38efbba193386c52a7e8b3d0aa3598fde8adf1a08b34f59bab49f2e8a243bfe5

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 05:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Zoom.exe
Size 110.7MB
Sample260810-gpmbqasdld
SHA256 38efbba193386c52a7e8b3d0aa3598fde8adf1a08b34f59bab49f2e8a243bfe5
MD5 5a1302e9b512ce64eb3a7c57c80ec490
SHA1 920df8c2e255d523004341ebe3da8fde32099618
SHA512 145470134632f5bd796f81a1add40c310c0112379eb9f32b50a212972d807aeb2190b0a608271baab00d3a452a6308bb15450d748221ee004e8dfcebaf6176a6
SSDEEP 1572864:uorcXr4KAREZdKyRWZ0jb5dJnQGfjkko2Egc+iND4PyNdYIv9y2F1VmrLq6UwFXu:l22q+ob7hQGfjnNbz8KIFyO1IvqXwVu
TLSH
T1C948339C53D01C8ADD02C0B9DD55AF2C6BB53D40133692ABC4A5B9E48D2B3C96CFB61E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware defense_evasion discovery persistence spyware trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\Control Panel\International\Geo\Nation	Installer.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\Control Panel\International\Geo\Nation	Zoom.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks system information in the registry 2 TTPs 4 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	Zoom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	Zoom.exe

Drops file in Program Files directory 6 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4216_1885299516\protocols.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4216_1885299516\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4216_367561171\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4216_367561171\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4216_367561171\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4216_1885299516\manifest.json	msedgewebview2.exe

Executes dropped EXE 6 IoCs

pid	Process
2208	Installer.exe
1852	Installer.exe
4788	Zoom.exe
1216	zWebview2Agent.exe
540	Zoom.exe
1900	Installer.exe

Loads dropped DLL 64 IoCs

pid	Process
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
1216	zWebview2Agent.exe
1216	zWebview2Agent.exe
1216	zWebview2Agent.exe
1216	zWebview2Agent.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	zWebview2Agent.exe

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral7/files/0x00070000000245b1-550.dat	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 11 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	Zoom.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Zoom.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	Zoom.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Zoom.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	Zoom.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	Zoom.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	Zoom.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	Zoom.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies Internet Explorer settings 1 TTPs 12 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}\AppName = "Zoom.exe"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\Software\Microsoft\Internet Explorer\ProtocolExecute\zoommtg	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\zoommtg\WarnOnOpen = "0"	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\zoomus\WarnOnOpen = "0"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}\AppPath = "C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin"	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDA28A5-1B5F-4635-9877-73DF0D710C9A}\Policy = "3"	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Zoom.exe = "11000"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\Software\Microsoft\Internet Explorer\ProtocolExecute\zoomus	Installer.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308153268775957"	msedgewebview2.exe

Modifies registry class 59 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomRecording\shell\open	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" --url=\"%l\""	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall\shell	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall\shell\open	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomLauncher\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\ = "URL:Zoom Launcher"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" \"--url=%1\""	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomRecording\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall\DefaultIcon	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomRecording\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\zTscoder.exe\" \"%1\""	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomLauncher\ = "Zoom Launcher - 3.0.1"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\shell\open	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomRecording\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",0"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\.zoom\ = "ZoomRecording"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",1"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall\shell	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomLauncher	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\shell\open\command	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomRecording\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\MIME\Database\Content Type\application/x-zoommtg-launcher\Extension = ".zoommtg"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\shell\open	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomRecording\shell	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall\ = "URL:ZoomPhoneCall Protocol"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\URL Protocol	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",1"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall\ = "URL:ZoomPhoneCall Protocol"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",1"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\.zoommtg\Content Type = "application/x-zoommtg-launcher"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomLauncher\shell	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\MIME\Database\Content Type\application/x-zoommtg-launcher	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\URL Protocol	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" \"--url=%1\""	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\shell	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomRecording\ = "Zoom Recording File"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall\shell\open	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomLauncher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" \"--url=%1\""	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\UseOriginalUrlEncoding = "1"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\",1"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Zoom\\bin\\Zoom.exe\" --url=\"%l\""	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\.zoommtg\ = "ZoomLauncher"	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPhoneCall\URL Protocol	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall\DefaultIcon	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall\shell\open\command	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomPbx.zoomphonecall\URL Protocol	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\.zoommtg	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\shell	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoommtg\shell\open\command	Installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\ = "URL:Zoom Launcher"	Installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus\UseOriginalUrlEncoding = "1"	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\.zoom	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomLauncher\shell\open	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\zoomus	Installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\ZoomRecording	Installer.exe

Modifies system certificate store 2 TTPs 15 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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	Installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436	Zoom.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 5c0000000100000004000000000800001900000001000000100000002aa1c05e2ae606f198c2c5e937c97aa2030000000100000014000000d1eb23a46d17d68fd92564c2f1f1601764d8e3491d00000001000000100000002e0d6875874a44c820912e85e964cfdb140000000100000014000000a0110a233e96f107ece2af29ef82a57fd030a4b40b000000010000001c0000005300650063007400690067006f002000280041004100410029000000620000000100000020000000d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef453000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000140000003e8e6487f8fd27d322a269a71edaac5d57811286040000000100000010000000497904b0eb8719ac47b0bc11519b74d0200000000100000036040000308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e	Installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	Installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E	Installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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	Installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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	Installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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	Installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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	Installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25	Installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349	Installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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	Zoom.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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	Zoom.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	Installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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	Installer.exe

Suspicious behavior: EnumeratesProcesses 40 IoCs

pid	Process
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
2208	Installer.exe
1852	Installer.exe
1852	Installer.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
4788	Zoom.exe
1216	zWebview2Agent.exe
1216	zWebview2Agent.exe
1900	Installer.exe
1900	Installer.exe
540	Zoom.exe
540	Zoom.exe
540	Zoom.exe
540	Zoom.exe
540	Zoom.exe
540	Zoom.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4216	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2208	Installer.exe
4788	Zoom.exe
4788	Zoom.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
4788	Zoom.exe
4788	Zoom.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4788	Zoom.exe
540	Zoom.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 1224 wrote to memory of 2208	1224	Zoom.exe	84
PID 2208 wrote to memory of 1852	2208	Installer.exe	100
PID 4788 wrote to memory of 1216	4788	Zoom.exe	104
PID 1216 wrote to memory of 4216	1216	zWebview2Agent.exe	107
PID 4216 wrote to memory of 3188	4216	msedgewebview2.exe	108
PID 4788 wrote to memory of 540	4788	Zoom.exe	109
PID 4788 wrote to memory of 1900	4788	Zoom.exe	110
PID 4216 wrote to memory of 2608	4216	msedgewebview2.exe	111
PID 4216 wrote to memory of 2608	4216	msedgewebview2.exe	111
PID 4216 wrote to memory of 2608	4216	msedgewebview2.exe	111
PID 4216 wrote to memory of 3904	4216	msedgewebview2.exe	112
PID 4216 wrote to memory of 4660	4216	msedgewebview2.exe	113
PID 4216 wrote to memory of 4660	4216	msedgewebview2.exe	113
PID 4216 wrote to memory of 5232	4216	msedgewebview2.exe	114
PID 4216 wrote to memory of 5232	4216	msedgewebview2.exe	114
PID 4216 wrote to memory of 5232	4216	msedgewebview2.exe	114
PID 4216 wrote to memory of 4444	4216	msedgewebview2.exe	122
PID 4216 wrote to memory of 4444	4216	msedgewebview2.exe	122
PID 4216 wrote to memory of 5732	4216	msedgewebview2.exe	123
PID 4216 wrote to memory of 5732	4216	msedgewebview2.exe	123

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\Zoom.exe
"C:\Users\Admin\AppData\Local\Temp\Zoom.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1224
- C:\Users\Admin\AppData\Local\Temp\7zS8C468858\Installer.exe
  .\Installer.exe
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2208
- - C:\Users\Admin\AppData\Local\Temp\7zS8C468858\Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\7zS8C468858\Installer.exe" /addfwexception --bin_home="C:\Users\Admin\AppData\Roaming\Zoom\bin"
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:1852
- - C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe
    C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe Zoom.exe --promptupdateaction=installed
    3⤵
    - Checks computer location settings
    - Checks system information in the registry
    - Executes dropped EXE
    - Loads dropped DLL
    - Enumerates system info in registry
    - Modifies system certificate store
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4788
  - - C:\Users\Admin\AppData\Roaming\Zoom\bin\zWebview2Agent.exe
      "C:\Users\Admin\AppData\Roaming\Zoom\bin\zWebview2Agent.exe" --data="data" --cachepath="C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64" --channelport="4788" --useragent="Mozilla/5.0 ZoomWebKit/537.36 (KHTML, like Gecko) ZoomApps/1.0"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Checks whether UAC is enabled
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:1216
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=zWebview2Agent.exe --webview-exe-version=6,4,10,64378 --user-data-dir="C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme=zmdf,1,1 --disable-features=msSmartScreenProtection --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=1216.1220.17786319804927953386
        5⤵
        Drops file in Program Files directory
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of WriteProcessMemory
        
        PID:4216
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x138,0x170,0x7fff8947b078,0x7fff8947b084,0x7fff8947b090
        6⤵
        
        PID:3188
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView" --webview-exe-name=zWebview2Agent.exe --webview-exe-version=6,4,10,64378 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme=zmdf,1,1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1720,i,16495267804413143794,7300081209371780676,262144 --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --disable-features=msSmartScreenProtection --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:2
        6⤵
        
        PID:2608
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView" --webview-exe-name=zWebview2Agent.exe --webview-exe-version=6,4,10,64378 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme=zmdf,1,1 --always-read-main-dll --field-trial-handle=2028,i,16495267804413143794,7300081209371780676,262144 --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --disable-features=msSmartScreenProtection --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:3
        6⤵
        
        PID:3904
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView" --webview-exe-name=zWebview2Agent.exe --webview-exe-version=6,4,10,64378 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme=zmdf,1,1 --always-read-main-dll --field-trial-handle=2368,i,16495267804413143794,7300081209371780676,262144 --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --disable-features=msSmartScreenProtection --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
        6⤵
        
        PID:4660
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView" --webview-exe-name=zWebview2Agent.exe --webview-exe-version=6,4,10,64378 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme=zmdf,1,1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3932,i,16495267804413143794,7300081209371780676,262144 --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --disable-features=msSmartScreenProtection --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:1
        6⤵
        
        PID:5232
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView" --webview-exe-name=zWebview2Agent.exe --webview-exe-version=6,4,10,64378 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme=zmdf,1,1 --always-read-main-dll --field-trial-handle=4576,i,16495267804413143794,7300081209371780676,262144 --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --disable-features=msSmartScreenProtection --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
        6⤵
        
        PID:4444
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView" --webview-exe-name=zWebview2Agent.exe --webview-exe-version=6,4,10,64378 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme=zmdf,1,1 --always-read-main-dll --field-trial-handle=4772,i,16495267804413143794,7300081209371780676,262144 --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --disable-features=msSmartScreenProtection --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
        6⤵
        
        PID:5732
  - - C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe
      "C:\Users\Admin\AppData\Roaming\Zoom\bin\Zoom.exe" --action=preload --runaszvideo=TRUE
      4⤵
      Checks system information in the registry
      Executes dropped EXE
      Enumerates system info in registry
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of SetWindowsHookEx
      PID:540
  - - C:\Users\Admin\AppData\Roaming\Zoom\bin\Installer.exe
      "C:\Users\Admin\AppData\Roaming\Zoom\bin\Installer.exe" "C:\Users\Admin\AppData\Roaming\Zoom\bin\Installer.exe" /tskschd
      4⤵
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      PID:1900

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x3fc 0x468
1⤵
PID:4556

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4216_1885299516\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4216_1885299516\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4216_367561171\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

Installer.exe

Path C:\Users\Admin\AppData\Local\Temp\7zS8C468858\Installer.exe
Size 1.1MB
SHA256 f24f267a17a13a630203a1055524c1a83c903fe839eb13f64f0085dfd840b36a
MD5 f1bc324e5c96f96e5db91216e5edea92
SHA1 c0e121652f02d03b832c4b6fcfeab8087d014ee1
SHA512 3ffd90f293fbfbb85c1a36a24e7513fa8a34d0332999de0f4ff152c9a5e3980c7e9f249ec50449641bbd67eb7f22c939f8459fa91d05222f8ac6bcbcbe9abebc
SSDEEP 12288:2Sj83TZ2cnJSIbw0BISrU/9q3OMMEPiIhREh52+zFk3Yomgd0/bURiNyUcd:b8DZ2c9ISrU/ARHaIhRE9Fk3YmIiJ
TLSH
T112358D9993A801FCD0F3E276C8656A13DAB7FCA90770569F02A0334A7F375A4CA79711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\bin\msvcp140.dll
Size 571KB
SHA256 10ddff48d704c6007e4c2d53fb4856b5e5e79479503366236246a323aaa76e9d
MD5 5cde3aed10412762e83b7fe43694a22b
SHA1 4ffcdf063eafc901105836c27a634530ea614755
SHA512 fcd7bc262e7bbcbbac9258e31b8d62efb2e601ac1fffac4c86819c8f2aed26fc19403d992a57d48ec92752b2a0a8b04e8204423d6077c7800ea4015f016faa23
SSDEEP 12288:yNaAf3QHr+vzkNNpiBfxzL63R+3lD9Bh8888QQEKZm+jWodEEVKB:yN2+d3lPh8888QQEKZm+jWodEEYB
TLSH
T126C40823774901E0E195A3B8A1C78306D7F17C4A8322A3C792F6D66D2F5B7D5A73B290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\bin\ucrtbase.dll
Size 987KB
SHA256 10521fe73fe05f2ba95d40757d9f676f2091e2ed578da9d5cdef352f986f3bcd
MD5 61eb0ad4c285b60732353a0cb5c9b2ab
SHA1 21a1bea01f6ca7e9828a522c696853706d0a457b
SHA512 44cd871f48b5193abb3b9664dbea8cdad19e72c47b6967c685cf1cc803bc9abb48a8a93009c972ef4936e7f78e3c92110828790aa0a9d26b80e6a523bbcd830d
SSDEEP 24576:xOPJ1g7mT6BNvwTOxNfoYotrz1111111r8SoKxmxvSZX0ypdNLh:xO1aNoaxNfo/+a
TLSH
T18D259E64F75C0AA6C17BE17CC95B550ED972340647608ACF03EA8BB97E2BBE91637310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\bin\vcruntime140.dll
Size 91KB
SHA256 8ee6b49830436ff3bec9ba89213395427b5535813930489f118721fd3d2d942c
MD5 7942be5474a095f673582997ae3054f1
SHA1 e982f6ebc74d31153ba9738741a7eec03a9fa5e8
SHA512 49fbc9d441362b65a8d78b73d4fdcf988f22d38a35a36a233fcd54e99e95e29b804be7eabe2b174188c7860ebb34f701e13ed216f954886a285bed7127619039
SSDEEP 1536:bS6NH9M7vShoxXqYGZLAy10i5XNS83NT/sM9MYDiRecbbVKKoB98:bFRmxXqX0yvX7mHYWRecbb8l
TLSH
T1E7936C4AB2A452BBD16AC174C4F35A06E771B844873053CF03B54AAA4F6BFE15E3E391
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\bin\vcruntime140_1.dll
Size 35KB
SHA256 f8bc270449ca6bb6345e88be3632d465c0a7595197c7954357dc5066ed50ae44
MD5 ab03551e4ef279abed2d8c4b25f35bb8
SHA1 09bc7e4e1a8d79ee23c0c9c26b1ea39de12a550e
SHA512 0e7533b8d7e5019ffd1e73937c1627213711725e88c6d7321588f7fffe9e1b4ef5c38311548adbd2c0ee9b407135646593bf1498cbee92275f4e0a22ace78909
SSDEEP 384:diWe6RE3c6lqst5nZvS05fJjPXR51RWmbzw+XfeDky85xHrwB2BWrYKW4dHRN7qp:at3csN7xPXdRdP/ve6HrEUSKZz
TLSH
T13AF24A9463784486E56B81B0C8939F2BFB39F5A1575093CF0B65825D2F63BC0E63E31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b53662825f15c60843c7467288ff8286867f9f6558da7e66c96951f23b8aebd5
MD5 8e104e974ff2dd695d30d1a9f9eec249
SHA1 4f8309ef6e85b0c2465dce26922a93bce0fa4eca
SHA512 6da5dabee405461d1b9cc513784b8905d8b33604250ff0b75f45e1396d8a5ef3d9e3951dd34db85c30e96fa8bd5e9144e25bdfaa129156c1654924642ba6ef63
TLSH
T109D0241337510134CD3030F35103714D0400C31F41454104743CDD3D3F144501F03441
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Local State
Size 17KB
SHA256 af9be08347a9bcef9fbafec56cc5d103e05d895d148e7e0ae78a06504d00e476
MD5 8cd827815b5f44fd354cb8341c780702
SHA1 bc1e9e4e25855ea4341a2e495d77911c57ab82ac
SHA512 769d816f94a52d365c7040529d75bff179889f9d5cbf676d44f609d8aaba50a756618a68e9c7e351146e8c7b43436318cd2212a5dd52203f0e7661ee1c40f362
SSDEEP 384:za+aQikB+z/xvxjg/qhEwNbdhjw1dlpuNF9zv:5/UxvxjgC+4M1dfuNFFv
TLSH
T1A9726C2B55786D6799F7F944B9891B0BDBB98472D0C12EBC89EE1F0E068B2E41352D02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Local State
Size 1KB
SHA256 affc1fcc86f0076e702a7e2ed67d196c422319a04c0dc6c1916de459817b6d62
MD5 0612e25c30c8e8ed46586915a5cddf7b
SHA1 3ff020bf5ae9d230cb64045fbbd345e7f8fbd247
SHA512 386aa190c97ba1d5823889b2c30ee82cc4f9cb9aef3f92864ef8cb49aa9378bbe237fb5a675b210c5da03517ad4df2adc8e5cb4abc6e2f3b2c906b652645dac1
TLSH
T1163167F290E437B2E9E756C6B2823B47AE245176C2214E5491DF5B1E01DB5DCA127C32
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Local State
Size 2KB
SHA256 fbfe650ece03f4dffd7072508afcaba3fb4abf1a5e0f3a2a6bab6d1a07d23561
MD5 1b5ca370ca5a04745888745c9b14ab6d
SHA1 bafe3b091190df07874e2839eab43ad77928a96a
SHA512 aaa195f35266adc2afc76d784990bf4cf204972016a53a5a50e49e902d98020b36d8d2ec3f9598fd16795939cc417d9c11df011d4e98b8ce7821a1fa3b44abe3
TLSH
T1C851B7B3A854B6B7C9F75684B9863F03EA3991B1C6622F6095DF1B1E01DB59C2303C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Local State
Size 3KB
SHA256 aab79ec8ac7c45dd5d378e915bab89070452a2da970d8e760151a1a28216f15b
MD5 a42b0fcbb44efde46e5099d9d9aafb4d
SHA1 d52bb95de2f000d88de6f0ab45d61ba4b081834f
SHA512 423f868c3e0a607896012405690707b089562664bbdbb78a29b85dbbbd924092b01d09e7b4690da32f397f5b99a0741b21d07b6b2540f82572daa5821236c8ce
TLSH
T1F771C672A8A4B5778DF79A44B9C53B06B6698133D5913FA5C9EE1F1E01CB2D82302C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe592447.TMP

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\Local State~RFe592447.TMP
Size 1KB
SHA256 944ca44a1156b70996345831a7ef0466e87aac9b3949e41e56906d1a3d6a283d
MD5 b82f1d05a70c25f4ccf386403b98cfe6
SHA1 4e4473f288c4df4d011090e3c61fd83bf869a1e3
SHA512 bccc67243cf4f3d6b2913d23d525f07860fb7e6e7c336dbf7250b9d27b6481298b87c88f29b4c8156d2c9451e08e367ce7683fbbabf3ff16c77a6fb75304aad7
TLSH
T1952112B2D0A476B2E9A65585F282774B6E549175C2204E1591CF561E02CF8E89227C32
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 1f863c91841be2d1f6b626428df19fd55938ad357f825571e140f7b8f19bb74c
MD5 80bd7600a5c6d7dd328407f9a543619c
SHA1 b1cb664c62e471c56f689eff60d09ecd73e428fa
SHA512 579a62b47e8003799300af50cfcf26b3ee4b573cb020cfa03bf7c5e1c02aba58c5a560d6adfa88f0fc778ffe8929ebbf59e0356bb6a33a6676bd40d2a554060b
TLSH
T162C02B30720BB962C302F6B8916C7242323459C163483A80F0D07FBBFB0823350440FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 d2ec548ad7c4877740357dda5d9d33248356f498875d9f3ac117c09aac5250ea
MD5 19671b47f5344a7464f1aacc60b62c79
SHA1 80e84cd8b6e039e323bb7a62f6f938a06ce42123
SHA512 d9e2aa0141873cc59f19a49b97c6033c88327cfdfb1bc364da94bad1be7b2380e86a572c2626a0b7788e2d8952a28ac02dac61ccab3c31cb2efa7e32105f7e19
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\Network\Network Persistent State
Size 1KB
SHA256 d8010917d136a14257dd216cc55c20fb3fb482ec268dc23fb0f3ff81d6bfd419
MD5 f557adbfe3aa0130ac8f6b6f895e38b1
SHA1 080a8c44e26e5ce74eed50b75ba2faf821d20ae5
SHA512 975f66fe993327b36d2c2f37b8bc77985ce24b518694898b40b43a15a6dc041be662e6d41e39969afe7212db46fc86b2f1f5970e5797a0c720bc3a180c5e9a32
TLSH
T168118CB1C7E442EDCA5242F41A347E1BCE4E492612683E19C9E8BB5B97F1078E32090E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\Preferences
Size 6KB
SHA256 c2fe77191ec4f4b75212c02f89b278d3f458e2ae28e2b45284bc4c4c8f3b3624
MD5 c5d786356457d379e96cd0843d1b9d60
SHA1 bc6e81e58156358f74063687916a2bf37d7ddcc7
SHA512 ff415b6f6383fc9b16c5829e25ba8d6791cb3dced0d952b66d5211b1370f9fe243addcb5bbaed0ac26902882bd4086292523f9e122c2d8678124e8c2c5e852a4
SSDEEP 192:st/XSzHfpZ8pa9TdQ/S+WiqtdHJ4wR3MU5LuMC:stfI0N/VqmwRvC
TLSH
T100D198025E7469B78CCFE6197A25BB12E2FA503265D10E98EFFD862C04D66CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59c4dd.TMP

Path C:\Users\Admin\AppData\Roaming\Zoom\data\WebviewCacheX64\tmp_anonymous_conf_usr\EBWebView\WV2Profile_enhanceloginaicsidepanel\Preferences~RFe59c4dd.TMP
Size 6KB
SHA256 7927c1a23cf5e0ea5b7eb6e605214a8e066b305a2ca9231ea8e5a41e26e30a6f
MD5 7feafd2c33f3427dfa58dc02a87d2891
SHA1 6da44d9224c741fca2706a380f5e49c715a7397a
SHA512 1ed084e9397735e2f8d3f018553395e9eaa756075d1e4a1e5faf9746aee9c9ceb66158a7289d13a31a058514abbd5e34dd8c2363df8e1edb20f18232d226e6c2
SSDEEP 192:st/XSzCfpZ8pa9TdQ/S+WiqtdHJ4wR3MU54uM8:stfB0N/VqmwR48
TLSH
T163D1A8025E7469B78CCFE2197A35BB16E2FA503165D50E98EFFE852C04D66CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Zoom.us.ini

Path C:\Users\Admin\AppData\Roaming\Zoom\data\Zoom.us.ini
Size 391B
SHA256 6f9dcc80fe5b702d2b7200fba2940006606d41f861470e3018ba6930279c8463
MD5 ab330334fe8898012f2c1d12a26c6230
SHA1 6429c6c5d86089c9d1110641202f39320c7607c8
SHA512 753bdfc5608d13b80340b8d0e02f27ddfe3eaea04f517a675810584cda91912457231ed0739104dc365f0f7ce112db1fc93a2f211949d656f0997b3d765ea10c
TLSH
T107E0683271146E86A7770FE9080273A5FC7AB4CF2212374966F223977908A528575872
MD5 SHA1 SHA512 TLSH

Submit Download

Zoom.us.ini

Path C:\Users\Admin\AppData\Roaming\Zoom\data\Zoom.us.ini
Size 420B
SHA256 8bdce935ca108b0d32fbef4269dec230ff990e8c6a1d42fc872288ea68930d9b
MD5 8641175750677dd217dc3ee3c283ce71
SHA1 dd52531f5d8c057f60f3dd9132923ba97075d6df
SHA512 fb54729716a3adf6d101ce3bb554ee38a324c675c30c6d392c77bf913020826f23c393c4ea11c511eedb8d5981872f4639605ef1f1d507b3eee33d213d30e683
TLSH
T1B8E0AB3230546A56A3370FEC080173A5FCB568CF1212334963A263877D0491181B5875
MD5 SHA1 SHA512 TLSH

Submit Download

installer.txt

Path C:\Users\Admin\AppData\Roaming\Zoom\installer.txt
Size 8KB
SHA256 492a443eb156470683ab063b290c3d43fbae98e8632b44daf67c4cc97ff101f0
MD5 d22db7b7bd0a54b5ea1049d14a7736d3
SHA1 f8d60d7e8a42336e7196a9e68d5de70f3fc0ccfa
SHA512 3e93b9376e040d8c20d760513791355cd557152914daae3f4a333821c1eee8e1af6b1699998c67e2d852099693481167703e8c1383f1bde377214256db350a87
SSDEEP 96:ooET7zEp6ilANFoOJB9JhP4O0jFOdouFeqFzgJakNKoNKCK5RrTMtMVEvYwFtj2n:mslnDO0pOdoxakT2RcK29s
TLSH
T1EF02A0332F9C3977E635574FE21787E22A547637A0D709744FD62919A38204A8B3A0CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f389.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f389.json
Size 52KB
SHA256 61f1aee6f45612a6e5f7477e38898f56df5abefc58ba17316eb45d68a7bd2aea
MD5 f67d4e717a5c78dc8cc24a9f8fda0c8e
SHA1 8106d5b328939142bef9c16a068c900ca2b63405
SHA512 c6e9f43fda4220758741170501b4557ef245dc02f8d18fa13d40e62c7bc002c495c560421ca807a0b8fec75d8fa6af1e772d6f0f9321561042a358d66c0566ba
SSDEEP 384:T7v/2lv4piNwDCGXnchiZvPesbXMdm6cGto3XdzH7DiWpedv1AcoIoswiH9zZfxl:T4goKO+n/vPlXa99+9bDVOviswAK7LTs
TLSH
T1963387C5067542ECFB0929D0CB4735D8DFC48C566FC445E9EABA6C188BE9AAE2301F17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44d-1f3fb.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44d-1f3fb.json
Size 16KB
SHA256 6c646b347476c9ef767ad094d3a8970056acaef87b18b6012f59d33ba850c401
MD5 a326b81f55e448ced69b4976b70d8956
SHA1 80d44363c42c7ee47ba8b9a50aa33fa8b9099b3f
SHA512 0c9ecaba03f2597a9bda7adc7458e53236924ad43f8f786918d5c60bebf18c3113b35a353cf030e0efa6491182ba5f0e892b7e90215100f93947f0b77ecc906c
SSDEEP 192:TBiOzjv9Qu9ZoExP6uuUG1uzNbM5kiu0uuj0d8jKuYu0d8jQm69cH:TB7j9QG7xSVUG1Q25ki3uC6m7H
TLSH
T1D8728796067402ECFB0925C0CB4335D5DFD48896BFC945EAEBBA5C188BA5AAD3301F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44d-1f3fc.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44d-1f3fc.json
Size 16KB
SHA256 62832db00d7a0e37f65ec3d487d3c3a28f72bff588bb3bbb3b99f89e0fa4017a
MD5 48bf4da3d37e30ec5a1d97d856d7e05a
SHA1 4cd99bde6ac053849d928ddf3b7aa81965b80a8b
SHA512 6d5457b1af1ddabff895f601c152be1725fc70eccec9baf95fa4970a661b5699b3a85e31270a137dadf2378aa5b61c6f82caf1b3f7f8b5174080d328532f816b
SSDEEP 192:kCYB26lBiKCcv9Q29ZoR2P62uht12zNbZqki20u2j0d8jKuYu0d8jQRK9cOA:m26lBR9QujS9b14+kifu669t
TLSH
T1D8728796067502DCFB0969D0CB4335D4DFD48896BFC944EAEBBA5C188BE5AAD2301F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44d-1f3fd.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44d-1f3fd.json
Size 16KB
SHA256 e098424aa4c8683122906445b8ee8fcbc9b052dc6302c243472667cb52e99c2a
MD5 8a1539d919866a4cb249e7e72649fea9
SHA1 22ffd22a1c2021d87efbb3522765ae0517eee75f
SHA512 2a60eba32f91cf87da6908974b950f076c6ccf98785da72ec091a53afabfd769a5cbd4e8c8ef43bffef2291328f4ff766b7e83a3cadf5b242a3abd9c1e3ae318
SSDEEP 192:8B26lBiKIv9Q99Zo9P69uC19zNb9ki90uvj0d8jKuYu0d8jQfj29cf:A26lBM9QjSSoC1tHki6u76rnf
TLSH
T176729896067502DCFB0965D0CB4375D4CFD48896BFC940EAEBFA5C188BA9AAD2305F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44d-1f3fe.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44d-1f3fe.json
Size 16KB
SHA256 b0fe802982c912b18a7bfe0ed8bd7813b0f7c95a1cddad3dc193fdc6123deadf
MD5 d4cc4a0572eda6dd046ea1477bccbab8
SHA1 d40bef057a1afcd0d95ed3d3e70850a45c337de1
SHA512 0c279bc010f98e9e82fda9c5d4725295d5a413d1e1fe0d3daf9580856213d32f438a1b247d169d712f9348e41d86b014c33a683d3a6fc40f32d0c2f20b1324c8
SSDEEP 192:YB26lBiKvv9Qv9ZoiP6vuJ1vzNbukiv0uvj0d8jKuYu0d8jQNrX9c1:c26lBv9QlNSWJ174kicu76Nr21
TLSH
T1D372989606B402DCFB0925D1CB4375D9CFD4889A7FC940EADBBA5C188BE5AAD2301F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44d-1f3ff.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44d-1f3ff.json
Size 16KB
SHA256 a149f67ecaaa42766499f122a4d9dee813f4c7ffd2a72a76706b3e1d6017c8fd
MD5 e923b83a1b6583c7a6d8e0c3ddbd18f5
SHA1 77c8b568a14266dbfee28ebebf7a813926d94ae9
SHA512 da813bb3bfe223fdc8177493af12004aa432e6d76a8c8f9c09c80aa8c4ccf48d5e2f6504601a1864c1cf32b2f5a35727ff6b745ea71bcdf90d05951d5b867ffb
SSDEEP 192:aB26lBiKav9QJ9ZozP6JuE1JzNbjkiJ0uJj0d8jKuYu0d8jQ049cq:+26lBK9QPkSkE1Jhkieuh60Bq
TLSH
T19D729796067402ECFB0965D0CB4335D5CFD48896BFC940EAEBFA5C188BA5AAD2305F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44d.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44d.json
Size 17KB
SHA256 bfd1e8c6015f0a369fa5b3cd9a1ce59cfaec94942c81c81d9783c45478cb70af
MD5 2e94b3973a2da18283ff24cd370e5893
SHA1 65c5a5caf66f94489b61d8e092e61888184efa81
SHA512 c845954a0d937f756cc76646dde14d718a3dcdf9d678a91cd7b4ecfa9052512a20b6c18fd67b7621f3f4ecb1f85fdee5a6bd0e8091f43b569594c9acb38aa04c
SSDEEP 384:M26lBb26FA9Qjr26FiSo426Ft1tu26Fqki6u96q26Fwk:UrF6QrFDrFTkFkhYaFp
TLSH
T191828796067502DCFB0965D1CB4335D8CFC48896BFC944EAEBBB5D284BA5AAD2301F03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44f-1f3fb.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44f-1f3fb.json
Size 34KB
SHA256 f863e406ba35766c348026ebf8cc31b3d196eb34f82f2b46dd8f95ec29c3d9d1
MD5 2fc95360eac87dce1a1e45683dff62c3
SHA1 314b47046abe7edd6a5cec405eefd14f1375f950
SHA512 e7513f97c0acf5fa0683ebcdf64d0c4f09b84f9a693468d3ea58d7b22ab6218eca5372e50c618efe54e5637777da8a3929a8219846517f0ede418e17dffb6cd8
SSDEEP 384:ZXouAwszjf3WwcFDsC3aDAhSz6sAc3UfRv0EHndC8KK:ZYupmfW1Gsb6qSsp0EHdC89
TLSH
T109F23B5E87B382A9B60A3DA08EC331B05BA5C545AEC6049EDFB74D11CB5079F2306F66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44f-1f3fc.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44f-1f3fc.json
Size 34KB
SHA256 59feff722f006a29234c2d60232f8c658332678c58f47a46c328f5e6c1e5b8f4
MD5 d106b53a5ecb2e2c948b649d30b7abc8
SHA1 b8da4b38b28194034f65c1e0b1e598ea19cc9757
SHA512 20f15b6e90e64f6514324e9c796ff8622cdeb1881bcc1d85ffda0ccdb80813999be1f7c15886f1f0b818c9f1163a944bd0a7d837913501e871a5b97180af2a30
SSDEEP 384:wXouAwszj43WwcFDsC3aDAhSzvsAc3UfRv0EHudC8RK:wYupm2W1Gsb6XSsp0EHkC8w
TLSH
T1D1F22A5E8BB38269B60A3DA08EC331B05BA5C545AEC6049EDFB74D11CB5079F2306F66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44f-1f3fe.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44f-1f3fe.json
Size 34KB
SHA256 bd77b000abbb946e77fe3f0850cc3ebc37b04fe0d326cc0ade00d01d6a3c6964
MD5 7f9d9cdab026d95fd3284adf532e2315
SHA1 5403f9c7a8ca5fbfea80212456248c4fef800474
SHA512 c733a6cfea5f1b96ccefe7f4955d6f347099cfc965703a1e338377ddf973b1c75c7ce67a05966b1dcbb8148ad0de98d3d5b4c688ba0a8ba8444cdbff0f4f8083
SSDEEP 384:KXouAwszjv33wcUDsJ33DAySzAjsAc3UfRv0EH3dC8rK:KYupmP315NsVQSsp0EHNC8e
TLSH
T1BEF22A5E8BB38269B60A3DA08EC331B05FB58545AEC6049EDFB74D11CB5079F2306F66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44f-1f3ff.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44f-1f3ff.json
Size 34KB
SHA256 a138ef5319e9e21fa35890d6ca4b88f25bf2b0e1e323cedb64ebf4b9caf9d72f
MD5 fb40a5f93d8289078a45accd64e8b465
SHA1 2d65348b9bcf99ed6beadcfaadd1e4ba3060992f
SHA512 508a34b167ce76b09f578aa0b0470e4dff749e1bb2bb4a18033bf96774028ce46fe3a1c41102a16b32342af3d3e4aecbc49946f6677b43ba4f5fd94f3abc6365
SSDEEP 384:9XouAwszj033wcUDsJ33DAySzoCsAc3UfRv0EHydC8DK:9Yupma315NsVoCSsp0EHQC8G
TLSH
T126F22A5E8BB38269B60A3DA08AC331B05FB5C545AEC6049EDFB74D11CB5079F2306F66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f44f.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f44f.json
Size 35KB
SHA256 84f4390c03c46fd324ee2961caa437b72e231c40ee2bf9e8a55a33d8a69e36f1
MD5 80b427679e74a5a18e18c1add9d7b03e
SHA1 e63b222fae4dc53072b9080b6ee487155077fd76
SHA512 d8fcc78cbca0ba8d34143fc8fc5fa191f4b37cf9604c8c5dbc4214128778833edffcc8e704fe94223705020fb71bd08354c2dc98ea908b87bafbdd5a52d199f0
SSDEEP 384:ZeXouAwszjo3WwcFDsC3aDAhSzFEqsAc3UfRv0EHedC89q39:ZeYupmGW1Gsb6OaSsp0EH0C8It
TLSH
T179F24B5E8BB382A9B60A3DA08EC331B05FA5C545AEC5009EDFB75D11CB5079F2306F66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f602.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f602.json
Size 36KB
SHA256 030ca2feb055de27a68fba42e3e16cac5ab0cc6143831069be7182a693a56485
MD5 1d37cead9e0951770d9b44a700a1d199
SHA1 8c0266d363205aedd8ce2cd79bce23b6ed23029a
SHA512 6fbd4b5844df5942fcfc51ab260fad9e30fbdca1d42e6c923306674cad844ea9c7a8daf53f6ab3c557009d31d86b397c57bb5e832ca07b4d184e3de056b4a3ae
SSDEEP 384:OW8qUS8Cu8jfW8Z8ibj8/qyn8beJLHjorzX9gMxSgCqf:O2UCvf1by07PR
TLSH
T1BA03CA9A0772429DFB0939918B8371E4CBE488957FC904EADFFB4D148F9569E2302E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f62e.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\1f62e.json
Size 11KB
SHA256 c20267a718250c2d164a2f3e06df0c710cb6bf881dce3995d35bcb69bdf38089
MD5 7cefb2263f614827ab6e0336b64fce2f
SHA1 1a2f4e128ba63b5e9b6c1b6205f7d7de9143907b
SHA512 47c2b892b654a8c06b88842b04897cfdb46a990ab70aa0dc92d0df90dcc924493ca1ef0097141bd2fc55389f7b46462fb9239e9a3324e91cfe5cefefb8876107
SSDEEP 192:MCDFw5FMa9+pkKslhvnhEzOISSBhvNpO6:MwW5+a0vWxnCzlSGxa6
TLSH
T16E428CC5063142ECE7152592DB53B5E9CBD588856FC404EAEAFB5C088FA9B6D3303E1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2764.json

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Animojis\2764.json
Size 16KB
SHA256 92e20725a8ca1cd2609471e43bf7fec74bff1d5497941bd7960f2e958baa7f68
MD5 6d4f746216997d4492b7991da7f7a0b0
SHA1 47a2bbce3a24f0f74dca91f371f19be15ff197a2
SHA512 9abe6b5afaac1d7efb3bad635262365dac8999efbf12f9226bcd2815ab187d2e25abb1d74d23ecb08728229652d4b179eea791e595e8b55c9664a148f05a68fd
SSDEEP 384:u8DDFcmIDD+8DDKfTIDDi8DD2pkIDDyyAT:u4BrxeZ
TLSH
T1017233C9017143ECFB0A2590974739C9CFC88C457FC405AAEEFA5C18DBA6AAD2341E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Droplet.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Droplet.pcm
Size 856B
SHA256 3568dba00a55d25b736737a48163c13c1348afc5d4022a29ca0d3724d29ffe9f
MD5 923d4747324854f50ecf69324741c8ca
SHA1 4c19f847fa8fdf55e27b2847bfe09789adfb9e59
SHA512 4ae265a89f693304fbeeb661d46d0cd96304083af75b5c245db63a632f40e08ca280a68f20115c6c38f5202801b29084633ffed4da16304689c4379f77693a0d
TLSH
T1D1119B67EC75840F13644EE60A3499EE725094036228D574CEE81C3F0DC8ED445DD74D
MD5 SHA1 SHA512 TLSH

Submit Download

Embedded.properties

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Embedded.properties
Size 362KB
SHA256 225c60517dbaf5b173439dc448cdad63a2348c9bfb09398d86e38826214c135f
MD5 37b8c96e4f6d88f5c8e6ced0bd3e4bf0
SHA1 0af5ba0ac6d7c87549ee8e5376173bea95132915
SHA512 6230227a64d233d1ab6c72d55deed2429a58fafabe8463c305a1942382384640a71dd6a065e508e393be98351e577da46813c9e7d9111980a78d9a91125f96a8
SSDEEP 6144:JoaIm385nLdyq22ik7V6dJ0d2c33PC0lB9ddYh8jClign5Psp8495ncnAVyREhHg:JoaD8RvCUgn5Pspi
TLSH
T1DA843A1185D238518E824B55B496A020FC68F19FDF7B7185F9B5C22CB24EEE500A9FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

plugins.xml

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\OpenVINO_A\plugins.xml
Size 971B
SHA256 0bb8de37ac6d5d12a1d802276df79d9f378d017f54f4a03041a375b7f8d3b584
MD5 7d081fe6f9c94c19987c04d1e6a5c506
SHA1 1485302a3eb6765bfeccc8f2c7d9eb98dd889975
SHA512 3ee9c6c46a75c508cf3c38885dd7b05e0e9840df95e73b2fd9939a2c705b87ba9ceb45d764a878aac1bec2921cfd7a1f2c94f45ca6193dc4a4f639bccdfa8246
TLSH
T190115E6691EC4C0941F90E238BA00ED6EDDF83D72584D01379FE72826FB2E6E564B640
MD5 SHA1 SHA512 TLSH

Submit Download

G Arpeggio.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\G Arpeggio.pcm
Size 35KB
SHA256 7e24bd3ed8f03b5a0c09a6e6364915bddd4bf48bce64b9fa9ff3229e07f3e8a1
MD5 6771499ee6ba11e659d8ad19981fe97d
SHA1 0f4ba3f4017575737669adcceada47cddb1f92c1
SHA512 049861d52bd58e2b45d182358fc0db5986e27390a85cb74d6c7f7b28146bfe679577dca02b3680a10c9a92e56c2ce6d61e1e13987d8cddd00a2772e6de5cc9ab
SSDEEP 768:BPaeaRx7NaINjsevaWrxtwrl5DAPk8k3Xb60Lms9yfRnXYu2syBGYqexp5y:pa5vjsiaWrHeAPRwXbZJYRnXP2nBxqAu
TLSH
T15BF29D27AA5F0B0A2B5D050C383C28B7775A1FF7D378343AA0AAE3B9D43585F3994119
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

G Step.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\G Step.pcm
Size 38KB
SHA256 26210fbac5a314609cfd04b77f91a91127695bc1eaa02074c57079cd8acc28e1
MD5 41c9816899c367b3663c50f7d6c698c6
SHA1 c59007efcba1c379bf34cc875a07477648c002de
SHA512 ff1d7daecd31c5d38239bca5589e7a08f22eefd112f16e7a01278355532f45cb4e0cd983a5e5e72d7d3fe41895c6f813dd7254eee981f7073aa419c23146123b
SSDEEP 768:fGtKx98fy8fCnAgNiCUK7rPcQ05geT9WkLy4hdkz4nDIVUibOz:fSKiLfcAaSK7wQ2gRkLVM4ncVC
TLSH
T18903F1D7D1EE404B921B16E835BB6DD61A030277787038FFA07CDE3E1B5B5306219A68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Gamelan.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\Gamelan.pcm
Size 48KB
SHA256 419db5735387e7876b1ae925f0ae8bc470f1ce3ecb2cff56788d0aeed07ab292
MD5 e06c92d35ca7fd525fc7ea6e59929ec5
SHA1 ff19d13920cace68b559901911472a2ede6de2d1
SHA512 f89283246852086e8b172a5b2f5cb617f2ba90526c729377ed62a21b15a6a5c0e31c5fb9b9dac12c0c04bd807eca1f3670d571c547dec71728460b844e201f98
SSDEEP 1536:ESVHz7aZTM8QgKveaTAoGAJ513oRSP3hkm:ESHSZdQa1oGAJ5NOO
TLSH
T1D723F12EE7D1D7D291336ABB9FB0DC7849338C6E2AD0FD2E845A24BD50F86172243255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Pizzicato Strings.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\Pizzicato Strings.pcm
Size 47KB
SHA256 c724b4ac93f02474f6b0b1849b875d4576846e7969d56c4519b0c8e77b8e14f0
MD5 67611d47f3dbc795cf0caf909a0070e5
SHA1 880a42bf2f926ad1a7e23b41610f5d0121409643
SHA512 e385dbb975bca126b6fdd388e94dd12ed1cc95e860f68c1d1dfd073ee0d065cd8ea7671b7ce9e15779d329fd70a4d4278b5615abfb63cd4f9813d674cca6c754
SSDEEP 768:fmA543Q/3J0qnTgupdZwobVQbL9hpG1jyHzCyHQBtAk5qWL7xlgBW81wk7eqfl2:fmA2AfJ0qk+dnRQbLLpG17jzNL7DgBRu
TLSH
T16123F27B3E1972F3EF2D2371219A9342268F3B954E0D69914D6D8AF88DB5C042B735C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reed Organ.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\Reed Organ.pcm
Size 37KB
SHA256 c3279bfbdbf53f32876ca34a213b102c64b6e0380ce5897400bca6e178267c33
MD5 cbda54e1b4c3c746b7bf439bf3d1d6d2
SHA1 8d555ad3110ba2c2257cc18562bfa5a453ac03d4
SHA512 188d6700b93f21f776fdc4c2c6a2d41a82c52e5ec2525e7343d27aeb2badab3827c96889665766546b14d38ad3a6e575491c7f4d2e9d5c5c3a4c496e47b40f6a
SSDEEP 768:IpmlkpJWgsXQLxmYQ1Kndp9GgcPIiI8SYxy4BIr8yTxn1iixzShAE2gctV:hkpyAN3QGH9GgcgOxvjyyiceE2gcX
TLSH
T19D03F12C4CA269D35DA3F7363243B7DCEEDAC9970433B5D89420B2268722455E3B7E19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Silent.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\Silent.pcm
Size 78B
SHA256 b24b0ec151d68a40d7c89f7eb1d52abce1eb9112041f755f5e092474e5aa638a
MD5 de74ff821c5d7f33259db9e85009ff02
SHA1 f9cd04668030703b5304c47bdb5a2e6638b0df89
SHA512 8d9d3a1106e96ba57cc5d9a5ba2fa7c21ca0a47fbd9e841e5d6e3f61a1029e321b8210098fc26280b62fa6fbacb0b42e23b36129a5b05bee0654128d4660b47b
TLSH
T12CA002A034740341100D3CD8D03D4C0D0D107C4CCC3D5D001200C0057C50F0D1F8C158
MD5 SHA1 SHA512 TLSH

Submit Download

Ukulele G.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\Ukulele G.pcm
Size 41KB
SHA256 740f457ee95b637c9588d8f09a6185a8a0acdc69f3214fda1ad7a397bb79f26c
MD5 545e0e3c3e15874ff10658fce9c62ecc
SHA1 c74c1d56225e6d756608de57370d41b4b0c14263
SHA512 904f80176377c101147c76a0c295fe3a7649f5a9d6c3a35cb41e5661b1ccd32912fc6c5385dacb23d04850a5397e897ddc358714314e3519f1e0d7dbce42ea1a
SSDEEP 768:QLmZwjjeWwwcTy77/MY87vtuNDGnH/Zi8gxllgfdSxn8Ze0:Wjj0E77CFuNIH/ZiXvlGdSOV
TLSH
T18213F12043C854AF25561AC4BF47C89635EA35F6418BBD3A5310C7F9B3ECA687A85E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ukulele.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\Ukulele.pcm
Size 48KB
SHA256 41e5e209294da6d146d531e569435e5c2965676a70acf7c5a0a25d902d4c64c0
MD5 f72021d50014ab711c5048de10ef788c
SHA1 fba07f7045add6d1f08e5e4086ef2838d2623f3b
SHA512 d2989c07dcffaf5d598b9fa037c99e5b4e72026f6f273f319ed6b3ac046c22b8fb14e39eb57e413cc3cae2cf063cc229b524198c1097bd45daf31c6fef8faee4
SSDEEP 1536:Y5aKqkEHttGpujMr66GdnXlnOeBy3g60CV:2arNt3jD6MXlndB60CV
TLSH
T118230221420D421C574FDE642D7BEE4B8BE68307CEC2A729DC6A5476CAC55C39FF9128
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Vibraphone.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\Vibraphone.pcm
Size 46KB
SHA256 ef3fdbc6e2b647f9d061468672bdde08acff5a59df08f91e7dd3155ed6bb0ed1
MD5 e750b985789477ea310fc23485c38b3a
SHA1 34c1c7fe44d97ecaad0e3ca2225039d3025980ce
SHA512 9769393ce2880558c30164a979d6197908bcee99d6d0643b68e05847b078c2a1b02b29399b949d424d3dc40952b759cf95a7a523575f2d1218f081be02bfd0ca
SSDEEP 768:7ulrZ8Q23CE4rC/AebaLdo8vAi/AUtowHGQ3yFZbnuWkgP1qkxBFoSVzhQq48:yb8j3CEkkM2Qr4slmQ32ZbnegPMKHVzH
TLSH
T14223F2D41E418E5354A71A649DC2826233E9762CD3EADC88A1C777713BD10AECFD872A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

double_beep.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\double_beep.pcm
Size 2KB
SHA256 3899566d9a2d7bf12a2122fc59a4279d9018a40aa18c946ae85ca2132a28b61e
MD5 876e92eaa1e4ad2e72a6e602b4eaa7bc
SHA1 2b2008c1f1f9b18037e4c3a7931cc5315e779904
SHA512 116db9da873a1dabcc30f5ae938164301c39ff5cdb3a5f7dbe9f1c83ee04dd078df1640cf3f86cac0eef46f5bf917305405401ea55ee23409a1958b47ccfa1c4
TLSH
T135518F5B3CB756591F482A88B03C7DEC3B2C7F1D5CB2781B6114C7233EA974E6A00498
MD5 SHA1 SHA512 TLSH

Submit Download

localization.xml

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\localization.xml
Size 7KB
SHA256 cb6fb1c7b3d5bf61c174e2c472255336e1e0fecc4428aa4cc0bb32bf49c20b61
MD5 906d15d9bb44a0047a604798bf9129c5
SHA1 0f328b45419e20f067b4e11ad8eee4797abfc2c0
SHA512 3d00e8f9d365a673875f02295996ae973fb5400089100daef93b531832be56684a761f56be32102750e88e66a12d4cc79d0ca299284a9e66f8f12d183ad085d9
SSDEEP 96:kFhH1wh2eNa63OOl0UNhVC//9nplWLwqPrNMQ:k/HSkKOl0h49nplW8kNt
TLSH
T1F7F10A12A4C36AAD8B3AF204AD24D601DD91070FF390D214B9ED7A272F7321BE95F579
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ringtone.xml

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\Ringtone\ringtone.xml
Size 956B
SHA256 81ffa6db5798cc0114512a43c3111a8a73a57fa243d23c758c4c18f0c975a141
MD5 2a098d45a19527f62c29f3a90496240f
SHA1 a2b8c01ff514d443dd5c5634c3591b2655932179
SHA512 bf18c491e57a3317192cdd0ba1a5680354a7eac146fe9b75bfbf6a97cb77c72e77db92b96843c9d5a4389931bd1bc891f404adb3a1914cb927719e828538e32a
TLSH
T18D11FEA0D6F92E92416810FB2EA9F240BE1A557703BC771571ECB452CF2142339DF299
MD5 SHA1 SHA512 TLSH

Submit Download

archival.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\archival.pcm
Size 5KB
SHA256 5e7d1491e7d6969eb67646f87ab2dbf0ff1d1cb4f5cf631128a305e2b67d4a1b
MD5 2da32e501e9720b40d438ff7352a5573
SHA1 e59fdecd75b2c8cb4b26bb4a2b3c622dca8a2e3b
SHA512 5da2c201bfd01fc1ef1724acb0f6fddd7be39f83b6fff5c80aef71c96f14d30c694da82b1c41183b2b9ab9ef99d45faa657c4f6a984f87a97aef08d9e824ccee
SSDEEP 96:GcYn8fXbxPVojqi4K2oVbPoMyU/Ll9BDVH0YjG8YqasN0tvV:GrYXb32qbK2oVUUXHlNQ
TLSH
T14FB18F23E4C4E14630917A29472C3BB592099A69C079392FFD74C5F1457E3285F91B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clap-high.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\clap-high.pcm
Size 9KB
SHA256 0a16435cb3f7b8b1787476575ad646361e6fb4c07587df874940413de004dd08
MD5 c32f95839557340b4b4197a68847ca1d
SHA1 0feed637c4766b9b30ab6732259670f8c12c5538
SHA512 f5f0dd4a313ff6686bed5090aaa64885d319b8fba51fb2722b764668b26f06ce95164444652661b027e35f3c6928d3919422e4816bbb81bbd0f7914869004700
SSDEEP 192:3UAlXvotRjju9rT3xQbPKtaS05euBXIE+ZYDfDPbw6dzsX1b:x1AtA9Xiysp5exbaDzzsX1b
TLSH
T18D12BF9EA073B8D8B07D4DD03805B261D7A5B92CBEC7AEB44E965245C4E0E0EC93F416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clap-medium.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\clap-medium.pcm
Size 8KB
SHA256 d754fc9d9378772b7a17a53e6598c9cfe4a0f3ec492f0ed30241020562f58509
MD5 aa93ab138ec89cf7cfb8b4b0ea8990a6
SHA1 d13b139d666c76cb12e1c0280c1343770adc8aac
SHA512 f91c59cf1b1645b24997a1201bddb52953c0904f855b78add275d71401e4f9e6bcef59fe1d7205e222470689dacf2d55ae752cc2be66bbee5258db284b42e6c6
SSDEEP 192:FS4zPslWbr2wkXKSvriTAAuHF4sqlGgsX9I0KtYicm:cSs0P2wYvdOlGpX9dcVcm
TLSH
T15B12AE994C7E0963D0EBE4C80B9A709B4BDC57B18ADF83FFA673000296488A07591D89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashrpt_lang.ini

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\crashrpt_lang.ini
Size 7KB
SHA256 1f5b45a5411f7fc71b9da789d6d1ead8ad30551fbea7bbb40fc7ea576d581abb
MD5 fcf61aed8f093bfcf571cdd8f8162a05
SHA1 8de8177798aae82d5bcc0870c1ca5365f5d9966d
SHA512 8a5d252d115f868a4e20fce10f9f9ec5f3948f0ad5680d656e0eba1fd167d36889e54c6e59bcde756945f93685401b825ba9dd7243d907d74b58a1d826609d72
SSDEEP 96:rsw6o2KPZEOTWSucfgjfJpkiZJpkiVxoVrOSBngI3NnKRFivuiLugXeTmZ4dIc83:wlo2K/uKFgVgOgnco5
TLSH
T123F1445227FE2208F9F63F90AE7695744E3BBC65AD3AC59D5190414E0AF2E40C8727B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dingdong.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\dingdong.pcm
Size 3KB
SHA256 7aadf0e317831d287b51e41992b43f0f381ae48a312cb77a426eeb3b6129d6d7
MD5 54511224e61e71d2915ff67e57dcb268
SHA1 ba45f16f12d2e29480952367c0c6bd34fcd16827
SHA512 46b4ea771328a25c6384d5cdff7643ced94dd446830b165f80fb69df2dd2754062dca0636604602a7ebad4ce29b3f8ef62a81f59cf5502bfc78468c8c67a41ff
TLSH
T19E714BFC72C61E9AE199ED72D406862498E77153A33EC6FC8A2D544FD54820434226FB
MD5 SHA1 SHA512 TLSH

Submit Download

dingdong1.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\dingdong1.pcm
Size 4KB
SHA256 2fbbb9ae6a463b360e1459bee558dafa8d864db2423f0fe4d2c56d22c3f3a5a2
MD5 8fe86d9e8aa5c709bb0563243172e580
SHA1 c22bb02d82516a66f8473dbb4209bf22bb60fa14
SHA512 6c47e964421ebab2c0c6199b97fb9c61b0a228fc654abf2e4d2bbaeec9640be2a5acca92474dfdd0b43facc71c60a9c9ba727d300cadb6128ef1f3dcd9a6c10f
SSDEEP 96:gBhgrRi4jZBNnowfk7Whq7X0xmcrnSb0QN9c9vCoSwXFp:zR7NBdox7Whu0gcmb7Lc9vCa/
TLSH
T193915CBCAE28F23E251234ECD453885351A19180F394A2725FB5A193B15DCE0CFDEB82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

directui_license.txt

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\directui_license.txt
Size 593B
SHA256 6033476be3d1d41166b65984e2be94c87ac98dce55bfec887e932b696e859295
MD5 ab54b14548a4cc76dd7c27414d971111
SHA1 68a3888b33ee1c5d5efb913846867c9a8788cadb
SHA512 cc8c4d90efedf4aeb3ba3b64ebd0e938576867618a334bccf3cb6790338c6a1da239393a618f6e6a1186cb363cb514ac9528ada51f0090fe2fc709e5c666d971
TLSH
T1D2F0472D5B85417114F01AD7360696D3D30D01D47B2F8246385C03EC3247ACD41F30CD
MD5 SHA1 SHA512 TLSH

Submit Download

duilib_license.txt

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\duilib_license.txt
Size 1KB
SHA256 7ed2acca31a243ba107d8c12fddecd52462fd326d3d2c73b04d4cf10c76765ff
MD5 7faec2006bb231d14b794a9f31769448
SHA1 c2b5a34fe521502f6fca3031201b47074f30f258
SHA512 777e0ec5d6b599fb0eabb8180fb6f302012ff12245e3de6a3dc568798cb057858eff18b08dacd28a72250236c4767abc2583670d92a946f684b45cb5144bd7e2
TLSH
T16F211E9B01404FA759E25B8136A5AEC8E1DD903E3A276D04286EF388677B02ED8BA440
MD5 SHA1 SHA512 TLSH

Submit Download

leave.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\leave.pcm
Size 3KB
SHA256 efbd514b0ea241a560f1333cdbb90a9885d5c70c01ed032d11b8a672b1096a04
MD5 3fcc19f6a199e97646a0ab32423c9332
SHA1 05613b14d6c7336b24e9779963d245098e73b40c
SHA512 b370ad863badd0d86d982eada1fd98306b686ef1cca4cc522558cbde40257effa96afd7327141beb08d9927a6b190e0047ad7978e87a41bf299f030c1cee121c
TLSH
T101715DE761F19356048E9E8F540B2DF34E24A2FC93392C27A065D318FCA141B0BE5D5D
MD5 SHA1 SHA512 TLSH

Submit Download

meeting_chat_chime.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\meeting_chat_chime.pcm
Size 2KB
SHA256 f2ff5d73ee2a89135094ecb5165b30e351bb24ee4eeee95508f311eecdc9811f
MD5 b30a997b4a9df68d8796eef6f457f4aa
SHA1 23890fbc1f66c1061c60b8287659566c69b297d1
SHA512 8cfc3b13d7c2ffa0438ab12669aef756bac76063cbf317e449e5ba4127c0604bab6fba793866857f4a68806e9ed779c0c521fc46c5ae3aab42de7c72d98613f4
TLSH
T125410AB59680FD97E98D4D1872BF7D7F4CEB096EDAD4888B22A050FD50C10D5C2251BB
MD5 SHA1 SHA512 TLSH

Submit Download

meeting_raisehand_chime.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\meeting_raisehand_chime.pcm
Size 1KB
SHA256 cd9b81d47633fe9aa3f1020d895161de8c31797b365f93dfb22a60d920cc2eb3
MD5 cd7d41d5204013ce176c99c225016d6d
SHA1 996ea48981e81ecb107cd77fd0d6e35edc4d4214
SHA512 44afe616a2596abc76cf9f862837b26c00e6214a08b61c6569e7ee07ab4331f4968d718889863cffc74ceed55ff377932432c7191dba4efdb638ea3b96badebc
TLSH
T1F311DA0BFCF761050E0A6C20607EFCBDAA4D7E0DAC383D471541D6A67D1834D4E9A558
MD5 SHA1 SHA512 TLSH

Submit Download

mute.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\mute.pcm
Size 527B
SHA256 b778592a0d29fc31875474a84adcbb9a5bad1fc095e7cd2d408b3da219424a1e
MD5 0c36d3ee8b0780bf848bff08fcce51f4
SHA1 bc009e83d4416044d660f3b7266e4035616014ec
SHA512 8cde508b52dd45b68bf796cb0fb8995a94ddb1d76ae2827416b8d1122ebc9afb9ac20c42605fcb4ca94263a1cd5a2a3828f5a97075220127ec87cc6c9c3133f3
TLSH
T19BF075B17063446A673271BED4D094C95EC2770F0626017C910C0A2F60B26CDB145C30
MD5 SHA1 SHA512 TLSH

Submit Download

nanosvg_LICENSE.txt

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\nanosvg_LICENSE.txt
Size 880B
SHA256 e82bc3dd03400aecabe12201219ba14750dbc4b36faab58663a7a6068548d372
MD5 078690812af4ba8567fcc2af2ca1d307
SHA1 f4f94babc436555d2f5992e29aacc47433fbadb4
SHA512 f4e1f1092ab90f380a63ed1954023722d265e32f7f3d9b86100fbfa7d6ecd8c584a7dc22b4e3cc4182957136e2d765d0d6a293694b739377c09b076e5fe448fb
TLSH
T13111C01B33DD837114E202ED3A558D81F7276E64BB8E02E570BD809C33A711122314A8
MD5 SHA1 SHA512 TLSH

Submit Download

beep_intercom.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\beep_intercom.pcm
Size 1KB
SHA256 32567197286cbb2dffc282f7cae8d46d13af9d5e83bc98773a836904d244326f
MD5 618a307ef3efad70399a6107cb1ce9e3
SHA1 8b42e7fc116a27a3fa868db49b3d0204f42cd913
SHA512 3181f538cf34e09de3ced6b702eb55654888b3b533a339eaff97f6f6da9014900f076c76ddd407c0c3736156a896fd23a07952c04c06664103cc74f317b8ea74
TLSH
T17521082886034C974A109C70395B29FB173770236C852C2EBEB0CDAE9A909C6810DFF8
MD5 SHA1 SHA512 TLSH

Submit Download

double_beep.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\double_beep.pcm
Size 3KB
SHA256 e00dbb2ed88cd107bf384102e1353bb8d3a777dd9624a680579e4267080888d7
MD5 a2243b1ddd8cca6c40030020b57c606e
SHA1 9d0084832970caaf750335d5b27a3104623e2275
SHA512 04ba003ef55787f3d19006e8a3489b861ab86834acec445ec463172f5530fe72472c0bb39f62ff8d0222f388b63a6b2e28f5919fbbccea416654d7cc13f68b49
TLSH
T138716D4C0BD6389735488258384028E911A08FBC59DE02D652754ADFB70EDF084E4AF0
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_0.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_0.pcm
Size 1KB
SHA256 394c441e19f6d34b46baeb7820726f279bc71d21e6911070dbb58e67568ecb9c
MD5 285974390c5114e6a8e91a2d63266a38
SHA1 f5b5b5ce959380d0358c463e2dcb9cafbe709843
SHA512 de85e1fc198fa235bc233cfd45747c30a8247af71b83e8ca30800cd754e6c45ae2d9754e4de0d51e3f2aed26ff8cc829d29374960f3b434e48acbbdf530ebe43
TLSH
T1C9312B4F7A6D454747F20497C79B9012108E0DBD375BC9B47BB560A0178077C780C471
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_1.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_1.pcm
Size 1KB
SHA256 1a5eb409a8dd747b37e24b3a7a0c3c8aa7c55778a9bf4a71f4bdf3b5ad298c5d
MD5 842932d135c62a4866c698cf415a13d1
SHA1 7977e8280576cdfe14449e0522a824342899e21b
SHA512 a34ae285e13cf25beb93153f1de77c6bb61941fd4d8f91b9689cb84d37204072ed4ddcf17a7f2319393db6383a949d4d0a8722245116f6aee8ef62524a403e29
TLSH
T1C931E89D203C11951541D63AD0E5A7A9F3AB3A6232831C0977357FD6B2EE247B457242
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_2.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_2.pcm
Size 1KB
SHA256 37db0a7b3ab878fcdc1da65dc21c006daba8791c87ae37d000d516cdea9d4804
MD5 d30328c7ec556e0fc8537d1a2316c418
SHA1 bbd09bfd865686297bc06ff35fbd5f56374e3dc3
SHA512 913c7f778f1a954c43c275e544689a528fc4a59d30f1d315359191de60f9bc9544bd322fc6842b63e8931e8f0ee8579f63a3e810f165d92a2f702ad3d8e5b6e2
TLSH
T17D412C546D8AD16D9281EACDD623000426146993B3677F3B3FEBF80D1F1AA4BE01F55B
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_3.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_3.pcm
Size 1KB
SHA256 f8902a24f7dd5f4355e684ac1cb0029992581c610ad011ed2c900f8957c104ad
MD5 3913cdfca0b0dfad1c11ab3cdb81dcbb
SHA1 92e17b1f78788d5b98bb539aaed018fd72244411
SHA512 43d22a611b65e10b9bb4b8405a993a77618c24d8866032672d43911707ac9f6497826cb6c975ae422c7d61412d6bb2d2df0412fc7fadc0e5e5f84ea09c7475ff
TLSH
T1013109B09188E0C754294AD6F10C6653D60AB72CD39B0E6A94E8604A2E52EA6C555D3E
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_4.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_4.pcm
Size 1KB
SHA256 c50e689f830fea83f82c6cb2e5472b3827c5635490f0d2b0e56c346bad616a64
MD5 065ce5dc0d49c48589a3eb19603510fc
SHA1 d0852569e60486c2d9206c35be826ac4d23f79be
SHA512 c4661a30868376a7ed681d4d984efcbb8af4a7449059f31225c63ce1cc88a3b4a7fba3e3047f2b29a0e0e437e8b4832e888f65ef86ea40c2063aa0f736c61307
TLSH
T14731B77E781C8BDCD85A902697E7FF9A53DC2375270B8350750C09A29F8928F3F11A02
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_5.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_5.pcm
Size 1KB
SHA256 83ef758561576bbaa981e976510b74eeeacc181834064ba7412eaf876cc25290
MD5 532231d1e36ea53a168830033cc0aec5
SHA1 4407c14ffe5b12b7100db43fb011564269f702a0
SHA512 05bb2d8ae7cf3ead9dfbf05fef4983ebfd4f5a8991ba43a92191a1a97b485dcf17e315b9a8d39300c71be7114f15f0113a75c6648fcdfc46b46e6cfd2b3ca0fe
TLSH
T17231C8C6D82B9ED3A948D3525B49276B60C1427E06E87C206C73B409171CF8441BCD61
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_6.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_6.pcm
Size 1KB
SHA256 ffc6da3e558a9b25cc03249f675aff3bd3ac21d54435fa8b23f37cbaf54dded8
MD5 a8e1e6ab27026fcc27307250e40dc64a
SHA1 a3d1bcd57edd4aa3f52c259a5b72c120f040d583
SHA512 c82fb729e9aa1fb56efae9b76f42567b871b2626c29945d0e6b51e4f876f43b97b8bc5f0bbaefa56cd8b881def405c6b8a44f331500f169de80aba120c98f766
TLSH
T1A641F6832A6DC47556E091262EC20161E47D633E0AB23181712E76A487DFF1C809C1BD
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_7.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_7.pcm
Size 1KB
SHA256 79f7a132b33c6525ee483231a53b8298620700ab21343cfa70d716e96fd12b8f
MD5 4f9cb5dbacddb4099469ff30fb61490f
SHA1 0a338b3aaa04309584af7ee0f14f1767afbe1da7
SHA512 488fba0f24d2382dddd25c05531a5f61683f774dd86d41b652ce9473224607de9744a5a4463907930eb3b010e6f97f7b7d1ac5a9daba8453525735d338399a5a
TLSH
T1D631F9F2BD8EE878832C0492E31EE8B6698AA77CA628957034CDB20A5E1005CF4171C3
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_8.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_8.pcm
Size 1KB
SHA256 4c682a59d37c32715d7e82c1592fcfd51ceaaca7fc4464817f74d0c005a02372
MD5 a9293ed20c46e09ebb87caf37e92f3be
SHA1 dd6e3ca3ef79d26f71fe432a2d928e9177f13205
SHA512 ae2572da5274f686ab5b2ca05c273e103e037f1b2d21775f86e780a6a4e97f61059387a063e86f276253011bdaf188b2ca20cb29ffca5803fce5cdd9a69f38a6
TLSH
T14631F754FA0F667950BB6DAA9A8772FF36B08C784B7C42653B044095822142D33C9D9A
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_9.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_9.pcm
Size 1KB
SHA256 c5e274011991477635400e5a2c81d3b6cc12c50a61267b0ecc70077cb92a9aa7
MD5 cedbfc417b6ea8e076c99471e4d746ad
SHA1 11d95a6490613c3d7f350f5525ae47ddf244a5f0
SHA512 358120f75fb51a89979cbec3c1dd0227e286019025be9308e81f5e2f4c02cd9bb0022bed4db357d42990c5f0503aadb88963d7062382d9cd832440e12a338cd7
TLSH
T1E2312BC5F714258BA5D85C33C6573F1FA92FF2CE1B826805EA163CB5C74131C218A4D4
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_a.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_a.pcm
Size 525B
SHA256 d705d27155e39da52d84034389fbc3953d98f2e7a6007c44cf0ea1bdda4b3bb5
MD5 6a95093e7fe3117bb1e614fa9727bfdf
SHA1 1df81e069ed43aeaedd8dce9d1c8bf56fa6b96a7
SHA512 925d6b17cec73d8ea98ddc3b55d17c6e014a5d4504251563c5d5d55a9b7f8caa43dcc6d7989bbce72a62e1708a54ab7b09bdd84f79da9010bfebf6cff7534c99
TLSH
T14BF00587437300473527D455CC2965AEDE97F17655BDAFF14A5C54DD441355064F3032
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_hash.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_hash.pcm
Size 1KB
SHA256 1a256021a62abb1386eabe58974db5bac91c622f9fecddc9f87216c102c23628
MD5 569480b0dfe8b64b44f72e5740a58230
SHA1 6f4ed602780fdb7c3eda983bcb29007bcd8fbf77
SHA512 89f6452afa3aee5265de3eac9ce0a5830163187abe6c5415141133a0b9c7ea091dfc198cad0b4662588b8f3785c93e310feccca3200b13af0c15caff7ab45d1a
TLSH
T188412CD6CA39F2C20E2997790154FA43B74E94E8D3AD317062D8081C07D6382A281784
MD5 SHA1 SHA512 TLSH

Submit Download

dtmf_star.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\dtmf_star.pcm
Size 1KB
SHA256 719f8aa3842eef2b413eb8dff026c2b442acf051af040b295af595ef207dc32c
MD5 814b4f610592e7d68725f87b04dd5691
SHA1 9e3f0489d1889b3201753730211fb14ea1fc1e21
SHA512 929f10fc51e71759d375d82681f6b9106932b27e0cd39fcd0fbacc2359d1907631a912d34958628c651c37617bd4d5d9db93d321f0592c30d0294428890abbd0
TLSH
T15A31FAA14D7445ACB2BE1D45B006DD91C02A62A07F1288D462610CF6C7483AB000D5EE
MD5 SHA1 SHA512 TLSH

Submit Download

ring_pstn.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\pcm\ring_pstn.pcm
Size 13KB
SHA256 0a23d9800db639dd5f40ff0e1ca3df5729df7ab81affd1a02db445b4b0ab235b
MD5 f199df8ed884c5af8fd07aa0e046d19b
SHA1 507ca087de97053c4e65f4576f78157813e6c174
SHA512 176a88eb7df30c78442c435f102f865e1f8c8a6d0fa03f1af823cf6b7a3c290e50df229b8775c9234f09a0ab5643410f5e00bb4eae550c13cb59ee3d4147d5f9
SSDEEP 384:c6PRZZbd4NRaYAvvjDWwd+tJihqsjJuQc:cyZbd4NRAPWXUhqKQ
TLSH
T1B2528D486F84B1B29CBDBBD1F8EE505B9132AA025F5C40C740B251EF5DE5D01253A6EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

percussion.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\percussion.pcm
Size 3KB
SHA256 dafa23315ef2893d200a88b65b8f455e788acd616d0634c35385d460f07c6a61
MD5 388728657dd2d77d2257a90b9c935650
SHA1 17c15f9be8b263c52dc165b3395d8d92e72ec313
SHA512 5b4b298df61c4bafa4f2b4ffe2193ed331460ed922a17f2abedcd20f6f1b1af8719694299e367af0ba757ec3496d99fc67ff1963e27195ed30a95e5dbe97a2b5
TLSH
T1A1816297209E0958610E264D7898983BBD891FFACFF7B42450A5DF35FC3598F2A18434
MD5 SHA1 SHA512 TLSH

Submit Download

percussion_pause.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\percussion_pause.pcm
Size 17KB
SHA256 e8c8ae4267e1a14352d631418b4fb16d767e3d42aa9528adb5cf378a219b96f1
MD5 fddc411010d812fb444d70781e253ed7
SHA1 70f75fbb27a50f80e78c1c08485928ed0f05b3d9
SHA512 155176a313b5534963f1166139403301cdebc5ffc082d48058975da4f60e083ef25e21dc262e20f0414aed049b746d630bf668961ca486200c327ebc554c6488
SSDEEP 96:0irvnnMpu0JSkao79tPW+dFEpoQu0eBPKRN7XV3DPrc7Qfof5UVL:0Qvn6u65a49dWsAdlqOf
TLSH
T175828965521649AC222F6359304FC13BBDDE2DE2DEF4F6399479CF2F0421E2E91B1128
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

record_start.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\record_start.pcm
Size 4KB
SHA256 193c4ffea3de04802e97e9e62fcd8533d8ca53e7306ba113a2234959b5262eb4
MD5 ab8a5f2981e225d3edaacb520083835a
SHA1 c60c383fdb6850cb5013065576de87610270fba7
SHA512 4381f709c5e9d0172027fd2fe65ce37b0444087d3e9d7864cd54651cdae6e8429653c02ebb7a55a5de194ccf0d674f376961b012b088e131a11b7352f1ba69dd
SSDEEP 96:iYdPRwg/LpaKFwgw48/8TnsHeXA2ixotICK5455nsg0vLIsOSy2B1ymBFekqs:3Yg/Lcg4/2sHeXAdVCJ55sZjt/BFekn
TLSH
T10DA17E709CBAA50815A06EB7DF88FA299379CF7541B9A20910B3F2D351B71C704D97A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

record_stop.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\record_stop.pcm
Size 3KB
SHA256 8cd8b4d3e8447d82dd045c7a3a8f175b97376c3db5895506cab0af6a0075226f
MD5 0001fecb6b6e044d221fbc6a7e22e313
SHA1 c73a6506c92d9a1188aaa793afbfc1951cd5340a
SHA512 1588169348727306e9c4ab444a7857924bcb88e4dca2be8e3526a2227cf117702c47431325df1c83f71da34bb35c28d1589eb3f59cffddbb3dbbe1d00d8d76de
TLSH
T1CB716BAF49429520DFE050F01C58888FB878E3EC290B1077301BA7AE86A071F528F7A7
MD5 SHA1 SHA512 TLSH

Submit Download

ring_spatial.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\ring_spatial.pcm
Size 257KB
SHA256 5358f9d08ca9c8f97c66109cc804d90d2d61c3d18a7c0da230299cbaab239b17
MD5 d60d149441ac263dcb477cc17f29cf35
SHA1 a5f8bb83e31164070b9b904a1af694f87be96a33
SHA512 af3ccdf19b7088e491ad98f0e23e448253c87fecaac9f9434fc49ff201750dfa22e1941a6bafc0faa4930e9bd9e2c3a8db38b4d10edc999b7034fa760e8d3758
SSDEEP 6144:FC+KidKY0nlVNxzU1Gt0NDUcSqyob45bQOAdA6p1NIpSr9xp:FQyuZ2wEUnqI5ABp1epGLp
TLSH
T1D144232A633679B9096C9B0B91C264F7407905B77C6585BFFB4296F00C3BC7AF2A0A05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unmute.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\unmute.pcm
Size 537B
SHA256 8f045407724db8ec0e6bb8457cfe09856e80492a47b3ab4a03cd80f3a5f088db
MD5 8cb1d13a418a60762bf3a3ee1aab96dd
SHA1 f3670aa2effd3ae73d67468ec3766181b1c27789
SHA512 00657ce557ba08af58a7f45b14ebfe76ce067eeac07ad28f2a086cabf48bd78570f9894ba4f8f5bb1af66ec3867819630aa3550ba73eecb7232c4eab71b1ab85
TLSH
T1D7F075D1E1434C2E7A0F2E59A3D9C39065D502E540FD4011710ACAD702FFCE72D2410C
MD5 SHA1 SHA512 TLSH

Submit Download

wr_ding.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\tmp_bin\wr_ding.pcm
Size 2KB
SHA256 58cbaef9b7177a4e4427ceb303b852463964a5ac4e979055021eed1901ff164c
MD5 c9318cc2306bf6b1ee74a5987a8d371a
SHA1 f482d3de9e8dd7c04344fab37d067a08233b64dd
SHA512 04ccca6ed6c13872e8d967a9eceb7b485c5f0f7442259395773a1ef168fcf317e60e22ad2840579e4d8b849d1606190cf5dca0e00c2f88cd1891b8206e9a5ec6
TLSH
T137413CB08980FF230CAB5A1E328B2D1E9373D574045E1666FD549E06946487EBB286BD
MD5 SHA1 SHA512 TLSH

Submit Download

1f44f-1f3fd.json

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Animojis\1f44f-1f3fd.json
Size 34KB
SHA256 9dea6b7d295efb8fc7b6cadca1300dec66b767902a1cecc09c0bf2061d583236
MD5 6c248de1c9a3a4f80db699b2e0334baf
SHA1 8492fd0113557e1d106915e6f341e6361ae81fe5
SHA512 8ab713951327f5d046ef8a301e8c015e264d1da53932938dce7acf4be2476b7c05cb0fa007376f9760d155527af3fb9e5cb7fefa208824a6ffbb4cb7c6ddae72
SSDEEP 384:DXouAwszjD33wcUDsJ33DAySzDsAc3UfRv0EHjdC8cQK:DYupmr315NsVDSsp0EHRC8cH
TLSH
T17DF22A5E8BB38269B60A3DA08EC331B05FB58545AEC6049EDFB74D11CB5079F2306F66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CmmBrowserEngine.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CmmBrowserEngine.dll
Size 194KB
SHA256 b4b81bf865cdb253a0814644d1904d086e9187ed8e4c90904ce1f0624db6cc78
MD5 3fb93db8dda43afff61cd4350bbc9998
SHA1 042b4c867e6b3fcc7e34714d37be5e4444685663
SHA512 404f1664dd5c9bb0ef26aca8232e23154e2339ec2ba84d972c86c4a1818ccba5ab6bad805eb90e6d7c24b8cc9363026e2f6ec1ec55d28b6cfa4da18b048fa659
SSDEEP 3072:vgg0awIW+cVwDD2z1Xwc4AS1e56AQX3+/WtxFBPfNQtirKWC4WCx:WUc4ixDrSjAQX3SWtHlfNQTaf
TLSH
T1C1142843739844A6D526D1388A878F4AF773B4610B5283CF6260837E5FB77E0BD3A661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cmmlib.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Cmmlib.dll
Size 2.7MB
SHA256 8a3778e4c743b37d72b77b0eb5855e27ddf699a05b9ffba036881ed3887da7d3
MD5 c2b9e41530b8efb5006b00177437a9ad
SHA1 7b5fe2050f6b2b1b9e2c601e7dde6eb04109423e
SHA512 30e99359dfe5fc72aac35cf73fcf69d327fcc2cd1cd56590d8ceed1211b4757049cc8c401f2a8437c036c441dcd1456f4ef31e55f284f86ea4e93c7c094a13c6
SSDEEP 49152:teZMXXIlBbVY2RTfH1C0dd8gW9tClgu8/o:FHgKWI9AlH
TLSH
T141D54A13B715486DC6AAF23CEE477E0EEAB371495366A7EB029E0A521F577C0193C780
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CptControl.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptControl.exe
Size 174KB
SHA256 0a387450661fdd3d5e2504a582f371bf0d2043f2dd7d81b20df9d9b71972a4b4
MD5 916c4d480574bbc620761aade8528afe
SHA1 3f8373bdb62a5b99e6d8e1a6589dd6eff7d7c211
SHA512 a017305f23d5142b4c9584ed9550e687a64f019fd19d89d64da06fd336cf6b33d3a2626bda0bf6e82f4693efb319c45b10b8724ac42fceffffa989f56481937c
SSDEEP 3072:AAt+Fe5Zf4CMhdn4IRXMacNqY69TRr3vdle/9FLHWCtb+WCN:j2eXbgZ3RXONqTHzdle/nrL+j
TLSH
T177046D4BB7B800A5E2ABD278D6979A06F7B274550760D3CF03A047BA1F53791AF79320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CptHost.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptHost.exe
Size 976KB
SHA256 eb9327d8e5045a0eaaf0d7630fd09d76ee5cceb08696ffed671213abc8cf8f57
MD5 586833685fe9c22b678326769d0b884e
SHA1 206a598e6e800fed3a3760d4d7a4a18d47382e11
SHA512 3967bd261f8cd0aa1795cc9714b82e2dbdda0011d4747fc31f73a88b4e86f605edad954487da7d3cbbdf2644c02e7347042fd3f6fc886e643a0338690df21101
SSDEEP 24576:ptcxhsCKSlcdzrL286CrV5ii8HSazd9vkK:uePSGZLCQBCvp
TLSH
T16325C415F3E81068F576BAF9EFEAC61AC2A6B9F55323C39F119106070B53E905B26730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CptInstall.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptInstall.exe
Size 410KB
SHA256 789543b2d8abd14c5c86622926fdccddc856e4338325ff6f2eb6c762ae69d4a2
MD5 f84685daababd7712ebf01889ac16755
SHA1 58e0a3746d3dc499168eff5b75242581f1365504
SHA512 de94b26a6b0a72637c594396fc03ef37ee03b1391dae694ad7be3a9a445000697eadf71c47f30bb1562a89b6ee645bf84f74346d36fcf3b9653984ea0569f963
SSDEEP 6144:0Exphg8arEo5i1tibMW41Q6H4icjugPu7Q3O2OYohAFC5oebgZg5:0QoLAohbMb17HsuNQ+2PoaFbWgZg5
TLSH
T1AA947D1AE7A404F9E1B7D138C9629906F7B17C5E0370D7AF13A846971F237909E3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CptService.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptService.exe
Size 399KB
SHA256 f9233160debb17b11717a84041344b2859125e45cb61b4cd93131ea0c807c53c
MD5 c136b3177395da7005474974a35b15e7
SHA1 558fcae5acd36987f71a61525347ea6230e6b780
SHA512 c2845a1bc28d61265a10c610b92bb032316604f19f25cb49df10f6dd0994e2e3ec57e5f49e8202fa9616557979bf720f98161f77e93ba296f3f0a57437ef2fa1
SSDEEP 6144:UXbTxyz4BhNjDmt/hVz5bTO5H0q3JGNSqufexfFohRJCupsns4xP6uWNx:UXJaEh9mtVbShDge8fFodCupd4xP6xNx
TLSH
T19F947E0AF7A804F9E4B7D274C9628506E7727C9D0771D7AF13A842971F236A09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CptShare.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\CptShare.dll
Size 387KB
SHA256 da2fc82e0a89b04e7b239c9e7033f799b6f1f3b609e4713ede5baffa43f53062
MD5 2b7c54b5c801fa5c0125f17491d33560
SHA1 829d819216e3edc6d2a223cee3ec2389725df6ba
SHA512 8a1ebfacbfa8632eaad615e17b88b541bc0953e7e49cdf1b1128c8e5e75328a17f4a725a7f06ebea6bcc0997cbc582250bf25c7addb679f754a31510895d3118
SSDEEP 6144:+FY4fqaiqqqI0cRqWxKOJcAmV3s3wy9jwa+dUcrSidbEnUir++MI:AiZtT0HWlcn83T+nrHdS3r++MI
TLSH
T1C8845D4BEBA80466E167D13CC6A78907E7B6789903A1D7CF0764875A2F177D0AE3D320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DuiLib.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\DuiLib.dll
Size 2.0MB
SHA256 a791be0682e2008b4b2c11dae809f1da3a36c46ead199950537a77e1b7df4d97
MD5 791190fe26d053c27904cc480285047c
SHA1 070d30c13bc04ac1934ad40c2eb7bb34b657ced4
SHA512 420528370d22403f16f79d7299ad349c5379703e9f7a253a641a0cb3c161ef12edb08de8e8754518eb94b2c9fbe5fbe113ac0a8fb316030c81ac994d8632c422
SSDEEP 24576:dzoAkcpRgEK/8K97y3suGZoezknKPaNdup6FuiOqomlcAY+6l8:+A1rq/pG0oezknNHuFO
TLSH
T181A54B4666AB05B9CD1AD13ECB6B0C36E7F234010B62E3CB01E5875B9F673D1857A3A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lexilla.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Lexilla.dll
Size 1.0MB
SHA256 81dff7ff1310c844b2f5a969e9bd6470d26f12542cf4ab5a8703c5dc34c3ab49
MD5 b4fab64b8db1cce759bb6c78889576fc
SHA1 fd5d85328ad81f626fe37e9fd3421c1d2693f7d3
SHA512 8b950cde8ed2ee87b2215c8765e721227bafda5170f72d1b538f118f521bf60d839ab0ee83d8a4787c207bd7bb87aee5d8b6574b13416182f4e467e125fee834
SSDEEP 24576:vxYtQbk4vh9qW6MAXCewZfaPwpevVDt4SQjQI1rnc4g:vKQpzuCewZfabVDtCM4rm
TLSH
T125358E4376F64194D8A281BCC22B0553E2B134945332FFEBAA6147AE6F13FF16639361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LibphoneWrapper.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\LibphoneWrapper.dll
Size 826KB
SHA256 6a13a8e92386912a0532454db0a1bed87ceb6aaf4367264d3366d027eb172644
MD5 d15febce8318dd3f7a3ac015771f15e4
SHA1 df45a320a8f2df6521fde814f46eb5ef6459769c
SHA512 19d57f776b6bd8c967915307f7f90b2b6a10c29d62533818c54591759cc4bcb370e45eec877db7f034f01b67f6e286855acf4328db1610adb787a2b510c7591a
SSDEEP 12288:PMO2tqoFJsSvvc1JbmSvWcZXa5SPScpMy5kKod5u3P5Q5XBw5n5aS5nTNYmKWt2W:0/FJsvNJXa5S/plfaKsXBM5aKnTNY/dk
TLSH
T171057D57F28851ABC0AAB0BE54025549D5ADFC96CF504AC703E0B65E3E33AF2A47EF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MailClient.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\MailClient.dll
Size 3.3MB
SHA256 91711ec52015adb8750860ad27b8b040da26e225f45eae8d6082a558a458622c
MD5 533fd83e7e411574d28af8575bc92719
SHA1 80a6dff35c246d8a0db5a924e13eb714f7abac91
SHA512 dfe88e714fa797372b139bd59021a6a755531d22de11fda27292eb7cdd5d7e43bffac409a5b933475b0199971e8efb5a4bf6e01ecbb9693fb15d7ca7a435a431
SSDEEP 49152:3XmvTUocOZMFxPdF5wMK+lzsLtuzkCJmLEP6dJ/tzGiGzTxeJPQEh5Bw0A0rSydk:rVhmNpciC3Sh7m
TLSH
T10EF55B1F625901B9C076C17ECBCB0A07E2B67416877386FB222689695F377F18B39E14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openvino.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_A\openvino.dll
Size 10.7MB
SHA256 b51ef373161ebf77391a1477e582591f5f7592b38b1efc761dfc09b59d7fa2ea
MD5 0669f34513883eb6c7706ca9b145cf87
SHA1 f2040b0f5d813427e35e40d3c9a76c0abed08ba4
SHA512 b712397ed0972f002df855de5c0ae219e79f84e43bc01a3c0ba6ccbe1d9489e95999df04cd91a3fb87a913facca24b8391f3872ab52b0d6895814a9f389005db
SSDEEP 49152:tnWAXRgU1IoFZx0oWHVU7v+4l4CJ8CzPzBWH3RIFYnSsreoUtZZpB9teZK2hXTxX:5mcRNFQZsQ4gb1cJy44dOBIOE65Ugw
TLSH
T1CAB62C5361990199D4AAE1BD8F5B9C03FFB134060332DAEB1790CA575EBB6E09DBE310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openvino_c.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_A\openvino_c.dll
Size 249KB
SHA256 19678318b12efb9212f450e69041e180f1a72a66f663d003edd2cfc8a749c147
MD5 f015398c09a14c0c826dfb6e0edcbbb3
SHA1 86d1728e7cf7a3312e4d9246bff6f13eb1be28c7
SHA512 c42f5913512d93db77fead1c8f66f67d4c22b77bcb7fcf37ab17caecea0e0d3ef8114d3f5710053f43ddb86864e12851f23d37f05d259cc3091a1e7cc8971485
SSDEEP 6144:UTMmMW7MnyEz5CcUS2KFIQd0Oc9sY3AIwVcKeE7w5/dmTuNrH8y7R9V:UTMmMW7MnyUUjsTqVKTno9V
TLSH
T1D8440A5762A849A5CD5BE2B88A875602F67274120721D3CF0381D27E8FEB7D47CFA721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openvino_intel_gpu_plugin.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_A\openvino_intel_gpu_plugin.dll
Size 7.2MB
SHA256 1487bb1b79404ff6e3c7e1f286309748074d3796b7f51648d0ca2f118c9456b9
MD5 23e09afcbc769bdada62643ac57592d5
SHA1 651628dae109fea68981b921b9c9de8c96408c1e
SHA512 4a98858256feb7b386d3ccb9fd0cdb8532653a52e7481b2d79a64f4d44411c281d845b6b9cecbab711e52397f99908797d763172298887f9aa880a620ab38489
SSDEEP 49152:0yl20R3WGkwPSrTlQR0hwUoGfG77zdfnK1ZJEYMaK0jIEhdwF0tKJzh82slBh9Hh:0c3WGkdsdnKy0LhFt3X8lyPCORI52
TLSH
T1F5767D2536580085D0AFD2BCCE078D02E372B0165375E7FF1A9586AA2F5B7B0AF7E611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openvino_ir_frontend.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_A\openvino_ir_frontend.dll
Size 363KB
SHA256 fcc60af4fc606adaf3a88c40ea10196bddacb908c91b988b9900a09be43ca917
MD5 b795c557e6591c1d85e772bbcf97a22f
SHA1 038f4fcb0b65bdd99669ac13cd534d9fcc908e3d
SHA512 79838f929c33ab00b5544587ad7f98660cefbbfc43bb8e39c8b1beaac8bf77d5e4f58bb7e23ab44e849e93767e30ea5ab57c9c342103a257b0beac5926ddb53a
SSDEEP 6144:hGcKgVCRCLs8H9/MJ2Sx5yWT2Z5fAYbQke8reCgN4ukug55juhMnirc0dqZlkbmw:hGce8LhMJ24yWqT4dQDYz
TLSH
T149847D1AE64904EAE8A7917C8AD7C903F6F2B4050352D6DB33D182163F63BE16D7E760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tbb.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_A\tbb.dll
Size 393KB
SHA256 943a1e1d1f32c5bf6369bb7d15cc6888547244f671c6e8b8133c9b7effab7680
MD5 2fc80bdfe46a71f7d54873fdd7bd9e78
SHA1 1c3b7a2f801318c7496c7ee4b559589e730f69f4
SHA512 f8f4862c75dda8801757f10102627c0c6869108aac49a5f6bc7cead204db2b76152a0b53a4bc654c642aff6f103bd5b7a469e0cf0b30d824a5d5b775acf1b35b
SSDEEP 12288:a26TInx7iuCnIhWWTeceIkSAr31Wj2y29XFwg56Ff:azuQBr3Qj2y2hFCf
TLSH
T1D8847C27F6E96C49D546C13486634B5137F2B4140726E75B22A9CB393FB3F50AE2CBA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openvino.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_B\openvino.dll
Size 12.5MB
SHA256 2dd21c3cb2ffd85fc7a3e811e8a6b9f10f962630b342f51ae3621769937861ca
MD5 3d006222efd929f1e5307a399e92c988
SHA1 006a6b48ae128b15d7f62e97264aee1884403886
SHA512 2c5af11aa369bee2f0f38f4cc5d4f742ba43048f859ffe416b93da8107e79d202f33c6c8a17f7543a02e26d0b67f5e6c26d0a42a30f01e1158ddc8b0d10c971f
SSDEEP 98304:hjfqQRE1cpJ1UjYPLpZlOpCbfv99aYRP3TryEZI:hLqQx75fvZP3Ve
TLSH
T1BCD62B53A1980196D49AD1F98F5B8C13EFB134051322DAEB17A0DB971EBBAF09DBD310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openvino_c.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_B\openvino_c.dll
Size 205KB
SHA256 dec086e279b4a66bc923f34dc5442363d94c8ac8110af2fb53888228d318cffd
MD5 bf26d6af253f17e45647ff285fd0cddd
SHA1 8f1849ae1801fcec2f28037da3b11f953e5da870
SHA512 484bb59467974ebdd6c8b9eabc1022338485e27fb2ec45e2c8caa7d1a7fc374fa7f83acb46e91bbefd1fe0c2328aa57022f6bfb859bd26614e7d9d0f8b2fc70b
SSDEEP 6144:OGxLmlpagQRJME6zesRba9a9lnnnwCeD+vi:OGxUpagQ7MlyMM+vi
TLSH
T189244B53F299129AD4D7E3B8DAC75526F7B274022B119BCB1390C2391FA73C4ADBE610
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openvino_intel_npu_plugin.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_B\openvino_intel_npu_plugin.dll
Size 1.6MB
SHA256 a844f4257b098bda8c14037d6806143a24a637c81d81af1d793d216215ba141b
MD5 253356906a4aafb1460795656469601e
SHA1 627680e87c307cdd0f23c0519745bd89ec00fe3d
SHA512 ae2802281a96d3b0885b2cafeec5bd2ff991864e0cccd70ed9aab991a3e729bcfa39558085772d84be0cc29e6193f26d76482013d981ec9010af9f7c3e0868ef
SSDEEP 49152:VTl1ByPM1o+2ZeaFu+P5gCat6jQZpb2QVvv/:9LH
TLSH
T16F756C6B728C01A9D5BED279DB4B8D03E6B1740607315EDF23A08A561FA77F05DBEA00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openvino_ir_frontend.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_B\openvino_ir_frontend.dll
Size 439KB
SHA256 42cfe5e582c4415a3d54318464868d01e85c4bef59a78869e519e6dcdcd558ce
MD5 81e3046b7f07e3f57a13248c1b5dc899
SHA1 c57e767b61801c4e0a344312bac5b2e2e7920b2a
SHA512 35bcdfe57de19a8771142cdaf877f13c50d05809609ceeaeb57cae9026c83bffcc68ce360c005660f7bc6821c2945397af37d2f63b686812a70d5be090bd03b1
SSDEEP 12288:mc86g+EmbJFVxRwNLwNsVpbNQ/pdmGQf/:mc86hVjsXbOpdmGa
TLSH
T16CA48E16FA480099E867E13CCAB78503F6B1784903529ADB33D5C62A1FB3BE16D7E750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tbb12.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\OpenVINO_B\tbb12.dll
Size 183KB
SHA256 8b1255cdab634e34316688cfb8b4806c4fd18b108e645b03ad6a8a20f4439d2a
MD5 d715ed06f7ff87dc058c38d9c6588ddf
SHA1 855e2d54feb28eccb70b80384523d82e641a1167
SHA512 8f1fe4d6e14cd241f0363d2cb233bc56d7e4c2ae30ac5ba5212e626898ab6af495fea760f57e86c03629fcfbab1608975f936509d48b076cfe1b7e2108461a2d
SSDEEP 3072:KZLkxWQy+SzjRig1yTM7JqMse/qCgfTz1wQI:ELkxWQy+Szjz5vse/qJX1wZ
TLSH
T124043A1A7698409BD12F823C9A838AA9F7B2F0546B1187CF0374437D1F67BE56D7A321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpacesClient.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\SpacesClient.dll
Size 1.7MB
SHA256 eb6a5491f83595103e2e9c8a2614f7b69af6626799e8c74219818aa6767b52fa
MD5 320bed0c09b56a63375dd851bdab87c8
SHA1 0e72f4818c533872b2668e020c5dcd3e989960d2
SHA512 3361f9d14aa3bb8fffcf1d76807bc6207a9503570f8b0c64629a5ed5ac49f7345d9d0f2ab495a48b464524168c0437b09ccc90edff42ee44e5cc8683b0e7bf56
SSDEEP 24576:MOWy5qer50UQDKI2SV2GBWdcHfSLdmE+vsrRTuLH9B0uXdLndy/PQ:MO5r3gKIJV1BhHg+srRaLH9dko
TLSH
T1D185E64F279581EECA7693FCE5430B81F13A716A07918ACF039108AB1D6A7F99F79710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UIBase.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\UIBase.dll
Size 1.9MB
SHA256 3d518c92f7ed08685715ff07a60922e3e37b74bfc7c4f000861d1b661734e13f
MD5 6ccf07f5ef445c0a0c55e0b838821517
SHA1 b5efee5f2c6f8c411861f97df043e19f339ea441
SHA512 c5a3e1e9efef52e16a1b26ecaffa5acda16c34b582844408c8a98f1b26beb31d85535e96825d330657f04da9661ca4de1bedea7220b47a7cc1ec2d1abf30a334
SSDEEP 49152:A0n5hzVPhiD6hO+ZK88OZrEK1vSmCNFlp:knL
TLSH
T12995184277AA49A4D9EBD57CC56F4A05DAA2B813474283CB11EEB70A4F933C1453FBB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\WebView2Loader.dll
Size 158KB
SHA256 31423e905e29c8a40a483e81dae1491990805fa066634d218b35bb96692bef0d
MD5 aee20ef43cf692c9080c5973b1b79855
SHA1 b3885791b0e122f8360d6fb7c0e0ac7fe4fa14fb
SHA512 eab6684095c0a7555d921fb1a2e136fa1d761c5766c48571000a97403e6d437a3a4833c571f86c039aa8307fb2fc3fae1acffd63085ae9d2ea0d9e7f9ec1ace6
SSDEEP 3072:sjvcJbdPop1MEsdhRVkiO6DxKkHkHA8SKGTT2EtetX72Wnwp:0qY1MdPHrbFkJEtwo
TLSH
T14FF36B57B3E500BBE0678674C9938A16E777B8500B609BDF03A447691F237E4AE3DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

XmppDll.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\XmppDll.dll
Size 2.2MB
SHA256 9079c380b88d2116128277a14617836ccc2c6c18fde9e7956b8d8fd4a1f9a79b
MD5 32ea29f6b3a133c69524cc0eb352849a
SHA1 6206b3d623b5e35f52124b9c588a65f9b85793df
SHA512 9ec724afd767414d84bc1bb814668aa26ba2b4ef337419d1a9f3a236ea75c5fd1613e5e787ebf5263c527a13b135cda992a643520fa81f1d2cedc5eb33d4569a
SSDEEP 24576:uPHIgJznAMIxTa/2rt8Jh4r645TCDxQpRmpXWSJk+sy0lh//atBhzEB0w5XiPAhm:9gJj5I5t8JhU5TjmY+syoh/CZ2hFS
TLSH
T138B54B0B366541ADD19BD2BCD28B1B43F279744703699AEF069109B22F973F29FB8710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZMDB.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZMDB.dll
Size 1.1MB
SHA256 c8b01bc6e8f62bcd7356a10dcaaa04cc6b3b4e71534009eb9951a605a1b4f898
MD5 4a0961fa38f79088225bf2df4a878745
SHA1 99005fd9c8d8fde589888ff9cef2a6a1ce27ceeb
SHA512 38c537834e6606d7cbbe471caa96caae6bd34981ac197f09922504f069634ccab3d6c236b5992996fcf493793e6b6ccf80b99d2df569bd81eeff14539afa65b3
SSDEEP 24576:+6aMxceW7TyuHuMvzIltd/JcH+P9wbZ3S9SIAg2Zsr:LVWXpgltDcgMVySbx+
TLSH
T131457E5777A801B9D56FD2B8CA574607D7F2B8021324C7CB41E18A9A2F53BF26A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZUI.dll
Size 1.2MB
SHA256 c7220580db518720cb230a4e33f311b16204f706340fdaba5a94f9dd1e94fb41
MD5 1f534d0ffbad77fbd7dd1330fb272a2d
SHA1 37c9f1aab4a5057248516edd6eb35aa7f7bc247f
SHA512 85dfec0ed3e79531276204bf554b745cf908971ff9dede129d9d8b0a0835ae80cb925112bb65e2d94a0e7d7894902e0169087b2301e5de442a1d493c0ab43a2d
SSDEEP 24576:eXlCO3My+63tr3h8sHg6Bm/VHXVqyB073K2:8lCkMy+63pR8AgsmnE
TLSH
T1DD554B47620D4067D89ED1B98E1FC80AE672B8860761ABC703A5DA1F1FE77E05D7E360
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZZHostIPCSDK.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZZHostIPCSDK.dll
Size 290KB
SHA256 3f633499c26c32de9b0102ebf947dc1846901de8b2f04e8f0ac1fd8bb99a2575
MD5 0f41b429538ecaaac89a87d6e0d63df8
SHA1 6414dd64ab3632f9bf93eb69ee6cb55d43c9b5c7
SHA512 3bd0225661af2cbc8392f3ed2f80cb69df7feece8847e4c66b98ddc55336a8da525d5a4a9d1a2763dc75cebf1420287d28813a0d81f2f41461f6eac4a260def5
SSDEEP 6144:fmnZgQDa6PRGPVB1b3r9meX2ye1kSC1PB/IYiwpSAlT4JzJ:+NDa6UVB1LrEs6o50PzJ
TLSH
T124546B167B6D0DAAE96BD23C8687CD03F6B2B8410351CACF13E546231F47BD46E7AA50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Zoom.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Zoom.exe
Size 431KB
SHA256 f29d5a60a166e57daa25acfaf936517854d5b898aec29cb1e9b04d91f0e3cf5d
MD5 78696ee55d433fcf599f64da578927b5
SHA1 a03f547082e0ad60261405724c1181172be21845
SHA512 9d5fda18cc0ba1a7ed87534b63c98067f7527b186fe4e2aa2aeefc90c0baf3ac8837292dc05bb983b41708676a3e734edf17e67a6449be4ff63c0efb4d3afbfe
SSDEEP 6144:TQ8VITQF5KVPa7eFtokipgWASJRaR9bYLw5jI9kQ:TQ8VWQ66mPWPRiNxI9kQ
TLSH
T124944AC663944DADCEA292B2ED71BF10CA777ED8474087A70261B36E0E7799DAC34D01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZoomDocConverter.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomDocConverter.exe
Size 341KB
SHA256 b240cf17efaf96dec065ea528959324fbf62bfc0777123797a32f50fb8bfbd41
MD5 85fea1f9e86c0d52d14072f1c61cbdbe
SHA1 bbae25036ad3019600bc5819058a90f5a755d40e
SHA512 5e46901b27b6c3f6826c772601c8539f9345917a5cc6ce31fb2ffbbd49ca4839d6a1ae75211ac0f8a55dadb4079f2368dea7a7feb738061b5094e8822baf30d4
SSDEEP 3072:5/Wc4i8johuAh1boC7f8LH6tQZdpwKlMrMz+oR/ClP9b/gLwziCMd2WCy5WCer:5/Wc2jNcUrFqrgRaR9bYLw5dk58r
TLSH
T1C07408D6A394499DCAA2A2B2E871FF108F7B7EE85B504B7B0210B35E0D7799D4C34E11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZoomHybridConf.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomHybridConf.exe
Size 560KB
SHA256 36150bad23b5b876a5b4923cc211901dac01b6a661a53cc7f651e34113f16d6d
MD5 c353e5f7757be0b289c6161325d367f4
SHA1 54b6bc3cbfc40771a8c882f8a1b8201f59bb8301
SHA512 1d7cb2f31c4fde8e4bba19b06fa41eb11588e9c7a50a51ca18bafc11fb908230374282ae7e5e26cf89b2043b1c42921cec3a8d1823b1a3eaa0ab58cd3ed031b2
SSDEEP 6144:R/SmQKiKEfhc6gUjU1mtkjKp4B/nuIcIoHGJXlfERaR9bYLw5gTR:1SZn8Uo1mtkjKKBP1fERiNeTR
TLSH
T17BC46BD9E75848ECDAA792BAD932FF10DA763ED8034047E70260B35A1E379DD4D39A10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZoomInstall.xml

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomInstall.xml
Size 22KB
SHA256 77e1e0f10b10f787cbffb832f5d1a8795dd12a54ad85e5261330a16c8494f35c
MD5 5149bda0827e20f9f8ab1065af46fdc0
SHA1 c5b21cbc273db6eef128e976205eff9cf53b5acf
SHA512 cbbf9b9508f6f45a118b2c173e5c57037051a5218589ed3197d3f194e22d5e4292174a8e802c85788c20413d1a34624db3ebfceb8fb46d8432d0d4eb5f6e6f27
SSDEEP 192:GgP65Zeho9McYy8ARv5N9K0i4jnKJamxHlBcATDiASoNnX2HAIBiBchmznCf74hb:4zVEwgMtqvpAE2iP
TLSH
T190B2AE71A2EC0DE1529491DF19307DDA281FD638453D3AA7D5AFB0B7920B05920CBABF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZoomOutlookIMPlugin.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomOutlookIMPlugin.exe
Size 666KB
SHA256 05727ec1e32d45e0bb9fc43ed0601c3b26ef52804c3883555a916f220b74d170
MD5 35e93692bf1d8f533a8c9d1e123338f4
SHA1 cd1f26603d9487520d5ca1062b11da2e7d0b0bdd
SHA512 f4716caa6206914b99a470390e18a657d2af79bf441af2ce11eaa8fa4ec43b8b9d45d5645ece096a57281a737c88c5484e547722caa19042f8970f24d09bef67
SSDEEP 6144:9qzPVBKgS/7IqUwY/+VrJ0V2eNB1CU2YIWiEkH5yNcy+ma8shRaR9bYLw5D/rY:9qzPnkxvJ+2eNq3PH4Ncy7a7hRiNdrY
TLSH
T141E428EAFB9844D9C56691B5CE71EA01E77B7DE80B404BE31160B31E0E379CA6C3AD14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZoomOutlookMAPI.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomOutlookMAPI.exe
Size 2.0MB
SHA256 62d66f9b8aa9a93c1d9d20c905b491b73e174ff77d38246f3d630b90701816ff
MD5 b63480dd35e04c89417dc15deff5404d
SHA1 e59c885d6e4f78e31ebcf9fffc4526a6e4fd8c1c
SHA512 322d1a911e27a780eecfbfaf5b2ce26e06c01804faa68d69dfde9dfcceb0a83f17b712358c0828eaab788dc828a443055e9fee8fca05a151e725d82e0d1cc458
SSDEEP 24576:g5WjrQ1JbKM8Nky1Wrg+GywfMfVi8rMmlf:gcc1Z38SyQrg+GywEfVJ/f
TLSH
T149A57E60BB43CC2ED862A2367C2A7B3549765FE4AB3411F3CACE7A661770BC11935742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZoomOutlookMAPI64.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomOutlookMAPI64.exe
Size 2.4MB
SHA256 2127382f1e4d20a286a8e2d98b0a3ea032a1d8684bccf8ab8f91c261f2850a88
MD5 12eb4b20e3c97eadf2f0a93880ff42cc
SHA1 9a482c95f5d2d91ee4411dc2e6682bfd5fa84f2d
SHA512 593404ef5b8cc30b8e92af0513fa717f5ce25289a68369edbf79e0dd4b39a30911fe571b78369accaa593422afe629ae167b103fa3c2236b6b397558c06fcde5
SSDEEP 24576:sUk2nC3Plt1nJKIv2kwVOG7vqChBTlnd6:s12glt6IvE5Tld6
TLSH
T12DC54856B761489DC1A6E23CBC137E06DAB37A954725ABEB079E1A830F637C60D3C740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZoomTask.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomTask.dll
Size 380KB
SHA256 dc998557887c2b1d80a14ba394675aa435241bb265717bca48d68568ca1f3edd
MD5 b9b401aeef4563bbca8811ffd3663b95
SHA1 96f0b36b8396d2cacd5256236efbf6fb9b602ded
SHA512 c736bfde5722c3dda632b3435f5bc4992967375bdb5ec1d67935b86f953b3d854549fa1c992d81df3fde047b7d877670e87b5c3d1922f88a5f87e41fec2a5acf
SSDEEP 6144:J4gg8UehAdWrEdwQQPDVSQgdJok4mupsjRlW1WPourvpaRAv:eggreh4JdwQQPc1F4XWxQAv
TLSH
T197845B47A2480495D15AD1B98BA7C94BF376BC4B0360DBCB13F4C35A2FA7BA06E79350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZoomTelemetry.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ZoomTelemetry.dll
Size 4.6MB
SHA256 2afe8dbd2ed0876e8a65104ba3595dabd9a66d2d2e2561f8334773304d8adef8
MD5 4b54d667c7998dd4aeb4082225055889
SHA1 0493ba8ca6632478b2e93f8bcbc93439bec271e3
SHA512 15692c26427dfe9195847d6a690026164de7dd6f4afda18f3565d151c29997a211895527c1c949095240e879abcd805b73b942a3f4a2810592d3f957358dcdce
SSDEEP 49152:e7KE4zpl4nRSCuoQtBZdcK6yJwo0WJrW3qGUd40QsK6zYK7PUEKPR7N:aVjw5tBXcK6MaqGUd40jK6zYuPUEu
TLSH
T19E26075AAA540094C0EEE03CD7EF9F06C3F67C95C7B0E6CBC67442291E17BD1AABA514
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Zoom_launcher.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\Zoom_launcher.exe
Size 261KB
SHA256 256f38e824edd33830551595e2942cdee498ba1488124d5594f24b0a3df67648
MD5 91e1f1ebb32512c381774846e8993efb
SHA1 9ee1e83a9dc0c230f7c6b6e5978a52071ca5881e
SHA512 adb9edcb452adcf18e045b9bfad36d87893aab7c1a54059a598d75cfba3cb15bf7d59105d5b2658dedcd943fa7d9b857454e26043e7dae662032f77e2efd3572
SSDEEP 3072:EPtyGIBbXlm+qad57+oR/ClP9b/gLwziCM8WChWCf:E3FafRaR9bYLw5dTt
TLSH
T1CB44F8D9935488ADCEA293F3E931FF218C7A6FEC1B9006764161B39E1D7B86E4538C05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

airhost.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\airhost.exe
Size 5.7MB
SHA256 90230dcc57c16960d8b430123e1d0b50a229fbd47a0fd3b827c49d4d6979384d
MD5 2c75f97e9fd1c02f9524afb960b536a9
SHA1 feb8411f576dbcb7b75d5627204139f735d98d6f
SHA512 62488603e6de766ad9ff32d2860c04736603594068d1ed644335e3909db8779b963650a6ffdc37c225b3dfa34d84b720844353cac647b1844cde8f1d94b49b58
SSDEEP 49152:A2xxRdrn0L1pBlEOg4PawwFw4V9uQonLAIP5XWYatNrKJVp21o4EkBXQZ5xaRY2J:Trn+NatpIEAAKBaC259hrgnrgTMlaT9
TLSH
T1C4568CC5ABB982DCC5634075A1B7220BD3327849033096E7CB917B6A7FAF3D089B6355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

annoter.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\annoter.dll
Size 1.2MB
SHA256 26385c8946531ffbb92fb96dd69330f99c92d45b8b89442b04d552c74603b33d
MD5 6626760eb4ff9b4c8cebb931cb444fcf
SHA1 aa4669d1a18a9573e4cbcb3fc084d437e2bad9c7
SHA512 c7b8e149c1ee652d781f854ab251bd21881fa399fe7a315a6c1e7633f0d983690ebad9800389e337a55bb188cc07feaec880abbe4d13db6a89c71d1d6732df7e
SSDEEP 12288:F4ddKmIDQ1/8pwdDiuiiJMfUdOoNKCokPGkuJFFWghZD0RiN8gfg:+dQZDQl8pwti7iJo48kukYFT1s
TLSH
T16E557CC7676C449DC899A1B58A53EE1AEB717C99075083C706A0F39E7F377F05A3A220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aomagent.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\aomagent.dll
Size 367KB
SHA256 0a349fd95067c21e636073e1925b9c653297b4ae265d188dff7923a08e8afda3
MD5 268b00aa7b616ee4bcc4a841caa9fa7e
SHA1 ef2f60333a5d17eab1650a11ce8fabbd4236fe8e
SHA512 fdc9d2ae387d2bbd75cd6459a4d330f6487026c164647563e541cc4092feee25c77741bfa2cd3161bf1740a3d3a13e9c8ef5c10e1614869c8eb080b062106b43
SSDEEP 6144:lfaUv/8GBIRAcFhYfCfooNdMLVggLCiGodxB0AZf1b4I:lhv/8GSHXyCfowajZGodvb4I
TLSH
T198842A1BF66904D1D5AEC0399A57D90AEBF578A50360D7CB22A0CA4D3F63BF06E79310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aomhost64.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\aomhost64.exe
Size 1.8MB
SHA256 79d4809f7b5d234b0433d85e9f5c0b4fe3b35575dcb016db982bd48e4a5f7ef6
MD5 7b6b994d49b3914f53773bc1856e95ea
SHA1 ef12dade335988cdf9d1408fd8666193fc6a89ae
SHA512 aca7b559066c85c20cf3777f8b4933b15b1f6c429b41435927259c4c8639596d282d53bf79cf176d107a9933f43502b8c73c8d54f570e2a723d0b903991fd36a
SSDEEP 24576:hmux/ZtyWA8se64S9tDhHoNKftS5wX1gyjpZVPdH7FGSr8nvYfieBdPNG8dz:Q6tyyQoNKftesuyjpOnvYft8W
TLSH
T13B956B4BFA4E80A9D26D407885B6A77BCB363C19572826D735D1DD096FB3AE00F36B40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

asproxy.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\asproxy.dll
Size 245KB
SHA256 cf830e6d85fef9f2eeb614216715e30ed3b9006e732d554dce5c407047c36b50
MD5 d0ac59a421607a0a4f41aa6b77b53905
SHA1 531d45d99045f520be471e3c33d24e0a1821a0c9
SHA512 6fc5355e165500ee0656f430b33ccc593f88ed8891dadb2c993929cc0d758481dbc557dbeda59525869368c6da5ec83f31297d6ec6c4ac1cd6e1895bca0d2178
SSDEEP 6144:H+0WwZ+1rXVHbiwvKdemefm0dLcTmpZAC:dn+1DBNKdeq0IoAC
TLSH
T120344B4B67680C95DD5BD178DA93CA0AF23370860765D2DB03A4876F5F2B3E07EB9221
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avcodec_zm-59.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\avcodec_zm-59.dll
Size 4.2MB
SHA256 0453dffb14885bad861db598f1cee34d29c4dca4fdf5cd100e666695f3c44099
MD5 b881dcf5ce957352bf76c669755b548c
SHA1 f84fc270ae670b0a1790893d6ee6f47a36300378
SHA512 e00c0cba1da8d9d25d5b11c65c0e8ff7bbebe5bf7f281bebc6ebff266b4ff5562ec0a2e11cd6f3494b57c27aa11ba1619e3dc81f4e16f7701a5f6fdd94280246
SSDEEP 49152:7nToe61Ehr0IlA6KJpiY/GN6362sxTLzkvr7hp2nBnJAbcVI5IIXGCcTfw6XB58c:51lAk6GceiApCHi38jejI6
TLSH
T1AD168D8AB2F4B7D8C477C07C825A9B1BF6B1341D43242AEB5994E6942E63FE0877D341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avformat_zm-59.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\avformat_zm-59.dll
Size 615KB
SHA256 b6e334c9f29b9477ad0379cf8ca4538f637814c96e6e24ee4b2926580b0fb6cb
MD5 33759b9454c49be35da61f3602f8bb5d
SHA1 de423d92ec80b1ad4602aaa2a30849b845cc71f4
SHA512 c26e5e1591af0932fa3fb45c53e0116df02415dca823bd9d3457dc41ada3dc2857e452c2d40493e66a4a9745835590bfd2c22fc4fbb8986a3efa9ff1027ff917
SSDEEP 12288:1x2WTZrpucKLeRWbxEpcUpFw+Bxxv7JJJV9999B7c3QUan9:1x2WTZrpu9eRWapxpFw+PVJJJV9999OK
TLSH
T1FFD48D9AE3B01498D56BC03E82879717F7B275141360ABCF079092B91F23BE56B3B365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avutil_zm-57.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\avutil_zm-57.dll
Size 1.0MB
SHA256 1e8bc558dfb4e2c43bfc3c3106b416f24c9889b8b920b7015333dffe73918b04
MD5 486f7f83f57c440392c1ba2775795ff0
SHA1 6cd14e306293d3194691836130575a7defec8265
SHA512 92e98f9e1b280757fdb791ef6e42f4f8676439515e9d64452e7f8f38a32ed71a8d93a57c10813a9926c169344056c97c86e228eac98a4336c998f4ecc1a936b4
SSDEEP 12288:rBM4th5vAWljfHXsNhU+Z6GMWCAQhMST5ZJv716:rBBth5/fmn6GxKe
TLSH
T14925A045E6D40599C83A5439D2FBA30BF22274129750BBEF12E24A981F23BC16D77B37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cares.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\cares.dll
Size 170KB
SHA256 4b3a88b4278cef26bd94c98f5eaba570ee327397c501cb3cd22ffe95abb8401f
MD5 0ffb345c4cac707e5bd0cf584eb20572
SHA1 0ae3270bf384389c31771a54ff9273eb166c04a0
SHA512 049f074569e7172c877539dda19f9efaa6cbcb35ae7a529824e7efda5125f06ea3804d7ce2a224917e4d61ecee01d9241b07f457ef7ebdd63863b62926cb9e03
SSDEEP 3072:JiCnI/tkc6lLASVBYt+c3UM+UIUni37BDdxldVsm1rbPDEWl5WCpJWCVi:JiCI/p6lLAO2t+c3OUIUni37BDjLNLDo
TLSH
T101045B57B2A400B8D167D2789982961BE6F3B05127609BDF03A4CB7A2B03BD77E3D351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clDNN64.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\clDNN64.dll
Size 5.2MB
SHA256 4ac3615865f2ce2a9c4c5875ddaf407a6859fdd63f724bd9aef09967bbd62b8f
MD5 f0b7377c3c779568e8ccdf683a313e0d
SHA1 e72c8632f1e973c8517cfff616921010421b84b2
SHA512 4ca0c0af3012cd95ceae918867b2eaf9e8abd95602d89ff524a7093901b429d27034452394c65722cbba57fbaf5ef0f821455f1b38a25e93a654ad888abb5c8c
SSDEEP 98304:9Qf0XUY0WzZCq8Kw17xSuKYjKj3FNsZgZWYA+y5E3Q:9Qf0XUY0WdCqNw17xSuKYjKj3FNsZg8D
TLSH
T1F5466C6929980052D1B6C1BD9F479802E332F05353A1ABEF3A2C8B541F577B067BF396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cmmbiz.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\cmmbiz.dll
Size 767KB
SHA256 7a90fc9721f5656338afb9cc17a6840c1780b7494e5042dda00185edb90c6009
MD5 eda592189fcccd07bc8a11e24fcaf8c7
SHA1 d4d1c0ede30d77e99bd8f172a12a228eca4484fe
SHA512 b14a8b74c1365337de2bdd10e61e88fcdd197fd8c53a9b53d2e5d9ec419fc6b88aaee4ffb43ae37f140250697709fb6bf196057cc94d79e531d39483754a8173
SSDEEP 12288:4tazst5ea/FnyWLOEUkPPSS2T8132b2rRW:aMst5ea/FeEfZ2TyuH
TLSH
T1EFF4F81B63A41278D42AD17A8B966B03E5F37C065F9957F70B5089068FE36B03E3B721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\d3dcompiler_47.dll
Size 4.3MB
SHA256 d1b50f7075e2ee47c8d184e38862a83b880a90fd2ff00da7bb1eb61e24e00f5d
MD5 88262b51e7ccdb3d81d88c7712849b2c
SHA1 007327678559f4113be8c48bbd0574a170617c3d
SHA512 3398277f97aae9e791485d3950b9ae012f5386ed3023d5db2856c57ccd8209ace795cee3f5ac9c48760f6a85f953aa6c02a3cb0bd70388b8038a77dca1f422d4
SSDEEP 49152:ZTMG5Z2OLpwf24Q6QnCF29Yhlua+V16Ar2EclBTz9pjUj8PJKhuQw6sRAy3Gk6d0:a5+nQWao6ycl9rGzd5sz
TLSH
T12B266C47B7A400E9C2ABC13886479717EBB1781403345BEF55A0C665EF73BE26A3B724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dvf.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\dvf.dll
Size 3.0MB
SHA256 0c305d5d63bf0148607ad7ba56f14771a1de962f506d8ee09bf8a00ae995cbf9
MD5 3b0e583032b5f438526879cfef0882bb
SHA1 d42f143a2fc3c8b31d3bd1b8227048b6c1b07fbd
SHA512 5d7f56368a9fadebc79425b3acd6aebc1a9392bbce45a9aaf783cf1cc5109b66914466ce8e143b44c2a0098f71dd5ca36cda641787aa6068cd641089e41c2a99
SSDEEP 24576:yV3pa/Ife29XsSL7NE5NcWDTNaVhlqKKVv5m2DENr2gt:yV3Deux3NEUQ9VvYmHgt
TLSH
T12BE5510AA7606A72C69D52B7CCD76B30B33174A90FF606E3365C51C42FA369D393217A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_de.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_de.dll
Size 935KB
SHA256 4236c2237994b3eb04ea47b0f3ccabd6360f0d8e983a527f1e987749c428f224
MD5 f8d53bcd62cddd0f94dd5125ddadc0d8
SHA1 81351d243fbaffe34be7bba141ce69d97aeb2f85
SHA512 8b698301176ca3884bf20b6b7750fe345185a1a64d77169ffcf232a062533bc455059d2270b72f706eece671ff0c696c7536f3818fb28d8b73b1f85e3590c97f
SSDEEP 6144:uEVR3Rtk9f3eAWNJKtqMsLgaPGtG3CKaM5qqAY6y/4lVkVrckI/VkRl5iipyOKFk:nXkB3RYyyAHkHEj1cwRusuXpb3
TLSH
T10115931198F3232CD3B73B777201CADA7619B32FA356E31DE45CD1F616022A349B9A25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_es.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_es.dll
Size 926KB
SHA256 da806265c27f843a045a5a09fdaed2adb8c202768a6243cb4504f2c8dd19fac2
MD5 0bbf08c65453abcef5d1253ebeff5db2
SHA1 05a33e2a0a00ecf5979c8b8787d076e0bb381ae3
SHA512 260db0afaa798bc1b3c9ace19360e9922cb261c1d9c8ef4ed688785e9ba3aab55bf34e7859a6381ed2706139d02da7000c0f7506d1b99b4958560494e467eca2
SSDEEP 6144:qO02TbAnBbSmM+2aXWePYcuNoSjWFL9+cVkCkjkuPzQ3czHHGW07C+u2P:pR0sTP07buG
TLSH
T18C15B72045E4172EE3F336B7A642D7D3D0808B0FB506C3AAD89AC7F51584ADF8E27A55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_fr.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_fr.dll
Size 973KB
SHA256 877c33aadcdba95aacea78de176fe9613690fadf8a9504f374a2ebbbde849bd0
MD5 201c3592e52c268a8fd796c0531a7795
SHA1 4467458bcf4c3d267d98a11da911976d36317721
SHA512 97ba9608966099074e355dd511d0184d86e79ace6808c765c96065ce521df8dc781d2be2e1cedfb801f0f2ac8c14d48127ae202dd0f2ba4052e992b8f5ae3e29
SSDEEP 12288:SdBpG4E2vy3DWWctpY60DyIQ5nVxBj8Bu0luAGhe9fxdpNdIfuZcI+9wA11VNDVH:I4B+j
TLSH
T1F125C34954E0339D87F23A33BB01D7D2C4348B5FF712D358D8AF82E112499EB96AB694
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_id.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_id.dll
Size 849KB
SHA256 ffb94359e64172b49c5dec62d8b82599ce80eb593f8ee2acfdb49b9298cfe3ad
MD5 531983863a4ae48dfddbb96ca0061062
SHA1 d49f2848d71c3a931b0b5d9a6bd50ad2dfe31446
SHA512 96652971f5e83a086088e17c8451f50bbe87d5abf9757fe44bca2561fbb20ed84ff59d081b6e151367e35f284c71579a636a8dde5e34c68bbe80c70e5172f5c2
SSDEEP 24576:jcCXzZxG3utIBPOdNaXvKRw3j6o+fmKp+:jcCXm3D
TLSH
T14905A55119D6330CCB7A36F76189DAC96C8C632FE706E72DCE588FF006467672A12B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_it.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_it.dll
Size 908KB
SHA256 288457993bba5be5408a74c2caa2ba1ae79563851de63cfd0c6cc0104be0431b
MD5 88d8974f1347d9db665deceb875575ac
SHA1 50f17559392b5efc6dc4030008b1594a3dda890c
SHA512 4d75d945dc88e943e459432db9a4fc186833630168cec4676bd4ac1b0717d9940dea6fbdfe11eb40327c6725dcb41e6030599d36d8dd7b41dd91a6de559b9920
SSDEEP 6144:y9h2l/eCXioqw37gpgBX5TbQM106s95xP8AlB9etuvg5ZsnEB6YuVotugck/H19z:SEu5a9a+5yLWXK/Bux
TLSH
T1F415953454A2231CE7B3323BA311E2C4D574AB8FFB16D338D99E12E8128DA53796DB15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_jp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_jp.dll
Size 1.1MB
SHA256 757839f110e47a0510f76a60c2e53e16666d4e2282b797db79cf04773cc60c03
MD5 5fd91ad11eb6aba8fd56909df03be5c1
SHA1 163970580d3dba3eec2fe15e1c50532355c94fa6
SHA512 e43610148981e42e22aa80bea682925fd089bab74abc93823ab3d894d9a9fc9d43635da911f982aee46f1b7dc66a8d2b745c7e277ca92443e84b91d9e2f54a10
SSDEEP 6144:laVx9QMu02FxGYUu6QDSLYPBy75C6Rz4o6dw90K5XQxBEBGzKJg8a/qhGTqMS:030+KEBGzKW8B4XS
TLSH
T1C135EC2C93D5672E9F317273584D29C1A6055E4FEDB2FB3AC42DC0B479606AFE8026B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_korean.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_korean.dll
Size 938KB
SHA256 1b409a6d5ecf4d5875e63d55330565f7f6c64f9cb72f07fc234c19255d679076
MD5 7733f8fae057274fcc60d84eec46c5d1
SHA1 7f239dd42c2ece9112a980034a47ac557d1ba742
SHA512 969fcd7fd0a2fd4cb8374671988e1a026901c9477317470f38d2087f289e588db0c95dca274a3b75b083ad62d64fb486744d183617136fef7857adcc50e2c35a
SSDEEP 12288:Kw383R6eEc/wAvKtM52/5piYdmg/Kkx1K9TAV4zBwfVUFyNjk/k:Kw3I6UufjN
TLSH
T1781544E064AB238C577379B3AD95E6C98281977FF753C26CDC44ECD08E505E3088A6B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_nl.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_nl.dll
Size 884KB
SHA256 59dcc7cb4f059d6cad690dfe4dad9c25d7eb875ba1b9c578afbe9b552b09a9db
MD5 e13ba41af0614dec790c02ee26941872
SHA1 072ac061d7aada8f3b6c485d4e8c9404a40f98bc
SHA512 78a7ed685bbc248a44abbdecefb5d20e30dbeb3f90c479bdb3026687fb349ea57f402f6e5aa645c6ee31c8769c3ce1b5cbf6a70de1538c57a8799b43d59d16f1
SSDEEP 6144:XWXHb8MS6fXjmRZecJxr7p5TLb3MwZsRXNrk6b2hGfh25+4iYSsPjsvPHxloc4z1:MmRZJbcwixNrwLSsCkujE9vt
TLSH
T1C515C70158A9233DD3F63EB7F108CADBA655E31FD36AD2ACE8ACD0F41402B9785B4585
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_pl.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_pl.dll
Size 920KB
SHA256 012cae08fe72bc5fa2f85ca8b15861279cfd4ac6ac5b69741d2e54f13a15b0c8
MD5 aaf0287c786f650bd0a40fb0100673f2
SHA1 6e5fb84a2631f8ea59b76b5ea6a3363b20b355cc
SHA512 5362909113fa46fbe2084db0d174a45c417fbc0ffd07d9fa1add0ec4388fa31a8e2f096485e8b2db315974adbe060cebf7ccc4bd86a0606cdf6b289b497098db
SSDEEP 12288:Lpsr08J+tpGfajZDj5D+chIVDirLwNLzJ8M8Ja+Jh3ikyGcUl2kcD8:t54+waxZiX2y8
TLSH
T1FF15D84480B2532ECBB73D7BE6979BD8C89D4B0FD217C39ED85F40E0158929758BE688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_ptg.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_ptg.dll
Size 912KB
SHA256 a45fdcc7b6328eb823d6d1ada149bfe39573a601b6f1e1ace815ff34394e5ba4
MD5 e99f347a76f0c27b9414183d20667926
SHA1 44628f63c7aa38fb88a9dd97b2bad3e4f46cb661
SHA512 f312404de79d93b309fdfe25ea809166b7607ba6017b62267680e4c0178485342ca43a619afb7546e91b41c5e9782c583057049f388cd207fc384ef3e66841bb
SSDEEP 3072:XuzKInOsMi22mHZ3HH5i6JBYJRjc+1Ie2TG5UH48ZoLhcASmHCbfQx5rG8zQpCVH:XKZHPOW5nxPwyvUUZUtbJfzPW5foO5b
TLSH
T1C315832419D2133CD3B33777B60AAFC391445B0FAA07C2AAD99F4BF152C4A839D67A15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_ru.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_ru.dll
Size 1.4MB
SHA256 b6a2aa6216aadbcd6341a2eff096ebd9ba9f0c6882a224bd776f34728018ce07
MD5 6079bcf21bb2067de036e4e02d2b8778
SHA1 f2e1a11e47b5325f3052b3c83687350e4121533b
SHA512 0394343cf98a113f453f6796f881f82efb90d91a250f9b937cbffe6b4d62f768b1e348987feada50c028323ada845a4de2b1284d48e3a51554aa363fa949cf96
SSDEEP 12288:Bb0s+/L9NmbloIW2sYsCTo8Pt8r7zXs4M7goLGmPPBhIPF1k32NK/sST1Z956qs5:2Wx+zb2yuPcrkS2P6AssAJ
TLSH
T12865AC6055AE21DE1311B42BD804BE897CAB46FF3F6BD3664D642CBF34E2025C63D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_sv.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_sv.dll
Size 855KB
SHA256 e617f2f2ce105e72ac69daacb033ee20c3aecf57d50448bebc187c7562d143d0
MD5 941a1f93d2cd4699e3155d6f1226d9d3
SHA1 686ab5e364ef884de9f3dbe60aa3c355affe5c5d
SHA512 fce159a5e3c9610f2d0a05e5badc22ed34016ecb621af9289ce6325dfa3291cc502b36c3e3f2f9c10ed5ca90a6a6dbe07480716b85bbf6871e30e55dd4529ec2
SSDEEP 6144:TuZRC6VwOcVfmzIJt3b5j1nZMhYSwbG5UmH9t/mlAHwj29LT75UtmfSw5lwKXRZC:sXhXetQ39e1tcW
TLSH
T1C215A6015430732CF7B73B7B621956CA859CD71FD7B3D65AE88D88F90A8569308FA30A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_tr.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_tr.dll
Size 902KB
SHA256 05267085a268e1806533ed5a82f7f08c8d082925de3890eaa8ed382fbebe158e
MD5 dcb5153d71a5d713a9e2578ddbfd90e4
SHA1 a543576a47ab187ef65a1d7dc3fcf5929cbb033e
SHA512 2c38c342fb52ae3fdf0a90f5f3f3cf1fcb09a7b49925ed0475512296b33999f34c9d29b4fcbf7b3d13fc4f4818c45050cefa836a87e7e8c5633cbde6757e1cde
SSDEEP 6144:0GXxmP8igqAKMUvOc0oKGJbbDxib1/FVT9/FVBaUnF8mM8JZhKNIk28vTe0:/ZqfMUvNhDxib9v9H6AZbk2ETV
TLSH
T18215A64018BA371CD7763B7BD4999AE8E4DF574FB332DA4DCA1EA5F12B0534305A2A08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_vi.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_vi.dll
Size 1.0MB
SHA256 2664b43e66a6fef434dae25f10da4280aaa5554cb0195cc839646f927fd830b8
MD5 c796c815bd65db36d7ec9df2168db206
SHA1 01b56096b03ad75db2c8b596ce6d6aff76c7992e
SHA512 219a3d9b6a985f89ada62be59030699f7ee7c53143ddaf5048ebe52e40a4d23b4e1e85998f7f5fa9bfbc8f6e6eb3db98b487b9a2c38785899049bfba21f24f84
SSDEEP 24576:vSOonCi4DQmXFVdgJiP+5K4C+OrtZb4e0+WkzUGv4eD6XYgFkFWUS+w5X7/2r4gn:lXCgr
TLSH
T1CD35302111A0332EC77D3A3FD28D14C99BCAAA1FF751CFA8EDE825F526065532D20B59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_zh_cn.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_zh_cn.dll
Size 754KB
SHA256 172ce0af2021046d602379e3b8dca76ebfe2a889016d1fec6ed9589ba900026f
MD5 55485fef0c1d9afa3d56879fd4294103
SHA1 65890e229c19d9862865d37e8e93a48b490887e0
SHA512 2a0c23129d50c8d2cc6c35909bdaef077de829f1748b6a0bdf348fb4168ba868585aeee728f8c19a1c44130380c63c6cdc78d516de5f6276545427ffcb2f5b21
SSDEEP 6144:3n/x+n/KZcWa4AtjXMMuegJhMQ01584sbr0fmT/zSnA4t0kkl:cn/3higQGAE0kkl
TLSH
T1F0F4C54500B597BCA7B73A77A31A99D890042B0FE73ACF7CCFA954F42901E7B0C96A15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLang_zh_tw.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\language\zLang_zh_tw.dll
Size 774KB
SHA256 375e995199c4ac92d6588c979016605454b99811485f2ca4a8c66258f47cf357
MD5 91fd5335555aa16e63ddbd8e6f3f763f
SHA1 9077b4620333645f45f933e2e852be38e71ce529
SHA512 3d2d6ca13b777fcf9a44a65e919e3d97c3914bb3ab9ec9da160b7b02a8646fcfba4c1ade1b470514aabed911f2303cd21ec8d8ff0311fefa329168d5b770f346
SSDEEP 24576:a5GH3xeaV9i0OtlzIgfvTiFQYQsWxUMgQw42E59t:wGIvTTtt
TLSH
T109F4D65104B6877C93B33E37A74945C980442F0FDB36DF6EDED994F02A06DBB28A1A58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcml.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\libcml.dll
Size 13.5MB
SHA256 13e8190a4d3c53ff81d81c8636f3a129f1a5a331e819968e7ee7d8d6de75bd16
MD5 725e67acbe899e80133fd3590907c435
SHA1 e8ed00d448141202ebdd2f605021500cae409f91
SHA512 02e2739ef0880e612d5f39269f42848bb74a21b1e71d4d97cfdbbf1a9fe23fb0823bbc9ba12b2b05612a764f8d16f71811e63760b869efe5878f5b1bde207a6f
SSDEEP 393216:9iNHBgBcnnvz1iYcMF9OgRR3UwNRDkYEq0TuMMbNQ6p:UZqcnnRiVuLT6YEMDNQ6p
TLSH
T1E7E61215343C41ADE8A9623096939FA78E55A419279C97C303B3C72CCEBB385FA77709
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3-zm.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\libcrypto-3-zm.dll
Size 5.4MB
SHA256 004adc3db79b5f060c25112151b582ce89acbf9593326ea724071ce54271042d
MD5 a58b1ebc1cbc53b5f3631f11fa8cfe67
SHA1 39f99044dd3f01621b4cfc0b46b0b9fbd59cf1a0
SHA512 23e0dfc2d94d6af48ab73b1b73f6e3bf1027c66e2327c3a7c056e8fd77914244b1972c1d2379412e0a3aab07e58b3dcb0b58703387d4147fa6dbf87a7d56252b
SSDEEP 98304:UL+sbjwZM7lyKreNu4DPm1CPwDvt3uFGCCU:KfbjwOyKreNnD+1CPwDvt3uFGCCU
TLSH
T1AC466A1AE7A81189E4BAC13CC6574713D6B1F81A177097CF15A296B90F33BDA2E3D780
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libmagic.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\libmagic.dll
Size 409KB
SHA256 dcccf8b42ba2e78b9055f710967bb192d9f949453b0d893341f400d426f824cc
MD5 5f8c5f551fa9c6db8726038f22721b91
SHA1 ad11602098b793b0739a354b96a51d9cc784e4e3
SHA512 01409c877bd551b02cd738e6e410566a32ec4c0914a02bd3ff4d0a2edee98629002a3000b52ae69e546e1557205cb402838476b0a141a3b833c8b5db1705c952
SSDEEP 6144:VtzAQdr81HnU9jBiXeaptZDqIiG2JAD6Vxme/jba:bX4HU9jQXpmG2nwe/jba
TLSH
T103941842FE570884CA62653CD875625FA36C279D07104AEFE9C05513ABCFAA20E77F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libmpg123.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\libmpg123.dll
Size 255KB
SHA256 7e4ec762aa1845c5024457a764c3796c1f1a49b25b5aaefa106ea4ffa11e3794
MD5 716213abf474243ede16b75e6faa0118
SHA1 60a0b2e09c4a0417692729072614bf9c9cb26743
SHA512 9745a738eb068ff25bad6419623ffbf1503c53db253f564ca5d75051f379c52436fb3b240ef0ea15303c266a200a87fe4c690409a31ff3d248aa318d32343a3b
SSDEEP 6144:f12LossfYumR8kwI4D9Yd5soGK4tmsE5a2:d2LosaXjoGK4Ia2
TLSH
T16A446B52B2B0DD6AE5B7803D6646DA5BF9303C500B00DADB02B065AC5B772D16EFB393
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3-zm.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\libssl-3-zm.dll
Size 1.3MB
SHA256 d0f13240a09e687b27463c462a1a84676032db96378be7037bdaa849fa1bdcf1
MD5 894121a390725b576efa4f768102c628
SHA1 c7927144c38b4b5c36ddcfb5e7fc62f6097777a0
SHA512 cb2eb887576f8eb53922a0d6f183cc8f4ec02cd9ee3e2983544657b62d0884791f91f1cbb87e63b29c29c85ba9aad00ce9023345de17a25a8d5326c4bc9bb3c4
SSDEEP 24576:NOlsz4a1vJs5SZU5K7/LmrHn7zdEVB3nA:NZ4a1vJs5e7D6zdEVB3A
TLSH
T1EB555B99E7A8115CD9B6C13C86534B17E3B2F41523B0A7EF06A186B90F23BD5273E784
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mcm.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\mcm.dll
Size 2.6MB
SHA256 46e18790babf0e880a227126302966e9fd2216ea839a50962ca5136c054026d7
MD5 4c49b8edad6e9eab13347229a6f132f5
SHA1 5c00ca74780d898ad778035a9681f897291495bb
SHA512 b782f871c0b6688c82b933f7a885edc49a0e7489fd5476f1f319da1ab926100a216d74dc1088bec002055590b99a550191f2ddc7e6d9be09bfa3939888f3919b
SSDEEP 49152:J8x+DREV3l+Ceed1I2PW2whGgb6M87gE8Ixmo3het:CA+KRga28Qhw
TLSH
T166C57D5A23AC10D5D02AD17C8A5B8E43E7B5B802031B6ADB116C8F6D5F6BFF10A7DB50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mdnsclient.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\mdnsclient.dll
Size 169KB
SHA256 fb830e0c8d5c0fc2f6b209017b2bbee831d4f290179dcfcc0c2cdd6bf75c53d5
MD5 b0a84ad286c3eb65f03534a293ce35fd
SHA1 f425c581177b28ce2e3ae9e7aef86215d38458af
SHA512 42ca949d3b95471144c1d323be70cba898dae62e4a635cc6136a8da4dabb170efe5dab3b5d239ee31b79d05a4b7e24ff8eb33d5f1ca28d0ab1b20e8aa5da8c83
SSDEEP 3072:Yu/2oMEk8ROOA1o5F/2rrj5Q61F/SzUB8vedzJl7qk6tWC6WCYe:YsM9lOcYMf5hFIWekesWe
TLSH
T19C047B47B3A404ABD863C239C9A35617E77274110B24D7DF03A4867A1FA37D1AE7EB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mdnsresponder.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\mdnsresponder.dll
Size 485KB
SHA256 a5d5132dae18a60cee5e20fbb60b9bbeef2fd8807683f7aece8b4281f6e9c89a
MD5 b7de2c9275116317869b70879b542f44
SHA1 ea0a4c634628a8167033f6cc3468a28bfe43bb52
SHA512 5adb9ce40db9a030df044791179c9d781d4980de984fa909868fc5d87c30989533d838ed3c26ada862329a5064773f880666bc89162ab60c8b7984b79b238ef7
SSDEEP 6144:LsZT9JFiNMcJMb2tpLA2Aj8ovNiINQ8w+ot5itEJkUzhuC4U73mc4JIC56XFXSwr:oN9JFxMMb24v88wnoUMJICEtSY43oN
TLSH
T134B48CABA3A404F8D9A7C079E9136513E7767018233126EF49E4C9A41B73EF9633D319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mfAdapter.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\mfAdapter.dll
Size 153KB
SHA256 3becee94ef4ad36f551610bdd58cc27b6d8033ca69e622c38862c39190034700
MD5 1cb693e3ca4c93cf4d1f6eb6867861bc
SHA1 003e22fde51950a746e120ab256dc9ba3a022271
SHA512 565a3e91ebcf452a47a61db824855060f4b0a7d8b3db3705cbcab3ae570e9c0de991fc2a3afafd6f723a07505017c9de99cadfb4f39d723566a835147fd5cab3
SSDEEP 3072:ucn3f0jbHef4/BBxK4dIo+Zd+tW8B57IzpR/WOhRL0Uck0NtXWC1WC9:uV9T+Zd+tW57vck0NNH3
TLSH
T1F8F35B1B72D80489C56AA17C86938A1BFBB37415171197CF2390875E0F7B7E0BE7A268
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mkldnn.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\mkldnn.dll
Size 6.8MB
SHA256 cd135831d0e66920e020f7f2a91115adab859f513f26e388b89277b309a87170
MD5 ab5c83c01c3c0cb749cc6c6ee7a5744f
SHA1 7cd0cbea527c87e9684466eb16cfbf18e016d08a
SHA512 78c877305de3d36bba0fc9e8059421a0384ad3752856758ac6b8a3ce1643399fe59de67a8f8a6a63becd1f234fca4f98b7b8d8f299485fb964040c0cadc2a42d
SSDEEP 49152:Bcmt/86GtCrwjNhXzllF8DTkg4inRdo9uy2IR9sL+yjjQXaK4p52KowWtRHYV5jc:lGtjrskg4iRsRIjjIH42
TLSH
T1D9666BD6A7690288C037D9B8C367AB13DBB1704C43305BEF46A046B61F27BE5993B725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msaalib.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\msaalib.dll
Size 52KB
SHA256 fabe9bfdc43a4c1c05bd7f4269f89fb3006b89d6c4d404be547dc7c12b761d7f
MD5 81ba8dc8e75a9d6a1e2bbb9de301f1f3
SHA1 3b70c458fa83a15a78ab8d66ed69d9407fe515c7
SHA512 09493b24ac68a8fa63088043b04a0f1d0b32320b6552196fdd6ccc052296334fca08772803cac01a865ea79eeef9c3b7144ba885190f4bacf9f2de672e24db6f
SSDEEP 768:GmMRiZmkJQ0Wq5olXmXdsis4oeDc4BYy08x/2u2E9mfYy08x/ZM2Eo0:G4AmXdsisqDc4BWCNcWC2P
TLSH
T153336C4A97588C42D9274975A5D34E3ADAB1B1824760C3CF1318C25D4FA3BC27BBD3AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nydus.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\nydus.dll
Size 2.8MB
SHA256 b4b67781021b75c59b1882ac3054fcd3cba4787e4d127d70e6a7243cac5c2070
MD5 e3c08a23229cf8cfd8f043e0e768771e
SHA1 e5dc6870236e347b9a44d310ddba9f13fd3a6a46
SHA512 26138793bde070b60c40594a10f762a523da23ec4d8dc188f0738aec61cffaf42ef8ee75ccc13724557619584ff1cfa99c9c5912bb6477f16ae181af5e097f57
SSDEEP 49152:XzXXX5UrovrTz/R6hmDEElm3lNqNBsTCqLuZnQK6:XzaiI3LLuG
TLSH
T1B5D5395767AD80A5C92DE078C9974A4BF7B1B41207A2A3CB2665C38E4F777E05E3D320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reslib.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\reslib.dll
Size 55KB
SHA256 fa7b8fcea2b8d4d3131f3252a76e22a57bc455b80d6b0b909b3cf6f9dd10ee7e
MD5 62879e3439ad3062a1cf5c5fa2245151
SHA1 d0eb184825b9d3370c19c7fa087762430d8f60e7
SHA512 a695e42e01045a5ec4a14f1bc9f81caeca2a06103207c6a266d8dbbbfb726f9fe0aa8e77b93e8c552044c0b98d341445b03e49be10cfd8455b98820797eaaab5
SSDEEP 768:AW9NouFBk1i9DM4jvnWTxAlB5N8OBYy08x/cb2EIYy08x/hJ2E5/:AWjoF89DM4SdqV8OBWCIyWCr//
TLSH
T1AC438D5BAB480845E527CA32F4E65D2ADAB2B4525B50C3DF1319C1160FA33C1BFB877A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ring.pcm

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ring.pcm
Size 8KB
SHA256 29792a0893ed2457c3872c4418bdd71f5e6c1b8e5894c2c921f8a8f8d797d4dc
MD5 15f886cbaee088418b6ffcc29115c64d
SHA1 9147beae4e9138ba609f67e75f9cbea7651ca307
SHA512 e5228897cffb5e05a7a66471c52089ddb682d544ac3b4ac312804883a2d335b60edb6236286dbfb6934ed12715709f8ffa09dc7014844acb89bb1b0e205a2daa
SSDEEP 192:GFpi2s7sT4zt1wXWuQdUSNwxFdmiq9/J8dEMin00AdfQQbk8r:eI7soCmLQFdmi+/J8dEMinv7Qbfr
TLSH
T11A02B0C7087D1A8116A1F021057D3BA7CBDB86FACF77544971F149EB9980D3B141F28A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ryzen_ai_vart.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ryzen_ai_vart.dll
Size 54KB
SHA256 85f339b0be3b7c522f457058305a858139d489c4312a47aa5d73af8ebfd3ea64
MD5 b21c5b56cee695dbf6f6211d634d95ce
SHA1 f2db0419090828106372074dd8106cf727aa5503
SHA512 dff1b9ff91f838c362c9020c818cb5fa5774fbed5bdca5cf1fead6ef585d7e43804d41fc8f90fef8c0b2e033b0605f3eeeb1b7442933d56f60710f03a66f60b8
SSDEEP 768:O1CnSOb0DfCfP4bT6haOxbRzUgLNtgHaYy08x/N2ElZjYy08x/y12ES:O1oafCfwehaOxbRzUgLNtUaWCNxWCy18
TLSH
T153438E4B6764080AC9278B7DB1D65E26EA75B6424B41C3CB0314C1560FA37E27FFD3A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scintilla.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\scintilla.dll
Size 740KB
SHA256 ec7185fbcb8ee6ac678141e21b824a7e9a70b6661967b90204fb62eed32dff32
MD5 083dce07f3bfeb86bad0e3822f2adec8
SHA1 091b941814b842d74d09d6cf67133207445e9b1f
SHA512 164116ab903e2c4df3476ecef90807da5c63be495d2abd073eae9d4e61d645a54e99a9faf7770f6bd6f48602674c8cdf25194516f1de83d9966e3fa5dbc978db
SSDEEP 12288:XdBrQT0+58HdJmKr2g5wjrhfIu7gwwWqHe3dxc75xDvtxUP9KZv5xDD9xUPFGzQa:NWT0c89JQUwjOfXH8dxc75xDvtxUP9K5
TLSH
T14AF49E4BB7A900A9D4BBD07E86674927FBB5304503A096CF12E087596F27BE41B3F361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sipphone_audioctrl.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\sipphone_audioctrl.dll
Size 267KB
SHA256 2ea93005cb6813fd29b2c8ca900d3b2484df804906d662924d9b9ad89a857cc2
MD5 4718dc0bccf01e0a23a71bad30d3e4fc
SHA1 7e30fb08ff4299c9de4ac8e49b2de7d6eca8f36d
SHA512 6b8425400f50401642abedc8f14565a7b532f6d3afa8139509a14994dc96d5f07863b1056896f88004005783f31c82c09889ef69d13ff7a3bc7ee91d77a6b3d6
SSDEEP 6144:GFnPUWCk05bkRTnQOAC6OFoeK+BVs0rU/SrVt:EccMITQOQOFoEs8Vt
TLSH
T1D644F619AB540867D94BD0BDE68F9D1BD3733440E30794AF12629C6A4F9B2E0FBB6D40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sipphone_util.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\sipphone_util.dll
Size 64KB
SHA256 e6c4e37035fc18f3ae938b4ac5fcee1442cbb51882b0f2e51b288c51367d4e9e
MD5 0a506f3c22b0b35fc76043fbe9e6e4ce
SHA1 a81d6be6b1f1de5143ebdb54e22cc5a983d299a6
SHA512 0f8754cfe6cf7aec6463bdef64b75652a4bf3e5f3fbdf0d263a7c250aff8a15863d1cab23a7f89f5fa9e3841734f7aeea12b5609e5d2a31041fe9a8b4068f631
SSDEEP 1536:atPpswQ4Jswl+OcygdpcwR6ilwWCFVrWC1tE:2HJVl+OtgY+wWC/WCzE
TLSH
T1FD537D47A3080896D5775535A8D78E26E636F2976B50C3C33320825E4FA37C16FBA2E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssb_sdk.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\ssb_sdk.dll
Size 5.5MB
SHA256 310541a6904371476856e5953f3e0c80e0622e5c2d3c1dac18cca40e66e9081c
MD5 52fb18f84971f0072c738c2f3cf3fc9b
SHA1 13e42a4e08112880c86ef2b57334139970b39ac0
SHA512 c7f5efccb3bde246a1fb8f5e177a4034a10a329896a7aba515ac789c0bbe473199e72f9810fc1f385b8f698d23fe9edc2483c1ca31c4ccc725aa8b186c22936b
SSDEEP 49152:rpoYD6Ulld/ozt3uxPezM9bF9tNKhVKAYUmr9hjmp2cMUSCp+FPcCMAZYx2HGICj:dD1FVKUAqCXi+aRi0Y9ejA
TLSH
T15346494F275540AEC17BA3BCD21B5F43F636B099432286DF029005A69F6B7E09FBDA50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

swresample_zm-4.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\swresample_zm-4.dll
Size 216KB
SHA256 fa1e801d65b415d0cfb90a43a6c4e33dbd9136e7ac46d8117065c8d5982b0a87
MD5 490ac600905c513a0478bf30c67ccc27
SHA1 4e2545af9c0695176a8c9b6b9b856f102b60c4d4
SHA512 c572133e687a933529b7af8706fe4f84e395d1ee9d2c56209a7ea4ead6831e3c91c250e1adf328d77e77e74b598b7fa926a97a489724c207e9d45e0dae70902b
SSDEEP 3072:aov+APxJN6JMQt1jwqsWyF1AUDg1L+KBKn2WCjWC/:aomAXN4MQ7jwqsWyF1AUDg1CKBK2p5
TLSH
T1F8247CC2FA6529DCCDA7C474A1672707FA70707503806EE716C186354E2BBC1AE7BB52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

swscale_zm-6.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\swscale_zm-6.dll
Size 903KB
SHA256 9ed4c1550adbaca0da8a4e8a345f2465ab23547844c10e7ff51631b907081684
MD5 747c81ec90a731112d3b50b9b53962bf
SHA1 f3b3729668c84b56a7b434067cd36379fad39824
SHA512 929378171b6977cadb5c6e032c51291a136bda3d82419cad81d7aaff27682c6bebc0f589c0357a7388c0f57ddaa4486ffc6217f1b46ad05c2fa1ffdf5a975e80
SSDEEP 24576:nmR0yWHRhkvoQORpOyY3xmiKkfriGPnLX0YTOlw:mR0yWHRhkvSRm3xmRSriGPnLX0vlw
TLSH
T1FC155BD3D277269ED8964074C1E1DB967A40B1260350AEFBB784CA35B963BD0B33B742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\tp.dll
Size 2.0MB
SHA256 47f860779c1bad710613b39af2b9bee93fe5e557eb0c78ba9b7916b6b2e01747
MD5 a7d62ab0a9cfcf832c6555c554f129cd
SHA1 b6691e5720799608c40fac8b46fb062e59303460
SHA512 49ba6c56a6489e71b36a7ead5aa2a41b716dad448089bb217d17b7662f8d4d11983e658df8f0052baf786f73f421e5c485aceca7040682d7aa8124b46fadd1d7
SSDEEP 49152:g3ssa11Ul0nX+ka32MOe89VFBr6hNsjmVLgVG3Z:zlAVLgVG3Z
TLSH
T176A58C4B275940A9D5ABE2BCD70B9D03E67170010322A6DF06E58A6A2F573F06FFDB50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

turbojpeg.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\turbojpeg.dll
Size 1.2MB
SHA256 f6ca63a5a75974a21baae908f9823a8484a3ed4a254b3c500bde541abedc9de8
MD5 19450d33c87adae1ab15536eaf0ab381
SHA1 68ce99aa9c9a1c04147d0bddeaced410241c0d19
SHA512 48ccda2527d26a064b4364fb4b6336629211a6cbbe00042ade25fd4ff6b4223d75a8291241305db010b46973c310ee064163f6576d9a9c379df70ef9d95e989c
SSDEEP 12288:oWZem3xHEqYFk1HSGC3G8fe2nKVHFWsRMb:oiem9EXi0
TLSH
T1FC451743E2A56C86C7E68078DE6AC536DB51382D43F706FBB580CBD53A13AE17A36341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

util.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\util.dll
Size 456KB
SHA256 400a94a3ded684ebf74747136cb32fddad44a956d534b7cc1c6517934d141296
MD5 0208adf7ae7f22315c4c7e5296bf992a
SHA1 55ce8aea91e7e9c43480e7826727870954bf4724
SHA512 73face1f0ae1ead3006f685dbc1c329539f45a2571435565384288ac831f9aa4e65f4f4c7f58f80432763d5cbf8f7999dd5b10c40a27505cfe6b783498a933e1
SSDEEP 6144:SNEvp9Xqv//1W19b77XAiTGLAFc2cpuBC4X8FUBBKBafjK7JT:FWvnc19b7ja20qvBBKYW7JT
TLSH
T18AA42C4FA35F0466DA66923C8A83A505E27770414B4287CB07B5DB2A3F573F46B7F2A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

viper.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\viper.dll
Size 3.5MB
SHA256 9e7ba7582ee37a23a67d4a6ba4974a3639215dc4997c56332abdb7b4015bc5fe
MD5 b802d7f8d03579cd800b8b2bfd2bea9e
SHA1 77942a4e09fd7619d544d0e55edc82c8344c2295
SHA512 0a70f486167729648364f120eb5c1fef5d9a6866a2e558503913cb5a3b04e9d0e3ed45c55b16354591f3d5daf47cfe90f834876b9b01edae0be6452bc495f651
SSDEEP 49152:fqxO/z4WLpkdXCYI1pIL0B+sWqq1WbHAnsrtn2pCsFxUn:YEIE+sWcTrt4an
TLSH
T18406AF4766BD01D8D47AE039C19BA51BF6713819072146D713E08B6E1FBBBE01AFB326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

viper_async_device.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\viper_async_device.dll
Size 237KB
SHA256 a62044c00b98acca8092234edbd662279ed7716a915cc9298468e4f6677259fc
MD5 1d13370a20e2f88095030ffbb7d76d0f
SHA1 f48bdcf4b52c63e6a6fc76f2184355559843456d
SHA512 17d3252a9e28823e62fbbed8bb5f057cbf646302c7633ec6c215a45822b5536684aff10d8501acc8020419f62fe8c956814e0e9879441484c023ad605e584740
SSDEEP 6144:NHtEy/YPPA9hjjUTqGSliCcHDOQ7cOtzud60VkTB7WfPCGpJGl:NHiy/YPPAbjjJGGiCcHDD7cnU0VEAqUU
TLSH
T1AD34494B62DC1CA9E97AB0399697860BE6733445031296CF43A0876E1F7B3E1BD7C364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

viperex.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\viperex.dll
Size 22.1MB
SHA256 03bc8c2d1f4b3ee095fcf1c574ef5dd95109aa086a0ffc4756adc39a7695763c
MD5 f0dda7b7a60bb4d76d22a820bfd26359
SHA1 70acf6e7550bf50317d58db4a3d09b55552088dc
SHA512 3ff87d7de3c72423d10e86779453b643d2ebb938d06e2689cb7edf83cb4b7216bad3c737b5c77aeea660386852a9a53d75fa38a30ceb49909a0f47e700e65fa8
SSDEEP 393216:IQZDKGvKB+IBupUNk5/Vh2gRfrvDiNQexK2lmZhi+RKoxaASWXm5yGpAnMbjXmuH:IQZDJI+jmyVh2gRfrEKW38KoNSWXja3B
TLSH
T17D371382F255E6C4D4115C7A6D1EB4DBA332759ADF4A62733140EA3A3CF29818F6C7C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zApp.dll
Size 2.3MB
SHA256 3e7161dce04c6f9e5617c19bfde8db5cf934a12fa851d6aa5b7e79a699049b23
MD5 2358fa17a4f7e51a0cf0470745aa8d9c
SHA1 8e88faa6cb41dcad5b43c04427530c9499b98d25
SHA512 abb05c8bd7332d2dbcf5df422f9c55ca8947b80ace231245e63100be4c78ae64b9f285587a75771a775f21e7dc5604d196f7e1181653e6015a3939853465b942
SSDEEP 49152:rFjhRRIWrmXeQMYFBySawzYPfqbgt+LHkfiXpKcl3XITJtRHZZxLwPVCts2d:1kMYby+At+LHkfiXpBMcCN
TLSH
T159B5182F729142B4D066D178D7CB4D53D2B2B8128369A6FF03254D96AF3B3B18B79B10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zAppRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zAppRes.dll
Size 630KB
SHA256 aa70c4e123894bdec600694e25b1afdd5e90b55934d82b4694685c2a755aee66
MD5 45b6d252912edfaa9180d09c17e07c90
SHA1 9a4180e0247e986e52f3709f07f2a3f6ddc360c3
SHA512 b41d3f80a891810de1637c4e25420bfb6677c0f0be2a3644ee66dd3ae798d43b5a3190e78cf431886587ed061138df1e22e78bc7e8b7ab2ac28794146f6ba426
SSDEEP 6144:ZHJ9O7Uee4wPeBqKVym7ICgApVL8XC/AbwTfjvNVo/frp6B1U:Zle3w0nV795JiSAGL1U
TLSH
T101D45BAAF2B58827F40F6B39A927AB80C12BBAA47F1593D6B51577160D738C04F172C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zAppUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zAppUI.dll
Size 1.8MB
SHA256 21ed51865f49bca46ded95afbccd1ce6a9cad3323d7a0127ece59e99e7744dec
MD5 b4c0dcdbb267805e95a54d43d6ba3d98
SHA1 4746b4b07c30dc43749a7f70eb9d03dc05055e5f
SHA512 bfdfe29c938919504c18fa3743738cc649d7efd51e07f4235a1fffc67f5e064baf4df530f2d0f0336b1ebff69ca4aca3a396c65715d77bf4f5987211d4cae646
SSDEEP 49152:ubuIOOfCpkyZuJuvkShFO/OFOYOqX2y7/tTc2:1kR6lZ
TLSH
T1B0955A07B79583A4E86BD07DC7B74E4BEA727411475683CB0261CA8F1F233D28A797A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zAssistant.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zAssistant.dll
Size 139KB
SHA256 9540a009ed392c6bbee9ee88421f49b588776fd155025a8b57c5919c712c4b9c
MD5 d5e04231a279ecad32e35820a606d613
SHA1 4208a760bc8898390a4e7b8495da88f69f482526
SHA512 9800766acf6f64763c8ba42f938613aab8d64c8af285d22aa94d081705d899ae02b1ab0c5059616dd50ab0ecf7befe203f848bee3a1ab6e67bda14a832a05683
SSDEEP 3072:H+oBvE40ooI0e5F9EYM5zMNmuBtWC4WCb3:eAEJFq3HNmurSV
TLSH
T16BE33946E725898EC46AD138F54B7F59CB71B2819B129FAF0ADE459A3F433C52D38380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zAutoUpdate.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zAutoUpdate.dll
Size 55KB
SHA256 88a8be939b2fc8dcd0e29eb0a9775acde720ebc8c04df926b82dca9283097606
MD5 67db722df3aef687da7d3ad18f794641
SHA1 be7c7dbcd9a1eb0a02e67f9014e4574accaf2cc3
SHA512 0e25192c134191597d8ae43d863e6fb9dc86fdc3595ec84bbce9de28393bf8ffac6dc5d76534a0ba81bbcec14d165c2d2b6f6bbbba68d9b9ff51c566c306137d
SSDEEP 768:hVjpJ8vG+LGxqcAqQa9sIvNZp2V0mp1lNba72KcPhYy08x/b2ERspYy08x/x2Ep:hdpJfaivNZp2V0L7ZcPhWCb0WCxr
TLSH
T1C9436C5BAA180C85DA27CD34F4E10D2BD9B7B5225710C2EF4325C5150FA23C2BBB9BB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zBusinessUIComponent.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zBusinessUIComponent.dll
Size 486KB
SHA256 79831c9a889aead55f402c1dd00f4a1511df488e5e31feec189de6d9007c880e
MD5 1d43fe8eceab7ca935d6f1ce1100b408
SHA1 e91c573ed67b08fd4064b0f7da638399b6fff472
SHA512 44bd279ee3660612f6622d32d9b5c2cf556fbb33d7ab9d280430360e61353ba59d615a7a0274bfc39f589d49ec1b3ddede1ada0bae04e4b83a344cb5a1992de2
SSDEEP 6144:vPu0B75CjIlCo3xyfWu8sHK02SL6gbIJ9N0hy5rU5/BntofTEgmP:H77UM8Eys02SLwHKYeBumP
TLSH
T1DEB41817EBA90865F962D13CC667CD1AE3F3B4180752D2CB1225E23E5F237C1A8797A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCCIMeeting.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCCIMeeting.dll
Size 751KB
SHA256 58b596eb84d8a020cd36dabd476f7025331da7057f2c4e9e02b5435fadc6d502
MD5 684b570b59090b15532584064aa83a6e
SHA1 3d18dc59932fbeb02071a5460a5a45522e22d512
SHA512 b0b2a41bc13a581947e8793eb6883e2e5290c149ec5ca84ea16b04e4a1e67754eff00eaac26c3a0a3b4a217c8aebed2d3c5f2d865011300224c3e51b78ac8630
SSDEEP 12288:XR1LBjmBLird5JGX0y6254Iq2sJK1CUA1bX:hZpmBLiB5JGX0y6m3q2sJK1E
TLSH
T1E4F43A1BAB690199C46BD13DCA478A66F3B2B411079297CB53A28B6F5F1F3E44F39310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCCIUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCCIUI.dll
Size 1.3MB
SHA256 12f4f29ef2ff8e450ecb668f9a76c23bc84326ef370b9679687e49be45835ddd
MD5 ce595e3877d3f762b28c47c3231b2e43
SHA1 447e280e132da4d683c6e7ce9a82bca460f71312
SHA512 feb1473f851f8f1232d5a493bcb0fa926bfc58b92d91bb3b17235abaf43afb8e38be2894b59df3867ece4e5702784df9e6480175f3eb12162dd05dac06f4ca2d
SSDEEP 24576:JOZR5STHBOTyMBdn0qKbPw8gDGVbNunaZ1ENtSGUGQRh8o9EJwOyLxw:JOZR5wBSZCRtgNtnUGQRh8o9EJwOyLi
TLSH
T13455180B57998235D4ABD07CC39F4D0BD9B2B012E36689BB1197DD094F237E2A7B9E01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCCIVideo.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCCIVideo.dll
Size 1.0MB
SHA256 d7b2e663cf40f6d82e4ac9928070bdd9a6fbda0ddb96019d322f0fcdf023790a
MD5 36ceb3d22b7f3ffef2482b4033e5cc20
SHA1 b1bc32f6fc6115649b8b12dda0c961dd0d405937
SHA512 e3f25e6ca7cdf850dfb74d5c5a5af31f919de12b2da1811e11a5d6cb0a7dad1404ffbf118c363b948cebbf6dd83e912a63293a9e0826fb7fcf9a20afeed3fb2d
SSDEEP 12288:HyjwjaSFiRnv3TPlFBzmFBGoRTMdJmUyT8Bbrl27UAoMUzv9EsS6XIa:Hyjwj7FiNf5FBzmFBtMdQ8BboUA+b4g
TLSH
T107356C1B6BAD0965E43AD13EC76B9D12E973B411130682DB72EEC83A4F733D0A939750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCalendarRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCalendarRes.dll
Size 3.8MB
SHA256 77525dcb8c866efb4bdc6f739f873033bf471b5ad705dafea0365f3936b6d7b8
MD5 7f9eb6ba83c96bed3ae041e87c22dcb6
SHA1 b51e6a56225b731ecea6c308bc1e7f0d56168238
SHA512 c991f1269457a982535b32298eafa07aa54a77c1b5f01d4b877d3d7108cc494da0fed0b18f0d623776e3904c1720a9d057ca8cc17611ed77a98af9156c4a0df7
SSDEEP 98304:A2QipxpoUdUayI5Ag5R0Nf9EAoauslB3PM2l5p0a1XOlH0BvbbcWd:A2zpLoonAKR0Nf9EE3fM2loa20pcWd
TLSH
T11C163348C3398807D913D0F775AB9674D5FCA3F11627B4CAA2084CA2A583ED17FBA6D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCalendarUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCalendarUI.dll
Size 896KB
SHA256 bbfb9b138b67fef3f5d283d69ccbdf371c4ce92fc6fdcaf0768989cbe9860a8e
MD5 c222fefb4c0b74fa0fc2064f1934ff00
SHA1 fbe27090461da2967fc5712c2f5a27f0ff5627e4
SHA512 3556f2d99991bbac680400d668d22266b740c4a71ac181f4f969d644231e0263217634d1759bf0034c8e8920b2fd932a53ae3183614ce41a48e89f91ca6ca489
SSDEEP 12288:Q/0iSWXt5+BGP4Ns3OJn2ZATreCVDic9ReknWKDWKG:Q8iSWXAGP4yeJ2ZATreCVDic9XFDW
TLSH
T1B1153B2F275801A1D46AD27DCBD78D43E1B3B41213658BEB4392EA1E6F373F05A39A11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zChatApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zChatApp.dll
Size 35KB
SHA256 876cb4c8b726108aecc563ab87295dd36d577f96d84508dfa0ed6199c78f9f7f
MD5 5643b67fb9f22ca989c790d338af2648
SHA1 f1eb2a1376152f4de453bdf35b3b8eeac490aba6
SHA512 7cef9354c35cff10619c706566c0893ae5580c9c98731336106ca338f045eff66cabaca1b2479ce458a0bb865b86333b7ca4dcf72a19e59a385bedc91f90fe71
SSDEEP 384:IXYtxdBihtqHl/ZuGiX9ZSf+pJy08QQ/x7giYzSJIVE8E9VF0NyEgfcZSf+pJy0Q:briyxAHXkYy08x/BN2EBYy08x/D3i2Eo
TLSH
T13BF26C56CA541C02CC278E72F5E58E3AA9B5B7865A60C2C72319C0514FD1782BBFD3BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zChatHuddleViewRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zChatHuddleViewRes.dll
Size 2.1MB
SHA256 46ba61a5b3fe54456d4e8b702ac37af11a1d238126bbd4d2f7801769482335ac
MD5 6f10e0ff6e305e407bda78043d10d6e4
SHA1 bdb8a839a536d6fee928d6677a1e1fe81c2beede
SHA512 f9cd53b6d26d6153ed7460a7352ce7df7b2d0711331a40184285f90f4bc113895911b3aeb1e6d3faaf09c39f48c4fcd91aa46268c201f155967e19dd49097e98
SSDEEP 49152:l2IqABA2LJQgCzbcB2OZ/1E6xyx9TeKWGIHXx/IS1:LAIQgCzbcB22xxKWflIC
TLSH
T18BA53391CED40C5EE8262CB9D5C9460A69347397D938E0D103AEA1101DE6FC79F3A7EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zChatUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zChatUI.dll
Size 9.5MB
SHA256 0256ce6efa10c07849192ddd707e1f11579e71a098adc766d1013fe2096a1eef
MD5 c94d1eb2f6b6c9ea000dc0fc0dd77f5a
SHA1 5f8909f934f22fc3e16d8064315e20f2e1d5a981
SHA512 9692a603e645c095a2b78265b76e69ce9f9a4eb33f0e0a3a65df7ac71af603749dd585d98ea9736411b02bb8d22816da17c2d317b2cf7b57542ed739cc41fd1d
SSDEEP 98304:1D4+UH44o8D70S+t5KMzpb1Lzdu6cMYwaUYIap6P:enH4YD70S+t5KMzp1Nu6cYaUP
TLSH
T13CA65B1B7BDA02B0D86EC07DC39B4947C6727815071D97EB0222CE1A9F773E19E79A21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCommonChat.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCommonChat.dll
Size 11.3MB
SHA256 7d9e733b1de75d8f89ee9f7b2b2f55d243baba4d3b83434299c8f68ba7ad3006
MD5 a1f738568ca03819a5e7343de946271a
SHA1 5fe25fa4443b50f3047047636a4ca8d9ee904355
SHA512 dd7b20ff5f80125287a2527eaa275b043cb7a8a15db92ab1a9e71b25d19f84378c12d5d8d36b2557c4d1551dc385aa6030e35191560a37fa1472b4172f50d457
SSDEEP 98304:hQHJ/lw4Dx0uXJGYBafXX6vK92sdwjzqSq/HpH7q/7PcPkS9Okme4nvsZz:Kp/D4YwfhfwfyHpHS7PcPX3xz
TLSH
T1FFC64A2BF7A6C374D566D2FDD69B0807D6727811171A87FB00668A1A4F733E04A3AB13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zContext.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zContext.dll
Size 51KB
SHA256 9a8f63c0d3b2cae82a3b20dceee4162d7df3b12cb3bac4efb99da7ee7de41cd4
MD5 9823aeda383e763a88d8815d2ea1547f
SHA1 61c39508b181e7e7ec1f308d62ce10ef375450fe
SHA512 f1d0d56df4c0d64c860d36afc89aba6f4941b46345d6994eec94d601c99000fbf6b17a276a43f023e1db5a4cf000e8fd7f078ae48204798d6367548f75fe6b63
SSDEEP 768:mjJEbGsUWs6edQdHKR5dMe9Yy08x/8T2EXYy08x/b2Er5:mebsWgd/HdMe9WC8TdWCb55
TLSH
T114338F87952C4846D9178A36F5E29937EA3676828B60C2C71315C1170FE2BC17BBE3F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zContinuityMedia.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zContinuityMedia.dll
Size 873KB
SHA256 5057395b9e8a50cd6dda25aea8fbee6764c348abc5d0453f76899d0f05ce82c4
MD5 ac19a644664ca5501ae82451e588dbaf
SHA1 3c67147d408f289926af709bd9020fc37354a0ec
SHA512 8803b71d2c25d8deb43a9318db1f53637355969ecf52cb19b8a302deeaa771406603c9b260657f981e80b2662148de818dc39aea4081b2d9ca6843fe091422ce
SSDEEP 12288:Z5fiErWvwv+CMb+WgpTHXxD6pCR0wVuJpdRygYJusjiz:Z5fimkwv+CMb+fTBDgXdf80z
TLSH
T1AE157C5B669C0095D46AD17DCA97854AF772B80603608BCB07A08BBE7F27BF01E7E315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCrashReport.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCrashReport.exe
Size 357KB
SHA256 37c56cfccd4d2fc17ea4f07ef92b521efd2ee6b08f84405e127ef11a9a5247bc
MD5 43a783c42f83affffe4cd569fa61e0d3
SHA1 38edcc8456215fa5241568b9728ee67ac1ccf59e
SHA512 881e06cfba6807540e1278a1eb55faa0b7d18b80a4641e6b40dd43751769a9900cca41e33e7319ad1b932a5dc868fd4be04b777f1df820136754c5da752634b5
SSDEEP 6144:yb6Uw+MXwBnwg0rqtMoX10z6YpoJC3QDvI90ly9NDzPBQ:yO8wg0utMoX10mYpotvIelC/PBQ
TLSH
T10A748C31B2C19473F9B205329574CA315A7ABC308F71E9CB3355666DCA78BC19A30BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCrashReport64.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCrashReport64.dll
Size 254KB
SHA256 5339fe6517d602bba2bd33f68081de7c9e5117ca87f50ed186d905c5b177daa2
MD5 9280571b0bbe88128cc05b501dca598b
SHA1 8fd3f0b42a238d1ea65e0f24507c3ba424322902
SHA512 801070101985529f50844c0e141b87eb471bc622118d3bdf5cb31488ac196b69ce135fdaebd67fa6e6159220e95e7d747c455b31a4fa35a6bdb182a660ac4a8f
SSDEEP 3072:6lA4Qbgt1jo6KhLOS5TLmeGqMJ+n7Y4+NJoRMZ/eVswpFvKzUOiuT/c1+orBT8Wv:6CXy1jo6WO+ffB+Po2kmZd4riI9
TLSH
T1CE447D1573E80C7AEDB79279C9A38A06D6B27C010774C7DF0324835A4F3B791A93AB65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCrashReport64.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCrashReport64.exe
Size 255KB
SHA256 f20b2862e034bd98b72258ac7c3e362bff398c912358147befcb3c8a02f6237c
MD5 e86ddcb638c347daecd380859432c96c
SHA1 bee8540b67ea6ab4214de445fe64b8bd618d0a82
SHA512 c180599599ccab5a290d0348a12cacf48b41b95c98c4f1c2d499bce9d7163900adc91997dc8cee56619d294531eebaffa173e44d39ea031641826754c7402f8f
SSDEEP 3072:vw4HTPdk4hWGugZ2tM2ByH81r5JGsYCmcuugXk87QBEOFbWCW3WCVP:oqPCRG52BS81fnmjugXk87QBE283LP
TLSH
T158443B6172DC1097E6A29132D2728E27E7B2BC558B71D2CF1150A37E0F3BE82AD74356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zCustomizeMeetingUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zCustomizeMeetingUI.dll
Size 180KB
SHA256 04fa1c97ff5afa8ec1720e2defe988f8b9cc8974c755f6c383728859690ee653
MD5 16203587a4fea04eec12abf07d041659
SHA1 0aa8866b4f5a19661b4f6f69955ecfc0b9c99efb
SHA512 e4a786dfa3575dd49ea78155907b0a6fa37e34eb44cb05bd70403ca910354ecb5b31e797fc49ecf5f34ffa34a67cc46730aa423340af8e82978ceab80de2747f
SSDEEP 3072:efUUt8MDZWvDjU7g1B0CSvn3YFAkT0KrbmVzcDarFfU5oLWCXWCX/:xUt8wOjb1/SvIFAMy1TfxFB
TLSH
T1CD04F71762A95496C426E079CD978F0BE7BBF4211716A3CF026CC27E8F633816E3D265
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zData.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zData.dll
Size 3.4MB
SHA256 30ceed7b8a7d69e4cc84b100b8e7d8408aa3b4537c74a2c5aee0ca9f422416d4
MD5 95843eaa7982d42222ab6dfce8e5fc66
SHA1 393dfc19ad4085088a085cfb1a2a2706f3cdddd4
SHA512 c46f8863e04b1bfa5b106d873bb9d9a0b1d00a733bffa616196c1edbc71adb77bb9a50935d4237a3ca33a9f271c1d4796c0218acb34a034d9cff3a53f69ff166
SSDEEP 49152:/xGIN36Y9TY2OEFXa7QxpWwytlpJYkVg18VCVyx3eYdUfNcF8dHNYcAVp:tA2CdwytlL5gD2QNG8dHNYcG
TLSH
T1CCF55C4F63B80279D0B7E179C7AF5A07DA727442973586EF0261CE6A0F237E05A39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zDiagnostic.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zDiagnostic.dll
Size 2.3MB
SHA256 c2378fd46bc39074f3593595a91f14d289fd8988f4ffaa207dccbee6a00d6ddb
MD5 5ddbcc7be4f5c4dfad6eb35d8ac992ac
SHA1 28008cc557fabd37e1950ad6245e41ee405f5f01
SHA512 c1912f82e3977fcd03a9765312dd0e213d84f7124f5af54d2afde51aac2e86e13a6a92e5f45dc0b1cee921eb4aa1923cbc132d150680b4d794c88d63ccd8979d
SSDEEP 49152:N4bDMp6wNfA9ZGjCiKoh/P1uCaMliT/M+aaBBf:N4UpJf28jpn3vbaBZ
TLSH
T165B5F12BA35407A9D45BD0BCD78BCE07E2727401036687DB0396DA1B4F677E07ABAB50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zEventTracker.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zEventTracker.dll
Size 220KB
SHA256 518a93df4fd4b059a936fe7f2a73e5eb2c5c9240d294996b2e62313751f35ddc
MD5 e8cd759ce09af32466bd14a178d6c62b
SHA1 b99dec105d4fa23feb28e5ad2799fcc2e2ea864f
SHA512 5602b4fdacb1f8b402d884c799f44d273aba5e2ef5511c9fa2514f39362a4b26c9a50132e9e916ccd2e19828946723b0227d57fb62d1bed737c8512fe5a7e2e6
SSDEEP 6144:yEBr2xGnv68mu5ge6HVujoqSWRC7eIP5iMVhP/9nu7d:rBr2xGnv68mAjoqSW07eIP51u7d
TLSH
T12C24290762A902ADE95BE2B8A3DBD901F67739131394C9DF039080761F9B361BF6D361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zHuddlesApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zHuddlesApp.dll
Size 365KB
SHA256 ee9ab5dceb70c6dff4311589f214c59a7761083bae25dbfb34c607f72403ef2f
MD5 ddb99fb8f1aa08634ccb18e0e499d283
SHA1 3512e9acef487cf6e1279907f65281729a789cb8
SHA512 0705de8d5cab4459ddb9bc794f4f5e9da0a68feb45b4c8feb000f7ce178f7b215589a03b4d5332212d27363f5a7ebb3cd665cb0361c5201ba88853fab484b55a
SSDEEP 6144:kEviHmSZUs/9ByiBGgGCkP6Takk9V/u1fsfBf7YSpBRKXNVCrNruBbY0B:JviH3FBzGgDkP6TbcYSbRKXSUtR
TLSH
T1E384292FA3944AB4E026E17CD7DBDD42E577B44683E48AEB0366CD562F327A1BD34210
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zHybridSDK.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zHybridSDK.dll
Size 353KB
SHA256 cc6d0cdd711923ac81b934744cbf55a8105a01f2cb88dec677746265d54219cb
MD5 7193500434aa6865484e5add97fa84b3
SHA1 81217622bada1a247b32a08af94a269df3076070
SHA512 ec6747a75fa033b0f1aeccd92ccbd1a73063226dd0a6b731a9fe96fcf44451288954a85edee7f91d4eed6638a67c80960b7844bf2700a96eab922749945ce78a
SSDEEP 6144:utp6JdCWGK5R6fuS1GeHt/UqWar0DrTRDFTlwF:utp6JrGKb62S1GeHt/UxNwF
TLSH
T1C3745C6BF35808E9E16BD17CCA478A06E6B278014391D7CB07A152AA7F337E46E3D351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zHybridSDKHost.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zHybridSDKHost.dll
Size 207KB
SHA256 69d3248b5b0aeba8a290967c67de1a14abd0bf79c2ca7807fe8cb70c34b7d734
MD5 894ffa8200cb564e8c5c7dce83cf9403
SHA1 b907dd5c69c18932f4d2ddd907845a2c43b8deae
SHA512 bfdf6dc7b5366677496d1d7556ffc08c462adb0ee437bf76c26917058d6910d93adbd53788e08e1b521931cf4d4bf6c61b31924b65a1034793dbde10aa7fab71
SSDEEP 3072:PYS54UxiS7hHzusociHrvC6q0+grX5f7zWCqWCU:PN5XPoBbCwJf7zsi
TLSH
T14724D41B261804EAC416D17E9A9F4D81F3FEF416471287EB1356A2FD8F533C2AD792A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zKBCrypto.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zKBCrypto.dll
Size 3.2MB
SHA256 63db399e15daaf2e9e9b62634d6363541281344804b8d84baacd07a91848793f
MD5 782e40bdaeab086b664e4bba21d8abea
SHA1 76f6113445bd2c78f4a136f415388e8284df9011
SHA512 b05cdf5d1a431439742cc233aa13078ae95c463945709d6c9156a1f091b406cf41ba47d6a0f6120de99612b81c5ea934c484adc67ee034a765f04159c69e6707
SSDEEP 49152:9Tj8FrXVboHEhyVq6K/NLdyS9ZadOssp8tVSO0Nq0EG5K7JENNY3tTVngVG35n5:C1NLJfA4udTVngVG3f
TLSH
T104F56B4B6A68009DC1BBD27CD6079A47E772704A8332E7DF079146A62F537E1AEBD310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zLooper.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zLooper.dll
Size 67KB
SHA256 0d4e5fee6a4b088af87f82e86b8b3a661a32d52ac975242841571cd701cb3d9c
MD5 06a846ce6370e5281a3edcf90be095ce
SHA1 fdd336f3ce71a89392eff7de2ab3393fc7e26050
SHA512 1a93983737b9e47787f3f08773d504f57f7ab78d7e440e1d5c48245d27bda020bea6b0a7bba6546ac595d20197fe103512be0bd1f4707a5ebeaacda50dca309f
SSDEEP 1536:/BvFq4UcXjKTVrbfm7ew6njHFaSWCvDpWC16:hg4UcXuTVrbfSewgjlaSWCtWCA
TLSH
T101636B5BA7980880D5769638B5D34E1AEB71B8414750C3CF1356C29E4FB3BC1AABA3E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zMailRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zMailRes.dll
Size 5.2MB
SHA256 f588a62b8998dd9647effc54faad1e478c036a8b3e8a202722e629e6ece6e600
MD5 2fd2933998f208ac66bbc2ba9e7b9c79
SHA1 d0a2fc554b9b2b79065dcda2a312e43b84dde44e
SHA512 8031c034e36cc8388cb29d4da0303892971e8735d39e389fd31880924a5601839792c747151c7ce8642a5a5746deb516d838b323bd69c2f65c25d7764a931588
SSDEEP 98304:Rlwjp0g2AlZfnDVC/A1HbSwfCCb4uq5HFTs1prDOtO3lN49NrXG3Y/KOtUUvluzY:ROVlVDVu2H16Cb4TxB+HOtOVITGI35v5
TLSH
T15E4633E1D9F1C01BC90FD438B8938F6AC06DABD433A47791652C349A9C262C87F5F669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zMailUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zMailUI.dll
Size 1.1MB
SHA256 fcd090096f1daea15fc0f1884820c420d7eb88c3cc475b63fe7ca2a09048bd5e
MD5 3fdf682ee7523ad3e94e5d6ca7629f9c
SHA1 b7bb9367be8d6aebd19091435666c9fc7ae56a8b
SHA512 f90efa466a5f0062b925795430e61916c0b7d2e4babdac6399a49bdccba76c0b28c41193ca735afc37ba10e06c9a95143dc88eb84bd3bd8235996c2b4ca79e41
SSDEEP 24576:Wk+pJTzOOOy4dxMBKuc9J0QRoOOKO+iz8Vl2DK3Lbf+fCqP:AdzOOOVdxMEuOJ0QRoO5a7K3LynP
TLSH
T1FF35161F671403A4E82BD1BED7D34D52F5F2B405433A8EE7026399964F233E04A7AB66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zMeshNetAgent.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zMeshNetAgent.dll
Size 493KB
SHA256 e94cbeb013b0e2a25b101eb14c3d3eb02e9a18f523ac7a473a63676f9c4d12a3
MD5 190da5f6abf5ef3d8effb4e1f411b4bd
SHA1 5f00f5622561117eaa1c58801c5a79a5e5d2d97b
SHA512 a54702cacce978e760b8241a166b27562af59f73d3479fdc5e71e73aa2b46ad38c512c1458f667f33fdb5b43566d0a2f76c4b3aa869fec1a8aa0169a53d03c49
SSDEEP 6144:8Yt78PZNJvWkISNOgAgjq9kMdPvLBRvcNTlTDxeRXawgiWZGhEXsRxlaaXpOdnY7:8AjDSNjAMMRVRjwqO2P0q7
TLSH
T1B4B44C1B674805A9E12BE07C9B5B9D07E6B334060351DAEF8361DD7A1F63AE07E7DA00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zMsgApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zMsgApp.dll
Size 344KB
SHA256 6c94c7e37e04343abb9f56dd51a657833cc67a530f9676379bd84838751135d7
MD5 9ddc52e65dc1d0021b966434dcf165ca
SHA1 f78b5f958b3cab338191fe537895eaee9f3ed82f
SHA512 bf4f6b192ad7b67173ce2f8875c6fc46092e5fda3881c936a981f89f760a72e9175318506a0159560eceae228205cd8d6c0b4e089566b4bdcf32d1de985cc587
SSDEEP 6144:BnlQNRnf48IjxvcYRULK2+hLfz3BEyh0ysEepq93aXJ:BnlQNRf48IjtcYRk+hH3ELTqQXJ
TLSH
T1EC74F76BAA180452E021D43CD7A7EE0BF3B7F8216311C2DB1770831E6F9B3D5AA75A54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zMsgAppCommon.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zMsgAppCommon.dll
Size 10.0MB
SHA256 acfb7dfaf7f540ee2c4e91621e5cd54c160c32dc66257582bc0c463f71682df8
MD5 b0e6ddb9e6c310ed4de451fdcc303403
SHA1 fb7269bfe933d24cacb3982770f0351e9c907326
SHA512 574a3230324b10e9e5f44f28127c2221421e3033e32deb3c4976c789cc56be7089f35bb561a857c0ea559e2802b3742b5e0a9d4b234e3260ba850fbd1e876f22
SSDEEP 98304:2XgpQMOEoKsQWsL65d7+Qk8VVu8hQ3ShjS:2XgpQvE2w65d3u3Sc
TLSH
T137B65A0B679903B8D56BD0BCD70F5E07E6B174058312A6FB01668E6A2F333B19B79B50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zNet.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zNet.dll
Size 2.3MB
SHA256 686a21f98fbe83dcb7fa9019ba47b065ebf9fa7f8b0f455bf76f81030dcb5a6b
MD5 2327be92951a0ba3e887c3607b60810c
SHA1 8a488fe1f14f728b95bf79b9a366d2615c92cbc3
SHA512 44951f5f2ba230d2531e8becb07e1424f16cd7becb71bdfef42daf0155624c69c22478387f7ebdd103ec6d2ce11f9e7e7b9ab9c9260ac0783cfd2b85af8eba2f
SSDEEP 49152:/LJc9XJSRrvvDDSvsaNuxqpUWjJczibRAY0qiA4/jgFBNVE4SVSgVG3K:+JCT97Nv5nVSgVG3K
TLSH
T135B57C07275841A9C1ABD27CCB4B5A43E27574020321A7FF12A58A6A1F773E19FFDB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zNetDiagnostic.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zNetDiagnostic.dll
Size 234KB
SHA256 f24654571405ccf322db3573b7a3c77cdca43b0028fa2891810291211c8af6e0
MD5 185d0a86bdcadafd0b2220c04e3c16e4
SHA1 26e7358caa3fabf98372772771a252043ab7cdb1
SHA512 bc689f95c7dd870879cd8aaa683b48c8c003c3fbc4ada47413c7749ac61d9da88e7bbd2b7fe114da00b9b502bc1ab7ab631744f06cc3807e3c23d2d9ed76cd91
SSDEEP 6144:EeuykVRCWDZSNYowd3Kpzlnz1Tzj7qTRP3wOulG1S0:EZNXCO4NM5S0
TLSH
T1E0346C5B366C04A6C9ABD27C86878943F6B3B40203A1DBCF03A683761F077D56E7D661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zNetUtils.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zNetUtils.dll
Size 623KB
SHA256 8e0ff7a2131c1ee6df71e1d67e34de842d5840b9e8102628fe244da1d83e6eb8
MD5 13c0db77b4370b366c41ea9173b25d4e
SHA1 af504c5ec431cae13b42df01ff563174d3605df3
SHA512 f051818fde3b85cba9387069c842d53619db6f8b0c613a354ce9c9814b15a7ad9ebd265dfb7a63895a8b51da55609b6ab011497ca5354737c065b2fb787201d5
SSDEEP 12288:2gaFtMfULJYM/5fFSvNLJvH/GPDWMmMKtzKBMLK:LaFtMfUtYM/5f0vNLJvH/UDWLMKZKd
TLSH
T167D48D9BA7A41AA5D16BD17CC5878627E3B3B4011351C3DB03B1CBAA2F13BD16B3A750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zOutlookIMUtil.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zOutlookIMUtil.dll
Size 482KB
SHA256 a954ff13ac6d398deb81b296773691a976f859b1c7225bddfeca6a69e519b867
MD5 d3f9e93318508dbe5441104bc76e3797
SHA1 ab37ec68866a347376acbb321dc3c75769665ea1
SHA512 1b76537f9e2ef7ca03b154584b5f76d28db205799b70553e95d15d7822da6fef722d7b7856eb9bbdfb5850e7c02eac4d5b6adcbd1cab5e11b783c67f5d5a2887
SSDEEP 6144:tinn91oDW866eqQU+E3JV4Lb0pil69RHo+0BJmtrQE8NOpWCrWoq09FTFBAXyDkP:tinaeqj+SgirC7YXccs
TLSH
T142B4C682B7448AA3C44E0232995BA6962F71B0867F53A7433388932D5E733C17F677D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zPSApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPSApp.dll
Size 914KB
SHA256 7af7490ab80d4be1bd647254378d1a7b3b47813209556b36ecf27b121ab534fb
MD5 617776d1f1ab0eb2b3a17d2d3ba2ce4c
SHA1 da22475748fbb555718c9403b6ac8584d3e8eb61
SHA512 1d3c7296be2e5f19aae51229b34380498ec88f2f97133ceb726b7944ed4bf7637a7d2361893fbf7f96e9039536cd0320d327ade19d4f65ab1c9e7637df43e3ef
SSDEEP 12288:pGrMgHoZpwBm3wfg+ff61PdSHEjzmnP7LaXJkWh:pGwgIZpwB8+K1PdPjzePiZ
TLSH
T107155B1B6B9C0199C07EE03A89178D6AE7B2F8610751EBCB12B5436E6F673E81D7D310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zPSUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPSUI.dll
Size 891KB
SHA256 09237e79eed8ccbfe874bd671706607ea8e218384347048be04d646916c47df6
MD5 7b256454f84f19508493709cc8adb3fc
SHA1 f787e52395fe7305501b3b757bb92a9eda44e0ee
SHA512 1db870c8e7da0293d5066b084d7d038a3d68dd4b4911f3e589baf37774b36fe63c2b4bb085f47baa61f70e213993945ec8384499deda90b219c99e35ce53c5f6
SSDEEP 12288:FnrIQOKaWoa2ltVRQ0XjNg2CGOG5q1aV3T4QET588/d:FnrIQOKma2ltVRVXBg2CGL8aKQET580
TLSH
T1DC155C1B6BE90160E86AD13DCAE78D06E272BC12174697CB4274F91F7F233F19879660
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zPTApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPTApp.dll
Size 8.1MB
SHA256 ee706fa8293f33d78454830109f6179ca567064bfe37ee48b1d3823c7791b831
MD5 0515af57c149fe79a647490fe0218c81
SHA1 259ff1d6d87091aec1f16f1c723feb6334990cc1
SHA512 52d3e134502a7cff0e466753bb9f57658d2ccf2a22d1034d60b5f311e6bbde6d06ef5f2c47b67340c65f495c6fcd24c54568fd3e0dad957ef4f5c018e886cd7f
SSDEEP 49152:dAVheYnPYOdeuGsye2hQUA+U+vUA488PPO91uxW+24Y7g27+rauoSSEUr3Z4W1H2:dcQfhSO9kdAMNjTo++cniJcuI
TLSH
T190866C0F679841B9C176D2BCE65B5F43E2767066531282EB02720EAA1F777F08E7DA10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zPTKBCrypto.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPTKBCrypto.dll
Size 8.0MB
SHA256 a3e6c07e88b67745bac86d1b5a9487aeea39639c0a46608de6de2ea80d92bd3e
MD5 470e6685a71355ec8e566606a5881685
SHA1 263ab2a4c852966349e9a3737708a1e1d3081b8b
SHA512 6c6f0ccfde4b3542bd140a6886d7a06ced60f92ac837c1e8516db6e9c680b9cb32224a1994d2b73df270721561e691a4b8c4c6375c51c591c18d2d81f3470e01
SSDEEP 49152:tKiZeahNNEWOzzBA/LkCCV4kPcL3PC7FnLklrmmTtk4jLtE01PdFZFafNci+KSlN:O54kPcjax44m+52mARdgiZu7gVG3jVW1
TLSH
T164866A4BA6A80099D5BBD3BCC6079A07EB72744A0330E7DF069146962F537F19E7E321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zPhoneRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPhoneRes.dll
Size 3.0MB
SHA256 07e517c34f8d6b41db42c257a9e20b18ad114486bef94f3e8e4d521d47cbaedd
MD5 11ca48bacb8ca65ef80de2c3fe55254e
SHA1 8ab9a78bc4efbbc96bb5051066c0e1e95c2a805e
SHA512 022aa27fac5eb811a075e3147e001544befc24c2a2c67e22029d4f512dbd30294351c31861883b65c40c86a8572d0671a37dcc4c0ab0811c41e5e17c48163472
SSDEEP 24576:DtYWWUJ0tzQdEmCwukdYyppte8d7030ZfJVDIjKahHU0cS87OSnuY1H:6UJ0tpmCtypps8hdBp0cL5us
TLSH
T17EE59FF0E3E4AD65C51B4331EB2ADD44E21A70FBA7880789F25D3567FBB34924C46898
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zPhoneUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPhoneUI.dll
Size 7.2MB
SHA256 4b2e4dbdcccfad6b9452a861be08ac87ac690e889d1c155a2872686b62a3ae98
MD5 2fc6ae33ff83e2d40813b7a80d886e0a
SHA1 0d32492f1abc0aefa154cab11bbeb45680019f30
SHA512 556a8b59dc5ef9f3cd91d2d0ce592c964e25d6d7bf0cca53c15c5a6298143affce750e8730e97ad82da933b9858444014d3725385bd8b31b8ff97b103ae4b083
SSDEEP 49152:LAj+FsmDnzvRJhdYfkkNv4/VcP7hJcQi+byxCtM19gsD9jUZZmcNBBDk44W+wP57:pNnt6mo7CzwwcFkI59JDu8QQZ
TLSH
T1AA7639577BA80265C0E2D13BCA1B493BDA727861476193CB0171CA3E5F773E1AEF9620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zPreMeetingApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zPreMeetingApp.dll
Size 3.4MB
SHA256 1d0d9761cf3340b59e614d91e5b57e5a6475378fc79d93a238bf4c853d697487
MD5 8ceff2333dfe6adccdada90660f75266
SHA1 7268e022d1be27e2605dda1d3bd1664cc885075b
SHA512 41d9b2fad56b3304aa69964aac49847c7113e91440de8154e21537f7f9b142604d2a795810d8c1f735bf2fdeb15f4cdcc5d03df1eb2483e36e17aca39b059ec9
SSDEEP 49152:OF33XSNNNNNNN3SFlvQyNeR3EWTZ3+DShXsycelnlQMLzHoza3pZH1iw/6bp04QV:iUuMLWbp04Qdcj6T3ub0dfvXhxN
TLSH
T152F5396F679802B0D566C13CC7CF4D43D27674025326DAFB02669E2A5F733A29EB9B10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSipCallApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSipCallApp.dll
Size 1.2MB
SHA256 5a1cc2f94d06bdcb54d0253f26669ad930d5a3107609e24664224d33a5ad58d7
MD5 f6f80f172dedf0fcbf70b2ed636aefbc
SHA1 715ef2feb57474414e8a901570042823d7bb55fb
SHA512 17aa6cce58e316bac88d51b21ed2407b8b7acd7d03619e240aa98608cb80e240d7b7c2a2790e1e9c9be7c111283fb3236cc7eea12cf1e14387056031ce958544
SSDEEP 24576:L+2YSjMk1Tw/xZhJ6FpQnG8ZE6l91bbUjM74H4/JJ1V9P:VYSIkexnEFp2ZE6l91UjM74knV9
TLSH
T14255391AAB58014AC8AEE2BCC2479E07E772B440D35783DF46D61AA51F637D07BBE710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSipCallCommon.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSipCallCommon.dll
Size 6.9MB
SHA256 55871e154eaa092bc353c80f8db3dda45bcf652caaa1aef147c2ff57dd254310
MD5 317f808f1b23d0c405744f51c7fc0dc4
SHA1 7ff04e2e1031a9fbabe052bb7f9d2435e376a04a
SHA512 f839292a46cdd62e87f523fb8a3d68299ee25d81b733593604a725323a947057668279d23e5bcc7e71469bee6711e05827e7628c2d794702cd6e84e3b1c42ffa
SSDEEP 49152:1rsrZlGOCPNIvc7OZyCt56O7D2pDN9SGa1w5/EkcZZZIiandrJlomM0gj2N4Avy7:wTcNmPKJzWxuxz4TT
TLSH
T1C4766B1F63880169C06BE17CC78B5D47E6727411D726A6EB01AA4FB61F633E09BBDE10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSipCallCommonBase.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSipCallCommonBase.dll
Size 1.2MB
SHA256 f8c5dd03f37623a8365386691f8f5ecca4c12643c9c54d4f1b152a2fbc7b3c15
MD5 ecc6843c538ab615f080bc53ef580f37
SHA1 9f0b1dc44dd888c6917355e6df14815cf7d7c9cd
SHA512 ab3de1a42e853a14d84885b9e5cbc0438eed0d8882432a5265ff4e710a1a299238c95ac1aee44432cefd2647423de4c7adcd1130a8fab11421756d93c92e0d7a
SSDEEP 24576:SOJRY7Tk50t50CBPSZzyBJurwDL6nDaC245xPD7YV6:SOQ7T4xCoZzkdvUaT45xPD7YV6
TLSH
T1FD456C1EE758011AC4AAE2BCC6479E02E732F4409353DBDF45D51AAA2F677D07ABE310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSipSdk.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSipSdk.dll
Size 10.9MB
SHA256 6bfff02077635ed5bee674a1196d9241c54bffbe1003e649df39d532ccb1b33b
MD5 bdbd9816d0ed521eec625960a03fd879
SHA1 8bf2e6d9eea640816b824d64deee1792b8c1a30d
SHA512 7d256ad2a53e3e23b58dcbf611a7c7b64dd45b07c054b2502ca058c583829b7ccb3cdb7e68dbe0bb14b2db208d84584b56e43608aa5ebc973f2895553555bbc3
SSDEEP 196608:ROMSbP5cZy/N0KWkG+PtBYY9T+xXVgVG34mo:XSbVPWl+PTT+xXVgVG3bo
TLSH
T1B0B66B4F27654059D0BBD2BCDB0B9E43E67570464335AAEB069249631F23BF09EBAF10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSipcallRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSipcallRes.dll
Size 372KB
SHA256 ce3b5d185754a5b0a045846a6e2d781eb14326c21e2d648b4a62031d2068322d
MD5 2b5a2c90b893372f71232e2701f6962f
SHA1 52b7fadf6255914eaf75464783a8fc0b2abbed96
SHA512 1fc45e103c0179da8dff98813ca367a60c21ac02ef68aa3e00c5feab66227df383b598b46fdad27609e07fc8376374398e50f690f35b38b3ba7a7bf7473e3abc
SSDEEP 3072:6ejl4QF/d9iaxE6B/QuVOaatwj/6Vb/FOCfkc4nLI4nLU4nL04nLT4nLKIAd9DWy:6Oxd9iaxE6PmFiIAdS6bNB
TLSH
T1C0844CA1E3986D58D11B8336EF1EDD44D229B4F7A248478AF25C312BFB724836C159F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSipcallUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSipcallUI.dll
Size 1.8MB
SHA256 80c2dfba290e583ca8d4a28f9c045a371e10a6dea82f39ff3628bd109916e1b0
MD5 1d3e386e08b1369597d269a5474137a3
SHA1 7785f90206126d36d9ee8c8c2c44cd2d6b5dc2d2
SHA512 d85a524c9e6eddc2f3e51abc6aa2ae922bd3f79dbb3c9ded3890e6efd3aea6c174ae1ec97734b2f3b31175f2ece83a8409b23103c96c48412e01c878b9061c31
SSDEEP 24576:JLLiPniKB3VUnqDS0yNaDv8PjFC2r6XYw22wL0qON1uRrr:BiPiKB3VUqlIPruXKtP
TLSH
T1AF955A07A7588161D86AD17DC91B8C0ED672B810079163CFFC62BA5E5FB3FE04E796A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSpaceRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSpaceRes.dll
Size 307KB
SHA256 ce378f7963969d1d75c85d644603ab4c017a775726f66f6a54e7cee0058c7e57
MD5 0bbcc46a0fb2c9dad660bab92a82b36c
SHA1 64f0dc82cc9d8e1c740cf2f4994d610138f00028
SHA512 6f2bfc94ab9cea090f55a7a00349d965b1e3e920ad5f7405541c54ece98c216fe245f0b45b9a0595ff648fc39eeb8b500c0060d1d11b7b8f16699e07d080fd3b
SSDEEP 6144:bmOFErYhP5EhNvHKhEL22m49asCzJLAUnITO2cSFjoh:7ErYhP+FGO24asCxAUbpSs
TLSH
T1CA641287C96A0C03CE179EB176EACA276D73B39A06C1D7EF2125C0458B5279067FD274
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSpaceUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSpaceUI.dll
Size 139KB
SHA256 0543e18259727d6982ed686519eeb822db1b49fc11c9c4204c5087792d946a8c
MD5 53f224994d97868e6afdb150926686f7
SHA1 00f0995ee8157f8029ee93e3c259ff9eb0966a64
SHA512 7fb5eebfc60556237393186e406267e6bfd7222b76f4bea6dbc6c248e5279eff0611530741fa20ea0427e689850f7fb05acda332865a7f193a03cadf99351165
SSDEEP 1536:56JWLjitK+Ca3TpWJOjt/hi+GhWSyNouF6+NaA5XUI4mpxXKSsbA2v7YWCVZWCJW:KtKte35i+qWHXFNZVdKSw7YWCHWCc
TLSH
T1A4E329167E6904A6D816C63EEA6B0D15FB76F1115B5383CF23A6C14D8F933C18D3AAE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zSpacesUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zSpacesUI.dll
Size 149KB
SHA256 5ee737d5787e9bfe54e39c3d9289836a391ac44f9894637b14d09ee5b56d05be
MD5 ef3abcc6a361217adbe706a09966b438
SHA1 5259db2111c5eb0a2f2a222cefd2ef6899dd11e5
SHA512 502375561cbd638f634ca3e29e0aa23892fcae2a02ad61c667463493313e6edb8e2e4b0f681832a24825c1e1da6122d679342f0cd33fc9ac5011455316265c94
SSDEEP 3072:ZJUq26eJX3++a8KYXPis49tAzF0WCCsVWC0u:L2dwEKhs49tAp0xVr
TLSH
T122E3295B7BA50465E812C67EEAAB4C15EB75F5110B1387DF12AAC20E8FD37C08C75AE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zTelemetryBiz.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zTelemetryBiz.dll
Size 131KB
SHA256 d3c8a6b51a0973ab4afd822de62ff35838ef3dac9de48a0c533aa139b34bac61
MD5 6e68b7d030731689cc4f84ac46322481
SHA1 fea452be72f05865d6bfdf534878332377faeafa
SHA512 c70e52fbdc47c864eb99ced819d7ecd4a25eb59b7239b13404364fcb08281a8df929699598e3f8fadbea5a3275250e5a10d459a7448a1225bd858db22fd99bae
SSDEEP 3072:OCJLtiQj4uWlsMlF6PG/FzTsxJHMR9Z3giWA1FCpHyYWCVH8YWCE:OCFZnf/+RoQ1FCpH7nHX6
TLSH
T157D3284B73EC0469D56AA4BCA297DD0ADB3674125710E3CF1326828F1FAF3A17D6C261
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zToolSuiteIPCHost.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zToolSuiteIPCHost.dll
Size 1.8MB
SHA256 e5ae9e492ebab7d62d77803ebe852767698a8be53050f72ca4ab54085d8b1fab
MD5 ed8027a221dfbbf4ba9ffa236b830f83
SHA1 02682d755b60fb35a65adb998923ee1bd825291a
SHA512 a48885def9334dd9cd521f153770e2596abc3d9c3846c3db8e039ded3c835f8397eed7d952c9e4f6a6c90caf26e6e120bf3426b3b993a7c09fdf47445a68c42b
SSDEEP 12288:AqqLkoHtHGYyRRptraF0FnBI3HmwijOaONOLod+bZp9D17LDzK30H:JqLRNeRtuF0FnBI3HxijcYZL17wS
TLSH
T18295938B4A8C1654F8B650FC9C33A601B9A5BAF0D3174BC71350FAD40E19BD4BABA75C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zTscoder.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zTscoder.exe
Size 435KB
SHA256 4fd71e5f9e5cd90118cae4d7fc9c6b1dd141f229196dcda6d7ee210da97c5107
MD5 bc058375419c6a983db2998269a72a57
SHA1 579b95e807660a9c4b47760ba656fc1b13176e73
SHA512 50234913f9e8520dc946247f9bdd609f7086adb6f95cacde7ffaca6f440126afa4124d0568d7780ad1abf946ad2ef549031257162dbd0c1318b96f2f932cfaa3
SSDEEP 6144:2Fch8BhxgMQ3roPRDxIX36WwRmrJRaR9bYLw5HuG:VOBhE3+RDjeRiN1uG
TLSH
T1A69439D663544DACCEA392B2E971BF11CA777ED8075087AB0260B36E0E779AD6C34D01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zUIClient.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zUIClient.dll
Size 1.3MB
SHA256 a913cb4ea8198a946e3a169643f72fc847a85732e57dfaf13cb6140065b09a6d
MD5 287aa13571c1b1a98d278137cefb6703
SHA1 480724ef70aaff50392a93bae17593ccfcc98bc9
SHA512 8f58bb14602b2ff1c2b717a770fa3a89dc6cbf02ba947880a02d5124b38c1062735f8ac41ca31050986ad7f440b78ec25212597cb49568aa3230cddda34dc0fb
SSDEEP 24576:MSFr6AI2QOCrW1/pjkHdj6h3VOeyaIHkleqCL2k+gAztcHkj1cf/2LuAnXaoV2Of:MSp62Cr+u6hFzCLqzKEju+uuXnoOpJ
TLSH
T185553A1F634440AAD1ABD278D74B494BE77AB0410332A7FF1242A5691F5B7E2BFF9201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zUIRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zUIRes.dll
Size 113KB
SHA256 f081d2afbb6074b34121bfc9006135a45f2f6df501c7909ebb873d58198f6196
MD5 d0119bc28a5c50772ad0e36caf6bb596
SHA1 598a5140059d2e0451aad7ab149a4d3817f3af08
SHA512 bd625e5424ae8080d5fc7c09cced99b5d2bd080a79fc37e4caae872e4248c137d264ec94ac086e6b904bb88dbfc0812ac8a6d3162d07c2e2094fb3bb0cef4462
SSDEEP 3072:fC6VFktie91Vr8PeOfZ9rePUF87GnDACEWCOWCB:ZFktTr8PeqzePUF84A38H
TLSH
T187B38D0F16842835D9238075E99A6927E3B5B45DF37183EF13184A162F623A2BF3DF25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zUnifyWebView.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zUnifyWebView.dll
Size 931KB
SHA256 68bfe753572f18fd751bc878502c4665197415db4d68f9212183ec3237091b2a
MD5 0b0ed328aa13f73016d9121b210a7e83
SHA1 859b51bbc48d89d3006a55282830e752633dff59
SHA512 78e47286f4bc10b1ecfcf430d1a60ccd5673ab24b75e6e20b3d5f9288213cd086791b9c4e7c1f1cde8c159ce7eb6b18d46bba5944897291b4e379bbf155bcfe5
SSDEEP 12288:YUykTUsMy1WBO2czKJ3c0t9fTNzHnKWSEg82+eINu:YUyoMy1WBOcJpLTOEct
TLSH
T167154A1B77D81264E87ED6BCCBEB8842E5B3F8465365CAFF42A589196F237A00D34710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zUpdater.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zUpdater.exe
Size 185KB
SHA256 f201c52b4e97a4d63a4c2b9dd525c87f03f15d285d7753bdc7d002a2e1c7ac01
MD5 9c7fd77f63cfd99f9f4bd82539ab7145
SHA1 e01ccfd0d5dd5e58e7d9cff07e6a3f7945365aeb
SHA512 0114cba1c8cb418994de670b3e87d9320e15dcd4943f67676437f43bf68bb4193a83425a4ed9700ae545529b4ad6466ffa342082dca00fb756863944d7007743
SSDEEP 3072:qiXFcA3VkJh0AhtHdY3bN0x/AJBLO9j7KiDnHznKQIe8cqYoWCeWCP:qbhZOJ0xsO1q9QB
TLSH
T1BA047C47B7A524F5E17B8678C8910A16F772783117208BDF03A4877A1F637D1AE3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zVideoApp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zVideoApp.dll
Size 8.4MB
SHA256 b854c3bfbbf4b9716aa73efb560e572e06f27cb5eb1be26b60e043c2fc780545
MD5 6a035cab5e0b7b0a6e8308dd59fa1b9a
SHA1 5c09ef42f98aa41f0565e5474babe979cc79e247
SHA512 c2432b0ac04f1119da51abe9aac6f071df5fead1000b4a4bc31715b4e70e6e9d5b4e06c28917fd6ff1b8a3a7701898879bf1f6bb98b11483bd33ca34b859d87c
SSDEEP 98304:6cMZZdNqfolK43Px6tyFhKVANlsFRT9zt6:6tZZdN4olKchKiN0T9zt6
TLSH
T101966C4B679940A4DABAD1BCCB0F9907D2B27851836193DB02B58A6E1F373F18E7D701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zVideoUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zVideoUI.dll
Size 14.0MB
SHA256 60633c2f9fd1db8777bd4ac516012c3b2af4e42bb5e84b3daa149633562f448b
MD5 00d4c41649eff48fa0c5b64c457002a0
SHA1 a8501145e15488530f4aa1a99aed61284d833259
SHA512 798de8f183946a5f223b93c677e74f809febcc8445ba864cc2af07fbdcf53a249193753013446f81dd65e1ba5c01c05e69340fc95a234c71c0cfaa903bf81a6e
SSDEEP 393216:m32U4wuLOy85InTLZQjndNJ1uiKI3OIZSBz5tIdfeG6AAdSQOtrxa5FQVsGfcaHN:mGrRcy+x
TLSH
T157E629DB67E721A0D866DCBCC6576AC7DDB27822131593CB02218E1ABF377F14939620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zWBUI.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWBUI.dll
Size 420KB
SHA256 5ce29f53d79a70e2b51815ed7cec3b29fa9eb2e2c91296eedb32d905167f483f
MD5 a98b4dd488d54f0a6c978a34c003cd74
SHA1 ebb1b11fa295bf5e1bc64481305695e98025124e
SHA512 bea7465e7eec59a6c3fd5740d62a2e752e253379d8624480ff2341c6f0f82912e6543fac8db2ab70b22d9df8f2663b71ff2c257aeb0712d8952f1311f6b92c02
SSDEEP 6144:d9V0xHTONkgTP7tn/MlF6u9VBdsa5cSFud3SjPLbrNiY6waM4Iq:d9VDBTI9IBMP4waM4Iq
TLSH
T112941906EF4504A1EC16C138CA7B8E09D677B8A8436193CB13B9C21DFFAF7D46875A60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zWBUIRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWBUIRes.dll
Size 318KB
SHA256 6a4481c6d2f8b89e750bf771239d2b2cf56f3e7f86d24700edec056a0ba3f2ca
MD5 ae680a2b9904c21d87a08b60b88ab1ff
SHA1 67a13cb39f7102176eb84236e75e2744598b36aa
SHA512 acaccbf8b71f2dd082b4fb877cba91caaaee6f6a430daa9b363d6b15a9eacb0fa28f46d99e3a80f1eedb6bbacf8cc627f2341850e8aa1ad2c27c5ad69d011f8b
SSDEEP 3072:UuWIROlOaakg6vfUL9DWoNn2Qrr7rq3rr7rqJBbr45jKT8LDu374WC8WCg:UbIOf0n248LDu30uK
TLSH
T192643B50D2E92CD3D12AF370E6176945E62B20F7930183E5B65D3A32DFA342F54AB4E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zWebService.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWebService.dll
Size 7.6MB
SHA256 834d0798a1286aef4f872613e6ee903857082cdc289d17fbbbbd45c2b7713dde
MD5 56c8f422e2b28ccdf5890e19ecc02f96
SHA1 7de4d7fa76b38847a36fc23f71785f9e134feb3e
SHA512 3bd7dffd39b5052ab55effe4fd93599463b81c626d374d8fb8ea6c53190ba47229d081f123b0664527bab174a9cf781f7c3658fa6d3fac42c8ce5b3e51ba87a4
SSDEEP 49152:eWe//5Rl7skI3Y9kqTD+OZGEyRtXOv/CsFKomL28J9eWMgrXbfrso7urlAlsmOa4:x0oMdcUj/fR/kZ444KEHh
TLSH
T165865B5FB7590165D06BD1BCC78B6E03D332B458831AC6FB01A25EA24F737E1AA79B10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zWebview2Agent.exe

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWebview2Agent.exe
Size 889KB
SHA256 8b191d248c13a38d0b394bad953ce2e59f8070766d3e3d6d901e753069c7aff3
MD5 0fd28b654b2714c36cc3aa7f8a7f0169
SHA1 ecd77af23dd7f7ac0ba57cdb2ecebc2fe66c4643
SHA512 0f49149a55a6abac1433460836cceddabbb6bb3ee41094bcb1f65048cdf98c95338605c493fe67df92b534338e71e57a11dff9459aeebfa990ad78028d457fe4
SSDEEP 12288:perdUHdDUqfld59/jXgrN+ARQX/L1jdJIfYXeai7p/Ue073YP+1v1RZuWZSJQhwV:pK6Yid59rXgoKQUV9
TLSH
T1FF157CD6A34807E8D562E1F69966EE51E377BDD6179087B70260B31E0FB36E80E39700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zWinRes.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zWinRes.dll
Size 10.3MB
SHA256 278c14e7be44704a89a890896ad4eaf4c435dff6fd58134557b71bdb5f979426
MD5 41ccc346b0e66733836067f1f5f102f6
SHA1 b9b0c45a4d2ef018bc9e68d77d6f56a57d4e1160
SHA512 919c5798d76ebeb7c82a690f687f93cf45192b3d82040d15c09ed5abdec374cae1848d79d7dac901123ba9ca33ab3cff31332392f59b48e6687810533d92a0c7
SSDEEP 49152:EW2cSJLObGVs9h355nc1n+cSRjF0E4wFLsTWz5zKxwsm9:52c5L35BcK0jCsTaOxwsm9
TLSH
T102B65C60D3F81D29D2B72732BB3689908629B8E7EA78C2CCF11D316B57F24418C66775
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zbt.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zbt.dll
Size 4.2MB
SHA256 d1acc31246135f4c6d5efa3b3b7d459b4ed2e35de5f6d566ce1a72e2fc8f1c21
MD5 aedba19b22ebd53426ac3005226cce9c
SHA1 f17caef332e6a9f81eee6fc4239529d1019148ba
SHA512 bff857dbbaa796b7bf59ff55d2aa49b94ab3e8c4fc55f99fb7f3515cd89299645162391e8b2ab4707c4bfeb79d9931e4fd42588c1d2cd3f590a3fbd0ef64a6df
SSDEEP 49152:SZEE6JiHfKXI2xpSd26tG0csVYp64iNNgAxYtL5+xYf64ACwTbMJh8lmgDDfb:SZEEH/YIu3n8rYto
TLSH
T129169E07F1536585C74A407881B2AA75CE313C1A87A666BB36F9F60D6F637E05F3AB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlt.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zlt.dll
Size 5.9MB
SHA256 42bb16be8a755c270d780fd5b1467a6b2c6d5ccabd7a199d2d73c4d44c4ed1a6
MD5 9bea220fb0bb77ba765f3aeec10b00bb
SHA1 160ea41fec948ad39c57772edfdbfdbdf0dc2c4b
SHA512 f66a7b11289866e4c6ee0ef508d553f07cdbfcf20156ca516c1f41fb8959e64a8d2889ada1b3fd1758b2ec29ac0c979bf5e23db0c4661956911caf686417cca6
SSDEEP 98304:xs2ts2is2rs2wda1Gg0lDHNJVyUArFNHGciz8BBanj:3da1GgYDHVyUU5BVwj
TLSH
T1F1567C03F257849AD059957484BA977BD7363C1A5BB226EB26E0FA0DAFB33C01731781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zmScheduler.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zmScheduler.dll
Size 472KB
SHA256 77c5c6ab2a7b652a51497b5ccb2e37ff38dc5c22db229fa93f59904c28f7ccf5
MD5 33438c1bce185b045172ada66631253f
SHA1 0129dd2e018cefad380c204d6db11446d9d14067
SHA512 f943cb231cd8f02d6cc1855911c0829cebb13c57204bb86e3008070671bdf6a1edbcf2a37d91eec240f05918ac3315b381cf5a57b793080a1fa235dac03e0dbc
SSDEEP 6144:5ejEigd7SC1IxmuhOrVqaYJn96fATiOCfxOuMcU8D1LanMHI8VeExXpho:wzhCMdJmDOywQvDH+uho
TLSH
T1DBA44A2BE6580960E462D07CD7EBCC02E7B7B4190395CAD70365E62A5F733D0BE396A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zm_conf_universal_ui.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zm_conf_universal_ui.dll
Size 439KB
SHA256 6e30caae5de5bf86be9dfde1428fa75585469ed0009ff9c5f3a8b6a3c31a0091
MD5 9ef9065441ffd3c29040d492a8036b1e
SHA1 55e8a85ebeffc02016e3879e5125a1609999b20e
SHA512 90a0a4ac4902fdb6f940ee5a1b1a907997085eb4ea031a0e70a92898aab5c0c18604aff512923025ab0d9880c25b433b2fe1daabde91ec7dd11658803ea94935
SSDEEP 6144:WSQA+ANPp2zev/T7EP6yGV6CgJArZUPHNhAiCJpzLf1+ffxMiGeOHiwX0:Wexhp2Cc6yUp4AhoffxMiGedwk
TLSH
T123A4060FDAC400A5E3A7D178965BDD0ED276F4CA43D196CB12B585BD5FA7BE02E3A200
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zmb.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zmb.dll
Size 1.1MB
SHA256 e42954eb7f327dd02ad1c6e459bdef9987fee3e086da92219877e8c9f47e7f37
MD5 6ef27783c37824b1ed903bbaad338969
SHA1 7e7393478f0a69961d37ee65d93debef7ce26191
SHA512 f5c2e7e5501ec5e96c41ca6b851a50090e8e3c8758cbb09fab38e4368b9da34403efc4528215eef8d15d446a5333daf27b6e2569ad9d595a378a24dec7f5838a
SSDEEP 24576:+3xfhV/8aNY2sQSghMSiMLnf21X0Jh3p8nQpC:+HuaNkaBe1+1p8nR
TLSH
T13B357C87A7A951ACC27FD13CD69B4A16E771784603209BDB17E08A693F23BE11B7D310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zmp.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zmp.dll
Size 1.7MB
SHA256 db35218f14f01a7660b53580cb506fecc72adeb7eaa56d3f30fb22678ca0d4ec
MD5 f46d54e44c324cc98c6ef84921ea8263
SHA1 b01c5d86473a73d7d59e008b5c0147ed470296d6
SHA512 001ba603338887f7d11861570e303a7226012ce8ea21976ec5bcc0e2e421a5700c90cb43871c3845e570eda8eec9aa9379b8f91d8224e03e14688fee37a13270
SSDEEP 24576:MOVG4mBz96P7B+i00SSlfH6qbVxj8K3XmjjcwhfO4JVdkhO+pBNJRuzbWQcRUaXN:dG4+wP7B+zS9j3XmjjdtJVKE/WQKVXLh
TLSH
T140856A0BF90F8469D1AD407885A7A77BDE2638299B2C22E735E1DD065FB3AD00F76740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zoom_meeting_bridge.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zoom_meeting_bridge.dll
Size 2.0MB
SHA256 9756c2a97cd7dfcdc9763893e6b7c146563ad7ac6935227cc9c88bfc79aef68d
MD5 60bb4489308b3fe70ec46ac30d567608
SHA1 5c1cac8787df24c21905292d54290670d50e8a30
SHA512 2354e7ea54d66a3c134ac7d60d856d095656d2353ed24b3266bb8f9910e52c320ca04ca02c86ac1e5d8a2d6b49e6b7ca48afa0170dd58c3787c487dddad45339
SSDEEP 24576:ubd6rkVnjZT+uzQlTDIszfJpz19iXCiU6epVa7XZjTE5f:ubd6rkVnjk8RszRpz19RpkI5f
TLSH
T19FA5082BA3648274C5DAD1BDC78B4E4ED375B016476286FB0152CEAD1F373E24E36A20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zoombase_crypto_shared.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zoombase_crypto_shared.dll
Size 2.0MB
SHA256 bc90605aba8addb3b09ae31f5b521b691c62c4548aeaeaae27d301db468d3952
MD5 fb92bbb597f34a87d57dd95f2d8577c4
SHA1 f77bf7bf27ced7649c731df61c35fedc579fe678
SHA512 ea8c329422340d065f60b9d65fd82f51fa4a2b20fe2f232b18721b45c8ef7a9e1421189faa54c2978669b99e65d5bce48167af5cf5e53e1e635774d029b6c1b2
SSDEEP 49152:cMc8CkhzOsle80Cd/nN+hEdu1OZyozCNwfpgVG30VTzuAqE:YegVG30VfuA1
TLSH
T16EA53A47274841A9D1BFD2B8C74B9A0AFA7534060331DADF03D096A66E977E09FBE314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zzhost.dll

Path C:\Users\Admin\AppData\Roaming\Zoom\zoom_install_src\zzhost.dll
Size 376KB
SHA256 3f3c84002f95eaff1ff1e962eb99f78be68f2208ccf3ffa26bffdae1c379e429
MD5 a21d192c19ebaa6da35f0a321150ff36
SHA1 b2bb74392fdabdca85a8c0ea2805349519625941
SHA512 66a7a12285b96f3b07a0cf6e5a47a5071319ee7bd1958c9f5084f067ae909487fd0a6eced0485366c7d02b7f5737e966d4054aae9d02ec11157d987ee6a5e701
SSDEEP 6144:I797PRFnNuIpgUBjFEd1DXTbz9OpQOHih23Ac6ltAZtjr+ESGQkupoKOE7/O9ARQ:IBrRFnNuIbJGI/Alltgup/S9ARQ
TLSH
T15E847D5BB6980CB9E9ABD13895878E06F37334554350D7CF13A08A2A2F637D1FE79A10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/540-2076-0x00007FFF8C020000-0x00007FFF8C886000-memory.dmp

Download

memory/540-1997-0x00007FFF87370000-0x00007FFF88196000-memory.dmp

Download

memory/540-2384-0x0000025C96750000-0x0000025C96A26000-memory.dmp

Download

memory/540-1996-0x00007FFF910F0000-0x00007FFF91C3D000-memory.dmp

Download

memory/2608-2017-0x00007FFFB2010000-0x00007FFFB2011000-memory.dmp

Download

memory/4660-2095-0x00007FFFB3710000-0x00007FFFB3711000-memory.dmp

Download

memory/4660-2096-0x00007FFFB25A0000-0x00007FFFB25A1000-memory.dmp

Download

memory/4788-1814-0x0000025823AC0000-0x0000025824457000-memory.dmp

Download

memory/4788-2276-0x0000025824680000-0x0000025824956000-memory.dmp

Download

memory/4788-2275-0x0000025823AC0000-0x0000025824457000-memory.dmp

Download

memory/4788-1817-0x0000025823AC0000-0x0000025824457000-memory.dmp

Download

memory/4788-1818-0x0000025824680000-0x0000025824956000-memory.dmp

Download

memory/4788-1816-0x00007FFF8C020000-0x00007FFF8C886000-memory.dmp

Download

memory/4788-1815-0x00007FFF910F0000-0x00007FFF91C3D000-memory.dmp

Download

memory/4788-1813-0x00007FFF932F0000-0x00007FFF93B23000-memory.dmp

Download

memory/5232-2130-0x00007FFFB2010000-0x00007FFFB2011000-memory.dmp

Download