Analysis

  • max time kernel
    231s
  • max time network
    264s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 22:29

General

  • Target
    capcut_capcutpc_invitefission_1.2.4_installer.exe
  • Size 2.2MB
  • Sample240602-2ekqcsae24
  • SHA256 aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Suspicious use of NtCreateThreadExHideFromDebugger 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 40 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 7 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
  • Suspicious behavior: AddClipboardFormatListener 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\capcut_capcutpc_invitefission_1.2.4_installer.exe
    "C:\Users\Admin\AppData\Local\Temp\capcut_capcutpc_invitefission_1.2.4_installer.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1744
    • C:\Windows\SysWOW64\cmd.exe
      C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2576
      • C:\Windows\SysWOW64\Wbem\WMIC.exe
        wmic csproduct get Name,UUID /value
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2496
    • C:\Windows\SysWOW64\cmd.exe
      C:\Windows\System32\cmd.exe /c wmic os get SerialNumber,Caption,BuildNumber,Version /value
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2456
      • C:\Windows\SysWOW64\Wbem\WMIC.exe
        wmic os get SerialNumber,Caption,BuildNumber,Version /value
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2492
    • C:\Windows\SysWOW64\cmd.exe
      C:\Windows\System32\cmd.exe /c wmic path Win32_VideoController get CurrentVerticalResolution,CurrentHorizontalResolution /value
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:3056
      • C:\Windows\SysWOW64\Wbem\WMIC.exe
        wmic path Win32_VideoController get CurrentVerticalResolution,CurrentHorizontalResolution /value
        3⤵
          PID:2088
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\System32\cmd.exe /c wmic nicconfig get DefaultIPGateway,macaddress
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:2024
        • C:\Windows\SysWOW64\Wbem\WMIC.exe
          wmic nicconfig get DefaultIPGateway,macaddress
          3⤵
            PID:2780
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\System32\cmd.exe /c wmic diskdrive get SerialNumber /value
          2⤵
          • Suspicious use of WriteProcessMemory
          PID:2820
          • C:\Windows\SysWOW64\Wbem\WMIC.exe
            wmic diskdrive get SerialNumber /value
            3⤵
              PID:2796
          • C:\Users\Admin\AppData\Local\app_shell_cache_359289\app_package_245f698fc8.exe
            "C:\Users\Admin\AppData\Local\app_shell_cache_359289\app_package_245f698fc8.exe" /s /create_desktop=1 /install_path="C:\Users\Admin\AppData\Local\CapCut"
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies registry class
            • Suspicious behavior: EnumeratesProcesses
            PID:1484
          • C:\Users\Admin\AppData\Local\CapCut\CapCut.exe
            "C:\Users\Admin\AppData\Local\CapCut\\CapCut.exe"
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of WriteProcessMemory
            PID:2792
            • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
              "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"
              3⤵
              • Suspicious use of NtCreateThreadExHideFromDebugger
              • Executes dropped EXE
              • Loads dropped DLL
              • Modifies system certificate store
              • Suspicious behavior: AddClipboardFormatListener
              • Suspicious use of WriteProcessMemory
              PID:1780
              • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=1736 --field-trial-handle=1808,i,6308877563778216664,10313400195470181277,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                4⤵
                • Suspicious use of NtCreateThreadExHideFromDebugger
                • Executes dropped EXE
                PID:2972
              • C:\Windows\System32\cmd.exe
                C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                4⤵
                • Suspicious use of WriteProcessMemory
                PID:2348
                • C:\Windows\System32\Wbem\WMIC.exe
                  wmic csproduct get Name,UUID /value
                  5⤵
                    PID:1560
                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                  C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                  4⤵
                  • Executes dropped EXE
                  • Checks processor information in registry
                  • Modifies system certificate store
                  • Suspicious behavior: AddClipboardFormatListener
                  PID:2320
                  • C:\Windows\System32\cmd.exe
                    C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                    5⤵
                      PID:2880
                      • C:\Windows\System32\Wbem\WMIC.exe
                        wmic csproduct get Name,UUID /value
                        6⤵
                          PID:1392
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" driverinfo
                        5⤵
                        • Executes dropped EXE
                        PID:2192
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuda
                        5⤵
                        • Executes dropped EXE
                        PID:2516
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuvid
                        5⤵
                        • Executes dropped EXE
                        PID:584
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" nv_enc
                        5⤵
                        • Executes dropped EXE
                        PID:1528
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv
                        5⤵
                        • Executes dropped EXE
                        PID:1156
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc
                        5⤵
                        • Executes dropped EXE
                        PID:2280
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc_hw
                        5⤵
                        • Executes dropped EXE
                        PID:860
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" amf_enc
                        5⤵
                        • Executes dropped EXE
                        PID:2992
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc
                        5⤵
                        • Executes dropped EXE
                        PID:2868
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc_av1
                        5⤵
                        • Executes dropped EXE
                        PID:2308
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc
                        5⤵
                        • Executes dropped EXE
                        PID:1628
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc_av1
                        5⤵
                        • Executes dropped EXE
                        PID:1404
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" oneVPL
                        5⤵
                        • Executes dropped EXE
                        PID:944
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" mt_enc
                        5⤵
                        • Executes dropped EXE
                        PID:2328
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe" -cmd_qt6render_gl_hw_support
                        5⤵
                        • Executes dropped EXE
                        • Suspicious behavior: AddClipboardFormatListener
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious use of SetWindowsHookEx
                        PID:2928
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe" -cmd_qt6render_gl_sw_support
                        5⤵
                        • Executes dropped EXE
                        • Suspicious behavior: AddClipboardFormatListener
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious use of SetWindowsHookEx
                        PID:1832
                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                        C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe /launch=detector
                        5⤵
                        • Suspicious use of NtCreateThreadExHideFromDebugger
                        • Executes dropped EXE
                        • Checks processor information in registry
                        • Suspicious behavior: AddClipboardFormatListener
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious use of SetWindowsHookEx
                        PID:2852
                        • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                          "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=1752 --field-trial-handle=1804,i,14286657601522229118,17896410656650990157,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                          6⤵
                          • Suspicious use of NtCreateThreadExHideFromDebugger
                          • Executes dropped EXE
                          PID:2232
                        • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\parfait_crash_handler.exe
                          C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=7 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=2852 "--annotation=os_version=Windows NT 6.1.7601" --annotation=parfait_version=1.4.6.11 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/AppData/Local/CapCut/3.3.0.1161/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0xd44,0xd48,0xd4c,0xd40,0xd58,0x7fef16cebe0,0x7fef16cebf8,0x7fef16cec10
                          6⤵
                          • Executes dropped EXE
                          PID:1156
                        • C:\Windows\system32\wbem\wmic.exe
                          C:\Windows\system32\wbem\wmic.exe diskdrive where index=0 get serialnumber
                          6⤵
                            PID:860
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                            C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe -detect_simulate_check
                            6⤵
                            • Executes dropped EXE
                            PID:2820
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=4360 --field-trial-handle=1804,i,14286657601522229118,17896410656650990157,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                            6⤵
                            • Executes dropped EXE
                            PID:2980
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" driverinfo
                            6⤵
                            • Executes dropped EXE
                            PID:2476
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuda
                            6⤵
                            • Executes dropped EXE
                            PID:3304
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuvid
                            6⤵
                            • Executes dropped EXE
                            PID:3312
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" nv_enc
                            6⤵
                            • Executes dropped EXE
                            PID:3328
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv
                            6⤵
                            • Executes dropped EXE
                            PID:3336
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc
                            6⤵
                            • Executes dropped EXE
                            PID:3344
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc_hw
                            6⤵
                            • Executes dropped EXE
                            PID:3352
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" amf_enc
                            6⤵
                            • Executes dropped EXE
                            PID:3360
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc
                            6⤵
                            • Executes dropped EXE
                            PID:3368
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc_av1
                            6⤵
                            • Executes dropped EXE
                            PID:3376
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc
                            6⤵
                            • Executes dropped EXE
                            PID:3388
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc_av1
                            6⤵
                            • Executes dropped EXE
                            PID:3400
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" oneVPL
                            6⤵
                            • Executes dropped EXE
                            PID:3408
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" mt_enc
                            6⤵
                            • Executes dropped EXE
                            PID:3416
                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                            "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=3480 --field-trial-handle=1804,i,14286657601522229118,17896410656650990157,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
                            6⤵
                              PID:3060
                            • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                              "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=4708 --field-trial-handle=1804,i,14286657601522229118,17896410656650990157,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                              6⤵
                                PID:2288
                    • C:\Windows\system32\AUDIODG.EXE
                      C:\Windows\system32\AUDIODG.EXE 0x50c
                      1⤵
                        PID:536

                      Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            94308059B57B3142E455B38A6EB92015

                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
                            • Size 70KB
                            • SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
                            • MD5 SHA1 SHA512 SSDEEP

                            MSVCP140_1.dll

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\MSVCP140_1.dll
                            • Size 27KB
                            • SHA256 8d90e98466803ce0b384aece7b6049f6545643be18ae13221de7b6518646cbe1
                            • MD5 SHA1 SHA512 SSDEEP

                            ScrollView.qml

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\QtQuick\Controls\Material\ScrollView.qml
                            • Size 2KB
                            • SHA256 228069c59b7d348321d4ad8e1260d20ef8cfaae5be0c08676de49d8562fe6fda
                            • MD5 SHA1 SHA512

                            default_photo_ico.jpg

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\CloudMaterial\default_photo_ico.jpg
                            • Size 29KB
                            • SHA256 c18e010061abbf3ec5ec5b93393565704275cb158942a9dec2391c4d7dd1830b
                            • MD5 SHA1 SHA512 SSDEEP

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness\amazingfeature\rt\outputTex.rt
                            • Size 324B
                            • SHA256 f28df7e33339f8d20f304cc3589fa95bc527cc81e092d6ecbe43aef068985cab
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness\config.json
                            • Size 262B
                            • SHA256 baf22b41272ffea6d0bbebfc834d27693a0fc1c122237109879534435fa86918
                            • MD5 SHA1 SHA512

                            main.scene

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\main.scene
                            • Size 2KB
                            • SHA256 fd8e508ca5ec3c8d3e2d48c9c3150934fab181c6570da7153c7ceefe62cea802
                            • MD5 SHA1 SHA512

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\rt\outputTex.rt
                            • Size 762B
                            • SHA256 e70ec860fae4f68cc7cb1627717e725af493abecb59b4f3ed1236569adc28df4
                            • MD5 SHA1 SHA512

                            filter.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\xshader\filter.xshader
                            • Size 1KB
                            • SHA256 45390a5b6d9c3a4d71993c867d689023dcdfecc8a604cee36a457aac2c29ef57
                            • MD5 SHA1 SHA512

                            ImageBusinessSlider.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\clear\AmazingFeature\ImageBusinessSlider.json
                            • Size 35B
                            • SHA256 b408c5a3949a0a77bacbc934e82ced44e25db3491c54a891be064158592810cf
                            • MD5 SHA1 SHA512

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast\amazingfeature\rt\outputTex.rt
                            • Size 324B
                            • SHA256 f7f3d8032bc39cf117e9854daea791c8ca453e7e3aca59e39228b847174e5ab8
                            • MD5 SHA1 SHA512

                            LuaRTTI.MarkGen.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\LuaRTTI.MarkGen.lua
                            • Size 190B
                            • SHA256 2aa4ba3afc94d9d96a4c0f850dd5073c0b58560e9609cf758e3ae92f89d77220
                            • MD5 SHA1 SHA512

                            algorithmConfig.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\algorithmConfig.json
                            • Size 317B
                            • SHA256 835c6031fb0e72d2f2b6ee80c45b95010a7e7cac7fa221d9b820d6708a8869a8
                            • MD5 SHA1 SHA512

                            Utils.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\lua\Utils.lua
                            • Size 9KB
                            • SHA256 df672b08916560cf1a04a0cecd1c3e8160557409a0c1c5da2483ffe16fc77d4c
                            • MD5 SHA1 SHA512 SSDEEP

                            fshader.frag

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\fshader.frag
                            • Size 7KB
                            • SHA256 c9a66d612106da8aed4e7eca785067c9411113d09f58a5e9cd2d535adbc1945c
                            • MD5 SHA1 SHA512 SSDEEP

                            sticker.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\sticker.config
                            • Size 305B
                            • SHA256 4f218871d126b92e0a895646e01b0658c0b70934f85885b121d1b2c9267d0cfb
                            • MD5 SHA1 SHA512

                            lua-meta.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\lua-meta.json
                            • Size 1KB
                            • SHA256 85c6be8c7a92ba01c3bdfecd4b5ef1f7b4b536d8112ea8a1ff9b3e890d7c5738
                            • MD5 SHA1 SHA512

                            graphBuild.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\lua\graphBuild.lua
                            • Size 5KB
                            • SHA256 e99cfcfe93e9ea0fd243129a4da604c186b7fac0c5aec7788dc9bae6ee26fcc8
                            • MD5 SHA1 SHA512 SSDEEP

                            renderChain.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\lua\renderChain.json
                            • Size 259B
                            • SHA256 244f156847921a6c4b34ccbffd09bc5effcc1cf69cf68ffb7e83cd9dadca00fa
                            • MD5 SHA1 SHA512

                            main.scene

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\main.scene
                            • Size 2KB
                            • SHA256 1b4606f333dce90d2cbd1bef8859b03a86048dfbacc98bc5b9fd0132c5995eca
                            • MD5 SHA1 SHA512

                            Quad.mesh

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\mesh\Quad.mesh
                            • Size 1KB
                            • SHA256 e8bb66f1490fe4a0bcad6ebaa19d031de238ecd0a1a36e26a4ebd1f11801ec81
                            • MD5 SHA1 SHA512

                            FliterEntity-2FFE6ABD.prefab

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\prefabs\FliterEntity-2FFE6ABD.prefab
                            • Size 857B
                            • SHA256 bacbd7119e309a4d675d8a8b33cd1090948c936c3ebf3ce311fe3d0626450dba
                            • MD5 SHA1 SHA512

                            material.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\material.material
                            • Size 887B
                            • SHA256 885be6a1b70625f2d642539e8a1e9c5ec7ab685aa194b725a86f8df351f46bcd
                            • MD5 SHA1 SHA512

                            xshader.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\xshader.xshader
                            • Size 1KB
                            • SHA256 6000493c6055709125d37005c8fa6b693f6c35ec76c967661ec073f1b34f7401
                            • MD5 SHA1 SHA512

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\rt\outputTex.rt
                            • Size 567B
                            • SHA256 ca77feb4432805141de582bee6b6cae76865a68c278906f9da0512f6f73d6550
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\config.json
                            • Size 293B
                            • SHA256 3dbd07565db5d5418da1e76a951a20c355fdd4f44dcb9ac9ffa84da897ef46ed
                            • MD5 SHA1 SHA512

                            filter.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\fade\amazingfeature\xshader\filter.xshader
                            • Size 740B
                            • SHA256 c99d0ede6d9c4b8c56a80fa41a34321aa4e6e76047d64b58b45b96086b972eec
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\highlight\config.json
                            • Size 261B
                            • SHA256 8200428a8b69067ec73ad0faa72496f1f5fe7df1ebafd1aabd4e00121850f177
                            • MD5 SHA1 SHA512

                            content.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\content.json
                            • Size 130B
                            • SHA256 b077ccd356a478e2e0878be27babf81006e8d33cd44d2a6626ad2fbce7f4aab5
                            • MD5 SHA1 SHA512

                            temperature_max.png

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_max.png
                            • Size 4KB
                            • SHA256 16fa716c3483f2387763dbdef519f7627bee1151969a5548be91fde5d30b583b
                            • MD5 SHA1 SHA512 SSDEEP

                            temperature_max.png.meta

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_max.png.meta
                            • Size 352B
                            • SHA256 99fb9eb6d93f1775e62e5ffcab477b45afb7d85584461d29aa070c651159abb5
                            • MD5 SHA1 SHA512

                            temperature_min.png

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_min.png
                            • Size 4KB
                            • SHA256 4d6b06cbcc92d8bd42b0ff8da7661ed729652c4bb8ce3c7ce1d9c2db631c00a1
                            • MD5 SHA1 SHA512 SSDEEP

                            temperature_min.png.meta

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_min.png.meta
                            • Size 352B
                            • SHA256 0dcfcfc4d3db8a69617016304ea3420627cebf851a5cada66c0c1fa5df63e21f
                            • MD5 SHA1 SHA512

                            main.scene

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\main.scene
                            • Size 2KB
                            • SHA256 ddf39775e5dd5cd52acf3ea780ea07440b5c4d8fe068ff2edd356478892f6f18
                            • MD5 SHA1 SHA512

                            entity.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\material\entity.material
                            • Size 839B
                            • SHA256 35192ed64374b241d70d49e8789747909e129c53ab5a0804b7f28c05a3c6b77c
                            • MD5 SHA1 SHA512

                            quad.mesh

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\mesh\quad.mesh
                            • Size 1002B
                            • SHA256 2589fe8d31dfcfd5f521aacd5c00a64a0292fa773aef26009dc85ee78e9bdcff
                            • MD5 SHA1 SHA512

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\rt\outputTex.rt
                            • Size 510B
                            • SHA256 554c5c6ab074cd55cb6ad256f5ab52fc649c403e4b4c8efc26ef0b9567226e84
                            • MD5 SHA1 SHA512

                            sticker.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\sticker.config
                            • Size 276B
                            • SHA256 628398a978ba0d718e5753bd40e2652a7db9bdab38952def94802ee2c9cf0eff
                            • MD5 SHA1 SHA512

                            entity.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\xshader\entity.xshader
                            • Size 1KB
                            • SHA256 a112e4d48ad3b783194d4cff5f9eb31eb04c2d9ea7ece6ba6dd6ea634bece058
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\config.json
                            • Size 318B
                            • SHA256 85a973186f9e260957d41f64dc40bc685c502daa864093f04b91511fcc50fe7a
                            • MD5 SHA1 SHA512

                            algorithmConfig.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\algorithmConfig.json
                            • Size 454B
                            • SHA256 bb9ca7d984c8eecebebfd3aadff29bc267d9bf1cc6dc683a887c32823dae45d2
                            • MD5 SHA1 SHA512

                            content.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\content.json
                            • Size 129B
                            • SHA256 8f72e2d5ebbf00be0a6473d8fd4ff494b628b7f6b972410c9cdc3f8484bbbe98
                            • MD5 SHA1 SHA512

                            main.scene

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\main.scene
                            • Size 2KB
                            • SHA256 335944a33967b6f2433d4dcf870f3a36d30fb52a6b3c3990cd18c58510132f5d
                            • MD5 SHA1 SHA512

                            noise.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\material\noise.material
                            • Size 652B
                            • SHA256 fda54d574bbe6040e6dbf5cadca7340c0ed837f65d5f7c06a5bd9dab983b31ef
                            • MD5 SHA1 SHA512

                            quad.mesh

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\mesh\quad.mesh
                            • Size 998B
                            • SHA256 879e4889ea6ee05a3835c75c99595c87740223d1354a679b85e9c7720809aef6
                            • MD5 SHA1 SHA512

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\rt\outputTex.rt
                            • Size 510B
                            • SHA256 5cedbe5ea2f46408ba45424f6374b2a3666630a4a211d9a928cd241b0762dab4
                            • MD5 SHA1 SHA512

                            scene.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\scene.config
                            • Size 363B
                            • SHA256 0adc55e18bdff0fcde5e163338cdcb74618b1198dbd95d315ca5ec256005921c
                            • MD5 SHA1 SHA512

                            noise.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\xshader\noise.xshader
                            • Size 1KB
                            • SHA256 94d6bc0f3912ada7dc7c2fc6cb3ca7ef38bd2e54bc6a2a93ba5c62790e0bee92
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\config.json
                            • Size 301B
                            • SHA256 1b76c3df72fb1c360bf91611a5608678f11e4036a5271c637781eaaf27cf1e6a
                            • MD5 SHA1 SHA512

                            SeekModeScript.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\lua\SeekModeScript.lua
                            • Size 2KB
                            • SHA256 22a5beb53cc88b765fe88d6e897fd67cc9957eaed8230b1835e2bb24426d25de
                            • MD5 SHA1 SHA512

                            sticker.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\sticker.config
                            • Size 297B
                            • SHA256 eb62bbf1d38cb3bdda35aa51ff5c68b72ecbecd151137121187a23a69674e145
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\config.json
                            • Size 330B
                            • SHA256 f3c3bbd6671e8b331ce242bdf7d0a6c70539afbdf86d150bb1265d3b76898494
                            • MD5 SHA1 SHA512

                            ImageBusinessSlider.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\ImageBusinessSlider.json
                            • Size 1KB
                            • SHA256 c87243387967a9712819daba2869ffc7957e94eedde1383e794ddd2a031820df
                            • MD5 SHA1 SHA512

                            content.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\content.json
                            • Size 130B
                            • SHA256 fc2b74417e526dffd214dd36eccb1531e6c777a0cbfd2dcf7939b4a5a7f52cfb
                            • MD5 SHA1 SHA512

                            main.scene

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\main.scene
                            • Size 16KB
                            • SHA256 a6129e2717e2afe4d3b0e1e081bf2883057ff3e08a588bdfe130dccb8d4cfb71
                            • MD5 SHA1 SHA512 SSDEEP

                            GaussX_2.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussX_2.material
                            • Size 802B
                            • SHA256 bb3eee876daaf66c381852151905f2f99393c6c1cf8eed84aa698009478bea91
                            • MD5 SHA1 SHA512

                            GaussX_3.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussX_3.material
                            • Size 802B
                            • SHA256 9ba45dff7ca433ae5f578b95a4676262b2cb5c44790b3e59d7073b151ae19061
                            • MD5 SHA1 SHA512

                            GaussX_4.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussX_4.material
                            • Size 803B
                            • SHA256 9ee366374686d5278d08e56bd6698dbc3d71d41ac27675a31e4c860fe69b16ee
                            • MD5 SHA1 SHA512

                            GaussY_2.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussY_2.material
                            • Size 779B
                            • SHA256 ad95a4b166ab0296940de3a8dc14ca6e2bb518b9c9f4cdc81c722ed6b9feafe5
                            • MD5 SHA1 SHA512

                            GaussY_3.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussY_3.material
                            • Size 779B
                            • SHA256 fb92e5eec31dbd5730e9342da5180a7c23ddcfa8942f789c8b8c526da67932a5
                            • MD5 SHA1 SHA512

                            GaussY_4.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussY_4.material
                            • Size 779B
                            • SHA256 b61a22b9d271e1d058e76221ef846283365658e4cda17a93fcda4c6f499f0833
                            • MD5 SHA1 SHA512

                            blend.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\blend.material
                            • Size 746B
                            • SHA256 05ba3353db47661e6b7cf8521191466427d0a7b2bc2890faf06b13814f998905
                            • MD5 SHA1 SHA512

                            cameraRawAdjust.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\cameraRawAdjust.material
                            • Size 1023B
                            • SHA256 d4507227f59bad0e422c7956c179ccc77dbe52451c9b7a9698ec1eac3129904c
                            • MD5 SHA1 SHA512

                            getGray.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\getGray.material
                            • Size 683B
                            • SHA256 67edd369889edda553a46a2d4da5e668e1858382221d3368b79cb0219b8ba7aa
                            • MD5 SHA1 SHA512

                            guideFilter.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\guideFilter.material
                            • Size 741B
                            • SHA256 6989e7a601a4291e4d2dc9ecb175691ebf08b1b46f4d23a2f777c43c1412e720
                            • MD5 SHA1 SHA512

                            Quad.mesh

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\mesh\Quad.mesh
                            • Size 1KB
                            • SHA256 844c1880d87b789d86093af993c51d3f18f0c351b0adbd18e51cc85849d267d1
                            • MD5 SHA1 SHA512

                            NewScreenRT.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\NewScreenRT.rt
                            • Size 569B
                            • SHA256 b0c05fd5785fb5ee51e8c6660de87496ef78cd17d09f8f91d067a8d19100a97e
                            • MD5 SHA1 SHA512

                            NewScreenRT_2.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\NewScreenRT_2.rt
                            • Size 569B
                            • SHA256 3189e4c0600fd795fb7ecd64edd85cc79daefc64990270fa6eed0e30765dd981
                            • MD5 SHA1 SHA512

                            midTex1.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex1.rt
                            • Size 510B
                            • SHA256 988efa227c672c6777ef5309a997681556fe4d4bae09b57b5c224c4af8de7378
                            • MD5 SHA1 SHA512

                            midTex2.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex2.rt
                            • Size 510B
                            • SHA256 24b81322a7a5938f72d77dcd98d4d3ecae808f710e040f11746debe7dfa41d9e
                            • MD5 SHA1 SHA512

                            midTex3.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex3.rt
                            • Size 510B
                            • SHA256 e93def3db002de84dfaa6f9f4ea1b8e28944f417cde35b1a14ed5375fba0d44b
                            • MD5 SHA1 SHA512

                            midTex4.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex4.rt
                            • Size 510B
                            • SHA256 c0e1b493f8a10903083b406a3b767c152e1d72715a30d1f6264ec35cc35e8d58
                            • MD5 SHA1 SHA512

                            midTex5.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex5.rt
                            • Size 521B
                            • SHA256 95dc090b3cbf6abd6338336110e12cee49099d8ec9dbc7d38872abe40ec1676f
                            • MD5 SHA1 SHA512

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\outputTex.rt
                            • Size 510B
                            • SHA256 bc45c371bc37fa2003214b0496442f7998f7e3d9f9abdf6cd99e14b31484cf6e
                            • MD5 SHA1 SHA512

                            GaussX.frag

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX.frag
                            • Size 1KB
                            • SHA256 0384e6b9c8b245aa05d595391b348a4b06a46fc2ba85d3dfc7cc2ea21fc1accb
                            • MD5 SHA1 SHA512

                            GaussX.vert

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX.vert
                            • Size 168B
                            • SHA256 cf05efbf2e2640520fa59682c896f718000088d2e7cc83f07c224c813d30cad7
                            • MD5 SHA1 SHA512

                            GaussX.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX.xshader
                            • Size 990B
                            • SHA256 026d2c6857a07ca0bc9ab1238d21df89b2f069defaf922bca975bfe42f996e0c
                            • MD5 SHA1 SHA512

                            GaussX1.frag

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX1.frag
                            • Size 1KB
                            • SHA256 3bd8a0bdda1a5d97038659d07ee83c08d45bcbdb8620996b7d8fed1fc4375d28
                            • MD5 SHA1 SHA512

                            GaussX1.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX1.xshader
                            • Size 991B
                            • SHA256 c103e24cb7a9c85514392dec044e50be8fa0074a1d87197eb4306d3cf33cdeb7
                            • MD5 SHA1 SHA512

                            blend.frag

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\blend.frag
                            • Size 489B
                            • SHA256 0e69608e65e285adeed451599783ea714ffacdca32454a113159579c0b038650
                            • MD5 SHA1 SHA512

                            blend.vert

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\blend.vert
                            • Size 282B
                            • SHA256 a3dd0a14a9a48eb6a68b45de413c79a21134a3273ddca966cbf754f7b652fc0f
                            • MD5 SHA1 SHA512

                            blend.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\blend.xshader
                            • Size 977B
                            • SHA256 f788495ff65f560044c56287fb72cdaba53c415a587773702fbc498eaab406a9
                            • MD5 SHA1 SHA512

                            cameraRawAdjust.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\cameraRawAdjust.xshader
                            • Size 1KB
                            • SHA256 1f2c82094a84b14066e6d93e7f4fa3e280614f370ccf297a28d23469e5c04e9f
                            • MD5 SHA1 SHA512

                            cameraRawAdjustCore.frag

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\cameraRawAdjustCore.frag
                            • Size 8KB
                            • SHA256 73e723c7e4032dec8da3f40c1c4df7917803ac0c5bfbf0955800c0d9687f72dd
                            • MD5 SHA1 SHA512 SSDEEP

                            getGray.frag

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\getGray.frag
                            • Size 234B
                            • SHA256 e426d0ec442a009a3215e888bbcc8b99ca6308b8214d341dd4ad5a5b1ca305d8
                            • MD5 SHA1 SHA512

                            getGray.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\getGray.xshader
                            • Size 988B
                            • SHA256 485ccbe9096f99af6f555aba5b0fafd93968af7ee0161bb228d55e817fcb14bc
                            • MD5 SHA1 SHA512

                            guideFilter.frag

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\guideFilter.frag
                            • Size 540B
                            • SHA256 cbcbb33a2dcd5035b08aee178418020af2d449fc4eb8fcd759d53526283024d7
                            • MD5 SHA1 SHA512

                            guideFilter.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\guideFilter.xshader
                            • Size 989B
                            • SHA256 fce73b91ec527c7d950398d89e7afea52427f3fb3f6707b72cca647143baffe5
                            • MD5 SHA1 SHA512

                            LuaRTTI.MarkGen.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\LuaRTTI.MarkGen.lua
                            • Size 166B
                            • SHA256 425a0804076088345fabf8527182630f4886d04f185f02715191da72b50c0c6c
                            • MD5 SHA1 SHA512

                            content.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\content.json
                            • Size 130B
                            • SHA256 18d1cebf5ba1d4f2d8a41aaa12117f908c13aca621c2d2bee44a272b19431428
                            • MD5 SHA1 SHA512

                            lua-meta.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\lua-meta.json
                            • Size 3KB
                            • SHA256 638db9d286716cc0220a963bc43d46595b0f072255dd5971f220a1a67098ecc1
                            • MD5 SHA1 SHA512

                            Lscript.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\lua\Lscript.lua
                            • Size 8KB
                            • SHA256 87feea0d99750fd2cd91230d723c77bf8c4b48f8e504c714970365427759f9db
                            • MD5 SHA1 SHA512 SSDEEP

                            main.scene

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\main.scene
                            • Size 2KB
                            • SHA256 a9d4b06d4eafca0dda1d409d9105fb73faa6122147eeabdd1716080eef229558
                            • MD5 SHA1 SHA512

                            noface.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\material\noface.material
                            • Size 692B
                            • SHA256 8539040a84f693475dc16c925354935bc85cd485562befb7ced1ad1cb52d1ced
                            • MD5 SHA1 SHA512

                            Quad.mesh

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\mesh\Quad.mesh
                            • Size 1KB
                            • SHA256 119e2e9f016877f83c4f7c91aa23614387189cd19d8a9098b5de338f5e0df38f
                            • MD5 SHA1 SHA512

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\rt\outputTex.rt
                            • Size 567B
                            • SHA256 8cd4b0db123b2babd506e58a78020adc44f248cffeaaf0e819451807ad94bf9b
                            • MD5 SHA1 SHA512

                            noface.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\xshader\noface.xshader
                            • Size 1KB
                            • SHA256 06de6e75308dc5b8451a2cf7e3109ca2262e144fa4014bc7706dc2f7fcac7f55
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\config.json
                            • Size 338B
                            • SHA256 474a9d95cb7bc887cc2ac7324648a336e80d63976b76b21e3ff33f710f034b2d
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\tone\config.json
                            • Size 256B
                            • SHA256 b57b933c9a505ba7d6351672147d522996a0124180156bfdf19705a0d8b93a74
                            • MD5 SHA1 SHA512

                            entity.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\LogWheel\log_wheel_v0\Wheel\xshader\entity.xshader
                            • Size 1KB
                            • SHA256 df215933763275ed647cbc3ca4aa61d61bae5d103c57d7aabdbfd693b7d83e1f
                            • MD5 SHA1 SHA512

                            outputTex.rt

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\PrimaryWheel\primary_wheel_v0\Wheel\rt\outputTex.rt
                            • Size 510B
                            • SHA256 04f3515e2001470f579f2e4cfc6df63e2d35593d13ac259ba769e2d2d4ef68f1
                            • MD5 SHA1 SHA512

                            lips_keypoint_faceu.vert

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\figure\beauty_head\beauty_root_pack\AmazingFeature\xshader\lips_keypoint_faceu.vert
                            • Size 535B
                            • SHA256 96ca09106a66055d2040069806965b88b710942a569c3af6caceb0eaf4fad5ee
                            • MD5 SHA1 SHA512

                            2.ef46db37.css

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\css\2.ef46db37.css
                            • Size 1B
                            • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                            • MD5 SHA1 SHA512

                            836.8f441f5d.css

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\css\async\836.8f441f5d.css
                            • Size 60KB
                            • SHA256 dab65bbf236f9dfc62df33e359ab6b3491cfd984789683339990e3ae1925c392
                            • MD5 SHA1 SHA512 SSDEEP

                            707.3e4b9351.js

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\js\707.3e4b9351.js
                            • Size 50KB
                            • SHA256 e3aadd6c43fc0c0da41d71b75cafefadb1ad2b9f5591f2be746263ebffad6fe9
                            • MD5 SHA1 SHA512 SSDEEP

                            220.be5ea522.js

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\js\async\220.be5ea522.js
                            • Size 11KB
                            • SHA256 9f164e88258c70e0f2ac1d6c0bb299f574fce513abde1f2005a30d95710d0c35
                            • MD5 SHA1 SHA512 SSDEEP

                            lib-react.b1974d26.js

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\js\lib-react.b1974d26.js
                            • Size 133KB
                            • SHA256 940d1502ea51a99be7496a9691793f9f2d8347a4d7b8a9ca63c8106abab0cba9
                            • MD5 SHA1 SHA512 SSDEEP

                            lib-router.ca41585f.js

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\js\lib-router.ca41585f.js
                            • Size 45KB
                            • SHA256 01f382bde2e17c54a1254f75bdc04d6cdd75528dfb33bce34d07ac4dc58b2b20
                            • MD5 SHA1 SHA512 SSDEEP

                            tt_fsnew_base_jianying_v2.0.model

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\models\ttfacemodel\tt_fsnew_base_jianying_v2.0.model
                            • Size 1.3MB
                            • SHA256 71d025fc4c74e8989c43f4117dce05b0042808c6addd1e5f654780750cbe256b
                            • MD5 SHA1 SHA512 SSDEEP

                            VECrashMonitor.dll

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VECrashMonitor.dll
                            • Size 52KB
                            • SHA256 26beb987b10e21f07ea8c6680f0fb898a4154ecb674b1142a7d0b518e661518d
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-core-file-l1-2-0.dll

                            • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-file-l1-2-0.dll
                            • Size 16KB
                            • SHA256 47e6421627c8ce16887912fe7fea89ab2e19f0119a2aa776bfb4c70323e65804
                            • MD5 SHA1 SHA512 SSDEEP

                            quickwindow.qmltypes

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\QtQuick\Window\quickwindow.qmltypes
                            • Size 215B
                            • SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
                            • MD5 SHA1 SHA512

                            scene.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\highlight\amazingfeature\scene.config
                            • Size 284B
                            • SHA256 5b405fa29439f5853937c9714c794f10a01ed033f81866ba52f7f8ea5312b41e
                            • MD5 SHA1 SHA512

                            Transform.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\saturation\amazingfeature\Transform.lua
                            • Size 743B
                            • SHA256 f5ae7d270c41dc064723acb52c96339337d142f327ed98591ebb52c9518a2a78
                            • MD5 SHA1 SHA512

                            main.scene

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\saturation\amazingfeature\main.scene
                            • Size 1KB
                            • SHA256 b97663892b4a96ac2b5888965086c8e6e037e962a76f38529f8471d8b4e7dbad
                            • MD5 SHA1 SHA512

                            sticker.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\saturation\amazingfeature\sticker.config
                            • Size 243B
                            • SHA256 6f8d212c18569ba0e1c3b1bc89c8c4b2a16377d94cc26d1d78df1bb920efe379
                            • MD5 SHA1 SHA512

                            gles2_filter.vert

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\saturation\amazingfeature\xshader\gles2_filter.vert
                            • Size 215B
                            • SHA256 ff67b00d9d13e6ab219c94e61e36ad43f1e025d4e3f540f14a6ff26b1b7e8dbf
                            • MD5 SHA1 SHA512

                            guideFilter.vert

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\guideFilter.vert
                            • Size 245B
                            • SHA256 fb3e9e7a966147cc5cb48b1a087931bfbdea744a0d0e0def0f07070ba48a73cc
                            • MD5 SHA1 SHA512

                            fshader.vert

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\prefabs\sharp\fshader.vert
                            • Size 171B
                            • SHA256 eaf495d1de3a920ca4f87e5bfe868a822d1ac05ae9f8d10651d60a382ecdd1b7
                            • MD5 SHA1 SHA512

                            sticker.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\sticker.config
                            • Size 276B
                            • SHA256 c3de42b569951c70e76d4adb756b424c0ddaeaea6c1a0b61bf1935b7b7b1ee66
                            • MD5 SHA1 SHA512

                            sticker.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\sticker.config
                            • Size 258B
                            • SHA256 9c9ba3ebe0c06582ce05df7831d4754061d2ed7c7e3ad6acaaaa563f7bbf7d2f
                            • MD5 SHA1 SHA512

                            gles2_filter.vert

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\xshader\gles2_filter.vert
                            • Size 204B
                            • SHA256 add8f8c4c8e970dcdbe6ca1ab7180f7124cafc4e5dd909d8b0d7cf1734b3409e
                            • MD5 SHA1 SHA512

                            Transform.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\vignetting\amazingfeature\Transform.lua
                            • Size 716B
                            • SHA256 4e4b7c19259ebab2fbe29d179122a20584b783f12632bfc2d214d82e522c303b
                            • MD5 SHA1 SHA512

                            LuaRTTI.MarkGen.lua

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\LuaRTTI.MarkGen.lua
                            • Size 222B
                            • SHA256 cf4f8b5ff1a50eff88236aba7f9bb48e696d337b779d98e911d00f6876800503
                            • MD5 SHA1 SHA512

                            js-meta.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\js-meta.json
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512

                            scene.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\LogWheel\log_wheel_v1\Wheel\scene.config
                            • Size 363B
                            • SHA256 468a132a03b8569130faf2c5d8e0f05f3f7602a336b0510534026c11a73ab460
                            • MD5 SHA1 SHA512

                            anim.prefab

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\anim.prefab
                            • Size 477B
                            • SHA256 e9d87f8022efa9374e74d61c310d8bc11a98925b8d2e771ab75e1b865164c02e
                            • MD5 SHA1 SHA512

                            blend.material

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\blend.material
                            • Size 552B
                            • SHA256 e8986f58f72446435468272d8d4e7c95a4fce58b3ad4838ed634b999196d3736
                            • MD5 SHA1 SHA512

                            config.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\config.json
                            • Size 64B
                            • SHA256 07232ba6befad39df9079b18e7c66235a11b2b375626c80cabd0b46f9b7d948f
                            • MD5 SHA1 SHA512

                            content.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\content.json
                            • Size 65B
                            • SHA256 424c068d0f0e848d3b8f25ec1a55f1086df3c87ad95eca13fe6b265c46400fc0
                            • MD5 SHA1 SHA512

                            blend.vert

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\xshader\blend.vert
                            • Size 283B
                            • SHA256 2719896bc6ff9ed2ff5532a937ac685668479e4bcd19ef11ed708cdbf52c2fd5
                            • MD5 SHA1 SHA512

                            blend.xshader

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\xshader\blend.xshader
                            • Size 726B
                            • SHA256 a1a1915919f200668689f83694e4fb7b6bba2e3ff6cc2bacc7b84d36b7c48fc0
                            • MD5 SHA1 SHA512

                            algorithmConfig.json

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\PrimaryWheel\primary_wheel_v0\algorithmConfig.json
                            • Size 382B
                            • SHA256 28251cedc501cb7285fe4c06af3714af3ec068834cc15c1ddcd913f91572ace0
                            • MD5 SHA1 SHA512

                            sticker.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\PrimaryWheel\primary_wheel_v1\Wheel\sticker.config
                            • Size 276B
                            • SHA256 8695d8d1cd532f86c340a46ff20f6c96f25f842d6c6f2d3c67b29e3c8d706fb0
                            • MD5 SHA1 SHA512

                            publish-video.efdeb61f.css

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\image_h5_material_publish\static\css\publish-video.efdeb61f.css
                            • Size 10KB
                            • SHA256 f8a1929af639b5381308c1bbef8f76bc1b77132b56f4bca6b1bf7d5cbdfaeaf5
                            • MD5 SHA1 SHA512 SSDEEP

                            publish-video.b44e3ef4.js

                            • Path C:\Users\Admin\AppData\Local\CapCut\Apps\202462223236657_1\JYPacket\3.3.0.1161\Resources\image_h5_material_publish\static\js\publish-video.b44e3ef4.js
                            • Size 39KB
                            • SHA256 08488558209a47221955af71831367b2ce99a80bdc4d63c839ad17775fb35b3f
                            • MD5 SHA1 SHA512 SSDEEP

                            Configure.ini

                            • Path C:\Users\Admin\AppData\Local\CapCut\Configure.ini
                            • Size 28B
                            • SHA256 e2b2952b674d2f65b3be4af3deb6194c65bb3985b45731e17061a0eb1ae49f2d
                            • MD5 SHA1 SHA512

                            CURRENT~RFf794f49.TMP

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\Cache\CURRENT~RFf794f49.TMP
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512

                            buriedPointLogCfg

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\buriedPointLogCfg
                            • Size 26B
                            • SHA256 6561d3ca6cd3c5b619c318c98b0982eeb111d5276b8832748a3649b6237f8c2a
                            • MD5 SHA1 SHA512

                            buriedPointLogCfg.TkNMZP

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\buriedPointLogCfg.TkNMZP
                            • Size 51B
                            • SHA256 e64107c8b150e3e733aed14a728920bef2963027f4375f5f26693fe5c0810e72
                            • MD5 SHA1 SHA512

                            buriedPointLogCfg.lock

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\buriedPointLogCfg.lock
                            • Size 59B
                            • SHA256 ddba92c8ac9ad352461817ee35857693710a7f9dfe8c06294026d1ffb658729a
                            • MD5 SHA1 SHA512

                            channel

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\channel
                            • Size 47B
                            • SHA256 bbd4a0d7e01b263b4d270944c0dabb4cf7d42ec0282dbc3bbdc7a25dc49ca29e
                            • MD5 SHA1 SHA512

                            commonSetting.ini

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\commonSetting.ini
                            • Size 28B
                            • SHA256 58eedaf944b2ba382e8b4ecbe5b5cbfa628762b71b8f0e60d4a74b2d45878abd
                            • MD5 SHA1 SHA512

                            commonSetting.ini

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\commonSetting.ini
                            • Size 91B
                            • SHA256 beb75922f2eb91e62a5fd8d49cdeaed4a21aab6122a693aaf7eac976d41872fc
                            • MD5 SHA1 SHA512

                            globalSetting

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\globalSetting
                            • Size 1KB
                            • SHA256 507433599a35b2851bba2d7bb7f1859c931b41bd9b927ed1d82618958c237859
                            • MD5 SHA1 SHA512

                            globalSetting

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\globalSetting
                            • Size 1KB
                            • SHA256 4c349add2ddf3c558db51f19ccb231ba64eb9de1fd731d1f96dc0aa6c0012543
                            • MD5 SHA1 SHA512

                            highlight_penetrate.ini

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\highlight_penetrate.ini
                            • Size 45B
                            • SHA256 722e170b9efddf03eeac42cc42fb2aec6ffdacf2d061b670aced06bf1cffb87d
                            • MD5 SHA1 SHA512

                            highlight_penetrate.ini.lock

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\highlight_penetrate.ini.lock
                            • Size 59B
                            • SHA256 df6a4d32641dbd5225496522af6cae7fe909cbf0f96ab18755818bd8f3102f84
                            • MD5 SHA1 SHA512

                            ve_hw_check.ini

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\ve_hw_check.ini
                            • Size 178B
                            • SHA256 3f811ee91e9be0e0c01ba5f6f12f14e51b41d29f6a761e7fbdc44474d65dbe99
                            • MD5 SHA1 SHA512

                            ve_hw_check.ini

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\ve_hw_check.ini
                            • Size 859B
                            • SHA256 f98d2ede072c6a3d1e7be21a6da997095b117a1596d8f12030572d09ec56568f
                            • MD5 SHA1 SHA512

                            vesdk.ini

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\vesdk.ini
                            • Size 1KB
                            • SHA256 5f8c3283a9a7f5a2bb6cb2b481d520bef336b83b4c3b26e9391d840c43959799
                            • MD5 SHA1 SHA512

                            vesdk.ini.lock

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\vesdk.ini.lock
                            • Size 63B
                            • SHA256 67280a7488eaae42f2120c9bb1afe308dc5ed4da21b1b9651ef4d93149d04c8e
                            • MD5 SHA1 SHA512

                            b7f509e2-22ba-4b9f-8041-5401e8321533.tmp

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\TTNet\b7f509e2-22ba-4b9f-8041-5401e8321533.tmp
                            • Size 618B
                            • SHA256 7e56ef22287f43c529467ea4de5f9ecb53c6344918c7e444f7f7cd5c1d19b424
                            • MD5 SHA1 SHA512

                            tt_net_config.config

                            • Path C:\Users\Admin\AppData\Local\CapCut\User Data\TTNet\tt_net_config.config
                            • Size 685B
                            • SHA256 1323b8c578dfd3964c17ea68320ef1e1f78c825db3728d3509cf39234af4ff9b
                            • MD5 SHA1 SHA512

                            Cab49EE.tmp

                            • Path C:\Users\Admin\AppData\Local\Temp\Cab49EE.tmp
                            • Size 65KB
                            • SHA256 c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
                            • MD5 SHA1 SHA512 SSDEEP

                            Tar4A8D.tmp

                            • Path C:\Users\Admin\AppData\Local\Temp\Tar4A8D.tmp
                            • Size 171KB
                            • SHA256 4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
                            • MD5 SHA1 SHA512 SSDEEP

                            Tar4DAF.tmp

                            • Path C:\Users\Admin\AppData\Local\Temp\Tar4DAF.tmp
                            • Size 181KB
                            • SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
                            • MD5 SHA1 SHA512 SSDEEP

                            gpuSupport.ini

                            • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\gpuSupport.ini
                            • Size 121B
                            • SHA256 7b7b8c6153f80f996c36e6f65e1b2b93f73eb88da50cd3754bfa5e6777bbd552
                            • MD5 SHA1 SHA512

                            ve_hw_check.ini

                            • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\ve_hw_check.ini
                            • Size 844B
                            • SHA256 177be37eb43c4a0c944515778c41209eb2ceb43cd1034515e667e4d11d92f661
                            • MD5 SHA1 SHA512

                            vesdk.ini

                            • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\vesdk.ini
                            • Size 1KB
                            • SHA256 05b604a4cf0baf0878e91e2d6523447573dbc50309b225b70b1d6f7fe3aeca90
                            • MD5 SHA1 SHA512

                            CapCut.exe

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                            • Size 225KB
                            • SHA256 633d3c71ff3c8995d399bdeca109352c68921cd1caef62101ef5cf5df9a0fc4d
                            • MD5 SHA1 SHA512 SSDEEP

                            Qt6Core.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\Qt6Core.dll
                            • Size 5.3MB
                            • SHA256 fa2c2c8487b1435ace3c858ac03947d450f015966e401d0d4a8ac7c6868fc61a
                            • MD5 SHA1 SHA512 SSDEEP

                            VESafeGuard.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\VESafeGuard.dll
                            • Size 276KB
                            • SHA256 f82c78e8e4eb8f2a9e1b31968bb50045dce387beee101801e5fe9431f94dfb40
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-core-file-l2-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-file-l2-1-0.dll
                            • Size 16KB
                            • SHA256 654e25cf12ac536bc4c5277cb6c4e6895954185c8b2d38a4c1400e51c0c67fda
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-core-localization-l1-2-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-localization-l1-2-0.dll
                            • Size 18KB
                            • SHA256 3682be1dee2b46fb9a8192e7abec25cd59e1c7e7bf6aeb0e749b2bee14114fc2
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-core-processthreads-l1-1-1.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-processthreads-l1-1-1.dll
                            • Size 16KB
                            • SHA256 aa7d14b1a0c9d6657b9873f5398399fc7eac4d652ea58b43a3372a65034d6944
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-core-synch-l1-2-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-synch-l1-2-0.dll
                            • Size 16KB
                            • SHA256 6525c24e9804a3b446e6a4dd40b62ccc79b9e372576a606ddf9645f3f3429778
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-core-timezone-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-timezone-l1-1-0.dll
                            • Size 16KB
                            • SHA256 1e4c13ffa12701848612f328d6be37264b4bca84a0dbdbecdbfa1f655f322142
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-convert-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-convert-l1-1-0.dll
                            • Size 20KB
                            • SHA256 3085863d03dc5c612b7e0bc5436149592328866b2c6c112721a14f9f1df7d302
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-environment-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-environment-l1-1-0.dll
                            • Size 16KB
                            • SHA256 d2dce55f9c1ca4aa6636152ed0476639c691a08fdda099b82458503e942a5b44
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-filesystem-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-filesystem-l1-1-0.dll
                            • Size 18KB
                            • SHA256 9bd9efc46ef6a14880a3fe3c8551726296fab66867d207917edcf5c0a8b02d3d
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-heap-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-heap-l1-1-0.dll
                            • Size 17KB
                            • SHA256 a1829be94d76cd982fc26e94afa8278b0a3a0199965ccc8e982d1a2b51c96909
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-locale-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-locale-l1-1-0.dll
                            • Size 16KB
                            • SHA256 7970cfbcd95d9ff317ca879403c4e74dd27ecad8e0d813db8070037dc678c3eb
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-math-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-math-l1-1-0.dll
                            • Size 25KB
                            • SHA256 0c318aada9b1cee292733cae9625a0b94b0dcb170dcc5867eb074924242e15e7
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-runtime-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-runtime-l1-1-0.dll
                            • Size 20KB
                            • SHA256 b09318006b088580bad4c2121078e16da3c8a64592408df9168312bc97879988
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-stdio-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-stdio-l1-1-0.dll
                            • Size 22KB
                            • SHA256 8d1909161541b5b6c0624c5fdcc8f497a3f6baf320bf71a1ec74b78697f243e0
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-string-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-string-l1-1-0.dll
                            • Size 22KB
                            • SHA256 7d5349def3f8b1f18647157ecc573cb72a3474d95f7aee3c739d80143da9eca5
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-time-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-time-l1-1-0.dll
                            • Size 18KB
                            • SHA256 705acdc492875e04499b1074a605cf44741db7604646dbb7b1ec974b5b6bd65a
                            • MD5 SHA1 SHA512 SSDEEP

                            api-ms-win-crt-utility-l1-1-0.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-utility-l1-1-0.dll
                            • Size 16KB
                            • SHA256 66c720c793ae03c51d1e5829bdf4f79051dceb67dc583b7450bb6a8033199a3a
                            • MD5 SHA1 SHA512 SSDEEP

                            msvcp140.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\msvcp140.dll
                            • Size 556KB
                            • SHA256 67f968bb1574eb11860c98814f96ab20bc77a70046523e541c7e82bfdd822a46
                            • MD5 SHA1 SHA512 SSDEEP

                            ucrtbase.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\ucrtbase.dll
                            • Size 998KB
                            • SHA256 73f140818242bc885ff496a3306071e386bf3ec25149fdfb528f50c7e8d8f975
                            • MD5 SHA1 SHA512 SSDEEP

                            vcruntime140.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\vcruntime140.dll
                            • Size 99KB
                            • SHA256 a132cc216e8516136ca4739cac85519371f934f7cd8e14c69b464a01f3fc87d9
                            • MD5 SHA1 SHA512 SSDEEP

                            vcruntime140_1.dll

                            • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\vcruntime140_1.dll
                            • Size 40KB
                            • SHA256 0344c6e05c82b014e70b49b9e023e2e47ad8cee7ce3ca4e7c12b3834968063c2
                            • MD5 SHA1 SHA512 SSDEEP

                            CapCut.exe

                            • Path \Users\Admin\AppData\Local\CapCut\CapCut.exe
                            • Size 1.5MB
                            • SHA256 d12cf2bed6e91aa3f9a0ab0c87aee5493f727024efd2919aad8646aaa1b0b7d3
                            • MD5 SHA1 SHA512 SSDEEP

                            7zip.dll

                            • Path \Users\Admin\AppData\Local\Temp\E9DDA433-AA83-40F3-BEA5-93BAD32DD698\7zip.dll
                            • Size 751KB
                            • SHA256 fe604c8747171a85f883b08fcaf32a64d59ff7c7ed89e862ad252d366ab66368
                            • MD5 SHA1 SHA512 SSDEEP

                            BgWorker.dll

                            • Path \Users\Admin\AppData\Local\Temp\nsy2D39.tmp\BgWorker.dll
                            • Size 2KB
                            • SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
                            • MD5 SHA1 SHA512

                            System.dll

                            • Path \Users\Admin\AppData\Local\Temp\nsy2D39.tmp\System.dll
                            • Size 12KB
                            • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                            • MD5 SHA1 SHA512 SSDEEP

                            deviceregister_shared.dll

                            • Path \Users\Admin\AppData\Local\Temp\nsy2D39.tmp\deviceregister_shared.dll
                            • Size 226KB
                            • SHA256 7c2a74c4be8d524a121e78e763c05c7b5cb58b524119ac8897c493e717a1d42a
                            • MD5 SHA1 SHA512 SSDEEP

                            downloader_nsis_plugin.dll

                            • Path \Users\Admin\AppData\Local\Temp\nsy2D39.tmp\downloader_nsis_plugin.dll
                            • Size 1.2MB
                            • SHA256 3ef7a13886328dafba1c49ec096da122e63839ac6965bf4f3d4dcce3a35ccc6d
                            • MD5 SHA1 SHA512 SSDEEP

                            shell_downloader.dll

                            • Path \Users\Admin\AppData\Local\Temp\nsy2D39.tmp\shell_downloader.dll
                            • Size 2.2MB
                            • SHA256 0c4abb66d9a69c80cfaa0eb3c988d4dc40d989843a87e95ed3cc6e75dae31559
                            • MD5 SHA1 SHA512 SSDEEP

                            memory/860-6405-0x0000000000110000-0x000000000011A000-memory.dmp

                            memory/860-6414-0x0000000000130000-0x000000000013A000-memory.dmp

                            memory/860-6412-0x0000000000130000-0x000000000013A000-memory.dmp

                            memory/860-6418-0x0000000000130000-0x000000000013A000-memory.dmp

                            memory/860-6417-0x0000000000130000-0x000000000013A000-memory.dmp

                            memory/860-6404-0x0000000000110000-0x000000000011A000-memory.dmp

                            memory/1780-5982-0x0000000037240000-0x0000000037250000-memory.dmp

                            memory/1780-5981-0x0000000037240000-0x0000000037250000-memory.dmp

                            memory/1780-6162-0x0000000002CC0000-0x0000000002CCA000-memory.dmp

                            memory/2280-6416-0x00000000001A0000-0x00000000001AA000-memory.dmp

                            memory/2280-6403-0x0000000000180000-0x000000000018A000-memory.dmp

                            memory/2280-6415-0x00000000001A0000-0x00000000001AA000-memory.dmp

                            memory/2280-6402-0x0000000000180000-0x000000000018A000-memory.dmp

                            memory/2280-6411-0x00000000001A0000-0x00000000001AA000-memory.dmp

                            memory/2280-6413-0x00000000001A0000-0x00000000001AA000-memory.dmp

                            memory/2320-6265-0x000007FEF2FA0000-0x000007FEF39F9000-memory.dmp

                            memory/2320-6266-0x0000000002230000-0x0000000002231000-memory.dmp

                            memory/2320-6242-0x0000000001DA0000-0x0000000001DAA000-memory.dmp

                            memory/2320-6203-0x000007FEF3A00000-0x000007FEF3FA9000-memory.dmp

                            memory/2320-6204-0x000007FEF4850000-0x000007FEF4CFB000-memory.dmp

                            memory/2852-6491-0x0000000037240000-0x0000000037250000-memory.dmp

                            memory/2852-6679-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6628-0x0000000005AA0000-0x0000000005AAA000-memory.dmp

                            memory/2852-6645-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6647-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6646-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6644-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6662-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6670-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6689-0x0000000008260000-0x0000000008261000-memory.dmp

                            memory/2852-6699-0x0000000008270000-0x0000000008271000-memory.dmp

                            memory/2852-6698-0x0000000008270000-0x0000000008271000-memory.dmp

                            memory/2852-6697-0x0000000008270000-0x0000000008271000-memory.dmp

                            memory/2852-6696-0x0000000008270000-0x0000000008271000-memory.dmp

                            memory/2852-6695-0x0000000008270000-0x0000000008271000-memory.dmp

                            memory/2852-6694-0x0000000008270000-0x0000000008271000-memory.dmp

                            memory/2852-6693-0x0000000008270000-0x0000000008271000-memory.dmp

                            memory/2852-6691-0x0000000008260000-0x0000000008261000-memory.dmp

                            memory/2852-6690-0x0000000008260000-0x0000000008261000-memory.dmp

                            memory/2852-6688-0x0000000008260000-0x0000000008261000-memory.dmp

                            memory/2852-6687-0x0000000008260000-0x0000000008261000-memory.dmp

                            memory/2852-6686-0x0000000008260000-0x0000000008261000-memory.dmp

                            memory/2852-6685-0x0000000008260000-0x0000000008261000-memory.dmp

                            memory/2852-6684-0x0000000008260000-0x0000000008261000-memory.dmp

                            memory/2852-6682-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6681-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6680-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6629-0x0000000005AA0000-0x0000000005AAA000-memory.dmp

                            memory/2852-6678-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6677-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6676-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6675-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6674-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6673-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6672-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6671-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6669-0x0000000008250000-0x0000000008251000-memory.dmp

                            memory/2852-6667-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6666-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6665-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6664-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6663-0x0000000005DC0000-0x0000000005DC1000-memory.dmp

                            memory/2852-6590-0x000007FEF2FA0000-0x000007FEF39F9000-memory.dmp

                            memory/2852-6586-0x0000000011D20000-0x0000000012160000-memory.dmp

                            memory/2852-6589-0x0000000012160000-0x0000000012360000-memory.dmp

                            memory/2852-6490-0x0000000037240000-0x0000000037250000-memory.dmp

                            memory/2852-7561-0x0000000005AA0000-0x0000000005AAA000-memory.dmp

                            memory/2928-6459-0x0000000001CE0000-0x0000000001CEA000-memory.dmp

                            memory/2928-6460-0x0000000001CE0000-0x0000000001CEA000-memory.dmp

                            memory/3344-7264-0x0000000000200000-0x000000000020A000-memory.dmp

                            memory/3344-7263-0x0000000000200000-0x000000000020A000-memory.dmp

                            memory/3344-7286-0x0000000000220000-0x000000000022A000-memory.dmp

                            memory/3352-7262-0x0000000000200000-0x000000000020A000-memory.dmp

                            memory/3352-7261-0x0000000000200000-0x000000000020A000-memory.dmp

                            memory/3352-7273-0x0000000000230000-0x000000000023A000-memory.dmp

                            memory/3352-7272-0x0000000000230000-0x000000000023A000-memory.dmp