Resubmissions

02/12/2024, 04:58

241202-flyd5s1jex10

15/11/2024, 02:01

241115-cfxc4swlhv10

Analysis

  • max time kernel
    117s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/12/2024, 04:58

General

  • Target
    0A6172B017F62EAA.exe
  • Size 137KB
  • Sample241202-flyd5s1jex
  • SHA256 a75d6bf3c8cf0fc45b368bd83200d141319c9c67033803a230bd3451a309edff
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Path
  • C:\ProgramData\biobio ransmoware.txt

Ransom Note
  • kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: 0A6172B017F62EAA

Signatures

  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Renames multiple (11293) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Interacts with shadow copies 3 TTPs 2 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 10 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe
    "C:\Users\Admin\AppData\Local\Temp\0A6172B017F62EAA.exe"
    1⤵
    • Checks computer location settings
    • Enumerates connected drives
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:116
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4448
      • C:\Windows\system32\vssadmin.exe
        vssadmin.exe delete shadows /all /quiet
        3⤵
        • Interacts with shadow copies
        PID:3856
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4056
      • C:\Windows\system32\vssadmin.exe
        vssadmin.exe delete shadows /all /quiet
        3⤵
        • Interacts with shadow copies
        PID:1016
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3368
  • C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
    "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
    1⤵
      PID:4656
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
      1⤵
        PID:3400
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:3848

      Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            InkObj.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui
            • Size 5KB
            • SHA256 a5cc340a13bf1f0d6b34770969af85a5c6323f75b89db3ecec91fb71c73df63a
            • MD5 SHA1 SHA512 SSDEEP

            TipRes.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui
            • Size 27KB
            • SHA256 894c155b8eb7a53975300aa149b9f605f282131d4a79324021c9bc9e648a3ca7
            • MD5 SHA1 SHA512 SSDEEP

            TipTsf.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui
            • Size 3KB
            • SHA256 0fba3dc6e92df08b3dc8e83517c62d6c21b79eed8c422d20e9f4c347f1abaf47
            • MD5 SHA1 SHA512

            rtscom.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui
            • Size 3KB
            • SHA256 630ccb530445373354a530634dd920b1dccebce7fdcd839dde9bd41f0f0f87ea
            • MD5 SHA1 SHA512

            InkObj.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui
            • Size 5KB
            • SHA256 92e28f2e72722bb2d38783890a96f183742f7c8c67e53d67b104e5ca9435654d
            • MD5 SHA1 SHA512 SSDEEP

            TipRes.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui
            • Size 24KB
            • SHA256 ebdbeb6cf5bc96be496277a8e7d99c30a0eb992e773847708b9fc0c18fbcc999
            • MD5 SHA1 SHA512 SSDEEP

            TipTsf.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui
            • Size 3KB
            • SHA256 f28d9ae57eaad439644412616cf627ac04d7808cbeb81e0d17d599f95f1ea8c8
            • MD5 SHA1 SHA512

            micaut.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui
            • Size 9KB
            • SHA256 fa7e61ae415b99661f177cab3371b87081973161e2baec663788ee088062c983
            • MD5 SHA1 SHA512 SSDEEP

            rtscom.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui
            • Size 3KB
            • SHA256 76c1735b8c542f8a7e2f5fc02df4a881edba8ee34f9575894b363c14bd712b8a
            • MD5 SHA1 SHA512

            InkObj.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui
            • Size 5KB
            • SHA256 ddd03b1d636cec0714cdc74e3f2bb3778134aca6db4cee06c271f2ac88e0b253
            • MD5 SHA1 SHA512 SSDEEP

            TipRes.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui
            • Size 27KB
            • SHA256 54f31a698b0848f9ce6d3a647a4f5299214558514fdeeb5e0ace4207d9049703
            • MD5 SHA1 SHA512 SSDEEP

            TipTsf.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui
            • Size 3KB
            • SHA256 170f80814018fe5838d27652b31f9a4dfbdbe3b4551168ffc2f0cd5edd09928a
            • MD5 SHA1 SHA512

            rtscom.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui
            • Size 3KB
            • SHA256 810df2d3b9f5778ecf3be0c33be2fca9a1310eb85050d381902dccbad2b378e1
            • MD5 SHA1 SHA512

            InkObj.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui
            • Size 5KB
            • SHA256 99518ae44c67c2fc359e5a852baa39c9f2f1b8658c2b4ac88704e66006381408
            • MD5 SHA1 SHA512 SSDEEP

            TipRes.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui
            • Size 27KB
            • SHA256 ca292ff9737646a1c2563ef29ec1948d3b488e010182dee2db847725888807c0
            • MD5 SHA1 SHA512 SSDEEP

            TipTsf.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui
            • Size 3KB
            • SHA256 85fbf418b3a25f8415e84623c4e795be4ba43994d5a9a5685dbfad5345137768
            • MD5 SHA1 SHA512

            rtscom.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui
            • Size 3KB
            • SHA256 a8d28133b21874aee11f1e74a01c4c969160eb1110831677190ca5decdb22c5f
            • MD5 SHA1 SHA512

            InkObj.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui
            • Size 5KB
            • SHA256 de9243690c8b0977118587ad67b1675b1b9d5435c52814dfedee43bd4d3806de
            • MD5 SHA1 SHA512 SSDEEP

            TipRes.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui
            • Size 27KB
            • SHA256 35a9afbe20d9f6fae765a3415b8dd19c47c4b10cd580ff96a7831e296012760c
            • MD5 SHA1 SHA512 SSDEEP

            TipTsf.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui
            • Size 3KB
            • SHA256 776bf0aaa8fd30d43f7c57a3d21acb5b5dc6d81782724beb692505a4be43f6c2
            • MD5 SHA1 SHA512

            rtscom.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui
            • Size 3KB
            • SHA256 a5e297b0c27119d95d7d3d6fe5847d20c0f0b438e81d5b4656c26d4e60d312a2
            • MD5 SHA1 SHA512

            InkObj.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui
            • Size 4KB
            • SHA256 38a76e77d1abdc773295eb608f2ef0d3cd7e2617983fa6b7890009bfe0a73ef7
            • MD5 SHA1 SHA512 SSDEEP

            TipRes.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui
            • Size 16KB
            • SHA256 161909f86b0f1f2f4696062fe95b2f423abbf02432e424fe5983c1739568cf6e
            • MD5 SHA1 SHA512 SSDEEP

            TipTsf.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui
            • Size 3KB
            • SHA256 e4c0bde8e84d67fa4cd58f71a187f77d846fbab3b5f9cf216257f80c79ad88fe
            • MD5 SHA1 SHA512

            rtscom.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui
            • Size 3KB
            • SHA256 27dd2a581d07421c438bdb38ec6e8f3987f00a24ca4b01e95959babc86154f71
            • MD5 SHA1 SHA512

            TipRes.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui
            • Size 26KB
            • SHA256 5dc855e4bbb94740d34633473e5dd6ab8a5b4556e3028abcc1c3e1435d8e446b
            • MD5 SHA1 SHA512 SSDEEP

            TipTsf.dll.mui

            • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui
            • Size 3KB
            • SHA256 83a5aa6d05c7699ceb3d2dcadd3fb0c116a3031153e0e9ea252705f9ebe7b570
            • MD5 SHA1 SHA512

            oledb32r.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui
            • Size 56KB
            • SHA256 87135df33f0af7923f63ff26a8b41e50dc60377d1bad3386562dab7182708fd2
            • MD5 SHA1 SHA512 SSDEEP

            sqloledb.rll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui
            • Size 47KB
            • SHA256 c286c8324aa75d2ad4be65b5c496aa51f23e7af422e1ab18776b661f6733af79
            • MD5 SHA1 SHA512 SSDEEP

            oledb32r.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui
            • Size 47KB
            • SHA256 d9898ce7287e5ff07cc675686235c2d10d50f11f69cfc72ea082b20f899ca672
            • MD5 SHA1 SHA512 SSDEEP

            sqloledb.rll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui
            • Size 43KB
            • SHA256 cdcaeadbc356e8985835aa6b17099121e2bdd12f01c7b7f8f107bcce294c32bf
            • MD5 SHA1 SHA512 SSDEEP

            oledb32r.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui
            • Size 53KB
            • SHA256 92a99c020872d8c031d33e38161a5e981106f54440167892dc1b601356ba732d
            • MD5 SHA1 SHA512 SSDEEP

            sqloledb.rll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui
            • Size 47KB
            • SHA256 4e49ac294413559ab9249f2d7e3c75caf332d7c9ef3a5787359e94fa63f51a9a
            • MD5 SHA1 SHA512 SSDEEP

            oledb32r.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui
            • Size 57KB
            • SHA256 37acd80c4dbb084cf4698f932a2503d09e29e09495e0c1040d5559b43368b05e
            • MD5 SHA1 SHA512 SSDEEP

            sqloledb.rll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui
            • Size 47KB
            • SHA256 6de562698a91eb04872f50569985491006d0ac02308dfa71d84c4afe5670999e
            • MD5 SHA1 SHA512 SSDEEP

            oledb32r.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui
            • Size 54KB
            • SHA256 143446703fb708603fac9717f1d611eb48e8d38ffcca1073ab9214722a78cf82
            • MD5 SHA1 SHA512 SSDEEP

            sqloledb.rll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui
            • Size 47KB
            • SHA256 5dddb671e88065bf39970c03c2596fdd2c134e20093e6e36f59809a83aa04a96
            • MD5 SHA1 SHA512 SSDEEP

            oledb32r.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui
            • Size 32KB
            • SHA256 659d143ad9e19309e94c78bbaf87f87d78f379fc06d3b52b7a564bd2748445f4
            • MD5 SHA1 SHA512 SSDEEP

            sqloledb.rll.mui

            • Path C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui
            • Size 37KB
            • SHA256 6c83bedd873f978b593a0a99d02d83d7d1e591b1ef35c07bf848a4b8157d53f0
            • MD5 SHA1 SHA512 SSDEEP

            msader15.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui
            • Size 20KB
            • SHA256 b3c428fa87eaa69729464841552b7ae4f1e55704253bd16affc409b5fbe0892e
            • MD5 SHA1 SHA512 SSDEEP

            msader15.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui
            • Size 17KB
            • SHA256 5ada9e00637c9d08d56948d69dc7253c3d107b315d9c538f7755227bedfc71e6
            • MD5 SHA1 SHA512 SSDEEP

            msader15.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui
            • Size 19KB
            • SHA256 a722ee8ddead67a9102e982ed82099820fad2e1eeb58726d13696b370f932d59
            • MD5 SHA1 SHA512 SSDEEP

            msader15.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui
            • Size 20KB
            • SHA256 96333b88ea48f025e8e25df994b338ebc49d4fb2d97bd819a6be628deefc9d86
            • MD5 SHA1 SHA512 SSDEEP

            msader15.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui
            • Size 19KB
            • SHA256 fcf463039c9f9bd1649467134796b3204f23a73d4ea4e970f44a5e44aec8b0e2
            • MD5 SHA1 SHA512 SSDEEP

            msader15.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui
            • Size 11KB
            • SHA256 cfcd58b2a69d07b8a1babd3b0374a85a96908ec518de401b317f8b42c2c05d90
            • MD5 SHA1 SHA512 SSDEEP

            wab32res.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui
            • Size 102KB
            • SHA256 aaa649e66b80aeeabd64e9c842eb3c6501610d87e4a69ad8521bbad9f35db75c
            • MD5 SHA1 SHA512 SSDEEP

            wab32res.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui
            • Size 92KB
            • SHA256 51bcd4ce03ea57a43a3ee62998d3d6d9eee2ebf337f9b9ab3085b6da1a1e9103
            • MD5 SHA1 SHA512 SSDEEP

            wab32res.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui
            • Size 102KB
            • SHA256 0cfcd79a441a8d6c6d520f5a264a66756631433cea328489321bef4be76ef17c
            • MD5 SHA1 SHA512 SSDEEP

            wab32res.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui
            • Size 104KB
            • SHA256 6c2176882945f267ddaafb43d2021977d707810e936902577825243015e29109
            • MD5 SHA1 SHA512 SSDEEP

            wab32res.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui
            • Size 97KB
            • SHA256 24005a184e5df0a3be1f4eb1c98b52b323edaebc46f6d3aceca4f99702137b7c
            • MD5 SHA1 SHA512 SSDEEP

            wab32res.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui
            • Size 69KB
            • SHA256 4b751e6c08eb857a442d178ab5d6fa23121f8a1325cbb87fcbd6bebc2b859e56
            • MD5 SHA1 SHA512 SSDEEP

            msadcer.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui
            • Size 12KB
            • SHA256 f646e8556ce162e12bb859718459839b40397f1178bf4c9ec28e67dab60bfcc7
            • MD5 SHA1 SHA512 SSDEEP

            msdaprsr.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui
            • Size 9KB
            • SHA256 71e3578935e141b4ea9d7978365911d7b2304b3fc179f6cb21e445c793bed899
            • MD5 SHA1 SHA512 SSDEEP

            msadcer.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui
            • Size 10KB
            • SHA256 f4c9222db2e1d4283e244e0e6bc41fd85edcbc7f545673523457589e76bd3001
            • MD5 SHA1 SHA512 SSDEEP

            msdaprsr.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui
            • Size 7KB
            • SHA256 e645d7e400cf3d4fd937b53f1ccf180825f4b8e208e8780dc7aba15a5dbb3997
            • MD5 SHA1 SHA512 SSDEEP

            msadcer.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui
            • Size 11KB
            • SHA256 3b841dd4b762d3263013818d1c97906ce8763bd44c82a3bb1633b497260b48a8
            • MD5 SHA1 SHA512 SSDEEP

            msdaprsr.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui
            • Size 8KB
            • SHA256 8c398cb2f632bd23aa392b6cd7e46c152149cf1cb5fcf8c5aff38b9918f8a716
            • MD5 SHA1 SHA512 SSDEEP

            msadcer.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui
            • Size 12KB
            • SHA256 8e0f88b69ec3962a2fe8e801174abadcae7aeb0c830ad28dbafa0d3ee293bd44
            • MD5 SHA1 SHA512 SSDEEP

            msdaprsr.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui
            • Size 9KB
            • SHA256 0d39409ab15cb54d992eb8e1914f719c4ff02a42f26157d9fc09b44ab565efc4
            • MD5 SHA1 SHA512 SSDEEP

            msadcer.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui
            • Size 11KB
            • SHA256 9c42c2fc812fc9d35b671c92dc1ad465724dbe9204145dbcf39d2902a4574106
            • MD5 SHA1 SHA512 SSDEEP

            msdaprsr.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui
            • Size 9KB
            • SHA256 16d099eb4bd613bcbec1153cce35249e17d88118e25c950c75f0be818c82a47f
            • MD5 SHA1 SHA512 SSDEEP

            msadcer.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui
            • Size 6KB
            • SHA256 ec36c8dc9a60277cbb8743ef6697cfe51398b5c1560342809fa6e4dc37e039a9
            • MD5 SHA1 SHA512 SSDEEP

            msdaprsr.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui
            • Size 6KB
            • SHA256 839f991ec4793143455c455b2f727acae84237105bac7c1595d4b3f48f2b110a
            • MD5 SHA1 SHA512 SSDEEP

            wab32res.dll.mui

            • Path C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui
            • Size 94KB
            • SHA256 09799a87b702cd256ff1d20fccf48957d5ba8d2cbb827c1a216ed1e2166ac417
            • MD5 SHA1 SHA512 SSDEEP

            iexplore.exe.mui

            • Path C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui
            • Size 6KB
            • SHA256 2aac4e94ff80e328292c42aae76e5d5f0c0d5c5a7f4f322277f5459a94509b25
            • MD5 SHA1 SHA512 SSDEEP

            iexplore.exe.mui

            • Path C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
            • Size 5KB
            • SHA256 c219bda7f4302c54e8d43a88b19c20a26fbdb28219b85c37d2c7d8a113ec682a
            • MD5 SHA1 SHA512 SSDEEP

            iexplore.exe.mui

            • Path C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui
            • Size 6KB
            • SHA256 9af9b7ac0e916c0f51b97100321b7c88976b677cd486d539b455ccb17670284f
            • MD5 SHA1 SHA512 SSDEEP

            iexplore.exe.mui

            • Path C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui
            • Size 6KB
            • SHA256 60593a59347796ce16dab903afe9811b3d73936ada1532e8c9bc0ef35e2fb0da
            • MD5 SHA1 SHA512 SSDEEP

            iexplore.exe.mui

            • Path C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui
            • Size 6KB
            • SHA256 7f4e4b23e951f54ac1115aa2a388f175cbaf398f102cfc72c419d88339d113f3
            • MD5 SHA1 SHA512 SSDEEP

            iexplore.exe.mui

            • Path C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui
            • Size 5KB
            • SHA256 6dfcb23df0d9e740815d40f9af213f56d55a196abf3b45d84245403f87285d12
            • MD5 SHA1 SHA512 SSDEEP

            iexplore.exe.mui

            • Path C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui
            • Size 6KB
            • SHA256 60df1260dfc310dd56cf1a4c6c566495bee8676acf6d248f97801495a0865608
            • MD5 SHA1 SHA512 SSDEEP

            EppManifest.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui
            • Size 2KB
            • SHA256 d2f1696614b8da1dfb9a852da88263aab30c9624dc5e4793a9ba6402e43c04c7
            • MD5 SHA1 SHA512

            MpAsDesc.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui
            • Size 60KB
            • SHA256 ada5a66596d40af30148ad2d69262099b8ad964ab9b2be76f88f08025657328f
            • MD5 SHA1 SHA512 SSDEEP

            EppManifest.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui
            • Size 3KB
            • SHA256 83f3c094d73ff2cb1bcdbc5e354c85f7f52b6f0fed21b517763ec3ae370e1a3c
            • MD5 SHA1 SHA512

            MpAsDesc.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui
            • Size 58KB
            • SHA256 08248f58dfc2b08cca98d84237c6e73dabcff6e068f1079a766d25fd53b14681
            • MD5 SHA1 SHA512 SSDEEP

            EppManifest.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui
            • Size 3KB
            • SHA256 d34ab06323e374c165692de687c062742c59434f8198026cd33b47bfa3edf878
            • MD5 SHA1 SHA512

            MpAsDesc.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui
            • Size 61KB
            • SHA256 23d396240013b2cf43f408b5fcb41c2d7fa4fd81cf52265c4858e5807cbeb5d0
            • MD5 SHA1 SHA512 SSDEEP

            EppManifest.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui
            • Size 2KB
            • SHA256 60cbf80fcb97151ed569e330d3bbfea09293480592491316b4f704aa961d3d8e
            • MD5 SHA1 SHA512

            MpAsDesc.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui
            • Size 57KB
            • SHA256 7b4e9ba10746c0362d0fe753a5ba04e09782282a81af9d1b2b8776750b88bc1e
            • MD5 SHA1 SHA512 SSDEEP

            EppManifest.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui
            • Size 2KB
            • SHA256 24b9da2ba77a7052fe1728d193e712f9f6aaf90993d922906f0eb886aa0f4a0c
            • MD5 SHA1 SHA512

            MpAsDesc.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui
            • Size 31KB
            • SHA256 1dac7e3186472e84164dc5909b0299abbd84d06ea1d464e397c705e634b5def4
            • MD5 SHA1 SHA512 SSDEEP

            EppManifest.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui
            • Size 3KB
            • SHA256 d7045d111d9ae0a13418b052d3ae61c03c49e9717119c9ec98bb019c88bad12a
            • MD5 SHA1 SHA512

            MpAsDesc.dll.mui

            • Path C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui
            • Size 56KB
            • SHA256 083bb851bc796bf5cc31743fcedc575543955f25adcdb445457a4ad31efa54c9
            • MD5 SHA1 SHA512 SSDEEP

            WMPMediaSharing.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui
            • Size 3KB
            • SHA256 6b712794cdbe456b41edb8a231f698afb5c10bed2f3840a1c131387f014d429c
            • MD5 SHA1 SHA512

            mpvis.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui
            • Size 3KB
            • SHA256 4c7fc4fb60eb806d44de390f2dfc956f074410a7f2f83c379ffefd3c6ddb1af8
            • MD5 SHA1 SHA512

            setup_wm.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui
            • Size 61KB
            • SHA256 d7532c664f22dbaf7572e0d82eb411e75611bee22eaba11af4e54e1207c1dc50
            • MD5 SHA1 SHA512 SSDEEP

            wmlaunch.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui
            • Size 2KB
            • SHA256 4bd0313a80c7d34d53b611a056a728a910d1fc7d9e0d817075f9edf60463da7d
            • MD5 SHA1 SHA512

            wmplayer.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui
            • Size 3KB
            • SHA256 966dc49eae07fe08fbe4cee6d8073a1cf9a46583e3c115fb9a89b780cd79ac9d
            • MD5 SHA1 SHA512

            wmpnssci.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui
            • Size 4KB
            • SHA256 9f22ae1842dadc6ebc15d44f998600c49ab4adbdce64ad353806e44c1f2de884
            • MD5 SHA1 SHA512 SSDEEP

            wmpnssui.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui
            • Size 3KB
            • SHA256 781f615f06bbcaf18e6890eeba1a78613bf97c9172d4df23959a77039f044d34
            • MD5 SHA1 SHA512

            WMPMediaSharing.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui
            • Size 3KB
            • SHA256 75e1a4381af44e875c5436bb4bc4bc37fce49c1d6552c75beb9bb9809759496f
            • MD5 SHA1 SHA512

            mpvis.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui
            • Size 3KB
            • SHA256 606da04158f84a448c0c9634606d710c0c4e662a76f2383871fcb072ea10861a
            • MD5 SHA1 SHA512

            setup_wm.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui
            • Size 53KB
            • SHA256 616bc6aae618da98116fd553abdb0527f9df16dca62d4941ce5c25046a0f7595
            • MD5 SHA1 SHA512 SSDEEP

            wmplayer.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui
            • Size 3KB
            • SHA256 792bde5afd2b41de261841c68be359aeafd5f99b8d3ff070b53437519b9d6a60
            • MD5 SHA1 SHA512

            wmpnssci.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui
            • Size 4KB
            • SHA256 e3bdb0d152edc0c7c3193dec48b0cd0c5e22c589df81879c954f4e1d1fa2270b
            • MD5 SHA1 SHA512 SSDEEP

            wmpnssui.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui
            • Size 3KB
            • SHA256 2877d5d37e5e94c9a851dd27580d455bb23936b7e37d04bc3b02eeabb8aafcbc
            • MD5 SHA1 SHA512

            WMPMediaSharing.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui
            • Size 3KB
            • SHA256 66ed0b91dc7cf7d53893c5f583211a76ec963b9b4c0ea292ab7b0dda60920c23
            • MD5 SHA1 SHA512

            mpvis.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui
            • Size 3KB
            • SHA256 0230fb74bb827e57990d44608800bf8fd35cea0ee3ee2b2bf53225b878795721
            • MD5 SHA1 SHA512

            setup_wm.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui
            • Size 62KB
            • SHA256 4d2c7b5319247a9ee1663180af9bba836a63e064dffa38c5323e0ee6099e67ec
            • MD5 SHA1 SHA512 SSDEEP

            wmlaunch.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui
            • Size 2KB
            • SHA256 4303b04c036f3bca27c0f41ef4e868f605d00d6b5636cbe88733f3a360f95521
            • MD5 SHA1 SHA512

            wmplayer.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui
            • Size 3KB
            • SHA256 be23d0eb53b96f77b9646ab17dd973bbaf18503388e22cf95ae8519c2569ad23
            • MD5 SHA1 SHA512

            wmpnssci.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui
            • Size 4KB
            • SHA256 7d2137704e76face17a1f8201d26bf49df39ee912bd8ccde731f613f32bc3cad
            • MD5 SHA1 SHA512 SSDEEP

            wmpnssui.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui
            • Size 3KB
            • SHA256 17a266eda9219523833a6b45552c027ba1c89c7f2db290eec754a327547cb713
            • MD5 SHA1 SHA512

            WMPMediaSharing.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui
            • Size 3KB
            • SHA256 40c6b4f27d08e781b1c768325936c559e076c4b36987c58de087c1f37bdb0bb7
            • MD5 SHA1 SHA512

            mpvis.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui
            • Size 3KB
            • SHA256 60ff9cbfaf9f80296a66ce083767c2a2ddfb61ae4318eaaf38f10e6adef7c5cc
            • MD5 SHA1 SHA512

            setup_wm.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui
            • Size 63KB
            • SHA256 da47a97f7ca035b5c3ec6a6539bca9343195edcc3eaa7346d2966ea8da285286
            • MD5 SHA1 SHA512 SSDEEP

            wmlaunch.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui
            • Size 2KB
            • SHA256 1ed0ef8794e0c0f50ea50c337136117e20ce37fec03d8685a15a4e38c88846fd
            • MD5 SHA1 SHA512

            wmplayer.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui
            • Size 3KB
            • SHA256 d7ff1f4e8652778733f695ab2082848c42570b05aa3c897da82f80d2b56abde4
            • MD5 SHA1 SHA512

            wmpnssci.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui
            • Size 4KB
            • SHA256 e98f6052e5188ad30a4462d3de46897b396a4bd0da2289b235cbfb033f49f746
            • MD5 SHA1 SHA512 SSDEEP

            wmpnssui.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui
            • Size 3KB
            • SHA256 0dd19fda4395de31ee201634da65dbcbe2d7d0fba89cbd7b0f722e5825919766
            • MD5 SHA1 SHA512

            WMPMediaSharing.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui
            • Size 3KB
            • SHA256 6f8ab5b6ea67e1d3717c6c726a3fc3e6b754d20745bdf7bf3928cc4ec392d204
            • MD5 SHA1 SHA512

            mpvis.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui
            • Size 3KB
            • SHA256 dfc63ae5eb7c787d71296b446c1ce6d9aa66512803392db188221803617bd28e
            • MD5 SHA1 SHA512

            setup_wm.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui
            • Size 61KB
            • SHA256 bf4f39fa77b02921eaae1d1e1a60ad0ecc67022c2ea230ad06f737693c35b8e2
            • MD5 SHA1 SHA512 SSDEEP

            wmlaunch.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui
            • Size 2KB
            • SHA256 99796cf33ef336460466c520929e393722ce3caa2dc3c84e3a7b3b91bed5d2b3
            • MD5 SHA1 SHA512

            wmplayer.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui
            • Size 3KB
            • SHA256 76a796fe73a9189616bf79575369239f3c14b4d8755f323f184d564fa998ba4f
            • MD5 SHA1 SHA512

            wmpnssci.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui
            • Size 4KB
            • SHA256 b33d5f5e4532539d0eb6c977e1667c1393c6d6dc050fd88c534741831f398dce
            • MD5 SHA1 SHA512 SSDEEP

            wmpnssui.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui
            • Size 3KB
            • SHA256 0cee05896dde8b84a195eed23aeb0b8fad2f3b9d1684355c543e3954eb829793
            • MD5 SHA1 SHA512

            WMPMediaSharing.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui
            • Size 3KB
            • SHA256 f2a93aaab610875ef7bafeae79c4cfc146193670a63b71fb05e7249181533e97
            • MD5 SHA1 SHA512

            mpvis.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui
            • Size 3KB
            • SHA256 558cfbe0be3c44c80e3b7660afaa4fafcc0540b41afbadd132ed4a800b834e85
            • MD5 SHA1 SHA512

            setup_wm.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui
            • Size 40KB
            • SHA256 058f3839568c1be3cdb6a6c0074e2a8c1bde8bc73d4adcebe692ab001fa77586
            • MD5 SHA1 SHA512 SSDEEP

            wmlaunch.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui
            • Size 2KB
            • SHA256 f86c818a78b4fcd11f547d21e042b636dff63eaa1c1a2a556bbe414ff6b81440
            • MD5 SHA1 SHA512

            wmplayer.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui
            • Size 3KB
            • SHA256 549e57cb5a8c9ca1c8912769a6e1d0bc92f894ad7530707f2ce2cce8874607a0
            • MD5 SHA1 SHA512

            wmpnssci.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui
            • Size 4KB
            • SHA256 5fc2a5ef8a25a789092c3af8d566cc5c7038b3118450a4d7e0fb3ddbe4947c93
            • MD5 SHA1 SHA512 SSDEEP

            wmpnssui.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui
            • Size 3KB
            • SHA256 aa37ee050121ea4696cb718ebc3830fe5b00652d237000657936a723f9af0d14
            • MD5 SHA1 SHA512

            mpvis.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui
            • Size 3KB
            • SHA256 0c256b5e288f894b93be3ff11062ead65b7ac383f8ec601f676884d58d37bb73
            • MD5 SHA1 SHA512

            setup_wm.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui
            • Size 56KB
            • SHA256 bebe16cc20924dbce631488e8ccdb22a7850026f65eff9fd98b42099ee7437ec
            • MD5 SHA1 SHA512 SSDEEP

            wmlaunch.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui
            • Size 2KB
            • SHA256 e4f92e0a49293b4fa4cd0bdbfc987529cea21ddaf4799294803aa9335afbafcf
            • MD5 SHA1 SHA512

            wmplayer.exe.mui

            • Path C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui
            • Size 3KB
            • SHA256 7fa86a72f7fe9a1b77e1b8f5fc313c0c258fa76acdbaf8f7d83836f48073af23
            • MD5 SHA1 SHA512

            wmpnssci.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui
            • Size 4KB
            • SHA256 5a5f35d6b9a6fbcd1461e2e29145df7a5d284aff09124ee2e7e71e1632ade3e4
            • MD5 SHA1 SHA512 SSDEEP

            wmpnssui.dll.mui

            • Path C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui
            • Size 3KB
            • SHA256 63628b229879f54032f340b2709a6821d7e57a677cce7851843686e6e883a20c
            • MD5 SHA1 SHA512

            PhotoViewer.dll.mui

            • Path C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui
            • Size 18KB
            • SHA256 fff2f396c7dbc3fdee5a604ec5ca3ae1e17dac3cacf298426de220cb9a601a23
            • MD5 SHA1 SHA512 SSDEEP

            PhotoViewer.dll.mui

            • Path C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui
            • Size 16KB
            • SHA256 d467baa6555e01c58aa5ff3b57f0e5522f8233da325912fc6dfa64a0c26234c9
            • MD5 SHA1 SHA512 SSDEEP

            PhotoViewer.dll.mui

            • Path C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui
            • Size 18KB
            • SHA256 eeedeead1c687f1a2255f334e9e90374df367a65a91bccebc8323b3bbe439f1f
            • MD5 SHA1 SHA512 SSDEEP

            PhotoViewer.dll.mui

            • Path C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui
            • Size 19KB
            • SHA256 6c3347941030003c834a714793488cd0e398bfaf0a38a629a0523073bb1c78f4
            • MD5 SHA1 SHA512 SSDEEP

            PhotoViewer.dll.mui

            • Path C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui
            • Size 18KB
            • SHA256 9f4137f2a9a3a68922692988646dca5fdc04ce230b50720dfc46cb8ac9f8dad3
            • MD5 SHA1 SHA512 SSDEEP

            PhotoViewer.dll.mui

            • Path C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui
            • Size 11KB
            • SHA256 8dfc1b70b0755cdf7899c935c93248b70ae0589e313eae20090f4b51e3b88d8d
            • MD5 SHA1 SHA512 SSDEEP

            PhotoViewer.dll.mui

            • Path C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui
            • Size 17KB
            • SHA256 13ef1e8d1cf45036ee7a9a1d9b05d16dfe94bc18ca1c56edd2b9042b7c76010a
            • MD5 SHA1 SHA512 SSDEEP

            biobio ransmoware.txt

            • Path C:\ProgramData\biobio ransmoware.txt
            • Size 402B
            • SHA256 20a5f1f3bb4614433712df1ffc67273465e766191502b8e932321f1f24fea65d
            • MD5 SHA1 SHA512

            StartUnifiedTileModelCache.dat

            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat
            • Size 13KB
            • SHA256 47c4c606547ed578741b498eeba643d1f33b76b76629c6b59f4e0e422e440960
            • MD5 SHA1 SHA512 SSDEEP

            StartUnifiedTileModelCache.dat

            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat
            • Size 13KB
            • SHA256 8933465438adc5c5193eb7fbadd6c6e7565d2d460fa517d0bc8f21cee49f4a65
            • MD5 SHA1 SHA512 SSDEEP