d3c7d63db124776473c261fa9e18a4d5e87397c8a96d61685ce04e315433b73f

Analysis

user interaction
yes
max time kernel
70s
max time network
69s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
14/08/2026, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
windowsApp.exe
Size 154.6MB
Sample260814-2cc8hashlc
SHA256 d3c7d63db124776473c261fa9e18a4d5e87397c8a96d61685ce04e315433b73f
MD5 b5ef697f9fa13ba61ec5aebfc9ac7b94
SHA1 df65b7b8c2104a2f9b521f0fb0eeac763cdfc721
SHA512 09cd97ed4bfc3545fda04f940eca4ffdb76262702239469b155e5425beb9a814796d698c25423f9fa8c57fbd8bbbcddff58b8719959938e4be3479be170ec48e
SSDEEP 3145728:ufH070vChgMLmjz5LH/4LcwZNvccK8IbVsVeQviOPUPOAc60N0m69kzFesz/+v:30vbum5LH/yTf0ZEvvJUPx0Ns+Fnu
TLSH
T10A78333B504BA03FF46F223EBAB1A161283ADA20E5654943B5D5E84CDF210B07E7DF56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery installer trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4988	windowsApp.tmp
608	Anizium.exe

Loads dropped DLL 64 IoCs

pid	Process
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe
608	Anizium.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Anizium.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Anizium\tr\System.Windows.Controls.Ribbon.resources.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\PresentationFramework.Aero.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\de\is-FNORIU2MLY.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\ru\is-1934PKPI15.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\Database.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\Microsoft.DiaSymReader.Native.amd64.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\fr\PresentationFramework.resources.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\is-SHEP4QOTWH.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\tr\is-Q1Q8OVXYRZ.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\zh-Hans\is-EEOVI3QPIL.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\Microsoft.AspNetCore.Components.Forms.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\vcruntime140_cor3.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\unins000.dat	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\Microsoft.Extensions.FileProviders.Physical.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\pt-BR\Microsoft.VisualBasic.Forms.resources.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\pl\Microsoft.VisualBasic.Forms.resources.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\ru\UIAutomationTypes.resources.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\is-8GET46ABU6.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\ru\System.Windows.Controls.Ribbon.resources.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\ja\is-C665YOLAJV.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\System.Diagnostics.DiagnosticSource.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\System.Text.Encoding.CodePages.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\ko\is-9WH8L850VD.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\pt-BR\WindowsBase.resources.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\ru\is-29QHIZKB3H.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\it\is-TJSD92NKPD.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\PresentationCore.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\SQLitePCLRaw.provider.e_sqlite3.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\System.IO.FileSystem.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\is-NG05XV7NZN.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\is-51YN6N8XZY.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\is-KNFJHELKGC.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\is-8JJWMSXM2Q.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\is-9NMJMT7PG3.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\Microsoft.EntityFrameworkCore.Relational.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\System.Security.Cryptography.Algorithms.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\es\UIAutomationProvider.resources.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\is-JGBVOX5FOH.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\is-QRJD3Q74LJ.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\is-TE8R7M3BOD.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\ko\is-0PU6E2QRQS.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\System.Drawing.Common.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\pl\is-D7VPB3JIPH.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\Microsoft.JSInterop.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\PresentationFramework-SystemData.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\System.Private.Windows.Core.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\it\System.Xaml.resources.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\is-JTLWT6B0OW.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\de\is-8SSLD0617X.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\ja\is-HISLPYNF4A.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\Microsoft.Win32.SystemEvents.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\fr\UIAutomationTypes.resources.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\is-R2N4MCXY59.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\fr\is-PT3POBA4MK.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\ja\WindowsBase.resources.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\zh-Hans\UIAutomationTypes.resources.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\es\Microsoft.VisualBasic.Forms.resources.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\fr\System.Xaml.resources.dll	windowsApp.tmp
File created	C:\Program Files\Anizium\is-ZWRFJU76HE.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\cs\is-A6VXJ91L6I.tmp	windowsApp.tmp
File created	C:\Program Files\Anizium\zh-Hans\is-HUDYMOYRK5.tmp	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\pt-BR\PresentationCore.resources.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\System.Console.dll	windowsApp.tmp
File opened for modification	C:\Program Files\Anizium\zh-Hant\System.Windows.Controls.Ribbon.resources.dll	windowsApp.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	windowsApp.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	windowsApp.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/2808-0-0x0000000000C70000-0x0000000000D4F000-memory.dmp	innosetup
behavioral1/memory/2808-7-0x0000000000C70000-0x0000000000D4F000-memory.dmp	innosetup
behavioral1/memory/2808-1110-0x0000000000C70000-0x0000000000D4F000-memory.dmp	innosetup

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312200614946138"	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4988	windowsApp.tmp
4988	windowsApp.tmp

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
1568	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4988	windowsApp.tmp

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2808 wrote to memory of 4988	2808	windowsApp.exe	79
PID 4988 wrote to memory of 608	4988	windowsApp.tmp	81
PID 608 wrote to memory of 1568	608	Anizium.exe	82
PID 1568 wrote to memory of 3984	1568	msedgewebview2.exe	83
PID 1568 wrote to memory of 2468	1568	msedgewebview2.exe	84
PID 1568 wrote to memory of 2468	1568	msedgewebview2.exe	84
PID 1568 wrote to memory of 2468	1568	msedgewebview2.exe	84
PID 1568 wrote to memory of 4900	1568	msedgewebview2.exe	85
PID 1568 wrote to memory of 2536	1568	msedgewebview2.exe	86
PID 1568 wrote to memory of 2536	1568	msedgewebview2.exe	86
PID 1568 wrote to memory of 4960	1568	msedgewebview2.exe	87
PID 1568 wrote to memory of 4960	1568	msedgewebview2.exe	87
PID 1568 wrote to memory of 4960	1568	msedgewebview2.exe	87

C:\Users\Admin\AppData\Local\Temp\windowsApp.exe
"C:\Users\Admin\AppData\Local\Temp\windowsApp.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2808
- C:\Users\Admin\AppData\Local\Temp\is-VSOCCKOLSE.tmp\windowsApp.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-VSOCCKOLSE.tmp\windowsApp.tmp" /SL5="$E020E,160875694,855040,C:\Users\Admin\AppData\Local\Temp\windowsApp.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4988
- - C:\Program Files\Anizium\Anizium.exe
    "C:\Program Files\Anizium\Anizium.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Suspicious use of WriteProcessMemory
    PID:608
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Anizium.exe --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=608.3316.6341689139321734147
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:1568
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x168,0x16c,0x170,0x144,0x17c,0x7fff7190b078,0x7fff7190b084,0x7fff7190b090
        5⤵
        
        PID:3984
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView" --webview-exe-name=Anizium.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1888,i,12424516412248860319,10550197910662498411,262144 --variations-seed-version --mojo-platform-channel-handle=1848 /prefetch:2
        5⤵
        
        PID:2468
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView" --webview-exe-name=Anizium.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2160,i,12424516412248860319,10550197910662498411,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:11
        5⤵
        
        PID:4900
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView" --webview-exe-name=Anizium.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2408,i,12424516412248860319,10550197910662498411,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:13
        5⤵
        
        PID:2536
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView" --webview-exe-name=Anizium.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3432,i,12424516412248860319,10550197910662498411,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
        5⤵
        
        PID:4960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Anizium.deps.json

Path C:\Program Files\Anizium\Anizium.deps.json
Size 69KB
SHA256 ad62284e457a61eb8d06d587a5ecfdc4bb5abccfe3c4816032dadb8bd0014c36
MD5 3bd3e7e554ccbcbb207b75fedbb2f2ea
SHA1 3545364b64fbe6f89c85818044d47eccf827aac2
SHA512 01745226803695418e4d33514f59869fa145e65d719a82305c6f5777461e351dff6d84509b07dd39950d637e4e79d2baf814d575dd9cfa716d1a99b315cdca10
SSDEEP 1536:KAa8behoB3y/UjRYKklDOhoPn7Uw5pFjysqhZrY1fCYl4sJFFj6zDqJD85lMKBrb:KAa8behoB3y/UjRYKklDOhoPn7Uw5pFi
TLSH
T11F635529C8544EA70536ABD2E8794681F365177FB040594BBCFC201E8F77FAA12A6F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Anizium.exe

Path C:\Program Files\Anizium\Anizium.exe
Size 171KB
SHA256 9b4fbd338dfe06d8cc9f3d42492f5409e665fc6ee8d17f401824ccd09272afd2
MD5 59617c3bb4be1578395bbbbc8bc1156d
SHA1 ae86cecb59aaf9b07b37c621ee678b678a9f464b
SHA512 e52d19d59cf4e396965eebe9cf4b706e7a50bc91c521daa758752851fd5695b3fa3f4dcaf0f159419841b7b72ecb8dd4cde3ce8d570f10ff9b29a79d2799c0f0
SSDEEP 3072:P20jWfVKLer59aSpfO9D/87jXEkeNZA4nsS5URw0:uIhSpfO9jCf4XU+0
TLSH
T1E4041A03A6A8C0B9E1A2D679C952C9F1EB723C55CB7166CB13507E773F726905E39302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Anizium.runtimeconfig.json

Path C:\Program Files\Anizium\Anizium.runtimeconfig.json
Size 595B
SHA256 02ada4a40492c7e6153c3dd7327c6b08ee8b5a4bc2790a25c7247a8880f2f1bf
MD5 1516835de6bfdc7d32f4b9b3b6c09a04
SHA1 e9160035c0d75944be700d9d7c7e94e8e4930f25
SHA512 980b93176d03cfce290d4e2d47a37872450bc4bd44e529903cac51ec5af1a3d888af2b2bec65f270ead94b5e15ffbc3191c25d40294dec108fc2279534f84d75
TLSH
T185F0F079CA207D7715B966BAD536D482EA30272700045D52B9FD080C6FBB9E62022F86
MD5 SHA1 SHA512 TLSH

Submit Download

DirectWriteForwarder.dll

Path C:\Program Files\Anizium\DirectWriteForwarder.dll
Size 497KB
SHA256 2268ac8c8ecf7109e2ffbcd13893fd97855784a0012c61494beafdc8a9e06b58
MD5 8b62d8e6e8170a81b031baed8ca1c8de
SHA1 35d09522f5f8bd93d65d7f7246c6a93ed513f64f
SHA512 1d69617685a3012ead76228877db1d465913fb0187ea763b9f6ec0f14ef39307d58ef135e90b513e302dba60ea47e9283cc0b7412241d4152b02518a75af12d7
SSDEEP 6144:XP9Gzw8zywiVzJDU454LO318HPQT29l5afvQylSgvA6tKjXU8AZ9:VSw8zywiVzJl5Y2GLYo6cg8q
TLSH
T1C6B4AD14B7846AA3E96D82BB4243C262D630D9F21713E3C3874186665E3FBC6D737693
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.Primitives.dll

Path C:\Program Files\Anizium\Microsoft.Win32.Primitives.dll
Size 14KB
SHA256 674c2ebbdb968c360e3cf64d9a47d030f658c46a8b58d6971381c0f8eaf79dad
MD5 aa3638ccb58d0f5fab48c411718f68fd
SHA1 b0463e060a692d01e02efadef77522236040cbf8
SHA512 0f7d78103e076a9cf85c039dafc48703b3871ecccc4118bcfe4c1aa72d4f7d92ecd25a9e25d8350d0aab65f326e0ac9d6febf7c68999a89d86f973946ecbb791
SSDEEP 192:Gi9ptx0cWhPvpWfmBWF+GBTBWseaAWIcLVIfgtUX01k9z3Ahb91:GiXXXWhPvpWfm8lNB+tR9zWbb
TLSH
T1B2625CD2C77C4203EDEBAEB095A9CA833C7C67C749519A2A01D6E1491C63BC5DF3162E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.Registry.dll

Path C:\Program Files\Anizium\Microsoft.Win32.Registry.dll
Size 117KB
SHA256 b549148c3875fd7fd7c26c9bafd2dea73aa1e67c63e02e0ff5283bc9f14cbe67
MD5 15d769424a4c34d812ef9accd62d3538
SHA1 bacc8be2194e1f798d7b0a9cf13161314b74b817
SHA512 3a1a8a66cc9735a598cc15f937ff748aeb7b9dc44d622b3ac22e613192696103d42305226c39d8eb12dbd8dd447fa8d3d5df84bedf16fdf742291fd89414dc95
SSDEEP 3072:Z/ypwrfkkYM368JSvEdCrOVi+m4tW6Vm44m:Zjq8JSvEd0rcWK
TLSH
T1F2C328513BD0450BF97E8A7A9A67C441E2BAF0971B01EACF52C5805A2F63BC7F631613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PresentationCore.dll

Path C:\Program Files\Anizium\PresentationCore.dll
Size 8.2MB
SHA256 e8bb7ccf34539d65926c1d27b75cc8b7b027ebce227713cbe54e57c3d726c58c
MD5 83f8b55b2e515477919d5e91dcd4cb1e
SHA1 04cce3db6ce646eba2a3f507571cb6d58449780f
SHA512 dde28e4a895006eae7cb98066563e887acd31050b0ad4e5957f6cff5fbe935114b1df988d24b418dcdbd81f67477cec32f6a02f9ff514f244e0efbee53f55ecd
SSDEEP 98304:GR/GaAlG/q4KD1D4wfXRO0hBbnt7WPHfCLJVeCfdQcXN+o:muaAlP+wfXR9bnt70HfOJVeClRj
TLSH
T138968D09F7984A21D27FA5BED1E34122F6B0A0935311D4CB385CDA2D2FA3BD166F6127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PresentationFramework.dll

Path C:\Program Files\Anizium\PresentationFramework.dll
Size 15.4MB
SHA256 823231dabb19f5b5e60b8ccbc5fd6da08ea3c48ab40a829fca566d3c161991f6
MD5 f2109529cadbd184a02c43e29f0b89bc
SHA1 38c7ce199833ae219fc77c448c1cd88d27a935a4
SHA512 4540c6443f2260fde92d5159047acde6aa79331952f07b8850eb7b02b7900b3034d450be66f11746078aa166b719a7029e91387d2739b0e4f0b6e51f57110253
SSDEEP 196608:kssHLUe4l/0atJYc0T8TAP9r3sedTPTJ1MwXURjl+AtMo1typYPaV:HwE/NtJY78Ta9r3sexTJnAJ+8JtsYQ
TLSH
T157F68D24A3F84A05D37E86BD82634187E6F5B49B5362C4CF0565F90D2FE3FC1A676222
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PresentationNative_cor3.dll

Path C:\Program Files\Anizium\PresentationNative_cor3.dll
Size 1.2MB
SHA256 6c588208852d8663d81872e0eafdecec4f2ca5cc2cede2e74e167427932e70f3
MD5 e3317e7f8817f2005a2f87484afeedd3
SHA1 5bc45c25b1c63892835e5a849913c368ad88bcf7
SHA512 f881dc2ae7c32a2e407f71f2e876f04e47ce605c515fc161d54ea2756cbc66808bf18a054d7407de004dd2287986861ce863cead5b4c51af125f3c447770dc89
SSDEEP 24576:6GD+42x2Jvddeoyo7Pkmn/V1Pt8clT3D4iLFxVCPL67uMFAC0q4dovzvfPbR8/9H:S2BzeoRPkmTP2clT31wPO7hACNYovznK
TLSH
T189454A62E2E642E5C47FC1B8C6469717FBB0740A131C66DB87608B592F27FE0963E364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.NonGeneric.dll

Path C:\Program Files\Anizium\System.Collections.NonGeneric.dll
Size 105KB
SHA256 4348649201c978e2fbbc13753c89a7103f682a10477f121a4d5a75628fe798a0
MD5 0466fc81711be436a867fc2afcb8f372
SHA1 cbdb3e59118e52b1afae1d0b9c289d8942a4dd63
SHA512 8e02f333678e37c5db452f218dfb089702fe1fc30027466299ad9a2dd58760cf9fef8135776fba08a9cfe46d527067313f454e935b2ce495d9e760e3da78c6d5
SSDEEP 1536:Xywj/z1rx4tmQ+tvmRrVvIrKQ77WGiOHGdlw3UmzcPr4:XywH11gmQ+14wvWGixrwDIz4
TLSH
T164B34A39B3980227C6AE66FC91AB8902E271F5D36703E1DF294459CD1E9B7C2D2B3057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Specialized.dll

Path C:\Program Files\Anizium\System.Collections.Specialized.dll
Size 101KB
SHA256 e98f2d94a5a837ce3b93c427a645f16324d7f891f62a5e173cd499b129ab1f29
MD5 e6e14a1c940d932c4600d5f5ba6122c5
SHA1 106c9f0a3090d47624bafa197a30e5959fead8d8
SHA512 4d580745e1ff7172192134d0cf62d972d586863e5e19658edd0d55f377e72ff8b1bb8ace19148eeb52ab299476a5b05a2aca3dd8aa38982764f6dd29801d7756
SSDEEP 1536:v7EOmSRuYWjVahA0/cOHz+SE6iTWNYR6dOm8szq:v7EOXRuzjVw4OaDTWNYR6dOdsW
TLSH
T167A35B2873C84721C6BA92FDC1978942E634F2D31352E6CF9949D489DED77C09AB702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.dll

Path C:\Program Files\Anizium\System.Collections.dll
Size 325KB
SHA256 f002421881d27d80d7b2ec66b74831e224c221d415706584cfc0e58dc9805358
MD5 27f187d31729a33ab960ef96b8fdc964
SHA1 05b9cafd939ca634ad377e283365ccdbeb167aac
SHA512 c8d813cf41461391f179319a8a7046c37a79fbd305cc933f425d1c97be5bdb17bb9d2c36f1076490ada889a763c1877aea4ade317fa2e1593a44042b540396e8
SSDEEP 6144:Fwi7t29x3ZZIwk3u3mqbe29p1pwmghvmmxBVsTdlENiKwkqERT:xZ2VZhk+35begpom4vm/TnkbRT
TLSH
T1D2645B29738C1329ED6F81BAA593C031E479C0D2C3D1C6DB066DE6409EEBBD16DBA147
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Primitives.dll

Path C:\Program Files\Anizium\System.ComponentModel.Primitives.dll
Size 77KB
SHA256 c242bc2554cdc95f8c82fa7c388ee4546634aa74d75bd27cf1dee740c58e3233
MD5 ee9781d5c2087a790f8e3ea15442c2ec
SHA1 928872c4602665d66c37de3ef9460d781bb1c750
SHA512 976130bb15558b01b6f2647efd3a4ac16b4e83342947039aa6fbb2b5c1c69fb9256c3f84f633d7641953b07b4a1da9891078c4f73ed98f089b45f253bace53d9
SSDEEP 1536:crhHggPzMHPgIAhuBYYcYm2oIC7A8CsUtlBzl:crhAgIvgIAhuqYcv2ol7AQEp
TLSH
T127734A1913E84315EBAD62BC9AB39A109574F5832313D9CF5660D90E2F9B7C1F231A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Configuration.ConfigurationManager.dll

Path C:\Program Files\Anizium\System.Configuration.ConfigurationManager.dll
Size 1.0MB
SHA256 aa181995ba970d5b45be6aa08abb5ef5e2a60fa0f88b8fd843e6d772f29abe1d
MD5 96ac8fa37308d0bd5e2cb42fd165cbdc
SHA1 49f8bfa3bbe6b3e189683ca1b4b6e7a51367db0b
SHA512 6f92c6d955e1dfd4485da6d9df4e6e5a367e8410fc002a1d1ce9ee9f48670e82e5b2099297ad8d9eada81b773fb2e5c3d130fbc8771993b188d19543246b8a4b
SSDEEP 12288:WPrNcXS2FPqqfOsdV0Z8oApKK1sPTdokGH5OTNWLOdN9vFTcHQQzOM1ajWAYAp33:0NcCOAlgSWANBl8AMjaUDF83
TLSH
T1DF354A2553D8470AE76E1778C96A4601D6B1F8970332E2CF8510B88E3B97BC2D7F2667
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.Debug.dll

Path C:\Program Files\Anizium\System.Diagnostics.Debug.dll
Size 15KB
SHA256 1d4c50cb89308d3edb4d4b936895e5bc96e4fec9e880ce6b3da8acaaa8d7845d
MD5 5e02efce72f67b03342a73b4062e8781
SHA1 76289ce944778b6305509f411cefa17389d0156c
SHA512 ad9cf17efb1097f30c24f8deb35302de4e7014d980906287332c6ce109a27d841dacb445f8298e10dab97b37bfe402fd2944755047dc8c0de711e8ffcfb30226
SSDEEP 192:pwDexENYW22mWf8WCWKie1BzBWseawWDvulc/9X01k9z3AgYZS1:FmYW22mWfAZlN5uO9R9zzGS1
TLSH
T16C624C92C77C4213EDEB2EB0DAA4D9933C79A7C24C11A62F12D6E5491C53780EB3662C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Packaging.dll

Path C:\Program Files\Anizium\System.IO.Packaging.dll
Size 317KB
SHA256 3e332aa3566d1c5b71a913432c857d3f80195b1923c44a23fa392c3b90734836
MD5 505ca26dace5e2ffd33bf551e0be9a62
SHA1 0c01f2740006999db2af8e2c01aa7292ca3393bf
SHA512 0fe425fec983ac8f0704444ffe26bf537d613bf069c21b362d16e628d62383ae5382233122249eeabdd808032cf6ebf2c481f58f770decb32766481b1e7f70e9
SSDEEP 6144:brfPPPXa6+qF62rrW//sOQV8CgR5Y9v7FmpYnn:br3q0rrW//s4u7OYnn
TLSH
T10A642A2433E80607FBB756BDC57BD021E979B69217A2C6CF0910958D4E9BBC0DA71723
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Memory.dll

Path C:\Program Files\Anizium\System.Memory.dll
Size 157KB
SHA256 008188acc2291d1ef3fc603093bfed60ec6d29a17bf9811e721ab91daee030bd
MD5 b64076f7f54c40f42147a8c227509e9c
SHA1 ee5cbb6b0669eafef6ff29b4e39e0d7509c14b98
SHA512 cf172081a3e63f549defc8bebd3b0a013629cef5b99b9ddc4690a2cf8200cd0faa939fbb49a352586fc23bf3209baf042af0365e49d9c232b4631a5bb356fe7f
SSDEEP 3072:wB2iLHIP+ZSX//vpjM+dXwayf11ojXM6EaI/hg2KA0x:WD2pYMwayfWXM6a59ZO
TLSH
T14BF36C37C3980257D92FEAB9A5268E02E7337052970195CBE8D4D6846F53BD0FEB7422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.CoreLib.dll

Path C:\Program Files\Anizium\System.Private.CoreLib.dll
Size 14.6MB
SHA256 dd5ba31574db730c5c7e8027f7785be7169a3905cfbe8d8248f16b2208b7d995
MD5 444b91fe37fd1ec039c2f3cf9c4d3a1e
SHA1 273395e0b1c1cd87f8051b6a4b70b83bb7edbe25
SHA512 3edf6b0ba4f005157b1112c7f6b5850a806e5feaa01747416e4b3c8a990ac135843349d9bcc66a3ab5afba8b8fc87ee01418cacc456bbfc405e8e20a81feb1b2
SSDEEP 98304:9vjBkM13VrGQWWhGEwf+rC09jn5QJGjabT3GzgzP09I9cSZQsu:9rBD3vWWgDf+f9jn5cGiT3G0z89IY
TLSH
T142F69E00E7D94F96E12FC27D82938116EA74F89E432294EB1945D95D2F23BE1533B2F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Uri.dll

Path C:\Program Files\Anizium\System.Private.Uri.dll
Size 253KB
SHA256 3a26c4e4c5a6d0afe898d6a3057fc29a716f265751cb24eb0c84ae3cdf424bfa
MD5 c7602f2fdbe879b01a493e812b42fe33
SHA1 dc8958d6a978a1b99e2a6ec937f70d13d11b92c7
SHA512 81c0ea7616bce25f531b679c19642c72baa5b81968c4346e0baece36617c379c95a8df33629c9089f8841e94baa7a028a77e27309a015a14d4752f2e08f37c50
SSDEEP 6144:6r2iUmyT6Sup03QyFWLdTEFVtGmqsDYWtAB:MjUzEhTgVtGmq07tQ
TLSH
T124447C35E3884966FB6E87BD8283D213F67274A25305EACB4AF5D1821F233C1BA35553
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Xml.dll

Path C:\Program Files\Anizium\System.Private.Xml.dll
Size 7.6MB
SHA256 175f8b2fde041054e8c4200b0a13fc9fc907b894423eb7426ef5528b14cf561b
MD5 b04bf7f432277d14016d8ead3f2f6922
SHA1 164e03d39c88e5ebd73305eec185e8ac0996857c
SHA512 4d6d48fcffb7abfda918673c572a3964ae205a93e0a004bff2c1d0038df0ebbc57eb0f42ccf36e2ac418722d99e3187433ab051376662784485a653357eb58ed
SSDEEP 98304:Ru4S7xgoN/azZLXHmmPC2gCoa4ToK1BGMsExdTqcQq:RuTxTN/azZrHBA1E1qqc1
TLSH
T162868C26B3D40E16D32FCABD83228902F2F9F443539696CF0618EAD52F837C19976567
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.CompilerServices.VisualC.dll

Path C:\Program Files\Anizium\System.Runtime.CompilerServices.VisualC.dll
Size 29KB
SHA256 22367fa9dab8adf3ceb12240ad24af580af9cf9a8bbeed844e9879d9ec2d1828
MD5 5485f799b9f7ef47b807a5a2455024a5
SHA1 f2e3bc84bf2fd0781135b3e962c9688bc3248f21
SHA512 3b29e1007c2e1b629d08e255057067d445d757aa99d64ed8922ee35722845e2b3c946a7bf3a39d8bc5ea161856b8359b22e3c6115f4bcc172c81f151d054e877
SSDEEP 192:0WslLWfA5jGa3HVilUFLrxH1lzWVicKa/WCWKie1BzBWseawWWk2K13X01k9z3AW:0WslLWfA5jxoGlVqLZlNf2QR9ztkuZ
TLSH
T193D25AA19B6CC227EEAB0D7489F5D6832D38F3C1AB5257DB11ADE1096C627C48B30734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.Extensions.dll

Path C:\Program Files\Anizium\System.Runtime.Extensions.dll
Size 17KB
SHA256 f20996446b0b00749e6f0509a5881ef0d8e4408f6b21cc68f674476a57e0ab45
MD5 fd1a1c6fc66b76e2e9d9babf0623720e
SHA1 977e339d648081e092976fca780aa33f5d6ec95d
SHA512 202595ac3ebca8842a2e1efba766c392093a5b59f4d401e7578b3f63da559760056d9e7124df976f064ee00e27fcf9e93be53896888f234f35fbd6677478434b
SSDEEP 192:UP2OZuAMSZ7r1x+ZxdjW8DNWfFWCWKie1BzBWseawWQW/9k2K13X01k9z3A6qlyW:kFus9x+DNW8DNWf9ZlNv/y2QR9ztcL5
TLSH
T1F2823C928F5C8253DDAB5FF0A9B6CA832DB873C29D71955606DAE0485C237C8D732338
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.InteropServices.dll

Path C:\Program Files\Anizium\System.Runtime.InteropServices.dll
Size 109KB
SHA256 a25846837ceaa1585c332524f8368ac098f0e9cbda1a5d84aceb27ce8cf5b4af
MD5 f7b47c6bd3c68d98de064f6daa65231f
SHA1 0929168b53447310dd57b93571f79a095197816f
SHA512 5f88191a75739f7a98c990f6ede0f98d1f9c9dbfe1c44c984541989e30eefff22f508079e742190f7e99812381e1a25a2efb52acaf5e04b48182eaf84c4ca93f
SSDEEP 1536:ZFMPiuYGgQpnNPgGZ6QYIhRFS/wM6ppOGKnlilbMzOx8:ZFtU7pR8QYIRFS4M6LjKnlilA88
TLSH
T1C1B3392437E8026ACE568738FC736A909AB2F7C24312E5DF5198888E0ED77C16673765
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.Loader.dll

Path C:\Program Files\Anizium\System.Runtime.Loader.dll
Size 15KB
SHA256 f7649dab9982442102f003ec50daefbd917a5786a354a01783cc50a59191a7b7
MD5 ff8aecd67d34e78c8ff5de1204aa3051
SHA1 a0c41557995411b09edda0ad3daecd6569d3d1b2
SHA512 6806d824ece8c6546892db769a80aaaf06440eab03d5c50970dddc4f734931e4313166ab3ad1bec2579cf492d5cf5694b9b104dc305d8aa3fd7f5dfa2433cf14
SSDEEP 192:/4lhKxHaW52GWf7WCWKie1BzBWsea4WTWpU9NBJYh5wE3X01k9z3AinvfLu:/4l66W52GWf/ZlNKU9xDE3R9zXvfLu
TLSH
T19E625BD2D7685203FEE79EB089A5DD833D38B3D68861DA6B0199F4481C53BC1DB31629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.dll

Path C:\Program Files\Anizium\System.Runtime.dll
Size 43KB
SHA256 2cff1a6e45ed1ae6be7d5a0d84d81d1d563d30dc27363c01bb167982c712e0a4
MD5 15f6a79e25e84a151727335b5866eb17
SHA1 6c79b1b653e4bf5646acc6d6ef8ffdbc50a2b72a
SHA512 403612c420769c505a7e7a16a5353202a56e3e56a1d7b4a5936504b80e068c3809b0f8a3cf56c962425762b8af103240c6ca153918a31a1aa07b5c926e0d9d1a
SSDEEP 768:MMmlf72E79fFFK/T5r57G52E3Jgz7c7u501uENPoL+0GfJT4YA96hKWTuV/5Ohcx:tGSA3Yvp50v4bSRS0ELdzLx
TLSH
T119130774EE8A1333CD8AA772ECB3A4A10DFA73C578775FB6444AC61660CB3844236765
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.Thread.dll

Path C:\Program Files\Anizium\System.Threading.Thread.dll
Size 15KB
SHA256 fe0c4f196a5b95c432386bfc12371b3cfd1a2758dff237ae4be8af868aa0ea02
MD5 f7129732f8e04b1d7d8f32bbe6f6c32e
SHA1 ca812c86c1b159763a6b4fa2ab287f376d59b4d2
SHA512 122fe1c41d17e01403776d5a42a4d66e27febc233ba9146ff7a0d1693c6375f3aab3ed2fa2fddf9dff0b37f8bed0462fb9df2335344a13c5a72e7659e07e7a3e
SSDEEP 192:0TY0foz4dEpLx8ZkgZWcV7WfyrWCWKie1BzBWseawWy9yIqKIxYPVCX01k9z3Aa+:0LAz2EH8agZWcV7WfYZlN+LER9z1/xDc
TLSH
T136624AC6CB7C4143ECAB6E7095A8DAC33C7AB7C28860DA5A0296F5541C177C8EB3162C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.dll

Path C:\Program Files\Anizium\System.Threading.dll
Size 81KB
SHA256 44ea90ab5b5eded6b6645be7e0381606868ad8719307b8ce7634f707d8ae014a
MD5 789af32110bca1a287648b7bfdbbf37a
SHA1 0469ecd49ddc2e6d624eaaa0d59e39b1b7ab3977
SHA512 b7fc863f8a903fe479f2380bc518ea7a3b9282f15b37e3b711d5aa293b2c86510008f78e7a285273dd267aef661a128dcf3b14ccb627f0ae9fc351cbc1919459
SSDEEP 1536:P1WpN8Q4ogHwXQaJUglR5dRb898cOfonq4zU:P1Wn8Q4oAwXJlR5HQKcOfonq4Y
TLSH
T196833811A3E8050AF6BA877EC9B756059076FAD60B10C5CF1199D00D2EB7BC0A7F35AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Xaml.dll

Path C:\Program Files\Anizium\System.Xaml.dll
Size 1.3MB
SHA256 f05272f69172c3007c6ab0f882908ec74e1b15b3ae578d2e58eb9f6979e6da5a
MD5 6e937e862b4018aa9d10156c9ef493a1
SHA1 5a72b11526f1b02afc1d15e225cc8df19052c872
SHA512 9bf267b16994de7143ddf424a149892e3aa5cc4a07f237ab616a6864b5dd59606e490f0d833f1adf34e3d7d703e67a8a5100e7285f4743a73086894b2ad6a61e
SSDEEP 24576:6tLWzCTpklEqj4peX9CpuWSmKm+DhRKf2hQGk2FJ5OHHNE:7SQMG9CpuWSscQG
TLSH
T152656C266BD8861DC7BB42BDC5A38121D9F1E4431321C5CF8411EE5E2F87BC37A7A266
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Xml.ReaderWriter.dll

Path C:\Program Files\Anizium\System.Xml.ReaderWriter.dll
Size 21KB
SHA256 9aac22d3bf8738e1e2d823ead5193353a2711c9d00aab653aa558c6698ee5c21
MD5 ad4e559ab24a04d6f45e924e1de344cd
SHA1 c5da262d57d8d83a82ec79260b0c19407c578c5d
SHA512 d91b23575f2939f199f729f004a17fa4bdfd1aae3bb17d0715ecb69da54674c308c79bcf817f7a8d41fb7ffce0f954558ddf8a22aacbbdefa90400f20f2175a6
SSDEEP 384:d1G5qkxK67ex4FC8rW1MAWfrZlNOFAAUyR9zVYQq:b6LzJuFAAU+9zVa
TLSH
T102A209A1CE64DE13EDAA7BB0C6ABD4C33BF5629224718B75D585D40B8862380B737714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WindowsBase.dll

Path C:\Program Files\Anizium\WindowsBase.dll
Size 2.1MB
SHA256 b66afcda2c350074ffdf9e89108ac4ed14a36f42522bb335c024cde02595672f
MD5 6599553b074d127e02c7230f63ce514c
SHA1 4182ea861f5ee6f6c29e3f3199d934246789c7ba
SHA512 ddb581ed9b71ccec5c5219354a3963ff00fa0b867b049ecdc7f8c161df1b79bafa2902a806693f64f4b5182d5b49845ea5c7307b147e852e46e47532795d4910
SSDEEP 49152:Sj7W+ZVYQyECR9A5SEnW6Qzk0I4J1/0avTW/44oVy58:p+FUgEL018
TLSH
T177A57D1B73C84612C67B82BE85A38111D5B1E4A31712C6CF6C05EA6E2FD3FE1C67D266
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clrjit.dll

Path C:\Program Files\Anizium\clrjit.dll
Size 1.9MB
SHA256 e97856d65b3c780bcd8cd4562fc766da4d62ce70e078bf2865624bff8bef5980
MD5 1dc5432435249aaa8c3c34234e73adef
SHA1 6bb0d95252b56b2ac32e47903e21d215eb8263f7
SHA512 74069c7690dad413ffc5d343ada381e4261414c1b66d52ee9978e8eb00f6f2ef9996f867ddd38e72ac92bb9b1ca32d8aff077d5ec3aadf4bc602da3186ae295c
SSDEEP 49152:854FiSymN+Pum5UFVDELP6EsbpiYtkeUzgt2gPTXwOJdZSj04L6pYIGsfJGggQC:8QypCFVEBYtkeUzHgPTXvfQjBeptQgw
TLSH
T10C959D46A3E800FCE4BB9174C5134E17EBB2B84623708FDF52F44A566F277A25A2D319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coreclr.dll

Path C:\Program Files\Anizium\coreclr.dll
Size 4.6MB
SHA256 d4656324884b3c04c27520cb66a5129e3346275fd18e61803a204879d49b5e81
MD5 ed59cd8c80a123fadbaaf69428fbd976
SHA1 21a06eb11b3d26cc10e9926a1c51529dad5a19f4
SHA512 0e790486edbbba908588d6bf491867288367bb93c3b7cd9238ff7e42315d6554f0240331bf88602db6a9508aca98454b97c1c31f19881d53a08245267c7e418c
SSDEEP 49152:xdMAKU6FrHBjprFXVaFhnTJIVhtqogo3UaWb7b7b7b7bJ7b7b7b7b7Dx5Z1VCCRM:AAP8HBAFhnTJIVht4YMX294m1Od90
TLSH
T130268D16F6AD009CC4BAD078CAD78927FAB274551738DFEB05A04EA52F237E16A3D311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hostfxr.dll

Path C:\Program Files\Anizium\hostfxr.dll
Size 365KB
SHA256 729a16b9e4a5f4c9d0bb1740e07320c84da798ba37dbfb05d8888644bc3e12d1
MD5 6a3550b19e58a36f177bcecf75ee6226
SHA1 5869545dda759fde6f10f70d9d7d854a75c2be72
SHA512 7de9271a2500ff9c34160b49e94ea68bff5de648a600e6ba89fca17c8329327007a5e0afec6769f4228fcdd6164c3251588d84eff2744a365c53290a55701508
SSDEEP 6144:Y4ipHMZyxuvYXbhnpuVuogUK7BXrGyc/PuCrG3OxeP2TqDoTTNdcwv3zmjzsXiXU:26ObRTBXrjjCqeSw7cLXU
TLSH
T13D842916D7E8047DF0B79678C9B28901EB727C894B74D6DF139089A61E73BD09E39322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hostpolicy.dll

Path C:\Program Files\Anizium\hostpolicy.dll
Size 378KB
SHA256 320184554da948290885e134a9dce004e508dd781da98be9626b4c470e3f5df9
MD5 54aa81b784128b2bbbbc2711a7ab0a15
SHA1 49e68fc616a3dd0c805611d44874915acb5e421b
SHA512 277b5bdc10051d9b798e706cad174edd2c9a0dc6e09478db60d5ef5d172eaec141c3a29cf1868679e261e4ce3b95cad32c50445520e7fe7cbbb88500ac3dd93a
SSDEEP 6144:1STQivnox3InBKJv6zpJfBJ8P6vEoqThv1Ze6zuhD4rHizUD+ZLlAUMsQY+pFdwm:1K6Luj78PG4CAsQY+HdwgIV4r3
TLSH
T18F843916D6E8007CF1B7E6788AB28941EB727C8D47B196DF139089661F73BD09E39312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3125a86a3764ac4c729109e3889a4c92bdc23ea8c3b28498ff3acb5ce9641f40
MD5 3e5670c69fa5aff749404bc48de40ae4
SHA1 d1194575da25796099b2d749b4033550e5c44a7b
SHA512 70b7fa93644fd92efe277c24198e96454ef2304b8ac8891200556f39d936aea561ec73063b84895b39d7d3880c7e06b86b1c3c06b6c35713e4fa4b00c704c855
TLSH
T176D0121372160134D41031330453A6490500E51BA0098002583A871D1F140900D03863
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Local State
Size 16KB
SHA256 bbbe0d0c847747cc3ef0c225e8fe1824f3b0711e4bd124c8a0543d5f65622e75
MD5 827fecdf0f88e89373c48421a8847ac9
SHA1 938d3b2da928a5219ec4e688dc5628eb1690659b
SHA512 017a67d780d2726800d274c9cd89b9df67f885206c406d41a9f34e3035bfbb8396491fbe546c92e939c15b416d6098737bafeac7e3527fb57aea480636a0c8b8
SSDEEP 384:zN+aQikB+z/xvxjg/qhEwNbw3XPIYEx+1M9zw:M/UxvxjgC+b3AYG+1MFw
TLSH
T1ED728E3755683E37A9F2F944794D0B8BDFB584B390C16AA88EED5F0D0A9B2D41303D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Local State
Size 1KB
SHA256 37d40e6f97c3822900702f9bcd8caa40aa9ddfdc9ce6af9fd8c550df48d3c958
MD5 56dc39f2f4ac86ab1088bd43bffb8ec0
SHA1 5209c2f1b5445419ec73a65666958d8711837883
SHA512 aee0dd7189550d1ccfef4ab18a610542a3877110065caeaabe9083c44ea42af4a268e9f043cd1b63f48e9b5cd7ec3128558758e91338d9d190258f12fd437aa4
TLSH
T1CD31157394D02B32BDD2F545B64166CBBF2111ABD1518E48EADD4B2C06E65CCA63BC22
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Local State
Size 2KB
SHA256 1d1775a3c0b1035a185f43a54a3d6f35679a368d71eeb91a1804cd39bfb9712f
MD5 59984692c968b09e6b7ccd1f7e8773e0
SHA1 dc59902f3b764d95cc4063bb050be3cad24888a5
SHA512 73296a2cd0c6a22f0ede89bf6c0e57257348c6879e4b50bd7dbdaa0388942621215edb537cae4bf70372c8d41f239578f989ab133a0f3123c6a06bdaf6758baa
TLSH
T14351B673A8446A37D9E2A544B9493B87EF3641A6A6511F94DEED0B1C01EA2CC2313C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Local State
Size 3KB
SHA256 e05d808da93eef745e16eea18e9f91263a6954dcddd4212a06e3b6a501676c70
MD5 93fddd4fe3a6bcd75eead947aabeeed8
SHA1 08ad027ec907cacc05db43c01d7ad3ee4956054f
SHA512 1c11690c3bb9669dd06cd96998cb60666fc591c116f64746f97e43b01ec9816c8127af07c6636a76f05f2c57bf8dcb5ebb60d809fec250aaa601dab716bdc255
TLSH
T19C719532A9A4A9379DE2E944B8853B46FB654127E5813F98DAEC0F1C01EB3C82352C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5929f4.TMP

Path C:\Users\Admin\AppData\Local\Anizium.WebView2\EBWebView\Local State~RFe5929f4.TMP
Size 1KB
SHA256 8e27b3791aa1adfb50106509f5c06d96437534be2f6271226cd248db0eb4670c
MD5 a026e37d80409a69b305a12b9adf933e
SHA1 6c0f770156e4cf1cce1253747deb42aa9bcbe64b
SHA512 f89fddfe22b93948911c4c1e77c24bb1d2eb2765a8f75b884f142a78e8ce425be7ffd51e70ed85999cc3887867e693b5da65ae1d5d8da66343bcb4e223037847
TLSH
T14A214073D4942A32FDC2E444B64172CFAF1051ABA2408A48EADD0B2C0AEA5C89637C22
MD5 SHA1 SHA512 TLSH

Submit Download

windowsApp.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-VSOCCKOLSE.tmp\windowsApp.tmp
Size 4.2MB
SHA256 9c734fe0a010055cf8de1649df03da6c9fe19d6d37518c4935ddbb3e14ec1583
MD5 df812ad1e9907d713df89a554f2f4f58
SHA1 e259805efacb6dd9baf76b23cc71b4083972ac98
SHA512 bb6e759458f9b98b748391846deffaac400fa8d883c2d450581e51eb44fe8baafa122d84af2122e4c81102c8903d0b0dd24d44f53319268cc666e033fa42b93f
SSDEEP 98304:h9SZUvl30aj90ZFcvdQ0hdgvminQLMj+J7333j:+ItJj90Z6RgKwk
TLSH
T12A168E03B388753AE4B71A3A883FA654583F7E213A26CD4B6BF40D5C4F396416D2A747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2468-1134-0x00007FFF969C0000-0x00007FFF969C1000-memory.dmp

Download

memory/2468-1358-0x0000029F5B8C0000-0x0000029F5B9AA000-memory.dmp

Download

memory/2808-0-0x0000000000C70000-0x0000000000D4F000-memory.dmp

Download

memory/2808-7-0x0000000000C70000-0x0000000000D4F000-memory.dmp

Download

memory/2808-1110-0x0000000000C70000-0x0000000000D4F000-memory.dmp

Download

memory/4960-1207-0x00007FFF969C0000-0x00007FFF969C1000-memory.dmp

Download

memory/4988-8-0x00000000003A0000-0x00000000007DB000-memory.dmp

Download

memory/4988-11-0x00000000003A0000-0x00000000007DB000-memory.dmp

Download

memory/4988-122-0x00000000003A0000-0x00000000007DB000-memory.dmp

Download

memory/4988-1042-0x00000000003A0000-0x00000000007DB000-memory.dmp

Download

memory/4988-9-0x00000000011A0000-0x00000000011A1000-memory.dmp

Download

memory/4988-5-0x00000000011A0000-0x00000000011A1000-memory.dmp

Download

memory/4988-1106-0x00000000003A0000-0x00000000007DB000-memory.dmp

Download