f8505eb71240bf64200310ff

SHA1
986b70205c86ef6458aab268fe5322f5aefd82fb

SHA256
06476169b16ceefb14a3573c0ca2aa6b7ceb4473de2630f06fecc4949bd93000

SHA512
55e8941e4e3abc08b93e8eea42af791298d7346c54913215f54439e7268338afc7a12d90058a56fd938646f1e3729223dfa7336053c834411f867c82e08c29c3

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
4919ed891d41673402b43b9610b0da3b

SHA1
3acc141122b4b263e4afcff08a094cd62cd5005a

SHA256
a508e68d9201cf280b5f93c14d7c7e7d8c1d7716cc1fd484008310ac96e156f5

SHA512
9baf07334696c83387f2dd3107330a2908dbbe974dd7b1242b97c8b1281cdfed3f6b73f91fe75e08c416ba0b8a58e19158d321fc0300e65cec3986b74925ce0a

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
6d504c0a3b062308b7a419d62db0150f

SHA1
3486fb720d3c25f9b1d3899d3f699167c4a5a368

SHA256
c3581bd9a6c20fea86234eed228ad671c5e57183249dafe4012c533a96bb141d

SHA512
fae57be245fa2d06417e35bc2918e924fb0693dd129bb3cd019576a82c7b58f693bc2e5a6f6a299d06a90e9c1c2b7069bcfcf090150c075406daa097821cc127

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
ff7f964fe020bf2944d0d9eda9b07210

SHA1
c7052e43c97b61d493d5ea3c4bd24cf0f9795b1a

SHA256
48b60584540270f1955c00fc61497c86a6aa822335002d4b7e581b79aba0ac63

SHA512
e796a0fd8ac0c8e8bdec2fe4715d5fcfc9f602edda823a7cee69acca96aba48d952e8dd7ba8f0576e45962e9eff4b5024cf8dd2933115f5b12b733964658f53a

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
8fc1bbb5c9e6bc7365cf492460f770c4

SHA1
cf4c731ed2a224f7d634ec3e2dfbcb94d3fba7b5

SHA256
8423dd6b6ecd30aaf07951e27d543dc7fbcae85f35c9c5193c0903aca1a887a0

SHA512
49d0c884db45e346c2b6ec50b2ece40cf1e6897636a9b38958eb913ad9a05289d3d577139921f16506ac854185a4eea587176ef1bc825d53798e1475ba2b9b0a

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
3327b77aa729490e74c649132261a7a7

SHA1
edfc89f7a2557b29cf285da8260ad8e8438cce90

SHA256
3ce491cdd5ffd4222907c100872f2b512ab04fd33c494449c8804a90adc58cd9

SHA512
6175ae52c395952590ba9813e51799349c03d8fbd4a71276ca9ab89dbef979aa7536481a9dd6e43ea94cd26c96a0fd0cd8fb3fb502d98155966924be52c176ad

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
24fd299a6c99e5a58b2d1587e98c241e

SHA1
22ea441f2d106e4004e68e607c0c037b6130b064

SHA256
9fe22c3996eac287ae979106e71fc4627874244286090d22191e30efc32e42f3

SHA512
8bc338a67d369f399791215eb7bdb9859428484cf3718d746ab5174225381eef1ad0aacbf616d4871a5d5b8c10c9dddc99bad8838bdc1b0d9b99a57836aaa2e6

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
9144bda70ad152a8783b5d4eb85a4f0d

SHA1
1d2c9bbb381d1e1646c9bf5b68ae128747f6fa1f

SHA256
2226e8ad89a949570dec8ed99793b69501e11058fb50b3978a51232412d6fb7e

SHA512
d936761fac07f74e346b274383bad6fb4366b1f7320957428d6b956a7cdac141c1f13f763b7f5695da7db67f99299a1390c7748ab3b734c1291cf0301da783b7

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
d3193484b786e21a8c8bfbe0bac9efa1

SHA1
74f72e07705f05ada1abe9e41c0e8df5fcd3dc65

SHA256
b896fbfc4c1f644a51267b10872f18f2a334dd1b9132c6dbdb7c3c166751f875

SHA512
c959b87af414170d383bec7ec3652bf16768062be2602d7950e35e758a460c0dc3326937420b4d283deee48c0982f1019170085395bb97a2e9d13d448fb7a744

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
d8b926372c7dc8062527aefbbfc67a86

SHA1
15fa645d8f948cef0ac1e28f76fea4ab5fc0a1d7

SHA256
039e7b849bf5e2fc5555fdb8fe4ea303b720dd1fac2319cd3573805426aef125

SHA512
d7cc55b35a137fcb6a3609c61c822808a6c0cb903398d5b546860247aecae1f671820f25854ca78b688e07009a615ecc8d4e3108f901a13d6993198070daf815

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
623eae2938b480b462ecc221e81fd4be

SHA1
fb308912ece8b45172b4e3de2779e7806d8e67d1

SHA256
e8c1b7efae9b4a3c6015acd40e2f37b4c5bf3e9c7e2d84f93706488a6fe13afe

SHA512
e2ea8a8190418cb46c83b62683d41e0808914647a42fb2fba62cf94ec1c70d642744e35bf7448527042bd665eb329bcd5a05e0674d25cff692ef7f4adc76bddd

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
cf82d48963ac1b8937a271f121a6ec55

SHA1
045c63a33f6804fc13fcee0be0dd0d46379fc39a

SHA256
59e57cf57d3d0784bb332d4a5cce7390087eef67fe244f4090065d541dc990a2

SHA512
68eb6da9cfffa41ff7b18ae9bcce5dfaf36662c21589271eceb198f846e0850908a28c0b0ed72f63e870c7328294877a559b69ae3c1a4e6390c0bea45d5b1ddd

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
50c1c7d670cbaaf48e484fbf59e44816

SHA1
7a680d91f840d0b1f39b58d8747991e1b87067d0

SHA256
abdfed637928d808c8c01f892b959b6bfd62e15647dfaea65d20b4c33ee66676

SHA512
b36e92f29e9ea602d0985269e617b24e1a097864cb21e171d858e5205f715ce8c30c6c85ea67d6f0e949b4100db9a2d01ff828d23d860d9e542c8df5fbe379e1

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
7be0a84ef8f63b26e03818ea2e3ce777

SHA1
7cd02c01247602dd019f3c4d80fce0e483f1197f

SHA256
308b5fc37d9c2e64e9074d7fdcb9e65a4a543c187b066691df8183b947457370

SHA512
86f02201f9c95c449822742515b0f7353a4680856f20f4998bb954360b30039150d520622e3d6fcd226269a398486c5448cb1ef6958b57bfff2d476a51298c34

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
7c47523b78ef85e9d1cf7cd9c9feedc5

SHA1
7ef62c2d0342f75f18d5f79f918f1dd9bd390ffe

SHA256
410c09f5453d1ed74d24c1d02adee6c6d7cdf228753b19f6cdb74c70e936d165

SHA512
49dc03116e2f93fd0f8804ce80eb2caba04b19d6dd20ed53a94c035642f540cf86fa39a42e20dda60c3dd876dbd0de16dc29c8229630b58ff430a9fd267cfc82

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
0e912e9513b1609ce5ded2f7d9816f66

SHA1
98cd4ab193feb225534f2ed3dce9c6cb57d9811a

SHA256
46e63214cf9deaa06db2ec73ac45555a56fe6479aef21a5c8e6685a748a5702b

SHA512
af62b2a52799f2c5f3870389cd615494af51b53fb40242a33813dfba6afbdf42bfee5712a4bbc3a74563e6e8be70b4ed45be5cb0991f2acb28171ca13d223a4c

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
35e12534b477dbbc950008d0b9e48b2f

SHA1
8c8915df37f9345ccdf65df19401955a666adabd

SHA256
e296f4114f97cd3dfbbe03ea3ffbeb2d53578a417c9e9d02c6f6ac850b96c85c

SHA512
4842b68f65b5399cff2235d00e84976bd95a56fb739d3dadee451a1fc8469fb2941ba3f899c59a2dcaff4766585bdab19e9344d44adbb85c5c7302dc865b6fab

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
a73830aa40a1c7ca00fe68ee4cbc4bdb

SHA1
f946b1c49d7f149aa0bfadebcc2d71b5706c275f

SHA256
47c4c606547ed578741b498eeba643d1f33b76b76629c6b59f4e0e422e440960

SHA512
72056ae81b6ee9e2d0719fb2ad1200f876d2c265ec9aa91f05aa62b9bc5ea5b1f2bcfc25e12ce2f8e338633df32b580791b69530e73b73ac3f344691a3f7384c

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
800c619d129acf489f2281442000c361

SHA1
08a47fca4c09d04547c58e0781bf59531d70cfd3

SHA256
8933465438adc5c5193eb7fbadd6c6e7565d2d460fa517d0bc8f21cee49f4a65

SHA512
cf467ba93136084d23b3ad4df5330c028ecdb3e93500196f57c134a7bb3719fe2d4fe0e0f378e8fe10937e9c02cca4b4192b6e54d6a18721ced257478ec12092

Download Submit