0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Resubmissions

02-12-2024 04:58

241202-flyd5s1jex 10

15-11-2024 02:01

241115-cfxc4swlhv 10

Analysis

max time kernel
118s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15-11-2024 02:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3472CB2D1AB89AAB.exe
Size

137KB
MD5

cdb5b9402d4db31b15abd8dd2eb1947d
SHA1

912c9ac3addd53685b3409c46dcb73946a74ecd3
SHA256

ba6a4d65b25c86faa7179d1aa3db48c2fc445e393d1b8c0035dbd81d27b93d54
SHA512

50280c0dc4e6d2709d2f18ff77134e029d1a123a5fcb173fab5fc4cd164b64d5b168b6286f39f6d5be7b0dcd140550692963d4fd08577a79682a833d6a6f8619
SSDEEP

3072:PLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hj2bIoKb:PstYrEMw6Bxk5zOFNtgJOCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 3472CB2D1AB89AAB

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11260) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\Control Panel\International\Geo\Nation	3472CB2D1AB89AAB.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	3472CB2D1AB89AAB.exe
File opened (read-only)	\??\D:	3472CB2D1AB89AAB.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-ppd.xrm-ms	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_Subscription-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.scale-200.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\ENU\DefaultID.pdf.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\help.svg.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_~_8wekyb3d8bbwe\AppxSignature.p7x	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Runtime.Serialization.Formatters.dll	3472CB2D1AB89AAB.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Configuration.ConfigurationManager.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNotebookMedTile.scale-125.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Osf.dll	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\sl-sl\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jre-1.8\Welcome.html	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\et-EE\View3d\3DViewerProductDescription-universal.xml	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\SyncFusion.Grid.Grouping.Windows.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\vscroll-thumb.png	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\hu-hu\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\MixedRealityPortalAppList.targetsize-96_altform-lightunplated.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-256_altform-unplated_contrast-white_devicefamily-colorfulunplated.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\System.Xaml.resources.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Fonts\private\GOTHIC.TTF.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\da-dk\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\nl-nl\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pt-br\AppStore_icon.svg.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\az_get.svg.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\lib\sa-jdi.jar	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedSplash.scale-100_contrast-black.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-180.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Snippets\ShouldNotBe.snippets.ps1xml	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_history_18.svg.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\sample-thumb.png.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File created	C:\Program Files\Common Files\System\fr-FR\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-64_altform-unplated_contrast-black.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_COL.HXC.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\WindowsBase.resources.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\LTR\contrast-white\LargeTile.scale-100.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\share_icons.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Private.CoreLib.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\ssv.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\jopt-simple.md.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\AppPackageSplashScreen.scale-125_contrast-black.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\rename.svg	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Windows Media Player\it-IT\wmpnscfg.exe.mui	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-24_altform-lightunplated.png	3472CB2D1AB89AAB.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Work\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\css\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\biobio ransmoware.txt	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Common Files\System\Ole DB\msdaps.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\wsdetect.dll.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial2-ppd.xrm-ms	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL096.XML.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Windows Media Player\de-DE\mpvis.dll.mui	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\ThankYou\GenericEnglish-3.jpg	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTrial-ul-oob.xrm-ms.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\GenericMailSmallTile.scale-125.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\de-de\ui-strings.js.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptySearch.scale-150.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN044.XML.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarSplashLogo.scale-100.png	3472CB2D1AB89AAB.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\bg_patterns_header.png.EMAIL=[[email protected]]ID=[3472CB2D1AB89AAB].biobio	3472CB2D1AB89AAB.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3472CB2D1AB89AAB.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
4684	vssadmin.exe
4396	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe
3672	3472CB2D1AB89AAB.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	3672	3472CB2D1AB89AAB.exe
Token: SeRestorePrivilege	3672	3472CB2D1AB89AAB.exe
Token: SeBackupPrivilege	3672	3472CB2D1AB89AAB.exe
Token: SeTakeOwnershipPrivilege	3672	3472CB2D1AB89AAB.exe
Token: SeAuditPrivilege	3672	3472CB2D1AB89AAB.exe
Token: SeSecurityPrivilege	3672	3472CB2D1AB89AAB.exe
Token: SeIncBasePriorityPrivilege	3672	3472CB2D1AB89AAB.exe
Token: SeBackupPrivilege	2620	vssvc.exe
Token: SeRestorePrivilege	2620	vssvc.exe
Token: SeAuditPrivilege	2620	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2648	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3672 wrote to memory of 3080	3672	3472CB2D1AB89AAB.exe	84
PID 3672 wrote to memory of 3080	3672	3472CB2D1AB89AAB.exe	84
PID 3080 wrote to memory of 4684	3080	cmd.exe	86
PID 3080 wrote to memory of 4684	3080	cmd.exe	86
PID 3672 wrote to memory of 288	3672	3472CB2D1AB89AAB.exe	115
PID 3672 wrote to memory of 288	3672	3472CB2D1AB89AAB.exe	115
PID 288 wrote to memory of 4396	288	cmd.exe	117
PID 288 wrote to memory of 4396	288	cmd.exe	117

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\3472CB2D1AB89AAB.exe
"C:\Users\Admin\AppData\Local\Temp\3472CB2D1AB89AAB.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3672
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3080
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:4684
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:288
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:4396

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2620

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:1320

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:3776

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2648

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
df6be453831dea59de7647b20483ec45

SHA1
0c6f8b613fb52642b8db4613dfe937d6d6bc432d

SHA256
d108fe855b5460bbfa47a4bac9668266d31df67713407ed18fb0d67371575660

SHA512
46620782508d0d007baea7b0f44ec53309aa7e2f622e744ebfb31f5f7f446cc030b2104ea5b8211e29c752974bc1d3ab978c17e69552962748d60c90d6385439

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
74277d5d729a09e25bd9ebdce5692c39

SHA1
c562ede60f1a38ecb9ca22f11d21fa67173d9f22

SHA256
c58fa9287c47ff8b64ed9fc65cd04ec6b820cc5094ccc49c84f0997ee730af47

SHA512
bbab0ea036218b0dac6bdaff28a37cb9b03ecbe3cc7286da85b1d7e8dbf81e03282784e2c453cb00ea10995d3f7eb35d7f8dd487535221efe72ab665203f806f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
1d4069df63a6866517cc91a3397311e7

SHA1
038ee88c1d072e78f25031e2c72778a7a95c3095

SHA256
ddaed9103fdb91c99ef1d8df51f14f9015ae7586c029fb137094217cbfbd5362

SHA512
5abf5bdfc80e57f267d5d9823620bf9409f7901aac12bd07c1071b78a5e6cca919261f45aee530d3a07f65318f8b79efe37b1485b1e26a126cf443594d8f18c9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
87358ab1268f9a415d9154cbc086287b

SHA1
d5ec2779c3625e538e98cfb6bd0cbc164276dab2

SHA256
b35c673584591ad952b137431cc576827f9da1e5f79e3de013cb0689793d2d5b

SHA512
95477b41f21f9e8e3f02caa6fb8f829aeb5bca370aa70e1112ac5057dda91e3d0880391747a3a226959ec727d71eb1e59bc519da7876844a231054cde089c4dc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
6c073696bc1e0b959d94f3ff10b69656

SHA1
9b15612221399b3851d392bbefff5afb46699045

SHA256
6cd40d330663bbd5065d65b649da5b33c463605022b00e24b849108db7775e85

SHA512
f3748657047f2f9031e9b0b84771cac84211983bfce23f61c749c876a31397848f80404ce2eb10334bc6eced30d7e1e93cf31d09786e52b62008d545220c1100

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
2f9b4c38023ad63150609a1312ce56fe

SHA1
07d666e60fe8080dd1c3d5101285675fe6c779f5

SHA256
32c172c55c857bf4d693c9f23b9dd13995cd1909b094935708a0a50ea47ea030

SHA512
a2c1f51a26951d334e17070847f7cbcfd55ee4c166efb69e3b758ec9d54121e25fb41c75305af5e636e1c8a79f4d6075afa0c637220412cd3e0cf1a6a8c78a06

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
4242170ef2844c3a21d27b967bc7af90

SHA1
0e482608f67fb4769a117464b059912cc9d5d736

SHA256
3fc0f07d5da48a4bb0180b245d9933e14ddf7b707e8fbe8702dcd378260f67c5

SHA512
7650d806a9b265fd9998780f19361dd4df57492f97623ae982feaaa1a542ae9da666ea587c8d0fc688280eb0024009228df8fdff200724db5b54961f8813646d

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
6fafe426d35e46bfca989d9b1429c5ac

SHA1
4c720f6368579f9bd5f196ba4af6c03981eae614

SHA256
f0bae28d9d4b2c3a13cfec34cccccca6d5569e8a68a66f1aa4249e1e17f7a4b1

SHA512
cd489d6e11418697b1a6ddcaff418998481458d51a00157e957d5951229c493deee26e1ecd172ef73e4563a512889c8ccd4ae98ed0235016ae6b1a6a9660e971

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
d999ce33219c1589474f80383aa49de8

SHA1
5fab88dc13a05cfe638cfd9d2edff2112bb98b33

SHA256
49c8dae42f6dd69bb4f0922f1e9479f365eb8f948d4febdd75c4b3372b736fd8

SHA512
ba912b9f273e3870ffc16f63f55db578ecd0be773d660ceb0f7446f46ff94275811e3b47ec138015106c677f2e1d10a54ed3b516ae40bd3a27f5592438cc0a38

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
e698fb215baec3f69ed576f17e2bf2ad

SHA1
315668f73bb4eec7b0b03a425f15f02806d82cee

SHA256
9f597f292adf37ec1591731f93aec883a00393170208148c52737319607dea40

SHA512
cc65a68688ff1e78bddcb5234840fd29bc87f767051378006db1a3e4bc0d452289149b568732f81b2fa5d089f568678df2a7d08f385b46667c415d9cdb6d26a8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
225a1c83d5da02a8a1bd81690c3a75b1

SHA1
1d59704d2b657bc5677b0000d22cffb3809af194

SHA256
2415a6c4a5621b237e8ce398c590796c5ab1152d2eb8b459dda1333cf3a63e07

SHA512
3409c096b886c0f557c0f9059be05c436be70756218ee5bbdee3e2ca12de8ee4eb8c4d57d44f1d5c2f2e9c339371481d31ffc0550dfee836f897354e42ed3c29

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
d1e8468c314b21f6f2a08f47a6b49191

SHA1
95c331c3f106956abd78514aced3c81dfe9c7771

SHA256
c1f94e2ddf2eba4e5febf829572c5c1b69c334e0f83500df2372cb4a5ed71930

SHA512
cf38cfddc8b186dd28180a6c3a80bec19ecbd2194458dacbb9e3c22f5ccc823264eca6f320d72d53b81c26cd6e7adaada297302790f29fc77a4772d67e729a88

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
436d98c4c2b39af129e5ac1a860326ea

SHA1
08a96b059965a0fc05a68828154852115c061c2a

SHA256
73f58660bfd3ff5ef71626095245dc45773202960a92e255f42a9f9851e301cd

SHA512
1558e30b688a5073af55f9ee89f614db4cd27bf6cae18c498b37810a49b1b8e866075804d366fa68eebe4a1fdd30f07310af9e5c1c17f735610f5c9188c2f889

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
f1174308aac3171d425471f0ca42556a

SHA1
1b98c94e24c4d34354ce1bbe11e0103c31709c9d

SHA256
acb86c5b362eb5bac040131d111d521af971b1badb911e6b60f3269390e4f3fb

SHA512
181a7e8d0b66835409a75fe5d2aab8275d597188b38ce7dd1591a9010c8bdb4486c1bc8cbe23651b190a47c08eca129a34891882c2597db6ba48580aeae5c4fc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
9283b579df75f12180fec086961a2ad7

SHA1
2dc2d87185665e6eb667c5e3287cb2bf0ee17b68

SHA256
3ff7c68d265811c6fe59b2f0e45a7353d68a65d1a7a4da422fbbf1d90b391c9a

SHA512
88930d05a26b8c0f4c064177cdc8b612dbe7c048f3e724baa77c9f8b942d53e665dbd2f4ebac5628c0495e4a7ba50e53496dc031b2d30235ee72d108a71181d9

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
559220b57ca33764a75d4c8cc70232ae

SHA1
696981ef4e8885ae687111e230fddf67754e4805

SHA256
5864eb7aa8edcb57ec4a8b96f611e2cf3434c572ac685ab13811df4fd57fcfe4

SHA512
d781c9c94346efa8f8f3866f41dbbeed368d9f3c73ab513856b8cba9a3e1e5e3b487224cbe8101c540c4399e221713f301f17e0c82adf91d61cd8b56d446d567

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
7351c2baa12ecb4999662d4403bb233e

SHA1
abeca5dbe656696387a0453b56f5e2cf23570ccb

SHA256
0fe93f09150073ee38d8bc3b9debfb26cfdaadd0ef8624e8610d489efc36a3cf

SHA512
2fe23a2994d84a66a952be66568cc3cfeeaccb5471f601581c5a013844088ed20afaab1e8fe5695e8b955fcfc222016ede11319b3d0930e8afc7597ffb918e99

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
085ac11e2fbad0961d23ab727baadfce

SHA1
96cec37ad1aa1fab1a90cef1857ce7c011b67333

SHA256
6c9dd34d76dcbf289cd38fa4c0485a2e9ff91e70ff8643aeaa8f15bee446395d

SHA512
52b1f5c527c940a6d2c90479d5ca162a95734394fede700dcd0c129ce35d03d48013b8577af7195197342342bce7dc39437ef4059306f2878f5f24411057142f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
bc9d16fe04ad93c742a23e7f3dc1c665

SHA1
295c22884969f413e272e2a41e5bc766c704e353

SHA256
b11b1df05e31ebf5904a7db880970e4a74cd82a1e792cd59b9d5b23993492911

SHA512
c16e35e48388a8f550f492ef1709fcfce00fbf4da87127c3691fdadd216941fc7062495fae1517858bc2a34fb87d1882c72b7211f4d278d184451fd79ba9eda4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
2ecbc8a6a2bdd2f19db7a9ab8cd80a58

SHA1
c78ff9bbb2184acb84915f8f76d9df9ccb043f3b

SHA256
f0e3826cbcbfabef04ecf14b72ef69adf480ac8856eec58d2a07c11630cadfd9

SHA512
889d9cb5c78d063fb6e131ab26217b85df5fae9c142d40be35599dc13658f3c77fd0546fab9efc8f57068c28008b5de529a4d7d6c1854e89bfe6b3776b7fb518

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
e98b482f20d46f83540f7b9760e94b08

SHA1
7e14f3c7302ecfb5a6ba5585c95c34f2d6394a40

SHA256
de1326b5ec8450e0fa6681d8f69997c29b7f1e315bab8c1b6280fa517f2fcb6c

SHA512
e62b5abc438d4042b877337296b06b211b1f148d8868aa2b3b827a994b37eb4a0ef9c773672a328ee7f61d7a76b3b682c1f843d48768a5eecde9927cd33094d8

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
1938d22d11b72193d19337a17ac69e89

SHA1
aa779ef5267b4536211811f6c6374e08d9c0a550

SHA256
de929636638b47df01ee62be09defaa5f43d8f467b4e2a8baafc92afeff59e99

SHA512
4f2b9744f9190a784c7d0e9443885347922c6fed9e106b4c2414db4655b205f492421d693cc90966634358758a80a2cbc35f1a71779bcac4199a1c89aecce5c2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
4a7e6929cb40dc47a516de26f515536f

SHA1
6684bfc6e56a32fd3296fce05c877102a6204aea

SHA256
4c917112f8362d58d70f8a428b33dc6c8326c69fcaab8b729830b57fc06cd2a1

SHA512
dd9dec91c651c416ae8271663f672b9c122363a491c744432d13a83e6f36622f83ba00489ae85d15e8d11d723200b59571cd75f358a88d058fe3f6d666e88596

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
a2e24ee722d71e932fd931705aeb8fe3

SHA1
2c220aff72904c70d1893b988290318355c0ef89

SHA256
fd34781154d9882a839ef70a23fed02bb63dffe35ce58de539d8d149300c0828

SHA512
2e850936a976e7671fc207d23396e71d038dedb51246ec2e1a7539f815ee04b442672fc4d359c41610711093ff081781e6fa25c1302c405ee8e3dee5a8703451

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
a0ec775c0902f60b1e5d931a70a9fcdb

SHA1
5ef137e4ebae144507b94f9a1511cff7117f9023

SHA256
909ca05e9f51150dd9d5032bc5030bf4c847166b828126d1c7a5fa6ee3e54663

SHA512
12507c07b8abfa93584498a96e9687d85974c40ad6d08c43048296f559302155dde0c35fc6588e4172519a12e437e7781d491267cf3173eb5395c65f3b3dafdf

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
dd9d6318d9476e3de92d0c79d6d7a8a3

SHA1
c23fb42edf3e63363010c22bb8f3ede8048eb507

SHA256
66369d6a2c5d0eb1f96996c05dcee195f90566b02dc7649c2e812abe9194b7e8

SHA512
9ad968b31772e03dd89e35b60cce9afe92ad8ccddf0fec1aafdb44b90034eb4746084698c178a0727ab88705bbd84c473db10312b314822a5463ccca6de983f2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
74212725af17d97ec55bfacb2326b557

SHA1
b6390d09f10a8d52fbb20356bd7b6ea666d5cbfe

SHA256
0c552048da70263bfa30030c6e0cc16778909be73f14959dc5d0c12d78dbe745

SHA512
c68abb43886f9d5cc99404ea8818036b261b074fd8d11fbcbdb416370267f54300e981793efd030a80b7bb54e0e3d55d4df689f4fe91456b3e4a9c7e3e24cfa5

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
2841d112d32b83d6dc30a6f98c5d79c6

SHA1
de5701ce81b4ddfb014ba027d3cd566c525fb73a

SHA256
d66e687e0e02fe7408af797da9cc63b0305fba15de78386aba42818c4107b5a1

SHA512
cbebd43a6063c93000179fbcd79c767cb82d73ff7cfd8225735e2806b594ef65f43578bc7b88fc25187f2e51c4369c7b4361e4cc5d4f6a01d0681ad3297e5ddb

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
7ecc438f5cdf54ea23c56e3430109c18

SHA1
a87824d4d91b4190f967986e86f33348a33691e7

SHA256
d90bb2fc56e9c860728c77c8803896cba8134fd2503f9b0d715ff44361b07f84

SHA512
1b9d6452e68fa6296997f2630af2f52ec0c62f6b0cb5c5650faeca0414c478679da8018f14d36283552de6214a96590fa198dcf97eee7c4c293c3d44ca294a55

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
dbe40db461f9e43506c9f8875d91cefa

SHA1
dfc02cb0584b1f2c73e96509eb2bf4cdf5ae5d34

SHA256
4dc0b5181b3dbf3dff0cf500d5b712818b1e0853658987d10231f6be818b36ab

SHA512
63b5c50dad9377558bb3763a7e4e9f526fdbab938f7d4b05eafc444b75f076e08d46c3f9074a2417dc57445ca2470e0ab2cfc3df974c64815e9733da45ce00d7

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
74a4afef21dc8b9a21e82ab98ee0cf93

SHA1
4b061f80b7e0c03693ccaad57fcfbe0a201a3ea6

SHA256
4f74e5848808f9653b3a480f0fcd78d7d4a3acafd815bce835ca7918ee64f571

SHA512
8ca2bb6ff4f81fc706b9fa512fc311ac35981a3d05f6a117e689baec0294bf003123e82bd49d0daf03c869f44eb6d790dee165d209797ef37219b7176f683bd3

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
f2ea661f57c11628f079a55063ea7367

SHA1
8a64d195c17c83b497c2ef0f96fb88bf562d1306

SHA256
bec164c281488fa7d6ba7496ed54e459ec13376de304f080cad05ab7a12c6ec3

SHA512
e74efd9137c20990142bd66c8732d226c2819e4547f725cb95f072e4edf60b3ea1163cd6db5d7fc922bd3e94a6c17f7bb742a1eba61149ee984f0cf333374a18

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
b05d26b94fbd62b7afc61440ee158230

SHA1
127a38d031e8ffa8f3fa9137ffa5593a252105cf

SHA256
93498ee378689b04f85e8a299e6d9b113ca18b5b0668acda83b0528ceee82197

SHA512
110e6d3d3a0c08dc4907b2009042ce6e728e7032844c30c8f822fa59a454f0fe51ddb10fbea591e3e6995d41fba8acaf4d8b0305bf89dbfb62022cd9cbc41259

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
7a89d9db1f59c43c06fd99697bf877a2

SHA1
28a8ecc2500d92ec8cbcaf6c8e92141f0bbed233

SHA256
7ae51647fd88c7f49d262073509151506aa30161a60db373e1a869c20643d2db

SHA512
36da5d69c3c907d6bc3592154242a88a2913a7fbdbb4fecf8661d3d1d6a8b128843a9c14197f7858c87e539f07883395d468faf5103a39ad797f35f399f2e6ea

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
22ffb2dcf48183ff4c073745a70b6cf0

SHA1
a399d51e6931a463f921f4b370bcb3f15262331c

SHA256
f50947e5a26cc97288174028c4ed997f1b177e6bf4233b25fbbf2588e1d9453d

SHA512
f25b4c9c1bc174fc2648d9f54c159a7ce50bf2e915520b27863e56486c33d2c2ccbbaf7144a34d28377aff7ee26b0b04116b846279ad7a8c4cd26c9d7a3fd307

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
54b9238e7b3158033656f7ec295a48a9

SHA1
fe16b9af060e323d5736de21b8c7d09b9aa13b00

SHA256
0ef4360b3af75f3b6d2cffc76216925a424b93313b2f649585a5372e1bfd2303

SHA512
c1882f1b35dfb74833abebd45f13770c6a4921c50892b090a838a5f96a194f8d0c4f4d7f72a333487b445b3be03abac2844558c7575f0f2900703a7fd520fbe6

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
6cfdd9109b78dd38fb33bcd2cbe9680c

SHA1
421965f503ecdc01fa905b2ed32bd8f7e7a548a2

SHA256
79a02046c3f7a475d5a8a928ffede57cfd74dcffd96f81f6a5eb2b97cb9b34e4

SHA512
b7a908bf464cef1563e06bbe7a32bde805557f8c2b3188a52eacc50b159259efaeb21f8d755d5de288802ba327e4ff16e1382e67521ac49ba99e1b6566c676c5

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
04f864654504e615d51a0539d4e2ba78

SHA1
d221563e1b4fc91a84cd0923a52d926d8ba6d01e

SHA256
4844ff051e4dbb78423a01ea13931c08dd6302d82f479c610fe009358d7690e7

SHA512
848864bd00cded1b6cfd9562ecbaad5c4545d489d2bd404b5eb72ef8e5996d6360bea19a6523f216bf0a0605b34583c4a10d2f30ebcb59a7638e8d948adccd5f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
d559e7f5384d0b9c2f66f70939138d5f

SHA1
e081f28e8541c38c7bbe848a31e17f2c0d3e6cc7

SHA256
29a98e5659c573e3c3af7f1e977143860601b2b5c7dc2de186b06a3d72d28f4f

SHA512
b115ca627198adde5cf9aa24bd16212ff84e48dbce9a5c5eed19973509f9e4d5fe940fec11c29d43235d67f8433c17ebeb2669dc100b37c3f8e29c86b11d5e38

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
4b4a0fc53e21d0cc7f3749c64059374c

SHA1
e0e782d27f9732ff90908dda50d724e3f63d7b29

SHA256
87a248592f425678c969fd286298b3d572d95101325bd235ae7176eb577a72cf

SHA512
336c23a774bb32661a7adab9a09b9d09928fc588ef08e2d04105fb82fe21023148753cec84743459a849fe7c842f3cecd7e892d26423ec1c690e34b288759d84

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
04dd3347341aa3d619698820d28cc69b

SHA1
7e624277c1244bdb757b0319672ff6d191a65427

SHA256
b2f680f49df62940c0cbcedd051972037d5342b7a627166d8c752615fa55d9b2

SHA512
26260dff9ddd6cc11bdf9d95b24095fdcd10b6ca2bd0df39da7033d419487471e2675d3133f791310fabf5a4a5ec048ea8751c9401b0e50f910c6d013ee7894f

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
89e7815b8b617ba04feb7f41fc97f33b

SHA1
3d931a3c50b50e4c20e989f74ff43060f692b02d

SHA256
82ae09236a5c8f3111e5e7aead0d0f05c084fa236e693c02d072e21fd6de8463

SHA512
29fc5826ce0af3f5c650e05e016cb09f1dff2361428dec0a8f804499d1fa4a120143f9ec903882bb369347f9af5a4c546b183b9e9c6258d1dd3dae2d486a2e6a

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
fe87ba7f0d173b23fe3f5d2cb0768c7d

SHA1
1f5928c8bed63edd4f00d5dcc5ba6a2af901c176

SHA256
99a47e9d505d13b32077aad6f883eacc95f19b67a73f4746fb013387622aaf84

SHA512
74452f95006ff8eedc4d0c3c36b0b7abfe3d44e9059c349d87e985d760170c1e01694a518559f5ae2967d503b8f19f93d201196fc5f03781206cabd32fc93d14

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
f1c1e4cc5bb735a4b1f1c740537def7d

SHA1
b1b16077fb311ae7b43236721d46d64bffe68f34

SHA256
f47132fb33522442bea82e9427d3d6aa2ba6dd0a3d494826d45bd76af44bcb71

SHA512
64730b3b7827732a550f8f4958b47a588a631bfeb83e18098ba96908b850a5a05fa9e0ad91705635d6aa80d2e8de07c38c06cba3de725aef833f6ef27d69b15b

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
018691c6eaf35dd873e9b6f1aba1f294

SHA1
c4259fdb262f68fa577f291b022c95d9a6b2b5ed

SHA256
f22b23fa6501f10bb7c2352f10b733268df7b98c23e4eb3b85188f6cf6061547

SHA512
439d3f45ae418527755c15cc5d3b70c70f0649bf8a07d25a3409bd01819a5d26a80006dc5e0736eeb27155ec85a0312df6f0546ac2179231966eff45edc00a9a

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
11b9c870025ec21c7c9421f485dd799b

SHA1
9e3e04d6ca5a338f92d3464e8fc05a7239a18a2b

SHA256
cfa9070376816c8b2a142fc633f14feba4914f5d3dbaaeb7b1424bc02d8fc499

SHA512
afefe603eb31725bd5c0f4e38aff5de8d21e2e6ad876504a1e19d3056b5eb3c8b7412c6116f765a80e6da8cf2bfa87853234c3f199dded8b7883e1b1d00cfba4

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
7fe3692eff2bfc39506d009a4288ff71

SHA1
8b400899363800991d555f224ea6c8b15737ca0c

SHA256
2776c9426af50d221f0b337897519876f7e9a10f69ab24707aba7fbdcbbdc9e5

SHA512
14474f1f1202e59d391ff9dc7572c302c37b4b586ce0b118d63457c45db8880add29d6d0a49412861e6a7096af8e709c44a818c89c5f17cbb4fe20ad97e22a28

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
f8dadadcd202681eb8a36ac538784077

SHA1
c56016654ca0ac7bff46be2a6777f460d8848c11

SHA256
993a577abb9b43ff785b176162c120b28c81917330fdf5ce19b68aa040947a38

SHA512
be8fa43ea6895a71f50981e780604fa95a241ef1aaf52a758f243100d16f46e3bd2a2132064ef34079c9d3f6234c8e36948bedee99ad565c6624b4959c90958e

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
a88dd3c6444680293b537bbd56d6c350

SHA1
16898546c74fc39d764039a1e95c2caf29f68c69

SHA256
e8a96b68870cf5d106f65bdb2edd6515c777a97d6dc1cabf3006bb262e986690

SHA512
a74d255355b579f54aa88b1d7c1c06bdfb1fa464dd2b666b557ef48e2097c66c23f8471f116e0d67a3451b2b1957a7e527c3646b84d5036fd8271ff3f3b9af59

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
53bda85b47d71c0e1ee4abf3038265a2

SHA1
578ff6278c41cf463f8979551bc9179dc7a9865c

SHA256
d67ebf9ad88abc447f10638376943ddb4ee934c66bc1aa56b3b241667027efca

SHA512
1623803623184c8a8017cd02c83834436b37c6bf38ddf8a2e9d36f3bdaf2c95c618d695c2fef4b250f38c7d18b934f0f251b62444f654b30e9e22ad89b662370

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
01b77fcc2dd75bcc68edc1c1c4db68e6

SHA1
f606742d540a9e65d28090429aa0a3fbc2367cf1

SHA256
db20ba8847471e66f35bb8c3cce70c2fb96050edb077604a210bdf36c056a36e

SHA512
145db076002a4a8f63292980acdcc611188a01012c2dff2c29443509c3d6bb7d65f281c29054cd2b0a77844572a1404791549d3a9cfc6dbc3d77b86b6d11798f

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
2e4c2f2262651927ed9b99fedb5bdd17

SHA1
4485536e77ef994caebd1ab286f4adc9e2596819

SHA256
4bbacc02bcdb0ff07ee63ce36e47dcf844b07624b4159235a9da7d251f89c066

SHA512
5ec8332375e2c3843749ec0769379cb3b33c18f11f8de77de777767b1c9d3af308e47ea3a2a7e941fe0f85ac6daf182a081e82e9a78eb1fb26e5c12db514a567

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
7c50d1905b02601ef011f4b3e2cd5ff4

SHA1
e79b0c04f05f025140badbfc6c18128e1941e1bb

SHA256
254f2d5742f1b1d7fa15d0b4edebbe54894721481bc98af1286c7728c05ec352

SHA512
fe3969bb76f4ddc04992c4bf3188866b71625609b52ae5392b94bb99447f6c30a99cc15433649641678882a75a12b29f0551e3fa07bfd94d03aafe8e3e512d47

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
f2f92a4d1505107898d99a7481e4a29b

SHA1
e86f7e3e69906e81698893c41bf272a4d6a4bee4

SHA256
bb627bdd0577d9c60c014b50cb8ae98d5d58b9ed5c856a36b64f954aa4edad75

SHA512
9df63faf1164cc5af672f49b5632495a92c1fc88e90143a6d453fa4a3426e96b72053a923f3980d362bc61556d967722120fe7a1a9274d093b8d485b5d6bb83b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
ac54a21b85a2fb30862a66bd2801c9e6

SHA1
21ef87d391118231e78da9a7b75a0452d89add00

SHA256
1a1f3397d46eed991532fa5958221039e2a2b83e6596e6541056ed56f982ffc6

SHA512
837eb252f2ebcec32e6cc2c49fcd1e8cce092b8eed7f65a5b0c25d210673227490973274df96856b0c089a7749b26dd031f1dfc80012b30eeb2bab3a5699cf53

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
c370221fbc8884eb9aa5b2b5e1606120

SHA1
b0dc55312bd5019a8f10444968f4ef9b95a6ea73

SHA256
c3b0c9dfdf6a6e5ae94da2980c94a588ec552579e91fd114ab75ebe322251c1f

SHA512
d6e8033719977c876c9ac9cdc1c83f6db8acf7911d97db3b6691ef57a573d465f693ac869ad788ae0bd253b503fdb8d50153d8cdd440b570f9c9e9c66a168221

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
044156487ef8d318e641384b1c3cad9f

SHA1
09551891fb55c3f7ced64c35612f16517415f305

SHA256
df3fa0b62fb364e38bd6299fb089dceec30125f5656cdc53134226b75f895bdb

SHA512
f9138f14c2be75acdac9da6c8913e7af07ecb8fa322c0266cbd3049dab642f36f84a66e311dca523bd4ef800857d6f29472d6ed7682597343f718a3ef01891d9

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
843d85d83a649897fd7fa58463a99309

SHA1
7bab23574a80c3e8390e7db71bf50347b5d43bdb

SHA256
9c04bd20882873a410ed3674bd4dd741783899b6d0986b90f7aa022213a9166a

SHA512
c6f8da1fdc8463994384698f54914b90019ca6519eea846a8168ba2cd161ce9508f5297d0a4e662ce403b2c71b748ece9f5771ade535f831aab5722a2877bbf0

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
dc18d28de50d39dbdb58465361b119a2

SHA1
8c4a67a9c00c0a57b5c80219df3a3f963de36596

SHA256
605dc8d28b6d4be236c666a824ca3585165182727f6af24b3db67a7c52dc2ab1

SHA512
d29d3d8b292306a87b2573848d95e1fa1c09f2b5d074b69d3ec2d2fc2d30c97e5585e86b2c6daa521b1f06ff3c41ebe6b4fa457aa340f7070e0051b28c4a4882

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
0abdeb42e465cde8458f6ffe558a216b

SHA1
beff3c25aa39ac9edd16a9de241b260bcd7f75a3

SHA256
a02aefb1293fd32baa95f93f81cfa444e943d99e803fc018a78e613e91b6192e

SHA512
9b2cd4b5f76046a1d9d112cef9448451eae8fab544ec41691f252c025427d5efb426654faefc9145b076045abee9084b2bd888e04a5e27f3d6958c194d502183

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
9f1b66ddfb4cbd955d6663db9fcff37f

SHA1
51cba249bea71c1a9004e437cd47520a2270c2d4

SHA256
7e58239a60d214217d846dcb986892a901991db6573a91b7b44a248cfe03b624

SHA512
370f6b3f8b969f6d1a81289d38425629baa22199e99aca6146326a1ccdfcd43e14e55d30711202d3fe977bdfe7bcd0e1e42932a4386ec10609409ae57252ba06

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
6a380c3b69e222e839ab2e9ed00ef4b3

SHA1
f60fbfca036fe5ca639e8bb354ec593bc141f60c

SHA256
5ead0266d7df17afe81efd9b868e1c3a2f4fceb18b948a683941bc3d3f358164

SHA512
0ca3b04522fe3015ae3c5e3fa0c14b25861f4d7866cbd7a569d241acef9861e1b20d57c890aa0722313ba03373dcb5d413fac0ed850074a93e798156e551ca9b

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
42e77e2ec425197185217833eb185ae8

SHA1
95f06681810637fd8507ff476f9b2f624b0323df

SHA256
a677d4739c866e63ae10ea2876b7ce140da349dbd60a7aa3f686373c5d8634e7

SHA512
5c432d902063fdb407b37f1b798209de283829cf4962f63175644a8a413861dd638b582591a856387b47f114e7f2582a710f77f6740304d9911c0e0afae6ffbc

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
e97cc0a8e0380c954fc1592c1da13d67

SHA1
5a3a56433c0bb2867ed3fe82193195d87e6d26f6

SHA256
98670bd70214c9a3ce22ebab4bb75cc12cdefd98905b5aaebc433fa81735deab

SHA512
9c07d7a6b47cfd148a237ee723a02eee945c2ed2057948362a5b528d4ae20c16bfcb1e621face558c929c66045f2d0f4226c7d3252df388f7a7af4660d17798c

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
6891a6beedf9bf709906c48000c8ff0d

SHA1
da92458eb2b13e853635ce5c70d9684ad936558d

SHA256
f4bc722b64738499533d96cbc4f766a3b354ec6c1cd7057b286f8bec7a333e9d

SHA512
1656f0a08c7ee96939188c6f402c9258700210a3d78b65c2410f47e7204bfecbcd2792d40b33f23a5379b73c0bd1854d3c1703e9bc38f0433c37d41ccdedb6a7

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
c68f8a00fab4024015bc265c228f3bed

SHA1
666a9f7e84f3a3289daab529466a2939ac4431c5

SHA256
dd555608e614d6fee4959270221d7b74a9eeb4ccd5c562bd424be556b1b63259

SHA512
b806809b6ac2857429b53ed6aaff9e82514d2d540d1fa730675f12652366616766130e042de3c7396cafc48d55a18e69592108b7885dea13bd22fc68516fff68

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
076d2c55e9f8cfa469b92934f0121cd5

SHA1
03e03f86f91671e08ecf257d6503638c1e918297

SHA256
af3b737ab6a4041ba8f3685e4c4da55646d1eb24f0d8bb7a9e370a744c32f448

SHA512
632856887b5f16ed94a5c34b51c0d07cd18fd34b196eaed9d1e459b89eccc15fff2be89d59e7e3aab04f1f3d1a6a28d6c369f6cd304a8b174231bd75545afad8

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
a044ddda6c8f94b36b1417ba6406109e

SHA1
b03282d186c02487a0ca8eadc2c37ed36e3d1a7f

SHA256
cdfd4893831b017bac77564bb1c8c46a3463b48a0c962ebc23fd82e4dd109b2c

SHA512
91b4242a0ef1b14177f4bd8c4ed26314b1b8c33d5ce8a48b91285480479e1e9c6c5d2b2e83dcab00728bf7d9ad78d993a2f463a3adb2ddc75ded248c2b5b2651

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
c35f59c27eb6553a55a9129edc1e34dc

SHA1
bca367810ec18d9bd5c11e978ac46c2d7686d95f

SHA256
14c8dc56ab418a0972f11d8832494b60c36b92123f4916473c6893d034f1aabc

SHA512
1cab6a6bc900e0cadff9aca04d02a9907d032927921f8b2df810dfb1ced5b3f307feb935122d9ea5814004fd4cc49be9130f5f2a19261293f685d87ddf3b0cd9

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
b98d073789550d4947396a1fa5f79fde

SHA1
4042d5a57c2a9606b30994ec0f1fe6cb59baa8b2

SHA256
b291f03ab694d751c721f0e08c9be461c5ef2506578c1968c51ab7e557ce223f

SHA512
b7f5d1abcc51d79cef79b98a4492de5eec7b3e893af1de2b31c5cd0615344426aeb72c11bf33f7cee2fad10ae454e9a90103d9402535b892367c662a6043ea15

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
05b156782cfe170f59b657ec96f7e4c6

SHA1
28f042247d475553b78536b81268f27fe1cff1ac

SHA256
a7594b4eaa94229ae1f98ac93afa949720aa3d5664be46a7ac8a60a7f91ef1eb

SHA512
57fc59dd0e7067dcca60e0eb254c303fca76c45945a48f760629b1519876637debc16b686051afd8c308749241cae3db0953e2b3076eb4c0251e93fc600a2d04

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
958d852652e535a894b6487fd614875f

SHA1
2bc4a59cd747fcb77aa52534fdfb5bc31038fd59

SHA256
9595412368509f7baaaf1bcd02bcbdd1255050f9e6a6a6404b1af67182e09634

SHA512
856cec3a703adf1164df64f753c921b0ecc4e37a067dc63d3dc2844bfa2472ef2c24d619102059ef3396e912979893037104690ff47765b8f8c0b81b7f810798

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
11bc4da1667c8d6a5b74951adfbcb5a6

SHA1
8a9fa536e3392ff429430092b55a4036e815fd95

SHA256
4d4fdd68636acdd83d50412363aed69855f80373c66c2c8475ba16f7dd4f71c6

SHA512
f4e1c3a042756c4ffe5cb9571103f5f00f690ba0908c4de4f711a798ad3d8d1e494ac69e6004a7cb75e880cea10be54f2bffb70693d0daeca62dad9b9399f34a

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
639fcf848fc02065cd921b2514a6bb68

SHA1
e5adb93b3486e1e17cf7dae6b0cdae778cd5f8f0

SHA256
b194692114237a3b3a49a3ae226998bdde71717bf9d5acb3813f3a703816248a

SHA512
71d8d89e6d122272b097c0e0b9c60046459cd8558ca85136265c158fd888fb88e487e73c75845402dd6392ed3594fa9e68790ca2f665676e46e489f2025a3e95

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
c3bea5c40999bc21248250d46c6655c4

SHA1
22f0293552a9707764b4edf7ec67d26a278a52c4

SHA256
6cbed565ab40a50a445cee26b90db069efa2058ed6600ea0bb2b6f7f883482d9

SHA512
fbcf1802c547c1304adfad32c4021ed6cf270bf0c45054314d024e4b2e9f6026bf8f61405bef77ca342b4d107797ccbd1771be405dc3ce6b2e00bd12a070dada

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
fbbdeccbcfc767be136258297f1f0743

SHA1
7a6198dda611956c74ea32507741c69d31ba3d17

SHA256
73f35676dee9d04126dd8f59e743fd2ececb6733752a3f65a1ec9444d9b706cf

SHA512
c41df2e0f04e5119fd2672babb1ccda9a0170247e2904f8ce747b430ae3b4b2cf40a5c02b83bf3c0478a1e96a98d2f3b321125b99f6e6531fc8572c5c7002149

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
d9fbed112fd2bc035ac1703cf6170bc2

SHA1
317c8ec362e923b9d8e9e9410a368d6e1383536f

SHA256
0138939c0a0b86b26009b2484b137e047242b678d4388c4758ebb60e24991d8d

SHA512
083aa74abe5663b080dbff684e962809727a0a44b5670e794b8514c69444e453e091c5b94ac20f67d44e160f17a70766f364e2017f6c6089d8951409e509ab12

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
ac61a5c5550419370affd4e97d545717

SHA1
a7614ed92674b9da476b375c1fdfc44f45e8dd00

SHA256
166168abac3029841d95340d6b4b58393b4034b6e0f6e46fa2b90789283d7195

SHA512
b34251fd7751d5d3ac64cc624436712f7a7179727914bdd06b5af6e39cdba0606edde5288920f34cdeff57c10df9f2c90d858057ba83674c8051e01ca03f7352

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
d9dc596e1db17068dc1e23a1c3e7807d

SHA1
2e1370574e4db79fc4e90a71580d8be4ec102f7b

SHA256
e1f5cbc9bed72af6a415e32e0e205abdff3ea8668f58f58d6abf8c8a3a7f5544

SHA512
4d547ded83370d5d58a164d639bf3f21765a4ab430369bcfdc267ff6ddb39c4d751466f80e896cfc048b6a2b328a0b9f636711597a53e5c1afad8beae67b62ee

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
cad0c6a474bfe18c8ca6bc5fa9a04d6b

SHA1
4d7bbb35553ab7e365f6ddc213a3515cc655e877

SHA256
ced4c7fbf2bb86f98ecf1bb8bea826937e4144cbb315051d2fd969f38aa69e5e

SHA512
0ee4b11f2f8bb6a07f01ad0c75414ee4fdd94a5e0dc1fba96f9e3dc98647ab408e26aeec2e3a233f4b4f2120cfc17a217bf9b79a3ff9a324bec2f576e927e9b8

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
6235f4578a65fd2c089f6c3efa03142a

SHA1
e7e0c28dde3c0cd9af1849dae51a4a376c72f934

SHA256
210c9e6a911cf5ce5fc6bf1e9e15cf7b9026e744b41ec02089ba03e23fbf7ccc

SHA512
47dde1add9f6fe06bf1d75c270e4280db5d786208678f27827bc697bf05b0454e0c18a723a0cce2d71fe6a7ead08ad8fe0d3ed03f85f574456e93a2ac1a79fb2

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
f9dd56ca457836a6ad23eec3c00e637c

SHA1
6646b813dbb3281be9c0435b236ba5e1ed6c6cf3

SHA256
d390b67d8ef827a8aa0acb25d927d2e0565726ef315c5c78e833305bfcb5cf9b

SHA512
18b88a45d3bdf75530bb8b141d6f071bd0b91ce07a8f0d693b3ad86aed82263ed4fd982386e5bc9b39089765dc09b7e371a014272f46110d04a7b9449c43f7cf

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
e07c7284d31984c5b3b89b80f8396980

SHA1
3fb4cf30eca896bd2dcfd7faaae8636a7f562a7d

SHA256
6f4a2a686dc1bd17700ac5b185622b6a12b132572689acf13cdf35a3329f4e26

SHA512
8cd20c6a29a0d3c26707536270c3be502fd91b53d0552833494abf2d97bc4075b1d5fc777b94c50fdebe0b623b1487f4dba9f532508d64ae8c0a8b2d2375f39d

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
589005f96c1a47a582d768f7219032b1

SHA1
a38a4d63f468e367632f9ad1c45a8ff6a2d4a7d1

SHA256
c94763f359f1ad615e806eeb2da039762b07af37f9ca5a47801bd2956c3388ea

SHA512
6ea333ae53409a80b1e8d30461a341d62e2362cac2ac118d9fc0e095ce2719e4e0c7f6a7a1cad516cd18463207202f0ddcccfa0c3c477eb60c965b3ba47f2ab9

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
d4cf838efe8a9b5915cd4fff9e81eccf

SHA1
27e93a6bb43073ac8653e02a3e01222857c7bea4

SHA256
9bc8ca09a9469dcea410d1dae81510a40f03ff8a5451afeeb2fe9a910d5acdda

SHA512
7bc9021281b40b592c0107b1fc6cca9fc86f3f2124ebfb58d0d4ebfa7c624cc92d722a91a91160af0e7eed05ef28d99f23c9f546e83bfe277f34766a657bb578

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
79d467a1ea09791476c7508fa4243e7a

SHA1
8f2cf546f067b485bfde3212ea0258be7252976d

SHA256
6ba9856234ddbf0b5c1f9f14d1fb8e8301486f026fc57a12164ffb1737e25abd

SHA512
51e24bdbb806cca04a3ee03fcf810e71fb0cd8928ed11117532feb947b388ccfae76125d4611320f47b05496f0cbf6c0de5f31fa9ebf1a68fc52917c2031925d

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
639d08e8dd0c300c107c5f82dfc8ad2b

SHA1
c8a97c7246727f0a1a6fd4294dac988d75853f24

SHA256
42ac171711cdc2950621cdb6f38061d0caef76f18c3f3a748a96a716b939063f

SHA512
c63f91b568c3fc0caa0e48dc76344be5c10e1db544fbf363f94c1e9f1f6d4cebec2404aaf17f65191e4f2845c9604a06e1e1e5da569a60cd7ddf5c309e93ce17

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
589b1a0f43df98b5a081994bd9d7f3be

SHA1
f9d6065c379e6a2a5ee21b21a6848171f6ae5497

SHA256
2876df18fff4f82bf15c87ea99672e7535dd41ef41c8f45b6d0ba908d0a32175

SHA512
be32fd2818f124f1a13315891bd1883345b261f805eec71d876db1a700e2c3a8ad40eac03a9393e2a4269b0a72fd3035139af54b4c9f986c1b5ff5145a9ccc0f

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
79ed936637983aa8edaecae2dc1b54ef

SHA1
447088d4a81d5ec0475199ac59f7cf5f2eae0a60

SHA256
f12b8476e35747c19b73ba9640d5d8eece28d11bb6d41ba29377fdd9606005b6

SHA512
b16b7ff3bb0360235b03aa1481aefa015031bcd0bd0c01694b7ffa65de31976128e1bf0219b0aa41deaa261c7bb88ad021f2af9489102f879b22b87399d0460a

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
b1e77a3ba7ae611a8fb05a7428767b15

SHA1
853ea126dafd1ebbd7057348f63700d46d427eab

SHA256
add3a9f1884cf010e80f47f73a4f4e918486b0a86298aec73b96009844bf56bd

SHA512
b888f52c7cf693676b7ef5b6421baa18b9c1e284c06322ba2fd5c26d887045467cc4d17843a3142b72b5c6c7c4caa5d0a4cf0695293ecb627825788131969bdf

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
7c115e5214538617eb233df6c6e94004

SHA1
02f8cd5bed250f19d2220b06d78c7a046180a5a4

SHA256
2bf3b7988a15bd346a9a95ebf04f463c05851983fc61113a6040da39cf04b8a3

SHA512
62f6a6e4fae0a624f0c30ca60615b4e1539b3ac287406240d4f81ece19391dcdde95252553f6a03147c403f2971c053d328710ec5bccd36dc81a0a0f54efff97

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
4320a2df5d2033fd3fc5206d31716509

SHA1
18369e9a7956e067cc04448d7f9b542b55ef52f9

SHA256
b819aad4c1802124704ca9832360ce056b1e029ffac35760714bf09182e83041

SHA512
aca2eebb5e01cf31c4a07f448b76c2fa6b2cf880295aac55acdcae0b82d3eab7330318c22d6274f88a149a2d5f36cda5cf1286859e5cee06f4a0fde2c448c4b3

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
9e895fd0bb194b06ca6e340ca75aa8cc

SHA1
11b8775f07b18e6c722b7baade63e3d6b43a17a5

SHA256
417fb4d291c7c1e3750ed79391553ba80359ae131532f5e16376ab267e2ee725

SHA512
02ea49da43b9e61c60f03ef2242a26424150f1f977be60b2d22e00cb28fd4fd7e22b6412bc3b8c7b0b2c8915b46fef470d124c94b89c89c5df0e8e29b08a8cb8

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
fdf7f4d796e60bbe5f1ed5758aa5be34

SHA1
05240e244921cfcae03006567055064de1145998

SHA256
d54bb4f1a77f6e1600971fb46fe4b4cacbc0e7ca4a27107fadeaabee3edf822a

SHA512
89d69fe6ad112547cfd447d58f07886d1511e920740d8bf670226f4bb76ea1c0c31f73555655731f50325906654f5c9455836d25245a79d379ccd86bcf7dbaf5

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
3103890887fe27056d47cf6709e842eb

SHA1
581ab6736f16aa2d3609350466f376f69a52bb5e

SHA256
1436fac0e72888dc92f7920caf5675f7793fe0d9591171730f2385eaca9626ab

SHA512
c22dc1c1c86f25d9b84e12f01116084fb3ea3060c1cce98fc67bd573345b4060e3b577e43ae97413662d43dffa879f838bed74e55fa2596685ca5632d74b0133

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
98cc1ecb462aa632a8cb18f4f7accffb

SHA1
354071decde9b87eb74a19c79ad2afa35bae0446

SHA256
47e25ca00038d07ffb8aa559ca53e2b92ebb8e88c5f2a10fb36eec84ea6ecf4e

SHA512
bf582645bdc482efc78a6b6a0fb708844cd5eda7e666069a827857c8028521e80b11df4a39bf34466637a686c26c7b48d0cae045f87ced5b9c22630136cfe468

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
df3e519d16a6c39cbb6a86651b6db076

SHA1
2b292d6c1da4183fdb85e87558e65dee7c9a5cb7

SHA256
3740791febbe289184fd1ab9104825c11ba74e3d2c159461c1fec95f448d4fef

SHA512
32df77f5db5d5781770f39dbf62de309678ac704e9a83efd27807e13cf13b8cfa52d7fb19bbd45b46f60bf29aa7e5b62a5eb64fd4f789e689aae34f09a3d7241

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
decb57e396207f19214b45f258e3a102

SHA1
78023df72fddb2dbd3a2856ae9662b72c01e0100

SHA256
cd9376479e592de689eb1005eec25a1cd8a4dec1aa8a115d6df02a38008d268d

SHA512
d202dffbf29f3996d136d3a1c66f023f5c4560f67b26a7b2506da881be4843ed99b6001c6e1376ac113ff353e0182aca78f331d022d5dbcf449ca229b7fa2a8f

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
cc35b0c5b01009319fc8a406b373dad8

SHA1
e2d119224fbcf473f057de8c061b52a57b9415f2

SHA256
bef41ed9b99cf57f1c6ddc67c9199d80938b358f67e18c5e3ba86239c13fb4b6

SHA512
0787d8f574293975c30a00cc90e081e91b2055068c6da0fdafe531d892d71e62e52a2dd513bda03ed6525c9f9941ebd6d4412a193e73511e427a487dfe4e95c0

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
91136acd57053b1dd881746ec85b9efd

SHA1
32defb61df6aa1fbf42a8d09dae64619f6fc9695

SHA256
031e3700cd81b200b9eafb8b4674179aee0376ca8bddd94b6fc42579de0052d5

SHA512
f4c574a2c48f44869cb092caf4327e30dc84037801f96d0071f07cff3427bf0cab1da6904c06e408ceda93a85da77935565187a0c9e8a7093d2f0d3023038606

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
b7ff2e3ee194e0dc1b968e81ed210e8b

SHA1
9f6e994b20ada33f8f04cf9da020f02ca96b314f

SHA256
9bd1ff4dc21eba246f188daad02e9acdafc08fc6fcb20ef8c540586e4ba78e95

SHA512
1644123e7a3b87131243d088bb6a76399645948a039724199b2f05401af417abf71784bc5917c57b62acbc4288597f28b279b978682fe3f35e0797e33b4606fb

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
13253eda611d958d1152a342d8b37795

SHA1
fd8b3814be401efb1c8395007c8ce63056ad7353

SHA256
d840f022715c98d115157a4abe65d0f115d7b3f01c80bec5c5540af5544b57ab

SHA512
d81be83a74126a7103314efa4e1eb392a060d29cb786ce71b6e4ed8091106f10f6b83f222e49bfe2efa9e565fc0f7edbe55972cd3923f61514891c6c5714b958

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
8f7967f0e4287d67b60d1ca05e12f513

SHA1
8a5b30cdc067fd1fdf89fc368d04493f46dc1a61

SHA256
154c2275ed5593067eb158b98ccd5d8f220f2d87f4b35d13d1be997aeebbcfe7

SHA512
b94497d817d17ac19694f0393bd804245e3a09ba58846e63661ee30ee5218b4d8481043d1e41f5709ad1189ede01d1d9b44d2e4ed7b43139beddf3d57e6c87a0

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
fc33d31adc8b056d24206475c0b72d3f

SHA1
cac905a56c006dbb248560f598cf110f121a61f3

SHA256
62bf84b4d035be9ac8e5b7d13f48856300a4c59dc8070d991c0bb9b680eda17c

SHA512
49a8baabb799193f6eaa8d29f0ab8371a383619e2adce2dda3e718ba02d7034ec21ed86d69e92b372b8a1afa3344d51de71a8201673a1bf242003fd3052bd1b5

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
d1694051063669b9eb89e67be2bc7df5

SHA1
a258ae9b3882666a6238bf09f6902c6e69cdeec2

SHA256
706341378a64bac130d4c2bf40e39f9c5de79659ced53836cc27b4836c34c864

SHA512
f887b102f81b3dcec2e43d98e7f951b980e4131b500a6153d15173d46cd5e089debbcbc6b8a8365ae78f6041aefcb750d506cd2915891101f58e18295b378a08

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
7e10be5fdf7c03794a2f6e1de4009643

SHA1
826a489ab62f0a19121dd02da04b257622655835

SHA256
5ef0386096dfe17a83c4e40974f966a9d88057fd218efaad1966774606df4ff6

SHA512
f45436fbdbea31cec60feb8331e44e3faa85a3d1ddab345350e1ba40cdc5523dec45b7168b2191759842f7b62470ebf99612e8367cd98068d8089ead478bb115

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
d210d8e9e0f9a6ead2f2daf2c81c2831

SHA1
518da5bf6a9550108d4b315f2e7759c009aec80a

SHA256
42119599385f184e8191782353eea1101a53f1bfc629a4bc1f77b4c7b2d6ee95

SHA512
20abc22e3d78d06c70267535db08710018f33fa1b982d881d4ac2bf35a3afe95a51a4338a2e2db6a974a73b41c21731d49d1ac46e0c239681af6a91acdcfcd8e

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
8f0845aa9c65eb781758a344d367201f

SHA1
bf6f3701cf854cb12afc2bcb0d92b51792abed41

SHA256
66e3a8e2c678339fe797f82c2120afc2ff222f369b2afd909ecd70e6ff5e29ec

SHA512
b85212ff9ab99d947842e2cdb8fc98e059441d66ad5d61708daf23d6e16109bb97040261b6f7c7c39a1bc885e0a8935f8f80ea13426ddd8730e59e486cb8e98c

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
f1acfdbd491ee5716156b2e2f4398d42

SHA1
0e9bc97a8b1edf574d3dbda169a6560fd9a1d22f

SHA256
217cd8279e72edba0bc922d83b93132e55d1f1a2e91417bbdc5e2995bbbf69db

SHA512
38824932477feab054627f720aa5257e602f953e5721107b6f737da6837cae371ed8ef09467079af029f545fb0136c4cf5e906491156675f534f2fdddd97a59e

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
6ae1270b800580f59120473e2bcd2f8e

SHA1
b980914cbc41e6b0a9129825e12c165a0ec4c61f

SHA256
1a332225b65c91c9450a20f17593091fcf3369bc7425b17c5bb300acf367e12c

SHA512
4554cf80f266576a418294e66bf1b0fa212db19a54e19c6f7ee2158d2c18e9f80b1c2fce03ab8f673e150b32cf781b89a986ce6c75375507b94d837925dc9d0a

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
bb2bbb3eeadd49415ca0e20350211c98

SHA1
e1d64aaeecf48506764b6cd68ebe348d53ade00a

SHA256
f7322c0b172dc810baa1ba6bdaa1e6a9f0f07fd9b34f07807c4d48587759d16b

SHA512
fc0b6c2860560aea0d33be33cbc64ddee090eafcc5897ec60bf17b8473b08679253a955797a2f2610c272bf4362006d319597038d626c88efe0bc534144872bf

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
6e7eeefc96b323d04bce33aeb3c35846

SHA1
6d3c1969280cf1ef2d278e3796ee929b50af5c70

SHA256
288863c794f4ece81a4dd7a50c84053cafc76b30569b9813b3ab80f7b1986c6b

SHA512
4a4659380aeef47875ce30a07c84d9dc3520003fa50b5d7da33e0834aedb35f750b00ed253c104fb389e184dc856968148a81e83e1ad9c63955ad0870e1b3c75

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
d36b605852c8f3a7dc79d1c6fd2373af

SHA1
197df7d246309ae2c626906fd333072b79667c1a

SHA256
774fe38fe6e8d0464f7110ee9370ae64f819a68b6fb308eaa17bc6fe26de042d

SHA512
6c3e46709aac5b3ed11dee66269b2d4c6a8055f0a0a13f4b1cbf3b1dba67555caa5e03f17c6bc2f0bfc77e369e10b5fa69e1f536de093d69e134aff6f7e9b6fc

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
739c347c14455f49f45597031816e1ea

SHA1
b0b3dafa2c40c7de7fef31356cb66914ac6d9017

SHA256
0c7d987c77ec72546578dea9757906a3d69230b8d6031b7a863540726d8d6870

SHA512
95c1f62d9e2ffe468750deed0529b7b1fe4c1efbab34efa1c3ccdabbea385ccdab8406600fec22bbef0a09cb8a88008d009818e076f6bd32fa5f0e73544a5a3d

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
464d9762127ce46e26a219636982879d

SHA1
40a7416079f70295769923bfbb883e1bb103393f

SHA256
788eefe2e242fd9be333cff9f42e16ec979d5f2d8d6c1ccf6b32687986021676

SHA512
852961c83184eb820cec516504008d6dc0e9158e6330d2a6d2a778c56f34959695662e8ef35b753969a6f2fa8f7e7f483082c758d18b293a094b60dd10509fc5

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
e7bbe72ebf3ed4d7c8f8f779fd0e9585

SHA1
a340323b48d461ab50395f527179bdd7ae7ce031

SHA256
6bf727666806f0a89bd5633fe701d4aea55c4b13c616a8620bda074dff2f38f3

SHA512
589fe2017e1542bbcfb42a8096bda139519597c161132a9aa4859cc144526ba7a305b13cb3a17d8f1c99adbeb201ad4ef1375b2ea57f1c68e547da85a5990266

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
cd0358e673846be52ddcc1f76a51fe1f

SHA1
645d72cb3ec26be4102e163f167dde0f77a17be7

SHA256
69a86a3bee14278e77f17fd11737c9bc49fa30d56bdbf6cde84df5d0f463d851

SHA512
0c4ba3b7d9a746619a146fec0fb03771293b27e6202a297baec9fb189d473b759dc836861fb383c93c712eac3f859527946677ee828d098c43972f01fe692f72

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
9012591d3cedb8042062866c8daf4858

SHA1
0a19c4ef6454f9f41b1c6e10d02a9666d9eb5096

SHA256
4713f975c418f8c1e840a1b96c7c3b9b06307f36c9367b2f5e6cd7bc3517dc8a

SHA512
949616e7574f1c0f427c419f9a19f8fdc835dac8962dff2c1624a73eb20731eb52a6fe57ca8dcd5149fb3e3f1c8442211b63352b7fcec0f9f86fde0359657649

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
c01cbd5f8deff34814edf2cedf73b87c

SHA1
79c235b1699bfe0fe7e98e7113b053ab85768aab

SHA256
1a3fad83a5cf54cc76150e1eb0f0d35119f90d293c69c98dd82913ada365f174

SHA512
da1b663464a0ef321eaeff30d756182a13f367296b101a1883ea80cdf689fcdef81624bd8be0b88187f00223048226ae01ad75c28f1bb76b6593305c2cb5689d

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
94436b3a7d82bccb62076a380bc56c1c

SHA1
8ce4beb50aa3835bca8e7370bb2f9403c43b9feb

SHA256
4e9487e5b32fc3ed92c6d20ad75171110eefad0ee6743cd5fe4fa0ec8db83725

SHA512
8dfdc4cfce132e1f9e466e0cb225e153156c7d3fe89c3d869d16fd12f6d6723bccdaa8ececdee5614b07b3d5dadb3ef15112b5823eb49cd220c51de8d6e08064

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
9ddfb9b645100e4b932a319075c11a11

SHA1
ba53bf373b8abc55f4360fbe300c91ccf30ad5aa

SHA256
0ab3c4632e38438e0e9ab4228b19e75d826eb4157a1deb763e0080a5ad9c87dc

SHA512
259a423b76d2c632f2a30651fa747210404c0b5aa114db695d03baaa67ff811093ae1089191fb8d10624ed527dc821b72d871b980dd053956c07fccef4631483

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
2cc70ed3f2e6ec95be6477a4cbb2868d

SHA1
9444a5b95d5cf5c53f7bca80df546f16ff676ab3

SHA256
526e382012f0203de4807b71227b24f3e590e9239d3323e74f70252ce4355335

SHA512
48519c434b3c3849aad90813ad45b8ea5d2fca8b1a7ab83392022ee6faa5a96c510bab8ebd6ec738799cf545894edc287abb51a5ce10a4e9bff4d636d6548f43

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
71c88c2c6f2e53e644208c73f0b0614e

SHA1
175582be781ac700e4625ad9932867feb669fd5d

SHA256
82dfdec80ee5eca3bc2722ea0d4b02c27ebef77934ac3717f5ed6506cd87367f

SHA512
e1802ac6727c2343059dcc90683fa24d884f15ae54d83ada41e46f0ecd572ee88132d251fc1103e8584975fe0b20310f359275923f78a2bab2180a643352f0b3

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
27e8f6a7e1119aa801bacbff500be4d1

SHA1
b04c9c0d98ddf3262f683c602e610db5f79fc866

SHA256
6739f78e451f6e8f4df8f406a6918b152290805c4a4100668d04bd38251bf225

SHA512
b7e7452af4b5e33623a48bdb5a6800099ab787436c276c2338851b141876565e0986eb4512be694040bb21bd96cbf7cc5a4daa6230a102ff56ac6c3db5e5c8e7

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
604e1febe95b0471db9e1ba6093588c7

SHA1
a554217845482582e9be80f360cd54fcb1f83ba2

SHA256
b4390a64614e3abf732f5e6edfc1eefc418944de206dc10947812615d0877f0d

SHA512
e167ff41ffa424dc508389bdc3f423877e8e49e5085cf3d9661b329d475926d1fbea3ba8441bc4132b23f15af658b895c2c3990bf8b00fc81dccc863a6aea1e8

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
be2652481e0baf50921716ad91f1e93a

SHA1
2f4aecca0619158ac5d03cde7a9380bc805ad161

SHA256
3831df146d91fe922cb9c4355078144d173441a54c95272504a4a25a6a393333

SHA512
3239cbbae4afcdd50de6f245deb7a42c6a423bba7830b32fce4571a06e64ecab25d69875648eb9468ac664199cbedd6a8f54c2aa499f7d65961e5102535fc3de

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
12db6248e1aee7629b75221797897d36

SHA1
e9551772deb45f40cb1f72b20cb5aab28b217418

SHA256
99b697a4d41265c4fddb1c766f431d892ae9d52a025ca985b058bb0bd83f668a

SHA512
2785b1a8a6d152e7e1f6cc736dffa47afa8b9ba5218cfe84fcd8d26abdb3392671f26d0bf44de5b5e40fec9481472f9d35d655a9a3577254012a4da9cda1df1c

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
10573911fb9e98fec82cf136dd0ade03

SHA1
7fc8dcdb5881f1563d407d8eba08b6ac620a8ccc

SHA256
a47298e49af5160185a517b0dee366a682df108a0fe5b0d81d5f1fda7e0a32ce

SHA512
04b6503e2b95de2fc2a6b2fc442bcf7cbe5c8183dca8c120dd5da581a7794d11c82e15262a5e2e18794f7dfbc56a401b8e514cc33f567be7bfee078dc4890f97

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
65d8945a4134aba374e977085999cd79

SHA1
95c440ef6014592075ee8d9bef49ea62c550f9e4

SHA256
0fee14a3fc939f05ccb4ac2b2c8a7c8fe243c2807bd31204421c69fdd9af69ef

SHA512
5bbb947c2243db5188bd0e6a7e3a9b0ae2b26101ad3a7e0f9d481009629a601d8b6b97d9a6f1a692fec3575cf40880c58ed97816902f976aaa0797e6ae70b04d

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
e47504777e10b38d193791ad308e9213

SHA1
0a86085a1cce3ed5949ec154680115fccf5adc62

SHA256
f9763c6c1b4e26200c9e8ceecb43451c006bba9c0b1b067dd4eb7950d3edca91

SHA512
13a1fd8084084932d9d4989c59cab0cc76d9165ea2637631774630f6d7367a58ece00fda748aa511272ce55737399074b09b28bd3ee9d3648f2ce8c3ae5bfe38

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
81f04869c6be59229a08c1afa419d443

SHA1
beea803238266eaecbe18f19c9f1d989dffb787d

SHA256
f25d04bbb41c02de5a7ecfe6702d0ef3c7383cc174dbe33307748684111557dd

SHA512
69c58f9c7f9708f6eb2b7e91b376cab74b532446723f4f5a8a7efc20cf73a37f689c135c93e6d31d30e1a7e2c5d106166c154d34ba60ce157243473ad4b015b8

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
5f7c0154d5b5d3dbc3552724a553902f

SHA1
8b109357f1627ab33dc11b6cf4d232800a88a519

SHA256
ee5867c643074558d58325d0f448d76daff02876568721de4c8cb33a8c13c3e0

SHA512
811d5945277a654e256bdb844e4e4b2ae14998fa3ead565a1c40dc22b635f06ea4f16f51ffb86aab32eb4644b6ead8e467193b2d326f7d7ecc24fbeac25e9e59

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
95d40f5e99c1b11843e9e54ca3424f33

SHA1
ef803e4f4a5fa68ce4e39c7c6299c391958b7f41

SHA256
f778eaa34bbb3e9b8d6889b4f9d8057492577944fbafe7518b4fb0903419ea18

SHA512
f731436a1d277ef917f44efed95d0a31fe06a869f520c5a20dfc54b4d292bedecc9380ae427e9715d3d70b5b43abe468ae659179821c9bb8d630c046d3f41f4a

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
c01e2f939793d37c1eebc4b7064e829c

SHA1
a1db7bf84dc0f29210fbce14da65550d30b998a5

SHA256
36158a83455b5268b7858c602ca6e780c52ceced3204ee034858ce782fbcc6a5

SHA512
7bbe5e679ce3f3eaf974b03f2c3f552317a49825da9e191a9797efd9ab8b75fcf37a511162ec278e558a14c78ea7f19a1ca33e6ba7d8987fefc2efa8e779273e

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
5f06a8586fdc2253f907145033937ac4

SHA1
e6c9acc76101fd300a14b08c185707db8ec82df5

SHA256
e0d411d4aa17ca21b561f2dd236e51d3a27ee58db0cce143c58cec65b389e92e

SHA512
c6f31cf4273f907a5fe23dd7f53fa4de8d807af5136e0503edddbea0b49f5a723de48c963d620ad0b5168e23e17745b29dc6865fc9211f585f64dd61640e1c29

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
93cd43d6f2b13ca87d992c7f5711dc67

SHA1
42a638df2d2d68bb6b1d964ffbd05860b42f3d68

SHA256
759bb4606f211e7b5654ff2aee9ba4e86b5e4c42f039e04b086600d836854cc4

SHA512
cf042e35cec1d483a2e48c544786d45017bcd36c9fda2b78399230ee2e531cde158e43f41e2637c946a387abd998785bde67c6584802a85ec7441be2df23fb5f

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
8a08bf95c78bf3f1ba3f36616d9bb581

SHA1
1aac8186f376d59684d7462e4f8e0a98494fa7da

SHA256
3a654e6f76397113ebde198fdea0738124aa6ad1bdcf604be0e303689ab2cbea

SHA512
82c4399f36e7c8cb790f4495a2b5ddfb8f61f44319102d59dd77ee0d5522a9088aa0b38e86a2d03d8c2c07bd30d103c4277946b1b1bc66f90d17893506a3b4c7

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
4cca299786028771f81f76d2c8cf2eb6

SHA1
e475afddad2af29b02cd70281c834bcdaf12e4df

SHA256
324014b0ad34a853196650fa9a9f1fba91f597f7d7038f144561d68524edc53d

SHA512
95e156f0e55af7aa6887857f0c54e466ff5f26e802043e717f7e7a0bbc83840d7d745a7b9871e2ef445c85b0d1e482f5d75b2d2ed44aff6bb9da2537b0df584a

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
1303a6059dbb5cf8e0bc8b522cb8f64c

SHA1
dc8ba9cf86f26a7100357168b5c03ee38947fdf3

SHA256
876c4d0b3687c9f83af397764549e9c171380c9a01e8db827f4ba80777a4b181

SHA512
ff389d28f0b6104c9bc373df58ec2cd4e72b2eb577e131cffa00ccb38e238b548dbdc8419cb9677e232c686ce0c02d5fcc215e602357151ecf749b2e6fc0e6a0

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
67cf77c1307e4f93d0391154a7253c39

SHA1
845455ba88ba4a061af32f7eee2bbddeb56cd4fa

SHA256
8fad1cd7cbe56c9bea36e7c7b36c2901c492bb8e8ef1a3f9f00147fb48b05fa3

SHA512
d57fdfaa5ad3cb400207bea5d1f1f5635709821da7a1d9fb5f5ea600803a57a3fdf4c820cc36d61545476aa6b45164a5b95ce4c780f7dd99c518bd8b5815a547

Download Submit