hxxps://us05web[.]zoom[.]us/j/81989161693?pwd=5gSBP4NG|12pha7bDxD-HOHTC8kkBh1[.]1

Analysis

max time kernel
231s
max time network
232s
platform
windows10-2004_x64
resource
win10v2004-20240802-es
resource tags

arch:x64arch:x86image:win10v2004-20240802-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
21/08/2024, 10:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://us05web.zoom.us/j/81989161693?pwd=5gSBP4NG|12pha7bDxD-HOHTC8kkBh1.1

Score

8^/10

defense_evasion discovery privilege_escalation

Malware Config

Signatures

Downloads MZ/PE file

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Control Panel\International\Geo\Nation	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Control Panel\International\Geo\Nation	Installer.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Control Panel\International\Geo\Nation	Zoom.exe

Executes dropped EXE 9 IoCs

pid	Process
5152	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
4992	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
3664	Installer.exe
4572	Installer.exe
4808	Zoom.exe
5988	zmC19C.tmp
1732	Zoom.exe
5736	Zoom.exe
5816	Zoom.exe

Loads dropped DLL 64 IoCs

pid	Process
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks system information in the registry 2 TTPs 8 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	Zoom.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\INF\display.PNF	chrome.exe

Access Token Manipulation: Create Process with Token 1 TTPs 3 IoCs

defense_evasion privilege_escalation

Create Process with Token

T1134.002

pid	Process
1732	Zoom.exe
5736	Zoom.exe
5816	Zoom.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	zmC19C.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies Internet Explorer settings 1 TTPs 12 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}\AppName = "Zoom.exe"	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Zoom.exe = "11000"	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\zoommtg\WarnOnOpen = "0"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Software\Microsoft\Internet Explorer\ProtocolExecute\zoomus	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\zoomus\WarnOnOpen = "0"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}\Policy = "3"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Software\Microsoft\Internet Explorer\ProtocolExecute\zoommtg	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}\AppPath = "C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin"	Installer.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133687110982074323"	chrome.exe

Modifies registry class 59 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomRecording	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\.zoom\ = "ZoomRecording"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomRecording\shell\open	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomRecording\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\zTscoder.exe\" \"%1\""	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomRecording\shell\open\command	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\.zoom	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomLauncher\shell\open	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomRecording\ = "Zoom Recording File"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall\shell\open	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",1"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" \"--url=%1\""	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall\ = "URL:ZoomPhoneCall Protocol"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall\shell	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomLauncher	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\UseOriginalUrlEncoding = "1"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall\ = "URL:ZoomPhoneCall Protocol"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\.zoommtg\ = "ZoomLauncher"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\URL Protocol	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\ = "URL:Zoom Launcher"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\.zoommtg\Content Type = "application/x-zoommtg-launcher"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomLauncher\ = "Zoom Launcher - 3.0.1"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\shell\open	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\.zoommtg	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\shell	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall\URL Protocol	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\shell\open	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\UseOriginalUrlEncoding = "1"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomRecording\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomRecording\shell	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall\shell	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomLauncher\shell	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" \"--url=%1\""	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",1"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",1"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\ = "URL:Zoom Launcher"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomRecording\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",0"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall\URL Protocol	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\MIME\Database\Content Type\application/x-zoommtg-launcher\Extension = ".zoommtg"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\MIME\Database\Content Type\application/x-zoommtg-launcher	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" --url=\"%l\""	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" --url=\"%l\""	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoommtg\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",1"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\URL Protocol	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\zoomus\shell	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPhoneCall\shell\open	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomPbx.zoomphonecall\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomLauncher\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\ZoomLauncher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" \"--url=%1\""	Installer.exe

Modifies system certificate store 2 TTPs 3 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 040000000100000010000000d474de575c39b2d39c8583c5c065498a0f0000000100000014000000e35ef08d884f0a0ade2f75e96301ce6230f213a8530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703086200000001000000200000007431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf140000000100000014000000b13ec36903f8bf4701d498261a0802ef63642bc30b00000001000000120000004400690067006900430065007200740000001d00000001000000100000008f76b981d528ad4770088245e2031b630300000001000000140000005fb7ee0633e259dbad0c4c9ae6d38f1a61c7dc25190000000100000010000000ba4f3972e7aed9dccdc210db59da13c92000000001000000c9030000308203c5308202ada003020102021002ac5c266a0b409b8f0b79f2ae462577300d06092a864886f70d0101050500306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100c6cce573e6fbd4bbe52d2d32a6dfe5813fc9cd2549b6712ac3d5943467a20a1cb05f69a640b1c4b7b28fd098a4a941593ad3dc94d63cdb7438a44acc4d2582f74aa5531238eef3496d71917e63b6aba65fc3a484f84f6251bef8c5ecdb3892e306e508910cc4284155fbcb5a89157e71e835bf4d72093dbe3a38505b77311b8db3c724459aa7ac6d00145a04b7ba13eb510a984141224e656187814150a6795c89de194a57d52ee65d1c532c7e98cd1a0616a46873d03404135ca171d35a7c55db5e64e13787305604e511b4298012f1793988a202117c2766b788b778f2ca0aa838ab0a64c2bf665d9584c1a1251e875d1a500b2012cc41bb6e0b5138b84bcb0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414b13ec36903f8bf4701d498261a0802ef63642bc3301f0603551d23041830168014b13ec36903f8bf4701d498261a0802ef63642bc3300d06092a864886f70d010105050003820101001c1a0697dcd79c9f3c886606085721db2147f82a67aabf183276401057c18af37ad911658e35fa9efc45b59ed94c314bb891e8432c8eb378cedbe3537971d6e5219401da55879a2464f68a66ccde9c37cda834b1699b23c89e78222b7043e35547316119ef58c5852f4e30f6a0311623c8e7e2651633cbbf1a1ba03df8ca5e8b318b6008892d0c065c52b7c4f90a98d1155f9f12be7c366338bd44a47fe4262b0ac497690de98ce2c01057b8c876129155f24869d8bc2a025b0f44d42031dbf4ba70265d90609ebc4b17092fb4cb1e4368c90727c1d25cf7ea21b968129c3c9cbf9efc805c9b63cdec47aa252767a037f300827d54d7a9f8e92e13a377e81f4a	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 5c000000010000000400000000080000190000000100000010000000ba4f3972e7aed9dccdc210db59da13c90300000001000000140000005fb7ee0633e259dbad0c4c9ae6d38f1a61c7dc251d00000001000000100000008f76b981d528ad4770088245e2031b630b0000000100000012000000440069006700690043006500720074000000140000000100000014000000b13ec36903f8bf4701d498261a0802ef63642bc36200000001000000200000007431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000014000000e35ef08d884f0a0ade2f75e96301ce6230f213a8040000000100000010000000d474de575c39b2d39c8583c5c065498a2000000001000000c9030000308203c5308202ada003020102021002ac5c266a0b409b8f0b79f2ae462577300d06092a864886f70d0101050500306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100c6cce573e6fbd4bbe52d2d32a6dfe5813fc9cd2549b6712ac3d5943467a20a1cb05f69a640b1c4b7b28fd098a4a941593ad3dc94d63cdb7438a44acc4d2582f74aa5531238eef3496d71917e63b6aba65fc3a484f84f6251bef8c5ecdb3892e306e508910cc4284155fbcb5a89157e71e835bf4d72093dbe3a38505b77311b8db3c724459aa7ac6d00145a04b7ba13eb510a984141224e656187814150a6795c89de194a57d52ee65d1c532c7e98cd1a0616a46873d03404135ca171d35a7c55db5e64e13787305604e511b4298012f1793988a202117c2766b788b778f2ca0aa838ab0a64c2bf665d9584c1a1251e875d1a500b2012cc41bb6e0b5138b84bcb0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414b13ec36903f8bf4701d498261a0802ef63642bc3301f0603551d23041830168014b13ec36903f8bf4701d498261a0802ef63642bc3300d06092a864886f70d010105050003820101001c1a0697dcd79c9f3c886606085721db2147f82a67aabf183276401057c18af37ad911658e35fa9efc45b59ed94c314bb891e8432c8eb378cedbe3537971d6e5219401da55879a2464f68a66ccde9c37cda834b1699b23c89e78222b7043e35547316119ef58c5852f4e30f6a0311623c8e7e2651633cbbf1a1ba03df8ca5e8b318b6008892d0c065c52b7c4f90a98d1155f9f12be7c366338bd44a47fe4262b0ac497690de98ce2c01057b8c876129155f24869d8bc2a025b0f44d42031dbf4ba70265d90609ebc4b17092fb4cb1e4368c90727c1d25cf7ea21b968129c3c9cbf9efc805c9b63cdec47aa252767a037f300827d54d7a9f8e92e13a377e81f4a	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe

Suspicious behavior: EnumeratesProcesses 54 IoCs

pid	Process
3500	chrome.exe
3500	chrome.exe
5204	chrome.exe
5204	chrome.exe
5204	chrome.exe
5204	chrome.exe
5152	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
5152	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
5152	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
5152	Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
3664	Installer.exe
4572	Installer.exe
4572	Installer.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
5736	Zoom.exe
5736	Zoom.exe
5736	Zoom.exe
5736	Zoom.exe
5736	Zoom.exe
5736	Zoom.exe
5816	Zoom.exe
5816	Zoom.exe
5816	Zoom.exe
5816	Zoom.exe
5816	Zoom.exe
5816	Zoom.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe
Token: SeShutdownPrivilege	3500	chrome.exe
Token: SeCreatePagefilePrivilege	3500	chrome.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe

Suspicious use of SendNotifyMessage 27 IoCs

pid	Process
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
3500	chrome.exe
4808	Zoom.exe
4808	Zoom.exe
4808	Zoom.exe

Suspicious use of SetWindowsHookEx 13 IoCs

pid	Process
4808	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
1732	Zoom.exe
5736	Zoom.exe
5736	Zoom.exe
5736	Zoom.exe
5736	Zoom.exe
5816	Zoom.exe
5816	Zoom.exe
5816	Zoom.exe
5816	Zoom.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3500 wrote to memory of 2476	3500	chrome.exe	91
PID 3500 wrote to memory of 2476	3500	chrome.exe	91
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 2244	3500	chrome.exe	92
PID 3500 wrote to memory of 1016	3500	chrome.exe	93
PID 3500 wrote to memory of 1016	3500	chrome.exe	93
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94
PID 3500 wrote to memory of 1248	3500	chrome.exe	94

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://us05web.zoom.us/j/81989161693?pwd=5gSBP4NG|12pha7bDxD-HOHTC8kkBh1.1
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffed96fcc40,0x7ffed96fcc4c,0x7ffed96fcc58
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1840,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1836 /prefetch:2
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2144,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  PID:1016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2268,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2440 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3100,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3124 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3108,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4452,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4488 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4780,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4776 /prefetch:8
  2⤵
  PID:1848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4788,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4932 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4796,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4980 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4804,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4936,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5104,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5672,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:5720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5704,i,8108907510576960334,6740246870641697075,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious behavior: EnumeratesProcesses
  PID:5204
- C:\Users\Admin\Downloads\Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
  "C:\Users\Admin\Downloads\Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:5152
- - C:\Users\Admin\Downloads\Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
    "C:\Users\Admin\Downloads\Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe" /normal.priviledge
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Modifies system certificate store
    PID:4992
  - - C:\Users\Admin\AppData\Roaming\Zoom\ZoomDownload\Installer.exe
      "C:\Users\Admin\AppData\Roaming\Zoom\ZoomDownload\Installer.exe" ZInstaller --conf.mode=silent --ipc_wnd=262252
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      Modifies Internet Explorer settings
      Modifies registry class
      Suspicious behavior: EnumeratesProcesses
      PID:3664
    - - C:\Users\Admin\AppData\Roaming\Zoom\ZoomDownload\Installer.exe
        
        "C:\Users\Admin\AppData\Roaming\Zoom\ZoomDownload\Installer.exe" /addfwexception --bin_home="C:\Users\Admin\AppData\Roaming\Zoom\bin"
        5⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        
        PID:4572
  - - C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe
      "C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe" "--url=zoommtg://win.launch?h.domain=us05web.zoom.us&h.path=join&confid=dXNzPUJRTW9LOVp4OTNRd1ozS19vNWFKZmRubmhWRFB0eHBWUG5ELVVaQlVWYmxhSzhqYlV0V1NiakVBQ1AtMlczX1U3bjB6THZRZWcxSHVkOEdNUWF1a0FtUjNBSDJfdG1SV1NDWDZEUjdyUkdkVXA2c2U2NTAzNzZydlZyOV9uM040YXBVakFnZFdpbmVDSUtHYzFuT0ZQY0kyUzI0TWFRTlpXYVpLdUVhay1oRU5VMG56aktFYmQ4RW1NMGJnOWlMcjhXblRIYXRJM0NYX2MwME1Xa2JEVzNyM1VsNC5ZalRVcWpJOWFDTVpicG4tJnRpZD0zODJiMjE2YTE5M2M0ODM3OWNiN2U4NGQ1Y2E0MGYxMA%3D%3D&mcv=0.92.11227.0929&stype=0&zc=64&browser=chrome&action=join&confno=81989161693&pwd=5gSBP4NG"
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      Checks system information in the registry
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of SetWindowsHookEx
      PID:4808
    - - C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe
        
        "C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe" --action=join --runaszvideo=TRUE
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks system information in the registry
        Access Token Manipulation: Create Process with Token
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of SetWindowsHookEx
        
        PID:1732
    - - C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe
        
        "C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe" --action=preload --runaszvideo=TRUE
        5⤵
        Executes dropped EXE
        Checks system information in the registry
        Access Token Manipulation: Create Process with Token
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of SetWindowsHookEx
        
        PID:5736
    - - C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe
        
        "C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe" --action=preload --runaszvideo=TRUE
        5⤵
        Executes dropped EXE
        Checks system information in the registry
        Access Token Manipulation: Create Process with Token
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of SetWindowsHookEx
        
        PID:5816
  - - C:\Users\Admin\AppData\Local\Temp\zmC19C.tmp
      "C:\Users\Admin\AppData\Local\Temp\zmC19C.tmp" -DAF8C715436E44649F1312698287E6A5=C:\Users\Admin\Downloads\Zoom_cm_fo42mnktZ9vvrZo4_mFKl3eCSjN5H27NwV6SX4jqX+ZmlyRbXatBSL@uPeAwmFCjKPG3aBj_k1a515ab51008264f_.exe
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:5988

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:1168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --field-trial-handle=1416,i,4879762769355355036,5727689225362452198,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
1⤵
PID:1668

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5136

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x380 0x154
1⤵
PID:5988

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

T1134

Create Process with Token

T1134.002

Defense Evasion

Access Token Manipulation

T1134

Create Process with Token

T1134.002

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
d5b6f87858c47847dbed66f37bf2abd5

SHA1
84851c3baf4c57bad247780c8754168e354e5455

SHA256
ee1509dbdd02f20566aec85451f9d5e67ead8c8493ffd4586a6a25814c7b1b08

SHA512
cc364b46f2b4b9344c7cf9b7aa9cc2c10aa6d6ce4d608075fd752a0a36cf0e38052a1941de4ac4b3ab5dc7afc7344c16f97527fd7f1f5f8ea8a713ce74ccb72e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
97affa24a4488a446504cb7f91c90e15

SHA1
2de8a9bfb51cf40ec08369a68be207f8a29585ed

SHA256
f3d5f43c4500a46dde212741204e14f29e101ba6248840ad8464b463994c7113

SHA512
253913627494abd4d4450f474b2c926e8d376cdc0a77c69e07cc9af8df9f56557a09e4d4bb40635fa159739c1f3fce9e93275ea8cf90c370388af0d2545dd576

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
23f258d6061e24b9cfd55758fb88fb6c

SHA1
ef98975c9755a02c1c4d72286a9983ec477d383f

SHA256
3705e52de726bea47e05ca10e763a9e10272b1c822087f8fb845d4af84fea86f

SHA512
4798f14d269f035ab255636d76880257eef599d6df04f63f6f2617b6a774573f9fcd19ae8303cade3e852cd15d2fe9fe112ae074a8f40918190e2ad62bde4c5c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
e32780eb85d3f10859dffb7330218771

SHA1
50df3a7b463aa1d6d354a88a9d7bb55d33534067

SHA256
22761a4507b0b325591522050c83d42d8c7509ffba854b6d82bd4892d45bd9f3

SHA512
0c5d3699c5828e391b89a165d3da738254ef4374c461addc9adc4ac435c6a0cbb6e3376499eb47b6616fb57ebfcfda4ea5a87fb509e3b1e1c47dbe0b35f37267

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
1e298502c3f32b926fd18b462abb4cee

SHA1
473a5701d24c0f3311922c34d01c79fa11662601

SHA256
75cee19967f33bd5656e27ac925d32c52d1eedb946be6193795d956356311dd3

SHA512
2b16302d121e3a36b35b21a1433debfa7dcc4da914909a6e8c02ce9b277cfce094cc0917df2e28561b38e575cc6e546fad62e206d8cef2259911a06dd436e455

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
ff88dd874f40c2fe23ad1f304dedb22f

SHA1
1aaf8c18acb4eb3b49b2f9e88eaf3b89578f26ff

SHA256
292415a07374feb8665633f4f5ead50960fe9ab0028508cdb3d47a64ca4bd0f9

SHA512
2e87b07ff6cc0582d5c36a5ec27f067f98d16217fc3b47f13e770587a27d13de8fa9f2cab17f2ff6a84c58f9a53a076533bef125dc8f8776854d101ff3dd5739

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
6abd83af25bb74e7021d0b4a257f0895

SHA1
eb05e8e7a0686cf52cbaec5d1cb81895e17339fb

SHA256
76b4067e63d3e1019b18b4ded76baaa1d621e426515c39b9a7917a5959d3704a

SHA512
6ef600be350a836a816b9b3de1cec8ba389514d6849d31b45fb1fb0c5c5613f3b30d073b367981d900248da5d59d0fe4bb980b1bf8232e59bd7fe7bd9917f582

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
820a8a1fd82ccabb7d9fa2ff9fa7b84f

SHA1
c403ef1731c91c387f6e08650fe807095d1f7e51

SHA256
f0931ccc29cf73bc3378cae14cba34a2f8d2883a8008dc57157493ca8df6f23b

SHA512
c5bc8df77ddb3f48bb79c78621b4023a2711c44dba4d457f1a381608fc0e422b18cbd2f4cfa009d32c440d6ee015094e13bfb5cfcedc5857e3f867d7f9502009

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
c608c2f238ad0cfc856a93d08700ffb3

SHA1
12b6ea01872cf40191b9f6ccd3a8a43fbeb08a37

SHA256
35150038829a0b2b7c04b2054291a38b40174481074e5680bd631137e543ddcd

SHA512
6b9063a779adb1dd7308aadf7622a9e4212c89d7fdf40aae0e62732b0bb82f346184e175c3417350a59eedef322845c7d8dfc2be3c08ca0668813a5054a9fbd2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
163628d98ca16a454bcf61f0d1b7d23f

SHA1
c8943306b7a094b876ac7e290f3119a6b105da2b

SHA256
84045793d12a12a5725d10782ed8f03cd77da5ae65fc02d7351192e323c3f581

SHA512
bc2f3d4683b07caf6a500fbcd038ffb4f5eff3b0bc1703127916f3aed4ef31a95c753cbb3e6aad106dad548ecd4eb7f344c4e094b1439b4cbb71c09b48ccb059

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
3f4cdfcad831a3a81098cd9bedbb88e0

SHA1
dea619a8dc460e706fba2b05092ba14b19d18507

SHA256
03422403f18a4fd3c9256234ec4f1c7ad4993b44ab8ace72b6ae31db16b53e0a

SHA512
dfab068fbf69835b8b491f8b9bb37e5711b5ba2e2a28d197475304bf0b80d84af6d419bdb8153b027983f5c925c0e91c1cf115325f776c55150ebc4b217a5593

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
29387a424ed004e4506290352b4f81f3

SHA1
5ffec4480072edc4f2b987761f1bf9fee4e2353c

SHA256
fa93dc064386ccc4114ddb6e4b784ee19d92eb38b170a288db2e6bb1dcf8320a

SHA512
6ee18ed1c358ad4b819176b95e307258dcf776967e2fac31f2afc2663843b5618547c6649fa96b69823bf4e52cf650b485aafed90da35b744927e3cda717664c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
14ae26d4ac748aecc87400586e814b12

SHA1
149383dbe02d473e9ee44b5de8f856a481e3d560

SHA256
e338c2d59687e1e6332e594f17acaa77054a115b6a380c12124c9d37a1c1bf58

SHA512
308349877ae15d03c5f5d885b055a972f335669bb5e2001c8fa96902384ba9378312ae4cdd29934ee7f14560797a8f5ba4a0b6886eb7ea992492a7a528f5e782

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
76b02cf0a039669b08665ce25854153f

SHA1
d100b5d1a84f85f1560c7e9a0d732ef4dd8ccb5d

SHA256
be4699cf27205694eeecf116fcf5bd453d38aaa24336a4a70d4958be6ed4e13a

SHA512
1f10d199530b676f30d27255980f20a342195703385bf5a6350d0104bc94ffe29751a9eeecddf1352378168b431a0e1e3c0e20104a0653a44ff1fd31f3a514e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
37b383de9914ac50f2c1bacc8bb48a38

SHA1
775368ab821c061e0ecbd0b2442fa444091b549c

SHA256
353099dc69ac7c9dc292f1ef23bef5d92b324543578040585bccbffd1861309f

SHA512
e61ccc2b841c670ca21ec6cc7dbd6a1e603843465c342496de460f0c92861357abb97bacd86038398b65da701843a56b03b87af7aae1a70c0d041daa63a5bd8f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
9577314e8005c4ffb17a37b4c08bcedd

SHA1
3f076ac2997ef8a6b184085d31f15b8f64e42290

SHA256
3404367cc7ef57f37b59b79f1c12798fc3a4c9fc866d7515a3247b0e6aa7f576

SHA512
fb2f3a698402bd91986f190de514d625e39bc49216ed62c0d1e4eaf8f4a95eaa7d3db5ad4249e9cd1f49d2932cae872d7a45140ecb3c0a3a244aa24122a690f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
0942ec5172c01a254a6b68ef00a466df

SHA1
d9b890214576d95a4b1f7b27ce8f7ed375de9bb1

SHA256
d93a9d47063ce4ec57a64f383d2a52437a1a107f5d7087a19a5b035c6709c76a

SHA512
cd9836d5d95c3bf981dfd28706fefbafb4c3d9059fe1cb5fe46e1b60cfd261dabaf5ce9a6f1e59a551e1a28f6fadbea477c75d4fb6c3e7daaaed055ca7e09e6c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f9e302c3a6fa4038d9486117502dc3d3

SHA1
511c38e8251abe9777599207ecd88b1a88577b42

SHA256
445f0153c1c7601d51b2b3e3ed3f3ea3b5418729035f8dbfeb219a98c4cb8dc5

SHA512
d4dabbe8cc2e0dc2d637e71b8b5e0e6f954d64de7457d0d1b0c5b307d13dc718a1332b3e7b8e50cd87006fd6ed5e1d3250e1a7f0eebf1cc0afb68b5f48080b00

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
28f799cb390084b9c401d0a478ccc303

SHA1
eac9a218f889c942044b3f423f9c8daee8c516a6

SHA256
0155ec81f430bd984a57dfaeb4afc55a6fc91547367d6be4b012b528b948a394

SHA512
6497c4053ac338210e26edadd86b0b4a190c650328d781399cc87f60b136f932e936e087efd198dd2d10521f96416d5c34dffa6525e6b677690b839443982465

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
798d23c7065d9ffc2585d144c2c6d4d3

SHA1
8f2c00af68ffdf53fbd9479651b20f20ebad7452

SHA256
37a651b3ad49eec0b82839b7e73551599b7ad09704d315ae960516188130db8c

SHA512
c6e780a90b7cf026a3607b0f098d1476cacdbf0f1f536e1fd44c6c0c8781edabefebcd6e91000773ca0052f845484ab75cfb8dc613a7e9bd7e160dc689f95924

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
19794b08357d401c2b16b6e9e4792a93

SHA1
35f9b6822c445c92f97e16061ed52cb23a0193f4

SHA256
523e7a815e481d1f6565d4bdda6aa9e03222ab606f61e440d608e08950469d5d

SHA512
21bb588ae79c21b65bb4b97d6a9be7da7cd10a2bbbc87bf108a9c3eb2ef46509c285b7b1e959b5977623db6713997e4db221e4ba8ed7044d371352684746b5a5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
af5b39e9efeb20a39e8ac7bcec04eaae

SHA1
39fed1d959f79e9abf596a10d3f875db2fcd9442

SHA256
f91f19e9b432f72809ff5677273a575cdda43f3ce39ab4ad9c18fda295e54e99

SHA512
fe2c6b63b69ba3f632489f4b4aa95d9a9f48719bb7b61bdcff947a372627d8c0d30ab9d54c255625920346443923f708cebecee85c4bd4149679ddbe9660d0f8

Download Submit
C:\Users\Admin\AppData\Local\Temp\ZCLIPS~1.zmdownload

Filesize
1.9MB

MD5
215ad1e8c4c39d6dbee71b4c9e38255c

SHA1
98711f0a54d387a1496d7ad37012f9f5413a6246

SHA256
83d9fdc16aea9bf1672f07e5198c4d908976d0b08a10028b0f99e7b7ca2feec2

SHA512
6e61c2ca53e0d33ada63cd7eca84ee03476831a6865bb676cf9424d4b0b02ba6dcd57987aa26552df614398be690328f2b0b231984e0e65e8399b6e54bb3534e

Download Submit
C:\Users\Admin\AppData\Local\Temp\ZCOMPT~1.CAB

Filesize
8.4MB

MD5
b77ceac00267c6543df8e5686d92657e

SHA1
4f3ef8bb489bb5798c9fcf3da1a4c992f2c4e00e

SHA256
eb7efffa0333cb3d15b7347b371d7aa465ca0b30bc0ec3166adfa5e58873dac6

SHA512
feed3d1d14d492bd62f1863d8f4c8183e91115a1e502cbbb5975a9da0512f1a14e344fb9b54e3f830afee766b3aeb956e83bfc7651579d239c2e5fd17ce4bbcf

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\ZoomDownload\Installer.exe

Filesize
1.0MB

MD5
c0678cf2f5628b0c4e9510ef00862118

SHA1
5762a7ff3d535ec5236ad9d63656c3411ddb24d7

SHA256
2714cd2e4e76eb2466c16aba703a92ce1d8c1f3ae2baf4c366cb5c218fdfc458

SHA512
97b1853a69e2cca386631cc10d8671ed10a73eb6f09294af7e83e22321681d1634d5d78cfd7916ca21aed73898b2b2d24a0730c22ec9e9d6515bb83b193243e2

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\ZoomDownload\Zoom.msi

Filesize
41.5MB

MD5
c31d1382b16a291551cbde49e21b5b84

SHA1
cbdaa27275661bab38d5b37ef51bc78612fdcc66

SHA256
12d0c205273388f9f3c7795355ceb985f059ffbcb5a80b7fff00e3bdf357cddc

SHA512
dca57f0c2fb7cfad196063041d8e5e80dc855f027a1d2de8b1966eff9767be4c598ba85dac02b4e45ca22100785415e8156857121a5e6a5ca5c2a6c604de0633

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\avcodec_zm-59.dll

Filesize
4.2MB

MD5
c2341817038b0529702dfd5f2dbebc6c

SHA1
ac91ec8a3b608bd632a4ae6a316eb2f8944b000b

SHA256
1f89882ad525349e6710d9417429597cfa048661eea2c228ca0d886b4ba8f4ec

SHA512
07dadcf3d149b24bac66ae6a5598054ca7dff6f60c932acbf54d5da2df1f8b1c16681ceb5abf24ba0500cc92994899093a8df868601d0f4f21506a6a41cbc63e

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\avformat_zm-59.dll

Filesize
613KB

MD5
707614452100f4056365c24c21a98ed1

SHA1
262bf2781ac6f13b474682554ac021f263b2082a

SHA256
0e9e2f00b37dc8e55db96324e277c692fd4c30e9bfdfc7563cce1e2e99e81331

SHA512
5a50188b57086dfb3359141922f935cdad7f59715afe2bd15f75e81f4f95367da3f3b1367fe85be22c9f9eb22441985c4285a2ecab88294062a8542403580916

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\avutil_zm-57.dll

Filesize
1.0MB

MD5
1981ee3dd6ad4e0f796dc1611340595d

SHA1
cbaca3a476393f9bfd5c7e1cdd12ceae349a05fa

SHA256
4c0132d930b62802ce7df0d825241b4a95318146a3e34ccbdc9241bc8eb3ffd8

SHA512
83193731ef2f005354d8efef97c8938ce938e4500ae949053dca1b42b65f39e6b7510000055a604f17f09aefe6e5214faee99dff448a2eead006a8d8ed1e4919

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\msvcp140.dll

Filesize
571KB

MD5
5cde3aed10412762e83b7fe43694a22b

SHA1
4ffcdf063eafc901105836c27a634530ea614755

SHA256
10ddff48d704c6007e4c2d53fb4856b5e5e79479503366236246a323aaa76e9d

SHA512
fcd7bc262e7bbcbbac9258e31b8d62efb2e601ac1fffac4c86819c8f2aed26fc19403d992a57d48ec92752b2a0a8b04e8204423d6077c7800ea4015f016faa23

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\swresample_zm-4.dll

Filesize
215KB

MD5
9851b961ab9549cf8127e306376e3f2f

SHA1
29105db09a091dc14840598a80650037da53b5c7

SHA256
0af60e44a00f021ac6a3ab71973c83fbf7dfdcd696702748f03eb69c51cd5378

SHA512
9d8a6af467d7eeb15520753bb4deaee31af1400c5f921f7acd5d34a435b94cb2f65516cfd2f6578f596ab1fc7b1049c5e57355340154f7e7fbb2dc0a876c5f67

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\swscale_zm-6.dll

Filesize
903KB

MD5
84d32ac626b7bcb6d9402b55eae1de60

SHA1
63e2f2ed1b7937e57ba8d4c2e50647f70fbbff11

SHA256
49f7aff09d426f726480ac4e18e707f6d4ffea0c588b07708059e08dd31b48c9

SHA512
92bc8597c05c00f30046fc29cc76cae24d851710466da2c63820b21148de94a6bc061ab623f01e33021d2d815864f2566643143db30cf6456af56c65c9a95b86

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\ucrtbase.dll

Filesize
987KB

MD5
61eb0ad4c285b60732353a0cb5c9b2ab

SHA1
21a1bea01f6ca7e9828a522c696853706d0a457b

SHA256
10521fe73fe05f2ba95d40757d9f676f2091e2ed578da9d5cdef352f986f3bcd

SHA512
44cd871f48b5193abb3b9664dbea8cdad19e72c47b6967c685cf1cc803bc9abb48a8a93009c972ef4936e7f78e3c92110828790aa0a9d26b80e6a523bbcd830d

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\vcruntime140.dll

Filesize
91KB

MD5
7942be5474a095f673582997ae3054f1

SHA1
e982f6ebc74d31153ba9738741a7eec03a9fa5e8

SHA256
8ee6b49830436ff3bec9ba89213395427b5535813930489f118721fd3d2d942c

SHA512
49fbc9d441362b65a8d78b73d4fdcf988f22d38a35a36a233fcd54e99e95e29b804be7eabe2b174188c7860ebb34f701e13ed216f954886a285bed7127619039

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\vcruntime140_1.dll

Filesize
35KB

MD5
ab03551e4ef279abed2d8c4b25f35bb8

SHA1
09bc7e4e1a8d79ee23c0c9c26b1ea39de12a550e

SHA256
f8bc270449ca6bb6345e88be3632d465c0a7595197c7954357dc5066ed50ae44

SHA512
0e7533b8d7e5019ffd1e73937c1627213711725e88c6d7321588f7fffe9e1b4ef5c38311548adbd2c0ee9b407135646593bf1498cbee92275f4e0a22ace78909

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\zAppUISdk.dll

Filesize
448KB

MD5
91b5ba74309df1441c5a8730e5217a94

SHA1
0cbfad75cd4f00e3aaba4b2e4320530a10e72dc2

SHA256
28cd779a994c7e4296eaaab2bb64ce000ee361c38dd84942103f59a71afc84c0

SHA512
374604967888aae19f4be1b127643828ff531e8c0c3205dca195a5580e71a117c92e5ec52516059dc9cbcc3bfa678b617d1ed4fe55612c84efbb65e4f110e2b5

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\zDiagnostic.dll

Filesize
1.2MB

MD5
bdb9fb1ae56978c7dab8dae4dfb339ab

SHA1
4cd56e0030e405b79c7f01cdf62adaa62f09a631

SHA256
c14dcccad6a299f4e5f68d01fd7cb03dd7b3fc9927478419e3015aa2b6f2d3e9

SHA512
d2b4403239be40b9412b704171ccb0029196529c64eedc256a356ecaf927e87e25f94222b2e85fa3538a9c6415fa427edd348b706e3545a53840db246002e9fa

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\zPSUI.dll

Filesize
751KB

MD5
68f21c861446384693c44a7d96ef3ad2

SHA1
dac0f6616da77558fb992eee5d1502f324cb9dae

SHA256
2b587797d41fcd63d998b77f4b48eb6b5dddb17d53ce56abb50cd48bf0fcb30f

SHA512
dcd76fff99c65997bc88309afdebedf456eacf46477f2628ab7aafc0fc7b6e86a03e625add9def25c98c5740035e6c49775144464d596db6ed6f0fb2d8d6e0e3

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\bin\zPreMeetingApp.dll

Filesize
2.5MB

MD5
0a92bc6d97fd5415b1ff7fb807308892

SHA1
880d246f09bc4df9051edaabf88b83f6cb1999d0

SHA256
80948c3a583338c6094a973ce6ea9502eec0f4e6da0f0f5116dcfde437ffb20e

SHA512
b33b616ded6130d09e01d67e524bfb7f24ea048b360022adec040b6145c95c83b971ab54d87bb46ba1ae03647c6c01b3135bdba74b396caf7d354012ccc71a8b

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\data\Zoom.us.ini

Filesize
391B

MD5
6f14c18e0e8f6a309bce04c4396d139e

SHA1
e7fed265d489a94191320ea1255ea7d5bf6b09de

SHA256
1ba1d185cdc7ee11b2879eab88464c59fc454be99b46ce594a223db09fa5f464

SHA512
43b22717e61521a78be856f9a73a966a02e39bccb7ae48961f1f315151aac03501e30ac84ab1ee504b23267bdb7368254d67c3e734f6b8025360ba8649e7348d

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\data\Zoom.us.ini

Filesize
420B

MD5
42bfd9941923adc802dfb217f815d95d

SHA1
1d46145c7d3df5fedcf34be1d126ff0ec8a849cb

SHA256
0b6ecf3b681d3c0ec2b5264ffdc80d2d7c47f082e3799a7b7f52e7bb5313205c

SHA512
ecffe3705da5357bd7c3513e825a3024de2db11fa5c2be3aa5a2c40aaa7dd57ce6ffb92c7b8d7d971f82f97bca3f6580c44ce0ff37cf8a197bf101cca1758cb5

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\data\viper.ini

Filesize
128B

MD5
98f796af63c92b53a2337eca90f0e01f

SHA1
0b50ecb34cff811cd2ef8fa38aa94484d9183ece

SHA256
d070cc2beeb920b9bc0c7081569549bd0f13e0abbbc3acfa11929ffa24165a41

SHA512
1832e0b80bccc9a032b779681823469afe122720d7a80c2a8ac3418b45511417260ed0c74ff0db4adf8c3a0b288d85d768ec4a93821125fc2f5c031c876d9eda

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\installer.txt

Filesize
14KB

MD5
073e1fdfad4d087b98bfe7b0e825f6cc

SHA1
e01c693c454d3686a2d5b2c9371ca874eebfba46

SHA256
2ee31bfb141980e2f6a90d3f56663d05018c1aa64dd84befb4beed6599c8fe56

SHA512
ca8e6e32a6b5b21b43df4ff0f14b6b5e629d165f50f482062288e0b843007adff161427ce9dc2fee6ffb0a4166f0ff55fba7cbe1b4085a2c55d28074d4615dd4

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Droplet.pcm

Filesize
856B

MD5
923d4747324854f50ecf69324741c8ca

SHA1
4c19f847fa8fdf55e27b2847bfe09789adfb9e59

SHA256
3568dba00a55d25b736737a48163c13c1348afc5d4022a29ca0d3724d29ffe9f

SHA512
4ae265a89f693304fbeeb661d46d0cd96304083af75b5c245db63a632f40e08ca280a68f20115c6c38f5202801b29084633ffed4da16304689c4379f77693a0d

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\archival.pcm

Filesize
5KB

MD5
2da32e501e9720b40d438ff7352a5573

SHA1
e59fdecd75b2c8cb4b26bb4a2b3c622dca8a2e3b

SHA256
5e7d1491e7d6969eb67646f87ab2dbf0ff1d1cb4f5cf631128a305e2b67d4a1b

SHA512
5da2c201bfd01fc1ef1724acb0f6fddd7be39f83b6fff5c80aef71c96f14d30c694da82b1c41183b2b9ab9ef99d45faa657c4f6a984f87a97aef08d9e824ccee

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\clap-high.pcm

Filesize
9KB

MD5
c32f95839557340b4b4197a68847ca1d

SHA1
0feed637c4766b9b30ab6732259670f8c12c5538

SHA256
0a16435cb3f7b8b1787476575ad646361e6fb4c07587df874940413de004dd08

SHA512
f5f0dd4a313ff6686bed5090aaa64885d319b8fba51fb2722b764668b26f06ce95164444652661b027e35f3c6928d3919422e4816bbb81bbd0f7914869004700

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\clap-medium.pcm

Filesize
8KB

MD5
aa93ab138ec89cf7cfb8b4b0ea8990a6

SHA1
d13b139d666c76cb12e1c0280c1343770adc8aac

SHA256
d754fc9d9378772b7a17a53e6598c9cfe4a0f3ec492f0ed30241020562f58509

SHA512
f91c59cf1b1645b24997a1201bddb52953c0904f855b78add275d71401e4f9e6bcef59fe1d7205e222470689dacf2d55ae752cc2be66bbee5258db284b42e6c6

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\crashrpt_lang.ini

Filesize
7KB

MD5
fcf61aed8f093bfcf571cdd8f8162a05

SHA1
8de8177798aae82d5bcc0870c1ca5365f5d9966d

SHA256
1f5b45a5411f7fc71b9da789d6d1ead8ad30551fbea7bbb40fc7ea576d581abb

SHA512
8a5d252d115f868a4e20fce10f9f9ec5f3948f0ad5680d656e0eba1fd167d36889e54c6e59bcde756945f93685401b825ba9dd7243d907d74b58a1d826609d72

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\dingdong.pcm

Filesize
3KB

MD5
54511224e61e71d2915ff67e57dcb268

SHA1
ba45f16f12d2e29480952367c0c6bd34fcd16827

SHA256
7aadf0e317831d287b51e41992b43f0f381ae48a312cb77a426eeb3b6129d6d7

SHA512
46b4ea771328a25c6384d5cdff7643ced94dd446830b165f80fb69df2dd2754062dca0636604602a7ebad4ce29b3f8ef62a81f59cf5502bfc78468c8c67a41ff

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\dingdong1.pcm

Filesize
4KB

MD5
8fe86d9e8aa5c709bb0563243172e580

SHA1
c22bb02d82516a66f8473dbb4209bf22bb60fa14

SHA256
2fbbb9ae6a463b360e1459bee558dafa8d864db2423f0fe4d2c56d22c3f3a5a2

SHA512
6c47e964421ebab2c0c6199b97fb9c61b0a228fc654abf2e4d2bbaeec9640be2a5acca92474dfdd0b43facc71c60a9c9ba727d300cadb6128ef1f3dcd9a6c10f

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\directui_license.txt

Filesize
593B

MD5
ab54b14548a4cc76dd7c27414d971111

SHA1
68a3888b33ee1c5d5efb913846867c9a8788cadb

SHA256
6033476be3d1d41166b65984e2be94c87ac98dce55bfec887e932b696e859295

SHA512
cc8c4d90efedf4aeb3ba3b64ebd0e938576867618a334bccf3cb6790338c6a1da239393a618f6e6a1186cb363cb514ac9528ada51f0090fe2fc709e5c666d971

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\duilib_license.txt

Filesize
1KB

MD5
7faec2006bb231d14b794a9f31769448

SHA1
c2b5a34fe521502f6fca3031201b47074f30f258

SHA256
7ed2acca31a243ba107d8c12fddecd52462fd326d3d2c73b04d4cf10c76765ff

SHA512
777e0ec5d6b599fb0eabb8180fb6f302012ff12245e3de6a3dc568798cb057858eff18b08dacd28a72250236c4767abc2583670d92a946f684b45cb5144bd7e2

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\leave.pcm

Filesize
3KB

MD5
3fcc19f6a199e97646a0ab32423c9332

SHA1
05613b14d6c7336b24e9779963d245098e73b40c

SHA256
efbd514b0ea241a560f1333cdbb90a9885d5c70c01ed032d11b8a672b1096a04

SHA512
b370ad863badd0d86d982eada1fd98306b686ef1cca4cc522558cbde40257effa96afd7327141beb08d9927a6b190e0047ad7978e87a41bf299f030c1cee121c

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\meeting_chat_chime.pcm

Filesize
2KB

MD5
b30a997b4a9df68d8796eef6f457f4aa

SHA1
23890fbc1f66c1061c60b8287659566c69b297d1

SHA256
f2ff5d73ee2a89135094ecb5165b30e351bb24ee4eeee95508f311eecdc9811f

SHA512
8cfc3b13d7c2ffa0438ab12669aef756bac76063cbf317e449e5ba4127c0604bab6fba793866857f4a68806e9ed779c0c521fc46c5ae3aab42de7c72d98613f4

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\meeting_raisehand_chime.pcm

Filesize
1KB

MD5
cd7d41d5204013ce176c99c225016d6d

SHA1
996ea48981e81ecb107cd77fd0d6e35edc4d4214

SHA256
cd9b81d47633fe9aa3f1020d895161de8c31797b365f93dfb22a60d920cc2eb3

SHA512
44afe616a2596abc76cf9f862837b26c00e6214a08b61c6569e7ee07ab4331f4968d718889863cffc74ceed55ff377932432c7191dba4efdb638ea3b96badebc

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\nanosvg_LICENSE.txt

Filesize
880B

MD5
078690812af4ba8567fcc2af2ca1d307

SHA1
f4f94babc436555d2f5992e29aacc47433fbadb4

SHA256
e82bc3dd03400aecabe12201219ba14750dbc4b36faab58663a7a6068548d372

SHA512
f4e1f1092ab90f380a63ed1954023722d265e32f7f3d9b86100fbfa7d6ecd8c584a7dc22b4e3cc4182957136e2d765d0d6a293694b739377c09b076e5fe448fb

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\beep_intercom.pcm

Filesize
1KB

MD5
618a307ef3efad70399a6107cb1ce9e3

SHA1
8b42e7fc116a27a3fa868db49b3d0204f42cd913

SHA256
32567197286cbb2dffc282f7cae8d46d13af9d5e83bc98773a836904d244326f

SHA512
3181f538cf34e09de3ced6b702eb55654888b3b533a339eaff97f6f6da9014900f076c76ddd407c0c3736156a896fd23a07952c04c06664103cc74f317b8ea74

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\double_beep.pcm

Filesize
3KB

MD5
a2243b1ddd8cca6c40030020b57c606e

SHA1
9d0084832970caaf750335d5b27a3104623e2275

SHA256
e00dbb2ed88cd107bf384102e1353bb8d3a777dd9624a680579e4267080888d7

SHA512
04ba003ef55787f3d19006e8a3489b861ab86834acec445ec463172f5530fe72472c0bb39f62ff8d0222f388b63a6b2e28f5919fbbccea416654d7cc13f68b49

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_0.pcm

Filesize
1KB

MD5
285974390c5114e6a8e91a2d63266a38

SHA1
f5b5b5ce959380d0358c463e2dcb9cafbe709843

SHA256
394c441e19f6d34b46baeb7820726f279bc71d21e6911070dbb58e67568ecb9c

SHA512
de85e1fc198fa235bc233cfd45747c30a8247af71b83e8ca30800cd754e6c45ae2d9754e4de0d51e3f2aed26ff8cc829d29374960f3b434e48acbbdf530ebe43

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_1.pcm

Filesize
1KB

MD5
842932d135c62a4866c698cf415a13d1

SHA1
7977e8280576cdfe14449e0522a824342899e21b

SHA256
1a5eb409a8dd747b37e24b3a7a0c3c8aa7c55778a9bf4a71f4bdf3b5ad298c5d

SHA512
a34ae285e13cf25beb93153f1de77c6bb61941fd4d8f91b9689cb84d37204072ed4ddcf17a7f2319393db6383a949d4d0a8722245116f6aee8ef62524a403e29

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_2.pcm

Filesize
1KB

MD5
d30328c7ec556e0fc8537d1a2316c418

SHA1
bbd09bfd865686297bc06ff35fbd5f56374e3dc3

SHA256
37db0a7b3ab878fcdc1da65dc21c006daba8791c87ae37d000d516cdea9d4804

SHA512
913c7f778f1a954c43c275e544689a528fc4a59d30f1d315359191de60f9bc9544bd322fc6842b63e8931e8f0ee8579f63a3e810f165d92a2f702ad3d8e5b6e2

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_3.pcm

Filesize
1KB

MD5
3913cdfca0b0dfad1c11ab3cdb81dcbb

SHA1
92e17b1f78788d5b98bb539aaed018fd72244411

SHA256
f8902a24f7dd5f4355e684ac1cb0029992581c610ad011ed2c900f8957c104ad

SHA512
43d22a611b65e10b9bb4b8405a993a77618c24d8866032672d43911707ac9f6497826cb6c975ae422c7d61412d6bb2d2df0412fc7fadc0e5e5f84ea09c7475ff

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_4.pcm

Filesize
1KB

MD5
065ce5dc0d49c48589a3eb19603510fc

SHA1
d0852569e60486c2d9206c35be826ac4d23f79be

SHA256
c50e689f830fea83f82c6cb2e5472b3827c5635490f0d2b0e56c346bad616a64

SHA512
c4661a30868376a7ed681d4d984efcbb8af4a7449059f31225c63ce1cc88a3b4a7fba3e3047f2b29a0e0e437e8b4832e888f65ef86ea40c2063aa0f736c61307

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_5.pcm

Filesize
1KB

MD5
532231d1e36ea53a168830033cc0aec5

SHA1
4407c14ffe5b12b7100db43fb011564269f702a0

SHA256
83ef758561576bbaa981e976510b74eeeacc181834064ba7412eaf876cc25290

SHA512
05bb2d8ae7cf3ead9dfbf05fef4983ebfd4f5a8991ba43a92191a1a97b485dcf17e315b9a8d39300c71be7114f15f0113a75c6648fcdfc46b46e6cfd2b3ca0fe

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_6.pcm

Filesize
1KB

MD5
a8e1e6ab27026fcc27307250e40dc64a

SHA1
a3d1bcd57edd4aa3f52c259a5b72c120f040d583

SHA256
ffc6da3e558a9b25cc03249f675aff3bd3ac21d54435fa8b23f37cbaf54dded8

SHA512
c82fb729e9aa1fb56efae9b76f42567b871b2626c29945d0e6b51e4f876f43b97b8bc5f0bbaefa56cd8b881def405c6b8a44f331500f169de80aba120c98f766

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_7.pcm

Filesize
1KB

MD5
4f9cb5dbacddb4099469ff30fb61490f

SHA1
0a338b3aaa04309584af7ee0f14f1767afbe1da7

SHA256
79f7a132b33c6525ee483231a53b8298620700ab21343cfa70d716e96fd12b8f

SHA512
488fba0f24d2382dddd25c05531a5f61683f774dd86d41b652ce9473224607de9744a5a4463907930eb3b010e6f97f7b7d1ac5a9daba8453525735d338399a5a

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_8.pcm

Filesize
1KB

MD5
a9293ed20c46e09ebb87caf37e92f3be

SHA1
dd6e3ca3ef79d26f71fe432a2d928e9177f13205

SHA256
4c682a59d37c32715d7e82c1592fcfd51ceaaca7fc4464817f74d0c005a02372

SHA512
ae2572da5274f686ab5b2ca05c273e103e037f1b2d21775f86e780a6a4e97f61059387a063e86f276253011bdaf188b2ca20cb29ffca5803fce5cdd9a69f38a6

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_9.pcm

Filesize
1KB

MD5
cedbfc417b6ea8e076c99471e4d746ad

SHA1
11d95a6490613c3d7f350f5525ae47ddf244a5f0

SHA256
c5e274011991477635400e5a2c81d3b6cc12c50a61267b0ecc70077cb92a9aa7

SHA512
358120f75fb51a89979cbec3c1dd0227e286019025be9308e81f5e2f4c02cd9bb0022bed4db357d42990c5f0503aadb88963d7062382d9cd832440e12a338cd7

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_a.pcm

Filesize
525B

MD5
6a95093e7fe3117bb1e614fa9727bfdf

SHA1
1df81e069ed43aeaedd8dce9d1c8bf56fa6b96a7

SHA256
d705d27155e39da52d84034389fbc3953d98f2e7a6007c44cf0ea1bdda4b3bb5

SHA512
925d6b17cec73d8ea98ddc3b55d17c6e014a5d4504251563c5d5d55a9b7f8caa43dcc6d7989bbce72a62e1708a54ab7b09bdd84f79da9010bfebf6cff7534c99

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_hash.pcm

Filesize
1KB

MD5
569480b0dfe8b64b44f72e5740a58230

SHA1
6f4ed602780fdb7c3eda983bcb29007bcd8fbf77

SHA256
1a256021a62abb1386eabe58974db5bac91c622f9fecddc9f87216c102c23628

SHA512
89f6452afa3aee5265de3eac9ce0a5830163187abe6c5415141133a0b9c7ea091dfc198cad0b4662588b8f3785c93e310feccca3200b13af0c15caff7ab45d1a

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_star.pcm

Filesize
1KB

MD5
814b4f610592e7d68725f87b04dd5691

SHA1
9e3f0489d1889b3201753730211fb14ea1fc1e21

SHA256
719f8aa3842eef2b413eb8dff026c2b442acf051af040b295af595ef207dc32c

SHA512
929f10fc51e71759d375d82681f6b9106932b27e0cd39fcd0fbacc2359d1907631a912d34958628c651c37617bd4d5d9db93d321f0592c30d0294428890abbd0

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\ring_pstn.pcm

Filesize
13KB

MD5
f199df8ed884c5af8fd07aa0e046d19b

SHA1
507ca087de97053c4e65f4576f78157813e6c174

SHA256
0a23d9800db639dd5f40ff0e1ca3df5729df7ab81affd1a02db445b4b0ab235b

SHA512
176a88eb7df30c78442c435f102f865e1f8c8a6d0fa03f1af823cf6b7a3c290e50df229b8775c9234f09a0ab5643410f5e00bb4eae550c13cb59ee3d4147d5f9

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\percussion.pcm

Filesize
3KB

MD5
388728657dd2d77d2257a90b9c935650

SHA1
17c15f9be8b263c52dc165b3395d8d92e72ec313

SHA256
dafa23315ef2893d200a88b65b8f455e788acd616d0634c35385d460f07c6a61

SHA512
5b4b298df61c4bafa4f2b4ffe2193ed331460ed922a17f2abedcd20f6f1b1af8719694299e367af0ba757ec3496d99fc67ff1963e27195ed30a95e5dbe97a2b5

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\percussion_pause.pcm

Filesize
17KB

MD5
fddc411010d812fb444d70781e253ed7

SHA1
70f75fbb27a50f80e78c1c08485928ed0f05b3d9

SHA256
e8c8ae4267e1a14352d631418b4fb16d767e3d42aa9528adb5cf378a219b96f1

SHA512
155176a313b5534963f1166139403301cdebc5ffc082d48058975da4f60e083ef25e21dc262e20f0414aed049b746d630bf668961ca486200c327ebc554c6488

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\record_start.pcm

Filesize
4KB

MD5
ab8a5f2981e225d3edaacb520083835a

SHA1
c60c383fdb6850cb5013065576de87610270fba7

SHA256
193c4ffea3de04802e97e9e62fcd8533d8ca53e7306ba113a2234959b5262eb4

SHA512
4381f709c5e9d0172027fd2fe65ce37b0444087d3e9d7864cd54651cdae6e8429653c02ebb7a55a5de194ccf0d674f376961b012b088e131a11b7352f1ba69dd

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\record_stop.pcm

Filesize
3KB

MD5
0001fecb6b6e044d221fbc6a7e22e313

SHA1
c73a6506c92d9a1188aaa793afbfc1951cd5340a

SHA256
8cd8b4d3e8447d82dd045c7a3a8f175b97376c3db5895506cab0af6a0075226f

SHA512
1588169348727306e9c4ab444a7857924bcb88e4dca2be8e3526a2227cf117702c47431325df1c83f71da34bb35c28d1589eb3f59cffddbb3dbbe1d00d8d76de

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\ring.pcm

Filesize
8KB

MD5
15f886cbaee088418b6ffcc29115c64d

SHA1
9147beae4e9138ba609f67e75f9cbea7651ca307

SHA256
29792a0893ed2457c3872c4418bdd71f5e6c1b8e5894c2c921f8a8f8d797d4dc

SHA512
e5228897cffb5e05a7a66471c52089ddb682d544ac3b4ac312804883a2d335b60edb6236286dbfb6934ed12715709f8ffa09dc7014844acb89bb1b0e205a2daa

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\ring_spatial.pcm

Filesize
257KB

MD5
d60d149441ac263dcb477cc17f29cf35

SHA1
a5f8bb83e31164070b9b904a1af694f87be96a33

SHA256
5358f9d08ca9c8f97c66109cc804d90d2d61c3d18a7c0da230299cbaab239b17

SHA512
af3ccdf19b7088e491ad98f0e23e448253c87fecaac9f9434fc49ff201750dfa22e1941a6bafc0faa4930e9bd9e2c3a8db38b4d10edc999b7034fa760e8d3758

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\wr_ding.pcm

Filesize
2KB

MD5
c9318cc2306bf6b1ee74a5987a8d371a

SHA1
f482d3de9e8dd7c04344fab37d067a08233b64dd

SHA256
58cbaef9b7177a4e4427ceb303b852463964a5ac4e979055021eed1901ff164c

SHA512
04ccca6ed6c13872e8d967a9eceb7b485c5f0f7442259395773a1ef168fcf317e60e22ad2840579e4d8b849d1606190cf5dca0e00c2f88cd1891b8206e9a5ec6

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CmmBrowserEngine.dll

Filesize
194KB

MD5
62bf42200e06192917ccda25e63d04ad

SHA1
71bb0a00c0f21771c252d5c3c573db8ccfd7b593

SHA256
ba5809a13b2121c4f64adb41d2e2aeed96cd73e594ecec292839e58e6e62c003

SHA512
11a7441595359f28ecf6b60193810de678b5ed607b1f0891c786061448cfbd42c85ddc7b9c8c0a501d44589f235000c356b5432cf1ed45a65b2f2997a34de817

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Cmmlib.dll

Filesize
2.5MB

MD5
5181c611affbbb4203eba1064cd44caa

SHA1
a67570f63720d0ee34e9fbc029598a2eb8361337

SHA256
de85237d7530fe88c8513e9e19a54023035417e099fbaf7c845c80778d5e621f

SHA512
0ba22b464641955ab7fdf857807da663e002986b41bba3bd8ba36b6efed2e6daa2735f5ac8b1d5b49069a130664ff08269dce43ed8c5937524fc7f449a0ebbce

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptControl.exe

Filesize
167KB

MD5
f33219166163c7af7ccb7a5c05597372

SHA1
6e4fbf86f66501d1a98434471c18629169c618da

SHA256
f609c6e26b3edd411abcb036d8a317b536955bec734777db00e93c47cbdaee51

SHA512
2c65a1e9ac84d790e0317e45e062bc37cff52da3a99872ce3ae5055bef2c885f03f606b219377a0956e49add34ee4702016cf041fe6986ea6772540887396ab5

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptHost.exe

Filesize
964KB

MD5
8cf8c4d485d5507f16c5179e91dcb6d3

SHA1
54d74c7c6387213008ff206a31954226fd58d67c

SHA256
ee2172d3cd93356ddda0bd15283235733a3c77a121ba3ce8a1798cf2c7a431dd

SHA512
45b0032a317220803647ab3fcc59ccce92731482cd11c1e40e5296a1a597497f0229542da5cc4e44594e181b250e65834528ef112361b6ecd47b9705f10db8a3

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptInstall.exe

Filesize
394KB

MD5
e63c20c5b2cecd5571a6db85a300d75e

SHA1
09a0029dbfc181c567ca423d3ad0e75c790df378

SHA256
62455c5c9ac67142caf2beda1de7f189e6ca45408d35b243560fc3dab95ec2b7

SHA512
e4ccfb3eeb6d9060950a548a0a9a896eb03e66e72b26a7a2ef7e519d5311742835aad4398593fc1dd51e1e20d4469c1b6532356e84dfff3600b1dc55b15f9c89

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptService.exe

Filesize
388KB

MD5
a5b7e63fe16c25626987ea26a2b574fc

SHA1
d3b54a310e284a8fb61ff953cf70cfe98fa8f39b

SHA256
206218914f4666fea9aa89935bdaeb77e508fc95d4af1f16bc6cc17d00b37697

SHA512
57e0f1430e73e0a1c260f19fc445312c71fe15044245a0b760bf8c0f780d65d7dcca4e9d22337cbfe4bc3c34fd7e95d3ff68a7174e6ccf60ebd0dfac66f082a9

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptShare.dll

Filesize
385KB

MD5
eae96f2b6d6e38380c626b0b1c7b5712

SHA1
3fb70408971436d8164c46a130c2d977a4e79b6e

SHA256
f337a622abf55dc718d8e01dd795297fc9272c23ff7869cb5d8690b8dc74a5fe

SHA512
04b4834c986fcd4ab7744fc19d45b568b4add43d42d5c81afacfb4826baf0bf26fa4f1fbc8f44687c735ae3a950e1d8134463ff9db9a957e38e6b738520fde20

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\DuiLib.dll

Filesize
2.0MB

MD5
9401d505eb24231c541d387b15ebb6b4

SHA1
cb55687d2b7c1e58cefa4b37bd2c8829fc0009a7

SHA256
1ece03804fe342a778a7be462ea15416fab1a6361e6eda970f0a66367f927a4d

SHA512
c5b77ee88777b8f3a5531672e6e947aa74d7bb4450e689f490129b762b1253204d8b5ad460b9f23f5c9ade961164347fc4214cac368a0f48f061e35c226e3a60

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\UIBase.dll

Filesize
1.6MB

MD5
5b16bb1efac5ece891a9024bdd67bc26

SHA1
c23d7b2debb2477ab706172b234d93885ad245a6

SHA256
bb1588eaa6f969fe82ad0d29ec4f6ae7abdc1ac57b908b0bf84956c272340b14

SHA512
969f03ae7c945fbc596949aa2cc2c0c4b9329796d95c16c46f069b38c09a1e5c72968982c412a267ef797bcead133ddb2471a767147c63a81b39066387efba6a

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\WebView2Loader.dll

Filesize
158KB

MD5
aee20ef43cf692c9080c5973b1b79855

SHA1
b3885791b0e122f8360d6fb7c0e0ac7fe4fa14fb

SHA256
31423e905e29c8a40a483e81dae1491990805fa066634d218b35bb96692bef0d

SHA512
eab6684095c0a7555d921fb1a2e136fa1d761c5766c48571000a97403e6d437a3a4833c571f86c039aa8307fb2fc3fae1acffd63085ae9d2ea0d9e7f9ec1ace6

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\XmppDll.dll

Filesize
2.2MB

MD5
5c8127163200867ec46a7616b2df5e54

SHA1
8e0b65e439444534ca4a2ae32dd5a3620c1f9c7f

SHA256
1cb9d9cbe1e46ac80a30803bf671756aed39070d1078d9e70b85cf194af7e202

SHA512
8ae230cef3b69f9a0bf5d6f3c38bd2a4fbdd36c00f315dea5ef5c26fcf4ef04bd24f80e4f8f1fd70bc75a7a451aa2017dedfca85db64e3a98cdaab2b6c4605d6

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZMDB.dll

Filesize
968KB

MD5
f590e05779692535ca16573cd0c06ec9

SHA1
36f28ea2f2b5db920b39b19a0fb4e5f088c4bb1e

SHA256
01cab64b8c7d77ff0d6ec8ad4bbd0774f63b8a0afa82c806113db3c52c840098

SHA512
dbc131c677896bba38ea8eeb4893d563ed6d17d6443dab7947a5ae2eac96aaa5b11619671a1b9205d0aacf570864851a4dbc29e0e598ab36f6efe840fffd0b88

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZRCSdk.dll

Filesize
1.5MB

MD5
a229c584218d686c74286a9ac31ef8aa

SHA1
f0565e57dffd9fac602fb8ccf5b66a7a12464856

SHA256
4a171928ce0cbf814f1b69c0d5058b42ff72c1712b78ff05ec9cfd0c77d5a80b

SHA512
53efe5fe465c44a75941e45118091a3fca3dbc553ca697ca09a0344ae59ecc1150d74e20e4afb9d4ccc44d23db3a2d740457c0bf91ec8970634dcc4aae33845a

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZZHostIPCSDK.dll

Filesize
264KB

MD5
fc7c8bc35c82a920d4b3ebb51061c8e1

SHA1
f6336343abc2515d4ede764688ac9c27d2ac71d5

SHA256
56455f70a61688e182b21dccd28934c5cb870c36882b30f4d1e31549c0fd9144

SHA512
d26d370a4fe6c04cb2f9607929d36cd509ad52c49db24f84ee1a1d2c7fabb25c6edb174e170ce7624771d35d9e0cb9dc8fc859cdc3bb590173efbb7d583fa78e

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Zm6Res.dll

Filesize
147KB

MD5
e00b56222412ef069f68ab6d60294da5

SHA1
f629bd33e7765bb48f712176eaba6cc1a47ae6c9

SHA256
b2eb59856362240abcd62c85a30c10f2efa21635c9ee8da38599c524d30b84f4

SHA512
af02e509b261a39de8fe27e355375c532f94c2a227a572278847b83745da3ab36382fa76bccdf63f05d39902bd6827fccb8be248f8dc8cc5e37e17b725a7a463

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Zoom.exe

Filesize
422KB

MD5
239907fcd3f5d40d261530fdc6dbd4db

SHA1
da0016be32ad770b8766db1c9257b84197bc3da4

SHA256
f90e939652b5028cbf5040be7bfc0395042a986bb8c45e835aac2c63c7308dcb

SHA512
61654bed7b0a17ab8280ec8c68ee2b5647a5a6e6b63455bb245265e24c07d0c30f549388d3523672d3fcc1bfd4519f31b1439bc9d8da9edcdaa9dd36fa2f3de9

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomDocConverter.exe

Filesize
339KB

MD5
99aed82d197b8c1e8873066ea4f320c4

SHA1
f02dc233b1dbb3b3caafaea60f9f1b104c20efde

SHA256
df994c774bbf0a7fda8921cde7dbf97a87f96774f4c3bd9035f904b2d3407b48

SHA512
e26569ba1a6c05a3c2b149ef14b8aec79ea27ec7ac29f184b2ef81e4c7aeea42bf50d7d9d1df749cbf0d527e1e2174f43bebb5f4a75dd5b23bb9612bbd61abec

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomInstall.xml

Filesize
11KB

MD5
2a9ee458d5ba0cef7b4c21d6122c31a2

SHA1
d3a776bfd8460bee340535f9b25a22dcb56f7b64

SHA256
58d1c7ed93588e1238c1f0b82e91898c0499049b5539825a9be623f5a2feccff

SHA512
d6e47a80fc9115d9ec40d619b9ca2ef070d77d3bed7b1c2693969eb47f017e4bbc5d4f0f299a50a0e8ff79740fc57e9ed5e2c49811386cf05608406355e8b64e

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomOutlookIMPlugin.exe

Filesize
658KB

MD5
7a46c2c3caab2e094f07ed3c35bdd751

SHA1
a55e5538e610312abf1b2e207404de486ff01785

SHA256
6acdd1f4e9024477bcdebae97b76a31e79723d9b4238d45929ab75a724123408

SHA512
4b978884eb533f623044958438564f0d80d049a1354af1f17cc039b204fd1a92b74a431e73c85c720023d90fe6b758f14aa5a93951d4ad131108f5d32909a19c

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomTask.dll

Filesize
331KB

MD5
d3b417a76ee90a47144c31fd9c826942

SHA1
c2c9c127ffa31dd6e23ed09202eccc66969e1f6d

SHA256
2e5ed4c08f69e8e3fea85ce04bd083e530662e52c91f832030f130214dbaa4b9

SHA512
0aea225029ce2334bb83b0efad75d98032ed88785c75c0b7ea09721b50972195d443fb8cc6d39a519a77e997d2a658fc939ce536d2443b7e96c337a3658744cc

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Zoom_launcher.exe

Filesize
415KB

MD5
e1a4d875add79fd29e377acb3a6d9fc2

SHA1
3f35fe27402a4ef1a558bd77e4fc0113869d541a

SHA256
1d55b41fb435504f0174f89a568b4bf9ecd2122c28fa3bbbe322aa19eb4cf284

SHA512
3256de4108818e645b30acba4e9d9cfe9695acebb2311f8df68e3f2a740cf1d26191c4d5df9e6c7bf83516e4ac24be6871d592bafa2f96807928ab789e2f5ebb

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\annoter.dll

Filesize
1.2MB

MD5
ca70aecd13269d1355cebf742bbc3e70

SHA1
6658b16d9282c932974c5d352c5092f563833d8a

SHA256
d8d13d3b53976bbe570ed6201115b831a77442603eaed6e7c38775a72f1d163d

SHA512
81431b15a80608b1bd9fcd35df43849a8a240fb6b7c90d2980fe9b910ee3dee92c5a652caef4ddc784c465b25cfce2d8fb4d3bdd7c7479ea8e02deeb6e9103c0

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\aomagent.dll

Filesize
353KB

MD5
c5089939af844133013bcecc594b9400

SHA1
f4cc22b7d61e1c66c172d3588ac030396385d6a1

SHA256
b55e19b6d5602c59a93a1db18d72073481b03b76333422f9a5e947cb28cf6e44

SHA512
2a7d1bd68efc959b053d5f23361e438cef3ff6d62bb438bc1a8f363905dbeb9761b1b284accdf537c0cbb1bd60fcad15fcad99687a181534e8333775cd20916f

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\asproxy.dll

Filesize
241KB

MD5
464d364d6a7a4df7f41b7c78ca1775d4

SHA1
ead7f3ab68f7f447f16b176d373ff6d397b4fde2

SHA256
54ad82d4b6171a7f3ef118738cb1608aa858f80bbbd600f74373b793e83a1783

SHA512
0eed8bee0309fce9b09c8ec4cfcc60f1af6323787f735692b05691d1774ac7b502f54eb4f37864d33394d209e30c3b9322f1c6a88dc4362781780162a88b5022

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\cares.dll

Filesize
170KB

MD5
92c07b900846c8c157bb41705dbfca6a

SHA1
083dad12dec6f2378c5c6e545b848055789ea8fb

SHA256
c93f3a4396d9bef21433ec860e19500335d5f288cc87a3b6ba8105293c8bcd81

SHA512
e303d69a000dadbb91e1586b7ad14ea56171bb40de0506895d80da5b0f044cf6102fa2d6f950245dbedeca88647cbf43cc9fc7dbba4e1e2ac3feff3cb708c0d4

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\cmmbiz.dll

Filesize
672KB

MD5
fdfbdc36f55d8615460480cc9349dcd0

SHA1
e5850d355421d63f29c9037ae8007e4fb6f62d31

SHA256
0775a8db12cd02f28ecf5d3b823fbe3523a14ee6eea5248dc4755ab31b48a5ce

SHA512
8c55a78a3e691561467ec1929dae1834915f38f407efeb5581f631b5adf8832dc975a1ec144a1cbd1ac94f63923a99ca4e68e9ab6fbea8c35440e1b8eede0a6b

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\libcrypto-3-zm.dll

Filesize
5.2MB

MD5
ee0d862bf34630e77f6aebd2d066caa6

SHA1
fa40a90b44ef4aad574865f3ceb201e6afe8338a

SHA256
1d96590d71a8592b61016935ae13dd764bb82fddce29e2b4a3673ac4f6bd71f2

SHA512
c6a38e0efe011629dd8b6a28c9d4cde94eb46a69de28e5535ef038726e012139ffa6b94768cfefba9fc65e4948953e55af59a976b538d33bd27e9bc079b765a9

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\libmpg123.dll

Filesize
255KB

MD5
e02ae8b09bd39ad44427e859ef5a3cd7

SHA1
8e935e96f558bc8c6a73c24daa65c18353835792

SHA256
c82f059fa58b7bf3c243c2248b7a489a9949f9eac4022e9262b0a0568ade6270

SHA512
5bdeeaf4527682f0c1dd7d2c167281a8d18f44b6f3ba9a4937b1f4e0ed736629350c3b0929ba744595621280b62cf18803ebc3701816825c1f1eefcae88c8768

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\libssl-3-zm.dll

Filesize
821KB

MD5
fea1b539352559dc98ff460ef8138eb1

SHA1
fdc3e0e30d17ce08c1303e56f7c04ff10763cb63

SHA256
0a2ebd9e02bc4aae36053ef047b0ce78fb1b45180974c05eee75e8a30b409951

SHA512
9b7cd366117d7736ac091ca5fcda1a138bad0b9605ba319c86b9e6dd2761b79146fe221e688052c631a5ebadc4b437eb3eabc7602e8e162a5040fe2062d7fb0e

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\mcm.dll

Filesize
1.9MB

MD5
4e42d59a58ea549bab817d203f228559

SHA1
2af82e04b2e379358d76640e7bff6c0dc83d9a51

SHA256
bc58b6b5bb3c5095a9ccdc91c43e490db0a06a82a32219ca8ada13d58b90abbe

SHA512
c5084cf020f470906c6f63e3a9d42649abacd4fc41132d240b5482572eae22012b2332c7f35acd47579920cc95143daf9d35c6e691c45709e92d893458e5eee3

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\mfAdapter.dll

Filesize
141KB

MD5
ac03915669770daf7972d3426a4b6728

SHA1
ad420768d99ca67a01df828dd538e53b114fb24d

SHA256
0155fd058fa1d16db9a0c3ec7ad37742cf711eb7e2e1d7b0f1fad83e4e42978f

SHA512
1ce70ba04cbd3cc1e677fb96708a67fc70e793e2fe3ac04c75bf1da494ef39ca92513b7c4b356281c8c578e37696af79aaa85b860943076ab572528137d14418

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\msaalib.dll

Filesize
52KB

MD5
bbbab28f4b44935bd8547fd33b2c502b

SHA1
2ca7a10a7f6617b59baa866ade4dcf5eea1570f6

SHA256
7c56cee2ccb0ef0d50a675ddebda1ee2c6d5bc152cf6fe4107e38815fd711b45

SHA512
8093bef1faad6b5eb637b9668508cfca4e0e5eeca7cdccf1fd8486e8185046da50ffdf91264c5dd6f04eed93dcfa3bda990ab6f78badc645597eb74be0cb18ba

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\nydus.dll

Filesize
2.8MB

MD5
981b66d998259d32246ed348c2ce4248

SHA1
3c936be0348c42bf6e36d1a6a7656c88809a7257

SHA256
0c288e34c437861c73b282d21a3afad13c9c04cec8550ca0bd2de65f2c3f22fd

SHA512
10a58e03676eeaa8c8bbab273188412a11870c04481df2d33430f6d4efc17b1f71eecf52ad731774b17466644ff4aeaece6057b639d89ab912b4c47d3ba682ed

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\reslib.dll

Filesize
49KB

MD5
b85dcce9f079f09a672672ee8acc91d5

SHA1
0661bc60e4ffc30dd2d1cc5ca28d0b2fcc8e5da2

SHA256
f2744e86491d1a6573fbe36633f98fbbd84bfd7907f630510442d9dd13fcda77

SHA512
1098ea24cf707a87edefba4db0680c60886055fca4a17fb5f83bf0d626386d87d6749f077334380c6d636cb69c8fb92c1a146b0f9ee2d0800759dd41b3a2a59f

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ssb_sdk.dll

Filesize
4.6MB

MD5
87ae6a3b68ae64eb5c0e0404db99305e

SHA1
b5d953994f90ad712f6831f816c5ffbedab8b4a5

SHA256
a822921291e128fe298ac0a933b21c88dafc01cbfe25262287f65eba4fd05a07

SHA512
090a80d927d5e6638329a9ba32d860f276c8af1e83bc2050ed2fea1c8764094d9b94028dfecba91e9609a378e67da0816cff7695072960f28685107a31d7f382

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\tp.dll

Filesize
1.9MB

MD5
123ccfd5a0fefab44502be7b7b4ea3ba

SHA1
bb4e0c975419084e75371667c6c5be740ba85b7d

SHA256
db5e01d3d8d74c4d8e9e75bdd365ffc550e719147cbe094803c340080d1bc702

SHA512
607f5f4619a687747fce55744302a062ff8e8ecbf0f33a723e472a2a94f199313d4ecb7c88ea9f79c1767f282a8854dfb2dcf1572a4f1192e88fd3d4ff9b95fb

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\turbojpeg.dll

Filesize
1.2MB

MD5
21f8241e8c367bf710a390250036321b

SHA1
28081178386a5e4e7c969bfbe4a25a162e97e1a6

SHA256
4feaa7d6adad50016b043209dc7fbdbe39ff51c90741efe1beac658a3b4cb227

SHA512
52b69560d2650a583ad1ee5c28d4fddc7f4695617d8c5170e21705215988aa2433233b4e0ffc12fd6c02938f79dc4437ea0b3808c9cd2c415369e7cb33db906b

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\util.dll

Filesize
407KB

MD5
202b43eaa677ace909e42a22dd343aa7

SHA1
6921809b1531700dde4b2578502d347986a233bf

SHA256
23a1f4e078f7fa7822076c1703af58399a29e89e8ee94dc36153f6af06322580

SHA512
7aed66be381f7e637a6872e402bd3a63e0ecf5ec37b08d13a6d638b57a2571e6a8d746a50f7f272c397a5c30b6ba359278b64a872af6e42793caf5f6d353beb5

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\viper.dll

Filesize
2.7MB

MD5
ffbfe7308bafb99c31abad66d4845b3b

SHA1
feea625c7bc1ebc1519ee75b23756cb34b330414

SHA256
7cce6c3b32c248dfd2d23bda10115822de6b249666cecada38fb812419250fc8

SHA512
d8a23cfdb50e2f8dbbf27ed798630dc534550a86ad52b2e6a967b2143951f95953a4c81cf31029fcbf2365e5eebfe3e81cb20401b139437d9c5c61f6b0074402

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\viper_async_device.dll

Filesize
214KB

MD5
56a823abf42c3b858245be7306884f03

SHA1
a5daa77c8f8b5338a8b56358e27a8f6740d0e0b8

SHA256
7a5c520cc486834cd2c07cf0105b280f433e2229a22612a0ef6123acc7f28ac0

SHA512
c4a92d9060468f651c8081fa72ee3712714901685405ed386ed9cb0db0060a040e01f811763d020e0ac423ceb07a56abad0d9aa45a43a1b7076f7ebb3a4cdda2

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zAutoUpdate.dll

Filesize
53KB

MD5
41c0031dd051270c96e905962506075c

SHA1
18ecca665acfec67bd08f46d820fcaa0c7fca496

SHA256
f4cd63ea4d306659be593c4c79b2918631feedc53fe17d9abcf06764bc531249

SHA512
034515f05bea2a7526c2979a41b75a6d595949bf98cd08f2ab9841da3b0744a52dddaef05c345fbbc02d2b2fc29eb05d78a4d2e23ea44a4ca234d8d3f9c946a4

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zBusinessUIComponent.dll

Filesize
481KB

MD5
26e0643adaf41cd0de676dd66fd799e2

SHA1
5aa7a1d5b9800122ef2c56ade002ce98737aa5e2

SHA256
86d101d97575c4a435022450aa0807001b27cc90d72d2f64ca283580fe66ff2d

SHA512
c53772bbe333372789b1b85356bc9ac61f6c7b8018b92a9da4b8be7721ed9554e9d24db308b530ba8095b670d96038d1cc0a039f9babe50f1855275b158b5137

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zChatApp.dll

Filesize
35KB

MD5
17c4b8c2b472ed7b66450071c6bb2d8c

SHA1
e9a2978e310d1a3bb75c2789e28df003fabc5999

SHA256
271bd4f29c5442494d5c18a36bb5cc919b7db52cb2ec541b6a0d08e4336bb54d

SHA512
02ae125beaca7180f4d88966141b143df3d4a347ec3960f8b47539f9657555f59fcdd54b582ec63068f03a6e4797cea1001984128935dcd62471496477a4e8b0

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zChatUI.dll

Filesize
9.8MB

MD5
a095a37d9c1202fa6c14469a7fe8f829

SHA1
279a3a9d247a039e24b261463108636c3ea06c90

SHA256
8023003755bb814fdfff0edcc4084e11828ac69e2c8c05b0efbc9ff556c65297

SHA512
40401fdc1664e6f83f1b49e8c1b95830aecb5a77c37a0e9150b838d251611b6fbe566dfbd20a3561fb772ca0f41b618b682d776632e1c1be8e505b4c79029cc3

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCommonChat.dll

Filesize
10.1MB

MD5
79afcc51dec83541a268c9ca628e838b

SHA1
c34ea6c0a1ccd8ed948852fdcf9d8c028fe37b41

SHA256
8a1941293645f2aef734adf83cd3118c63ede194870940cd60b58aa61b64c772

SHA512
6758e5e8d0d71155049d5c872a0a3a4050bebd12423954b1f01a3e4dd31fa1bb7901f77d97a819194bcf34b082befced380671ac8e9da5df185e829a504502e4

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCrashReport64.dll

Filesize
248KB

MD5
a2f7a48758328f7fc40e4086a326ae3b

SHA1
289901374f2966a0418d4dc2fd10d359f0ec33da

SHA256
2a65136082b755fb3103733da4dbebf31e596866fb886a3bb0e37ceeab48d35d

SHA512
f4dfd22266105fc050006c3ad2fac3d61ed79c0f517d72b6a3342266b802c34ffc98ab904f1547010784a73f993f47b2274a2aff142a8a767f49b3bf14b14add

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCrashReport64.exe

Filesize
253KB

MD5
718724b1a369f27c55fb09e9ada74490

SHA1
fd543d49a967ca2e1779b3d079d28056f15fcbc0

SHA256
50330d1413b04efb00f52527ff9e4efb1451ce6989b1ab1777ac4685bcc09d0c

SHA512
3dd304c15a043b6789b20d66a9d63bb4fcb29f7feced0b9e7374ee6797c4335f2baf5628b061def145cf3e063e4fe138cc82a94b3ac9b85abb75eb47fe9a0ec1

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zData.dll

Filesize
3.1MB

MD5
1687a01f995d5091a345772f5612bb42

SHA1
44370301565dd20cb51b73de83c386e2df3e0ac6

SHA256
a15284f8ce6eaaf51b12fc56a904ba1dbb9f701f7ca1c42b7464c6bd5248e7f0

SHA512
413c26b669783d3b10ac9facc620fd6cd64567cdee69c4c7111517cf28ed72b60697ad84427f1b615338923f9015322467e123fdc0262ada8ac8be559b3c2123

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zKBCrypto.dll

Filesize
9.6MB

MD5
16fd21b73d65147a78c3eecfa693877f

SHA1
fa896d921edc0b4c7cf80f41edcbcff9aed0dd58

SHA256
40e89738d70d62b291a5794bdbb3836b2b55bf87218dd8a34c6c58c5c2943bf0

SHA512
aee4ff68b708f1ba185ee6405a471b6d8afb26c10b75297b0b9e05eefb9d166a0dc7ca1f0b8560117a5ee2d573cfe2e73e1a78407fc92ae71c4cad30deff92fc

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zMeshNetAgent.dll

Filesize
450KB

MD5
abd1b7c3e7cb16ec4293718a8408f5d1

SHA1
6a406102a5f7c074bb85cbdd25b2eb5403dd1f2c

SHA256
a198c6ba4a70797a773d032aaded104254003b99ffc340a9244be82a2a9bc545

SHA512
adea1ff967e196445096f0bcefa20fe1b12d113abcb61656f99533d82c3b50a6d59c6669ed784b813a74ef72fca466dbc6ae48e5a0ff87ee9f7e317580549798

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zMsgApp.dll

Filesize
295KB

MD5
7ca8a6bfdff3007e681bbd729a56d7d0

SHA1
3d089207998d9cb939e15eba25ed4620c86c0e85

SHA256
dae83acb786aeed72b00368cfcbab535367d78f9d0baa9da537d4d688b6ea88c

SHA512
5e139bd6e3704a3bd241a8fe4891d436e48ea88067a55c6c07175be461ed03036750ebaef80d153da9a57cf829a1b53773a67af04b84ecfa542ba3269bd85a25

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zMsgAppCommon.dll

Filesize
9.3MB

MD5
34dcd2e40f6d2638e4587a44d04bd60d

SHA1
4af26ecbd972d76d29418a067acf65816dbed566

SHA256
935efd2c0f3f740cee8fdc87f2ab97d0339206a9390bb664283e8c46e8f46032

SHA512
6f79edc976285f08d206054568892de23f2d2e7037ee06ca37399647be05567778bdd6c0a3479d22b0ffd4361c9c68890eb79dce6474abc92db64739e9a53ed0

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zNetDiagnostic.dll

Filesize
228KB

MD5
ba90862d0e54cf46d4c42c9390a56553

SHA1
b31573d0e8a13d0a2823a34681e39655b3ef9bd9

SHA256
ecfd1f8c8253cbff78840431396120ccdac682c9d686ada783e7257e20559f5c

SHA512
3be2c12dd817c2481bb5b8de362b970351ef87d3f63bfac455bf41e2d9a2b883933b1d0ec0238f75c3706535d4a213b5eff99a994607254874bc262a73c53ed9

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zNetUtils.dll

Filesize
508KB

MD5
80cee057029ffe366b46cb19c79cad9d

SHA1
a1590ad6464acbc9912f6d350c25382d1b71e828

SHA256
12840fe4ccf528265aeadc0bd2e14c92fe3c8dbdabbee11f881dc2762eaeb32b

SHA512
c77b316a847bcb7c6a949acc21557fb7e7187295b0d79576233c5e9da7ecca47438355799d197d4498e1553a6d303f641fd882d4a9e36d2090f9ea001fa061fa

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zOutlookIMUtil.dll

Filesize
482KB

MD5
e055956116c7962da9a9fcafb9fe1477

SHA1
d966daddba27c32dc85caf74cd2cf84abb731d14

SHA256
8205a97edbbb39d102f8e03c5a4a3284c67fe3ebf6653f9aa0a98571fb529435

SHA512
007bc346a8b76586912c5f215abd252cb722a14ed6b56264cdf8c5a92b44e82d56f19875da0ef23f10e26c81c374dad3815dfbe6480483fe1c96ebbf4568e032

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPSApp.dll

Filesize
725KB

MD5
1397aff0bc4cab3aa5f852e7e718f666

SHA1
2e08eb2ce490949e47c53bd4a96e150efb825af4

SHA256
5574c09526ae8952c8301a0caaafe77e95bd837663f188b9ec6b36c205c3e6ad

SHA512
97bd952661aaecb1d4c148ec5df0334facce7b8823fa4d8535c9b4d03ce806337cbef6efdb831c89d4ece95edc574a3e857aface6ee9da10e6a21f2eb49b8c69

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPTApp.dll

Filesize
5.2MB

MD5
6327163e864449f67bc036d034785bfb

SHA1
f2367a0e2adeed510088a1bbdd2ef2e11174ee8f

SHA256
f2ce056ab78d4f1e906062d6ca31851407789caeabc0d3a798c24131e17b3bd6

SHA512
4a4d28b0bc0b4bff5347fe278281ef5ba2e594b059003b40332e8c879af68e67c8b08bf548636727c465e28ff85c2b7cd96d2df19b682975932e4b784da5854e

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zTscoder.exe

Filesize
433KB

MD5
ee88c1538ccf216df3cc69c4a2bca128

SHA1
ad1d6045b3feda28bf30bd0dca63b6d5b3fe22f6

SHA256
34c5311497ce364ec76089e29a9d7cb2bb798c63650f1b33d6d361c75ac6a618

SHA512
7ae3eaec110b81b103bc8c404f1735133618bfa7135150cd41dc93e4f1e58a25bbfaaa188de9523155d06c10a8c6effb91f3e240afd923f9fe77f4aad6200e97

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zUnifyWebView.dll

Filesize
730KB

MD5
4eb3aee2ffe68c279fb4c33dfbcf4e04

SHA1
69d7de1a8351910070a1adec357898dd18904c9a

SHA256
aaa691cb2b1d071ad00cf9007f4edd4481d83f7cf2076ee5998f88c7bebddfda

SHA512
c5a9ffea18777b2d2bf6226737223960e873ba8a4751f426e3ee5b037b6f8191decfcd2d124dbf3c413b52b0d8c346d5779d59721c24ae793c537c6b6329101b

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zUpdater.exe

Filesize
178KB

MD5
b2ca55247327c49df9ca5011e50ae35a

SHA1
5afa1fe68b608ae1a590ca2813c466d7c3e4f967

SHA256
4d0832dfbbc049b8b115156b6d3d8f61aa0351c6b69a5c0d8b44015b348cd464

SHA512
c647f433d7c5a2804203ee95eb05653ebe4a69cc435a325f30f14ef7b09c830445e0afe91004afaa5a8fc1bc6306a483d11bd3eadfd497ddc8106018376e0bd5

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zVideoApp.dll

Filesize
7.4MB

MD5
5a4538642ddcdc3790b6b01df16d7414

SHA1
05bae569f974a6f1deea407dd047981acf89fd0b

SHA256
bd442c3bd1768a283f3101f85f83ce2e782af4ae73650c555de739e9807465b3

SHA512
59911d73d167530788c288736eac76972e7775121113749981e06840022e57dce78dad23a7ca633b0648907566404b7d38f56c6c5860da999975ebed1dfeccb0

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zVideoUI.dll

Filesize
12.3MB

MD5
2d01bec13652a6236988e142cabafa14

SHA1
9c4e81b3aef0db95f290a07444c0c22c647f9e9b

SHA256
314f80aa270347d7a11d628e308e1122f538073225d07e70745afddb23724a1a

SHA512
5df8654f2d18502bab23968876cd448e6d834d913e8de83e555358c10971f25717213128b5a1629585630f92652e9ebeaea0d62c49d88db6cbb6f3f1d5b4544b

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWBUI.dll

Filesize
391KB

MD5
eec6ccc0bef157c516dc3a6ae7e27339

SHA1
47a597cf6b712e431fcd8df086a8628d50e22b6c

SHA256
9d8ec1554061f10785f5080c7cb71c5a02312961376450ee528e045e92c98003

SHA512
53de3c87a9a4dd5f6b2f15ab5130ba21668dc79e32e882081039c3dde2bb12c64ce5582083eb34a64fa4c893c771546412dbb766ecca1262566578b7273dbecc

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWBUIRes.dll

Filesize
315KB

MD5
6f00376e57519bd04a0d930aad40f4c5

SHA1
6a2094407e83692f63ec73fb868edad4346a3bc1

SHA256
1b59dbb8de8bcc83317bd2be79d5260fb492dae1b123cceb2e7e1ccf6b21503b

SHA512
8559db5d1e2e0c25328db774d963a86abdd41b5c0ed6bb97f649282ed7743f351980e4f4e05786aee08786adbfdd194db5dd68f8b8768b88df5ae90b71001511

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWebService.dll

Filesize
10.2MB

MD5
850882985ffff34d996f79716df017e4

SHA1
c5ab4cfb66be0243c9544c67858ce511668d79a3

SHA256
d8ca51095a33994e7c6c0d9ffaab8ce2c3011c1d237b7bed6f1cc8a49aa580ff

SHA512
abc1f38abb8b3277d179198f549b230bc5c62c78af1b56ca44b766701897d146adc6bdd9a81f4f92be6f53f950cf253a23af896a74d6942123cd4dae65ee0147

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWebview2Agent.exe

Filesize
759KB

MD5
64e1fc94413b55db01b98b15f4e34cc1

SHA1
35c8dce0df06bcfb12f5eb74b52b31f1f097e8a2

SHA256
f6f13f26dd2025e24e72594b07874d7946bd734cfc30dc7efbaefb158b2690b2

SHA512
62ab0d11f20258b208371cc73a9fdc1e5cb61cd42d9f80036b1872d6f8c73d6242decadb4f0320dbcb2025dff96ab38147c3b3253e36424df643592d96a443ec

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWinRes.dll

Filesize
27.5MB

MD5
6d8c29dbfeea9e73df7c9c910fa57902

SHA1
31bb00fba83eac69c8d9d8f4e83b1d1ea6a8384c

SHA256
7e1be9952fb8d12f9b793a7286a0a83806a5c2c0a185704e37740ea7c31325fa

SHA512
da862e28edd891560ac8748dbe873d222b3ac180c7321fdfbf3d6016854c728fd381a59f2eaee6d4e9539d3a3a94abe32d75d90308ca72ef89196bad4c309f6d

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zlt.dll

Filesize
5.7MB

MD5
edb97ba2adff4a58b510c301d8effbf5

SHA1
bc6a933ca0c9f7bb7afbf86be593b2332c318f0a

SHA256
931097be4dc1fbad5be06c19415c183c853827c868c640a29c17777a1f64e66a

SHA512
ae8d9531df30c8211a12e53b87d1d564e56643496eddf1e7b189e677a10a8f56b506036472707280d127f710bda490d59a02f398d4327e8d851d21e9c33e969e

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zm_conf_universal_ui.dll

Filesize
135KB

MD5
7e9561db961119abd5d4a92be56ed86c

SHA1
b7b61ce37104a53795868b6553c61ca431bb7202

SHA256
b36f3708ce4e65155f173a9a96aaec1cd0b81e7d4ce30849533a8f4f956578aa

SHA512
321474fd0bea087160eec0c42871a8a8768a2794d3c63bcad10876faf9842a7c3f9fda5925746824ae850ad826c4701c5d658b53ce691980fc6593ccb578100d

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zmb.dll

Filesize
1.1MB

MD5
5bd0222acc6350d78200d52de2f1dc0e

SHA1
f52c2de7c35016315b5f64c10314352699df66ef

SHA256
c3be3032d3730f4333bbc8de060e3898234c72b8648e51bc61dbba40a8ac5e2f

SHA512
893f604103cb5ad362ab0f55736b5902063159b5af4aca1f1a4ed53a3b153c51828559a3c52bc4630dc545d1ebf3525824949216c4cf254146f84674a6612fe3

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zoombase_crypto_shared.dll

Filesize
2.4MB

MD5
01ac12001d2a669a4724ff38adee2922

SHA1
afc181452368f3d4d31d4ecbc91aaee3f29862c5

SHA256
7afd88374b54053b5699f39905a54bd59686b6ffb32cf231e458eda7ec89bb56

SHA512
00bc05ba2fa0512142a2d17424cfa4553bbd633d7e623438df74141b4b07d975b20a9b160b4882bae7b320c727ff8ed5eb545ad1e6012bea5cef8c215db22927

Download Submit
C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zzhost.dll

Filesize
323KB

MD5
cdf149ad2b0ede62a28ea2ff6dfa80bb

SHA1
2e49fa151e3537fa2a71d85f8f43360241fb89dc

SHA256
6bd6edd3d43e39f4c4e4171fa2efc603e420bdb6418ddb7d9c567f8b8339436e

SHA512
61e24323a07ea62c5f184e3f5f78dab82b14b5fb5f15ee990a219355c4d40af4540d500e8e7f6b8e15f39c4b6e452a656075cb025c27cab1e4b5bb36fd1bd1c2

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 92091.crdownload

Filesize
135KB

MD5
bc48cb98d8f2dacca97a2eb72f4275cb

SHA1
cd3dd263fc37c8c7beb1393a654b400f2f531f1c

SHA256
c18fb46afa17ad8578d1edd4aa6a89b42f381ca7998a4e5a096643e0f2721c49

SHA512
7db6992278ca008e7aafa07eb198b046a125d23ca524f15d5302b137385dd4e40a4a54ce4dabb28710b71fbcfdd2d3315fb36e591edc2b3e1737b11b9ee45a5c

Download Submit
memory/1732-1539-0x00007FFEB91D0000-0x00007FFEB9E3D000-memory.dmp

Filesize
12.4MB

Download
memory/1732-1771-0x0000015E5C470000-0x0000015E5C50B000-memory.dmp

Filesize
620KB

Download
memory/1732-1538-0x00007FFEBB760000-0x00007FFEBC173000-memory.dmp

Filesize
10.1MB

Download
memory/4808-1259-0x00007FFEBC6D0000-0x00007FFEBD0CA000-memory.dmp

Filesize
10.0MB

Download
memory/4808-1258-0x00007FFEC6230000-0x00007FFEC676C000-memory.dmp

Filesize
5.2MB

Download
memory/4808-1260-0x00007FFEBB760000-0x00007FFEBC173000-memory.dmp

Filesize
10.1MB

Download
memory/5736-1772-0x00007FFEBB760000-0x00007FFEBC173000-memory.dmp

Filesize
10.1MB

Download
memory/5736-1851-0x0000015772970000-0x0000015772A0B000-memory.dmp

Filesize
620KB

Download
memory/5736-1773-0x00007FFEB91D0000-0x00007FFEB9E3D000-memory.dmp

Filesize
12.4MB

Download
memory/5816-1853-0x00007FFEB91D0000-0x00007FFEB9E3D000-memory.dmp

Filesize
12.4MB

Download
memory/5816-1852-0x00007FFEBB760000-0x00007FFEBC173000-memory.dmp

Filesize
10.1MB

Download