0461e6e8f234e00307331dae19d3512950bbf3cdf7a1ec32802dff62cc14c90c

Analysis

max time kernel
123s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2024 05:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CC3B1F89FAA517E4.exe
Size

137KB
MD5

4aed4c0e78d355e497f2cc509ff078b5
SHA1

31a2ccfd5a679d2badc5fb66f243d4887d9ca444
SHA256

ed4e298040946a3be24dcde8303216644c2d2b78444bb1c9bfc7d17c748aeaa5
SHA512

bb251af369bd2662caef94ee96147439a75307dbfc30e2b2a63fad75af597e7981c41daec8cedb4326fb0243abbce2b681153380ccec79a38095022b85d4a804
SSDEEP

3072:CLIQ8YzXEMZK1A2czbFk58x+o+EFz9/t2f65q8hv2bIoKb:CstYrEMw6Bxk5zOFNtgJSCUb

Score

10^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Extracted

Path

C:\ProgramData\biobio ransmoware.txt

Ransom Note

kasper Ransmoware ATTENTION! At the moment, your system is not protected. We can fix itand restore files. To get started, send a file to decrypt trial. You can trust us after opening the test file. 2.Do not use free programs to unlock. To restore the system write to both : [email protected] and [email protected] Telegram id:@biobiorans Your Decryption ID: CC3B1F89FAA517E4

Emails

[email protected]

Signatures

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (11273) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000\Control Panel\International\Geo\Nation	CC3B1F89FAA517E4.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	CC3B1F89FAA517E4.exe
File opened (read-only)	\??\D:	CC3B1F89FAA517E4.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_ie8.gif	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\NL7MODELS000A.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File created	C:\Program Files\VideoLAN\VLC\locale\es\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.scale-125_contrast-white.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-ppd.xrm-ms.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-40.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\JavaAccessBridge-64.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\System\vccorlib110.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-black\SmallTile.scale-100.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\progress.gif.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-time-l1-1-0.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PersonalDemoR_BypassTrial180-ul-oob.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\share_icons.png.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\COMPASS\PREVIEW.GIF	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\themes\dark\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailAppList.targetsize-64.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Coverage.Tests.ps1	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fi-fi\ui-strings.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-convert-l1-1-0.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\UIAutomationClientSideProviders.resources.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\AppPackageSplashScreen.scale-100_contrast-white.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\plugin.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\ro-ro\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\images\FileText32x32.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailMediumTile.scale-400.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\js\controllers.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\NETWORK\THMBNAIL.PNG.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosSmallTile.scale-200.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.WebSockets.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Globalization.Calendars.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Xml.XmlSerializer.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\example_icons.png	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\nl-nl\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\nb-no\ui-strings.js	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-ul-oob.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailLargeTile.scale-400.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\181.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\sv-se\ui-strings.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Dynamic.Runtime.dll.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\EScript.api.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\gl-ES\View3d\3DViewerProductDescription-universal.xml	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-pl.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.DataIntegration.FuzzyMatchingCommon.dll	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailSplashLogo.scale-400.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\vlc.mo.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AFTRNOON\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\en-ae\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_KMS_Client-ul.xrm-ms	CC3B1F89FAA517E4.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-200_8wekyb3d8bbwe\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\sl-si\ui-strings.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\images\FilePdf32x32.png	CC3B1F89FAA517E4.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\biobio ransmoware.txt	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.50.6001.0_x64__8wekyb3d8bbwe\Assets\ValueProp_Ring.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-72_altform-lightunplated.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEODATA.DLL	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEXBE.DLL.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-ppd.xrm-ms	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNotePageSmallTile.scale-125.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover.png	CC3B1F89FAA517E4.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ko-kr\ui-strings.js.EMAIL=[[email protected]]ID=[CC3B1F89FAA517E4].biobio	CC3B1F89FAA517E4.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CC3B1F89FAA517E4.exe

Interacts with shadow copies 3 TTPs 2 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
2588	vssadmin.exe
4880	vssadmin.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe
2976	CC3B1F89FAA517E4.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	2976	CC3B1F89FAA517E4.exe
Token: SeRestorePrivilege	2976	CC3B1F89FAA517E4.exe
Token: SeBackupPrivilege	2976	CC3B1F89FAA517E4.exe
Token: SeTakeOwnershipPrivilege	2976	CC3B1F89FAA517E4.exe
Token: SeAuditPrivilege	2976	CC3B1F89FAA517E4.exe
Token: SeSecurityPrivilege	2976	CC3B1F89FAA517E4.exe
Token: SeIncBasePriorityPrivilege	2976	CC3B1F89FAA517E4.exe
Token: SeBackupPrivilege	1100	vssvc.exe
Token: SeRestorePrivilege	1100	vssvc.exe
Token: SeAuditPrivilege	1100	vssvc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3476	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 804	2976	CC3B1F89FAA517E4.exe	84
PID 2976 wrote to memory of 804	2976	CC3B1F89FAA517E4.exe	84
PID 804 wrote to memory of 2588	804	cmd.exe	86
PID 804 wrote to memory of 2588	804	cmd.exe	86
PID 2976 wrote to memory of 3176	2976	CC3B1F89FAA517E4.exe	114
PID 2976 wrote to memory of 3176	2976	CC3B1F89FAA517E4.exe	114
PID 3176 wrote to memory of 4880	3176	cmd.exe	116
PID 3176 wrote to memory of 4880	3176	cmd.exe	116

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\CC3B1F89FAA517E4.exe
"C:\Users\Admin\AppData\Local\Temp\CC3B1F89FAA517E4.exe"
1⤵
- Checks computer location settings
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:804
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:2588
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3176
- - C:\Windows\system32\vssadmin.exe
    vssadmin.exe delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:4880

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1100

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
PID:4020

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
1⤵
PID:4692

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
0524f5f770ca83973253b9c06a5c08c6

SHA1
67e084a35255034ba2db5f50ba68d5a0cd2c8e70

SHA256
b07447d3b2ba75fd399fea520c683ba933ab14c2e3dc01c5f191a610efeb7635

SHA512
ee156e6fb516c5691afbae821b1239cda3b73ef658c611499a361120ac7acdaef21bb8e956feb3cdbd3af88f46f1d9954d9d08533ded562b1338b301d78c48ee

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
ca469aae95c85a58d3df603274da682f

SHA1
984eb3f36f4f910dddeb0b52e8ea69ca96cf6152

SHA256
47ee3a732951ccff35c081c98f1d0764367d434fcfa57019dfd928bbfd92d545

SHA512
ae782a58381a0f5f7adb9f5911ccecc63c37d8071900a0b774b73466f6810c66ffdc972149a5bef8731ccdbef24b8c3cc35a74f0949831eddca6c75d5d7fa966

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
ac5b6149bc95c3d528822224e376da60

SHA1
6d9e9120acb1869318985e9aa41df90e9d7dff23

SHA256
3ffdce97937f7fdc4afbb1845f858e79708fd042be80fa6ac1f303765b91a677

SHA512
de212b84a134cbdf938823fc449f77a6690085b3588e5b14877d4729e533d7c3ddeec69cac94b0fbb9da5a03351d43c86a546793dd9d7434370dc30f6c49a84a

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
aeee2148135c2fab3d1b2e0d04b2fda5

SHA1
7c1a6e76a21f5f8116a64c420511707bb1978360

SHA256
e0337a57b2f0d0f2d8f28cd2f99ae520424f3a52bdf67ccd33374bb979d1c6a6

SHA512
a3304a465d1ac3219e5a319fa9dd4b7441ab405e12fefdc31dfb5b251bdc5451de0a3c2febd6b6e2aab79a9a33029e6d763ba3e481a1f49ad0c646f83f652e73

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
b1059e219f785492069efef8d0e3e382

SHA1
86b9678b2ccb1999864ca38d9b8e6eafd1ce9a2c

SHA256
703fffa8bca570decb86b887ea5ad4c05657421aefd2c65127548e09430dee4d

SHA512
6bb38c21773c707ff2c9367677cae72aee50f47f79176a73c0b0b8c1d022885314991912d580c614bb6010ea1b5fa44410c1a94a4321e6a88ead7628ffa35b71

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
b46ad6eb613abad468732aaa51460ebd

SHA1
91880a72511542db2721cb022a9d9901392cbb4e

SHA256
4e3bfa1bac452dfbb8f2d668cb9eb905f8ee081ea2823cc46f633f213b5a010c

SHA512
82a9ab437b47ecb6526a12e9e3e3aea11fdc58b5d9fc1c178f17a53cf156ed9a9d8dfcea017df2ac7dea8c48784a85a416c087c2fa09b7808c335dde25d7b119

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
d71043ef7104a83485e3e3a4811a0871

SHA1
7b158ed42705a9123b73e7d5032e732eaffd064d

SHA256
c58b3a6e9b9e8e954ad46825dad6edb930d6e05b7a3099b733912fc5812414a8

SHA512
0cdd49f23447cb5e6fe37547d6aa24f733bfa158560c4ff9887f06a4608384a0295a76a0d8554ebbf37d6eb98b42aa656023b14508b2eff13270a887835da6fc

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
5f3ead34b8ed779e7edf3eb2a2a748a9

SHA1
ee9aad4723192ac80d98355c18c387967b4b2759

SHA256
4c1a7d8d03163a01614b2b1ee5dac7fd300ed1caa70b09ea34fbfa507edb5463

SHA512
ecddbfd71771871f518ac30176e94f2aafc1e654d44d8c28645d2faa5188e9d205a62131c7cc4696ccab1bed67bc25361ee48ad8b57b99c43a37968a4b2d64bb

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
5650106df9a4ef95ca7586148e9fb99a

SHA1
e0893fca1f79e095e0177dca63a450608741c06d

SHA256
4dc703fe3e2449caf07ae8bf4910dbbb0dda5a728ed1093a609889ad35cb74d1

SHA512
e8c5862b8b9c31803341add7e3680be5fe35f6c863b7a178cee5b44efa1def3a175b194ee8608750d9130bc7a97eec19eed20ca96a3cf3ccde488bc4ca5d6923

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
e37d11446f4a12284fa32f1dc09e029a

SHA1
3f51ff5b0d2ede8567aed50e0f6fd172707e6f0f

SHA256
58f953f7d517fcfb5945ce8039ed981bf58255de12a7f7bc8e3b7f131daf4c38

SHA512
de3d67b27db2a782f81dc11500b963caad596dff6700872b8a4770eef82e9176d79f34dd98d7dd7ccb48c8ba8c2a59fbd0ab4c676d3eec90eba0498dbdc4a2cd

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
3a23ae1f4e389e483644287a3f9ea625

SHA1
416835a002cffc1804724e10e36664d5fccd53d2

SHA256
67b635aa96e3bf3672e167c7b344cf4066469de69a22154cb7e4bb7a1f7d2842

SHA512
de0705952231af2fc21c416e627b96e08470939b43ee731ffa6282e985dc02b9c7d44b769e84529e0d670df840c05fda77229ce1bef99db8d01ec966788b4813

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
2a00e28096d41286cd399f801256e7c8

SHA1
b4809dea1a7f576f3dee029ab8e45b97f6c3e6b2

SHA256
abe0acc29bc4760e175cf00154212a8a5c71f31b28e782059b6f83c314c004f1

SHA512
76b1ed88ea4bc1d15e5b7a8e45871aec4f516d5171690101006d1c4f549f6f7e1647b10612c074118bd424d8083669cfdf559bec960be442e7426ed11c2c5e2f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
7f386f5e1f4f2820c4a11923158a4afe

SHA1
051aaf4bb896a035a943a9c38a3cf2e1b2154091

SHA256
dd9bc1c39db19f3048225718c76ddefeea0c02d8fe351425765226a71835898b

SHA512
883b9219a2dc7f9da5654bf12bf30eba8b0098c25e3c29ffa66f963843002b239bf3bab100d3db00b05c46091a2bf38bce8e632f4ea075106d0d01c6d27945df

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
7543657b75539c04755ac3b907512c18

SHA1
942af2610d7e50aee03c49b0fb205675108737a9

SHA256
419d5eb3b3b13b434142b9bbd1a995bd213b144dd9f3d37ae6aa315a55774a32

SHA512
bbf341fe5b501dd8aa1538b318be56c9e60ed76e5b73042e51b84ea4bbaa732846e87e39a893e994a2db34bc4cc17a295ca55469b222ecba71e63fc3cb79f284

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
82e07c944feff01994a4c42aee0286c7

SHA1
9847214743792eacfd778d053a8294d363620647

SHA256
a576a32448e567c3a75638abdcc77082a445cefbd0a0bb26ab90adbf92d77d8c

SHA512
7596b111cebd7f9f367b817404761d91a39bba63f21a65c3a26576f2b47dee2eb1a6120c1ac67599393b7eb3e9cbf2da49dcf8f421869d040f843566de58bcce

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
c0bc23a795b051e3b204c03a4d25c09e

SHA1
bc21ef389ddc0b42d0c98a49ad562b725b4c177b

SHA256
ab0ffaf31855e127166fe06a24a69afa91c9d1841e253a2a3b7763f85adaf741

SHA512
73c29fb9c9241ef6929fafe744008a3196b570ed227a90e5eb7b71a73cf9a6e6810f9101bbd5ccb613247d5c4d0ae2e344226aa0721b1c2dca6a4ac384b05634

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
e6ba6fbcd33659cea93d464198a6a20a

SHA1
ebcd27c94090e63565e04b0fe46ee2ca580ae9b4

SHA256
24ab80ab7130ccb1f584f0b106aa8c8eec19fb40cdcc2a596ace41b5049ab881

SHA512
a2c02972dca6f6e1084e436fab9e0c95386316d1d9a51eb179941db94add42f6326498f70b8cc86e6ec63a9d6dfd02b4602145d1a0d680858d8d98edfca29958

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
23426eef3c6bb5a883cab2b4babaa582

SHA1
aad14b14a0c52688be2a5033b2e72ddbbe12d3bd

SHA256
01565336cbcac69635d6a366d07e470ef35592d129ba5ece734f651d73793258

SHA512
2b119dd6334bb59f6e03ef6e481b4ed1db2157cd88347bbfe60eb00901251fb1f4512e4b3f180a17f6e7cb5d0e076b2cbf08d92cd5eed51cdafc2486c977dd04

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
ffe61b7e69d56e5589ba07115c01d2bf

SHA1
bdd76b238864d0697a85c623db929980cd8ef7c7

SHA256
99a3579fcd6b68e595c5adb931a7e2d6750b458083a2fca8b96f084a39f20b1a

SHA512
07977bce994106f8e43776ea5c5fc5ad31c596f4ef947454bca67c822d959d218174f0e17c5b730a8dbcba7fa728349ea23f0319d61e23ab83809714fe81cd13

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
61949f0f8c9589322ff38362b0f6afc7

SHA1
91da02665f21e5486d6c18bb43655a941b36786e

SHA256
93f96379035d2f575f8dfe7041757cb3f53417093bd44018a2c3c05fbd3d2e66

SHA512
429cf52082f2733731d956c0f071063bbdcfc83f9619ab620ad589bfe31db9a33b300e96b93635b71497d75d9811600125f35d87f9fbf25e155b545cb2722a8f

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
800b404fde7e76342bffe23918b7241d

SHA1
fd6f8f2f64f6285b07e1520f0fcbff63a3379cce

SHA256
6a7926de36fa575acde88635a7e0e252b9529ed5785927415ea4828a32679015

SHA512
73203e3f85332be506cac9851774499a4f6f37db019651cc5a134cdb8652cdc97f11a4b815116ebca52535b6bffa781dcee9579d6048dd96684729480f7116f2

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
fa36f7cedcd1a6e950da56c7d0b6dc6b

SHA1
b65230f81db9b028ea813d916c53b907e61c5016

SHA256
cf6f7b4ac490b81f522a165bc71c617384a228aec8bb9a5b11441cacc4fe9209

SHA512
21646df763225ebe56665b8f8febc5131d1a3c88ed3e6d2110c37ecc4feffb62014f090ec1a187b752710da410f2044c73afd74f2ce0a2e9b26a5048b0906c39

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
131436a7ca69aee76e6661c5898cb63a

SHA1
887b0e14c36c23e6f2d6b077455c0655845ef812

SHA256
436a8315b4e25319b1a89cab214c5e678d18f4f7f4bf7e1b3d713526e7e90434

SHA512
e02dccf321c500f72e1cdce28b74920a2a4245298377eb76731dbda1d48ff4ed19f1e48be68262fb374c37cb9962f5887fee936e47b247bd185709745c6fe0da

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
5751ab22ecaa3f6fc0d0b8d20cd1ba19

SHA1
cbd060beb7d1bebc2c63b06d6e23443d2c61faa1

SHA256
00c97d5be449f2e18d4d5d9ae621d94ef505f6c3a1fd5a433cca33c0e86b2e23

SHA512
37f8841b3dd4555de9b25cece44764d2848413be538d20df591bbd0733e2f3377693e3ab52be2d8441257357ed9f5e43f27ec9b8fe3f5ea6eeae9cf5d264ab41

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
026efbe66b53d87d236945a87e8bfcc9

SHA1
efcca8bcf9dd1ea7076cd6f45e8ef7994c2f6622

SHA256
338500dc3953243fec6737949281d3c7b973a46f2cc9cc443b1b4c778ebedfdd

SHA512
c18ce658cafd02aea0731771dbbf33161fbee37a5692644ebbe589a322c800fd69ca91a00f823c17c4dd787db92f1136a16c9d634b1d1a0be152e31aa3e054f4

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
cca003434cc2db265190a92825f78d09

SHA1
1ed6a77bb080152d5a8deaee08e4b883f211fa41

SHA256
ee7474b89343690d1c4f9e7b8ebe92fb00fd2e5a2a04dd74884b9e02dbe873a7

SHA512
3c1dfae4c389b1e113a48a4a5285254397d59c896c3d0273db9ff8026118a22fdca0fdb38884b878a77e8c76c04d12621290978954fd98d2912d383d68f58087

Download Submit
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
ae4389039cced9157bec0dc49bb198cd

SHA1
82b224413ba153a8d73d1caa1bc5758ff09da678

SHA256
3a6d7b161428c34ecbd88244ab7c2aa45d7c1c10c3079fbc14c8bca64978c6cf

SHA512
da8e05429228c38fbfee5a81006d09e5679d6d24f6109f608535047108df269188b2a727df5b27a15d96f40b4afbec06aeceb351237556a5e1259cdaa851ccf0

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
89d3fef289c765399b6eba42e0e6a373

SHA1
9259a8de1c1c25770a02abcb8b0d708156415cda

SHA256
f04080e050aaa4e08e58d0dc6aedd70b6a6d7548bf5d3614a995f6204ad7b134

SHA512
a7b9305c14692b39036427bbce0a03b5da083047ba3431152715920af4206d6b72009e5df652412eeecbba8583689ae725ffcca218081489a614230f45b13e7f

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
232594753795e5a59d697deb167b02d0

SHA1
1503c94f94ee1f7bb1b012978c6bcd6fe0b11aef

SHA256
6328212e327d6cf4885b202ca0a84051f092db80ed40d2bac22c544426b8ee85

SHA512
c1751fec6acb8edbbe9731896193761e9933e5bdba313fc3108dcc1f307819318cef476c822ade0398198a039b7a2293c710c540aa7f5880aeac6308244f2188

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
3fc49e2d84a3d8f367ddc5e9c3637163

SHA1
32b51fbfb27b5fd14110a8ed2862e74a6ddf12d5

SHA256
587b6b0eb36d950720caf709b99d36e62a200725d8a4df9b787d670f17c5b28a

SHA512
54364c72c04f767dd1587e9efb4e08e2caf357dec92f9a8d2e29e5a5ec371daeedc9472ae742ea40cc28fa9835a95201baeb785883e9ee641c1939df2908d234

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
b816fc727d68028a34fb9ad16cdfa421

SHA1
ae6983d97f4be752c220f0f1659b418ef63f4c4d

SHA256
034bafed6a334dce11d6af039dd99be46ce1f34d95b06b20380d1bfeb5c35048

SHA512
60cb3dc2177d0385655a264ea029022088c406286805009445b19e7650ac76c3f56a4ad3eb97ff2fe05936cfa88e009ba4fafb784e48b2615c0ce05e287493e8

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
b0382da0e62c0c881aa247c3235476b6

SHA1
e716b6164a7f025930a2ccf13f2f7c3f1f852a88

SHA256
4b010885e24dc564d9b7f674bf60a9f86554372c52ddb035fd0bbcb0e2a2a503

SHA512
6b66ea914f4cbfd93368ffb50d7632e23b380ca369beecc33b7b4b7a9e3feb2b798a53b5375276c285fc0495e22bb94c27ef45a16b704f49b3ab137213a9853c

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
7d5e69d43250450442d625dc3462209d

SHA1
0a1cbc337dc0af84fd7cf70bcaa16b9920d71ae1

SHA256
510cf6f8940b850c91e539af072df62fb20cbca06c26dde21c47c8e863aa4a23

SHA512
aa4288592b204e15c4070c175875aee05fd714b2ec1e5e60f4adba03f950dc5af1f6b906aa98e9ad344e989ecd65bc9aa7a62bf1edad1ab624384d1fceb13348

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
0493fecff7ce514e44c3b10a63782bf0

SHA1
9b52e132cc80a7b9687f9b8f03ec8a666e4d764c

SHA256
61fbaf4a07dcd71d391dc4ec39f026a04a2ebf8e1fb40330c59dd647f03d032e

SHA512
0ff398b41f41acf80e7fc07a3e35fe5bfa100d86ef6899fbea3b2d9b0c7d544195bf7bef92e22ad39718be487afe22187b196e02a86b3e79fcd234fdaad8cefb

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
956b54240817ed25bf3577f6f7c87821

SHA1
e07f737f580a826ca97a50b3ff7e808d63315300

SHA256
6dc01171e77452ccde9b1ae11003cecdf9010ebf3cd1aa0e8ee5017e37588b73

SHA512
930cb0d8e43939b9e269eb5f9ed7d012aeb9703f862076b8f13883065829eeb5c76d1bdc7568122d2dd5477647266793b3c9de16d6358271a19ea0c609eba05d

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
6f8111c90f09a56f029583c4e51e6e1b

SHA1
9205386679ea7b09059d5fb157dd5fdeb5f218f6

SHA256
0262da7b1a6d9fb1fda28af34776d42a272b548e2389b8d73fcb642534083580

SHA512
7db96210ccd96c8661f4460f9d48881bc5ac44f5054781ea29e1484323aa7bc296c3f631977de7c70a48938b6f3c7f423a3b012e7e6ab46c5c92e6aa927c87f1

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
6cab2131ca899f5899661084a40230bb

SHA1
68e32fb26be6c9fa896f0c1e10327583b9ce73a6

SHA256
8ebe1f8ff1db8f1fa04f1debb9d5a71501997f68940d028af066ed5ee2fb07c3

SHA512
0a0ed91a61db6f66cc5485c05e467b6db2fdbfa348bf50439414a093a7ef1142b57ee66a3bc3a5cf0a4e61f612fdd597c1291ada3e668ff8c292bedca91c9d86

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
3b2ef7bd4549fa9a7faafebe07e90d69

SHA1
be8bd6cad814bf4a31e86497bc7db334890f3050

SHA256
1e719902c9a9d94f19ad58119ca0255b8e3d8b4c5856628cfc1ffd74072553e2

SHA512
4abf66fda384c98b22191a812f040572e2d2473f81b01552ec87eb4bccaa0ec930863abcdf2abad07c03d3e37ea21aec4093b3b91763a4060db5cb1ccaea830a

Download Submit
C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
cf26230752aff0a2b5c8f7e93bdf9475

SHA1
03063ce0f7afe3be0271d4ac055a25ef83accf7e

SHA256
946b61a4422eb3d2ec6a072a368e299265ff2252f0124c13c4a4f14827084cd9

SHA512
e3486532e989ea9993f48d55d9a534dc6c1bd08f6c3653f4c613a955835d1dc657c650fc1fee25ba14ee785cc76dc2b9792a62419d56ddfededa231348fad358

Download Submit
C:\Program Files (x86)\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
3186fb8f009c2f1d1fea86034283e2e4

SHA1
81b2b5d909d87292b048eaf2b66dc8cc12454e08

SHA256
4b56f96a93e5686d0f28b92d2b80fed3c6b808b98c06133fa7fc43965626c2af

SHA512
678fb63e3b5db93a0d15ad812a4d0c5546f92af93d8ce4858260ce1550c5d80154ab3fac489a9abac7f2a6dc485987a40cf28d4bb76bbe949f0dbedba1add6a0

Download Submit
C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
6da21191381184d885718d1a8147ed8e

SHA1
cc8001d95baf513f0cfdd335eafef6dca3e18c68

SHA256
56113e6d679ed2e9bd5a4c1897fa60de378b379316176c6b29b515a3312824c8

SHA512
c7470f7841ca10f3c3a017c932c91ee190efcd0d0946a169fdfba64f10e4554e89fdc103b61dcdf2c30ce8e8488991a9951cc72224bcd7f8f0be8e1a9de67c76

Download Submit
C:\Program Files (x86)\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
6152821d6de6d76ee7c91bed3ae95c3e

SHA1
4764ace53b36a8abd8b54daa5e8ff1e46e0da555

SHA256
d7261f2b63b4d5a4ee5249831f7a399c9fa994f30dab14db49ddc958359fd5a1

SHA512
4e3c7347c90c6cd05d70cb87603624fbf84b5d605b61ff49fa9b14d26cdac4a7f67bef04782a02fa280f07ebd2d44e9ac8af7cd00f14c3a78900f3f415afdd66

Download Submit
C:\Program Files (x86)\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
4463abb1a74672ce29c781c31ab955ba

SHA1
85b4fafbc6da1cd9ea16dada9da58a4866970509

SHA256
ff1e25ca553648b1ef550f7b686c250a66b42b2019e8f80125cfcea7172e7b53

SHA512
58dcdbe0bbe0fd320d6b06f2008c87fc77d190f8bf836c6c1964eea1572812aadb724f8e4179e98ab7079f0d84a1fed48c038c4243e53705ce2400f1ae7beb6e

Download Submit
C:\Program Files (x86)\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
f81f1c05b377ddcc79a2f5f3a185eddd

SHA1
f1d399d656ff8735950430afba4a4efd617db349

SHA256
5296a006bd2e07b58b263f276e34737552ad536a4fffe9c11975f3c3074e0520

SHA512
54418ecab83c2e5b057c5f2293830b2f71dce6b33f0e724147d04b40f197480f4bec439f06f38dc9831497022667f387891db43a284a0002f2da3e607665c785

Download Submit
C:\Program Files (x86)\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
801b197598920772dfce4d0cdd3c2067

SHA1
a170d9ca8d376eb76ee4d41083ca3633fe27fea7

SHA256
9a6a9007f24217b4a10272cc28af4cec8e50f0e11ea011318ae61dc937c6e01f

SHA512
5c19d14005b7d0459617d3d0bf1b2174f1a0f65f8898e67214b19ad32953562a79a3269be226014450fce8777f9994ea6150430f28b024f7cadb2721d20cbff4

Download Submit
C:\Program Files (x86)\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
e769383c7f83c186c57ef186829cf07b

SHA1
ef17567e842bc8e4aa53cbc4f6b1182a132cac9d

SHA256
a21382798f94958da56026b345e8ba7282e71268d9ca96b7b3dc814c563ec549

SHA512
7e1d4483624d759f34525b3699128cc9fbdc2d07d66bd5ea2d7cba3a672c00c91adb349eb91dfd0aea714f1c16ef400e34e881c28d30f3aa9b99b1adec784232

Download Submit
C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
c7c9be7835dc2e71e26f1acad54d7f98

SHA1
2ee973364ab70a2c91a61504b314eeb5b66b2fe6

SHA256
9ae11453b4ae2a969b2a3593b8d99ccf93978ef5e7eeedeb20c141e7ff671f49

SHA512
f1dc691a08775602cd4678ea7cf1117b4e9678939c98b5acd8362de20fb7c3252c7c398a19ea01e243d0a7803477b8df1c64b9425eb1f40d0d52fe9cea3e9776

Download Submit
C:\Program Files (x86)\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
4fca8d57afedf751bbd669efacd85a32

SHA1
6e3be5a023defd98c8cab9cb71936a2a8e5c5332

SHA256
bb5145e3894770995dcc2d5cac01f44b72ad46de666a6247eecc443ba7bf3cab

SHA512
c670bcbed69a9211f55d54a5c7a0175760c9e925dbd2c3639d11e0381ae7f994d8df246e15567341d69de413f9896f9e7f54444f72f5abb2ea5c9b812aaec095

Download Submit
C:\Program Files (x86)\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
3c8555182ddef348125b6e6e2a73b126

SHA1
fedc71b0b38746e13c9d0b8ec4bd8bb4e1cf0070

SHA256
1e1e42d3264af1023b157204fd2e21097417c64082f0b464c3b9bdaaeee4bfa1

SHA512
fbbc8d6fba831b3b89c41beca736235124e48dc262f517d575d5546d59c054086c3d417aa45b7e2b719a565c35d33a97d3bc946951e5d27cf801515fb263d53b

Download Submit
C:\Program Files (x86)\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
62c9f0ee33b9bad9ddd6e47cd9962d94

SHA1
3f1a39464e48107bebf56de655b3493fc1dcbdb7

SHA256
0e8ad81a20745ffbe526bd7d37fbb39a0f02c31a6e36243f496b69d043684cee

SHA512
5dbf86fb2ccd1ebf75253991496cee4249ca736b032940163c5f27f131253731fd75e840090dcb9b4d5d13d9dcca9d60f8ca25f211cac2cdb7241da6a42fb40a

Download Submit
C:\Program Files (x86)\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
02560979b82a4469330615a6636a0da3

SHA1
f6adb77395906dd2cbe8cbc61234b9b8c12f4230

SHA256
3e1ee5787d560885655ee5c2a76b33f6913a8a0f71b84807451334a909c486bf

SHA512
7deab5e0de54c26bdd8450e749754f8716a783b1c30b5fd2da8c61bb65205c16c0b68bec94c244b9e841085c80af731a17d746e90fdfbf9b58af31c36f2a5756

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
fd7ab59b8a6923ecd8814c58139853f2

SHA1
a84ad769489dc1323381dac47c5a897b1367757e

SHA256
bc971d3f2240bef38f2ba70cf80ea53d2acf86d26297f596b735fecd4837e0a9

SHA512
522928a47fdd0319c659331feb5201a5404ef6640dbcec56a9734c052788486a23bf189e2fd56fd080f95e70964f5c2ba2817ab8259e9fa84d7286caa127a8e4

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
0e30bdf36477ef447304838c28da04b3

SHA1
64d12d709f56b4e32a1e98f5c4b89c75c8b0fc83

SHA256
d3a02d99cbad5538223b02e600dc2e425108c8a4e225d6cf3ee79bd26e154be9

SHA512
e4ccd3b40426fb951267cdd93bdad708399012f5ac573126cc585f2d40d5b76dd74ee3506dda12ddfd0fb9349b710fdb352571054d49fc586925b9512e62cc8c

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
49967168b4cb958c22da8694156deead

SHA1
9be2b2c5335e5934c1203253d812cbc53973e744

SHA256
f184032e327cbe74931cd4b82303d11d3a9c306c1999394372c76b67f6d35d5c

SHA512
8478a00c720655e2f57a9b1396c6103b66dc4cd1103ef0a34bf4746386a017648343bc13f1a7af9da8695f5935c6664b0a45a420e5e565ec4260442a8f8e01d5

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
d7800508db621c6dba5557ea9eaaf566

SHA1
8d1a752de51323f089eae137a791fc490b88ad81

SHA256
065933833701629a0c298116b289e6c14a583188fae72ed79368725c8f4dac43

SHA512
66fb90c296c500a57916b9c17e8872a23532feb7b53546c37a47c677e8cf11e3ad9de0031445d344038da07717e049bb8a6e2d31e162ca387e20e30b76d31c6d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
f986837db422fa79f3bdb43a8e9bc245

SHA1
4585cbe25d4d34b50110653001350455f614d8c7

SHA256
fcc2766cfe224e4e980122905b8cafb9b14dd52e8de13531a367654174fe6038

SHA512
f114b013b2d698bebbf83594866ecbcb9dba863f9a06d86cd19d90d7efa5db7552a0cc2ed6e3cdbcf34f44fa0cf177d84f44aee6a710a918907e4b62423ecf54

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
01f4f84ca990d952eaa07ae6737d911e

SHA1
ee2ca7a78961cdf86f6b7c74cd5a86b926021bbb

SHA256
579422c78625a707b24a227f5c5223b08842fa5275999da1189cb990b1115ecb

SHA512
b73523d9e096bc5f779032285624c0dc4201790f42e01a32705517e0cc9c45d0f513894aaf82fef8ec96e3c37c32d6b45b1fd36a32d8774b0bcba784f7ccec42

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
e1b712fc45c6ff20fae11d5589910197

SHA1
f35e6d581b02f717e1fe8ef858e3e7986cabead3

SHA256
b11dab1d2d96b965859a6f1a4cf6a24cf7a07fa8cfe9d4e7a191b3c73d1e278f

SHA512
9bd6937d198121ca1504d27988009e8ba727a5232e81b2e5a8d55ef074d3b70cec431ddc8742622ab0e8b2ccc10ffcd734052667a461954840752e6898005193

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
8f8f8ed603d03322e04502485f8455ea

SHA1
e5d1bf285523e659034ad21dae9a959c7d786064

SHA256
0fbba96db6a48557ac331d1b68438d2d6314a05392ff8a1b09a100509056f3d3

SHA512
8f9c6a3c72d6b5a9c2c14396d16c42ce2a9ada33dac572d7dd9a0149976a86bb692045cefe8a66ff053a674204316b5ed36cfb0d4db677c52050f4d0f13e606d

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
7d3661b467e01baed9f4fbda4e1f201f

SHA1
cbb7904ac0cddbe5182a1f207dfd2ed30a23b3b0

SHA256
844e30870149268ef108df3e2cc22763e3bdb6ed11c7a00df73552037341d392

SHA512
93d6fc3e3b558d46c532595aa4aee72ff9881b0dd7fbd417447a7d79eb052ca5efc299b1f7f0c9311a72ba81de27e936351ce55f20010665ef019de735af29aa

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
75eeac14e38be5ca8683f333b6d47473

SHA1
9fb5662fe60c9d2c615f46899b4c7035615eb914

SHA256
6fd72892f060935a3894da507ca76ca6c9e221bc1e6f83fbcdb92b35086104d0

SHA512
defcbb85b869dead7b9509e8fe00d2fa2a7d85339befe14db2015e72c37147f5fe30f6bd046fb33504a90047cf5430213406e586dd71183fa3ab5ac6102ae7e9

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
da27fc765a12ea6a99876cf540bb0bd4

SHA1
f69c4b064faf58d53a3a38904dc1cf19be9e6e4f

SHA256
20c4a9ba1018f722acc6c7ce3f5f31f4d8347f3192d873dbd68223cd42daf6fa

SHA512
8efa2f682f9f6e32487125cb3477917f2c3e7e8ca46f9b8c66fb187d84d6edfea52c935f5bf35ec2313c653104e0f14e7c3e422dd9a8eb11e75e9d8b5e741668

Download Submit
C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
5f143a943c9952186cb253f02b97a388

SHA1
033c7b35fd5bd9d71c892d4d4dd17e480123e856

SHA256
f23a0d64b7aef1c53496e37aa6d19c09dbeb9951c5fdd66cb352b53401cf0126

SHA512
2ca2176915fa23dbdc4e754ec903a10703d72630d4b57e21f0dce856ec7cf7962258ac8b269add016bba6e57e99485c3cc155c90fce5e3c9bb8717439e1aedba

Download Submit
C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
9c61abbacbb494d49d30f5cab8335861

SHA1
43d590c2def32955767d2138f6bab5049b43760d

SHA256
1e1e8f4aa0aca9a61630552b53ee8501f3da01c77ce96598bc72d1499d7c6bc0

SHA512
31cfd2978900f56f06b46f2526df02031e0cbde8f53f02295dffa669f2b6954a9b6d0ec06fbc1151814562f99e24e9b00563d3bc466776caa35024068aaefd78

Download Submit
C:\Program Files (x86)\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
b8f16da14d2221acb01107ad546c6fda

SHA1
d60c3e01243581d38461d976900a41ed24a8803e

SHA256
cabc5cb454fcd03f41f5a4c30fdda0f9090aa36c8c8305c453fa5595834f8c21

SHA512
e73f3f3fbe9feb36b8924ae15de1c00633757f47f02cb14a9082ced360aa2588e148102ce8768db0fc62ad2f4b67d6dc94e061f844f95a8d25b20029eb4bb31a

Download Submit
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
b6b87d4090cd16cf0904a09d83405d45

SHA1
dd95fe6858a4cfea972d8f94c0bcb19ba64e7d1b

SHA256
374cf7a03b6c1d0e8eb678f41a8eeda6fc0bc9480a89baf01ecd8822cb62b4c5

SHA512
c72d933eb89ffe003048f5490b79692d5a545e7facadb4eb67ef5061386cd08d58bc64ea8639e0e679eaed8cee63d42863a75815a269c846deaa46690199d314

Download Submit
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
04d4a4d8ca6bce7cecad4a8d9ac98634

SHA1
5a745c11489aa1b607ebf1abbdba2445d7bfb25b

SHA256
6cce637e16d7169e7cb5647b7eaa2f65dfa31101252ce469d95705ea0005e510

SHA512
8a3f3c0fabc1e05c366ddb098852b1cb139e2136159c3a29cf133febf9548a5ae3c43d1ebdca9f53b0458c01c4ec28ea5a5e0ee3bf8f5dbb520907e0d5c8c93f

Download Submit
C:\Program Files (x86)\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
3793a15d5e7e888a44d350a980c19c2d

SHA1
091b1e8611c0252732bdb82ec675acf6a0a26e64

SHA256
adfd341b6d027e59fd78d2bcbb0e07febf0c048e40770159d52482f2d3638ae2

SHA512
53d5af10fba3e0a31c24bcce50174c53d67b8cefab969b27e5b398c5de7410ce48ed66a1309ebbf8d526410f55de66aa252a943295bf94f92f55bb3b5479272c

Download Submit
C:\Program Files (x86)\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
74682a87fb3bbd26c22d00e94e4a0e79

SHA1
b6b4a7ec5d2f5812bc3314d62006913a0e07249b

SHA256
1c92d5eb7619fa08da1384db472cb5ea8c00f10c10aab1c0448354879eb4f0c0

SHA512
3c5d94732a22859564d019f25da6bea693b49b9def841ca39963352cfb6947802bb1803f863f50ff32fe226af17dc7ff849588946f8032dba63195fc037809ed

Download Submit
C:\Program Files (x86)\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
671468484bd6a516ecb58e28969fb4e1

SHA1
6b64073c0c9c160f7c1de86018f11346a5f70054

SHA256
bac7ad5b9aa762f1076bc5e1c456b99fdab48235c2f163b7cab4455fb2cd9a13

SHA512
964499f4b1046371debe940b45323881ae597790efaa39141dc2516e2bb8df1f275b185498b49cef6425d1f52b414bbf124bdf7abb55ac6ab1d440048eb411ec

Download Submit
C:\Program Files (x86)\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
45c9ce2adf9e899a7186d1d20abe7faa

SHA1
ef0deed02c2392f3b4dd478e33913d4e3abb3b30

SHA256
d708c6d2ac72cead1dc88e8c6d5f52c7e93611d6550779932115c5d4bec21901

SHA512
4cfce14a0f61b573050c6c8897427b07ee78fa181a6e999dad8ee982295aa1a5965feecab14fd1a49e260ae5ffb673374b5e7e761114deff338979f971afd42d

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
4531a145ec3eb8c0a02ab11f6b06d887

SHA1
084f4e918a6bc51b01c95572ef91b9c2b67a62c4

SHA256
793b69d72433752643222b425c8c6dd7e5bfd85ce20c7b5918612c3073bafb97

SHA512
47dbad30986e8f860c59899405c727f0364b9caec8bce07c808f87170361d54c825c5c8df4d574f3f7201c7255e3b8eb836fa4eeafcc4631f637e6251275c70d

Download Submit
C:\Program Files (x86)\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
9a56fb0651585a616a79e679c82b5c1f

SHA1
4fa5c079537614417d9ec16c9a31ee9f9e880842

SHA256
cd32eed609956553cbda277825908246e8d2c55ae994d5f4a227a1b971d29e6b

SHA512
edf1d43925b4e95b65beba66565b23161b8bdd0c37046777afc8ed0836d56f1ad904d3e9132e32b5af2bb38cf3e8f41363ecd1e6bfe0cb936a34496d04a70cfc

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
736ddc7c8e15d506b821c0a70e5ac0fb

SHA1
c87ee12cd694d9d850d1ee9bf59e84982844f928

SHA256
3a7be335589d889bb5b991ea3b3f27b3e8caab4d9c301ee3d238d1dfa6ba8f8f

SHA512
73889452106dce15ddd97ef1f10c110bbf262836462da2db3f639b91e02d648960d0431dbe1ae02ead01c7e20b2912685c1b211f0527ac45725567295047d441

Download Submit
C:\Program Files (x86)\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
64b5dda69bb86f615acb75036ab5f88a

SHA1
9c76c4ffcb663d0d47c3fb730887fd853f1c9fa4

SHA256
f34593ca3cb2325d12537b134effb8057832b554a2a613664238cd25aff8a5ce

SHA512
99b0ff8c4bdcd3c7e740c5ec779cd704ae84021dc4d23a359021948c2ffd0ca87f2f2d2117aa4b418f1c37fba24c657994870599bb7c687bdbe3b557aad1f4a7

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
cb5c9005f401ec97eade0f7f916c23e5

SHA1
fd48332cc887dda8e35e374182cbcfe10859918b

SHA256
574c3a36cd12890f74f027a30e521768fbf00bca5a195c613bf345df7f4490bf

SHA512
5b5a9928f0ae0b2146a9b3143c6b79d4fbef936bb0aff4293aa8729f56248b2717c59961a954d649e09ac9a2185ed8fe337d35bbf304f862077d205bfd48a05f

Download Submit
C:\Program Files (x86)\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
f3af28b36cbee50340fcd8d14a826cdd

SHA1
c710fc77bb9f3cdb5d70febd2a301d9d296cc473

SHA256
e16d9d9f0af3b2e138582c524d00249ca0f850c05be2c35e5fa0f7edbecf2429

SHA512
12c136251d3374163e553066b0f99124cef2e49d095937e691d94c58f3c2b895c928b8901fd64ce1893f7dc9d9110927ffca3d7be7dfd0a350649d05d9f276ed

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
ae7ac403a69ffef545c56696a20ce8d2

SHA1
dbea6f8d6a065068d7b514856f63d81e340ec88e

SHA256
91f0fdb15929436b7da7a596957ff7fe2ef466160ae312e7714b0d2fda139354

SHA512
0738376ef7fb49423d044d0404d9ec03d24fddc313a6d7e0bbd93bc5dded745dfd5d0bb7ab561b2802e9b15e862e3d95cb4eb801390188c183d0db5241e79db8

Download Submit
C:\Program Files (x86)\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
64357962b0241f7427edc923924b8787

SHA1
4b142da981bf9a0a21c3475035c04e2f37f0c95c

SHA256
7dac6e146ae4103df8925cf8142985ae5854df8279c89a69d9f4fd1b8b5d797c

SHA512
bef534451ec749c3998c2e73707d2893b6eb7fb7507bd5dd3d9e3ac6c4bc8c9f85435ed35e05df4a3426da446d604448eb830e048ad5514a8228f9a116616b22

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
11a690d73b5ded135a4d73c1130902fa

SHA1
50e536f10d875a90e402e332c28a5c9bad19bfee

SHA256
e009cc5eff7984fc3a6b5d4e068378c765495de605250ca89f493f702bf7f7d6

SHA512
b4350b5f124390d11b2a3e5fcfc78e74749562ce76a12233bd98310b8a8c07c1764051f7f5d777a47cdfb96a0d45f776903c2d3f5d9d2e3376614846ee46518b

Download Submit
C:\Program Files (x86)\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
cffceadc4a8b0d419365e2ccee6074b7

SHA1
ee832c23afe3cabb779d4287c80bb3b07dd49a59

SHA256
ddffe4436cec94d04da99fefdcbcb166ca55fc9a48ead30f0df19084186241b1

SHA512
a32ad24851f1992a2943fdd47fb675712cbe5a7ee30bbd6685aa38afbeb0b263cf8dc2edd31f6a8a2850e78f74c2c925926be67585e7f8316c5d14ec1c46ad04

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
671618e80af440d64320b69462fdb11d

SHA1
2cd40a6418733f6fa1c25edf6ea7e74d8aa94b51

SHA256
6adf5d412eb8afa1597678336efcf32b4823e5a7214d7db74aebaea009e55ae8

SHA512
11705cf613e2129aa446502acba4686c6c7bc259e536c1f518c5d8203c06f9a70b472bba2116431866705508b7fa8795007aebe47481d7b6e40948b4273b4c82

Download Submit
C:\Program Files (x86)\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
d9acdce6929f2163c87215508406712e

SHA1
c14b8ab573fa5b04b93854b819e603839b877d01

SHA256
54a43231042bcdf70e6ee8687537bdcb2c50b562f560a6d886afaf87ef6559a1

SHA512
27a8dee3ebb866f82e353ee0fc953414e152d44e7435ff21d22a35946aef1f601722c4a15d68165c86e74053d57c853544713ecd5feed38f11d0d2dd0d6bab0e

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
e698fc3723d79569c8ee5d59a8424dc0

SHA1
a07bcafb370ae5a444e2f67c315f81495ef08ddc

SHA256
f0966acfe9a253f94ab17b32fcc81c17caee0a0ebc2db6d308281c8678cc229a

SHA512
73fd1950b0cf279bb7bc7030de91e5ed77aa58bb0e8034aeef747ca53b1c22db48d7083f225f56d11932d8a3367b73c08d50a4eef135fd0296bd73524f4e7f07

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
8abce1aced7e132dddd1de173e742bbc

SHA1
42d606b31e3ed21368880c3674617d885f38a06c

SHA256
a4d2392f34d79e499dd42b6a66331540602e6001cbada3219474c93086e95835

SHA512
98b486941a0e2dd809637a3f6494f2a0ef612720551006887359eb86d3dc68cc735e14bc10c54b9565b2c417d09c03aba5d3c517663639f7a6742fed32ff5743

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
121ce80496ae4b79bb68e9d7d0717616

SHA1
abf2d7f9c3f52e0462393627e444edc15dc96366

SHA256
559d1cdb71c1e2418d83bc1207627ceea74fca978f45cb6ba95fea7b9090a2e4

SHA512
cc1bfa2a786e883db35c63533ccede67575a7d241b58310f695015422bb99206f726099091262cbdad18216b8577fb3603df4467c8d189c2953659ac4733ffe3

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
3b6dc8ad405208c4c06f2d2af8e56429

SHA1
8779bfc3d0cc90436d5af79e650f0b008c1ecd97

SHA256
27086504e5d00181174398a8ef68deee1829ca14bb8aa8893bf0a9286f14277e

SHA512
959956fc4973429db2f3033d56f2b8b98a872b03e732b22aac9d5d2c27d594309778d9496674e76e28b147ff5a9d1a2af458ffd6bffc5da247a21b0d2832660c

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
210fcd9065a2e6b4210d1480e1963e6c

SHA1
f250f95da4ffa3fac2023c46476163f603051c7c

SHA256
185f77218e953a874474fdde4edf31612d7db4a68fd531349078f57ed6db9497

SHA512
6159821283067b7a4a0b0b468c33b5b9b743f3b147373563fa8209734ab229ba87ef02472080c0d4314c0b5358ebfb554aa50a33e2d5cb5397d64c42567e5909

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
b443c1d3d7cd703dc66bea441db51fe1

SHA1
99e02d2c5c4b0cc26ab93eddbf9565e886bb11ec

SHA256
1143b2a8c786622d70ea9087fb45af456376e3f48e0255d2fd5a899a1268f4f1

SHA512
de942f070827da9295e4e6686e514d04450d74fea139f43e30d72cb76c199c1512ab0d14d0d1938132d5a7a2f13709bdef3f323d83ab42fc701f37db999134e7

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
f240ddf739c9dcf40d9e8a88697585a7

SHA1
b594ba589de1215e4dc07c7a136fdd49496bf19f

SHA256
0c9b8e2d576d3c6c005ab4206793f4ff8698c998021109d350a360e948a9c2f1

SHA512
fe9a0bb1876d6f75d89dccd90ccc9b947cfe31bec31c39d1c51b7bf7f0eb526b15890d599aab36564b07a7a0ff29e40308f81f48418d2817e52eb7357920c7bc

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
55b282421eeb47e446e1135a0fe00a26

SHA1
34724ebe51305ec0576055ddc52fb2570387d252

SHA256
99e4c7ed20514bca1e6010e54ef02e3f32b69aabda90ed8961bf264443ddb252

SHA512
22c8a518b2a82842b78c5eb4044da2e07350c4812c76d90b7b19fa290871ffb80b153f51ce09c6be3d6dd02ba19e9c7d980e9d070c2c2dd943675fe4cb4bc8fc

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
361967ab52dff11313ed70f74c49d354

SHA1
c40e15f8e8f5eac278882035b9ac2044762b4f85

SHA256
48b2720a73b4777edd9711149e0c4dcaa245c6b1f55d3523d11beb7d4a8870e0

SHA512
1b67e095a68779a6630f2494e9d9de3bd9b327f561f15aa1cb8252bd3d16429975c345b6bd853168f1ba074d08aa2841afe50c2e1627eda90eac663824e2f28e

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
c159b088e8bfbb0a6d2c40487238e142

SHA1
2cecfbbe6bf42159af8ad7cdc18fa7c25bfa0009

SHA256
1fc9a07c070e653e59935458fa088a9dc77c08e2da7241f97242ee1039ea67f2

SHA512
1ffafede871ead879a221b9bab3becedf6426985f1d400e2629bf1b5b5945d4004ca06f66a11f5884a0799842ea449243fdc7bd1cc4464ed38b524634ff6185e

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
e787d446a8c6d0de5ceaeaa5e74dd560

SHA1
a9b2b2870565f82cc28395cbc36382b88616f893

SHA256
0295a0ee7a869c5f72a6f2abdba06a78fa44494fa3e6a84bb8ae3f936a169f40

SHA512
177e7b46e80e21436fe50dd27cbf9e46df764255a0f9499cb823d54f5fe8c9e2dbd8c7786f34f62638ce92ea422d6e32ebb14934c534495af3037b1d79d44b5b

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
0f96eb287c3cf5dfcb95524cab4e90c2

SHA1
faa6665c4994f3891c942f7a7d006bc30584f775

SHA256
03d69fc27d52fe58484dde2df8f67f62be438cbe6cbdf0287e721926c286eeb0

SHA512
b47c027dc992e3305a005e5867bd598c0d136a248c3d969c55921a5cc88f90a96cec68e2f138928032995c7a4a4600661c1c15b3d269bdc9c6d6a14b2516bfb1

Download Submit
C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
636c0accc1719827e5a097350504fa85

SHA1
3a81fd8190726904256a91dbd30ce1379da02336

SHA256
baedab9624fc9aaba9635a90cf14ac8640ea1c459d37e1ad5f39cd1f6d205e65

SHA512
6a31a5841fa20500efe49aa0212b03e71d19c7c19721653e7ced1e6069b77f603b2b13357ccef70315c85b45a86d34ff8796805f8bbe89fc8669012cae5c2df7

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
44e77e62fd3919a7da9fa10b41ba6dc3

SHA1
2fc596106d1fb4048484c7432cf304417591effe

SHA256
8e3c0c4393b6b49f2207b3e58357f776a34a468bb1e70e1d9b4f67950bdaeb11

SHA512
3fd1e024cb9a04f66fd24c46cdcf85f775d685e353346a8cf7d93a709a04abfac2518afab6a9a173c175a2c5122201179a2b73fa496d1ca78d6e62c687c98de0

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
7c5279ad940ae3dfadcfbaa1a90a6196

SHA1
f47b3bc0c515fb8615ef34699cc5ba2376caf898

SHA256
eac2e3b31a58259ca24d6e8addbe8379534a6328958924b91114980cebd6dad2

SHA512
5567a8bb87cdca8613f004cff167f8c0d9a522442a64fa1d0247c8cd9524a56f252665ecabbf008ae1126bd04360d25462d999936326400150c7345a61f988c8

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
5ca0f4522eafa6c53b27dfdc7e1360a9

SHA1
c42ad40bd738ec7119be9b118d014ca76937de45

SHA256
40f332ded36d4dc27170fbddfa0c103db5fbcd0a73f8661752d221202755b7ee

SHA512
9debf869e7a069ecd0415f2cf6332c7fa74b31080512cef8398066f30ce535a668bc9fa346d64fa4a2aa5129c41a7553bf3998771290ba18def69485be8f8ec0

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
a674ca4759842d2079bbdb477f9fbf55

SHA1
641c2cc73c07ffe2656be0f77bfe04f89b41b3e7

SHA256
503da94ee01b21b43ba1353a2addef32656bca2f9a643153635559026d378430

SHA512
e9976bb1416d12ebc868a9ba79a403d446641a540cd89d918c7900758869a6d05badc6333c4307b6d389d3348bff45e31eedfe877a70a9932329b286ea91a800

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
d59ddbe42264ad88109bdc6e2a0eb943

SHA1
10d30bfb0c389917e2ae727e9e307528d72e2dec

SHA256
9f15e0a21b0ad007328e9bcd3943073247fdad6603798727a22c7efeae4d8307

SHA512
1e6c15cf00b90946adf093a4a07c8e57ede3c91f9f2ebe245683afb3f2438b79220745540752591280caf7f2d0d0007c374e5fc119de38d2513f7eeaa4fc5f2d

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
89abce83f34f9aa6e76c52d6e53440aa

SHA1
bdbe211341db6b05111c1e9bddcca78c95d347a5

SHA256
c2ae4dd4e46f9080c2def8efd39a93beae30e2068ef71c810490aa20dd18e8dc

SHA512
6e458332547157a8b860d9e2adb6829e8b8e0160cbabc8c628f93fb1ddd7b2e8707db0d47b64663c56d8fbea64cfd30b1e0e04e5673e139d8bb81fd5ba36930a

Download Submit
C:\Program Files (x86)\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
19c03f59fe54680b97de4dd12a45ed17

SHA1
85f73f980d31a838e4c1ddd870a1159bd58ac569

SHA256
5faf360fe0b0e2ca9ac9c3c05269dc21f99243c5df008f370cf8380767ba614d

SHA512
762775ef36fcc7a798b464f8563e8157cee4473fd5969d390416a5179409dc656c8e572bb295322b075c1cbca64b1b421ea945c6c082381b66858fe9bb103a13

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
ac3b68254c8d447de61f46d1c65fb3ab

SHA1
c3fd3348b7d6ee6f214a6a4acb956c2bb4509a20

SHA256
dd2d8dbdc76c128c4d34725fa378095f8d0bf19ab233462bf4107d4c1911e9de

SHA512
73a228f77371933080667cba04b9abb6ed156697af64d8a9c7ded00eebb132352ca65a02aaa931c69976199374cae84abc119407acacb50efcda155540f572e5

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
3463fb9a18cb358bdb4ba9e0a5c4ff28

SHA1
61fda3ceb708e3da58cf6c4bfea50bb0019681ad

SHA256
db45b1c447a1aa4d4be172d6ad8b8402af3a9a5b31f2953333a10a7ea6a9330c

SHA512
5580b82c3a5ab2342d7a49912c9cda98004cc0281ee91f94412cd932c31cd23d9f0d05786bfa49c1b3f01a6ded9724d4e6fd67bb38b33661a00f9a4554bcee4b

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
937c72dd89929dc1168b1a14d597fe1b

SHA1
0ab7aa22bebba6a2b8e0da8295c92a57ce88c439

SHA256
a9179fad31d5ff135866224a76376427d86f946101c8c22f3b2437724f690282

SHA512
0e55698e064ca447a8f84b59d79bd3a855b1a79b39e85fc30a7913a7e597f0f1d6a248bea62ff052377b5aabd2a2cdc2fa5594089c7141636ceba0c2f0f55e5d

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
21c6dee01db75521d848c4af6478db7c

SHA1
1d1b3740e4e1f62da83f9c18f4b0c270a64689b3

SHA256
011fb27d6c3f81af4e3c5a7a149f5871c6036e9d4209de450b2a74b1d1a96bcf

SHA512
fe6cfc69313de1aa144191831a76ca29e4732c828820550da955e06339ceb665e32ce0e5203d138a7cbb7e6b6e031b499cc4f30b816520447d0fd352ef677fd9

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
d50b78f61daa29ca38c4b8bbb554c93c

SHA1
104db46b162390a194bb1d5b489f2aa420ba2455

SHA256
5795e9f840d62ca36b30ce810f961507777a717b89e99177f0ce33947e300964

SHA512
d33aa74daa591902a83de529bed86febce9407033a42f857ca46f9486a5be92eb135fa8ccae8ab21a1cee273e519870216c8876861703d9c780e482ef0bef2ea

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
72d3a98d4ff3acb38443df15a481db54

SHA1
c34d273c2535756ccca0935d6a20d0be74de153a

SHA256
bdc85db2a88e3676e519076929f75e1c49f8655bb49ce2bd66d71b0fc83f16c3

SHA512
6952b8fdc24ef71606b361900b852d4e50cb90bb6c5509678c841958de885b992157ef1afe8f9dd74ed1c8fd41412d8b9e77c4174ddba1ed49fd48fa4482fde0

Download Submit
C:\Program Files (x86)\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
b655c68c8ca84641cffd1cf6f5534acd

SHA1
d0a80847eac4a9fd4f16027fc252f0e6bcc1ee21

SHA256
8eb5ec74e062ced52d11f8f1a5cbab26af3b1191634531e4a079c155ea44ab58

SHA512
f1134fe10012e90088315a0039882f3442873450f203aef673ca7ad0c22a7b3f17c4003fb67106681218ab3e2183b51bd19c8ea9daa41e10954c988650f4006a

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
324aab7cd399c9ff8cb31f57b96d4fa7

SHA1
cfa0546d87c544470843e6e382e3eb7dc4aa71cd

SHA256
e5f7066dd5d8672981e0d8222f5db19e5ca886eb350fc3bf35923dff987c7825

SHA512
2cbf785927fb5be12c0efba5be9ca03028752b79d0ebcf139fee9ea59968b727b49d783624b89b771afa9f5912a702dfb8ef95d838d7419c3075e770d548d6c7

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
dd1ae9c83bd70cb1ce1ed5ecddf4944d

SHA1
52faf9fa070b2437e4144401ec9b055e0b86e84e

SHA256
93a88eec2a538579fd85f9a81693936da2f9f2872fd19b4bfa61608134eab8a2

SHA512
0242bd98af029be1f4d28a62c082038ba44ee7c4f9ea75ae17752f7e37743fd1837cfad5e6f12d4cc7c6aa5e70ed6836550f585a6cb2f75d8833abe275630580

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
0ea5f38004e2286628c00b0307940ce3

SHA1
55b68ee39b386dec3c4fdaf78dae2fe1c8228d16

SHA256
183af0a2e85fc215223aa053c8c25ce5d528afc6ddfb4eef94eccd9cc14c80aa

SHA512
b07d5c11f3f638fcd1bfddd9816978ccb96d232f4ea589aa8552cc9dc6f9ed947b8e9f2d101e2f66731948e261d2a9f53223f3d6f63285f672e0ec77e8dd7880

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
2d1077e279afb2ca56486a9e9939d4f5

SHA1
f8c3244f471f8cfa841c2604be421212ca283f84

SHA256
220a5d93a5eaa8d36d717df7b4cafc31c83c9bf0ad0f88426a4c8906dee0f607

SHA512
caea77e56e9f48b629d1407dc1ced55da481ca67a514570282df2e2c7b7ed3d99a414e78e08b84dda30909c9b5c7c0cc893e0cd5899c7c2a1f362a28338eeb96

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
558afa93791500aecef30578402a37fc

SHA1
4db8884c16b75268d1801f96c2858b41caa02dfe

SHA256
ab43dd97136c98e2e39d1b422e25c184ee44a5d738572a491f88ba6ec9c083c8

SHA512
3817b209a8a1c16fd57f417ec28d9c4e948eb5a4ee8ff94a26c9b9c25192ca0ca1626ad98a52becbd1069b8155fc119440c3ac36ef7972411a245fd17210a9c7

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
52109a2b2dcc2ae4ffc7910220b42454

SHA1
58a6ff7ee9f566ddb353384902f8eb49127fd8af

SHA256
e39608c385a0cf37c36e459d5796b8c18c4d5bb857ccba05fb955b108d71c2b1

SHA512
480d7e7b3ef0c3681d973287d3b3ae2528828d6c01ec0473f30491f0b4ad0fb9e3e831a8a0189c4a622d12196c35ccc499d1be34f5d068ebc4edbe1b2998fad7

Download Submit
C:\Program Files (x86)\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
c6adc025b5ebec69a5205bfdc92ffd6b

SHA1
fd794a1cfff688398c6f27761281798320b95837

SHA256
9e87ccbb4bc3d2006bc0238a74d4c24bf2df37d60a2b26ee44c851d4da2dd36a

SHA512
b940e691b871a23cc7aa2a76459d349d867cd0f1e46193ae8a864bd931470ad8a0ff32fead5a4835cb3088ece009f888df37443b268e95bd23ca3b599705c597

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a5f8762fc974191a97f4d730890cc4ca

SHA1
b5bc11343a5b1e21a42a91541b2b2ed92540bec5

SHA256
e220741df0e6eb37092095d871b3bac22406752fb7805fb8378d0e0b1db59bb5

SHA512
1d9dac9b545eda7d3c9dcb807e36f0c341ecd4441ec54db76997bb4535fbac52b15ab427358d2792569fb987c1d733b559fea6b6a5eb2c3ce7ad561b9469301d

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
8680d099db3f1964ad3b0c82e039d12b

SHA1
eadac950a9845231e6b54c3c06ac49af4f70eb44

SHA256
b5a960cdf610f30ea534ce3e7d8b917c660af76113f14586400469be8501e563

SHA512
887b5cfc1121cb63dce6c2b30bcb1d30080e617b0a3ab091d55b1e71110d36257dedaafe138e4851ad191749dc7d842dd1999a6269c03ea0a1c9cae22211bb3a

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
d07db94e1d07d3019c25406868b1b072

SHA1
7a5bd9259674f984bea5f58e471d17bee3fa70cb

SHA256
37c9466ca62d7bc3d9b921e14fde808685f45f7ed16104cff699c9c14b13c1f1

SHA512
3cab3391e950c84f3e54a9121396dde48d62587a7d3c69f5d587c8af79258c8dcca18d7d92f2e636a806c7717042cfdccc6743920e30494918854055f5d53726

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
a02d17675fffe0efdd0f95192c9fcb4b

SHA1
d4270ecc6afec0caa759819b27aab0e2b4188831

SHA256
3196384773a2b40e3de728b1ae3191991834dbfa8ed88f0c337812a8f0bdbcef

SHA512
9af288dd55de31156aa48082b140251733434600cc39714e04d80d3dbbd140b05f639daeacb65209af580ff7f9f07c69c054e7720673074bc2243a09e22837e5

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
3ed16bb2b1452e3edcd861b6d3fa6ffb

SHA1
4691bccdae6ed026f5d4fbeb0529478c32b71b1f

SHA256
c1f5ec17d9bf6388e28604a968ef49e550d2d23960ff2268332f602643c13f4c

SHA512
107a8dcd4293ba804632cdf4697595b2c29230ac3bc593cf141219d4cb93a624013ec90895039b371ff902dbf4e2bb133f321957d925a0a8ebc3bc9b508cd0c8

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
1fd68a4ddeb2be1e8c3ad817c8e0cce0

SHA1
3589ce539371d602bcc8bc01a4feb2bfd0ded830

SHA256
5f20d49c37d772e546a5de3f0256964496f6db15b4704ac0c7d282d6251b941f

SHA512
8432568fc8818c844cfcc8801b90c4202d3dea720baf67b4321cc3c1a4df4dcbddad4d64e5476fb8f6fa4157ef827b982b968f1a2e00eb2c1c1b226bba7f8891

Download Submit
C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
123bbf58a06ad3acd223b9a989ae52bc

SHA1
e83abe341d31ac4ea8bf6d34582c7feefacb943c

SHA256
4bfad806b3e103c7aebf32973d1b495ea05333a90f7c248694ec0688a5f1e8cf

SHA512
22ba0dbf38b0f3cc67929165ae64a0f8965f19b8907d14d0ee2648d2a802453ced269675cda40f2b8f2b4cbe9a801f2939cd40a39d5a0df465b534cdd85ab862

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
b887700ac98394771c66ae963a4a9d9b

SHA1
75094cf34c3bc48eebd7557ec4bb5ded57182dbf

SHA256
81e55de4e167d352a833e1ea667e70cc0c186f1b6492ce70b5c27f1be76f3421

SHA512
131bcacb6053152613c139c299e8a1fff6e8b3e592ef30e7e67ae117e699b132375059ed24d4c02c23ff02ed3cb8888590a47a8f34227c91e58864525b7a8049

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
ccddc4212025547d7d9e31eb66faffbf

SHA1
268e811068c3988003a6c43012e62e8b90363c11

SHA256
3257bb8b4a785f9be9da6881176948eeb185c971709a51a5c04f09d17312d2e7

SHA512
66597c5e428d16244cb3b2d981ace1a09ad54e99841adaad2247d56b7c9808926f4eaf63a4ffc73528c176149e3bcf478bcf810b2501410d083750cfe3ee71e7

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
3452c1a394c394650966f4e57988af22

SHA1
cbb3e6cd09360baad4c8a83479254605c96ec73d

SHA256
0b36f0070372cd5db7ff81e9450fe396c41290eb09debf40d7a6d879e11f6b70

SHA512
a9fa8877648159e27e9cf5cad525ea0b6258fc370752905c707c78456b0eccbfe6bd4d11ee09342051389497a4ce3768685dc273a78806f9ec6dce3dd5ef5f03

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
d6ed68eeb0c11088736bde21ec165457

SHA1
87cc2f4575764db2926e5a3376c2d89681c4c8e0

SHA256
fe1fcbc0555145164318a37959234a0481ceb739c5254baa584d8052cf0cc1b9

SHA512
4460ec880f7406781820a22d97e3dda22996d35d866f5e928300c867629566f540b48bcafe7f4256f8808b183bc3190ab3424747aaa6e58e74cbcf060f4aff9b

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
5ea210c068019198b1a8dd83b431bc85

SHA1
fd95cf7d77ced0bda06f1e9cb712c72f3c189a67

SHA256
7f0ab268040d41a74783479741cda7142e65f79c1f1c01a6ceb5ead23c49880f

SHA512
2b00746dab591a58b9adb089ab88929c5b62dde285b7cfbe23451bbc0cc4ca0b62808b80a77a4be166b6109fe052172db4950ab8155d940968770e5472e26f09

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
15d4a2e1728ff9f69b3b653f35f7e10d

SHA1
d91bbe7d91b46ba420adafd8469fcc946e8e1214

SHA256
e77b5a574f710c3656d19f2b034174039bf51c7d93ceb0349280012efe025bb2

SHA512
636914d60cf8a1ed2207b8a5aa5b82422d92861a38b08ae7ffb4ab4168d5810618182b2e1987d8d6592f73adf5d055d7b8f2532c76d4d6a4437b6758102af2db

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
1aed405cc72961bbf4fec10eaf61c6a9

SHA1
9d2fbc0e01bf6b712f873fdfee16843f182c585d

SHA256
5b0673630e94950611b543c05e392237efbcc04e3cac48f15e676881b79d17eb

SHA512
b6f141d981705e7b63c58a6386522348529c3d1f5384315a004989d259777150ca31411fc660f41423baf31a752b3db0f7022bda27c2d0644a2c4bd7c084f4ed

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
56a350bb061857284f0ed9013d830bb4

SHA1
b620535c1b6f5dc9db4172d5d18cb1d672e2004e

SHA256
321e9773f2a99e0d39f5b55f1c0d46fad782f35bb41b86cb794167a2a3d46749

SHA512
427523136041ec2d829f1f0e10766fd80d5ff21eda1198e4771fa058a9aa1ab14f093d996315222e7c07361685b0e10ab97647d95249863ca1fe858b64acd3b2

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
23b7bb06f12e586fe19e9205302de697

SHA1
995a52d7a8fb4261120ea2c7bbe077235d5f2d3c

SHA256
0ebaee4b72f6ce1da970500347bca03a40a1bffa173be7a473602a11f0f1be3d

SHA512
af657922bd1f730d9aa8c83c7427c5c8a66110037abdf3dff684ac9b3b71c7826a65ec5cb2e6eb4bcedc5f77f4bf3ae13f8d1227e849ad0f22145bdd4d54b0cc

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
ae15a048cabfbd645bea800b3a048dbd

SHA1
946248e7243157e45efc62d00b771ac4e7856469

SHA256
07032a317560c742735efc9e5c0fe2d82032cdb0061c91ee6b23f05f2f59cd54

SHA512
cea60859c7c4914558fc2063380f7315ff26bfcd0d1ad7babf9fc262b22ee898d2e4127cb7db9b847b170cb0f870a7f46473799fbb454ee42b658237fc8369d8

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
a98a019b7d059009f727e2b3a69676a1

SHA1
d1dabbce215ed1d6a9b91dd60e9ccb811e6ca4b8

SHA256
50bb8c4b159ba4dacf820a27e0a2600c4ff7f00490665c0e75bd475338a8982d

SHA512
e5fa6c61ed93e955f1d845f8687caf682d5636ca8bef4cafd983a5b70d8fd9c50f221f34b74278b406d26f98a28a76dd4efe43b341a9fb054538b71bf9646e12

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
865dce96b74b8abe140447af1837e5d1

SHA1
b22719d4f70eab26562cc331609c3475325e546b

SHA256
6d8eae0603a3dc78d00177b9a85f28a2cfcdd4f3a27b0ce34a19248c4675765f

SHA512
fae3cfe634a338366f3adce672294b0ecf6ca975860573d84c8c8b818ae93d2693bb465772d530851e5050d1594a5e0fe13a86a6d4f49bb809e00e28f5e80314

Download Submit
C:\Program Files (x86)\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
14fb7862abd7f1cc1a1f4feb7d0ad008

SHA1
476bddfdd09896f0a09c2d92c2e66111d6202134

SHA256
fc9c651d6497776703545e855e30075773df5d6daf74da0a801fd88c8567a1fd

SHA512
378b0e03192b083f2778b2c9901b68e7b9829ece9801b8aa1202a7628b8258f1a541820ab920c96fa726680181fe160e53b7950f2959c00744116c9125c89e71

Download Submit
C:\ProgramData\biobio ransmoware.txt

Filesize
402B

MD5
35e12534b477dbbc950008d0b9e48b2f

SHA1
8c8915df37f9345ccdf65df19401955a666adabd

SHA256
e296f4114f97cd3dfbbe03ea3ffbeb2d53578a417c9e9d02c6f6ac850b96c85c

SHA512
4842b68f65b5399cff2235d00e84976bd95a56fb739d3dadee451a1fc8469fb2941ba3f899c59a2dcaff4766585bdab19e9344d44adbb85c5c7302dc865b6fab

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
13KB

MD5
46a955fcf08dd96ca261ff965a8593bc

SHA1
3067a6da00a4bbfb1621e45462a29fdd525ce0ab

SHA256
24e1d38504fcaa5989d227b5cac50b991ef665af7d83edc0df2cc22f70fa7e7c

SHA512
38df25fb71dab8925cc9d78f0cc9962cd18faa82ed669af45b72e2b0259f751a0f2ba16f8a8229684f4921eb1898569f8f37b40c76a0d3ab8d59a4ad8c4999e8

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat

Filesize
14KB

MD5
dca9c8e4431068991e98b75431c4c1a3

SHA1
b425bc3f77b070249cf5bb93ad542918413cc103

SHA256
0bfdf73a3b8b4ac06b456394b86f81c24d94e2e7c00db54fe07dfb404b66cf04

SHA512
61877771b9fb6c3c00de9fcf3212d469e8a25f81fbf428c58cc2283735b5b6a80b2774ccd7159e98b3ec900f3a17841e10a2b42da672d07ee53efa8505083996

Download Submit