Overview

overview

8

Static

static

1

PerfectCam...01.exe

windows7-x64

8

PerfectCam...01.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    102s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/04/2024, 09:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    PerfectCam_2.3.7124.0_Subscription_PFC231124-01.exe
  • Size 137.5MB
  • Sample240416-k76pvsfh91
  • SHA256 51f152320b13eeb19538420087a5221e704f03acf7aebcb96751a51d762c8e5d
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoverypersistencespywarestealer

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops desktop.ini file(s) 2 IoCs
  • Checks computer location settings 2 TTPs 8 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 16 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 7 IoCs
  • Executes dropped EXE 23 IoCs
  • Loads dropped DLL 64 IoCs
  • Registers COM server for autorun 1 TTPs 18 IoCs
    persistence
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 9 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 41 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 8 IoCs
    evasionspywaretrojan
  • Runs .reg file with regedit 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 29 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PerfectCam_2.3.7124.0_Subscription_PFC231124-01.exe
    "C:\Users\Admin\AppData\Local\Temp\PerfectCam_2.3.7124.0_Subscription_PFC231124-01.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:3188
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\setup.exe"
      2⤵
      • Adds Run key to start application
      • Drops desktop.ini file(s)
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies registry class
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1400
      • C:\Users\Admin\AppData\Local\Temp\RarSFX0\7z.exe
        "C:\Users\Admin\AppData\Local\Temp\RarSFX0\7z.exe" x "C:\Users\Admin\AppData\Local\Temp\RarSFX0\SupportFiles.7z" -o"C:\ProgramData\SUPPORTDIR\20240416_91637_1400" -aoa
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of SetWindowsHookEx
        PID:3620
      • C:\Users\Admin\AppData\Local\Temp\RarSFX0\7z.exe
        "C:\Users\Admin\AppData\Local\Temp\RarSFX0\7z.exe" x "C:\Users\Admin\AppData\Local\Temp\RarSFX0\Data1.7z" -o"C:\Program Files\CyberLink\PerfectCam" -aoa
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of SetWindowsHookEx
        PID:3908
      • C:\Users\Admin\AppData\Local\Temp\RarSFX0\7z.exe
        "C:\Users\Admin\AppData\Local\Temp\RarSFX0\7z.exe" x "C:\Users\Admin\AppData\Local\Temp\RarSFX0\Data2.7z" -o"C:\Program Files\CyberLink\PerfectCam" -aoa
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of SetWindowsHookEx
        PID:4308
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:2520
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3184
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1052
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1956
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3192
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4868
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4864
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4312
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        powershell -inputformat none -ExecutionPolicy RemoteSigned -File "C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\tempfile.ps1"
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3496
      • C:\Windows\SysWOW64\Regsvr32.exe
        "C:\Windows\SysWOW64\Regsvr32.exe" /s "C:\Program Files\CyberLink\PerfectCam\REGX.dll"
        3⤵
        • Loads dropped DLL
        PID:3860
      • C:\Windows\Regedit.exe
        "C:\Windows\Regedit.exe" /s "C:\Program Files\CyberLink\PerfectCam\default.reg"
        3⤵
        • Runs .reg file with regedit
        PID:240
      • C:\Program Files\CyberLink\PerfectCam\WDExclusionPathTool\x64\WDExclusionPathTool.exe
        "C:\Program Files\CyberLink\PerfectCam\WDExclusionPathTool\x64\WDExclusionPathTool.exe" -Add "C:\Program Files\CyberLink\PerfectCam"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1312
        • C:\Windows\System32\cmd.exe
          "C:\Windows\System32\cmd.exe" /NOCONSOLE /C PowerShell Add-MpPreference -ExclusionPath "\"C:\Program Files\CyberLink\PerfectCam\""
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:4308
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            PowerShell Add-MpPreference -ExclusionPath "\"C:\Program Files\CyberLink\PerfectCam\""
            5⤵
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:2684
      • C:\Program Files\CyberLink\PerfectCam\Driver\CLDrvInst.exe
        "C:\Program Files\CyberLink\PerfectCam\Driver\CLDrvInst.exe" install "C:\Program Files\CyberLink\PerfectCam\Driver\clwvdPFC.inf" root\clwvdPFC
        3⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Executes dropped EXE
        • Checks SCSI registry key(s)
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of SetWindowsHookEx
        PID:8
      • C:\Program Files\CyberLink\PerfectCam\PerfectCamService.exe
        "C:\Program Files\CyberLink\PerfectCam\PerfectCamService.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:4432
      • C:\ProgramData\SUPPORTDIR\20240416_91637_1400\TaskScheduler.exe
        "C:\ProgramData\SUPPORTDIR\20240416_91637_1400\TaskScheduler.exe" "C:\Program Files\CyberLink\PerfectCam\PerfectCam.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        PID:3612
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
    1⤵
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1964
    • C:\Windows\system32\DrvInst.exe
      DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{16eadabe-51fe-1346-a70a-8e5eeee03b80}\clwvdpfc.inf" "9" "4eb50072f" "00000000000000E8" "WinSta0\Default" "0000000000000158" "208" "c:\program files\cyberlink\perfectcam\driver"
      2⤵
      • Drops file in System32 directory
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      • Modifies data under HKEY_USERS
      PID:2708
    • C:\Windows\system32\DrvInst.exe
      DrvInst.exe "2" "211" "ROOT\MEDIA\0000" "C:\Windows\INF\oem3.inf" "oem3.inf:dac64d37d9d525a7:clwvd.NTamd64:2.4.35409.10522:root\clwvdpfc," "4eb50072f" "00000000000000E8"
      2⤵
      • Drops file in Drivers directory
      • Drops file in Windows directory
      • Registers COM server for autorun
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      PID:3908
  • C:\Program Files\CyberLink\PerfectCam\PerfectCam.exe
    "C:\Program Files\CyberLink\PerfectCam\PerfectCam.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks processor information in registry
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:884
    • C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe
      "C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe" /UnoPath:C:\Program Files\CyberLink\PerfectCam\subsys\BigBang\Runtime\UNO.dll /IsRegister
      2⤵
      • Executes dropped EXE
      PID:1056
    • C:\Program Files\CyberLink\PerfectCam\GDPRDlg\GDPRDlg.exe
      "C:\Program Files\CyberLink\PerfectCam\GDPRDlg\GDPRDlg.exe" -a"C:\Program Files\CyberLink\PerfectCam\APReg.url" -m"C:\Program Files\CyberLink\PerfectCam\MUITransfer\Resource.dll" -l"ENU"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious use of FindShellTrayWindow
      PID:3448
    • C:\Program Files\CyberLink\PerfectCam\GpuUtilityEx.exe
      GpuUtilityEx.exe GetMultiDeviceVendors_D3D9 0
      2⤵
      • Executes dropped EXE
      PID:1372
    • C:\Program Files\CyberLink\PerfectCam\GpuUtilityEx.exe
      GpuUtilityEx.exe QueryNVidiaCapability 0
      2⤵
      • Executes dropped EXE
      PID:4640
    • C:\Program Files\CyberLink\PerfectCam\GpuUtilityEx.exe
      GpuUtilityEx.exe QueryNVidiaKeplerCapability 0
      2⤵
      • Executes dropped EXE
      PID:932
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c wmic PATH Win32_videocontroller GET *
      2⤵
        PID:2260
        • C:\Windows\System32\Wbem\WMIC.exe
          wmic PATH Win32_videocontroller GET *
          3⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:3272
      • C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe
        "C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe"/UnoPath:C:\Program Files\CyberLink\PerfectCam\subsys\BigBang\Runtime\UNO.dll,/LANG:ENU
        2⤵
        • Executes dropped EXE
        PID:3692
      • C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe
        "C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe" /UnoPath:C:\Program Files\CyberLink\PerfectCam\subsys\BigBang\Runtime\UNO.dll /IsRegister
        2⤵
        • Executes dropped EXE
        PID:1676
      • C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe
        "C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe" /UnoPath:C:\Program Files\CyberLink\PerfectCam\subsys\BigBang\Runtime\UNO.dll /IsRegister
        2⤵
        • Executes dropped EXE
        PID:3600
      • C:\Program Files\CyberLink\PerfectCam\subsys\BigBang\Runtime\CLUpdater.exe
        "CLUpdater.exe" C:\Users\Admin\AppData\Local\Temp\CLUpdater.ini
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        PID:4068
      • C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe
        "C:\Program Files\CyberLink\PerfectCam\OLRSubmission\OLRStateCheck.exe" /UnoPath:C:\Program Files\CyberLink\PerfectCam\subsys\BigBang\Runtime\UNO.dll /IsRegister
        2⤵
        • Executes dropped EXE
        PID:236
      • C:\Program Files\CyberLink\PerfectCam\subsys\BigBang\Runtime\CLUpdater.exe
        "CLUpdater.exe" C:\Users\Admin\AppData\Local\Temp\CLUpdater.ini
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        PID:4980
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "Trial\Trial.exe "/LANG:ENU /SIGNIN""
        2⤵
          PID:3112
          • C:\Program Files\CyberLink\PerfectCam\Trial\Trial.exe
            Trial\Trial.exe "/LANG:ENU /SIGNIN"
            3⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Modifies registry class
            • Suspicious use of SetWindowsHookEx
            PID:1752
        • C:\Program Files\CyberLink\PerfectCam\Trial\Trial.exe
          Trial\Trial.exe /EXPIRED_CHECKING
          2⤵
          • Executes dropped EXE
          • Suspicious use of SetWindowsHookEx
          PID:3140
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c "Trial\Trial.exe "/LANG:ENU /SIGNIN""
          2⤵
            PID:1820
            • C:\Program Files\CyberLink\PerfectCam\Trial\Trial.exe
              Trial\Trial.exe "/LANG:ENU /SIGNIN"
              3⤵
              • Executes dropped EXE
              • Suspicious use of SetWindowsHookEx
              PID:1960
        • C:\Windows\system32\werfault.exe
          werfault.exe /h /shared Global\8f011ca798c1438683b3c5ccfbaa6a7f /t 4508 /p 1752
          1⤵
            PID:1640

          Network

                MITRE ATT&CK Enterprise v15

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                ProductIcon.ico
                • Path C:\Program Files\CyberLink\PerfectCam\Boomerang\ProductIcon.ico
                • Size 220KB
                • SHA256 3b800aa790b186e4448bdd571d6b8fbf2f1a5bffb0e5f6672bfd47927cb04ce8
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                kanten.mo
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Lang\DEU\kanten.mo
                • Size 93KB
                • SHA256 29bb7d14cc0e9a8979767a019e9758062865d4f93deb449dad012a626f944e2d
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                subtab_hm_h.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Common\Media\button\subtab_hm_h.png
                • Size 170B
                • SHA256 f634d25c448ad0bf71eef6cc9e5575cd8f717ec1f8f977915074629b85fd2f48
                • MD5 SHA1 SHA512
                Submit Download

                subtab_hr_p.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Common\Media\button\subtab_hr_p.png
                • Size 87B
                • SHA256 5cb62074105f1d4d33aa0e1a04c3c727cb6b537ac93b2367a5cb97131aadf393
                • MD5 SHA1 SHA512
                Submit Download

                bg_sh.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\IM_main\BKRoom\bg_sh.png
                • Size 1KB
                • SHA256 d4f18c2bc5143158ab2c93832409e780873f86e7af0103b92be6e1a47ab47efe
                • MD5 SHA1 SHA512
                Submit Download

                top_btn_L_s.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\IM_main\btn\top_btn_L_s.png
                • Size 141B
                • SHA256 3d35cda2996b364e614b0ae519852a0616700190166a1f1af1fdeaa8d5ca6559
                • MD5 SHA1 SHA512
                Submit Download

                top_btn_R_d.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\IM_main\btn\top_btn_R_d.png
                • Size 128B
                • SHA256 c720366d109a0a6328fb5c7fff668fa8455b243b2a71095568d44fdaaa1f8d50
                • MD5 SHA1 SHA512
                Submit Download

                colorPalette_skintone_h.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\Palatte\colorPalette_skintone_h.png
                • Size 789B
                • SHA256 85f708106ceed382fe2989152b11feeaef3365fd9bacc1fb90b74e7e7d0314f5
                • MD5 SHA1 SHA512
                Submit Download

                icon_filter_all.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\STD_main\fileRoom\icon_filter_all.png
                • Size 576B
                • SHA256 8c3205b30062210ef64376f3f61a8e73806858219666b94139c24a2fe6a2080c
                • MD5 SHA1 SHA512
                Submit Download

                icon_photo.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\STD_main\fileRoom\icon_photo.png
                • Size 630B
                • SHA256 cf268ad3c726f0b967d336ffcc71183818b21957fa854ff27aa9b98044dc0dc2
                • MD5 SHA1 SHA512
                Submit Download

                btn_clear_p.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\file_sharing\btn_clear_p.png
                • Size 274B
                • SHA256 ced60e5a79ce5a9429351dbb8e4321f504d66e210b2a0c64b03b9ffe1654511c
                • MD5 SHA1 SHA512
                Submit Download

                btn_pen_clear_arrow_n.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\file_sharing\btn_pen_clear_arrow_n.png
                • Size 153B
                • SHA256 5c96e425c982bab0e4ae62bb25ec6e289d7e3c96702790f2280e6b0dcf3d6ed9
                • MD5 SHA1 SHA512
                Submit Download

                btn_pen_p.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\file_sharing\btn_pen_p.png
                • Size 380B
                • SHA256 845b356c60d133d5851c7a83e2a72759b60baa1f9616fc8954d1d6b73d1258ca
                • MD5 SHA1 SHA512
                Submit Download

                btn_checkball_p.png
                • Path C:\Program Files\CyberLink\PerfectCam\Custom\Skin\Standard\Webcam\Media\seekbar\btn_checkball_p.png
                • Size 171B
                • SHA256 47660bf09424fd6d40293d3d6cc6e930077d97405b89f14b4a2af8f99578581b
                • MD5 SHA1 SHA512
                Submit Download

                CLDrvInst.exe
                • Path C:\Program Files\CyberLink\PerfectCam\Driver\CLDrvInst.exe
                • Size 211KB
                • SHA256 2d66338b3dfbd5e3bb31bb01ce43bd3b05aec9f09298440ad32f20003fd2a04e
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                clwvdPFC.inf
                • Path C:\Program Files\CyberLink\PerfectCam\Driver\Win8.1\x64\clwvdPFC.inf
                • Size 4KB
                • SHA256 01fd44bdf04e46360d43597de3658a91e86d10db2068231b1288e9f4e3251dbd
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                clwvdPFC.inf
                • Path C:\Program Files\CyberLink\PerfectCam\Driver\clwvdPFC.inf
                • Size 4KB
                • SHA256 27bfa1c6425d43ed2bac0ac6691078897451e7d3458bbc40252e0dd05330e29d
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                StartMenu.ini
                • Path C:\Program Files\CyberLink\PerfectCam\MUITransfer\StartMenu.ini
                • Size 241B
                • SHA256 2a2eaf7fe8ab4354dd3b0c94fbd67b342549bbb8794fc0a628b728a19920374d
                • MD5 SHA1 SHA512
                Submit Download

                UREG.ini
                • Path C:\Program Files\CyberLink\PerfectCam\OLRSubmission\UREG.ini
                • Size 475B
                • SHA256 ec680db2b638c3bd63fc31bd654a497e56c8dd9ea1668a52d4c52ecef4bc8daa
                • MD5 SHA1 SHA512
                Submit Download

                SRExport.ini
                • Path C:\Program Files\CyberLink\PerfectCam\SRExport.ini
                • Size 164B
                • SHA256 32b4c3abce7e8ec2e8726fce4ee8d3fe39df8ca6ea5d9c76520341e7449cc184
                • MD5 SHA1 SHA512
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\ara\EffectExtractor.dll
                • Size 40KB
                • SHA256 6f298d04c35b4d873407feb5ca38c5e69b3e2a3b6e001471fa88ab365dec4dc6
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\bgr\EffectExtractor.dll
                • Size 40KB
                • SHA256 a3dd937734935908326e85e1a71e725b0e1ababc93f8d88cd4f010ce2c888da8
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\chs\EffectExtractor.dll
                • Size 31KB
                • SHA256 9aac5449d9fc02199cd137dd0a5a77c4559cc35032f7ac9deeea9316e9758cdd
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\cht\EffectExtractor.dll
                • Size 31KB
                • SHA256 465deb6c5ba0da60109aff81259d83ff4ff31088242b0f5eade0e8cf1ad89ed1
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\csy\EffectExtractor.dll
                • Size 40KB
                • SHA256 d7865ca01d4343210e3efe5ebfe6b2218fadd872ff7fc14a53d437eabf4b9b57
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\dan\EffectExtractor.dll
                • Size 40KB
                • SHA256 c284cbd2f84dc0ef1293e4ba4159de1ae8eb77b267d8dbae26be715f5fe60750
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\deu\EffectExtractor.dll
                • Size 34KB
                • SHA256 e8f6d2adb57e8204e095a77728a8f5c364c5b4ba89ea3537b1e28cdf06a643b7
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\ell\EffectExtractor.dll
                • Size 34KB
                • SHA256 a5ded265a1dffef185f1fbcf8b84cc94f0f7322abf75c2f80378f4780442377a
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\eng\EffectExtractor.dll
                • Size 33KB
                • SHA256 41edbad9f09a5c3bc029c5ca53666e1640f87b4a497593e22f927f8e4c3c1180
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\enu\EffectExtractor.dll
                • Size 35KB
                • SHA256 13b1b1e491604c268ad052a86c118bc1dcca9baec14f09484cc000c4812df92e
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\esp\EffectExtractor.dll
                • Size 34KB
                • SHA256 7b9290e62eb008e8ca252b963724e04d6fb3c688c8381c21cdf9d166a4e6ef4b
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\eti\EffectExtractor.dll
                • Size 40KB
                • SHA256 34cc0ca5139b1d848d015f9eb5647f685bbcd636a004906cb0431f1bf8925ca8
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\fin\EffectExtractor.dll
                • Size 40KB
                • SHA256 72df74b3038c831823b39001bf86f2cc23f08b53d4dc13ceb7631a3898b788d3
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\fra\EffectExtractor.dll
                • Size 34KB
                • SHA256 2030733a2e4969892ff83e8f7da34e06b08ca56c8e36ff31474eb2bfe722c78f
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\frc\EffectExtractor.dll
                • Size 34KB
                • SHA256 7eadf26d5f064bf0031e2bcc26320703236307372bac7a1506d4e5e5cbf8f413
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\heb\EffectExtractor.dll
                • Size 40KB
                • SHA256 3393eac03d20a48140c733800a2580a0ad7aae863298eceaf92a68d8e481f89a
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\hrv\EffectExtractor.dll
                • Size 40KB
                • SHA256 86414bf25369dab7e2df514cd6ccee861a6d93dec70b1a2353881410a977266d
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\hun\EffectExtractor.dll
                • Size 40KB
                • SHA256 d2693de84389abfdd31ac5e41d0df783962e2c6d81e4dfe25e2838c8a5b2e031
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\ita\EffectExtractor.dll
                • Size 33KB
                • SHA256 683fbe1ea012975ad7e83365d54887b9e1ffbaa22868a3633bc4ebbfd31637d5
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\jpn\EffectExtractor.dll
                • Size 40KB
                • SHA256 469343087371c7a14014723ad62fc8b6a0955cc68492c412435459ba7c11ce89
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\kor\EffectExtractor.dll
                • Size 32KB
                • SHA256 5d0187d183049b70f5dfe4b6a39bfd09d0b61e223361dcb51e993711bb1e363c
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\lth\EffectExtractor.dll
                • Size 40KB
                • SHA256 0488267f616e200062bcae003af933c3ed069eed9df89bf7fe783e22a490dbda
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\lvi\EffectExtractor.dll
                • Size 40KB
                • SHA256 f467e8eeeac06894de0953d766d8f21660e9b6543741eac4d1cb879635f63e05
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\nld\EffectExtractor.dll
                • Size 33KB
                • SHA256 e48dbe0329defbd5c4887010d5dd18cbd0342228e39d0fcb34728637c631ff6d
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\nor\EffectExtractor.dll
                • Size 40KB
                • SHA256 35b561a74a8fcf6cdedf783377a25bb69697ea07990289f69e07cfd31d4328f0
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\plk\EffectExtractor.dll
                • Size 33KB
                • SHA256 efb4c6429b5def9003c0cf9512da344a0ba5138e118eec7bf11c7c1c4f94e28c
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\ptb\EffectExtractor.dll
                • Size 40KB
                • SHA256 96e3164093f284b1dff376ec7e2a9e7066b16f0541d9f69cf7109e7f1dd71a36
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\ptg\EffectExtractor.dll
                • Size 34KB
                • SHA256 7d163ee76da3be8a93c31c0fb1c99772943892258b36926ba599a2dd41b440ce
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\rom\EffectExtractor.dll
                • Size 34KB
                • SHA256 336df275d45eb79c57e1902101229cea07643d95ed0166dee76d9a07cae0a94c
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\rus\EffectExtractor.dll
                • Size 40KB
                • SHA256 94c3e7dfd6f892b3120de9c858f4db3540617d5930efcf97c97ddbb39839791d
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\sky\EffectExtractor.dll
                • Size 33KB
                • SHA256 e4c29a3066845597f8ab5b8fb51a0bb5e6cff0c125ccfd8ac197ade6fb759816
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EffectExtractor.dll
                • Path C:\Program Files\CyberLink\PerfectCam\ShareFiles\Share\language\slv\EffectExtractor.dll
                • Size 40KB
                • SHA256 2a88d4083bb82fa97ff652b89d1770a19aef27e962ba584d627cf4359fcf9e3c
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                bigbang.ico
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\BigBang\Runtime\CLUpdater\Skin\bigbang.ico
                • Size 283KB
                • SHA256 43f4bcb2fb16830939e23108dc8e3e6c5ad79e3e808ba473988788d2a72a5e06
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                [OPTIMIZE]mnetv2_gcn_0808_108x192.bin
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\[OPTIMIZE]mnetv2_gcn_0808_108x192.bin
                • Size 825KB
                • SHA256 2e200f915fadd2e072f525d3750d36c7f23ea0ff076bb5a25c0d58f68c9ce803
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                [OPTIMIZE]mnetv2_gcn_0808_108x192.cla
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\[OPTIMIZE]mnetv2_gcn_0808_108x192.cla
                • Size 988KB
                • SHA256 06446b774fe39429997105b57a2802262d59999c8ce9de9a980217fa0765739f
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                [OPTIMIZE]mnetv2_gcn_0808_108x192.claxml
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\[OPTIMIZE]mnetv2_gcn_0808_108x192.claxml
                • Size 77KB
                • SHA256 03f2f50aaec0697a8e59b45da692a13c45b63e36f3143a0a2a30663d8384cba5
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                cldnn_global_custom_kernels.xml
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\cldnn_global_custom_kernels.xml
                • Size 3KB
                • SHA256 3ee0e0e52926e70ea8042bdf082a25e71406daa7fd290f646c98420e7c0d5d1c
                • MD5 SHA1 SHA512
                Submit Download

                msvcp140.dll
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\msvcp140.dll
                • Size 626KB
                • SHA256 be2ef4f6d540d0ac5fddd556dcb6bfaf6cb6288679e4d64882d625ff35f173aa
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                svml_dispmd.dll
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\svml_dispmd.dll
                • Size 21.0MB
                • SHA256 05f23059cfd4670c4c1672416ca0847bab4608076554db17c8c298127e78f2d8
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                tbb.dll
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\tbb.dll
                • Size 389KB
                • SHA256 90b53131bafd49890997b1e069a0df759cdc4c47fa79edf7ad11ebf70e1cd02a
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                vcomp140.dll
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\vcomp140.dll
                • Size 180KB
                • SHA256 1d480d651414304bddd0928b1c1563b4fb7f89b1c6ac30650c884150de0ec540
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                vcruntime140.dll
                • Path C:\Program Files\CyberLink\PerfectCam\subsys\YouCam\vcruntime140.dll
                • Size 85KB
                • SHA256 d58e3ff10fd96a22a8e6d2fd76146a282cc45ccfaf2301257e76e7c2771cbd41
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                999b5d50-7053-46f0-8ea3-72ec9d0d267b.json
                • Path C:\ProgramData\CyberLink\CBE\D8D760AC-ACA2-493e-9623-61E9D47DE89C\setup.exe_v2\999b5d50-7053-46f0-8ea3-72ec9d0d267b.json
                • Size 997B
                • SHA256 06b26b300c8d5a9bdcb6d8e1d37335b153d5a4302e36e784207e138afd1e1a65
                • MD5 SHA1 SHA512
                Submit Download

                UNO.ini
                • Path C:\ProgramData\CyberLink\CBE\D8D760AC-ACA2-493e-9623-61E9D47DE89C\setup.exe_v2\UNO.ini
                • Size 7B
                • SHA256 d94fd0c7e43df0a03014a44d79653c0845adb29e6222ca47718c46af90847b84
                • MD5 SHA1 SHA512
                Submit Download

                CLUpdater.ini
                • Path C:\ProgramData\CyberLink\CLUpdater\PerfectCam\2.3\CLUpdater.ini
                • Size 174B
                • SHA256 06e57e9c8c11592b9a5f4fca67ea7ae7cca057e15597e3201e29710f63a00872
                • MD5 SHA1 SHA512
                Submit Download

                EVO0.xml
                • Path C:\ProgramData\CyberLink\EvoParser\EVO0.xml
                • Size 35KB
                • SHA256 10256048d1dc54c2a12188da349db45010a2d62c1ab224e0364317f0f5564423
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EVO0.xml
                • Path C:\ProgramData\CyberLink\EvoParser\EVO0.xml
                • Size 35KB
                • SHA256 b0f8095028c75219d375f4d27cf5e99b65185b3ae4ac17d01890f16aecc90ad9
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EVO0.xml
                • Path C:\ProgramData\CyberLink\EvoParser\EVO0.xml
                • Size 32KB
                • SHA256 304094fce5fda9d8750238054d5ee2ec411643bfc29735ee529759d4475ccc22
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                EVO.ini
                • Path C:\ProgramData\CyberLink\EvoParser\PerfectCam\2.0\EVO.ini
                • Size 210B
                • SHA256 39de116af1b4ab1a041b4661d09b8c09776f128e2b7bd36d4e5275c30982ef2f
                • MD5 SHA1 SHA512
                Submit Download

                EVO.ini
                • Path C:\ProgramData\CyberLink\EvoParser\PerfectCam\2.0\EVO.ini
                • Size 244B
                • SHA256 44e48a4d96644b33bd65ba47f52c99892e83992fa8faf82e648aa20274e3e2ec
                • MD5 SHA1 SHA512
                Submit Download

                EVO.ini
                • Path C:\ProgramData\CyberLink\EvoParser\PerfectCam\2.3\Boomerang\EVO.ini
                • Size 210B
                • SHA256 3687d6b24abd4c84b652e1632721d8bbebb1d6bb3bc47517fc5df9d9178c2e4d
                • MD5 SHA1 SHA512
                Submit Download

                EVO.ini
                • Path C:\ProgramData\CyberLink\EvoParser\PerfectCam\2.3\Boomerang\EVO.ini
                • Size 229B
                • SHA256 a04d905de90f1adec3bc618c5700da4c823f789da01718e4cc3369f65c50eaf6
                • MD5 SHA1 SHA512
                Submit Download

                EVO.ini
                • Path C:\ProgramData\CyberLink\EvoParser\PerfectCam\2.3\EVO.ini
                • Size 210B
                • SHA256 1cc586a13d396b804b9e4f7db41c93c17a871b2a3bff00bfe67d7d46996dc231
                • MD5 SHA1 SHA512
                Submit Download

                EVO.ini
                • Path C:\ProgramData\CyberLink\EvoParser\PerfectCam\2.3\EVO.ini
                • Size 244B
                • SHA256 0d6f1f274d4db64a0dccffa400cdd0309b28f92c037d477aa1ac06c432aeef82
                • MD5 SHA1 SHA512
                Submit Download

                GDPRDlg.ini
                • Path C:\ProgramData\CyberLink\GDPRDlg\PerfectCam\2.0\GDPRDlg.ini
                • Size 161B
                • SHA256 5ba2bc6d997f1f0cf1b444527e560eb0f51bd4922187caaa2b0c70024a224b29
                • MD5 SHA1 SHA512
                Submit Download

                GDPRDlg.ini
                • Path C:\ProgramData\CyberLink\GDPRDlg\PerfectCam\2.0\GDPRDlg.ini
                • Size 190B
                • SHA256 39e6efb5db9b16a5797a4a1251c97d9075e54af6f3f8f1f39882dadaedaaa6e9
                • MD5 SHA1 SHA512
                Submit Download

                GDPRDlg.ini
                • Path C:\ProgramData\CyberLink\GDPRDlg\PerfectCam\2.0\GDPRDlg.ini
                • Size 220B
                • SHA256 da3f956d86e0a31550b664a5db1cd220db34455c3cd3f4e94acec5ac6eff7e43
                • MD5 SHA1 SHA512
                Submit Download

                GDPRDlg.ini
                • Path C:\ProgramData\CyberLink\GDPRDlg\Shared\GDPRDlg.ini
                • Size 350B
                • SHA256 a602471348b0cbd963c298ffc518eb004a89320d4c0b4fd282333017cd1516b1
                • MD5 SHA1 SHA512
                Submit Download

                APReg.url
                • Path C:\ProgramData\SUPPORTDIR\20240416_91637_1400\APReg.url
                • Size 299B
                • SHA256 11d8bf4897d9280fd49a563b07718319c34aa53f3b5e9f0b8ada46fdd72f6f1f
                • MD5 SHA1 SHA512
                Submit Download

                Define.ini
                • Path C:\ProgramData\SUPPORTDIR\20240416_91637_1400\Define.ini
                • Size 704B
                • SHA256 a2ec7b29ddff70292f4375c293069b77650d325c834c079fbb3142819f20ef37
                • MD5 SHA1 SHA512
                Submit Download

                UNO.DLL
                • Path C:\ProgramData\SUPPORTDIR\20240416_91637_1400\UNO.DLL
                • Size 888KB
                • SHA256 9e92b0cee11594265b48d452e9eee20c6d0a1056180b92fe2fb9e6bd46e533a4
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                royalty.ini
                • Path C:\ProgramData\SUPPORTDIR\20240416_91637_1400\royalty.ini
                • Size 86B
                • SHA256 356605608d5e270fcd9cdd74c3cf12571b556a6ef445e170248f093c9c248b13
                • MD5 SHA1 SHA512
                Submit Download

                InstallationLog.log
                • Path C:\ProgramData\install_backup\{C311A2C9-A8F9-408A-8386-B3118338754C}\InstallationLog.log
                • Size 4KB
                • SHA256 fa7c6362719bb095c56a3aec352983e23ebd8936e1af429ca6fcf2646c862a36
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                WDExclusionPathTool.exe
                • Path C:\ProgramData\install_backup\{C311A2C9-A8F9-408A-8386-B3118338754C}\WDExclusionPathTool.exe
                • Size 98KB
                • SHA256 23cd9da301a19672dc6fa5095a25b6787477f4b2381fb7c4ba44406bb90bfd15
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                20240416_91637_1400_install.log
                • Path C:\ProgramData\install_clap\{C311A2C9-A8F9-408A-8386-B3118338754C}\20240416_91637_1400_install.log
                • Size 3KB
                • SHA256 176e86cd670989a46662216e6b778d73529e65739175e5e37df70989d85c2a63
                • MD5 SHA1 SHA512
                Submit Download

                20240416_91637_1400_install.log
                • Path C:\ProgramData\install_clap\{C311A2C9-A8F9-408A-8386-B3118338754C}\20240416_91637_1400_install.log
                • Size 5KB
                • SHA256 401fdda7491acc1450b74afc43fa507cc76f883f075b930df8559f29333bfd1d
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                hw.ini
                • Path C:\Users\Admin\AppData\Local\CyberLink\PerfectCam\hw.ini
                • Size 4B
                • SHA256 dba5166ad9db9ba648c1032ebbd34dcd0d085b50023b839ef5c68ca1db93a563
                • MD5 SHA1 SHA512
                Submit Download

                12ce2a87-5755-4688-b861-29b1728cba8a.json
                • Path C:\Users\Admin\AppData\Local\Temp\12ce2a87-5755-4688-b861-29b1728cba8a.json
                • Size 1KB
                • SHA256 9f46f9766ad6b59426b4b29c4a6c3a30e5e556dc54defe5583aa39bc32d79f82
                • MD5 SHA1 SHA512
                Submit Download

                999b5d50-7053-46f0-8ea3-72ec9d0d267b.json
                • Path C:\Users\Admin\AppData\Local\Temp\999b5d50-7053-46f0-8ea3-72ec9d0d267b.json
                • Size 615B
                • SHA256 5f25f072c3b11110db68678c5ee06ce506c3e00d72e752f4d26b98208a033378
                • MD5 SHA1 SHA512
                Submit Download

                7z.dll
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\7z.dll
                • Size 1.2MB
                • SHA256 e284e224db99a6603f358b5e73e774f80e7cdb7a3e8dcb26ecc3a8662b19d1eb
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                7z.exe
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\7z.exe
                • Size 413KB
                • SHA256 0bba424ce8ae4a607ab4a8b2c508fb4fc1998478e0f00917da43642af8997841
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                Custom.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Custom.ini
                • Size 536B
                • SHA256 64af63535e6b1f20ba9f67231d41530b4bc00f3074840546ebbb71207481f587
                • MD5 SHA1 SHA512
                Submit Download

                Data1.7z
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Data1.7z
                • Size 126.6MB
                • SHA256 f7b854c246d1261c6be22cc07d0bf9f9d4852321009a5faf09df7f2ea0a37f17
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                Data2.7z
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Data2.7z
                • Size 74KB
                • SHA256 a2933d3a086411a7d6732f2861f65f1c352579c7b4f084fae3bf783f399a9cef
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                Define.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Define.ini
                • Size 704B
                • SHA256 674558e48d565c3d317f96f58e47cb2469c7dd5afc38644f42a664cf72d0ed07
                • MD5 SHA1 SHA512
                Submit Download

                Product.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Product.ini
                • Size 254B
                • SHA256 549c455461adb540102abdb286696fd7c1a2f4dc50e58f00e5df771b33f27f57
                • MD5 SHA1 SHA512
                Submit Download

                SKUtil.DLL
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SKUtil.DLL
                • Size 257KB
                • SHA256 6f865fcb325d166daa2f9ae6da92a93e1816896dce280db99d8b542f2aead461
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                Setup.exe
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Setup.exe
                • Size 906KB
                • SHA256 c8d5bd633b634808066066feea07d9b34d0edd629a8eb7345a48c83a51587d5a
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                Setup.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Setup.ini
                • Size 219B
                • SHA256 b1ca14acee4cc64c25cc0c3621857c9a58bffb7dcd60d17d0a2e72861882ee6e
                • MD5 SHA1 SHA512
                Submit Download

                InstallInfo.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Setup\RunTime\VC2012 SP4_x64\InstallInfo.ini
                • Size 176B
                • SHA256 dab047516f0685a64844b1c7ec91317b23cabe271a9b2588b4c4a24c9543b91e
                • MD5 SHA1 SHA512
                Submit Download

                SKRSet.skr
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Setup\SKRSet.skr
                • Size 19KB
                • SHA256 f19884fcc3cf2dc2bc07d43290c3ea0eed0174f064235c8e7cb5e0375861d6b0
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                Promotion.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Setup\Utility\Promotion\Enu\Promotion.ini
                • Size 1KB
                • SHA256 88ccfbaae8e6638dcb1caa001054e813553fe037864cabcefe93d23e5b492e06
                • MD5 SHA1 SHA512
                Submit Download

                image_003.jpg
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Setup\Utility\Promotion\image\image_003.jpg
                • Size 118KB
                • SHA256 7d463d04bb075c4aca335a37b1668a3ee17b2649d7c45aabd1af1d1310404d3c
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                royalty.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Setup\royalty.ini
                • Size 86B
                • SHA256 d2ed041d662a805b9d4f080043842963d45fb489020a90cac014cf219cea8943
                • MD5 SHA1 SHA512
                Submit Download

                SupportFiles.7z
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SupportFiles.7z
                • Size 908KB
                • SHA256 188a321d7465e24e9d8a4f07f67eef1131c0f663399488f4e083dcdcd7230c39
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                Ureg.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Ureg.ini
                • Size 336B
                • SHA256 d96b3a1e3f9eff6a28011ea6117af2408b20711a78f69e8ea7fc4b10a4b373a0
                • MD5 SHA1 SHA512
                Submit Download

                info.ini
                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\info.ini
                • Size 616B
                • SHA256 53f09bd4d7795c57f1b9ae0bcf69853e7914ed2a1c2bc2178eb4946973719b84
                • MD5 SHA1 SHA512
                Submit Download

                __PSScriptPolicyTest_fz3xo5e5.m4u.ps1
                • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_fz3xo5e5.m4u.ps1
                • Size 60B
                • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                • MD5 SHA1 SHA512
                Submit Download

                a33acf6e-95db-4dae-8782-ce3a1bd88704.json
                • Path C:\Users\Admin\AppData\Local\Temp\a33acf6e-95db-4dae-8782-ce3a1bd88704.json
                • Size 1KB
                • SHA256 24c1f06604d1365dd5204cf641035f24fbf26d919096e0b17fbbdc81eabdf42c
                • MD5 SHA1 SHA512
                Submit Download

                System.dll
                • Path C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\System.dll
                • Size 11KB
                • SHA256 c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                ThreadTimer.dll
                • Path C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\ThreadTimer.dll
                • Size 84KB
                • SHA256 1a14e8dc8b2d02fae1b40da9dfeb8918933778c7bebee927f77bb44c19d4868c
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                UserInfo.dll
                • Path C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\UserInfo.dll
                • Size 4KB
                • SHA256 4506ff20ddc5eefb21d690e954f52df3da46fa47ec263ea965d86a683e74db40
                • MD5 SHA1 SHA512
                Submit Download

                nsExec.dll
                • Path C:\Users\Admin\AppData\Local\Temp\nsd4FD6.tmp\nsExec.dll
                • Size 6KB
                • SHA256 0096ae873c75f4e4d802dc97eec9893acc0749a7346e63f25a8d52ba8e11c527
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                SETDC95.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\{16eadabe-51fe-1346-a70a-8e5eeee03b80}\SETDC95.tmp
                • Size 9KB
                • SHA256 5a3b1662a9ec0fffa064dcc20aaac11fcea11c48a6ee6fc2f483e73102b6d7d4
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                SETDC97.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\{16eadabe-51fe-1346-a70a-8e5eeee03b80}\SETDC97.tmp
                • Size 48KB
                • SHA256 347f0ba15d0a38196e94d289054af2190e5ecd83b6009e0a788933497f0ee65f
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                SKUtil2008.dll
                • Path C:\Users\Admin\AppData\Roaming\NSIS Uninstall Information\{C311A2C9-A8F9-408A-8386-B3118338754C}\SKUtil2008.dll
                • Size 179KB
                • SHA256 04c9eaf385e33c5039909d4512ca654d6db8c69fe92aea1cb605c62b21f36cff
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                Setup.exe
                • Path C:\Users\Admin\AppData\Roaming\NSIS Uninstall Information\{C311A2C9-A8F9-408A-8386-B3118338754C}\Setup.exe
                • Size 438KB
                • SHA256 12f5ed3f8b8813e701d1fcce3364dd9cca87ac5602dad2ab7c3c734e9fe49523
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                memory/1052-6105-0x000000006DF10000-0x000000006DF5C000-memory.dmp
                Download

                memory/1052-6104-0x000000007F080000-0x000000007F090000-memory.dmp
                Download

                memory/1052-6116-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/1052-6094-0x0000000002B30000-0x0000000002B40000-memory.dmp
                Download

                memory/1052-6093-0x0000000002B30000-0x0000000002B40000-memory.dmp
                Download

                memory/1052-6092-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/1400-481-0x0000000003BB0000-0x0000000003BCB000-memory.dmp
                Download

                memory/1752-7223-0x00000142AD030000-0x00000142AE6A7000-memory.dmp
                Download

                memory/1752-7221-0x00000142AD030000-0x00000142AE6A7000-memory.dmp
                Download

                memory/1752-7222-0x00000142AD030000-0x00000142AE6A7000-memory.dmp
                Download

                memory/1956-6123-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/1956-6146-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/1956-6144-0x0000000002710000-0x0000000002720000-memory.dmp
                Download

                memory/1956-6134-0x000000006DF10000-0x000000006DF5C000-memory.dmp
                Download

                memory/1956-6124-0x0000000002710000-0x0000000002720000-memory.dmp
                Download

                memory/2520-6027-0x0000000005C10000-0x0000000005C5C000-memory.dmp
                Download

                memory/2520-6040-0x0000000006DD0000-0x0000000006DEE000-memory.dmp
                Download

                memory/2520-6010-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/2520-6009-0x0000000004620000-0x0000000004656000-memory.dmp
                Download

                memory/2520-6011-0x0000000004730000-0x0000000004740000-memory.dmp
                Download

                memory/2520-6012-0x0000000004D70000-0x0000000005398000-memory.dmp
                Download

                memory/2520-6013-0x0000000005450000-0x0000000005472000-memory.dmp
                Download

                memory/2520-6014-0x00000000054F0000-0x0000000005556000-memory.dmp
                Download

                memory/2520-6020-0x0000000005560000-0x00000000055C6000-memory.dmp
                Download

                memory/2520-6025-0x0000000005710000-0x0000000005A64000-memory.dmp
                Download

                memory/2520-6026-0x0000000005BE0000-0x0000000005BFE000-memory.dmp
                Download

                memory/2520-6029-0x0000000006D90000-0x0000000006DC2000-memory.dmp
                Download

                memory/2520-6028-0x000000007EFD0000-0x000000007EFE0000-memory.dmp
                Download

                memory/2520-6030-0x000000006DF10000-0x000000006DF5C000-memory.dmp
                Download

                memory/2520-6041-0x0000000004730000-0x0000000004740000-memory.dmp
                Download

                memory/2520-6042-0x0000000006DF0000-0x0000000006E93000-memory.dmp
                Download

                memory/2520-6043-0x0000000004730000-0x0000000004740000-memory.dmp
                Download

                memory/2520-6044-0x00000000075A0000-0x0000000007C1A000-memory.dmp
                Download

                memory/2520-6045-0x0000000006F40000-0x0000000006F5A000-memory.dmp
                Download

                memory/2520-6046-0x0000000006F80000-0x0000000006F8A000-memory.dmp
                Download

                memory/2520-6047-0x00000000071B0000-0x0000000007246000-memory.dmp
                Download

                memory/2520-6048-0x0000000007130000-0x0000000007141000-memory.dmp
                Download

                memory/2520-6049-0x0000000007150000-0x000000000715E000-memory.dmp
                Download

                memory/2520-6050-0x0000000007160000-0x0000000007174000-memory.dmp
                Download

                memory/2520-6051-0x0000000007250000-0x000000000726A000-memory.dmp
                Download

                memory/2520-6052-0x0000000007190000-0x0000000007198000-memory.dmp
                Download

                memory/2520-6055-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/3184-6062-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/3184-6063-0x00000000062A0000-0x00000000065F4000-memory.dmp
                Download

                memory/3184-6074-0x000000006DF10000-0x000000006DF5C000-memory.dmp
                Download

                memory/3184-6073-0x000000007EF50000-0x000000007EF60000-memory.dmp
                Download

                memory/3184-6085-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/3192-6153-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/3192-6154-0x0000000003390000-0x00000000033A0000-memory.dmp
                Download

                memory/3192-6155-0x0000000003390000-0x00000000033A0000-memory.dmp
                Download

                memory/3192-6165-0x000000006DF10000-0x000000006DF5C000-memory.dmp
                Download

                memory/3192-6176-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/4312-6257-0x000000006DF10000-0x000000006DF5C000-memory.dmp
                Download

                memory/4312-6256-0x0000000005710000-0x0000000005A64000-memory.dmp
                Download

                memory/4312-6245-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/4312-6246-0x00000000026C0000-0x00000000026D0000-memory.dmp
                Download

                memory/4864-6238-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/4864-6226-0x000000006DF10000-0x000000006DF5C000-memory.dmp
                Download

                memory/4864-6236-0x0000000004BE0000-0x0000000004BF0000-memory.dmp
                Download

                memory/4864-6216-0x0000000004BE0000-0x0000000004BF0000-memory.dmp
                Download

                memory/4864-6215-0x0000000004BE0000-0x0000000004BF0000-memory.dmp
                Download

                memory/4864-6214-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/4868-6195-0x000000006DF10000-0x000000006DF5C000-memory.dmp
                Download

                memory/4868-6183-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/4868-6184-0x0000000004950000-0x0000000004960000-memory.dmp
                Download

                memory/4868-6207-0x00000000715C0000-0x0000000071D70000-memory.dmp
                Download

                memory/4868-6205-0x0000000004950000-0x0000000004960000-memory.dmp
                Download

                memory/4868-6194-0x000000007F4E0000-0x000000007F4F0000-memory.dmp
                Download