0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
98s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15-11-2024 02:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2891E1D4BAC70EBA.exe
Size

137KB
MD5

c04dadf78f2813750900fa54863fb2b7
SHA1

8575e9d6f980b53ea13c37053aa2d55691bfe3e0
SHA256

207a249e3c4359548b9ff264cac31d09c95d626d0e4835c081d8afbb732bac4f
SHA512

20baf3958a55df7fe0196d300809afd2c4d4408c4e08db21f5ed6a1b6d21fcb09eea081813cf2b5ba60d745f745db043d2d2d9132da3ea565306402247b43372
SSDEEP

3072:GLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hv2bIoKb:GstYrEMw6Bxk5zOFNtgJKCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 2891E1D4BAC70EBA

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11286) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

2891E1D4BAC70EBA.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation	2891E1D4BAC70EBA.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

2891E1D4BAC70EBA.exe

description ioc process

File opened (read-only) \??\F: 2891E1D4BAC70EBA.exe
File opened (read-only) \??\D: 2891E1D4BAC70EBA.exe

description	ioc	process
File opened (read-only)	\??\F:	2891E1D4BAC70EBA.exe
File opened (read-only)	\??\D:	2891E1D4BAC70EBA.exe

Drops file in Program Files directory 64 IoCs

Processes:

2891E1D4BAC70EBA.exe

description	ioc	process
File opened for modification	C:\Program Files\7-Zip\Lang\be.txt.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-ppd.xrm-ms.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\th-TH\tipresx.dll.mui	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\pl-pl\ui-strings.js	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\Fonts\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxLargeTile.scale-400.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Microsoft.Xaml.Interactions.winmd	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Logo.scale-100_contrast-white.png	2891E1D4BAC70EBA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sv-se\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ul-oob.xrm-ms	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\WelcomeCardRdr.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\bg_pattern_RHP.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Transit\contrast-white\MedTile.scale-200.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.Cryptography.Primitives.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\dt_socket.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteSectionWideTile.scale-400.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-30_altform-unplated_contrast-black.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\PresentationUI.resources.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\UIAutomationTypes.resources.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\uz-Latn-UZ\View3d\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\sfs_icons.png.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-ppd.xrm-ms.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-pl.xrm-ms.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\mip_core.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\CardUIBkg.scale-150.HCBlack.png	2891E1D4BAC70EBA.exe
File created	C:\Program Files\VideoLAN\VLC\locale\mr\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\MixedRealityPortalMedTile.scale-125_contrast-black.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarWideTile.scale-125.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\scan.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\DirectWriteForwarder.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailLargeTile.scale-100.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-white\WideTile.scale-200.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\selector.js.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\root\ui-strings.js	2891E1D4BAC70EBA.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\tr-tr\biobio ransmoware.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\awt.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-pl.xrm-ms.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-36_altform-unplated.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Globalization.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-black\LargeTile.scale-100_contrast-black.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\PesterThrow.ps1	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\desktop-tool-view.css.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\Configuration\card_security_terms_dict.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PROOF\msgr8fr.dub	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\WindowsBase.resources.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\7-Zip\Lang\fy.txt	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Windows Media Player\Media Renderer\DMR_48.png.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\clrcompression.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\ACADEMIC.ONE	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\es-es\ui-strings.js.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\MedTile.scale-200.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-16_contrast-black.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\StoreLogo.scale-125_contrast-white.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\tl.gif.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27323.0_x64__8wekyb3d8bbwe\vcamp140_app.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_48.png.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-multibyte-l1-1-0.dll	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsWideTile.contrast-white_scale-200.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-36_altform-unplated.png	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pt_get.svg.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Resources.Extensions.dll.EMAIL=[[email protected]]ID=[2891E1D4BAC70EBA].biobio	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_COL.HXC	2891E1D4BAC70EBA.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MEDIA\CASHREG.WAV	2891E1D4BAC70EBA.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

2891E1D4BAC70EBA.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2891E1D4BAC70EBA.exe
Interacts with shadow copies 3 TTPs 2 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Direct Volume Access
T1006

Processes:

vssadmin.exevssadmin.exe

pid process

1856 vssadmin.exe
1412 vssadmin.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2891E1D4BAC70EBA.exe

pid	process
1856	vssadmin.exe
1412	vssadmin.exe

Modifies registry class 1 IoCs

Processes:

StartMenuExperienceHost.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

2891E1D4BAC70EBA.exe

pid	process
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe
532	2891E1D4BAC70EBA.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

Processes:

2891E1D4BAC70EBA.exevssvc.exe

description	pid	process
Token: SeDebugPrivilege	532	2891E1D4BAC70EBA.exe
Token: SeRestorePrivilege	532	2891E1D4BAC70EBA.exe
Token: SeBackupPrivilege	532	2891E1D4BAC70EBA.exe
Token: SeTakeOwnershipPrivilege	532	2891E1D4BAC70EBA.exe
Token: SeAuditPrivilege	532	2891E1D4BAC70EBA.exe
Token: SeSecurityPrivilege	532	2891E1D4BAC70EBA.exe
Token: SeIncBasePriorityPrivilege	532	2891E1D4BAC70EBA.exe
Token: SeBackupPrivilege	4244	vssvc.exe
Token: SeRestorePrivilege	4244	vssvc.exe
Token: SeAuditPrivilege	4244	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

StartMenuExperienceHost.exe

pid process

1752 StartMenuExperienceHost.exe

pid	process
1752	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

2891E1D4BAC70EBA.execmd.execmd.exe

description	pid	process	target process
PID 532 wrote to memory of 3744	532	2891E1D4BAC70EBA.exe	cmd.exe
PID 532 wrote to memory of 3744	532	2891E1D4BAC70EBA.exe	cmd.exe
PID 3744 wrote to memory of 1856	3744	cmd.exe	vssadmin.exe
PID 3744 wrote to memory of 1856	3744	cmd.exe	vssadmin.exe
PID 532 wrote to memory of 4700	532	2891E1D4BAC70EBA.exe	cmd.exe
PID 532 wrote to memory of 4700	532	2891E1D4BAC70EBA.exe	cmd.exe
PID 4700 wrote to memory of 1412	4700	cmd.exe	vssadmin.exe
PID 4700 wrote to memory of 1412	4700	cmd.exe	vssadmin.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\2891E1D4BAC70EBA.exe
"C:\Users\Admin\AppData\Local\Temp\2891E1D4BAC70EBA.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:532
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3744
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1856
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4700
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1412

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4244

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:3308

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:1040

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1752

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
f47ad9baf15f4285461b67a3e106bb0f

SHA1
ec2b1eb9034f0f49e41adf4e4a8bb3d8e015a765

SHA256
5066b7e18727b59584b6bad3fd4298f3a6d93eb13ec4fe1bf124c8332cff6ad8

SHA512
17b51f4e49c44ca360a363892b3a0401e9c00d4212eed1946c8bd290f4526c89fa09da882c1dea2484152a6dd4857d9c490d352398b52fd8d6c1be988270e466

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
ae44dedaf59e8f382a62da6c0fc74c72

SHA1
420395d1008f80982697d4288d912662077304a1

SHA256
868192d800b5d0bbd178ea64da1ac968532684d5c2bc579ae756394b8a75048e

SHA512
befc7d65f99ada794f60252f338f2e15fdf404a40a17fcd2bfdf0d9780a085a477e231372abd0578aa43584475e1344f6dd06136a8d706fd769aeb44020b4ae2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
75e11f9882dba0cd52ff86c14f56d318

SHA1
02111c0865cf8bdc3dce2699ec4b153ccfa72431

SHA256
acfb006d6f8e17ad2c0bba39da95a7fd07f42b1d0f8824c15c9d9eb2db1b7084

SHA512
861950f9a678fca6198874b4f98f16793b2d440605a237934e456bc9fa8efc67e910913198a01e8dd63311f71d7180114c887566427d190d25b2f02962205c6e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
e5d62a9b1ffe12eda73ff232ff75fd31

SHA1
e1d23ff77e707a1df526527359ae25bba479aaa5

SHA256
8c780718235adbd16174a04ceda35b43dc1676a35f5add7435ba68ff404bbd5d

SHA512
30e00eb688e31d3a79a639d40ffb90b8bc9da2dae79dab47f47531feb75322a22e3a58f7fb951acc6abe5207268a71bc34e7c0ccc2638fb6b9fbe7d72e512523

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
dc2d8380ec00823d75241dd022f4b7e0

SHA1
da121a7de31a153e3b0f129cca71c97972be2732

SHA256
ba32b29a8c3811186a2e02630ebc20e9afd1966de0a452b36d964eda62420588

SHA512
6788b025d3eb195f9661e897ba1912ed2268c07169537610eac7d22b96afc607af5e9f6607ba106f838ee97a61f8039bd67a9b523619b5ae0974ce47a0eb652a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
07d5d22c3c31ac6517f6866fd7a01db9

SHA1
beeb8e6dd745586bced3b9d88a3d55a53f57d7df

SHA256
e6d497c945b79ae2e35063fe07e93e1d08ed2eb2756993d08cd640626068537a

SHA512
a85607e31ebb2bd2662a1c1575340fe27a2f9effaba5e4341fa2c54a0f32cc665f0956491a8d4533ae736b10c45418c50ce494c8cb1688caa0fa1cfb1df2c05d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
595f1920fb0eb5812e70801d8ffc26cc

SHA1
709d7224633ad47d1d41ebddde0d2447222c1cc4

SHA256
aff7c271209ce7bd747622ac405b8b21ad85aa97f9a8a235c341217e4eb131fc

SHA512
ebfde846153bba40a7b3049abf89fe7a23221e9bca9d1660f2060b668cf5d9141a53ba45520914ba24e5477e73b8c53ec9a8e7ad0c8cb89eb182eb271b4873f7

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
0058d8efefd479f1ddf76a9b7d11ddc7

SHA1
687095e01dbaa66d6e41defc3aa7284caded8b0b

SHA256
f8e07f11f97b0591c01fe8f96bb12bc9693da2c6a276f504c81f51a8b5785b9b

SHA512
281cbcc87ca2af83bbe82b8f0095cd4de9670b981e7e1ae223afbf2f8642386c1188b8bcfcdc53709ce0faf9c1c90c5c1351cacdc1517d5799d8645cac14fccd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
04b4d875b2f00ac0d0c00d7156dd5221

SHA1
460a1371aa4170d3dafcfbe73db15f1ffad4daff

SHA256
d20a1ac47abb5ae67b927954f6c3f987e29b6f83d52491aee1ca6bfff5c7215b

SHA512
356e9572f5e56e13864faf8d0c459100fbe74adf9607db93e9619f4e32f40391066a60a32960689600b35c7b52b9cc252ece8b72cb8c5be750849282fc94afa1

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
65602f18573389dff9a8f1b99f6bc746

SHA1
a66d7fc27c4f7913926e313d131358bd36b032e1

SHA256
2cd5ba1ad322a6340be4550cc4c9b3f54008ba4b6f44fe8901eba0f944166f4d

SHA512
7c9aa18f9e1dab436e9a5d1bedf8293a91bb9f8048eb12e29d268df208c92a8b50d86ec4fcdc0815436c287f85e26dba6031c485e703b1ab430eae788db7e56d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
fa7e94b10ff3af303b7317b1910e0549

SHA1
d521a101e29c43f5a755c7bdf8ea4f9b0b7d4d6a

SHA256
ff0ed864045176fe671db6372c7636383566d989d3e953837dda3b3b2d3e485d

SHA512
30f58d6c9a3d60a4d4b578b2078dd7c4ce9375ee084f0debd39e5c5277f9564e96c72f58f88cb53977d701d1d42dd9fd30be093b365102ef1b55ca6bc4b906b2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
e760b0d23d658fe98349b9e87646a832

SHA1
bc9839922dbca6ca1a058bc54c1ebdad7d6a3da2

SHA256
4b69dee951b2dc7835e8e5ae3e5ef30cba9973e69c46521c9a8b7ecd05d5126a

SHA512
ab054c0b171a911ca16ff26d67116c3e0aef396e4f0f48d108f906de768555b73fcdab132d9ae8a440ec30a98f523d80124c8209e6d729592ec1bd58d370cba4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
d933577f49457509963633c49c610674

SHA1
f8219f745d3c85d89c79efacc66ca87953b4bb69

SHA256
c1bc8a8252a61142c44e90bd04509bd36a1cf69e1d7bfb3ebe03c490c99dd3dd

SHA512
22b95189ff8c6ce6577f51dae559f998f2cc029cf58eec1d8f82270392eb62e92488575258a666e0680c1046f75e4295b241c039f46f73085708be136857dd75

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
550780add086d633306fbf1e98a6de33

SHA1
fa887e164cea0af661da1e62b71c078f36f2a99f

SHA256
ee0509a6b40f6c5bef334d4ed8f28be7b89d9e83437c1139bc75276cef6bcdaa

SHA512
dd312206b09c53a8bb8bd86d9dbb30aa8432ba17d6d6e6461a87fda220db7a9150c75af3b3dd5d1abf6304638f1fba2352389d33bec1fa30ca4273ff834213c7

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
7cf8d850a6629ce5f64d14579628a961

SHA1
0d78ae96a7d0c6ead9136941105f8064f9f312eb

SHA256
80db23de9eb9e97165870fbb45776c5d3e7fad8549efcddaa8f63a70164589ac

SHA512
f8e420d2608a70465bcbf6b0ff37a61c3a637b4a861fa8208c544abb5f2c4270d6878582e654a073d133db4d8804465688458b9589d564e9d29cb1767feb54f4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
92950e7b535adbaf8ca46fa2d72bfc26

SHA1
8260d02e4639edf45ba60710341e21a2d75118f9

SHA256
c1ba7fd712939e0b90e5b1ada3fabae3da18d22efb4316c561172aeed9476ca6

SHA512
b566a5f3af136e9c94779f6803cbc183a6d31f20842f47e3f04aa730fc1bb9506cb8a82f6b8ec6b1f169c9d667f2d144267fba2d464524a59313405344eab5f2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
9a951a339cb57f83b478f2e35df77b27

SHA1
b5037971c482b1f0ad0768d1e6939d3fa501e811

SHA256
86c87fae3ade3744a354f87c9ae2d365dd806d3abd2b1009d297b9002840f3fc

SHA512
26a4b246a5e4b1f68ca8b2f38dff8b87c9929d13464e923e379ef0e00e323c17577d614f66ded56e23198b9fdde6156919270dc5902bc94e14c967c649ee176e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
c54812f8cd4be6bc91c707c357610ceb

SHA1
894d593a3ca179ff0f15639016d83f3152ba2f62

SHA256
459fe8eb0c8a948cd90e6da7fd46686760f39b2c6aca1c9a9219dae4d008f53b

SHA512
725de02a0e54e52b8c1537f17b292d8326d6ef03d0e62b91cb965a830fe664cbe1564b64f1aa9a6054889e4d5dc4183d42a4943680bfb042c9875c8c93ab2f79

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
e8ce11a021755f658dc602894301f86d

SHA1
b798e470e33ddab551a50750176402c9ff2ff34a

SHA256
8033702d81127621a54758ec905b7d7b5e4ccfaee39bf99f0049dfba0efae0f7

SHA512
3137c02548cbbbe11c757763fec429f439ffeaab365572a5d495ef9bbf64bded62d0b0d961838f9829c642375824272ed8dcc04e72322bfc22f1e22f05852619

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
6672c2943fd35a383207bcc0bb27f067

SHA1
d07cebc7488d412752073aef7773c42607737e6f

SHA256
9967127f5c9bece349ade25f9b7ffb2117ac0f18ce01fa230b48978b460c13ec

SHA512
cbc293d402217e0c734fe29589bbe72cc96427e8de331e21da14a5bc4147af13874b2e72fc562c015aa1ce274a9577571acece2bf1bbe4e15a7ff6bb1e2a6393

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
d33ced15cccd043987accc1ead442726

SHA1
4a2ee5cc7bcadab271b6a24a00edf69c22847971

SHA256
bb477b64de71a80c25ecfb33e752e2a52e0507ec34c3ed602a5f761463354cae

SHA512
294942bdc523a49d9c09bee270d389a3b055e74b4f4e3cea26b451ceae360cb160a2542faacb1cdc47a7808b0ae217891592e722da7dddbc0e4e33779561bdfc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
b7a2d3f5f0013bfbed0dd1409005a37d

SHA1
494686f3b850c1e5aede5c40f3fad76186a899bc

SHA256
2c6846e33e2dd52feac6bb55130dd01b81e278637d7cff2e9ee2fb8380ab7f39

SHA512
bcfa3082e9f8dfa5663ae9fc77d0278d814f441ec1a704a1eb35cc8801b8bada958ff556bfc4c3522ef88172422ec2777aa55c0af346ba0a541ce5d7c3cd5d62

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
a67300063ff2f946e59e974b033d1eb3

SHA1
93182214bc95c76dac5d616014f07e4204778dd2

SHA256
a6494242d822ebbc6a8081d6fb194333114999a45fa7844a3783ba166ca96ecc

SHA512
ae1eaa6448d3fb56758f25090526da87ff61450c6fd127021b42b4221e5dc27d255299b5dce698e25b44d7eaf93e5977ee80f520f2cc07f1a31bac75eca9c2b0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
6c29a8b9ec40dad5e49eb21230b9a006

SHA1
0ad8848f42759b5c0a2572cb7e9201ca70888e69

SHA256
76e56920af5ece72c3fb24c494419757d87b4d31ebf123d01668fec64ed4fa79

SHA512
85c7e149d4297399411ead96672e5b1acf832b608af6edfb821264df1a2562f4bacc9904f8d2fbe1181c65b466cfa84a5983b91d5dcd7492289b59e9bd5cb6b0

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
62460523397b4dc6d373cc7a16e95a98

SHA1
0d0cc4dad6cef32aa110deeddae9045e199604e4

SHA256
2746472bd9e4fba2be70eaea093bc884c603377199d0d3f209da7641cb1f7be9

SHA512
19f03eebc5742798b0e46b41896ddc4b6f0d39d2e849b743237bdfaada5dad0079a66833572d09e3f444db8ceecb7e3e565eab79f85c6283094464971967c63e

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
a9233afcdbdc04f8feb43ec08062183f

SHA1
2f920c3d35de8896b8163f6514342b43d287e978

SHA256
4b34feaf176aa88e569f9b846f52b911140f76c89fd35d1d828cc6860460ab80

SHA512
286a3bb3c4c5db2fb18943dc0529703dc0dde5900cba0df0b902a3c226859165ad76fefb59c14997541727b3643d3cceb2a7018dd4f35917d4671ef1a8480d1c

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
0bb04c706e60f9c3e175559f1b280b50

SHA1
a79105bae03c5180410854c222725f3fe4ef11d4

SHA256
2c4b9d9bc31a86f593f18b61de09f6383b1db2f3ac5b6889df9a8735495b1c04

SHA512
d334038ad9cebcc3b9c01ffa0dde3d495cf0ab49f51e8802f02b72251e37d39bffe3db2094226bcfcce26e8c58c20819e703ead80119805d71d25dd4f1bed1c9

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
0ba34a9d196ef34a8b994d4aeb2f9a42

SHA1
e7288e3f2baf4434e81be39a438b3ee7386e0d6f

SHA256
32a07fce70e650e4e13fb2b5e41a6e2728317468138dc58abd607d04c97373f3

SHA512
90b54625e5ea758f6f01f459ba0ebaee0bc90140d8c206291fb01ea75b884d5e8757ef1da902b98f2e3ea6d3e89b5e61d3b86e1fdcd99f816b6523338d82edbd

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
6f89bf0f98f27df8279b91931ae421e6

SHA1
ac71030f1989439de01c2a191242fe6ba26b248c

SHA256
b4255eda4f50536df33072303aeb8da054387dcfff607a13cf30bdb089763ee8

SHA512
6f4592ca279b7021357a5064c878d14b430e22d0157f0511d4a7f43133567923f34a361b77a552a3745ae79a0e213a77e1a088f36fca414545e882205941f447

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
0fe21b6bfbe9f2aa31815b424d4d76b5

SHA1
d7bdd2d7e51e3d3e6ba56dc72dd92cff52fff219

SHA256
d64190a8b8ddc26370e5eeebf8feda80a82405833e78f8ed233af26c63e9e2c6

SHA512
6e3df98e85b4edd20111c9ba9000e8c1eae19a0812075ce354b7fc5ab3ab773005a875fd6dec9ec4567bf3a4b2c833b3b92debf98e2e401ea195cfc2c959d040

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
45b7890b10de697d72959ebabbf18957

SHA1
acffa57c4fdb73be904c5e5b343462c3379b913d

SHA256
14a00b0ce7f0b19e7e6a1c7ea6bf066a9529da17244ee37df319e378878798c4

SHA512
6c46474e42bca1a8689bc4ae211c080b18e8b723c16beab8435207a03b9f96e4e581ffcc83bcb9e8333d880a40c518f5fafdf34363d87a689ecd56f107d86dda

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
ae2ab0ec691fbf0c50496fff92e7cc94

SHA1
bbc5c52526372ea523fa1d7b26f01fbd21c4e59e

SHA256
9fcae26645cf1c24c230224c1a053790d242a5963e70ae677e4f206490d4c45c

SHA512
057faa41da29a2eb873ee02f0fd285b7741cd323360f464c0fbe760e38196e69667393ccc17944b7db657f73f485bc532e632aadb4300d6c951385180109d225

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
1274437fcec91b9349e837381965edee

SHA1
b4433c4945b428ab4c06377419f7f866fc14080b

SHA256
bcbed03710a6aa0c8a03222d92f4d9845c67cc7c12b1f46310244cfb945ebc29

SHA512
030bda479c4a5d79747de386002c5c2556ca52356863a740b62dd75434a275145a4bb0b45cb2e9aa63554dec2ceae2fbfd9ffa0e89c254a350c58e2409567100

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
b7997708d63142adfab0699a413c9a70

SHA1
4216bad41b55cb0447020f9355aa8a9af0fd67c4

SHA256
637a345f6e38d9e252453a2d93856a78715285f78e1cece661fe5a7ad9cf38ea

SHA512
5663925d491b49f846b835e5892539d0f14e82a81025f7c9636b83db527422de7732c778d67ff6de06f81538dc94fb40dc9420d11c5d9fdd6c23a05e19338cd2

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
8e567160f26cee18f935064c0d48c8f4

SHA1
d504074d847d0378afcfb2c98af9e623b20adc41

SHA256
5b24a4f8c7970a20099343918ac08167648b7ff4ee2220007af6939e0441a273

SHA512
8b18776bd9022a475013d9dbcef9d0e2583fdabf4d3a91e861f5cf5dcbf4b56d44141180ca7635ee936dbb29a815ed11a1c1ae9ff2b2651ea555ffe1c2b67e1f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
5f14f9a40ade3e7d2a8e0369c59a0732

SHA1
e820310c158968c72427139af5970e49ef9132ec

SHA256
47130803080be58f4443943fe87619d73a97dd10ee0b3e5231416039ad7e56e9

SHA512
61126bd320aa37235ffd9321f6f490224f21a612086548cd04d83d46a01ec0420f0761a93d405e4e7cde6d1c096ecbfd3e22cdca4d43367baafec329f761d60d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
c853df48078a81db533ed4fc145176e3

SHA1
2b6b832ccb6826ee057832ed5eca373b5db0bc28

SHA256
5c7a7db993cd91cd4172b446f1e4fd395a2ac2f7f281a52606202291265df233

SHA512
705cc567f13c9b412e4af982cecbbe45f12513d50bd924beb78055f1f3700c6ebc1529b7d34f1117de259f32e9e298b69d2c99dfea13856fadb734f47076313e

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
c54e2a50b6b3d8d76bda5b6f487610a9

SHA1
65290b501d6c6553bad63f4de7107418d8a4e3b8

SHA256
40907ae8b497d51c460a79ce5803f33351baf49bc99d67d42779b3130244c732

SHA512
a8ca4a67c26de795a6979306a904b663076c737f135513814914c9184fe0bf77dca59740ffd95e62f37b1e76b48a008b3a3612f4a30e2b7ae6cc0517b6e8d33e

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
3581ee3cadaaf7e8eabbcd5455fef33e

SHA1
85bda7ef7fd10aa6a1733ea4b215eb3372a247ab

SHA256
179ef351e51b021375acb36edc376f2edb56dd8691f50d6e1f21556ebc6005d0

SHA512
e52130b9ab75b425094056dc39bdadc4be08c037233f4b7f77bc9bdf9d77703f0be3c7ee6108a4687a1ef0cf7dfd4009e26cf07c0a378fd2d0a31c26b6b2549c

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
d82477ecbab323e691654e6d835820aa

SHA1
17452c137cc79bf0e530d479bf4adf9aa0e635cc

SHA256
448e884a993495561ea90994d1654a916e8f425a0be8e2d3088aae7cc3b15bcb

SHA512
7cc198f7c6b4b6bd39d5cc6fe4980d98aaa54e8fdad30c2fdfa9f7060b03c35a63694d41c596cb320fa6ed5f888e5a3535dab00669b54007f5d673e079b3dcc3

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
0aa8efea32fc2633eb4e0c70226759a0

SHA1
39b18f756163c4abb97c034f94b16bb908cb2a28

SHA256
11867100a26b54a2843276614d0a83710f8cf3ae859125aed455da7ece7b3921

SHA512
0f1ba3dacd6708f7639fad140218459bd778062cc93a521c1bbc5cbf426f47aeba448fe70d12db94ee496e5044d6e120ab50e2e9ddd4408a6f1485f0198ee1d7

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
670c4b0882570a4ae70c81ea5492e44b

SHA1
b8796fd3924102d966c19781d830fb4a461c11a5

SHA256
7e5dfaaf264e2ecfd81ad473627083740b5312b19a37b130b302f48c94a63d4d

SHA512
d876c8cb54e242537c2d6ac1495ec19df2a30bb881f9f9089db294ed41e93d4ae5c2b1efd4f2e522e2e47b6c5b8288e4b173d09d239f43b3d9d08613ccb82d2a

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
d2ef5676e9cc952e9ae2d8f3ed8a6de7

SHA1
ecb570df11f60839cf4781c56cb339cf1a4fe501

SHA256
01a36f79e33e74939b744500d0d8aaab014dbeab2f29991fbcb1c40c4a8b178e

SHA512
ceb7d6a876ef3bad5e875288645fdd04f32404cadb13239e49055c2a02dad16162956ac516801d374794244eb6b5af6b2007116d3d85a373f07b5842eaa51bde

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
a88de81f82b66df2311b9fae33ca42ca

SHA1
63c773d93e7b059044272ddbb87dd1351f4d60ec

SHA256
2988e8ee4138a9c920a190be9598764edf98aa01ee236141409cb2a0bdfdbdf0

SHA512
77c5c5fd81cf1dd16926ce6db5686742da53d4561f93f52ec29aefab72e547eaa95d1aa79e6217fb82940c1851820cbd0254a1dd27c621f74c83ca37a2c86bcc

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
b788dc26be8839bf4872de9a4ac27fdd

SHA1
66db2b261694302b9ca4f39a30b481d1219a6a48

SHA256
252f4a7c035c10f5245beeb9815597a9337ae00bd4f36d09614fae7908bbf4e1

SHA512
69ce25b66d7c67590b602fc1761b9e0e7ff4a3c46a6a66a3a24c46f06f9bdacfb1cac94a1075d98a38415097aa3c28968d0a655ad86898a37d2357327f4f99b6

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
b043aaf0c7c8bb590c779808659e6305

SHA1
84008a16697ca3e482152fd629cdbc82e9c0e315

SHA256
22d4d79425fbcc221cf57f6bf2f3be912252ef7d9159200910b0657c505eb7d0

SHA512
1dcb4f4a60ebb38a27db74b67d730157561787eff82f791e03bea6103c6d83ce8a9f83bc6687e6a7a12ffd5601e00afeaf328b6d4aef93faf57cba26e2fbf13a

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
ee4bded4178a41515d23b6396e3bab75

SHA1
a75a1d955c8379794afb6e5d19c9c28ddc135207

SHA256
3f0e4463c85cb1431c56557f6912acf7f9b768ead66ba322f93d39061c44f757

SHA512
c2c9bd736f8fb8644de5eed2193ea1fbaed48a9dc7d0c134377b59084bdcb2e75249d7c86e9d6faffea206678d2fa6c343bf7fba6b6986fceebfe84a061ac3c8

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
23f209f70f752b335d2368f15be2d04d

SHA1
f738fa873e6831ca8d38623fe4662a412f15de07

SHA256
acb8f1d2ab15e5c435f3f244ae8d5d46c1df2f9dcf34dc9145cf3fa3598191fb

SHA512
43bf8d798dcb4b9cac1cdc5cef377a2e9fb910328e586863350c660a17e7a5800145b905b0e00601b316bcecbe65df980d55499ed146b4b04d788c0b6a193fef

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
349c940c4d2f4a3df67cb779678c7190

SHA1
99ccb29348c8c5a278949eb4d02cb9998c0296e5

SHA256
d55b08e6388ad69f2cc8350ff96a0daacaf3709224dcaa69a624d5d7d0ce799d

SHA512
0aeb3cd8426dd3f4003f087f96007b5ea5b3b04af9c2ce9f49c06b3de0759e2725c884f97e75f5d5d45539dfb3df9eebdbc457ff6d6d7a921b51a343ac2cfaf4

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
d0a93abe4af0372483d74ed1f3569307

SHA1
1e7cfda3a1678b40376cd362cacbb257e1a19c76

SHA256
7f61d05b432c97cacc48561847656476c467248d83eed5294b94b57a36f945c7

SHA512
ef1e3191ff5a03e18afb29e5bda1bfe4086f512c55e2cbfb527a21c6f0f3e997e41f3c2b478c5bdb9683023ec366504402b3c44cacd62626f346264c7e72d544

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
a81af3a32d24408f3f21dc740447c152

SHA1
6236ae69b10c6a40ffa45ef5def8ed39f2bbcfdd

SHA256
ce5cc6204b2b995d44761ac7ee6323da4a723305c35a92f8a817d560b5c7f71b

SHA512
88f3ea1adafe0e3b62fe8ae2d5afcc2c8805ac53b7a02ac76c02d3755c2280b76c44b63acd60f009a9710cae71c0a12976ecaa9219ae8b0f270eb1e23cf30fe4

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
af2225a44f3543b4e69b13fa266c61f9

SHA1
e1ffe4f576def24bf57ac977c00377c937cc2187

SHA256
d3bc70f929198078e1d993cea40718f3375afd7e0cc60f2b3198f9df75c819eb

SHA512
5dc486ba1732b9e5d6e8307a2af4f8d16bf5fbee669332858c3ede0be9efd993afa1a77f902645995fdb7c68298191d095eabbaa9f6fd14c62a886b7877642b6

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
65bc5dc8a75be085f09ab3beb4311704

SHA1
7f4e75007435953a45f5ef829921fa601e814acd

SHA256
810ca14ffcf91103fba34de1dc7d3dca1d4c6feb46ef8aeea5f4a4cb3cbf767e

SHA512
b6d6f52d5b7e860ed924a642c317cdc1d2b13fc26690f8c7fce432d6ffbc517f16903fa1ae62f122b1bad5da7d1cf661c26d1694dbd84e03528f46252bc84270

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
5efb9d94984318c224c1b83f2038865e

SHA1
187c2a98f95d5e70af6588dd3f8c691e1088aefc

SHA256
408d95f5f951677658851f6a53955950d551e9740039f2bd1b11219dec50d455

SHA512
dec48b63810570d0e24c7d44fb607aa8683605ca99aea4a3805c9f3ed6f1548995b5072aaa2c49af606d5821a9458ad62a2e5c1fa09c10d78d32fec9712941e0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
790646318aa15f1d25490cfd8699288c

SHA1
8b8def3e1be56f5bf733bb600d6ac6d789e40390

SHA256
f72141bb6bf95378ab01331a898820be9b18b06e4b6b53d120ca4894d5a0687f

SHA512
03140ccb698c3def251a5d2340904931729bcf6ffbc09757632355b22bf535191923fc9da160fe519201c8ddaf742d3954d0e636651473f72423d3a1904e5d37

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
1afa6cee2a74634cd96b0e8ef2424e85

SHA1
2da6754665e15b6eaedcf30b3cd55f7504bed926

SHA256
20eeca23cb752370b48ac0f492903335d36d81921af6295502096c0962950ac8

SHA512
729b99e2912d6ffcea92077eab794cb0fc8d8f2ae3972fe19d3aaf77f138085c24b3062acd42ef3e565a7db6b444985f22e46ccc908c96276ae710b603fe8ca6

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
bc515f9df7bf980f3a3eb5888a1ffc20

SHA1
75cb52c2a773c1fdb871963d8ae17128ced7d35b

SHA256
02c1b9274c2cd65677f4bdfbf79f48ad2f937a41e9a6da2502923435b792dc70

SHA512
f0a9dda3e257afc67610f6cd02b8711f8841135b6f44f46fb9aaa17b1b04bcafbf97895e65ac8c1d25f3579d9f54672a28069000f9ca6d71598b93342f8985bc

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
b167dbbe5c8f49830bfb209f5ded9240

SHA1
b00ddf965f699335defc7e568e02174b1a2579c4

SHA256
c358ee62972e0b2ba20dfea799d4e86e814bde776d803f22b6202cd37cb48007

SHA512
aa068248cfb5e77c6bf5bb7eac81e3713b728f22689be6bb37c50b1667a73667089e572a3b0d4bdf979c2e86fe80149cdeb3213bae62f21cfe7faa1335ca376a

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
1b21dc1a4081fa3fb4fa49553b54b81b

SHA1
2b3a6d0214b1f521ebed4dacfc747184a18a482a

SHA256
c6aecf9ed6b3dcf9615d24a4ff3f5c9ea17cd5bc666ef70580951cab392a8763

SHA512
e2d8b39f4d1aad50648525e4c483b540e09878820fbcdd51599489e2d68e3d2f17804e627c8a26677ac120c6be8c045f6b0518da807119f1e08121662264aaa5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
bc885d7860ac29e3042b3fae68dc44fe

SHA1
4d7cb3fc150361a9823aa7c05fb697f1d06b25ad

SHA256
80d7845b4d1878933aa23c8318710eb589267c5793313a10871f376c01fb37fc

SHA512
22a351a3ccea90ca71764e0957a9b60659b8b8b168c3b1a6eba6cd5157c50dec05c89ee39b15cea96375dc69be3b5c9216640570ba95b4604c3eadce0d73f2ec

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
095e02d016908d085adad696e89abd6b

SHA1
dd1a01481b2fb67a5a84b8e5aa4202a7701caa67

SHA256
4483c78bc39ceb63846e3e83db1a2103b2d6dc3a405757992f216a4b5770a82e

SHA512
d2b01c66f4756669b49d7b2ee1eaccca9264f0c2cfc79c38078cdcb1bffe65c7d02fdbe106eb2f8b778dab43fe7c89fff4518027909a95846c2d2ebe9b02e5bf

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
29e0fefa5544d397de6dc71e5478ba28

SHA1
f1f96c3836e936983a27facac2625b77546b5cbf

SHA256
4b35878c1f318f6141ec64fdf0a74413b0194d855685c854de7c81a8d95bcd42

SHA512
372c8a929f325a78da5d38c21b6034c34268cbfc7d8de2f9f87584cf39a85449cbdb7b4f082ecd13b4aee59d5367665beee4cee1a37629d4d50b112b27328b41

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
0e0e8adef24ef42a386cedd7ed4d08b6

SHA1
71a02773ad38481279c6ce34461f7280926b7db7

SHA256
303e3bff7d05c030a5fed2c11295cadb1162a3c09ea934b65aa8ab75d28523d3

SHA512
d37adc62c0f56e158d995ee3d32add9ab108ec2180b7a60656d8f86dd0c332c5f500fa44a4423a8627d6426d0d9533306f83f5c3d66a75fa9e3af952de1d3ede

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
16ed58ca42d378de733bb6b3b82c7562

SHA1
afd2113114213d6c622afbf89850a095e3f897c8

SHA256
48dd9b2960e6f02c65fd103e01a7c6a86a074977c02cfd9b8006d91e01a6860e

SHA512
dc52da9ac889e50abe11c7f684b2cb099eec634b9b26c56646555ff51e798838e7d93e668ebb4388fbc3440b7a4565cfef89ca6eddec20a19a332c1f67ce4758

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
2ed6da03e21762bddc3b49f58b26e58f

SHA1
cb507ad955560cbede36b0f6b9980954af4442cb

SHA256
a2f2a3b17e4d3b8f3df10dded0cbac660507e27d34b3d59c85a0f6721713b463

SHA512
c637c8a57eb2d852cebc37796f5646bb5ffddcba145b02ae3b8cbdbc3a3886e1aed1b726cfd6dde320fc76a8a7f0960529d651cc5697bce7a319f73efe5e2516

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
948f5ad08e0b5d824ee0b73d9c169b01

SHA1
25dc6f4bf2976398d3c2d91c06682626ca442d5e

SHA256
ca314480d5a5a6a1decafbc2cf49ebbd28e6410f57a9cd0cd2eace7bf639ca15

SHA512
f44afd839a23db52ce2282e288bfe6bebf134de2cb1a09d20af0411807c0a427827fbd76e8ba8518a1f76aaeab689c820b1e061bf9fe851e7fcdb50a9fe8c2ea

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
2ef99f0d4e3d58e56ded1da6ec1abab0

SHA1
8b209378a4fd1198e5674d8c0d7ace7826bc6fc4

SHA256
20f78ee5d07f0908db2dce8f0f2ed507e4cd6d02c13865a620300eba7b01389a

SHA512
4d236c6bc8c25c89ac0b6646735f08d55e447554bc6b2d472b315e1740774ae5485dcb5a5606575b3ba3f1ec1ca725ac7679f23e7cfd57705cfa16c380ce78a6

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
ab5dc8bc899311a426c9cfac76108048

SHA1
a1214e5d58f11dda4582c0dc586ae167af3a4496

SHA256
5ae496474ea4ac43d6bed5327e2833346f0cbf5bf57a7ebe7585ae41127f21ce

SHA512
d1b215935fda6d154989e1eaed02e46643baa44e83fc8942089c28c670a9ffcb0ed619e38943c46e36cccf3a571530b2b31e917bb95bef7b7ea5e6764324e62c

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
c88b67b7d9291f0b439a022d7d1c7587

SHA1
14128f675efaeda4dc89f51da033ab4ce5ee168d

SHA256
2bf620f96b0426b98c174d97839508dc7063459c9abf7ebd16783f65da7ea419

SHA512
eed0ff628c2a6d2938bfd61bf765979b0555456c1cd1fbc9b95b3f1abb637554ee191f8058a3ffa7763c9a0e8e96c5a652263532e17263ad8f535b649eee284a

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
8ccaecf23868ff0cf4a57e8e217d1e41

SHA1
caa565aa59c0ce161de092bf2361f5cc622a650e

SHA256
367fe06ebaa48d7cad32254e89784833255f32962114b727b5e92cf777870353

SHA512
3411c1ea3d425651067f5fbbe2535712e912067aaebbc70c68bb023358189d718737b6f0aa806d96e97c8f1c5383812d40a17b7f0d9c26c36c2da482a693f507

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
f84b34034f2964280c160df64045f0ce

SHA1
fe97890ea9b35d69d3f35ab3cace5baa3a617b41

SHA256
1886304f482b74e13473032479e96859d6ecbfd0a1d9b7d1ba6ebeac16498094

SHA512
c5644a6a3bca94a5dae0bd46ba050555ef611ea95d59c7284584ee504b465ecc7bde015e071877694864a6c21933c3db31099263d92b0b755a6e893d30d07ffc

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
a44914f9a9635323a0b017899125ab34

SHA1
96c753d379b7df0ed3b1e94214d9e0dacb1dd2b8

SHA256
51b614c289449b11934cc5b678b117de48fa20b259b27939b5a8b9b4d8afa928

SHA512
a5862719883883734395e8a7f106a307c496df7d4ababb6ed33762dede1bab511e8dc32bb124baaa73dac3e0b3f2ebab5514e34b0c1472b3b18d23543ee9f147

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
c0aaae5d55147bddc51b37d1d689834c

SHA1
510fdafb7c2c9467b3b022b5935982923e0f2bc2

SHA256
ee8d8cde37241b14dc947138d5d8af6ad731f5e26d9ef007654c2dc42cd5c5af

SHA512
9a8ceb1c39f0738d960fdedf4d1d05c8bc3786278696ac6fdd97a7623ba967cd91c151e137a1e7a9f0c7f05b2da24dccfca482aa1c09cb3f2b44a4d96bc6a2b2

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
ce0e318aef6480966aa2e38451124aab

SHA1
bfe3f9ab82825e391f766045a114bb42d19d618d

SHA256
6320de071398351bea4eb0245605a45293ab792114e8ac2333607eba438dfbd9

SHA512
c95008f339e5233e8e49dff66e5174ffa7b15ac60c453466373a1dea09abd153eba68cc3282d4bbd9b09e452c915396766ab575a4167e2a9b3521babe9aede49

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
ae7be9366b90b9c91c76d33966ef7d21

SHA1
c8814c426902131b5b7eda6b5ec8dae959bd7252

SHA256
0f3e80ab6121f884542e8c6011a8d5462d92bbb83cd035a443b7e7e888c9baea

SHA512
e176208614699bc15d95d3f97ab418cfa4da43fe959cbd78ba875417d5d881909e883ff2befc4f2107f6ab7dae7fc0e7b57f46a21bd526103780cb57bc99adcc

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
288ad5ab72466f5593c71989ff58ed77

SHA1
d7da3b9c5f5f294f15c31482ca462a92fe18f81d

SHA256
a1ca8ed922323f5c09a06850655538ac1bc5d11debe26383ea5f72b5a1c56725

SHA512
623af19cc510049e30b0a830420a134392998599ec5e11a6c3988de132fad2e7a51a2e50ec8257e42016384d612b9994a4e44ae0fa74760e52b4cf76082c34c8

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
98b69fe6d71773ff9bb761e4f14ba2dc

SHA1
2e808afdad6d0b4ae9a7c2c6f8737ab2b35403cc

SHA256
4bc47ddcbd5e1f352c17524bf9beb950a960c44b323659a5cc5d48087cc309ad

SHA512
9c012ce932bbc5e66f1ed0fe7ed3c72d2daf9ebaf567a4bca94d027d61527fed05b9c673db9b4862a0f6e355b99c87f0d661a354615eacdaf709b3de4373b2ec

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
4cf1a770c1f46968c7e1f8ab8793ad5c

SHA1
2b33675b0e549bfbb1530f475fa75fddc12ca915

SHA256
30cfa8f35279475abff798272a71659dbb921fdd9fcaea42205abd9c57ee6458

SHA512
89e237585e8f1f4ffcb2d48717623ba4b1e73a2895a44ae4609e6787f26b8720361f5abc657a9e77271c15ec0f41b350e3b25be2ffb27407e4cbde25a8d040cb

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
d9fa932c58e2f3d60fa92bfa45a4cf0f

SHA1
73e469bb9f004025da122bf12f85038ba772c89b

SHA256
4469f3226d997e928e129d8a76618a83ec892f1eebcf701b3a7bb159e7199b68

SHA512
b5cee58782576e222208e6ed817ec37b9a64fe8dafa6c0641e5e584ab03e34ed8deea28372c86e4cc91469ca0d8cfeab38a2a4c50f15fd431e52a070f9d10534

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
3228cb0feecea0c4240d93f00b1a18fd

SHA1
28b799927b1f946a1e61d2472981f41969b5b5f6

SHA256
074b3caf0f313db15f68768c5554f81aabd33d9545e858c46a65700df62a6ebb

SHA512
d00ca31a6a55b11d266c7714ea65953252724c7391fb3c2ffe2699c27b5464c9bddfcb8be29989f09752be83cf6234735185752e1f8993bad188b351874dba98

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
867caf07ddeb14fc39c9af250b9fbac4

SHA1
5b25c1201830c6c6ed009f16d57216dadf579203

SHA256
33219dc527160ed728cfdba0115545ccbafbb930534b3ed39fa55b5023d46da3

SHA512
d6a7f37fd6b026825b5277101c64afcc3cdf893117722bffdefe019af71c9349b63689cad5a735db405d853c3245aaa20cbcb5e540cd8e510435309b67028881

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
c5ab94dce118aab2bd5c16663bdb8f77

SHA1
14856e110e02ecf9f54c775c3000201e9884bb49

SHA256
a13fd0ffb8fb83a74a20de6ee50b5ef74784086d21fc76e69a10f3508f208c97

SHA512
136e639cdbafa6640d0b8789cb841e54cfe9d293d0dd9aaa4e37358ee59266034f8677e76acf049f74c83c854973e1d87ae89b85a6922df25b9fa085c7a2bfd1

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
ad11fff15a0fc463791b8e1d5aceaba6

SHA1
60269bb5e53b60bc459b5d1deb4c292528f19332

SHA256
980f2c626d4c158c604f1e3aa04078755f65ed719254fc2922adb174ce9f7a8e

SHA512
eab29bb8f03126e6ebe3c32ce98adf5dffc3c316dd436fa79bcc524a4acea63ec99b5b056fa2d0f3d0d9d05030df01808def7405b9e52867a4c915ec35b975f9

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
e9d5c21e0b0dda68741a79f6bad4fe92

SHA1
69a3df0ee4dc80fc21c0c41d6f0b0eb409fe2b2b

SHA256
7621a2b9e13de22eae10267fc2afe329e3ea5dd6a02978fbb34e782dd645250a

SHA512
f1f5a9eb7ce7eed27fc286002b3187b007c5a33d34f943597eece1901c8850d45ff408552af1c6fd1d9e671a79aaf83e0972e3a1258369b6ce3aeceffd09a2b2

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
7ce92a25d33a334cdbaa2786ed91c0d6

SHA1
4de5b44fd01befe5319657ea95ab0492287f5d04

SHA256
f36fdc5e797ac75331d629d87c4927f0fa6167d275a9831dc478b2ca771d9eae

SHA512
4064f200583e02226760fc0532476824f80a5b8f024db612d8411c295edd7e60875b47234fc460492b54bbaa3dda13919419f2d77323bb7841d2225368783b7e

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
564c1f8ad9defea3d795387233e5517a

SHA1
bd12af53eb35de9042cca89960f034b32f4f051c

SHA256
49239e511d2eab068f5b09fffd651dfe82caa218f2f7154bdd57672d3e060157

SHA512
7746b882f7712d9b9eca2d2bbe411076b8b79a3b41d232ace7021844529d6a7cbc23b6d1d9beda4866b068e180e34ed79b4d87d6e19e1d7fd2ddf8d1a02ccbb5

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
fe19267f45c130de468076e16b07e6d4

SHA1
d293835fba2d06d49874f1ce9950c2f3d564bd66

SHA256
0b273931d9eed159e35e503be9ff59e6935cdd2919de65852254d9b5eba34f17

SHA512
1d65e3fff5307656b4d92d476326d1e313c16471eb3548ee587864a58c2beca7ad07abf0d38cbf989d5f009be2413b7e005f40790a6b87e92dda666f2a7c1965

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
361b0a9939bd48c32747aa377767e2c5

SHA1
c9c51e191b1acd75af98699b5d3862d0d378f14d

SHA256
add253b5235df987360a5d4ef8f2cdec18430cc9a23776c92a9a9088e18aed9c

SHA512
e5693a089e7a86b2341ace1ea19d82f7302b5d10c745329690be770971de28b57dcff9ea2dea84b53414aa8652cfeff8691b4bebcbb2259e70f964c4943697b4

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
eebf107327bcb86b9230657834c13a50

SHA1
d6310a323806a8c8e826d21bb0b6a7f6559e2c79

SHA256
a8d4cd0f65acd66c8445e64c5ff5ed5a422160b6298bbbec4d3819ad484d8018

SHA512
1129a6fb5eacf62be7511500fc6c344363f40b43d687f3e06ac011a903ae29748df4fd0b1038bab618fd3c9894e8270b69692e937b03950cf04b83a3f20a4a6f

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
5ab65aed585e66ab35fbc9190f62c2ba

SHA1
42745878e605b3363801701a2a8a88769fd4da2f

SHA256
7e995794b61282b8ca23967338396b436420c98f351c05706e039303b3137255

SHA512
67aede2f04a3037dee4dbd6e01cd688246adde80457c3cdcad5cf27bc3ee85b34497bf67164fc162eb3b5cdd5876cfc4bfa28850a0a504ca6dff1ee464dcc10b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a2af755f33c0e7973835a93a70c80010

SHA1
b729f984e25be4e654d12888a6f40ee1ab2a6f9e

SHA256
05e20bf143966bfbeb6d0a428405be812cdd541f7fe16e2742f22ee54a65b01f

SHA512
02047151bd7da05c08da04ac834501034eb4c24484c4b75896ca7b22d5d220ce072cebb9aefc321c315012785f8f85d6cd474b0dc3cd94e6293cb30f25cf1b81

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
754a4386a170467f473774ce5198b60e

SHA1
f8440a6ecc9d182863b120d6719f402a55b5550f

SHA256
c077b048ddda9bb33e8eada3e4233077c00b1072e493e569fb40f7c4170c20f8

SHA512
ff2808b738fd6e9ed25bc7aa5aa3038375409d55456576928142b7ab892310250eb8a91cd545a78dd683f8dc8ea136657317ec72dbbd1afc3485f945aaac292c

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
6d85c8fab57e514b7afc9ef8962058f9

SHA1
c712c5a92091981a9edd5220e7473dd21528222b

SHA256
ddf67ca600217528c1a519cdf8a5a6f0fe6256152879c90dc4231af41fcbb4cb

SHA512
0f79b5747c23e6583acc196e495bea54501b4673e1155407ff0ed888ecb359416af51419afe4102addb02513b257ad97cab20e758f58a3d4c2dfeba9d2925b4b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
ccad3becc4fc77db63c47682f73ec078

SHA1
10d0d1adb2faff6834b59b5572acb1aa9afa2c9a

SHA256
6eee453ee85a50db494068541265dc9fe31c2223797b178c13a88abf6847ff47

SHA512
25ecfd5cc5a1d730dcb8c6da2a399bc100b62db234998b2ad1dbdd1b2de6a316dc3c802cbcc72fc71e0c2f058f0bfb3c8c187f9bcbe17d4ea8bb9776cb6d3844

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
cb2a28767967cad5fed77866dccb5e29

SHA1
73f858ba08281f3b6418630a4a3f1076bd53a68c

SHA256
6eb14769686fe023eb7d02e4dc6bcfac1f95fa18168c1a2a9450b295f2b9d465

SHA512
cfb135bd3c37c7942fc9f85056b7347aa45f1819edf7ad5e40c88165dbdf5285e1d602bccb934ce222d231f5b95bd2649bb96fde249eb83386b6ba8f44d90393

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
97f59bf8f31ecc93a1c0232c14385b2f

SHA1
a7453561019e3d3ac06dc3b92e08cbff842aa46c

SHA256
52221989247a5ba6c09a734e60293bb774e37757b9cc90975aa11e091e2df40e

SHA512
562e825596d52f5399528ff4b0a78c861afdf9ac448e916ff1b47b4f71daea2bc87dda1db6c6f587be150016313332a61a1fe2a46d40be24fd0738d3274b6aca

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
95848c1ba5e6548fcbdf263c44be3ed2

SHA1
bb355e0ffc0bffd682575e67dcae29465a15b8c4

SHA256
cd88a3124f1532b03acffee55243af0e29f4d41e219fff18f8ff627952e3a6e2

SHA512
11e261a39c443feda88e867c161cc764903ef8bbee06ef5b23141ecf644d39ce05e115374d21111cfc5b167c0a40389e807ee9e582ba94748f39e69fcc7ebb32

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
f8eb461a9c5f3897d58ca40d5202cbac

SHA1
4bd066d423a1275e0083360ab417dac616c4f577

SHA256
022254cb257ac331fcf848e629bdd6e06d9ecef6749aa80a6366c7f904c69463

SHA512
97bd94f4bc4ca6e6bd2bf565c3e87a03ed2aef9de9d228645058187da03c02889e943029100ccb8be085de5f99d1ca3011646ae74e5ad3bb2331cfbc1c7f7d38

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
f659437fc5cdd58a094f9bde6926bfc6

SHA1
98a6a6bcebf0a3e0566959884faaa847f6e138e4

SHA256
ba54957c190672ffd33de4eeb1f0b3808c0a05c9119e5ac9216c10ca0b3882ff

SHA512
0dd49a368d10fb485e167f961b78dec5308b3ad2537ccf1920aca6e6de0a7f9b612e6454ec65c97ed053295b372807b91feeb7d0a346fc9efd8509331a56b4d0

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
ec517f5a97166b677b82dbcbcfd0dd35

SHA1
0bbe40e2e0a080a5e8f12003f0588babf5434fdb

SHA256
69da33f29904bffaa2aa575cc687744fe4d4d16b626ec05d2e9049d18bd9898e

SHA512
a19fcc1a02bee795c698be8a8246e5a8dc1a46199fe52ebb8560049a12dc01e24e41af9c4979fa34f75cb61c91a0db36a9fa6927d5c4b94125d0f39e275f861a

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
bc8793d128f7e6b8c2667c17410b948e

SHA1
5ca280d7b0bc0f9afe26b03a6b12d4123631618f

SHA256
e24bfd1343f893aa56d5bc7b131be0d6baa0656876a5d307ef11da67527db722

SHA512
a7d5085f426ed78a3a4f621714028a03af7a0de0d43bdab4d92aa334159bae30cee33309e7dcf160e2f44f2b5af71a69e5a2a16177562b9f6c73f4b7a623a36d

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
32807cfcd87de8dd668eedfbd58c3364

SHA1
624cffe3305917265a248553a42507dc52d024c1

SHA256
4eebf6de76e1e5b2e5094b2daa15eada311653157aca88bc0ce0b7878e063046

SHA512
fc70cd7819eab7818e18de9d6aa988cffe0388e909384ed7fb5591e5d478461f2e30ecb9f0ae5f10d93c02ba3b761e6848bc250f48298d04773782e3c8ce4b94

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
4394046344fe57a184f4f4f85a1a5eff

SHA1
773a16c65e79eb41e8c67b8679cff61677770c70

SHA256
85cbf23d1b75396163bc12835132750debd3fc7da670c26f19b8cddd7797f05f

SHA512
c5280d7cf189fbc51750f7fe67d5a2cb1c477a4a6801d1bab4581b0aff238acadfc2613f2de73260bc652ba42670296253d9000cd63062b7093593879c8d8e5b

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
3ddbfa9200b7ebe718fa8dcdbba1d35c

SHA1
caeee50142e1acf7f0c745310d9f35fcea2c9e87

SHA256
8f191e5d68458d16490ec934420a74504b1ace3c71e8a0c5b0222621678c2322

SHA512
a9d2ecb0984131e6b29b26eb1cf5a0aa6a33e054f3a25c35bd3a81a1b8c25484e4f2801b71b3084611c082b4fcfcd76904fa56906437fa2198bafc7f78b65610

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
56d71bb23074263425fdba2a869ddffc

SHA1
c0cc0b8cbdf3a97b2f6aabb2ffad01742dea8512

SHA256
e869330a0ca863f4577ac9739fa7f1e5d3ba9590d4b6fc70bc90b558cfbb2613

SHA512
ce31fb279f1f23764a782d1fcb416b7cb6a19fc5e29788a78afd78c67297060903b5765f2f9d1d4be3f9be7c4ed1ccf909e29994fc14055274942d8f699370da

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
da77bbf54c9f88897867e3f56ece9ed9

SHA1
773f1d92864e179522b882235cc32fa150cdd322

SHA256
94aa56001dd41939f607f339e5710dcfc42961e68ec9759318aed28b1d9057f5

SHA512
aec0df1bbc0dd2ba71843bcde695b4b40ee1d302f574f70a18aad42512d1c23236cb6668055a878409803be53e5cf0016c71e95821f258f8fbdf281ba4ca137a

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
a99045164d43e3c52bd371cd4d4e821f

SHA1
57dd9fce429ca8cf0d8ecedb66023d56c1952f33

SHA256
a8fa4392f8406fdbb5c7af07fd665e20fa1b80eade92d1144076cd65a47f328a

SHA512
597093de3fe998543f24d93df31f3b2cf7dc0d483d2c63591d70d634ff5c92f5114185c30a5970f8e7c04679e4f2bbaab1221e21ec451ae376e0fe1bba7662d7

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
5ee9ab2e1c8f712d94decfc98bf28a17

SHA1
38944456c6b036d027a0e69bda055cab4cd811eb

SHA256
5adaa08e8d130aa3bdf4f5581513827532947797e392119ef709c8a7358998b6

SHA512
b5881c6d1417e4353689202e8a2bc214ed57a4388638f1abb5563f862370693e912df31d544015adc2888f642e7560d20c9a228a5d5731ef3fad843dfe8cc23f

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
2e6e8c6875beb38787e7babd82ddc929

SHA1
492507b126c9ed92c9aa4e1e7b9f214a9b22db5a

SHA256
326418f11c63ddb04b5572f460d163beaad3676f51294af9c3bcaebcfd6c7eb3

SHA512
739a71909fee250f932798f37db082c6161a8a4070c9ae88fbd6748f2a43ae9b76360d41144941240426b466f488eca6f439f18bd95ffc4fb6c3b4b76bcc83ff

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
dbbcd9dd4be43b89fda2ea190301773e

SHA1
c227a807d8fab935577785b8ee57cfbb444bb86f

SHA256
a48fa815245fd86e90defd1daa1df783b71b3431667a5929be6bc2c40542c2eb

SHA512
5678ce17e70a4e7cfac8fb068450c9bacac44693c973a4e92156a07284e64377750c0bd2aa9382b754bb546c919cc8e3f4c08a8fe7f356e1129159bf8ff5654f

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
473d4fffe3c7609aa43a3bc90d84e352

SHA1
43a35d80da8e04ecc456f27af0a3ac5128a917bc

SHA256
c7c3a57341f40870b89d10058fd32fddf1fd00fbf219f72f19015af1244369cb

SHA512
950e4e2cc6e09182e18760a3454f8a62feb448b6302d1a00dba743816c5fd08bec70f11d498f7ae3c6de84ddc6af4403f74c55646c290d1a62f4224a60d448b8

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
f5870f004629061f4aa095a94f617fc8

SHA1
12cf4983ab39e8a492c2261ef66a6dfc04514889

SHA256
7e2c557a0c38b99ecf862e9c033480c234c4afef88f792d419473ece4f770268

SHA512
6fa567a0bb3bafd9f54db3cdf5252a90fc9e7589827e532fc8609f881af9b037e1f22b5f031c9cd231648031d617abf588cf3498af53d3c32a4809ae8f4b7f63

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
e842a6471e597e615697f5aa6a1aa94f

SHA1
46d20af3b532ed7b184f6cf8c6f3c8ec0b663d80

SHA256
55643656f2608178873a421cebeb2a38b7df60fbff57cfeae183a09588fa6fd5

SHA512
58ea71f1a5d9cfe0a8028f85e343b548c49d9f7a5813323eeda791e4912115bd559e2d03e275acabad6581902e3e95ff9b13fc07cfbe4d56cf4e80381f8ee5ca

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
f0f4cb016a1773f2e8396ccf7ac3f5c6

SHA1
6acb3edcb5d248554a42c75924a6f3dfd823537d

SHA256
a5d13c84e1d3c122337d3ec32bcf9fa6c4db3fb44b13f125b7eb248125cd40a7

SHA512
1fffdd554aac445131a07bf0fc4e163e96fd35e828c76196545f61d2cf77d7c0455beef306bb268c4e8d51dac6f0970b27ae240e901aef4f633e9d2636b116a8

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
92bc67dc9bfc599d30d75475b1de4e54

SHA1
e1a01b91cf009546fe16d8cfecdf6af230a6d404

SHA256
d31e69b0de81a134c8fdc3b1d857ee26effefcfefcdf429a57e993494f556e25

SHA512
e9817a6af1d14db47913f1a06f31077ae6ea67abf026961848ec66669f1412cb0a9ac1084e2b5626b178313c744a986729fa6ac4a954c0e1e9807ff821bb7493

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
d840c790970cf2babd5ee7ee577c9ab5

SHA1
68013748162b3011a92afb938c7404ab470906ee

SHA256
d62e66e64dee4b983e745019a53eec5e6dce9f78b56ec2f108a1ffa31aeada10

SHA512
15dba2903f0f6936f2cba3a8c24cfd8030aad6ca14ad01758a07e5bc91ce39f5f632a6eb7f930a4bfe1f6b2058ef569845c6b9bd9e96fc66c6d105aa6c19afae

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
9f54762d923bcb1484ec230a69005af5

SHA1
3e810149d85e921c7edf91a9bc67517b7b0b5513

SHA256
73f104f5f857666e8e5a5c300d49031e53909b2e772c0d230d02df341e7d418a

SHA512
55f70d7352a08c4b9d842b0497b1a44c25623bfea5eeabf206cca7b7a68b2e8f748998d496f58af74331dd3c88da622115bb55c606c2efc258d4dc0d8fe93191

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
d259c0f78453a04da50fbd9bcc5a0e56

SHA1
f03b04ead50fb3cac6e667082ed84879794ac515

SHA256
8df35678221386971455ce007a9b0931afab17f792f801386ec5d21215f4bb2a

SHA512
fad5d616f44f1e3eae3daffa2fd06aff27d5601079422fe1153d68f602614d83eb3d7dd95e268569ef8390aaf94b944d02aff9b9374a9ae70706191a5b601dab

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
930f852f3cdc9606e3381bfc0767d667

SHA1
0f4e4321366251536cf440f60bb30d1353d8ead9

SHA256
b7b77c7e802f2207bbaea541a55d3d68772a97519501c50b3709b2390c3ae375

SHA512
2b1fdaad866d571580fe0c6c4772cf4763e4e436216baa5ac0a91f8b727d2bd2fed447685c840cc84ecf5ef5a04dc4249247a25249d1f5c0ad66859e35e7ce23

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
9b929eeeea435cda309002d288de5236

SHA1
d622f5ee193f184f3960a84028a56f7b02cb7273

SHA256
30a5fb9da0177ca0cac6c3bf46dde9bf1fc394a5e1c891a67f5b3e324a0056e6

SHA512
94863c2f9cb8a1c2a1e5fd3b870dca48864e3281feabe6acf82a8355a30bb52bb4c0546a178c8c7a103a027adcf50f0146277c12ae3dd660243000d99711abc6

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
51619a7b5b42d8b9c01026af583cc374

SHA1
797fedd26552ed0773cf31892804132d92baf66d

SHA256
b53fef713d54dc836d02406e7290da3293a63040906fa013bcbb0f44651dfdee

SHA512
6ec7c9cd7627253b9464739ffbd008b2fe3336d8e4c185059609e57ba52df22da03a61a1c105ef9dc022b6bb6efba640b0743b4a96c8965f4593306d781321a8

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
b69590f7e2e54c1e8803e8ddfd3a1ec9

SHA1
9e65c78e8b4360f90d6bd038b6ba3eb41ea16e36

SHA256
2e3dc9df57179fe70cb11785dd31457d51321209d42a5ab44929121ec720e57e

SHA512
8e2acfb4c44c626f60ceb55f297c4a6bb8e2e54d2ce9cbcab4bba63325d391ccb16fcea02f3a146116ee824286aeaccc9942c250b1f6118f6ca51d3e6adcc520

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
1eb27b00e9356cb2cdefd809fca261ff

SHA1
29b3bca42b6c9ea19e5e48da544e8f2019213847

SHA256
162d6f523dd2e660856ad08bc3806f1ab1b55bd7920172aca59a930bdafdd31c

SHA512
858cbfba4971e37b70836a308780f261e315c11f992562dc42024ae814a536242b0aa5124745227d963249c313ce7d83fd2568da1a82fdadbf6693d447b9de94

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
6b21ff3d923640da287f6598409ee618

SHA1
bdef005068bdac9d7c7f9984d15cd628644da26a

SHA256
68eced6b818e53015f4be21f25e57cc992597fc6db8d719939103fb812b7ad5c

SHA512
70c6fc17bb99af8773888860716feda2dce8a368fb3a438c8984dd3e5bb934faa5d7a3bda2c936f0db61f08b3033a4c6f5bd2b66474366df686be88750f7275a

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
130944de95ba5e64ccbca50231daf135

SHA1
7db4e2c01db6f11489cd947d644af5e20258560d

SHA256
491bdd97817b3674028f8b4cd2d7b3463ed98067c278d04367f079598a6a616b

SHA512
8642737a1511bde16a81624cd956ce231aec3f5b7ce46ed4ab5061042293a136908d3b81a17215d803655679f726a9b3b398ca271c50ee2aa2be2c20fe09b2bb

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
55b4c9e95ef26b3e6f5161894a319434

SHA1
6fe488342be8e2487ebc71f7c7ea77ca7eef0efa

SHA256
1b8894f33a663c8a0d40218a330ef6f190244557f48131df8928b60f121a50d7

SHA512
35272673604158b8086f953dc8d67a0397a38b0a7faf8d999cc4bb232cdf28dbd0361ac9c6bc6f4a6b61f5e29e757a9be03c21121c6a9b33de0d1c7f67bcb41d

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
00d071054e323a9befd48b1954b7eb2c

SHA1
1a174467a724947ec77fc2a6b47b27677db3f707

SHA256
63b118656f022ddc21baeeef82139a19e2d90251bc893a7f41e553526c3ed83e

SHA512
ba84a5bf49cd13aad0354216aa1942795baf304c7041f7e3a78dc1fbfb80f445cca09b293f4b48df91988722d6b1f20afbe29d79e795310ac37a4a5782b29085

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
deab4b2e65c5ea6b091f9e8d5729e9f7

SHA1
5ea8f202009c7dfedfbb05ba23febfb7926ee2bb

SHA256
55ec743a22653230cd19d9ca02c7ca7a9278082d8573aeb46f87abed3aa6de4c

SHA512
800ff5b064558b2d9d3372c8a40c10f72775cd3249a9bb5c8af0b745eb26f2a3ae5d2256880b131b83cf20e0891bafdfd6d02f40b27b4b74b257bc4326360dae

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
8fb1fca6abc90e72b1068eb6c9f64c86

SHA1
f6d028942fb51f66a064247904c80097ff3b1368

SHA256
b6891b96cc5bd86b7ce4fabfa95c00e1b139be776198b7f430b58c39fd3b37d9

SHA512
27b196aeb138b523892c5e9fb1df6a00763c3c140a97aa8d1fc99e95bfcfb099e3ad20e6ddfb5e975880b8db06afbad181b289f967555c3892ac48a0cbf3d0d8

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
edd70f7a0b86d4abb0500a4919ed3299

SHA1
756f543603b117b70a22f4a72d503db41de522f5

SHA256
debae830d31e636ae6490ef363e7c3c4ef6371a0f85ea779a2dfadf40815977a

SHA512
a612230fec772ad85a74a8770a9284a52a4ffe610d756746e7439c58550ffc59faebf9d73ce5e27f0c8e22469fd01a902871c45f9ba9d2df4a96cb1e7eab3e39

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
4d9df8e58170899e3c248899ce57b4b0

SHA1
82187df96ffe85705f37c4eb0c634fe95cb7e082

SHA256
9ceaab5eabfd208b00644b3888fee01ebe057bfae2c955daeb1d067cdac4b8a0

SHA512
a69237398a54bd20c9239f651c1a27b29e69384a44301c37c29bba772462aaf726fcc45192982be0cdac037c903aa0a92c80719984ffc2cf1923fb41ef0b26e3

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
8a011e751ed0ef2fbaa4f2acd6410449

SHA1
57584de736bc770f1eaf3cb3fe9a3f1e8f135932

SHA256
03fa6010409e8ba5e1de38e3b83d0e6125410707c122729d95b3568d7ebb36f7

SHA512
298f3beb1ff7566ed17f4213586348a05bdc352bcdb41233416bb3af8e091a1360ba62b441eebb2492a0a93f6abfed292ebfbf7ce20c875c6afbf7ff574b8fa7

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
5beb117a9c4cfd994c12c59fbf9875e5

SHA1
9d1f91d2ffe8637af711c436e35c5c1c83f0140b

SHA256
19421bd1a9f79b55921e3d13eb5139f2e9ee6f1a5d3a839f7b066e660f03cbbd

SHA512
64eece805182ac9def30de2bbb754a45c1f5322274de2ed396e68745b5d6942c572d2316eb55d87f782d2b7186f40280c26c2fad0e74ba62bd26c153d9fb1d51

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
6d3dcdffe20c058af81709113a594d6c

SHA1
14c22895b2d4cfe95a5778cd327d27c574d6a0ac

SHA256
08be24dba45ce791cd4d50f1ca14329edee37b2c452d6ff8d06b5c04acc55f41

SHA512
c7b412418a95e97488f2d02459e81c18e73f163878695fb839182253af03ad8b101f589d32f951eb6c059db3044e66d5838b5b838a0e77b729c833fdb03c5537

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
47e327a3e00239243eea460c616f3c19

SHA1
af7c10826d5904dc58a0c40d7c792568e193662e

SHA256
04b9bfee173112720e85f36b5dd80b83612afca6fd65bee1de5cef3641bf6b6d

SHA512
2d1b5fc14222b5a079837cbee6b0587dca3aa60aaf905e0e9f8e658763e9c950850d75b117323ade05b6ee0c41f882725d25b7f2420a020cb97b1c811f9c9a83

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
04b62a66b03dd9eb6d165fbd50ada9fd

SHA1
0e090489acc6e6d054d3a2762fd078353aca29a8

SHA256
ec8722c8e29402a200b061f92e42039be908d7445dd8c01b8da98a5928aaf830

SHA512
79788e1a04b798fd63a60ca1c03284c02c380987a274cf01ef554bf644280668be303bcb79b3e7d44642d8e3bbf6b6c434d1f2e81751328c77b9567b081cc2cc

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
f2995ab698e35dc8f289ef4ca3fa62dd

SHA1
51759d814b3b2ab22c600ce64f87e756f204caed

SHA256
7e90e277a5e7ed894ca8326131e9a9fa5a5b9357043fda0700bbfe317ba5b2e1

SHA512
9ecba7dfd420b5d3b9188e3c39eabcac63771a116de18ef8393ddcb9ccbefaee589f2a8c4267f22e2b3ab0993374c248281d3e5877aa52643205ffb54f6c17fb

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
91fa1053207971e936e6bbad0c7e8c27

SHA1
61a6300d327ae6eb276c6143f65a58c8f269a67e

SHA256
f26d98cae64be561f1260f5cd1c2974a6dce9ffca484461b985ae1107198848d

SHA512
b2794993d695cb6950eaa65eecd44dfd4f8ee297dfbd0ef26532fa9f60639c466bacd18e557798e3e28535f4812f1e928bd4862d6bc39a3f014465836d88b832

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
fd74142d50c1611a39320e2e84bd879e

SHA1
3d242e1c5a0dc449f444b1815d24a522929e2879

SHA256
64f8cf1e2af5c9f28a25f7be670b6d0b99d968eae2a7e8dd419708186bbc9d03

SHA512
45b3c84877a19dea250c35dbcc54ef87ed696e74d402312723f83f746385f5bd191eb099ce6de7046943e4dc120f3afc41bdc906809c09ce107164e202049e92

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
cc00ddf502b55b40b9df7cc5fd15a81d

SHA1
98a51b799076c874ff0ef81d32773e84917a51d7

SHA256
997cb0058bce4a8560846b48c5cacb9f2236aa23db86e94edd7ce7379dab1b56

SHA512
5829ebda112ddb90505733ae24351f8c1ffda97c4a9ca1048d715339f9cb79d56512aad543fbff0afa7d904c04600448e3078ba0843fa6318741f8e23fa0758c

Download Submit