5f0da6c57f6428f5b2c3f456e96484d05565c2ce0603c7b96654fccdd5c1a97e

Analysis

max time kernel
166s
max time network
170s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Clip Studio Paint EX v4.0.0/CSP_400w_setup.exe
Size 442.4MB
Sample260822-pegmgsyvay
SHA256 5f0da6c57f6428f5b2c3f456e96484d05565c2ce0603c7b96654fccdd5c1a97e
MD5 f1f603ee8acb71dfad5ef5565e9bfeb8
SHA1 11bc465a895e23ecd0f420471ff72a98750b6f57
SHA512 7b96a2baf0c56373370f72edb78a9b3425b3f1a16235038f62f69dfe41b2af749f1150dd9dbdf084a230d2e89ec0e0be7267207e76265163a0b43c8fc6254ae3
SSDEEP 12582912:fTRDAOfymc2yapUk10I8M9Y3wRF/tkP2K3h2Uc8xJ:fTRUOKP2TF10I8RgRF/qPpcI
TLSH
T17B293317A484892EE4BF4631ADAF0D51BA647C336B31848B72D0FB685CF17C1BA73616
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Malware Config

Signatures

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 8 IoCs

pid	Process
4912	CSP_400w_setup.exe
4812	ISBEW64.exe
1236	ISBEW64.exe
4088	ISBEW64.exe
5796	ISBEW64.exe
716	ISBEW64.exe
2108	ISBEW64.exe
4160	setup.exe

Loads dropped DLL 23 IoCs

pid	Process
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe
1352	regsvr32.exe
3628	regsvr32.exe
4456	regsvr32.exe
2960	regsvr32.exe
4912	CSP_400w_setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\boost_system.dll	CSP_400w_setup.exe
File created	C:\Program Files (x86)\InstallShield Installation Information\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\set41C8.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\gif4EDF.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\other\F5470A1.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\resource\japanese\6DA8DD7.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\api-ms-win-crt-stdio-l1-1-0.dll	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\portuguese\presetWin_1.spws	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\indonesian\8AF6848.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\HTML\mobile\offline_es-es.html	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\spanish\pre8C97.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\549DCB7C-5B31-4E8D-85B6-1D71004B3A63	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\german\742DEA58-ED6B-4402-BC11-20DFC6D08040	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Mac\indonesian\presetMac_1.spws	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Mac\thai\presetMac_1.spws	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\api-ms-win-core-file-l1-2-0.dll	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\other\F4070A0.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\api-ms-win-core-profile-l1-1-0.dll	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\other\UXE82AC.tmp	CSP_400w_setup.exe
File created	C:\Program Files (x86)\InstallShield Installation Information\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\0x041A6.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\korean\3DC6B29.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\resource\thai\BFA75C0.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\korean\Mix80D1.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\french\Def83BA.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\TGCxsPlugIn.cfpi	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\clipstudio_assets\asset02.fto	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\indonesian\9D9685A.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\resource\other\8776F99.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\portuguese\4CB47456-1E3C-4ECB-B114-D7FEB961ACC6	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\spanish\58F2FDAB-882A-468B-A03F-9D420E26F685	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\ICCProfiles\App7CD3.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\french\MixColorSet.cls	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\api-ms-win-crt-string-l1-1-0.dll	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\chinese_tc\pre8B31.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\resource\korean\6DA08F47-7F05-42D4-AD3C-0BDC557FB08A	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\LipExt.exe	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\F549CE76-1849-437C-82E1-27A3AD67B5FD	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\french\DD76526.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\CLIPStudioPaint.exe	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\sku55C0.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\thai\4ed7498.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\thai\97CDB75A-B29E-4AA3-A591-715B5C9B6701	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\chinese_tc\MixColorSet.cls	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\german\Mix80AB.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\indonesian\DefaultToolModifyKey.tomd	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\spanish\4ed72BB.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\resource\japanese\E79771C.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\api-ms-win-crt-math-l1-1-0.dll	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\api-ms-win-core-sysinfo-l1-1-0.dll	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\spanish\DD705E0D-FB6F-4DFE-9887-305FD87766AE	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\HTML\mobile\off805D.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\german\presetWin_2.spws	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\french\B8DA21EC-427A-48E4-8A50-E7EB8988580F	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\spanish\0238E722-8627-47F2-B174-2F6EBE210C1C	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\thai\3DC7483.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\other\Mix80D2.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x2_8108.tmp	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\PlugIn\PAINT\Len5C85.tmp	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\0A24C606-7FC7-4694-930C-9ED7407B9A18	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\indonesian\3D51C869-1035-4A35-BF52-CBA0874A3365	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\thai\E79C2AC5-BC3F-4838-9E87-F49B629F84B5	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PrintCoInfo\PrintCoInfo.xml	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\german\presetWin_3.spws	CSP_400w_setup.exe
File opened for modification	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\giflib.dll	CSP_400w_setup.exe
File created	C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\other\7F961F7.tmp	CSP_400w_setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3724	4160	WerFault.exe	108

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CSP_400w_setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CSP_400w_setup.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 0000000004000000ad3b1fc6af0fc0350000000000000000000000000000000000000000000000000000000000000000000000000000000000001071020000000000c0120000000000000000000000002701010000883801ad3b1fc60000000000001071020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0830200000000006025c501000000000000000000000700010000e84101ad3b1fc6000000000000d08302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9c701000000000000050000000000000000000000070001000098d4e3ad3b1fc600000000000030a9c7010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9cc0100000000000005000000000000000000000007000100009854e6ad3b1fc600000000000030a9cc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\pepFile	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3sFile\shell\open	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\clipstudiopaint\ = "URL:clip studio paint Protocol"	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E6FA56B-AE86-49F9-AA1F-2517D81DE85C}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A90B5652-D680-4230-B3A4-A41FF0A2143D}\Version	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6603C743-FDCF-46C1-86DC-750EFA184B89}\1.5\FLAGS\ = "0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6603C743-FDCF-46C1-86DC-750EFA184B89}\1.5\0\win32\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\ClipPreview.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\cmcFile\DefaultIcon\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\CLIPStudioPaint.exe,3"	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\cmcFile\ = "CLIP STUDIO PAINT Page Management File"	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\pepFile\shell\open\command	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3cFile\DefaultIcon	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3oFile\shell\open\command	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.xdts	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.clip\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}\ = "{A90B5652-D680-4230-B3A4-A41FF0A2143D}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.cwp\ = "cwpFile"	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\c2frFile\shell	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lipFile\DefaultIcon	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lipFile\shell\open\command	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\cmcFile\shell\open\command	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3cFile\DefaultIcon\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\CLIPStudioPaint.exe,8"	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{99B163C5-D64B-4AC6-B162-EC1051140EBE}\ = "Lip PreviewHandler Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E6FA56B-AE86-49F9-AA1F-2517D81DE85C}\Version\ = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lipFile\shell	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.pep\ = "pepFile"	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3cFile\shell	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3oFile\shell	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3sFile\shell	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\clipstudiopaint\DefaultIcon	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9997AAD3-42A6-46C8-A798-B2CF6D50A6E4}\1.0\0\win32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A90B5652-D680-4230-B3A4-A41FF0A2143D}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\c2fcFile\DefaultIcon\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\CLIPStudioPaint.exe,5"	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.pep	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3oFile	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{99B163C5-D64B-4AC6-B162-EC1051140EBE}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{99B163C5-D64B-4AC6-B162-EC1051140EBE}\Version	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{99B163C5-D64B-4AC6-B162-EC1051140EBE}\Version\ = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7CADE404-DCF1-4460-9FEE-2548CE01ECAB}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9997AAD3-42A6-46C8-A798-B2CF6D50A6E4}\1.0\ = "LipPreviewLib"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.lip	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.cmc	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\clipFile\shell\open\command\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\CLIPStudioPaint.exe \"%1\""	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ipvFile\ = "ibisPaint artwork files"	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\c2fcFile\ = "CELSYS CHARACTER FORMAT"	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\clipstudiopaint\shell\open\	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6603C743-FDCF-46C1-86DC-750EFA184B89}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6603C743-FDCF-46C1-86DC-750EFA184B89}\1.5	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\pepFile\shell\open	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.cs3o\ = "cs3oFile"	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\xdtsFile\DefaultIcon\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\CLIPStudioPaint.exe,11"	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\clipstudiopaint	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E6FA56B-AE86-49F9-AA1F-2517D81DE85C}\DisplayName = "@C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\ClipPreview.dll,-101"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lipFile\DefaultIcon\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\CLIPStudioPaint.exe,2"	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\cwpFile\ = "CLIP STUDIO Store Export File"	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\c2fcFile\DefaultIcon	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\cs3oFile\DefaultIcon\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT\\CLIPStudioPaint.exe,9"	CSP_400w_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.clip\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}\ = "{9E6FA56B-AE86-49F9-AA1F-2517D81DE85C}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6603C743-FDCF-46C1-86DC-750EFA184B89}\1.5\0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ipvFile\shell\open\command	CSP_400w_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{99B163C5-D64B-4AC6-B162-EC1051140EBE}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7CADE404-DCF1-4460-9FEE-2548CE01ECAB}\Version\ = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9997AAD3-42A6-46C8-A798-B2CF6D50A6E4}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E6FA56B-AE86-49F9-AA1F-2517D81DE85C}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6603C743-FDCF-46C1-86DC-750EFA184B89}\1.5\HELPDIR\ = "C:\\Program Files\\CELSYS\\CLIP STUDIO 1.5\\CLIP STUDIO PAINT"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.ipv	CSP_400w_setup.exe

Suspicious use of AdjustPrivilegeToken 11 IoCs

description	pid	Process
Token: SeBackupPrivilege	1388	vssvc.exe
Token: SeRestorePrivilege	1388	vssvc.exe
Token: SeAuditPrivilege	1388	vssvc.exe
Token: SeBackupPrivilege	1112	srtasks.exe
Token: SeRestorePrivilege	1112	srtasks.exe
Token: SeSecurityPrivilege	1112	srtasks.exe
Token: SeTakeOwnershipPrivilege	1112	srtasks.exe
Token: SeBackupPrivilege	1112	srtasks.exe
Token: SeRestorePrivilege	1112	srtasks.exe
Token: SeSecurityPrivilege	1112	srtasks.exe
Token: SeTakeOwnershipPrivilege	1112	srtasks.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4912	CSP_400w_setup.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4912	CSP_400w_setup.exe
4912	CSP_400w_setup.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 800 wrote to memory of 4912	800	CSP_400w_setup.exe	89
PID 4912 wrote to memory of 4812	4912	CSP_400w_setup.exe	90
PID 4912 wrote to memory of 1236	4912	CSP_400w_setup.exe	91
PID 4912 wrote to memory of 4088	4912	CSP_400w_setup.exe	92
PID 4912 wrote to memory of 5796	4912	CSP_400w_setup.exe	93
PID 4912 wrote to memory of 716	4912	CSP_400w_setup.exe	94
PID 4912 wrote to memory of 2108	4912	CSP_400w_setup.exe	95
PID 4912 wrote to memory of 1352	4912	CSP_400w_setup.exe	104
PID 1352 wrote to memory of 3628	1352	regsvr32.exe	105
PID 4912 wrote to memory of 4456	4912	CSP_400w_setup.exe	106
PID 4456 wrote to memory of 2960	4456	regsvr32.exe	107
PID 4912 wrote to memory of 4160	4912	CSP_400w_setup.exe	108

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Clip Studio Paint EX v4.0.0\CSP_400w_setup.exe
"C:\Users\Admin\AppData\Local\Temp\Clip Studio Paint EX v4.0.0\CSP_400w_setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:800
- C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\CSP_400w_setup.exe
  C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\CSP_400w_setup.exe -package:"C:\Users\Admin\AppData\Local\Temp\Clip Studio Paint EX v4.0.0\CSP_400w_setup.exe" -no_selfdeleter -IS_temp -media_path:"C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\" -tempdisk1folder:"C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\" -IS_OriginalLauncher:"C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\CSP_400w_setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4912
- - C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe
    C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{23847522-5754-4070-A03A-C1096D0A2A54}
    3⤵
    - Executes dropped EXE
    PID:4812
- - C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe
    C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{50C9E54F-30DF-469C-8C60-8DEEC5C92FFA}
    3⤵
    - Executes dropped EXE
    PID:1236
- - C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe
    C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{68AD4D59-A992-44D5-8969-984C62DB20C8}
    3⤵
    - Executes dropped EXE
    PID:4088
- - C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe
    C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{D8A11F1B-F74B-41B1-AF1F-E4A0C165CB95}
    3⤵
    - Executes dropped EXE
    PID:5796
- - C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe
    C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{F0D2346A-7984-4A76-BF3D-FCB9F9E0C4DA}
    3⤵
    - Executes dropped EXE
    PID:716
- - C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe
    C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{3C32F59F-B293-4247-9C5B-E6C9ECC66237}
    3⤵
    - Executes dropped EXE
    PID:2108
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\LipPreview.dll"
    3⤵
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:1352
  - - C:\Windows\system32\regsvr32.exe
      /s "C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\LipPreview.dll"
      4⤵
      Loads dropped DLL
      Modifies registry class
      PID:3628
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\ClipPreview.dll"
    3⤵
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:4456
  - - C:\Windows\system32\regsvr32.exe
      /s "C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\ClipPreview.dll"
      4⤵
      Loads dropped DLL
      Modifies registry class
      PID:2960
- - C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\setup.exe
    C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\setup.exe -s TargetDir="C:\Program Files\CELSYS" Language="english" AbortOnFileError="true"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:4160
  - - C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 756
      4⤵
      Program crash
      PID:3724

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:1388

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4160 -ip 4160
1⤵
PID:1060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ClipPreview.dll

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\ClipPreview.dll
Size 1.1MB
SHA256 de7861528a2ede91e65db7dc5380bb892fca3a8541ead76402b9b946bfef2536
MD5 a95990dc0c648bf614fe8611ac4ac96e
SHA1 5490b9997bbd6cf049d5ab95b0270babf7d95f25
SHA512 1d333f78001e4f62d70eb3419ebf7674e27f52f357d212807cbfbcb04c9a7caa557af0c1471c0414529560ea12371aa4bc683601b58c3a3f22a634d53ec02774
SSDEEP 24576:kbXnXoMMOszxh+9wJ5kW4GDvjOGh2yLAoPOc7oxS:gXnXoMwT2Gg6POc7o
TLSH
T1E1357C1AB6A800A8D17B81B8CA978643E7B274550B309BDF15E0576D2F37FF5963E320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LipPreview.dll

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\LipPreview.dll
Size 913KB
SHA256 6d6483f8c1eccd2bc342bfcdd87150e6de56705f92b4a4d68b8f54ba2e48e68c
MD5 cbaf5f0f49805d83e02985c5a7e4b22f
SHA1 6557f857c010da2ccdbb21eb26083e5f38af54d0
SHA512 2117650d6fdb1a6c12572adf9bcb137590f8d8467b99b3f12b37591a7b6216dfa3684d0c2e19f9e88c2a2764e0302b1919b66d2904306f889c0aaeb3519cd8e4
SSDEEP 24576:D//NeReH7xmzSBMOTvagIdKxBPOsPiso5zN:oRmxmzSBMObPRPisoR
TLSH
T1D6156A6AB2AC41B9D07B8179C9978602E7B274550B219BDF11A0836E3F37FE5573E320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

def7E52.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Action\english\def7E52.tmp
Size 12KB
SHA256 e2deeb4527e1e958066009a57bfde331aa5e998883418a5c7b2f2bf79bd8833d
MD5 cf44a124a47d8bbb54e6460aa243ddd1
SHA1 aef3e91e99072511c9f03edb37e57cdc2c8c7e2b
SHA512 6331c53a2f22dc4dace610f1890d748785a895186242c86e267521404695bf49147b5915f1fad201f938e7fbf082ecfd54d9541ec95da8d9bc953cc42ce366f3
SSDEEP 96:iUEdC9GFCpFZ1sqGzGhHNaYDySDDFQHAYnAfIeXNXQArAXK1A6q47g:ZEdCIFCRpd3DyiDqgYAQcREa1JqUg
TLSH
T1D9429189FA1E3B75820FA21A68D34D705575D59230EA035B69C6E8381F368F0BEB7F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrushPreset.bfps

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\BrushPreset\chinese_tc\BrushPreset.bfps
Size 132KB
SHA256 19bf401bd83df5fb3ecc3b549c3111c25c8a0d89561f53d45e3fcfcbc3012acf
MD5 1d64f10a9a882f82e73adb287124b153
SHA1 ce89c08c5986375fa53697209a4f024645c41e8c
SHA512 9548e7a0ad097f016b7a5a87201f18e32a860678c6fa655e25b310eb49e96797170a01ed054d65aff4648e2ae481b92df6178c8d09c8eb79198bb87eeffdbdc8
SSDEEP 768:k3cTF+gIqaEG9VyO69Eun8sUCk90PAIDdGd+/xi399UFpN7pH1yw+kSsyO9YdUzF:kkIqaEGXrN9mjq2Fbr
TLSH
T1F6D3652AEBD0312FD1FAE37309E686767B5168A156FA8DBF1C044307B8D0B7156A0B35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0017F48.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\ColorSet\english\0017F48.tmp
Size 664B
SHA256 7ed72062997aaac8d52c868b1fa542d96ef0a1e8c8f35053a0133dd1006e84dc
MD5 1f42515b421a9e00f154989d8408594f
SHA1 fca32dd425a5de207eb9b0062d39c8b858d2aaf2
SHA512 fa875a566a3feacf20b1d6dd7c5360fa93a52da4c80586b9249bce4e031aa337b451d1665f3a5887c722f221909f9e99735976e389a064992b5b0b8acddf1c6d
TLSH
T197012201BACDEB0DC9B322B4A968D17D114A7017EE40A19FBCC9530FAAA95806B508CA
MD5 SHA1 SHA512 TLSH

Submit Download

0027F5B.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\ColorSet\english\0027F5B.tmp
Size 4KB
SHA256 c6b8c74570d9c62f50c9e746e3b5c216c2d39f30e66ffbd341e8ffe37a4e62ed
MD5 a2fc3e07fe63d02710005ba134656d69
SHA1 bfcb098f59236d54011c6497d93e0520c5cd9ee9
SHA512 6cb49abeaba4a1a3271c162642a0a481b6d503a895702cf4545447c8d8f7b67ee0450103ff9bf972bb418368518d30880054c47f94ff10cf066d7c0c2f296ac5
SSDEEP 48:mGaGx8poKtg5yvSmmlDp54eEdSaFjTOBx2d6eUo659jAaBcgX:mGaGGpXgpmSlkdSaFjK/O6eU/X4gX
TLSH
T1949108837175AB1CDB3C153A04E9CDB88A123F186A914CCBB8F24D47624AC3B4B01AF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

def7FDD.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\GradationSet\english\def7FDD.tmp
Size 10KB
SHA256 bb245f6a82765fe054fd7c1f188bada52dc3e3d16b3ea6c41e488c75f7a4b9fd
MD5 48da4038e2557e34091ce884d85cc3f8
SHA1 162e7defb542bb21e1be2e547b086d03d08702b5
SHA512 75f2eb9c8765e1a20c8acbd898830f84e138078d4136baf2a91ebb0bcf540b436c58ba43428ed2ea85c27fcb6dac0bef849e6cda965482cc6ca4532747efa085
SSDEEP 192:im5b9+T++bZa+zH+HGPS+Ag+wtWKFjRUa+Y+Br1i+kJCo+y4+kx:nYSVXz
TLSH
T1D632F3817204F66EC0BAC3370C83C87D6569B802DA755ABBBED23F5F14B05A1697AF05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mix8071.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\chinese_sc\Mix8071.tmp
Size 208B
SHA256 bbf97139afb14eb9fcd9e655a580c1eaadc4528d418870e2d881edf95061e97e
MD5 3c264eb0d26ffc83967a02c5ccaa6e5b
SHA1 1f96ada257aaa660ed1194ad824e5f2bcd64a56d
SHA512 c6fecc1913ac3fec4c39ec0c74fd52e533d683f61c93bb5beaba3ec1f1841cc864d79c0305669ad9a111ba3e39110a2208b49015f46daee5282bb3faf7a055c2
TLSH
T16BD09201F8EDE54CD5BD44BB0E44CA7E86AB3A7889118603B1D67B5FD06802A9F84AC9
MD5 SHA1 SHA512 TLSH

Submit Download

Mix8074.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\MixPalette\chinese_sc\Mix8074.tmp
Size 28KB
SHA256 9f50415605cf72a788b7febd6b7186b88bc94976d98c90730cc5c7d3299ff39a
MD5 252e16d944b8d8b953966dda2d64c1c5
SHA1 98e1b6cb887b659d041436386df6013a6bb0c0ae
SHA512 cf326f41d42b05f04a4a5f9ff6ea566020842dc7e2fb1bf978383e51cfa1d5ba2a599e64fd3b4207074435d52b1368c72495de80751b47f9a69ea6cc3947b78f
SSDEEP 384:/6/ZSQfuY6/ZwbtYMAQfuRCzpzbV+i/r8:mZSQfEZwCBQfrzpzbV+i/r8
TLSH
T1F0D25C25F3903326DE4685B318F102F7272CB0F553BB19422A6246E6EDE62B3563C5E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

x2.8109.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x2.8109.tmp
Size 2KB
SHA256 e6c5e56ff53b0b87d23500efa6d52227e35634c745910ce8c1f91aba47424a94
MD5 0fda7bd7122f3ad43fc8627a309c7112
SHA1 2c80134128aa802936c561410a779f3c74a1f775
SHA512 74309f75bd68f48ab6f8af7ad1dc6da258157f213a7394600576c189392d576789c8e0a4f654b2b0717ab2b6bedcc8df453ac98ed7c3c485585ff460070f74b9
TLSH
T177513BA982459654D0E9CB45C477A3AE571D0D5C2A9BF52DFC0A0048BDDE6451D10CEE
MD5 SHA1 SHA512 TLSH

Submit Download

x3.814D.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x3.814D.tmp
Size 2KB
SHA256 1a19bcda2e9a09baa829f14cac088486de9877bff1e7565ee0e31e41b6f48096
MD5 e7ccc63bfd6d5d804f99bdc5a5c5a7b8
SHA1 77b7ed73789f3aca81fac70623f5d008c3785d7f
SHA512 0a38c3ff6f6b6e14d83c11aa0bfec10598a3e3580017caff9210f0c32e18b4a1c71ce1c27da37e5548c28825f36f209991e9e17bf4cba409752e8e97866ac096
TLSH
T199513BA982459654D0E9CB45C477A3AE571D0D5C2A9BF52DFC0A0048BDDEA451D10CEA
MD5 SHA1 SHA512 TLSH

Submit Download

x3.caffemodel

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x3.caffemodel
Size 162KB
SHA256 581841243358dd57ef7c25fe9ad47371281dce1c7155ceb2d93216e2a31fe98b
MD5 dbac9c98092aaee1333e6daf4b68757f
SHA1 e6e09b4cd466781cba6b965cd3ff0e0e7ab311d2
SHA512 5717a69352aeec96e920df35dcb3efcb9b24bfe083e6f971b4c0407e5e2fa8cf986204ea60ca05376575f73d7a2ad416f86b8a0aa08d7607bef5356745959f98
SSDEEP 3072:C/IRGv+/QEeQSTrppRLtJy8vwh1A3pwBKNfOXRgK8SE:ItvlQST9pbv/wsNfsgK8h
TLSH
T1CAF323EDAE038BE3CDAB5248CD4AC95EDA4989B44BFDDC5A4C449343F5A6F1089035DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

x3_denoise.caffemodel

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x3_denoise.caffemodel
Size 162KB
SHA256 e8c418ad1cf212e126d319300ab0f315c00dc0e56da2c437426e5796ccf7ef78
MD5 1340c0f0810379527db9f4f65b9d3239
SHA1 6d88a101da96d79437b6bd72ffe04ca20367827f
SHA512 08fa656550e8d9e7f47da5e959c1bf365b4b563ef3dd4047c3225299574745ad53304382f0af6dafe95737b452c4043544437594c8c9aa16050a2db6f3424049
SSDEEP 3072:XIbGTXzqNm7hiqLdvBZvnZuCAkk7Fv1D+ft6QCxTW89:0mXzqQdLHhADp1q16QC1WM
TLSH
T196F313029609E7F42AD6309CFFC06DF32AC816955A05D5ED3E13DE09722AB14E2E72F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

x4.8171.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\PretrainedWeights\SuperResolution\x4.8171.tmp
Size 2KB
SHA256 b5ca250b3ddca65a49af4d0eb0979905e7e4c2646cc902ca5e44c8705faa380b
MD5 913fa4b5db394a61d6c14d80c6894ae5
SHA1 48df456f4018ba299b87a3b659ca2f2ae934a2b1
SHA512 1c2b37cae6d4660cff282ba5b696547e42a8a316c2b1dd54dd1e0415fa5daa914c224b7ad57f8b7e0f50a7981790896c88a64f238e5ef13f9d0f52344edfd166
TLSH
T138514BB982459A84D0C9D745C02773EF575A0D5D3A9BF52CFC0A0048BCEF6085D50CEA
MD5 SHA1 SHA512 TLSH

Submit Download

DefaultToolModifyKey.tomd

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\chinese_sc\DefaultToolModifyKey.tomd
Size 24KB
SHA256 9fab804a66700c5f55e3a8394bcff4c644a05721b04d7533817182a7197f5c30
MD5 79bf167ce9881922d7e4affaaafc509e
SHA1 85eec7898b5ac6136aaa5880f4c2def16f3582c9
SHA512 e3f1b1bec3d093e77aa2a6f7f85cd62d078c6c04a7e3bfe62fcc16be8d9916866788717515b7f8d9d63979e2673d3a0ce79858ca0ef6eb2a8354400320b9c3da
SSDEEP 384:Pl5alnAlF5alnAlYKvIDxBh+Xj54DfqaPp:tAdAlFAdAlYB
TLSH
T1A0B27329EBA166B3D1BA0F7A48DBA7113539D8A047C3273B4934A3305DE53502BF9DE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditImageTool.todb

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\chinese_tc\EditImageTool.todb
Size 832KB
SHA256 320d82e402fae02beef76d657feafe81b8a153387d75cdbddace0858b17af84c
MD5 0a66049137da497af43a83a322b2c454
SHA1 3775d498b3991a75adc5dadf39c7af037fe24380
SHA512 0ecb25283d1a618deda2664fcde838a71bdec22063985697021a779648872c8b82e4b2bb8148d8a2b316808581475c90e6a13e369f490507780c5cc6d94fa66a
SSDEEP 3072:ViKCOnG9utxruPn8nznAnAP4TjKnAWwRiky05TET7Mwb8W22vX6oyZIYpo:7G9wqn8nznAnZ2vX1
TLSH
T16605553AFBC0716FC5F6D73258E743B67B602492A6B98D5F2440030BFCE57612A64E68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Edi829B.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\english\Edi829B.tmp
Size 837KB
SHA256 cb2ba56d3778091443f4e983e131fdba4fed324c454d539088eca20f6b406ac3
MD5 e0e183b831bab06e6caf991edb760392
SHA1 a17306a577b7b8d22da03e069a423bae48b1ebea
SHA512 33c655733bf68cd01a09fb77f35d31095b0d5042a9de1edd6f0ea7b4faa8d5678d2c00e6e52e2b631ff422fda7242d970b6e58440bf87cff4006ae8d18510b95
SSDEEP 3072:DiKCtKIBBckRa+ZpQRguPn8nznAnAP4TjKnAWwRiky05TET7Mwb8W22vX6oyZISM:5kvqn8nznAnZ2vXV
TLSH
T16F05553AFBC0716FC5F6D73258E743B67B602492A6B98D5F2440030BFCE57612A64E68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UXE836A.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\english\UXE836A.tmp
Size 708KB
SHA256 8b096197fa0a56810a35704bc8494f7a4645fbc232ae1c83e2710d759ba8ce3d
MD5 e31a3ba7b65d1997cc40cb016603c07e
SHA1 fc2059ecea060235e9c2af936decd4cb7387a023
SHA512 0eb91c19665628ac8bf840c3ab00eb9f44e25ec72762388881b661412cbf7d8673e1e15d45350f41408e51a26e78911b5d4dd0f3266832f16b19736eb30197c1
SSDEEP 1536:0+/sIme5yJGz/JKjRdX3NjzyzluBded/wwmjoI8XCCv4n4n4n4N4n4n4n4in5nZg:0UmU2RdX12IA9m9c4n5nZn5nhTOxvao
TLSH
T148F4263AFB80226FC5F7D73358E303B27B6414A296A98D5F2841430BFCD67726964E58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UXEditImageTool.todb

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\french\UXEditImageTool.todb
Size 708KB
SHA256 82083088a7eed5932f8477064c8bf8bdc35646fbfff445b33eec284264149da0
MD5 8ea6828e00bd136526defd358a615950
SHA1 59b97cfe1a0f375c0758d2a0f98616b487eb25dc
SHA512 03454ed2b17ebcdeb7b64d82f1314035e2d6782ba8fbd9e27afbe06b0d60234cc1e0e6be1b54dcaac228f5dbce51f7723c86acedb8c0e7618ae0bfc5298744a2
SSDEEP 1536:k+/sImbk67pTHmJhnUC0sNjzyzluBded/wwmjoI8XCCv4n4n4n4N4n4n4n4in5nK:kUmViKC0K2IA9m9c4n5nZn5nhTOxvao
TLSH
T1EDF4263AFB80226FC5F7D73358E303B27B6414A296A98D5F2841430BFCD67726964E58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditImageTool.todb

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\Tool\german\EditImageTool.todb
Size 838KB
SHA256 069e795fc09bfd284d5cc661145dcc663a9e7a548cf277a79cc95c2b9f4713e6
MD5 f84d8447c729bba1a9bca49e61123ecd
SHA1 036e19c5544c1be5b43cacd0ca3fc69bd26b9be0
SHA512 5f786bdcdcfac242acabe61307160dcdb0c6c2b7f280f67886c74aa76ab7c654dbfdb48b10d093f4bbeab2ca0987c1b2fb4e2848617af8c683c5c56f736aa769
SSDEEP 3072:4iKC37KfgbvgzyydXi0Cb1jYuPn8nznAnAP4TjKnAWwRiky05TET7Mwb8W22vX6S:yyAqn8nznAnZ2vXMC
TLSH
T13905553AFBC0716FC5F6D73258E743B67B602492A6B98D5F2440030BFCE57612A64E68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetAndroid_0.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Android\chinese_tc\presetAndroid_0.spws
Size 140KB
SHA256 e55ebab1501114e25b4af2967abca6356c946e48297ba82e83c84407b80d40ab
MD5 b95f95a029fc12baa4936fe29dd6c470
SHA1 23fe76ab0ab5f4c23a83112c7de027511a45535d
SHA512 695509aaeac40caf0b75781cad063c589118b9b92bca97b0dc2a02b68190e33c29d7a985c09bd3c6c8d9f09d5e21f6edc83acf051da0cf3bbbfed7e464ebc3d1
SSDEEP 3072:ZgKumHEtYdUsKieW6huvazuoMWNkEIgii4iA:ZgKumktYdUsKieW6huvazuoVvii4iA
TLSH
T14CE34F4657BC19D4C1CAADB24843E77E0363E69EF30219C719B13DE9E7890A05EE5AF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetAndroid_1.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Android\chinese_tc\presetAndroid_1.spws
Size 192KB
SHA256 1fc3e5accf99e90edb6efa2adc4d35b1d7ee55c57e8ed2137d5588ada2c56bc8
MD5 7600042c7a7ec38c8bd7de2b84ceaa9b
SHA1 4bba28fe679fa6638af9de0c4655a5d475b50e4d
SHA512 18274465d42bad89179ca7d329247e34e1e15c396cd1380ef2fd14ded9d4e778c157717d81fb2fbdc7efb774f95f8b3af5e0239830d3b733226b202784d9ee5c
SSDEEP 3072:/t29M4sOxqyiGkGmC2ZZZCxcwiU0kNg/X2tjAQsOlqyiKkGmW2ZFZ2xZ:/tQsOxqyiGkGmC2ZZZCxcwi+Ngutjxsw
TLSH
T17E14840A57AC1ED8C18AFDB24C43DB7D4372D65BB302198A09E53DA5E7C90A05FD9EB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetAndroid_2.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Android\chinese_tc\presetAndroid_2.spws
Size 148KB
SHA256 b8119fe79fa29792d36e3ce3f859f3026b4df1439d25d829c8c0d722ecb9124b
MD5 beb0b345a2be91f41f01dcd33475e5e7
SHA1 3fca3bde3158cc5464f48ce314915153849a82ff
SHA512 31a414dc09e795f749d69e87ed632e3c4598ab0594062fe77b2391f942f003c4fe297fac1af9a43055fd9342e6835c380d8c4a1add8248d61c46faddedc07bb8
SSDEEP 3072:2tto7XziXHPok42oUTyUa41VktYDLbVE8moMWNkEI6iI4iA:2tto7XziXHPok42oUTyUa41VkWDLpE8g
TLSH
T11EE3510657BC19D4C1CAADB24843EB7E0362D65EF30219C719F53DE9E7890A05EE9AF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetMac_1.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Mac\chinese_tc\presetMac_1.spws
Size 140KB
SHA256 e6f8eb8349ee1fdf0b33a3c5890357319bcc4099f791c4d4dac36a9cc9c1beeb
MD5 db1f60f531e0be5a0724b55c3689fa9a
SHA1 6ff17372cd8d19c9f8a230ec097b019253f19228
SHA512 f56dd8d12968e278041082bd9583f797165fb57ba89747125bc6668b27d7c4bd4cd89d1acca63331851ddb8e53f63ba3bb1ab545b8b5028b58f1e6ad5d67f846
SSDEEP 3072:WV/5xvutz23wLwDGNCgOzGPDYL4EIJ/9sC:WV/5xmtz23wLwDGNCgOzGPDR/9sC
TLSH
T18EE34E0657BC19D4C1DAADB24843E73E4373E2ADB31209C719B53DE9F7890A05EA99F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetMac_2.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Mac\chinese_tc\presetMac_2.spws
Size 140KB
SHA256 dc1bfa6b099ac9268fcb10222ecb92d6ab4963b8088b7ecb4b0c92de25bec8ab
MD5 b6a73b1620a753066e8e6d3f7b0d879c
SHA1 229a365090bcd80cc5f56a661fe3b7539d9e5fb5
SHA512 f5eec9c3ebe054fba5b38f5d0229bd2458629078436160aae2dd93aef9c9cedf721f280dce047b8d357157051c461a8df9549ee728fbfdba2cb3a2c430993f89
SSDEEP 3072:Vtjhevjl/9w2JztKtbLMU4EPvYL4EIJ/9sC:Vtjgvjl/9w2JztKtbLMU4EPvR/9sC
TLSH
T13BE34E0657BC19D4C1DAADB24843E73E4373E2ADB31209C719B53DE9F7890A05EA99F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetMac_3.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Mac\chinese_tc\presetMac_3.spws
Size 144KB
SHA256 3f02dce4876794c57caf9e0ab3ed0ded438c15c2a552097c9242d67b0c8d0693
MD5 eabdf2ed8da4a15f17c8377f4bfc7939
SHA1 bc16e097798465a1c414c7c35919539427eb4255
SHA512 fae3db65670758e307c0b54bfeb6932c43a86487bf6b5ad9d52fb686df894eaaba2cc600df61e313ec343604606907909b66078360245a469a7dbd635a8352e7
SSDEEP 3072:5AEig/2wyOiYBBz7QE1KttiPrbOo8YoVUvYL4EIc69sC:5AEig/2wyOiYBBz7QE1KttiPrCo8YoV8
TLSH
T1AFE3404657BC1AD4C1CAADB24843E73E4372D2A9B31209C719B53DE5F7890A05FE9AF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetWin_2.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\chinese_tc\presetWin_2.spws
Size 140KB
SHA256 c7f175aa5e61b0cef1389e21e0ebe26dd76fc21f8d2078b48df71101ac278138
MD5 d39e535bcbc1d97644a4f352984cb888
SHA1 f7167f0a2e6db9e7f16411d0c99130452f6cc013
SHA512 47618b154753218faad9e4931719c4eeb9c77abf6e23d5dbea5024e65eda50384987be349447302477deaa8c4e5a921908e96341e6fa8f58a7e2fcd4c906610d
SSDEEP 1536:TJk+EH6oHqmFtJni/38+wk7T4nL3o3P3ionEchzJ2xNZk2C+9tcJoEyhFMRKQ:NtShqsbifVwIozQPBEcMTi2P8MhFMRKQ
TLSH
T10CE34E0657BC19D4C1DAADB24843E73E4373E2ADB31209C619B53DE9F7890A05FA99F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetWin_3.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\chinese_tc\presetWin_3.spws
Size 144KB
SHA256 8d510d18ac9eb7b8e86f825708c238307c5532bb9b16dc3e7235e883b18e1281
MD5 7c28eeccc4427fa16bc628679f528f3c
SHA1 9f51e779baa7bdf6d7842ac4fc0b9afd214ffbbd
SHA512 50bf5e053fba5d262b9f501b37246e4292d0cf672e0f0444b621eead24a8c0ca814e3316cb47f90477914a3dacb351bfcf24aa28d590ac183442d0d2581cc72c
SSDEEP 3072:i8EDPMaw0lElHEZ7WE1KztiP+bOoO8SQ28MhFMR0Q:i8EDPMaw0lElHEZ7WE1KztiP+CoO8SQ5
TLSH
T1EAE3400657BC1AD4C1CAADB24843E73E4372D2ADB31219C719B53DE9E7890A05FE99F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presetWin_1.spws

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\Settings\PAINT\WorkSpace\Win\japanese\presetWin_1.spws
Size 140KB
SHA256 c0e28bd8890a21340cb24105e96eeeb04f7639db09fe57b83c6fd35d2700c7c3
MD5 5889fe3dbae7351c452d185fea04a238
SHA1 e66ef3acc7e83870d0b3f3800b5e91dc405b2b32
SHA512 f5c754a315e25d695a93ca2f4a21377bd6c3d6c51ba958344a1f03be418be5757ee4b146a7459a820fb4d9dd810353d5e589e2040f24d7c481c3175418578fc2
SSDEEP 1536:9biMGpN62PJBI20k+TFlS16/z8EwkClZLZo3Qxi3ndgC+9tcJoEyhFMRKQ:clHdxF0thk07vwJvdQ8mdgP8MhFMRKQ
TLSH
T14EE33E0657BC19D4C1DAADB24843E73E4373E2ADB31209C619B53DE9F7890A05FA99F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05F5E29.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\05F5E29.tmp
Size 150B
SHA256 708f9c7a9e4dd2544efd34c0416f511594cd9410a60003e4de2f899e2446d525
MD5 958abe6439d26d07c46df9d46866a18e
SHA1 244d23df827edb821a910bc890b6d0cae2b87e12
SHA512 33764ecaea2ff5b580d907ce8e0f81e80e694cd441637fd5192cdcff57416a09866bc572016a8d996b2a1a8832aca8ea1413db9e521d34a3e2f49b6b2bad004a
TLSH
T182C001106192CEA1D08C31B5888F821DA1E0BF49579943432049F26A5B701A80836A53
MD5 SHA1 SHA512 TLSH

Submit Download

A9B5F5B.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\A9B5F5B.tmp
Size 395B
SHA256 af638d332ed549be7e4c9afded5d0be9f1ea031e2c069507a0ed0e27790e9217
MD5 f415b2f665507b0e86d05424bacf46f1
SHA1 2cbba9579dbd9b769bb084167104719ea2ca1090
SHA512 f5004784e8be84f67713be8a16b7a58d33a846ad6b820d4e083eb7e1143ff6d9f7313264ef2d739d99e8c7b3e8b0650de7646652c462420debba80e9d5a65c0c
TLSH
T18AE07D0133220EA0DCBDA130D09AD3CC2BFDD69082018F03D200F41C3D639A30326E60
MD5 SHA1 SHA512 TLSH

Submit Download

B8D5F60.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\B8D5F60.tmp
Size 205B
SHA256 9a253cf678c6a42e57c8d1d4db5340d4ff5d6fabb0530e766f0c862b5a2c03a8
MD5 6b1cf3c6e1ebc2af29a5a5bc9c3071fc
SHA1 46133a3c324eb30ae86248278a9d6d740ab89dc5
SHA512 d129471cc9225f23fc6133594fd882df601e4a0e69b152c0d391781a106d40ccf1cc51a86537c9403faa8b37e522062bd9211d3ca823b1b0c2c60cae17a2b736
TLSH
T144D0922233508E20C06CB430C88F430D52E4FF8D27810A03640CF26A1F321E9093A983
MD5 SHA1 SHA512 TLSH

Submit Download

BFA5F73.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\BFA5F73.tmp
Size 11KB
SHA256 aa71c872379b87ebed28014a515f8e9f7fea16babc686441dd5093e10068cd7a
MD5 b19fdb4f4feade337764b48f7481bee1
SHA1 4070851bc54c0514b4aef213e743cdab2f8cba90
SHA512 ba5e1eb2967c9718991af334013745aae655acd187500dd540910aea6e7a9ee422b996e35aff5aa2a3eda65671448aca7ab37119c8148cb076470a6373361880
SSDEEP 192:tFcJP5X07VcUgafkn/KmGCDhldgumou97MzA9v9zas:bczX0vga6/KmGCDhldgumoe7MzA9v9zx
TLSH
T15D4243157725DA31E04DB434CC2BE35E6BD1BE2ACFE1020775C0B36E6AB56041CBB92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F405FCA.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\chinese_tc\F405FCA.tmp
Size 237B
SHA256 faf0fa18eb46424369df4e4885d0c62e42cae4897bbbbf849628e16d173dc0e3
MD5 0bf3bd083f03fd9fc2af055112f81d4d
SHA1 54abf4d0c021f4a354967263bc0d5d8e4c863c80
SHA512 0adea116c4240f25b610225b7600e937f27d532306fc96e698c0e4c19d552a73e86fde56f038d268e572aab3d7dc44fe6856942df9cd5b9a15f38df0d33cb637
TLSH
T178D08C2233408D30E50C2071C88F130C40E0FB044B9242133088F2260F300B10922983
MD5 SHA1 SHA512 TLSH

Submit Download

0235FCF.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\0235FCF.tmp
Size 1KB
SHA256 d901df27322f3c8d9056bf7b8caba361d42b8d02684c9eb164c11a96138c6f4a
MD5 4188637dfd046b706b398dbd84e242bc
SHA1 5dae69ba1cca96cd5d7a4ca2f1e334057edfa8b6
SHA512 90e14a200eb6ecd1d8ba0ed561f5c5041a0200dda9b3ce9b42b493e5db9ad72cd8e9609dd25b69ea4d4addcf0c4d95938126d757848c256041cc1cc1ab388c55
TLSH
T1C92114ABD7C18425C96843F4F48EA3494773C245575B412BB0C8422DA7E3AC426AB383
MD5 SHA1 SHA512 TLSH

Submit Download

0A25FF2.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\0A25FF2.tmp
Size 17KB
SHA256 10276d56fa25b52a3f2cab69c3e16a1aaa0c3d799d358c4c2f1bb1a0d84d5d2b
MD5 e9ca2b7ced3fd31b435dbf9dfbc7cde0
SHA1 4d1e86029e336905b1a564588969959e31236c5f
SHA512 ae07b0f94b18d8b845c9f8f059195017ca70f3df703e2aa174835e9e35de431596ac7e87cb1bce5999cf0eddff543f73d60279e0ff06ed5923b7681d4ad4bb02
SSDEEP 384:XNhV3mseKBlKkRteKBW758dWmDTeKLPyMpyd:XdWWpRvGipDnPyB
TLSH
T168723089D6140619CC3BE5BB8B554106C3756D6B9982D20A782EC1263FF213CC7BAFED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2D45FF5.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\2D45FF5.tmp
Size 5KB
SHA256 c7fc43ab66546e78bb2ef9d31fb8267e7e6f83cf7895bcb4802205a3128e5057
MD5 8b22c1e907601472f6a97d4f207830ea
SHA1 64da83aa76d0a1580a7a8bafe1abc2bfd611d78b
SHA512 065d02fff7ff65429a7cc7c35540d3430b4c0ed6b84ddf50cabd9305e2797fe85df01652cc32a3d2ac7e1481d5b3d1a7f3d76bd1850fb25bf9e7944fd8042cd5
SSDEEP 48:csVlrocOTIb+QEk1NmolCVXVB/Xmi/XugkyDhQqby:cW9qa5Bmol4kgkyDhQq2
TLSH
T12CB1CB4A3B20CA35E18DB234CD6BE36D2B917E26CFE5015731C5B35E6AB06480D7BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3CC82939-20AD-415C-9EB7-52B4C8E50033

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\3CC82939-20AD-415C-9EB7-52B4C8E50033
Size 8KB
SHA256 df5961624d5f9e9915b1c9ac0838a7035163a8718979ddc74817a94cd4b6d722
MD5 b1a9f8486df91570c1ebbc686b26e779
SHA1 cb47060d58feabcd241bd9a0cbdf3505c76837fc
SHA512 c5d0e4c31d4d06d5ff57819f8f8ac3f0b511c121fe00ac8709f655e27c71ff506299795ff544e6eafcda867765c3d931a926b3cae3d930ab0bf33e3480bdf8d7
SSDEEP 192:dMVak33Qrt9Ql+ERrw+kwcFuTh2jIlbal8Zn/mkYdIZtt:uwk33ytgrwNwcAT1Z0Gtt
TLSH
T119026B52B3A784B3E0C5A675160BD361B0EBCFA56E9F84287460735D1F342A998B3CA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3D5600B.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\3D5600B.tmp
Size 562B
SHA256 4f99bee0690e091a494db3ebaafb9b5257044443461eebfdac0d8093e45206cd
MD5 9506c0e4dfb0bfb3c01896481e9b46f2
SHA1 fd7b640f151bc26fddf11eb2a19c5f5ded2b9d32
SHA512 9f8b965f7c1a009d5e61709e5ff454585a65dd961262476eff93ef65b4ce526e8c4bbf0d849b8cc568b952265a3d2ef5c4d8e50fe0ecdc6570413ec63f892836
TLSH
T191F0F10123805D22F57B7134F5D7434AAF60BF072B894787928D90741F621900F7BBC1
MD5 SHA1 SHA512 TLSH

Submit Download

3FE601E.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\3FE601E.tmp
Size 255B
SHA256 5ab65901be6dbe5bbd3591caaff8ace445e47dba06716afb3504150114e9186d
MD5 bcf935795c1c6cd8ad511baa188dd09a
SHA1 83ef588806f8bdba1969b1f5b04bbf4d0d0c6420
SHA512 9ada19b0f722e63406dc944c9b384c237bae0cc176f4f4e12bd02413e4ca56c55fdde5f6666d499d01e238156190f83b399a016bb904683fd0b25ba066b73f88
TLSH
T17FD08CD23390CD12D40C227AC48B930EA2E6EF409382C3036080F23E0F722C408328C1
MD5 SHA1 SHA512 TLSH

Submit Download

46B6031.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\46B6031.tmp
Size 67KB
SHA256 2a6bffa2ab41f67ccacf998c89be4c2a812f50400b45f79e89167509fa20cc8a
MD5 47b8efe1b6ac49c5ef456cc55adb0421
SHA1 71766cc787e0523f50efd3e978393239a4139203
SHA512 fcda6ba986c76fde6937d0f61b1aa94da14a91987fd7ed5c16cfe295db4ca651d99799c4d9c2a19eba0d46278360ac5fb0570eadffd1777ce63ed75c3722aa2b
SSDEEP 1536:xDprIy7JYQRIFthdkJWdIv828J+qL7AAhGkUdkSHwxiRfFoFiba/+Sekdb0Cjy79:9pr37JYQRgthdkgg828Jt7/mdkriFFjF
TLSH
T10863B79CEE06001D8C56F63A4838411ADBA9BCBB89951357380DC9683B9132DD75FBFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48B6053.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\48B6053.tmp
Size 8KB
SHA256 fc5e37560315790875b24906cd9c9c2fd631a5f4df42a83324847a7b845fc2d0
MD5 04ffc4864c26bcee5d8152f2f2d110df
SHA1 50e01bf8e4f40bcf1e58e7378323f8a13343630f
SHA512 20c116ad08f705afb0bcfa597277474f7a4f54fbf686eb904d68afecc172a5b9fe6359c0e57dc1388b62a70f695d0ea0a88a307da9004f53f1a90cbacd7a0541
SSDEEP 96:huyx82uHdfQ1ZUC0m/+XTXnvfnK/Qb0p4g4flhbhzkoU692xWqIG0RPlIYhZ6:MSGSH/0a8HK/I0uf3bhzkoU69BVlb6
TLSH
T187124F2B730D96F5DC827732E2B5A2C5E58FCC006216C341BADCF13F7781A50AA76A54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4CB6056.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\4CB6056.tmp
Size 1KB
SHA256 d6e5c438edf8c20203540884c471cc76ce587eec3e70d0b01ccb269a9475c861
MD5 bd6c9aefb4223e1bdb08cb88600703bc
SHA1 89a5073eb2d845069db057bc268fb4bda02fa842
SHA512 69e550fcc28ba96d293a46fde01b7bfb6f019ff33a9f91d444ed54807b78ea916e53f9399b3becde3c42c6be63000bbf8cd445f0e4eb08415e65f80ebf4ad1b5
TLSH
T164310279D410CD24F47B47B6C88A530D7DD872B86263C9C5ACCDD2B409E318D3B4AA5B
MD5 SHA1 SHA512 TLSH

Submit Download

4ed6078.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\4ed6078.tmp
Size 1019B
SHA256 36430ebaa4f8b7d7b31d6cd075f3a1fa2325e4dd713d72b611dc9dbf7ebb7412
MD5 614aa38b973c20e2f26ec1252a03b7e0
SHA1 4b6941e47e25844f0903dba45769adbc4f0e5532
SHA512 455be1f5ad03cfb702f3de86be0667a7578437283ede8be80993e511e11ad4447ee5d40d201a3a2d616abe40578a282d91096f0314742c1533400537ae8cd0d7
TLSH
T1DE11901F61C54726CBA7017448CAD21A6B30C82F2B665BA7341EA17D0B93135DB7FBC9
MD5 SHA1 SHA512 TLSH

Submit Download

549607B.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\549607B.tmp
Size 305B
SHA256 982525b18c1e56288d468b9b384e7f1c5d1c1717e5bc7a74bab2fe929e37379b
MD5 213dcd1109284691ec8a06f9204d97e1
SHA1 f7dbb8f3adc31ea80d690970997a7de25df5069e
SHA512 a71577a6dfc4fe7972f63084596542b8e1b5245a8ad344d96835b20d32ac98ddaa47cb65724cc72e1af4dab20b1c88a9521fbaf04776ef17f38fe9e6f22efe69
TLSH
T101E0A9167792CE41C16CA03889AE530EA280FBA2138883931008F1615FA461D663E9C2
MD5 SHA1 SHA512 TLSH

Submit Download

563609E.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\563609E.tmp
Size 267KB
SHA256 430a11f5c8619731a2e7605745fd06a4c0330f1300b45b21029ec7e476d66ef4
MD5 a0994d069062165a174d341545d93a96
SHA1 c4d29b87ea1d50404c04cfc9abc8e35bfac6fb45
SHA512 458c0089c38a29e2f704ceaee774ae294457d970e4eb7d3f9e608998e4ed94ef157b50aa83c65feb5327640ca30b0f25e34bd2e6d2cfad91d334870bfc36c736
SSDEEP 3072:a7tb774lAItjvRp66ErGDdHbezNlG1H5ln:aRb77zSdHbezNlG1H5ln
TLSH
T17544440A7B26CA32E98EB534CD6BD36D2AE13E12DFE5414374C0B31E6AB15140CB7D66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58F60C0.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\58F60C0.tmp
Size 324B
SHA256 89d740313a6e5636d41de2d78ea149645ed82109e6e554408d94dc918e20412a
MD5 6c3856e8f86215fa8ed80b619fbfae49
SHA1 d5be223efa9c1946c1c2abc51e11b2f9cff08c0f
SHA512 18bcea0174d170cc5dc1a690ccacf3904ce3771f0826a0c403f1d16800382162f8a32282b4c07c24639bebfa99c5900826b75eb330527e99cf45a1b4db794d12
TLSH
T150E0A79277014EA5C4DE71BDD8DE834C52F5EB1823E6160B2515F2720F3032A36269D2
MD5 SHA1 SHA512 TLSH

Submit Download

5B060D3.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\5B060D3.tmp
Size 2KB
SHA256 0bf5667b67a5c2d8d89fc98b3a96f1331065158a63ccc7dc92ab2512d2d971a6
MD5 df82bceb25d845ef3a85c03134f053d3
SHA1 2f2bb11d1284cbe2d9066eee6c39fced532058cf
SHA512 c56aed4b01f8849ec0a8a0953fbb9bd75ed721ae1dab6fe9944a85ccfdd4f459c8afbc716c4ba20a55ddb2072a447078dda9af4016b6e1332e0c4b18e617e2cf
TLSH
T19341108FB310462AC8DA053857D9AA48792DE23DE3C5E27628DCD014059B1EEE772CD7
MD5 SHA1 SHA512 TLSH

Submit Download

61F60E5.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\61F60E5.tmp
Size 20KB
SHA256 33f268457f12d88f373fd1e562c769e4ae6debc536ba0187bcb90a120f1d2207
MD5 6a38484613b22643a2416c82c5ff4a39
SHA1 38869a50ae4bdab567648d6a15dba4ca9bfdba3e
SHA512 798bf6ed979495878ca27b66cc3083785d08ad615ac9b21ff8dce0886d90dee4b96dade639418e967bcdfd8d8e4fc7f17debb573197a26b4bb45b8923db7f5b3
SSDEEP 384:tmv7yvIiZ7OCdcpoq97kT73OmffHqfYKzB7lQuedQfYVI0dQftBhIqX:toSaCjiieoHaplQdQfYLdQftBR
TLSH
T149A2B81F93000323CEE307B67F0E505BB6365269979956B738AC506823E11AEA7FF5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7426184.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\7426184.tmp
Size 3.1MB
SHA256 069ad42df07b96ea826b5e8c13842c8e8565ec02950f065b2a4fd59b804feebc
MD5 be7e517b5311bff7a281ec0083b9d432
SHA1 71e80b9cc89b98f74618b5cd591effd5beac8d69
SHA512 99ce72a19a6a937bfb71dbcd07288274b5e3e533543f133e35ac1606f6c6253008625a4112c15486a0ff95efbed61c882391bdecfd9e2bfffdf4aef6f3efecec
SSDEEP 12288:DAWiVDHcQa0BJa7TFLeliBH7tECQQpwGYcYdKcd6hxp1OdzpNput5:DViVD7KTFauH7lQQmGoW/QNg
TLSH
T10DE5910A7B21CA31E58EB234CD6BD3AD3AA63E16DFD5018335C0B31E6AB45144DB7D62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7D461F5.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\7D461F5.tmp
Size 580B
SHA256 23664df0af3bc215c78704e8d2eeb4b118df67e268aadc15a425dbd2abe3521f
MD5 80861f49513f402494f44b107197bc8f
SHA1 4634065ec956777cc6a55a998b0c20d63d847cc3
SHA512 f1e166284de95db79d2254941a0679cd583531f9fe4b916e223f1161f68f098b365e68da6a4e4120138eba13c0314fac935e2ce851195f5293d7b1ff1e9769b9
TLSH
T182F0A34A33D46D06D8A46378998507590367FB24069F47431404F5794FF36807D512C2
MD5 SHA1 SHA512 TLSH

Submit Download

7F961F8.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\7F961F8.tmp
Size 47KB
SHA256 e68aeb63cd9de3636d637187a838953c37f78b65edd70393e7c76c07f7f6cb42
MD5 4b43f3d5004a694f9f2f85e342c9726b
SHA1 521e199ef9bcfbae7a8f060031a5ab0f4613ba39
SHA512 72c08d8971274618c81089eee3cb2bf46912d779910bba2cea74976ef6a40a1cb2aa858e431406a24b107062acd7ba637ead5193445272aa75d1bc6e96586bb3
SSDEEP 768:HAyTSEOEQROmc+P3wNH3bV4MFS/hAmeK6AQn7Of3/5QaEoQU:gpROmcz33rV9n7OX6aExU
TLSH
T18E23C40F33008738C69526B6DD4691DEA764AC1AEE93590731CCF31C65F21AC8B7B5B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8AF622A.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\8AF622A.tmp
Size 17KB
SHA256 1579f8368c4015274c1a90deb88f53a51b1d94c4e54e5580eca51724b09f51c7
MD5 276c7b442a6575340def0cecb040b374
SHA1 f57944f304cc7987ff897497fc0fd10717532da0
SHA512 d5ff58c42d832338576da3604083fb10e7ed0d928593b1af160acb3c14952154623ac90420c922aab2cea83504b19afe64a9f175e37eb477cbf2e26da3efe3af
SSDEEP 384:7cgs4SpdHY7UkAaMzJI6LKzJI62EY1hXzJI6KgjjI/wqR:t6JIY8JIRzjJItn
TLSH
T10172FA0A7721DA35E489B131CD6BD36D67E63E12DFE582533480B32E2AB19244CB7E52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97C623C.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\97C623C.tmp
Size 17KB
SHA256 337eba8f49f40e136a0366c84625a4a075c1d81b5d59b30e043f0bfb3c98600c
MD5 98650f003e0eb0b9a66e0059fc8db42b
SHA1 75fa92d1c9cdf4d70c01538668393b07ea489e0a
SHA512 949d39b91bd1a9aba39a2e7fce90e3414b672dc45502dda913f5d9463b279df1a3d66fa18a8b074a2efe46b95a6fa1c9c62d311a05a2297c97d56fc99ec2b508
SSDEEP 192:OjHxsp4PSmL5xIQh1ehIQh1qosSVwe793:OzxgWSMxIQh1ehIQh1qos893
TLSH
T16D82540A3B65CA31E58EB035CC6BD3AD6BA13E26CFE5424771C0B35E6AB45140C7BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9D7A23F7-C2E6-43FC-9675-DCD3D7CF0317

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\9D7A23F7-C2E6-43FC-9675-DCD3D7CF0317
Size 229B
SHA256 0b1d80352a05ce0367fc534908fa483e19a8f610b6d618311978dbde0ae36338
MD5 46f7294bc65607b361bf59b3252d7673
SHA1 01be999be45ec82c9934da67f67b0fd77462d264
SHA512 f12855bc47cd25c929161e09ab2afdcbcd283be5d475d29d4929de6d941e8f12a986e235e30451c490a76f8710965beba114e1b6dbec8fd753088f14e512f4e9
TLSH
T1B6D04C9263808D11E05C657484CEA31E62E1EF5597A287032085F23A0F722955C329C6
MD5 SHA1 SHA512 TLSH

Submit Download

9D96271.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\9D96271.tmp
Size 304B
SHA256 364caebc4627fe356ca94760bb29dd8853e77f451d55cccec31591067c329014
MD5 8f2c2c57e3c08e339764740b5a0018a4
SHA1 76b2fc9cc3823c622b8ddfc9b4b70b09580104f5
SHA512 e755316f9f753ff21f6c6deead12db6a34578383a52eeec22963a68a32afa8cab224d77659538dedfd45ce19dc40dbeeb8bc51b2a8023a3b1a7e9149652ecbaa
TLSH
T199E012117B618E61D85C317CCD8F830952A0FF45539607435745F6B95FB31A00AA19C1
MD5 SHA1 SHA512 TLSH

Submit Download

B4E62C3.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\B4E62C3.tmp
Size 2KB
SHA256 ef22fb0a93816787a2d87c82fa1543a75941329f2f4de68b3bb0251fd8fb9dd9
MD5 e9703654e4bc9531f287cb50ccc17306
SHA1 efe1d4f2877226e3a01e8d6d0e129710733b8e37
SHA512 976e975f86aab923f6d10fc8cb58dae6937de231ab640f88a75a8cca325a81dc96238f07f0aa48b1200fb8c6522650898cb1b54421be6c8407f6b1caa04c8974
TLSH
T1A251BD0A2380A425D46A9577E4E763042334BE956D0B0A1E29ECD6743DD39BD2F37ACF
MD5 SHA1 SHA512 TLSH

Submit Download

B7D62D6.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\B7D62D6.tmp
Size 384B
SHA256 858a4666397489a9169d14a688cc917220a11e3f883f9e7035c427daf9989554
MD5 ae999f961bcbd31677e364111243df42
SHA1 6c8a1d2432fb545638e7232bd1995f59d2045232
SHA512 5f5728843d321bfe9e89974ba883bfa6df970a48800152ba799209ab09831104d0dbc28d3abb7bceb3fd2c551a5be79e731cfed8ed712c41e012a8de21161ef1
TLSH
T1EAE02B0527408F02E14C23B455CF030A21B5F7B9178F218B145AF6211E102145C3754C
MD5 SHA1 SHA512 TLSH

Submit Download

BFA62DA.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\BFA62DA.tmp
Size 11KB
SHA256 85e90d66d981ac6ab84f01360fb262c489af067f7d30d48e2bf2dc221cf38a73
MD5 c14df656c4d92d568a15a962a3fed4a0
SHA1 c7feb272dcbcb31001ff7f691bfa6c55bbb3271d
SHA512 808d35bfc2db453de59d18af20be02c8531e6621189e66e6009baa9c872f0fade732cae2376de662813168d25635485daca352ad041fe1742fade0592c22d78c
SSDEEP 192:r69JP5X07VcUgafkn/KmGCDhldgumoe7Mz7Vq1+UG:r69zX0vga6/KmGCDhldgumoe7Mz7nUG
TLSH
T1214232557724DA31E04DB434CC6BE36E6BD1BF2ACFE102077580B35E6AB56041CBB92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C5062DD.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\C5062DD.tmp
Size 561B
SHA256 5a90e30397fc33b1a8a4bebfcef427f8fe57c444719950fa158c88f7b20fee8f
MD5 5b4cb2bbcd4b4008f57d3ed16459d2ee
SHA1 9bac3caf6103d5cd3fe6d527a9dfa8582af65033
SHA512 686774168e5712cbeebfbb8957f21ff580ef6666b09d0b2c05efa4a915c473dc8fb93ae94516d872e18ab114b7efa6d98313407fdf123fa1be03b27c36878b25
TLSH
T198F0EC0827409E62C59D0974ACDE470D6770BA4E879987170A58D0283FE65F5CE5A649
MD5 SHA1 SHA512 TLSH

Submit Download

D6B62FF.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\D6B62FF.tmp
Size 513B
SHA256 df02e4854b1cdae97ad0ec393ae534e58d7d1b50e7b1d83b363d33bd480b97c7
MD5 ae84b35297249905bb2768b0fe47ad8b
SHA1 e5a1169780d305b3b4068bc43f27f2235076a7b2
SHA512 664a477efc8e1d45e5b3fefaa9291fd1f92c5af51b818cef419ca83547e1ace89d1931263e1849aede48361a31a8031dbcb708aae13874d156afedb53060eed7
TLSH
T101F0924723D2DFA4D09E6378C29E83049360B744679A6E4F6448E2AA3F574B01937906
MD5 SHA1 SHA512 TLSH

Submit Download

DD76321.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\DD76321.tmp
Size 108KB
SHA256 70e281a84394e0fe11f66dbced75eb5c882786a9d335b1cf8ef2fe5b6300c8a8
MD5 9afa2918b8ee62eb6d5a49c51a5ffb7f
SHA1 c269a134ef1485411c9b40e690efa0b077d17a54
SHA512 f8bb40934ffe0524dcc71e8be1f1e2f689f4a6156f2f4c9638b1c1f952e5ca03676e6dd493ecce150a7848f2f0e0022affce486a18979d5e74f5630d07e6e718
SSDEEP 1536:gh7Y2ZPJbgD7idz+oPJl5aHj3zar86Zbhq:gh7Y2ZPJbgDMz+oPAD3ew6Zbh
TLSH
T158B3FC177700C726D285B271CD47D3AD2BA2BE1ADF96005370C8B31E76F01586EBBA96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DE96334.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\DE96334.tmp
Size 10KB
SHA256 9767388fea67839ccf7bbc8e12c8ab5161cf5c5a75d417ba94fc98fad101ca75
MD5 20560751ce3dbcff08363f8bdd5f9a96
SHA1 7c342c6c3d888bfd57de8df614fcd4a41613b3a3
SHA512 2d0a504aabdd061034130735ee76675ebaea4a14bdf574e65ae968dd96032615cf289ec95b973072a9ab836946b334d4f7c7e2a112c7486f7a38f930905eaa34
SSDEEP 192:YQ9ZHuOPW+VxiDZwY1KwR1Bww1Qw81jwd1lwGLpFZ15PCo:XbHuDixIwY1KwR1Bww1Qw81jwd1lwGLF
TLSH
T1BA220F4D3704EA55E95636714D5783CD2A29BE788AC04B9B3CC9B34DA87AA444CFFE03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E796347.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\E796347.tmp
Size 299KB
SHA256 e2ca989994cc47ebac987de915685472bd3f87fdd664c402d6b166384ba11b41
MD5 86a343ba24f9182ae4bcd18ad8542543
SHA1 0d818a6977170f7ea12d3ff151a7808469d54c01
SHA512 2a8e39401a82ea2388d5970d667925dcc6e47acf84635e92605d39fdf0e0adfde9a833e5bc650178fd09b8972c28ac40f8880da891c49c6b2ee17315fa66bf27
SSDEEP 6144:0yi4CX6JOUElabcO/BWavhDy2P4j5RLi7eamUeZsa0yJbllgeLkgk1RVu5:BElabcEg5RLi7eF5He
TLSH
T13964B5077700C731D58613319E5BD29DE3657C29AFA6825730DCF31C23B78A84ABB99A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F2A6359.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\F2A6359.tmp
Size 25KB
SHA256 0496d16fc58574110107706ab76ae18bd30c23622e17d9f17da4b39d699203bd
MD5 c7c215b8423d6a59e8afa4f3f7825f98
SHA1 802d47e5c4aae297b351ec9998caf37721563257
SHA512 f5da24e216a084f16a354881ba7c6a01eb6b42a79c1458aea9403fdd295b4068a62c99616e7d10b1d80f350dc18dd8268224ebf3ccf06ad77ded8491b1dc3f84
SSDEEP 384:htsCD+ynbnRm26tvFLYnSyoxq94Wg4nwuIlfAedtHBQfmL:hmufCU4WwXlfJBQf
TLSH
T106C2A74F97050327CBD103B5BF0E529FB7664169976A92A7B4BC406423E225EE3FB1C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FCB638D.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\english\FCB638D.tmp
Size 4KB
SHA256 ef548b04787b7898cd1a131377a7ccf9902d503d450fec6e62f5411babacfdfe
MD5 ddac6b77f37cc75733c2f9f1ad56cd54
SHA1 ed05c651c5c7d910dad1dc0200af20a1e7f68fda
SHA512 fe45934c53f32fb44431b81a4e9ede3f582698f17d2440f544ece14e12ce91420f97f685408d35ebbf0a94da4f295bb3a867f935ab67d0841db396ac9285af55
SSDEEP 96:yqgDAaAki+0pjpkpopOp9pEPp6A4pkNUQF15qu:yqsAaJ09+CgHiP0A4Q3C
TLSH
T15191429CE3051727EE7A43BBEEDE4211B1709350C3974A8FA4A8B05811C35F469BBB89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA6504.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\french\BFA6504.tmp
Size 11KB
SHA256 f5feb44cbc7c2b7d4ef6c24372a679309fc0720daf4e891fd13018effe81a522
MD5 27444fec98e843ed6dd43eb2c83e05d5
SHA1 e4276549ecab6b998b431528033686c0680a7db8
SHA512 3096368223518652f29a219bb8ab4e05a32e5f09c87e657d04e477c69073a2f990c9368d16dc2552721972f353a8360fb689f69580397c0bbcc325e1c4806760
SSDEEP 192:RsjkQJP5X07VcUgafkn/KmGCDhldgumoZY7MzGfpwgt:RYkQzX0vga6/KmGCDhldgumoZY7MzWpb
TLSH
T14C4233557724DA36E04DB434CC2BE35E6B91BF2ACFE1020775C0B35E6AB56041CBB92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA66C2.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\german\BFA66C2.tmp
Size 11KB
SHA256 7c9388a01892f5bc5e0bc65860de09b80215d5c451b8391b6f11d35e173a694c
MD5 bcae8d8e9c75b364bd5a51d3c0c00f1f
SHA1 7b9dc8e5679392302421b845fa09d91e1849d1b3
SHA512 e902e0baaabbab7d7f3933f79fc363f9eaa90afb36eb4aeef8db40ea29507832510da880ae1be55d45c607b54e5599b6823962a768ba0390a8d64ccdcc856df2
SSDEEP 192:hbiJP5X07VcUgafkn/KmGCDhldgumoB7MzSXgn:hbizX0vga6/KmGCDhldgumoB7MzPn
TLSH
T1564242557724DA36E04DB434CC2BE31E6BD1BE2ACBE102077580B35E6AB56045CBBD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA6871.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\indonesian\BFA6871.tmp
Size 11KB
SHA256 772a333d04eeb1ab60404aafcb837683d1d22186f52cc26d87d8fa01ef0773c0
MD5 2f58b42a6563e5c05cf12f3fc0413d64
SHA1 0ec1276746a321ebfe749ab372343a48b3c390e8
SHA512 497f5aeb4ef4cf4f8259f648179796e50cdca1db123dec4630a571fbc028d4689a06b1234293c3ee0e00d002748536a7159efde4a0597114907ea7452c87d0e2
SSDEEP 192:/muJP5X07VcUgafkn/KmGCDhldgumoTt7MzRYeodC:/muzX0vga6/KmGCDhldgumoTt7MzWeo
TLSH
T1EE4241157724DA36E04DB434CC2BE31E6B91BF2ACFE106077580B35E6AB56041CBBD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA6A9C.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\japanese\BFA6A9C.tmp
Size 12KB
SHA256 f7be0627ac9e063c1ea0f42e5115ef185b20dd227f1980b69259df07826de58e
MD5 6a20e2412664e24f5b3386034b51db17
SHA1 e0f481e9773821a2e2e90ef40c970d7b362463e0
SHA512 a9a38ac383811d3a472a59e00fba14110d0125a07c8b9075bc2e87a2ef3f36901456fd1a000de9e0774a488bd6fa464ccb4f8f7120a76c1a2b29a851ea3fd49f
SSDEEP 192:bg0JP5X07VcUgafkn/KmGCDhldgumoT7Mz6ziG:U0zX0vga6/KmGCDhldgumoT7MzSiG
TLSH
T10C4234197764DA35E04DB534CC2BE35E6B91BE2ACFE1060371C0B35E6AB46045CBBD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA6C99.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\korean\BFA6C99.tmp
Size 11KB
SHA256 49ce930af854df8094a4f38134eb83e77595395ec665675c90cac7f5a6857e47
MD5 19bfbdb56889a6de5227d6793c0d9094
SHA1 2cef8bb17b343e79de863a580f47dd4c207f25c0
SHA512 bd14ffd4407dda975e7b1f93513537a9be8ee6d1313707f5fd700a038f818dc1ec5baeac2214e54ed6370e5e4e0a85f392cfedfc17766eaeded5f43a0e7c5f74
SSDEEP 192:DLsJJP5X07VcUgafkn/KmGCDhldgumow7Mzxxc:DLyzX0vga6/KmGCDhldgumow7MzPc
TLSH
T1274243157725DA32E08DB534CC6BE31E6B91BE2ACFE1020771C0B35E6AB56041C7BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8776F9A.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\other\8776F9A.tmp
Size 48KB
SHA256 253be2040f3a156c3b7fbf017433a8f1246b81ab8375d251605fced74d9acad5
MD5 d976382f6f5fc23c9140bed360147f9d
SHA1 8405fea6633d5c7ae9e7471fd5ea11b5b8bc3ad4
SHA512 18ec94b280bb861f94c3e2b78e595d8c7bb382e976f62991062a4e91505c6de86502478d5108e2e84b2f385d5dfd7bdcef1c3c9f3806e35805b4b3094041266a
SSDEEP 768:z3aqDgy448B7T1TJSiX7cwmZNRHAwyKY+MsXUmuzQT/o:TaUgyD8BFTYab5WMkUrzQTw
TLSH
T19323F821BF139531C2896734CD4BE3A9AE913C02DFD9A58A7580732DEC72560DC77C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA7229.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\portuguese\BFA7229.tmp
Size 11KB
SHA256 4ad601ad01de21aafa712de89e9071c24eb5ea2b37e2c1a49a536ff32aae282d
MD5 bdcfad2ef371c8bdad40f6f0e23d34d8
SHA1 4a1e219c7dd22f9e868cbae6d98bc92c196d1f7c
SHA512 57f0eb9d67a684475d77db74a2ab0b2a5ef6c949c8c21aa4a766fa9abcdcafb2d1991bba040b8ed0288f3c7897aff4411e93fe2dbc19fa68dbf08798bf476dac
SSDEEP 192:97uJP5X07VcUgafkn/KmGCDhldgumoeVU7MzVio+iA:97uzX0vga6/KmGCDhldgumoeVU7Mzgo
TLSH
T1AC4231547724DA36E04DB534CC2BE35E6BD1BF2ACFE102077580B35E6AB56041CBB92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA73D7.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\spanish\BFA73D7.tmp
Size 11KB
SHA256 13f8386cf9010ab13a3dff8e6dae20553fa63dff7f573daae556ab2fbd114d80
MD5 cef4b87d1da90a9c399a298cb142af97
SHA1 6e9c16f8b21866fa716ecd7af5ac9959ad7a9b37
SHA512 7fd0ad614e38612b56b4a689063ce46bdc54db3c67d1059df2fca6fc22495001ff1a90c9daf5efafad9040ad65a625449ff67ed7146169cf8962bd780a99ac69
SSDEEP 192:blJP5X07VcUgafkn/KmGCDhldgumoXEY7MzxNH:blzX0vga6/KmGCDhldgumoXEY7MzxN
TLSH
T1794233157724DA31E08DB434CC6BE35E6BE1BE2ACFE102477580B35E6AB56041C7BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA75C2.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\resource\thai\BFA75C2.tmp
Size 12KB
SHA256 70e86e901bb44c1c9da57c3b128ab7601753d835af5b13ff5b878d230c756c23
MD5 b2802d59667ca4e45db08b20b13220bb
SHA1 8b804938618faea763088b34deeebe74ecf4389b
SHA512 aa45444da5378f45c6da333d3b36e9f222a6eef941ce737fa2122831c9e9201a15e9ee732ecd5b71821d5b265cc80f692596f922ab4a78ac40cffc72fe2ac5c8
SSDEEP 384:VV0zX0vga6/KmGCDhldgumon7MzDoerIw:HjoerIw
TLSH
T15A4242557724DA32E04DB5348C2BF35E6B91BE2ACBE112C77180B35E6AF46041C7BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msv5782.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\msv5782.tmp
Size 411KB
SHA256 d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
MD5 e3c817f7fe44cc870ecdbcbc3ea36132
SHA1 2ada702a0c143a7ae39b7de16a4b5cc994d2548b
SHA512 4fcf3fcdd27c97a714e173aa221f53df6c152636d77dea49e256a9788f2d3f2c2d7315dd0b4d72ecefc553082f9149b8580779abb39891a88907f16ec9e13cbe
SSDEEP 12288:zNb8zxr1aWPaHX7dGP57rhUgiW6QR7t5qv3Ooc8UHkC2ejGH:zNb8Fpa6aHX7dGP5Kv3Ooc8UHkC2eKH
TLSH
T10E9428237A4649F5E1D223F46289932143F9FCA40721B3C3E2EFE1A99F583D56A33951
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msv57A4.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\msv57A4.tmp
Size 755KB
SHA256 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
MD5 bf38660a9125935658cfa3e53fdc7d65
SHA1 0b51fb415ec89848f339f8989d323bea722bfd70
SHA512 25f521ffe25a950d0f1a4de63b04cb62e2a3b0e72e7405799586913208bf8f8fa52aa34e96a9cc6ee47afcd41870f3aa0cd8289c53461d1b6e792d19b750c9a1
SSDEEP 12288:yMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BV0eAI:dmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV4I
TLSH
T1B2F49D11B692C073C1B221300629D7B25D7BB8711035946BBBD59F3E1FB47C2EA277AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BFA761A.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\resource\english\BFA761A.tmp
Size 95KB
SHA256 16c22249290009b9d56167d24a42f79312cd36ab336fe73223663293443029f3
MD5 7395c7903cb91dac80322ec20179e36e
SHA1 2982ead005c8f87a4dd53c8e14c73c71f6a8e5b8
SHA512 610b6cc71e1392222f72c49f626c1cba8c6123324d523643fcb3a903eb16042ee893a376dd4724faa6aa453113f9d5f11d0fc572af2c51476fbe8413bfcd1832
SSDEEP 1536:WQ1gygLl98Bpyuw/QG/CxIlAUrIWfdgWrl4nuAX+PnzcD5RITrUi2hMm:LuleFxxIuufdnlAuW+PaoUi2
TLSH
T1749359463B12DA35D20DA534CC6BE36E2BD63E22DFD8450B3991B31E69B18601C77D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E79767B.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\resource\english\E79767B.tmp
Size 2.1MB
SHA256 3119f7be73025787ed911994b5bfa145ba125c2278e2fe6823ec946dd0873598
MD5 a86cef09ac4eba2aa541cd361e4188db
SHA1 4e2d844fcbfafc36de4e73dbab5d8a20e4afe837
SHA512 9dbc6fe9a58d9935467f2a4900df00a30a59808519f0db2e7dbe6f01334fcdff80f05139436ee3d0ea24890270da24175a949b04a49d42845d1489a82db9b729
SSDEEP 49152:6QHoZ96w+CGBb6b9n9dOW9dOuqbmF3D74Svk6:FHoZ96wVGBb6b9n9/9Dr
TLSH
T197A5CE557702CA32D64961709C8BC75C6AA93C06EFED8507708CB31EAB724B44C7BEA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EEA771A.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\resource\english\EEA771A.tmp
Size 43KB
SHA256 ecc1415a2f6f1b63dce618f28ce64261ee88e6907cba4b628b39d60f0713221c
MD5 13aa4a1c523ac7e36ce32d95d21a89fc
SHA1 a4bed475ca1afd68fe1dd2371b52386143d3a364
SHA512 31e85336923a860a6b3cb58f84a1064da99668f1123eb588b786835d0791d1aca3932dc9c060c0fa5dd8f7c51e348a99ad293f3ff3112f59db9c2ce726f31056
SSDEEP 768:5eRCRxDwRhb6hDWEbZ/Jt61wIrfQ7YQbJvPGrk2iz5jHfLQUU:YGu6hHbZ/JtwvrKYQbZGr2FD5U
TLSH
T1A2136C817A21E325D140A730CF17C3BC668A7E2DEE84800B36E4B75F79B95681DF39A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vco58B2.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\scan\vco58B2.tmp
Size 49KB
SHA256 887c58e0b5e315f2d9714bd4d0f8126ef615d5792baaae4c7b75409fdecb5c45
MD5 a7e63d69f1d55a3662907ecd48b345ca
SHA1 6fd80a3c9134cc09ac7c353d64ff2b1e34d55206
SHA512 2564de05fd1763e26a1b1e00603961eb2f53624005a11837dd1e798740afae3e0e7ab4d48e76cc23feca0ccc509399659df6e41976c3046d95cc600cab87769e
SSDEEP 768:JS1woYlhhX8nAJ1I84lIFIKC4YWVbX+zZkaKpnnh5L2jmPGE7y/gDFMi2jpvD:8vYlL8AJMlIF7phVbeKVLSO+/H95D
TLSH
T1B6335B6031E55115FCE236F857FEB0B686BCFACD433501FB538856D889A0AC1AA7429F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6DA8D20.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\resource\english\6DA8D20.tmp
Size 2KB
SHA256 29fe6a1721bfc0a4c7f120c0918e5cc8820d6524046a8d622afda0f6d7fac140
MD5 37175d9ba489f88c5f28fb4699686bee
SHA1 ff61c6ba18b91fb850d55059dc2f9847eff5cfcf
SHA512 d32ee2db9b6ce4ccfd12d4ef9374666b8706f05983d50f4cffd970766807a4205eda7500c1590b16c14840d3ed21c59b467899372ce406616ef62fc5e9bccadd
TLSH
T1DD5136597720DA35E44EA179CC6BE71D7BA17D21CBE11103B08AB30D2A725084C77D67
MD5 SHA1 SHA512 TLSH

Submit Download

E798D33.tmp

Path C:\Program Files\CELSYS\CLIP STUDIO 1.5\CLIP STUDIO PAINT\updater\resource\english\E798D33.tmp
Size 262KB
SHA256 4438a9c73159dbbc73890aea19b1240f159c2f94ce8eee73ce19df31ff2c22a6
MD5 de809c7e931d9eec29ea88ea037d639c
SHA1 2bb9c040d2eb9b31e7782ca714f887b7b0bee5db
SHA512 aa487d77bb6b91a3d623cef56f16c60ac72e19073d4c9b787984d19bbf3b519785f0e392298bf53e1a17c7301504bdb0d5e0f93664e51dad0ba933736c00f1f2
SSDEEP 6144:TEWkM/KJ8sabcO/BWavhDy2np5keZsw02nlRnBuKRVu5:/sabcgp5B
TLSH
T1D044B6077300C731D58A13719D5FD39DA3A57C29AFA2865730D8F31D22B34A88E7B99A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cloD052.tmp

Path C:\ProgramData\CELSYS\CLIPStudio\Common\Material\Install\Paint106\0ad3c5b5b6-ea4e-a3a4-6fb5-a0bbd7d127\cloD052.tmp
Size 2B
SHA256 03b26944890929ff751653acb2f2af795cee38f937f379f52ed654a68ce91216
MD5 596a3d04481816330f07e4f97510c28f
SHA1 39a28d38b27d077bf9fe4f5a49e1b2087c4e7902
SHA512 372a39389579f9831162718961abc99ac3d38f137eb831f084b801e946557e70858255fee5b2467f8180ee2ca905629ec7a9306f7da192a3775cb2ddf71866b2
MD5 SHA1 SHA512

Submit Download

xxxD067.tmp

Path C:\ProgramData\CELSYS\CLIPStudio\Common\Material\Install\Paint106\0ad3c5b5b6-ea4e-a3a4-6fb5-a0bbd7d127\xxxD067.tmp
Size 20B
SHA256 34a5b25345108d065a96156e2b528fcfe146c814dcb503901d0b17c33eb93e7f
MD5 4dd1ab34735528d7bca1d0a392446d5f
SHA1 ed8dc621d94a1980781c9288604ff4a7118fbf25
SHA512 d465428f7f0e0a47b19127a1fab4b8d6c0c95abb6696c0df407ba23a3e14d3ca3b4ab7b0f46266a789cea2254e263b86a43be5c1145c5b9e1a30b19fe915092e
MD5 SHA1 SHA512

Submit Download

ISBEW64.exe

Path C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\ISBEW64.exe
Size 198KB
SHA256 9523ee07e5591102b16b48a9d7059ddaef997adabac0430d1c2a660d5a45e4ee
MD5 28857f9a5dc8af367e533076267f5b4d
SHA1 ddf08d6ccff46eb14a9441dcd5db0d9c08b424aa
SHA512 8989f6d28d02f3ae5fc494c4d8a87f9d2fd252dd468418c8410b3dce012ab2913f791f20e020260df294fd2b43d754cf3a4751d1e803825d432202685e51ba1a
SSDEEP 3072:nmpNAMsLdwioq9aTpoJd9ryYK+oHT4SCPFBUx+8e6vXFaYmUF1BIVz4e:mzsLdPT9ypoxurz4SKOF/wV3
TLSH
T153143A0672A850F9E176C23988960615F773BC210B609BDF13A4537A9F337D1BE3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DIFxData.ini

Path C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\DIFxData.ini
Size 84B
SHA256 6bc8b890884278599e4c0ca4095cefdf0f5394c5796012d169cc0933e03267a1
MD5 1eb6253dee328c2063ca12cf657be560
SHA1 46e01bcbb287873cf59c57b616189505d2bb1607
SHA512 7c573896abc86d899afbce720690454c06dbfafa97b69bc49b8e0ddec5590ce16f3cc1a30408314db7c4206aa95f5c684a6587ea2da033aecc4f70720fc6189e
TLSH
T118A0017783B8E720655448C3FF2C3047BA65247040204F7262410BC3D87AE53D82F0D1
MD5 SHA1 SHA512 TLSH

Submit Download

FontData.ini

Path C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\FontData.ini
Size 37B
SHA256 a7e91b042ce33490353c00244c0420c383a837e73e6006837a60d3c174102932
MD5 8ce28395a49eb4ada962f828eca2f130
SHA1 270730e2969b8b03db2a08ba93dfe60cbfb36c5f
SHA512 bb712043cddbe62b5bfdd79796299b0c4de0883a39f79cd006d3b04a1a2bed74b477df985f7a89b653e20cb719b94fa255fdaa0819a8c6180c338c01f39b8382
MD5 SHA1 SHA512

Submit Download

InstallshieldSupportModule.dll

Path C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\InstallshieldSupportModule.dll
Size 184KB
SHA256 2a27b247c1387082036bcd83fb20dbef9d923b0ffa56573c093d0b71edf6d57b
MD5 a65d3f22e82802871d3f698fc1016f21
SHA1 dc17fe50a1b1821f5f251114897faeb889457398
SHA512 08054d4ccbf3c1f6c40e338c273908ac3250a23399328ed645a7bfd79fa28293db59718d8114316a2263345347d03f772b390980c24ef78acced69d92030a968
SSDEEP 3072:yNmXLx9gw05zEX73aIpmQdKd+mATs2bUvFBqVqu:yNyLxCwWzELx/Knq
TLSH
T1D104D32136E88036F2F73B34EEB846255E2ABD618F35D4CF6B85546E0D61AC1DA74323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_isres_0x0409.dll

Path C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\_isres_0x0409.dll
Size 1.8MB
SHA256 d79fc7fdc396927dac03419eea2f9a326c920a094074eb070aca712cdf0629c6
MD5 8afdae8fe83d1a813b54e48230aed2db
SHA1 ad456e1f5440dbd40d9e7febbde0bbb3dff3ae4c
SHA512 fce61a6f14af69495992e6684d821db8332069651ec0c4a47c09e953362b19a5cebdace32e07993533ca0cda8ad6be9ca89ff6c13d4ff5a8b637897c4b5f5bf4
SSDEEP 12288:9s4d9dfaOdWfIApJCPtjvntnSb8COevQonCLPub+79Pc:9hrWQADCPtjvntnSb8COevQonCfNc
TLSH
T16F8545352E9E5018C47A6E3A38224A6009C96F4363B160F7661F1D3086FDEF9667D3DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_isuser_0x0409.dll

Path C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\_isuser_0x0409.dll
Size 361KB
SHA256 9d20c6dd64b6947fd54248d710119bb04bc025c7f6f12172ad233ff4f37ad860
MD5 e8b3e6ac7a6e11fe0e37d2f235326ada
SHA1 bf0422272967545b4a3ac79294540f282efd6def
SHA512 a5ea1ee5cfb9334387086f62d9cfe46062fb959b39d5135126925f580d80d4cc7e22461a23b3f88394b16b74a60df3319c05ece9a8da648db747d25ff992884d
SSDEEP 384:+DI0uULX1i7CwnIpbDxEHOeVRMQ3J/uo6ki2f7dIQibLMa/TvLSJIVE8E9VF0Nyf:WI0RLliuwwDxgOrr2WbLMOu2E1
TLSH
T18274F4001EA1F9D3E6E99E7BF59482F60921EE82DD7C854B6254FF79B730A00D9013A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

isrt.dll

Path C:\Users\Admin\AppData\Local\Temp\{83969F62-6E61-42CB-B7F2-04327F1E4B7A}\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}\isrt.dll
Size 1.1MB
SHA256 423d365b5737f925019c17b478a515b488cc55ea990e6ebeb9a77cdc7e2279e0
MD5 ff43031211486580947f25f293b8125b
SHA1 31030ea85fce86a7679f80771838d58df631c28c
SHA512 42196211580f2e22fd53dc29f9ce6d560a8cef2e2dae27ce5f5e77457ad9806b66df09aea6c27dfd2fbb781a975fa1c144e215d776ba31b6b9babbcc56190b1f
SSDEEP 24576:MwG6WnSYqWVd97DfzATkAXPk/DfD+WHeWRqbsg:s6J3q9/fsVcTD+WHeW4bsg
TLSH
T1A7459F217AC88072E66F1231597CA6659BAC64300F7381CFB7541E6E3E709C2EB35E97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CSP_400w_setup.exe

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\CSP_400w_setup.exe
Size 914KB
SHA256 bf9384ccf1e3c24b0b311067b126d894749b8e69a25acb7d77a35cc84d8db005
MD5 f65c82e0a288ebb6bd5d70d7c3a2ef6a
SHA1 3d957e6a444230622143bf53fe31d2fd10edaf12
SHA512 148e579263d418e8468802d08535f5648b9f07c90aee9dcc3a4a5cb57942205b13bd7cb1934b92fc2546a1d6f8e3fc9651202805c43932913305df103c48621c
SSDEEP 12288:8rjd+AlfEUDmB/qokqYKdcjIS7zU3VHS2gqZ8fEZUXL/:Ijd+AZEomBJkqe7YVHSCZZqXT
TLSH
T10A153A23A644402EE5B654319D6F5E70D6A93C334B2241DBF690FE292CF05E1BD27B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x0404.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x0404.ini
Size 10KB
SHA256 5d31e009a36325032ab1521d2b1ca1a5be89bb969d1948d4fe99c387b1055db1
MD5 cd658d92df1ad180483136cd6960e7f6
SHA1 0d2808f19c659312372386276bb8dec386b2b638
SHA512 84540ddb853c9dcf49c2abe931601884f744c341d33f2f615f9d3290c41ead9d0709e0882358d5326b87fa25adf61ea1ff7a2b9bad52bfaab18b31d08047da31
SSDEEP 192:N2wEq5DSXJ0oJcQoDeNtkob5zaG/NFroVVV3d9S7eDd19+o:5v5DSao3FFsHV3dIYdv+o
TLSH
T1DB22DE5D0A8A132F91F69B05EDE08323E75369416E2CD68486D98FC53AF1C41B07B7EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x0407.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x0407.ini
Size 25KB
SHA256 b4d2bf8ddeee1e2acc5dfaa14ac602a69f52195c38eab4660408fd879ad41a56
MD5 1f71deaf7e3c298f4c4112db5e7ac029
SHA1 2d653e79c55e31cd00af51313a7b07aed123ab04
SHA512 e0c0fe70904f768ebd191cd8aae285a7e851ff5e5ee3cbe5b78a708b6f378db33f499291eb89ee268fd3b3a694abaf6826162571aba74a6837f65c95a8078666
SSDEEP 768:2LNV1dYKJpgAdtrPZuQ2g2HhmD7tnLOW8oXxN1HYLifZThxfrkTI0n497:2z1djJpgAdRRuQ2g2HhmDh
TLSH
T119C2CE2657E94618F2F36F00FDB853626E62BCD2BC79E50C1380559C18B1B44D9B2BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x0409.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x0409.ini
Size 22KB
SHA256 cdb316d7f9aa2d854eb28f7a333426a55cc65fa7d31b0bdf8ae108e611583d29
MD5 1196f20ca8bcaa637625e6a061d74c9e
SHA1 d0946b58676c9c6e57645dbcffc92c61eca3b274
SHA512 75e0b3b98ad8269dc8f7048537ad2b458fa8b1dc54cf39df015306abd6701aa8357e08c7d1416d80150ccfd591376ba803249197abdf726e75d50f79d7370ef3
SSDEEP 384:CTmyuV//BiTbh/YgAwC2WrP2DBW5/Oa0Mhs+XVgv:CT6V//BiXh/t/lWr0pa0Mhs+XVgv
TLSH
T115A2BA5667F94219F6F77F50FDB812221E7ABC82AC38D25C1280499D09F1E84D8B1B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x040a.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x040a.ini
Size 25KB
SHA256 4e42d96cf24224d3ed43e7e14227b96fde3b43235636480f8861db0b048ffddf
MD5 b216bc7b827622578e60b0b37ce9c4c0
SHA1 18eb706aa172440c783382fb317dcb2ef7d04e2a
SHA512 e4211ee47bccf98369b7760502cc04e7c036e7ee8eb8a29143519c35cf5295f9984ee8de1fc8d7e93352119f9cf5fcb3412b7e3749b1540fd38af7d996ab0700
SSDEEP 192:XqCTxiKLkmEq0w/2HOK8deU2K4/WaChA2ZwxD9VErXWlMHtDaNJVLr5:XqClLkmTDz4uaCC2axbYXWSHZaNJxr5
TLSH
T143B264116BF9125AF2F37F05B8B906668E7ABC91AC3C940C43901A9E0CB0E44DE75B77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x040c.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x040c.ini
Size 26KB
SHA256 d31b120f79c2fb8cd6f3fd7ede220a30ca3bb84e4d3c8b05c1bcc833734d13cf
MD5 9a10eddf9169f9508688eace7b9e7797
SHA1 fe256fc1dd6a26478a7d06712d789d3f0db431d5
SHA512 c3d5534e5edd819c03198ec19ab17bd90f29b33bd2f35a7f26e09ec4d59750065c4c3820efa2b6c8862e2fc00a0cf64fa928abeb62a3688b399eeb275de3ae5d
SSDEEP 384:dadl9gg5LFghAYpI+JTr0bBQBWRGgG8fY8JfuqGWzjYN2D6NRMYO1:dMXFGhAisbBQcL68JfuqFjYN2Dea
TLSH
T1BCC2881AA7E9421AF7F37F01FCB942224E7B3C9AAC38D51C1680499D18B1E54D8B5B37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x0411.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x0411.ini
Size 14KB
SHA256 3f0778538202a35483c084fb0b109f693a9853f64d6452daa5c92ac75620aadc
MD5 b807ce7552e96dc1928775956b9f422c
SHA1 d25122157365130bebae6497617d28cd86e8c638
SHA512 bb06ca5784e77ceb15331c5c6a9abad27364b1c5b800f229cd7b6d955fb120cbd7879c299508b606760f714b17a4a50aba333ccf6da7fb9bcd88b50772f64f6d
SSDEEP 384:DKeEbO3nlKWDUK21OxgCvk3aV4ls8Gb8DVyl:DKtbO3lKWoK21OxgCl7Uyl
TLSH
T1DC62F04D6A55472F70F28655D4D0B3A32788FC20A5AE4CC44AC99ECE11A1D8EB317BFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x0412.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x0412.ini
Size 14KB
SHA256 9416c7b55d1fd9dc06f20e1e3ebbac1357217113833553d49586e339360529c7
MD5 59b2e4a2d3898f3e4f49186ff150e26c
SHA1 42f49643ef257d3ba2817af5731a165b42c42bfd
SHA512 e6601b583567291088f1c522adf38dbc3408855463429354c7ceee2a46459c76daffc3db1f770e4979a59b88cea43599f88eb9b4dd170cf337008039775dff62
SSDEEP 192:NtPl0V894Pp/WwJTqSuQusVG5qTKBUxVzliQZWNtgHmYgHgsNSbiE/VR3uG:+G94xOwJTqSuQBYVNtc3OS3V1V
TLSH
T1D2520FAE59ADC12A61F4AB16EAE103A393022401795F5904F2C05FDC65E2BF1E1773EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x0416.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x0416.ini
Size 23KB
SHA256 af54db26c9464b7a610d7eb73f06f36b43ac51e879ac4d21a1c70eb4524a2b24
MD5 eb6dae1391cac22014afd6ccf4c2c333
SHA1 0476104dff6077de57ed24d43b2d4f8a74b6ad3e
SHA512 d40a5478056ff3a59e06dc779166baf144eb0db33819180fc6ac47808f49a2249158d8e5cf106c654ce42ab71b6f6f16c3b9777a6b445b1297f741affe09f587
SSDEEP 384:oMfAomJlOWT/ONbW4WSWIWwWaW/WxWyWUW/aW2WKW6WSWUhAWsa9uA+K4D:o8Aoeljchya9uAM
TLSH
T1E9B2AB169BFC1259FAF36F02A9B412668E777C52AC3CD50C02904AA91DF0E40DDB5B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x041e.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x041e.ini
Size 22KB
SHA256 372dc097b80442810781d777cdd23296a0558be58b3418f4ea088cbcd7f661b2
MD5 733f697e11797f50f950b08701a0c1ec
SHA1 e24d6f9064dfa404739485647a5bd8c6b7165579
SHA512 edba839537d63713d6dd708384296d4b6d995dacd9d01813063810e230deafc166baddb2c987442f7985b01a283454a7f5fa4076ebc276fca03c95d175091fc7
SSDEEP 384:gLd7wF0eZk0BlZhY6MwXBKAp/1uz2v74a/M5DW61FJ9Il5krHeCsHPKOMIKTnurh:s+F0Wk0BK6ZBKApYz2v74a/M5DWGRIlB
TLSH
T16BA20278967B2303459BC1F4F2D04F7B7D1CAA22D86FC184C09BCE246190976A6F2DAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0x0421.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\0x0421.ini
Size 24KB
SHA256 af34e34cb979dae26a2ed08673e0ea20fcdb5d1f7ee9acf42f93afe16a64521c
MD5 94afe5b2ac909992f6b7e3c629815d7d
SHA1 f6cea0560818c77d9de5447cc0d5e24da12e52bf
SHA512 5acb1c761a392b96588c5c223e25497a80a7ac7cf8d80e5efb55bdb225544e8adbaafd1ae1f51bc076a29e7d7bf229ac57c8728b969f68b15678f1ccf8445826
SSDEEP 384:0hCECEppc1BESTq8brR9mICSPxcowd9YORjLorlqHFt07yrNBcUrrWuBLVZH+xP3:0wU9L5B9tT+
TLSH
T1B8B27956A6D89119FAFB4F00BEF412A21E9BBD52BC38D15C13845A6C1DB0AC0DC71B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ISSetup.dll

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\ISSetup.dll
Size 1.6MB
SHA256 633c437e6a992e811de3bca4e4357ef07b5030d7b5cfe81b25a201533cbcd53a
MD5 e5c073a3dccd833b7938411a68f6f7b9
SHA1 4147813c298671ec38393811bc9a4fe677e2db05
SHA512 533e0e94bfa63b16bd0344686db68379abbd7d06be0ba5a4663de88392a6ea880e61a0f4480df8cfd76e12acaf9f645c1414383160e4f9c76b71380f4b198784
SSDEEP 49152:b5bepUVchQcCeaIPXkwVfmv85SEdZiZipAsYdBE6tN6f3Pf:Ze/5SEdZi8pAsYAku
TLSH
T1D2758D21BA48CC70E25E0232552DD3A5D2ECAD317F6181CBF790735D6DB16C2AA31B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data1.hdr

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\data1.hdr
Size 618KB
SHA256 54c4be543d8f23a6b5d13844d8e75c268c5c025c79d6a6c8e7d142c33170bf6e
MD5 92f7c0c6248c234df97d36fc337aad6d
SHA1 773d2ed467e02b0743034e85755dc4dd2e67345d
SHA512 0fc8f9be2b83766fff49406d1cb3d20426fa8c8ff3aa02bd87a7ecbde52c49cdd98e464553b7569e8799301a887166fbefdb47f2643da0ace06fcd8e686b34a1
SSDEEP 6144:5Q8VOy9tIOqPEwQeF2Wnn/U56Dt9m1iUxe3oy4I/p:68kyIOWvD2WnMI7X
TLSH
T1B8D49A2DD9C44967DAB78B71F9FA04877EB0BD123713DE1E086282B91C13B15A990F2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

layout.bin

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\layout.bin
Size 848B
SHA256 993fa54274eee794e9d45e45bb653d437a12d53416650b29b4bc527f7b300c36
MD5 d46a8ed2984a24add03de20e4ec5acff
SHA1 f5dd5a2e5cb080480a90fb6e6a07ea67b135e8a5
SHA512 18b18674ae34e0428629e4be967e70e834eaabb1b468ad35671a589ec8f95b516545d15438eab8521f7de4ed2754b4a42c5d5fb5c2418388e4285528da4e32d5
TLSH
T1480192573EA3270FF6FACB3C46E815834419B90AE904F3CD88C057AA141720799A1E3B
MD5 SHA1 SHA512 TLSH

Submit Download

setup.inx

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\Disk1\setup.inx
Size 263KB
SHA256 be4304e80c12294a2a7a8ef1e7231562c92f9e3ba2e45281eedb621baec562f6
MD5 0d696dc57259b50644d5d7d6df25a35e
SHA1 48e31bd63526d05338b1f6824e5e89babf260723
SHA512 86ca0e81c30b8bcea90f0b6af7e060d1408317e0db98fad607139a5bb7a126cf7b690e6beb3f65e53b8d082e69462d8eaaf00898a074a3ec438e9afcc203836a
SSDEEP 6144:jhx8/jfoKpA3sbyF/JvgC2IiVTcfbEe8My:jgj+8bG/JEYETMy
TLSH
T1FD44B0A94D470FCFB72889EAF437089075C6EC4DA1B945E7A3A2C590DB7D4FA00DD09A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.ini

Path C:\Users\Admin\AppData\Local\Temp\{F46DD49F-88D2-4412-B5FB-BD568E3CF9DF}\setup.ini
Size 2KB
SHA256 ea239b8e11fd28a85387e9b7a5324a60fd29fdbf113aa9f89f62096b6bef101e
MD5 fc8a0ac43218330f118424a64f5f0cd0
SHA1 36ec4fb5f86e521ad67519f2eb6195981ab4ac5d
SHA512 fb6d3aca0781e3c9c2a174abd9f4ba6de2536cff28fc3905c3cb9f19a9d5ff637066acbd19560579b1d73f43b92b0cb695f81d3f0853e3548759f539d67108b5
TLSH
T1A2517C176FE7004FBAB74A40D9E0907797267D51282CC74D4AC04B9A24F3D868926FEB
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1112-3189-0x000001BDA9F70000-0x000001BDAA19D000-memory.dmp

Download

memory/1112-6554-0x000001BDA9F70000-0x000001BDAA19D000-memory.dmp

Download

memory/1112-586-0x000001BDA9F70000-0x000001BDAA19D000-memory.dmp

Download

memory/1388-202-0x000001A30DC30000-0x000001A30DE5D000-memory.dmp

Download

memory/1388-405-0x000001A30DC30000-0x000001A30DE5D000-memory.dmp

Download

memory/4912-132-0x00000000064B0000-0x0000000006677000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads