Overview

overview

10

Static

static

3

Wondershar...52.exe

windows7-x64

8

Wondershar...52.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    129s
  • max time network
    172s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/06/2024, 16:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Wondershare Filmora 13.3.12.7152.exe
  • Size 574.7MB
  • Sample240603-tpb7zaca2z
  • SHA256 b07e558446f34f72407235a41f8e3d4d47f938a14be9ec170d4eae48f5bc4b0d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lummabootkitdiscoveryevasionpersistencestealerthemidatrojan

Malware Config

Extracted

Family

  • lumma

C2

  • https://messtimetabledkolvk.shop/api

  • https://horsedwollfedrwos.shop/api

  • https://patternapplauderw.shop/api

  • https://understanndtytonyguw.shop/api

  • https://considerrycurrentyws.shop/api

  • https://detailbaconroollyws.shop/api

  • https://deprivedrinkyfaiir.shop/api

  • https://relaxtionflouwerwi.shop/api

Signatures

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma
  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 4 IoCs
    evasion
  • Downloads MZ/PE file
  • Modifies Installed Components in the registry 2 TTPs 5 IoCs
    persistence
  • Modifies Windows Firewall 2 TTPs 1 IoCs
    evasion
  • Checks BIOS information in registry 2 TTPs 12 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 30 IoCs
  • Loads dropped DLL 64 IoCs
  • Registers COM server for autorun 1 TTPs 3 IoCs
    persistence
  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 4 IoCs
    evasiontrojan
  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 4 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Suspicious use of NtSetInformationThreadHideFromDebugger 24 IoCs
  • Suspicious use of SetThreadContext 1 IoCs
  • Drops file in Program Files directory 42 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 53 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 56 IoCs
  • Suspicious use of SetWindowsHookEx 22 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\Wondershare Filmora 13.3.12.7152.exe
    "C:\Users\Admin\AppData\Local\Temp\Wondershare Filmora 13.3.12.7152.exe"
    1⤵
    • Checks computer location settings
    • Enumerates connected drives
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:3232
    • C:\Users\Admin\AppData\Roaming\GetintoWAY\Wondershare Filmora 13.3.12.7152\prerequisites\Wondershare Filmora 13\filmora_64bit_13.3.12_full846.exe
      "C:\Users\Admin\AppData\Roaming\GetintoWAY\Wondershare Filmora 13.3.12.7152\prerequisites\Wondershare Filmora 13\filmora_64bit_13.3.12_full846.exe" /silent
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4760
      • C:\Users\Admin\AppData\Local\Temp\is-LRF70.tmp\filmora_64bit_13.3.12_full846.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-LRF70.tmp\filmora_64bit_13.3.12_full846.tmp" /SL5="$130056,560667285,401920,C:\Users\Admin\AppData\Roaming\GetintoWAY\Wondershare Filmora 13.3.12.7152\prerequisites\Wondershare Filmora 13\filmora_64bit_13.3.12_full846.exe" /silent
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:1952
        • C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\_isetup\_setup64.tmp
          helper 105 0x438
          4⤵
          • Executes dropped EXE
          PID:4756
        • C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 1.exe
          "C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 1.exe" /VERYSILENT /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152" /UPGRADE_HWND=66096
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:2732
          • C:\Users\Admin\AppData\Local\Temp\is-4224V.tmp\Wondershare Filmora SubPack 1.tmp
            "C:\Users\Admin\AppData\Local\Temp\is-4224V.tmp\Wondershare Filmora SubPack 1.tmp" /SL5="$10234,122728176,401920,C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 1.exe" /VERYSILENT /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152" /UPGRADE_HWND=66096
            5⤵
            • Executes dropped EXE
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:1760
            • C:\Users\Admin\AppData\Local\Temp\is-3I474.tmp\_isetup\_setup64.tmp
              helper 105 0x4A8
              6⤵
              • Executes dropped EXE
              PID:5960
        • C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 2.exe
          "C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 2.exe" /VERYSILENT /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152" /UPGRADE_HWND=66160
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:4300
          • C:\Users\Admin\AppData\Local\Temp\is-0ONIR.tmp\Wondershare Filmora SubPack 2.tmp
            "C:\Users\Admin\AppData\Local\Temp\is-0ONIR.tmp\Wondershare Filmora SubPack 2.tmp" /SL5="$10274,133443675,401920,C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 2.exe" /VERYSILENT /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152" /UPGRADE_HWND=66160
            5⤵
            • Executes dropped EXE
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:2004
            • C:\Users\Admin\AppData\Local\Temp\is-H5M5R.tmp\_isetup\_setup64.tmp
              helper 105 0x47C
              6⤵
              • Executes dropped EXE
              PID:5052
        • C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 3.exe
          "C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 3.exe" /VERYSILENT /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152" /UPGRADE_HWND=66230
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:2656
          • C:\Users\Admin\AppData\Local\Temp\is-0IM3H.tmp\Wondershare Filmora SubPack 3.tmp
            "C:\Users\Admin\AppData\Local\Temp\is-0IM3H.tmp\Wondershare Filmora SubPack 3.tmp" /SL5="$102BA,136809149,401920,C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Filmora SubPack 3.exe" /VERYSILENT /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152" /UPGRADE_HWND=66230
            5⤵
            • Executes dropped EXE
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            PID:3332
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s atimpenc.dll
          4⤵
            PID:3688
          • C:\Windows\system32\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s atixcode.dll
            4⤵
              PID:6204
            • C:\Windows\system32\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s CFDecode64.ax
              4⤵
                PID:6524
              • C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Helper Compact.exe
                "C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Helper Compact.exe" /VERYSILENT /SP-
                4⤵
                • Executes dropped EXE
                • Suspicious use of WriteProcessMemory
                PID:5676
                • C:\Users\Admin\AppData\Local\Temp\is-S4P5O.tmp\Wondershare Helper Compact.tmp
                  "C:\Users\Admin\AppData\Local\Temp\is-S4P5O.tmp\Wondershare Helper Compact.tmp" /SL5="$102F6,2101212,54272,C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Helper Compact.exe" /VERYSILENT /SP-
                  5⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Adds Run key to start application
                  • Drops file in Program Files directory
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of WriteProcessMemory
                  PID:5188
                  • C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
                    "C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" /regserver
                    6⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Modifies registry class
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SetWindowsHookEx
                    PID:5436
              • C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\vcredist_x64.exe
                "C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\vcredist_x64.exe" /q
                4⤵
                • Executes dropped EXE
                • Suspicious use of WriteProcessMemory
                PID:6268
                • \??\f:\4dd20bf80333100d565e48eac405\install.exe
                  f:\4dd20bf80333100d565e48eac405\.\install.exe /q
                  5⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:7068
              • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Wondershare NativePush.exe
                "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Wondershare NativePush.exe" /VERYSILENT /BINDINSTALL
                4⤵
                • Executes dropped EXE
                • Suspicious use of WriteProcessMemory
                PID:704
                • C:\Users\Admin\AppData\Local\Temp\is-037RK.tmp\Wondershare NativePush.tmp
                  "C:\Users\Admin\AppData\Local\Temp\is-037RK.tmp\Wondershare NativePush.tmp" /SL5="$302FC,2822387,938496,C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Wondershare NativePush.exe" /VERYSILENT /BINDINSTALL
                  5⤵
                  • Executes dropped EXE
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of WriteProcessMemory
                  PID:5156
                  • C:\Users\Admin\AppData\Local\Temp\is-NH9GL.tmp\_isetup\_setup64.tmp
                    helper 105 0x458
                    6⤵
                    • Executes dropped EXE
                    PID:5680
                  • C:\Windows\system32\netsh.exe
                    "netsh.exe" advfirewall firewall add rule name="WsToastNotification" dir=in security=authnoencap action=allow program="C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe"
                    6⤵
                    • Modifies Windows Firewall
                    PID:5448
                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
                    "C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe" install
                    6⤵
                    • Executes dropped EXE
                    PID:5284
                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
                    "C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe" start
                    6⤵
                    • Executes dropped EXE
                    PID:6568
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" http://cbs.wondershare.com/go.php?pid=846&m=i&product_version=13.3.12.7152&client_sign={6E5676E9-0832-4728-9A8E-B68E36C4665C}&is_silent_install=2
                4⤵
                • Enumerates system info in registry
                • Modifies data under HKEY_USERS
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                PID:760
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ff945a5ab58,0x7ff945a5ab68,0x7ff945a5ab78
                  5⤵
                    PID:2128
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1740 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:2
                    5⤵
                      PID:6896
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                      5⤵
                        PID:5244
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2280 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                        5⤵
                          PID:5220
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2940 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:1
                          5⤵
                            PID:6428
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2948 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:1
                            5⤵
                              PID:5444
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3600 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:1
                              5⤵
                                PID:2176
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4644 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:1
                                5⤵
                                  PID:5528
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4908 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                  5⤵
                                    PID:5380
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5036 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                    5⤵
                                      PID:5816
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4796 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                      5⤵
                                        PID:6932
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4452 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                        5⤵
                                          PID:5268
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4524 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                          5⤵
                                            PID:5488
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4808 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                            5⤵
                                              PID:4100
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3412 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                              5⤵
                                                PID:2652
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4028 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                                5⤵
                                                  PID:4552
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4824 --field-trial-handle=1952,i,2173173725966479831,18043339907322460809,131072 /prefetch:8
                                                  5⤵
                                                    PID:3968
                                                • C:\Windows\system32\ie4uinit.exe
                                                  "C:\Windows\system32\ie4uinit.exe" "-show"
                                                  4⤵
                                                  • Modifies Installed Components in the registry
                                                  • Registers COM server for autorun
                                                  • Modifies Internet Explorer settings
                                                  • Modifies registry class
                                                  PID:6072
                                            • C:\Users\Admin\AppData\Roaming\GetintoWAY\Wondershare Filmora 13.3.12.7152\prerequisites\Required Application\Setup.exe
                                              "C:\Users\Admin\AppData\Roaming\GetintoWAY\Wondershare Filmora 13.3.12.7152\prerequisites\Required Application\Setup.exe"
                                              2⤵
                                              • Executes dropped EXE
                                              • Suspicious use of SetThreadContext
                                              PID:7124
                                              • C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
                                                "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
                                                3⤵
                                                  PID:5248
                                              • C:\Windows\SysWOW64\msiexec.exe
                                                "C:\Windows\system32\msiexec.exe" /i "C:\Users\Admin\AppData\Roaming\GetintoWAY\Wondershare Filmora 13.3.12.7152 0.0.0.0\install\FF26611\Filmora 13.msi" AI_SETUPEXEPATH="C:\Users\Admin\AppData\Local\Temp\Wondershare Filmora 13.3.12.7152.exe" SETUPEXEDIR=C:\Users\Admin\AppData\Local\Temp\ EXE_CMD_LINE="/exenoupdates /forcecleanup /wintime 1717190808 " AI_MISSING_PREREQS="Wondershare Filmora 13|Required Application"
                                                2⤵
                                                • Enumerates connected drives
                                                • Suspicious use of FindShellTrayWindow
                                                PID:704
                                            • C:\Windows\system32\msiexec.exe
                                              C:\Windows\system32\msiexec.exe /V
                                              1⤵
                                              • Enumerates connected drives
                                              • Drops file in Windows directory
                                              • Modifies data under HKEY_USERS
                                              • Modifies registry class
                                              • Suspicious behavior: EnumeratesProcesses
                                              • Suspicious use of AdjustPrivilegeToken
                                              • Suspicious use of WriteProcessMemory
                                              PID:1956
                                              • C:\Windows\syswow64\MsiExec.exe
                                                C:\Windows\syswow64\MsiExec.exe -Embedding BFE71346B5A6A68719B72AD3588EF3F3 C
                                                2⤵
                                                • Loads dropped DLL
                                                PID:3192
                                              • C:\Windows\syswow64\MsiExec.exe
                                                C:\Windows\syswow64\MsiExec.exe -Embedding 5FECEEDAE864AB6243D4CB78D675E48B C
                                                2⤵
                                                • Loads dropped DLL
                                                PID:1740
                                              • C:\Windows\system32\srtasks.exe
                                                C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                2⤵
                                                  PID:2776
                                                • C:\Windows\syswow64\MsiExec.exe
                                                  C:\Windows\syswow64\MsiExec.exe -Embedding E2D569AAC64C51E99C888B1C9BF77C8B
                                                  2⤵
                                                  • Loads dropped DLL
                                                  PID:7096
                                                • C:\Windows\Installer\MSIE6AC.tmp
                                                  "C:\Windows\Installer\MSIE6AC.tmp" https://getintoway.com
                                                  2⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  PID:368
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://getintoway.com/
                                                    3⤵
                                                    • Enumerates system info in registry
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                    • Suspicious use of FindShellTrayWindow
                                                    • Suspicious use of SendNotifyMessage
                                                    PID:3892
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ff947ae46f8,0x7ff947ae4708,0x7ff947ae4718
                                                      4⤵
                                                        PID:6920
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,2236354416529305107,13330440578932667752,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
                                                        4⤵
                                                          PID:5760
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,2236354416529305107,13330440578932667752,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3
                                                          4⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:5644
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,2236354416529305107,13330440578932667752,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2736 /prefetch:8
                                                          4⤵
                                                            PID:5860
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2236354416529305107,13330440578932667752,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3672 /prefetch:1
                                                            4⤵
                                                              PID:2436
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2236354416529305107,13330440578932667752,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3680 /prefetch:1
                                                              4⤵
                                                                PID:2516
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2236354416529305107,13330440578932667752,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1
                                                                4⤵
                                                                  PID:7016
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2236354416529305107,13330440578932667752,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4336 /prefetch:1
                                                                  4⤵
                                                                    PID:6924
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,2236354416529305107,13330440578932667752,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
                                                                    4⤵
                                                                      PID:3716
                                                              • C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
                                                                "C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe"
                                                                1⤵
                                                                • Executes dropped EXE
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                PID:5600
                                                                • C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
                                                                  "C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe"
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Registers COM server for autorun
                                                                  • Modifies registry class
                                                                  PID:768
                                                              • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
                                                                "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
                                                                1⤵
                                                                  PID:5652
                                                                • C:\Windows\system32\vssvc.exe
                                                                  C:\Windows\system32\vssvc.exe
                                                                  1⤵
                                                                  • Checks SCSI registry key(s)
                                                                  PID:6604
                                                                • C:\Windows\System32\CompPkgSrv.exe
                                                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                  1⤵
                                                                    PID:5284
                                                                  • C:\Windows\System32\CompPkgSrv.exe
                                                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                    1⤵
                                                                      PID:5404
                                                                    • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\Wondershare Filmora Launcher.exe
                                                                      "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\Wondershare Filmora Launcher.exe"
                                                                      1⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:4472
                                                                      • C:\Windows\explorer.exe
                                                                        "C:\Windows\explorer.exe" C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Wondershare Filmora.exe
                                                                        2⤵
                                                                          PID:3828
                                                                      • C:\Windows\explorer.exe
                                                                        C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                                                        1⤵
                                                                          PID:2292
                                                                          • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Wondershare Filmora.exe
                                                                            "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Wondershare Filmora.exe"
                                                                            2⤵
                                                                            • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                                                            • Checks BIOS information in registry
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Checks whether UAC is enabled
                                                                            • Writes to the Master Boot Record (MBR)
                                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                            • Checks processor information in registry
                                                                            • Suspicious behavior: AddClipboardFormatListener
                                                                            • Suspicious use of SetWindowsHookEx
                                                                            PID:5428
                                                                            • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\DataReporting.exe
                                                                              DataReporting.exe {\"process_guid\":\"f4c6a967-66b7-4b11-9a18-7421e4053e46\",\"process_name\":\"DataReporting\",\"process_type\":3,\"server_guid\":\"5360c179-241a-440b-8476-e20fa7ea6a1f\",\"server_name\":\"WS_Filmora\",\"server_process_id\":5428,\"server_process_start_time\":1717431547291}
                                                                              3⤵
                                                                              • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                                                              • Checks BIOS information in registry
                                                                              • Executes dropped EXE
                                                                              • Checks whether UAC is enabled
                                                                              • Writes to the Master Boot Record (MBR)
                                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                              • Suspicious use of SetWindowsHookEx
                                                                              PID:2896
                                                                            • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Performance.exe
                                                                              "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Performance.exe"
                                                                              3⤵
                                                                              • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                                                              • Checks BIOS information in registry
                                                                              • Executes dropped EXE
                                                                              • Checks whether UAC is enabled
                                                                              • Writes to the Master Boot Record (MBR)
                                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                              • Checks processor information in registry
                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                              • Suspicious use of SetWindowsHookEx
                                                                              PID:2756
                                                                            • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\FilmoraPlayer.exe
                                                                              "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\FilmoraPlayer.exe" check
                                                                              3⤵
                                                                              • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                                                              • Checks BIOS information in registry
                                                                              • Executes dropped EXE
                                                                              • Checks whether UAC is enabled
                                                                              • Enumerates connected drives
                                                                              • Writes to the Master Boot Record (MBR)
                                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                              • Suspicious use of SetWindowsHookEx
                                                                              PID:3492
                                                                            • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\ocl_check.exe
                                                                              "C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora/13.3.12.7152//ocl_check.exe" "--notest"
                                                                              3⤵
                                                                                PID:3644
                                                                              • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\gpu_check.exe
                                                                                "C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora/13.3.12.7152//gpu_check.exe" 0 opencl "C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora/13.3.12.7152/\UHPPlugins" 4318 140
                                                                                3⤵
                                                                                  PID:6868
                                                                                • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\gpu_check.exe
                                                                                  "C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora/13.3.12.7152//gpu_check.exe" 0 opengl "C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora/13.3.12.7152/\UHPPlugins" 4318 140
                                                                                  3⤵
                                                                                    PID:5832
                                                                                  • C:\Windows\System32\Wbem\wmic.exe
                                                                                    wmic diskdrive where index=1 get serialnumber
                                                                                    3⤵
                                                                                      PID:6576
                                                                                    • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\WebBrowser.exe
                                                                                      WebBrowser.exe {\"prload_url_list\":[\"https://accounts.wondershare.cn/web/login_cn?default_login=1&hide_sns=2&login_mode=2&mode=2&oauth=1&product_id=13770\",\"https://miao.wondershare.cn/mobile-service-popup.html\",\"https://wae.wondershare.cc/nps2/?embed=desktop&preload=yes\",\"https://app.filmora.io/#/ai/copilot?embed=client\"],\"process_guid\":\"75f8ff0c-f53f-4259-8825-088f0b71a954\",\"process_name\":\"WebBrowser\",\"process_type\":1,\"proxy_info_mode\":0,\"proxy_info_password\":\"\",\"proxy_info_port\":0,\"proxy_info_server\":\"\",\"proxy_info_type\":2,\"proxy_info_user\":\"\",\"server_guid\":\"5360c179-241a-440b-8476-e20fa7ea6a1f\",\"server_name\":\"WS_Filmora\"}
                                                                                      3⤵
                                                                                        PID:6676
                                                                                        • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing.exe
                                                                                          "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing" --type=gpu-process --field-trial-handle=2084,14521062194506294003,3874343658622071161,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --lang=en-US --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --mojo-platform-channel-handle=2092 /prefetch:2
                                                                                          4⤵
                                                                                            PID:1172
                                                                                          • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing.exe
                                                                                            "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing" --type=renderer --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --field-trial-handle=2084,14521062194506294003,3874343658622071161,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2428 /prefetch:1
                                                                                            4⤵
                                                                                              PID:6152
                                                                                            • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing.exe
                                                                                              "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,14521062194506294003,3874343658622071161,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=utility --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --lang=en-US --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --mojo-platform-channel-handle=2440 /prefetch:8
                                                                                              4⤵
                                                                                                PID:4840
                                                                                              • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing.exe
                                                                                                "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,14521062194506294003,3874343658622071161,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=network --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --lang=en-US --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --mojo-platform-channel-handle=2452 /prefetch:8
                                                                                                4⤵
                                                                                                  PID:6752
                                                                                                • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\CefViewWing" --type=renderer --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --field-trial-handle=2084,14521062194506294003,3874343658622071161,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
                                                                                                  4⤵
                                                                                                    PID:3164
                                                                                                • C:\Windows\System32\Wbem\wmic.exe
                                                                                                  wmic diskdrive where index=1 get serialnumber
                                                                                                  3⤵
                                                                                                    PID:4056
                                                                                                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cmdCheckATI.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cmdCheckATI.exe"
                                                                                                    3⤵
                                                                                                      PID:6992
                                                                                                    • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\coremediaserver.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\coremediaserver.exe" dfdaf7f2f5e048ae-be07cc587c1a0246 17240 5428 "C:\Users\Admin\AppData\Local\Temp\Wondershare Filmora\MediaInfo\Wondershare Filmora.exe.sqldb" "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\proxypath" "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\" "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\" "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Log"
                                                                                                      3⤵
                                                                                                        PID:6668
                                                                                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Wondershare Filmora Update(x64).exe
                                                                                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\\Wondershare Filmora Update(x64).exe" /VERYSILENT /SP- "/DIR=C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora Update/"
                                                                                                        3⤵
                                                                                                          PID:5768
                                                                                                          • C:\Users\Admin\AppData\Local\Temp\is-1K11I.tmp\Wondershare Filmora Update(x64).tmp
                                                                                                            "C:\Users\Admin\AppData\Local\Temp\is-1K11I.tmp\Wondershare Filmora Update(x64).tmp" /SL5="$6006E,8180904,163840,C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Wondershare Filmora Update(x64).exe" /VERYSILENT /SP- "/DIR=C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora Update/"
                                                                                                            4⤵
                                                                                                              PID:6384
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\is-QUKC5.tmp\_isetup\_setup64.tmp
                                                                                                                helper 105 0x464
                                                                                                                5⤵
                                                                                                                  PID:5636
                                                                                                            • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cmdCheckHEVC.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\cmdCheckHEVC.exe" 875967049 320 240 1000 3000
                                                                                                              3⤵
                                                                                                                PID:7028
                                                                                                              • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                magic_xe_supported_detect.exe single autoreframe "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                3⤵
                                                                                                                  PID:3220
                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                  tasklist /FI "\"PID EQ 5428 \""
                                                                                                                  3⤵
                                                                                                                  • Enumerates processes with tasklist
                                                                                                                  PID:1172
                                                                                                                • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                  magic_xe_supported_detect.exe single face_landmarks "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                  3⤵
                                                                                                                    PID:6376
                                                                                                                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                    magic_xe_supported_detect.exe single face_pose_estimator "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                    3⤵
                                                                                                                      PID:6868
                                                                                                                    • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                      magic_xe_supported_detect.exe single face_visibility "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                      3⤵
                                                                                                                        PID:6488
                                                                                                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                        magic_xe_supported_detect.exe single facedetector "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                        3⤵
                                                                                                                          PID:6664
                                                                                                                        • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                          magic_xe_supported_detect.exe single humansegmentation_effect "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                          3⤵
                                                                                                                            PID:2456
                                                                                                                          • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                            magic_xe_supported_detect.exe single humansegmentation_highacc "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                            3⤵
                                                                                                                              PID:6436
                                                                                                                            • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                              magic_xe_supported_detect.exe single semantic_segmentation "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                              3⤵
                                                                                                                                PID:6384
                                                                                                                              • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                                magic_xe_supported_detect.exe single sky_segment "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                                3⤵
                                                                                                                                  PID:3120
                                                                                                                                • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                                  magic_xe_supported_detect.exe single speech_enhance "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                                  3⤵
                                                                                                                                    PID:7008
                                                                                                                                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\magic_xe_supported_detect.exe
                                                                                                                                    magic_xe_supported_detect.exe single video_frame_interpolation "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                                                                                                                    3⤵
                                                                                                                                      PID:1700
                                                                                                                                    • C:\Windows\System32\Wbem\wmic.exe
                                                                                                                                      wmic diskdrive where index=1 get serialnumber
                                                                                                                                      3⤵
                                                                                                                                        PID:5000
                                                                                                                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\AudioPlayer.exe
                                                                                                                                        AudioPlayer.exe {\"process_guid\":\"9279c746-ee7b-46e5-96c1-4da37bcadf18\",\"process_type\":9,\"server_guid\":\"5360c179-241a-440b-8476-e20fa7ea6a1f\",\"server_name\":\"WS_Filmora\"}
                                                                                                                                        3⤵
                                                                                                                                          PID:4876
                                                                                                                                    • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                      C:\Windows\system32\AUDIODG.EXE 0x324 0x504
                                                                                                                                      1⤵
                                                                                                                                        PID:4308

                                                                                                                                      Network

                                                                                                                                            MITRE ATT&CK Enterprise v15

                                                                                                                                            Reconnaissance

                                                                                                                                            Resource Development

                                                                                                                                            Initial Access

                                                                                                                                            Execution

                                                                                                                                            Persistence

                                                                                                                                            Boot or Logon Autostart Execution

                                                                                                                                            3
                                                                                                                                            T1547

                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                            3
                                                                                                                                            T1547.001

                                                                                                                                            Create or Modify System Process

                                                                                                                                            1
                                                                                                                                            T1543

                                                                                                                                            Windows Service

                                                                                                                                            1
                                                                                                                                            T1543.003

                                                                                                                                            Pre-OS Boot

                                                                                                                                            1
                                                                                                                                            T1542

                                                                                                                                            Bootkit

                                                                                                                                            1
                                                                                                                                            T1542.003

                                                                                                                                            Privilege Escalation

                                                                                                                                            Boot or Logon Autostart Execution

                                                                                                                                            3
                                                                                                                                            T1547

                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                            3
                                                                                                                                            T1547.001

                                                                                                                                            Create or Modify System Process

                                                                                                                                            1
                                                                                                                                            T1543

                                                                                                                                            Windows Service

                                                                                                                                            1
                                                                                                                                            T1543.003

                                                                                                                                            Defense Evasion

                                                                                                                                            Impair Defenses

                                                                                                                                            1
                                                                                                                                            T1562

                                                                                                                                            Disable or Modify System Firewall

                                                                                                                                            1
                                                                                                                                            T1562.004

                                                                                                                                            Modify Registry

                                                                                                                                            3
                                                                                                                                            T1112

                                                                                                                                            Pre-OS Boot

                                                                                                                                            1
                                                                                                                                            T1542

                                                                                                                                            Bootkit

                                                                                                                                            1
                                                                                                                                            T1542.003

                                                                                                                                            Virtualization/Sandbox Evasion

                                                                                                                                            1
                                                                                                                                            T1497

                                                                                                                                            Credential Access

                                                                                                                                            Discovery

                                                                                                                                            Peripheral Device Discovery

                                                                                                                                            2
                                                                                                                                            T1120

                                                                                                                                            Process Discovery

                                                                                                                                            1
                                                                                                                                            T1057

                                                                                                                                            Query Registry

                                                                                                                                            8
                                                                                                                                            T1012

                                                                                                                                            System Information Discovery

                                                                                                                                            8
                                                                                                                                            T1082

                                                                                                                                            Virtualization/Sandbox Evasion

                                                                                                                                            1
                                                                                                                                            T1497

                                                                                                                                            Lateral Movement

                                                                                                                                            Collection

                                                                                                                                            Command and Control

                                                                                                                                            Exfiltration

                                                                                                                                            Impact

                                                                                                                                            Replay Monitor

                                                                                                                                            Loading Replay Monitor...

                                                                                                                                            Downloads

                                                                                                                                            e585d12.rbs
                                                                                                                                            • Path C:\Config.Msi\e585d12.rbs
                                                                                                                                            • Size 24KB
                                                                                                                                            • SHA256 efbdeb495f16569df28834db28e83228b11751e295d80ca6d57f2c96a1f67d6a
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            e585d17.rbs
                                                                                                                                            • Path C:\Config.Msi\e585d17.rbs
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 2f9e60853090b383e1d5714d64704b688d8393313424a2aa5b56e4911e2a4d17
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            WSHelper.ini
                                                                                                                                            • Path C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.ini
                                                                                                                                            • Size 4KB
                                                                                                                                            • SHA256 f0201eaedd6d7e2334f1afa28f74385032284eed5a2a63449658080fc38c5ac7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-CKKJR.tmp
                                                                                                                                            • Path C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\is-CKKJR.tmp
                                                                                                                                            • Size 35KB
                                                                                                                                            • SHA256 2476d897a6d20653578fcb98737c85ccd96a42e57f67843ffbc431c0d05909a7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-T425R.tmp
                                                                                                                                            • Path C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\is-T425R.tmp
                                                                                                                                            • Size 48KB
                                                                                                                                            • SHA256 e6be04c390cee6b4955c8af0c78221fdea3907ca5d0fb5f4f256fe7b05e8a332
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-8CHMC.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\AnimationThumbnail\Motion\is-8CHMC.tmp
                                                                                                                                            • Size 14KB
                                                                                                                                            • SHA256 080cf38a264bd06666e8e7750f29942a026e959fd89fc59873794ddcaa1f0680
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-8V510.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\AnimationThumbnail\Motion\is-8V510.tmp
                                                                                                                                            • Size 4KB
                                                                                                                                            • SHA256 c9e19bc5ca79ddd3eef37e443eacc8161acd92c312afccd4be6294a72618b8c7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-19A1O.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-19A1O.tmp
                                                                                                                                            • Size 868B
                                                                                                                                            • SHA256 e1ece607477c51659ee152f802a37da359c517157c179295d2aafd11f0666f89
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-3D2M9.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-3D2M9.tmp
                                                                                                                                            • Size 872B
                                                                                                                                            • SHA256 1fc78174d305af5c6aeb39a2bfdfa1a27759f108d02a3b1977a715e111c88530
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-43KFJ.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-43KFJ.tmp
                                                                                                                                            • Size 872B
                                                                                                                                            • SHA256 356716bd0b47c47bfab1ce62808ecba98c6cf1bf97108862bc6fe75a253c3dae
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-6AEO3.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-6AEO3.tmp
                                                                                                                                            • Size 869B
                                                                                                                                            • SHA256 ec3d238d912ea9f0bfe781ad764945ae5343244d047743e02635f52804210188
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-9F603.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-9F603.tmp
                                                                                                                                            • Size 870B
                                                                                                                                            • SHA256 6aacec619d4c3c77baef7a86e65b018ae88b6ff244b2ce64bd54f4bd6d31a52e
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-AA8I3.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-AA8I3.tmp
                                                                                                                                            • Size 868B
                                                                                                                                            • SHA256 22a07da2b217afb478993f21af2c909d92289ac0eb899290b290b5b00ee0292b
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-DOHRL.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-DOHRL.tmp
                                                                                                                                            • Size 871B
                                                                                                                                            • SHA256 a724d74a8a8397b9ad9c5d897fbd2ef0a7b8c1c611489a6b499e3b672a3e6730
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-IC25T.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-IC25T.tmp
                                                                                                                                            • Size 869B
                                                                                                                                            • SHA256 1d73d0a001daa01387c3259f7a7a49e2be82e79a500f102a6594bc72dd72e0ef
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-JAH68.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-JAH68.tmp
                                                                                                                                            • Size 869B
                                                                                                                                            • SHA256 7f42e4e411cf791fe847db4d272381fc2d194c78ce70e35dc8877b35250f1d0b
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-KIGNH.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-KIGNH.tmp
                                                                                                                                            • Size 869B
                                                                                                                                            • SHA256 0b2d213c0d143e8fb53400458ce7b1f05797fffb9264237e27af9f60b6219de5
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-N1K4H.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-N1K4H.tmp
                                                                                                                                            • Size 869B
                                                                                                                                            • SHA256 a7d4902a50086b407f62b20f38c08990dbdfd655517c9f14fb15f47705bd4eda
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-Q972G.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-Q972G.tmp
                                                                                                                                            • Size 872B
                                                                                                                                            • SHA256 39be632613d649c385088a0b2e385b2551413754b3f2bf397e08dbba75748ae6
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-100QI.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-100QI.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 78d54e5f7a5d16c0379155294de80b079d7f204813d120fdd0a11b810c7c67e0
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-14ICJ.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-14ICJ.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 c6be9d6e7391f2527fdbe49947fb2e0029866921ed33e1f2e4f364085f7ac951
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-5PBH5.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-5PBH5.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 a434f4028d113176cc96bfe2a35c6abd4fd099ec62da7cd9a3887ad8dfefb97e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-69R1G.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-69R1G.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 73374a19daa1603b8cde5ae2dd130542b18f0b2e36f5dc658b416c9bff0a4f49
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-7F9Q0.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-7F9Q0.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 fa6c9586d9a301a12240da7af73598906768f1a585175c8fcea99c5de2732a90
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-D4ELQ.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-D4ELQ.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 57a86dc3f7af3d6c125de2787f2f277c58433b1ac1800ced18213f5f15de6413
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-DCO1E.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-DCO1E.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 21aeabf1641980e77388abe5a2c9553176d7ee873e13cfcecc9f1eaa3616525b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-EKA1F.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-EKA1F.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 7af6f666cc4087326fc05f282c5a894b5aa3c89cbf4e0665e0cf3dc8bc061005
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-G53EG.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-G53EG.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 803264c78fb91b15f438ad6b8dc05eeed8b38978afd12752bd0d25986b905ad0
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-N6V59.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-N6V59.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 d0038fa1cce4122ad373cb621126a1c752734d4ee1bdbad67d74f4af557a94c9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-NV91D.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-NV91D.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 1be3d7bf5df34657ecd4375d74600efea703f8d3bbead26bb239d6733044560b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-RR8PE.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-RR8PE.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 8a0ddca0a4f2900564b81ebf5300adb74674dc2a098d090c0103ac1894995cf3
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-SQOEC.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-SQOEC.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 da87241148b9244c0e45a875ffa365994cd5003034bf497d3e0f8450175528c9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-TMAA5.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-TMAA5.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 4efcf045f97bfc3452dbc90a1c12076c49851e4f8e65418ea1f80fa8f54d248b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            FConfig.ini
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\FConfig.ini
                                                                                                                                            • Size 5KB
                                                                                                                                            • SHA256 de5200ebfd9631e23d03b19139ce8f4b3c8f42334632abe6bd5b2b0e0151ba0c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            FConfig.ini
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\FConfig.ini
                                                                                                                                            • Size 5KB
                                                                                                                                            • SHA256 11e8c4a54ae7067204588cb8558f18d1e60c4b297b42d2d19bf99932b70d0a47
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini
                                                                                                                                            • Size 673B
                                                                                                                                            • SHA256 aefa0df1b075562cdf85a0141fe2a144a191ac859c6bf7189f94305f0e5246f7
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini
                                                                                                                                            • Size 738B
                                                                                                                                            • SHA256 159d5cae2a9844ea9198c04d15cd042c1cac1e498f49d364ffe6b05ea7539fed
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini
                                                                                                                                            • Size 910B
                                                                                                                                            • SHA256 0cbe3399e87f41d57bfb8597dfe9bab6f0d82fcf07b397cb8fcdf74bc7f39371
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini.CkjCZB
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini.CkjCZB
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 daf34dca9abd8d488dfc087a33b93246f79698ac2f4905f09a5486a36825cde9
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini.JjlSRl
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini.JjlSRl
                                                                                                                                            • Size 973B
                                                                                                                                            • SHA256 05c8faa14f31fcdc1ddea33964280a795406cc4e6346bd67a1324f0e44f5e0a4
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini.OKWcyE
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini.OKWcyE
                                                                                                                                            • Size 1003B
                                                                                                                                            • SHA256 fab0ec59fc422161c2c897a0831778179377e872aedb83700128d09918cdecf8
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini.UwzXzJ
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini.UwzXzJ
                                                                                                                                            • Size 683B
                                                                                                                                            • SHA256 0ab01e4faf1f4edece7f2d61b356e1fe810c3260bea28bb0c5392cceb18444f9
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini.rtopfN
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini.rtopfN
                                                                                                                                            • Size 841B
                                                                                                                                            • SHA256 1cecd2a239d0a9589144f4a651c5c82460614724d5af4d65a1b8a4d721dec1ae
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            SkinInfo.ini.lock
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Skin\Dark\SkinInfo.ini.lock
                                                                                                                                            • Size 72B
                                                                                                                                            • SHA256 24085f529c2078e5043d76d48c89d55e60335d84557b74660cf6d701da37c2b9
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Dark.qss
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\Skin\Dark\Stand\Dark.qss
                                                                                                                                            • Size 609KB
                                                                                                                                            • SHA256 5fbf86ced7b521abdcea475b47e0e4866d3cea01eb73a1b1f8967455cb8990b2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WM_AutoReframe_X86_Openvino_Fp16.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\autoreframe\WM_AutoReframe_X86_Openvino_Fp16.model
                                                                                                                                            • Size 3.5MB
                                                                                                                                            • SHA256 0c3082d072db970ce7f0058d4b4463b62334ed456b5ff1521eccde273f84be6f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            version
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\autoreframe\version
                                                                                                                                            • Size 5B
                                                                                                                                            • SHA256 d51e6ec94058554a84558a5b402ee6ef5fdf5455e35c902feda61cda8752943a
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            WM_DepthEstimate_CPU_Openvino_Fp16_1.0.0.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\depth_estimate\WM_DepthEstimate_CPU_Openvino_Fp16_1.0.0.model
                                                                                                                                            • Size 31.9MB
                                                                                                                                            • SHA256 fcdabc1358d97e17b4755b3859b669703820a5a36754ff9f77e26bd42e78ddee
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WM_FaceLandmarks_CPU_Openvino_FP32_3.0.0.0.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\face_landmarks\WM_FaceLandmarks_CPU_Openvino_FP32_3.0.0.0.model
                                                                                                                                            • Size 1.8MB
                                                                                                                                            • SHA256 409e98e49c0a278b393b612cb4338b2d30439579c779dbee6db95110c20fed11
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            version
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\face_landmarks\version
                                                                                                                                            • Size 5B
                                                                                                                                            • SHA256 892bef45a1a5205bfddb7849303ee13093d77185b84931419c334a38bc035672
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            WM_FacePoseEstimator_Net_Binary_1.0.0.0.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\face_pose_estimator\WM_FacePoseEstimator_Net_Binary_1.0.0.0.model
                                                                                                                                            • Size 120KB
                                                                                                                                            • SHA256 5e6d82e60dbe66ba34b44a5157f83172a115b3ff99f75187ae08c13c8a5b8e98
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WM_FaceVisibility_Online_Openvino_CPU_FP32_1.0.0.0.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\face_visibility\WM_FaceVisibility_Online_Openvino_CPU_FP32_1.0.0.0.model
                                                                                                                                            • Size 1.8MB
                                                                                                                                            • SHA256 4ec62fa883e00a3afa5335594c398ce7ef1e7ff08768ca2da0b2d4d894c35a09
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WM_FaceDetector_x86_Openvino_v1.0.0.0.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\facedetector\WM_FaceDetector_x86_Openvino_v1.0.0.0.model
                                                                                                                                            • Size 785KB
                                                                                                                                            • SHA256 fe1bebc9ece8aff51ed7d02cc79ab8503b1a479790f65d431cda54090181f572
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WM_EffectHumanSegment_X86_CPU_Openvino_Fp16_2.4.1.1.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_effect\WM_EffectHumanSegment_X86_CPU_Openvino_Fp16_2.4.1.1.model
                                                                                                                                            • Size 1.7MB
                                                                                                                                            • SHA256 57507175c2286d674a1d06fcc4fa61e030b852023953960f073835dcea4e5901
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            version
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_effect\version
                                                                                                                                            • Size 5B
                                                                                                                                            • SHA256 b3d093ffde5f9d8d1530cd57966760ffd2730bf73aa90d592d13a88663984dc4
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            WM_HumanSegmentHighAcc_CPU_Openvino_FP16_3.1.0.4.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_highacc\WM_HumanSegmentHighAcc_CPU_Openvino_FP16_3.1.0.4.model
                                                                                                                                            • Size 6.9MB
                                                                                                                                            • SHA256 aa6997c58298c62871dc3b646b8d6fc2feb6d0fd9cdd86b84165fabedbe0f791
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WM_HumanSegmentHighAcc_CPU_Openvino_INT8_3.1.0.5.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_highacc\WM_HumanSegmentHighAcc_CPU_Openvino_INT8_3.1.0.5.model
                                                                                                                                            • Size 3.9MB
                                                                                                                                            • SHA256 b919c3f1d4aeceb5eb5ca37723940a28b9596a800285ef5e6dde8615cfb7e29e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            version
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_highacc\version
                                                                                                                                            • Size 5B
                                                                                                                                            • SHA256 b7f5bb4ad5872543b02944ca39a59415579bb0b693bbae55f340742fa21cc8ef
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            WM_SemanticSegmentation_X86_Openvino_FP32_1.0.2.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\semantic_segmentation\WM_SemanticSegmentation_X86_Openvino_FP32_1.0.2.model
                                                                                                                                            • Size 6.6MB
                                                                                                                                            • SHA256 c155c992fe27e6ff20a4ac0d5500c6c6787ea14b8ac5b70ddd70f18cd54f205a
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            version
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\semantic_segmentation\version
                                                                                                                                            • Size 5B
                                                                                                                                            • SHA256 20d2cb096d1ab41a4140246d12f07bf6b8cb743fd48122b72532c03d44c5c14a
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            WM_SkySegment_X86_OpenVino_Fp16_v1.0.0.1.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\sky_segment\WM_SkySegment_X86_OpenVino_Fp16_v1.0.0.1.model
                                                                                                                                            • Size 2.0MB
                                                                                                                                            • SHA256 216c23b5c0056bad279b324b6106af49b500f5918b003fe50f21627730dd9272
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Speech_Enhance_X86_Openvino.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\speech_enhance\Speech_Enhance_X86_Openvino.model
                                                                                                                                            • Size 5.6MB
                                                                                                                                            • SHA256 0f791ca5bc7bf5cc368514a436d9ed0ace50dc3e54d98e1c194ef614d8628714
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WM_Video_Feature_Extraction_Openvino_FP16_1.0.0.0.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_feature_extraction\WM_Video_Feature_Extraction_Openvino_FP16_1.0.0.0.model
                                                                                                                                            • Size 21.4MB
                                                                                                                                            • SHA256 706d0088cde4ef654f8fbe2c7647646b54481054a351596b6bcde94c65b3a6d5
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WM_VideoFrameInterpolation_Openvino_Mnn_FP16.model
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_frame_interpolation\WM_VideoFrameInterpolation_Openvino_Mnn_FP16.model
                                                                                                                                            • Size 3.2MB
                                                                                                                                            • SHA256 53818a4dac6c0dcbf9decb10fb468f2d8c213beec2de154025c1e4e5f46b740f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            version
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_frame_interpolation\version
                                                                                                                                            • Size 5B
                                                                                                                                            • SHA256 11b66d3032607cb6df8b0a8470a6856bdcb631ef3fafd9397b6bc8db6b6d19b2
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            WesGpuConfig.json
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\WesGpuConfig.json
                                                                                                                                            • Size 822B
                                                                                                                                            • SHA256 8ba8936435b4fe1f887751ca04a529cd534462f325c0ae2bc55ce9f9390ccbb2
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-9V8FH.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\configs\ColorAnd3dLutPreset\default\60_color_Vignette_3\Data\is-9V8FH.tmp
                                                                                                                                            • Size 6KB
                                                                                                                                            • SHA256 9fc8f2725a06712b9d9fedddeb343d3896bbc569115c37366535ddad5e637505
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-6NNJ0.tmp
                                                                                                                                            • Path C:\ProgramData\Wondershare Filmora\sysconfigs\default_effect\advanced\HumanSegmentationBackChange\is-6NNJ0.tmp
                                                                                                                                            • Size 890B
                                                                                                                                            • SHA256 6a9f09db3178ce9b155146f3b5ed8c6726cf13788865ebd7e6578a1aa486ccff
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Filmora.ini
                                                                                                                                            • Path C:\ProgramData\Wondershare\Wondershare Creative Center\AppInstallInfo\Filmora.ini
                                                                                                                                            • Size 297B
                                                                                                                                            • SHA256 549bc757df2abc04dcb90b36bb3c4bf9aaa3aa5711f1a9b780ef67ff28b3f344
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 d97eb145828d1ee2ce4ace729067cefe08afdd35295c280c3c20469c065b7c13
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 5ad95844bafdee2da00980a9f3911acd91605048016b195e8af3984bab02b04c
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            data_1
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
                                                                                                                                            • Size 264KB
                                                                                                                                            • SHA256 77a97028f65ce39c33053679724c950dbbfb0d9b92793e0f2c4459db5fbce3e5
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Network Persistent State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                            • Size 6KB
                                                                                                                                            • SHA256 5004e10cc5f94983fd883f384755d13aee8b957db7ff4dc326b762342da16908
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            SCT Auditing Pending Reports
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                            • Size 2B
                                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            TransportSecurity
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 cbfef04173771f1e8afb01e659347fa38e3cabe2f90fc3d3fb8009812fcb0ca2
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            TransportSecurity
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 d6778096bee22c73bd076d52eb3a0c17c777040208e3bbbca2791152cc79c96f
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                            • Size 7KB
                                                                                                                                            • SHA256 3409d3bdb2b83c13b14b8c939e95f81c9c42a78c0e85ba7545b114d7ce1cd67f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 2144b43a4ebd484736aa7a4b5a556b5d70c1f1fa892f2eb52ea8221b74b2a706
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Secure Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                            • Size 16KB
                                                                                                                                            • SHA256 420dabb69cf4958542d491f9849c68d792c654c4910da68842a98040d19a9fc5
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            index.txt
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b5fb6a4311b698e4f248cf3970e1a1f966de8cd0\index.txt
                                                                                                                                            • Size 136B
                                                                                                                                            • SHA256 80a2371638033447f36652fec71735d1dab45a9f10f87a5a7ce70dc14465a4d8
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            index.txt
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b5fb6a4311b698e4f248cf3970e1a1f966de8cd0\index.txt
                                                                                                                                            • Size 129B
                                                                                                                                            • SHA256 8ecd4336b08ce5b291ec617bd61a60df095c4aafae6d1cf1f0a5dfcf331fa176
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                            • Size 72B
                                                                                                                                            • SHA256 4694a8b347ed9204d0e79ad3bffca011871a5324c4bfe4235006a330b9ef8b91
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index~RFe58e8c5.TMP
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e8c5.TMP
                                                                                                                                            • Size 48B
                                                                                                                                            • SHA256 c94b697fd5c2423430ba693a627bffc25632058256de5c1f1b21ab8c2b2c062d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                            • Size 262KB
                                                                                                                                            • SHA256 838454ba3ca44e95d93187eee814a840d9b6e917bbd1d00f825619ff9bff124b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                            • Size 257KB
                                                                                                                                            • SHA256 e3f752b835e46da211c28654ff05ea1231288d90ebdb59ff6193c73ebe2fe019
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                            • Size 262KB
                                                                                                                                            • SHA256 4d330e28658fd4b43ef5980b498381019e34ae1ade01cec8090459c00d1eef64
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            settings.dat
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                            • Size 152B
                                                                                                                                            • SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            settings.dat
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                            • Size 152B
                                                                                                                                            • SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                            • Size 792B
                                                                                                                                            • SHA256 c4b442675ab7d9799c5257ff12c109c5d69f92600d4f915ecb454d34d21156e6
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            CURRENT
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_getintoway.com_0.indexeddb.leveldb\CURRENT
                                                                                                                                            • Size 16B
                                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Network Persistent State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 5700f391954b187d02e5144bba78f6e640e04afe65e919ac3ca1ea982f4c111c
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                            • Size 7KB
                                                                                                                                            • SHA256 8477dc73032e4cca61f384042b0f8016a756f899000b65308339fae0e66e3bc2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                            • Size 7KB
                                                                                                                                            • SHA256 307c6f635e143946c9c91b3f0dc5535548bbcdcfa590a1874329480e36c4ba3b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                            • Size 5KB
                                                                                                                                            • SHA256 2f1059a61c75db8336f7bc363bd1b0e0ae9d1280ecef37d9dd3fe7c4acf88fc1
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 3703327304e486cfcd62b0c132871bed48c3d85e82fcb81533da0d2ff3fc7932
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            CurrentDatabase_400.wmdb
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 16840b48ead18e691df7721b1639d8de2295c1d7c0d14bfe2b2892b7c7f51f96
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WMSDKNS.XML
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.2\WMSDKNS.XML
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            MSI9ABA.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\MSI9ABA.tmp
                                                                                                                                            • Size 738KB
                                                                                                                                            • SHA256 118a551eef23bf842ed470316aa1a50bf17b6d656652879802d4acc0184608ca
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            MSI9B69.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\MSI9B69.tmp
                                                                                                                                            • Size 1.1MB
                                                                                                                                            • SHA256 3dbb46ee1950b828c53f2c5dee3371559327f8c6932e549c3543eaf16846a5de
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            MSI9DAC.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\MSI9DAC.tmp
                                                                                                                                            • Size 875KB
                                                                                                                                            • SHA256 f754814bda0f682382da00f49f21eb66f47c02504e4fb9322bc8068f0f168b41
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            VWL7F1E.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\VWL7F1E.tmp
                                                                                                                                            • Size 392B
                                                                                                                                            • SHA256 4b3dc62af4d4c79be1a251ffcc8f93c52e8fd6c6c2b4f9b23b5f077981a863ea
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            wsUpgrade.log
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\Wondershare\NativePush\wsUpgrade.log
                                                                                                                                            • Size 951B
                                                                                                                                            • SHA256 3ab93abe2975075634e239be5203ac25ea800f8a0e13779a9ee9d77e236f9b3f
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Wondershare Filmora SubPack 3.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-0IM3H.tmp\Wondershare Filmora SubPack 3.tmp
                                                                                                                                            • Size 1.4MB
                                                                                                                                            • SHA256 2a8c1e98b803f7530e800ad794c059ce2a048ddf36e468c48efb04cda74ce96b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Wondershare Filmora SubPack 2.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-0ONIR.tmp\Wondershare Filmora SubPack 2.tmp
                                                                                                                                            • Size 1.4MB
                                                                                                                                            • SHA256 f49d500ddad646bdc4751c9882b6ff72d89909dcfff59e00fd7199aef29ae1af
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Customization.xml
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Customization.xml
                                                                                                                                            • Size 816KB
                                                                                                                                            • SHA256 0aec16c51603e77eda89c770ee368f51af3b7b286f45f00ad848578d6dcacec8
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            InnoUtils.dll
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\InnoUtils.dll
                                                                                                                                            • Size 227KB
                                                                                                                                            • SHA256 f332a70c56060e51213659c864a6afa5bdffec51dc6d90515bb87f773dd1b633
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            InstallHelper.dll
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\InstallHelper.dll
                                                                                                                                            • Size 122KB
                                                                                                                                            • SHA256 ec3dd19d446eaf62d396d65029c1c627205bd1fd33608e122be7f4d8af7b5ad4
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WSUtilities_Setup.dll
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\WSUtilities_Setup.dll
                                                                                                                                            • Size 202KB
                                                                                                                                            • SHA256 b42085777505d324d56122f2bd6195ec3a6ce47030a31f9ce6b853c5fa8cd5a8
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WS_Log_Setup.dll
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\WS_Log_Setup.dll
                                                                                                                                            • Size 104KB
                                                                                                                                            • SHA256 43391e665a63b5e9e1288a3c608691f73ece57478e0655363918e8195d85cf81
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WebUtility.dll
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\WebUtility.dll
                                                                                                                                            • Size 114KB
                                                                                                                                            • SHA256 78a2782ba753ce020b063e1b696da3a799531c2ca495447f2ed3068188c84978
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Wondershare Helper Compact.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\Wondershare Helper Compact.exe
                                                                                                                                            • Size 2.3MB
                                                                                                                                            • SHA256 9014e7a475aa50da4f574f6e870222f37392f4bbed175a956c2171de88f8765b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            _setup64.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\_isetup\_setup64.tmp
                                                                                                                                            • Size 6KB
                                                                                                                                            • SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            innocallback.dll
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\innocallback.dll
                                                                                                                                            • Size 63KB
                                                                                                                                            • SHA256 6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            vcredist_x64.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-29452.tmp\vcredist_x64.exe
                                                                                                                                            • Size 5.0MB
                                                                                                                                            • SHA256 7451ba5c6c05347789717561e871a303a4d171850790a3cdc99d4ddbf07e320b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Wondershare Filmora SubPack 1.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-4224V.tmp\Wondershare Filmora SubPack 1.tmp
                                                                                                                                            • Size 1.4MB
                                                                                                                                            • SHA256 a362b577d10e5dcf7ed818b01bd8c98eb170dff5d4f753e4b6c969139204cbd5
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            WSHelper.ini
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-AGM9G.tmp\WSHelper.ini
                                                                                                                                            • Size 4KB
                                                                                                                                            • SHA256 1b74775c8d88a46c6f1727029a4acbda6dd9cd1bf5298a3746ce104e0da8f8b6
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            filmora_64bit_13.3.12_full846.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-LRF70.tmp\filmora_64bit_13.3.12_full846.tmp
                                                                                                                                            • Size 1.4MB
                                                                                                                                            • SHA256 283770cac3aa96f66cbfe774b1dbabc768a3c9eab31ceaaced54dcfd99980ca2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            _shfoldr.dll
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-QUKC5.tmp\_isetup\_shfoldr.dll
                                                                                                                                            • Size 22KB
                                                                                                                                            • SHA256 9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Customization.xml
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\Customization.xml
                                                                                                                                            • Size 772KB
                                                                                                                                            • SHA256 1e382646827edb3f04903c00b19a17bfac5d2be0dbc7e71c910f5280d049d000
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            LayoutConfig.xml
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\LayoutConfig.xml
                                                                                                                                            • Size 6KB
                                                                                                                                            • SHA256 230b01e1b2c1deb2136e858f97d24a21c3cf56be6edf61d3e2e964439f2332bb
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            opencl_check.ini
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\UHPPlugins\res\dev_10DE_8C\opencl_check.ini
                                                                                                                                            • Size 29B
                                                                                                                                            • SHA256 fc002ee6df800c65d8bf30eaf78a57b381e61d04d6d4c894c495a0e474cd9f9b
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-ODDCF.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{08E343EF-8274-459e-86D0-CDE548615C94}\is-ODDCF.tmp
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 db18149432839d834ca639cfee32aa79946cb9481f3a246dfe2d918c292e8a8d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-K9HHN.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{1F2849C2-F6DF-4c6d-885F-7EA49873B135}\is-K9HHN.tmp
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 acdd32014990d0168b11872ede470fa3c76409d3ad9346335923a1c8fa32688d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-NSN05.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{43E73D69-FF43-40a8-95CA-30FF96100407}\is-NSN05.tmp
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 718203a5f176e5770e9184a8617ee2b9e8eaec6f35bb317ff903c03061d85ac0
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-ERSRV.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{6E71FDB5-7BAA-4d15-949A-1F8F23682B75}\is-ERSRV.tmp
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 67bfa06df70bacfdac13b689299141a494d953323753071ea4dd9c1986b59dcc
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-83JEL.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{73F5B4FA-B137-440b-9A86-F31790F3566A}\is-83JEL.tmp
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 0f10377e57242f01afc0c397077d1942255a40cc9b9807c69740ecbe3315ec97
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-JH84U.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{A878EC0E-7104-4ded-AD3C-946BE84412C1}\is-JH84U.tmp
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 4017b678c8ac1715d9c875f5cf327e7824a45fd313dbe32ca0a0a80175b1ca81
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-E9FSO.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{B43FD11A-F689-40db-9B05-D34A89ABDF5F}\is-E9FSO.tmp
                                                                                                                                            • Size 5KB
                                                                                                                                            • SHA256 10bc1e6ba0ead119ae9bf8bb61f7e96154472684ecd81bf1e59b8cc79337d92f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-82C3B.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{B62F36A8-847C-4423-A95A-5C74E22F7860}\is-82C3B.tmp
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 f0fc449b70d9c653e87c7da9be94ba1fb01966fe8cdd229139703461a4e9185d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-5D636.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationKeyFrame\{BFC167D0-6AB4-41e6-9BF4-ECB740B9A52D}\is-5D636.tmp
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 4d21ec65760a3413553d84066b75855cce8290a9616be04b76ff4fc01c0eebfd
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-PU5EQ.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{07D46F93-A963-4a48-AA1D-53EC456DA91D}\is-PU5EQ.tmp
                                                                                                                                            • Size 463B
                                                                                                                                            • SHA256 22f849a216519f55cf49e794c73970c18a0e5e9a0be621ec5a905c1d36f21ef8
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-4A5AF.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{0C02B80B-9B8E-471a-B4E1-076949A17F96}\is-4A5AF.tmp
                                                                                                                                            • Size 176B
                                                                                                                                            • SHA256 47a11bcda5f09483e28fa13f447232b5be6a9b4db1f80d26586811adf95bdd2b
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-K6N0B.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{0FD53C8E-D963-4e15-B905-9D278CE07FB2}\is-K6N0B.tmp
                                                                                                                                            • Size 187B
                                                                                                                                            • SHA256 cd1f35a72e046cc040c83fee98e5e48854c446f5669b3e41ba300ac13e34e799
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-7DDG8.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{131C9392-CFC2-474c-AF2F-DA3246222949}\is-7DDG8.tmp
                                                                                                                                            • Size 187B
                                                                                                                                            • SHA256 257a8a4d184fe0ff5b1de511af9e93d866058d125f462dcfcd421a8788ff08f0
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-1I50Q.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{139D8383-91B0-4238-BF61-EE3DBC443A51}\is-1I50Q.tmp
                                                                                                                                            • Size 720B
                                                                                                                                            • SHA256 0af1f6ef107fcdf46391851d95cb587e015e51ff2098867bbc77803485fdc0e4
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-2E5C9.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{22A34B2E-ED23-4897-A06A-03ACD486A246}\is-2E5C9.tmp
                                                                                                                                            • Size 181B
                                                                                                                                            • SHA256 ebfb0ae7cae00a0030947874d7ea2ea019eb80d24da1d4441b35259d6feb6642
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-JFVVH.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{25B9419C-8ACC-4526-9E34-DADB82EFE76C}\is-JFVVH.tmp
                                                                                                                                            • Size 720B
                                                                                                                                            • SHA256 9c3bbcb6dc67f82966bd1be2c742c4f0e989e339e13ecff035590d3db342dbee
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-KLTS1.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{2D761D56-F30C-4ffc-A4F2-6FEC74135367}\is-KLTS1.tmp
                                                                                                                                            • Size 460B
                                                                                                                                            • SHA256 228b38006999f3de0a0a06e7b2bbd9f41d4a99deff6c630d80625f5b660f616c
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-3NC81.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{38B700C8-1C4F-475c-A85B-2C6B3A32AE81}\is-3NC81.tmp
                                                                                                                                            • Size 176B
                                                                                                                                            • SHA256 c79260fa82ee6bcb6912268dee459c76d4ca1870cdd9cf53eac0705c439d69fc
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-9PRHH.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{3B33C7F0-2A40-4909-9701-1FFDDFB45DC7}\is-9PRHH.tmp
                                                                                                                                            • Size 186B
                                                                                                                                            • SHA256 3dcecf11effbeb47beadb97e2b28523fcca094e2e7f731231a18652478592f78
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-4BT6H.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{3EA4BC06-1115-44a1-A272-4A3C99F36D38}\is-4BT6H.tmp
                                                                                                                                            • Size 186B
                                                                                                                                            • SHA256 a6579cd384374ead981f136c7cb79086611e1474b7445f591df745ac01ea9e9b
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-DS76L.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{40B11ADC-F655-4dde-8153-C7D22164C0AA}\is-DS76L.tmp
                                                                                                                                            • Size 721B
                                                                                                                                            • SHA256 938a251b2c8ab726a5999fc2d79df8c75fb5552c99712fc3d766f7ac9b75fe96
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-B7DSG.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{5090BB3C-1DA9-487c-9F3D-41DCCE0179D8}\is-B7DSG.tmp
                                                                                                                                            • Size 724B
                                                                                                                                            • SHA256 09fe2939e7a5db91e58772b09fce0fbcc95600c6b0bd0e29aaa1ad3fa6bda4e5
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-747NU.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{580775C8-B035-4fcd-92D3-120B5ADEFA3D}\is-747NU.tmp
                                                                                                                                            • Size 155B
                                                                                                                                            • SHA256 018de2813cb719e5c665898373b9f077e99e4acfb5becef7a67a3e3a7c7c2dfd
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-9KGP9.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{7545C97E-229D-4c5c-9599-74B44DBE987B}\is-9KGP9.tmp
                                                                                                                                            • Size 178B
                                                                                                                                            • SHA256 9d753be7838dc3cd77e35b8e340c0429d88b624b411d577704c81d2712d11260
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-E7G1T.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{7883CBAC-C937-4924-A771-6607A10DC07E}\is-E7G1T.tmp
                                                                                                                                            • Size 180B
                                                                                                                                            • SHA256 31e6edba561a815332ad57c883531bc60c3b0a37174bf4b404f84c2cf08be62b
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-B798M.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{78B71349-3F0D-4e65-8236-D74C51E06F20}\is-B798M.tmp
                                                                                                                                            • Size 185B
                                                                                                                                            • SHA256 c0e4f6b6f2e0901b60d4926684ea3c4990d7cdb168bd2b0fd868e320823edc52
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-S7AH4.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{7CEB20EB-2FA9-4889-80B1-9596EED5E728}\is-S7AH4.tmp
                                                                                                                                            • Size 180B
                                                                                                                                            • SHA256 5f4cc9200bb0d4a523494d0baef657daeed70d85f6e6cd1e74327e4d9fbc0f4d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-AHFJG.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{802E2DDE-CC59-4c15-BE02-0A0EE220AE00}\is-AHFJG.tmp
                                                                                                                                            • Size 968B
                                                                                                                                            • SHA256 7fd7f9608caae2411d66faf7cab8fc53d0028fde01e9e18ede04e0cbf2a42649
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-79QM4.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{84A6867F-2525-4a8b-8313-76B48B9C4C1E}\is-79QM4.tmp
                                                                                                                                            • Size 175B
                                                                                                                                            • SHA256 7beb7633a738b76c9a5e0fc57469445b7208554cab953b2b664bef21c5557983
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-M52UR.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{8721CAC1-FBD6-4062-940D-302C4994D6A4}\is-M52UR.tmp
                                                                                                                                            • Size 182B
                                                                                                                                            • SHA256 c0b33107f7038274a693031468041124e5c545e110286b6c559f12b23af2fb07
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-HL1M4.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{883CC73C-FF2B-43b9-B52F-912F7FB914BF}\is-HL1M4.tmp
                                                                                                                                            • Size 185B
                                                                                                                                            • SHA256 18aa8eea2a538f5a84fa0184fea6bdcc8b5778581c6d4824ccae4ffeeacfef3f
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-R5FIF.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{93E3B5E9-CAEF-494c-B736-DC9749337720}\is-R5FIF.tmp
                                                                                                                                            • Size 179B
                                                                                                                                            • SHA256 7f5d80199e595f625f5c6d419afe5c31b2141a192157580aa0340c227a39b084
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-SDIKB.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{99C431D2-E9A2-41d1-AEF8-0425CCC13B82}\is-SDIKB.tmp
                                                                                                                                            • Size 176B
                                                                                                                                            • SHA256 d5f188caa4efcf3a1301fd58ff88a94bdd1c2c627a6e6fbcb5b5b5c934deb8c4
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-41VO8.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{9AFBFBD3-30BF-4dc2-A28B-84434BB8D954}\is-41VO8.tmp
                                                                                                                                            • Size 978B
                                                                                                                                            • SHA256 27b1f0ba010213d6e23337777b2f88a98ee166599f602e556018e7d06f0e8256
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-R0D3L.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{9B404780-7E9E-4b3f-B26D-09077053687B}\is-R0D3L.tmp
                                                                                                                                            • Size 179B
                                                                                                                                            • SHA256 26a5bf6fb487a580835db9ae7219f7dc48959aa8c73ca851aa2df37f541c3de1
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-VQ4GR.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{ABD0149B-5029-496a-AC67-0C152E296FEB}\is-VQ4GR.tmp
                                                                                                                                            • Size 184B
                                                                                                                                            • SHA256 50fb26bc20bc9e332ddc8fec698a4b1588c9dc796612c25297f14cd63e290ece
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-EFBIH.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{B2104C03-69BF-4f9e-9FD0-38803ABB8904}\is-EFBIH.tmp
                                                                                                                                            • Size 175B
                                                                                                                                            • SHA256 aadc9aa2f26d299d387282d5545538f6f21a1e158ffefb7fb7a82cd949d8c627
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-E2E0S.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\AnimationNew\{B8315CBF-F926-4e24-963E-49DA16EFF575}\is-E2E0S.tmp
                                                                                                                                            • Size 5KB
                                                                                                                                            • SHA256 4ce8280d23d7531daebd4236b7fc48ff086d65fbefb5fe9f8413655504f08756
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-7H7H8.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Category\zh-hk\is-7H7H8.tmp
                                                                                                                                            • Size 176KB
                                                                                                                                            • SHA256 84f646afb1571b116f71b866bc5dedfd62fdd83bd0e869a243ab593857b45a5e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-3EOHF.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-3EOHF.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 2cde1809d3f8f02059b9b0c992d3951f0fd8b3810a664060270457f465c18f3f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-RIVHH.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-RIVHH.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 a7f775394b2234981539a0640df966fc2ba7fb3bed03ce2b5c597b48dc2c3334
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-9RGOT.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-9RGOT.tmp
                                                                                                                                            • Size 885B
                                                                                                                                            • SHA256 0552b6f130cd03811054694e7a1c44391b20dcaca9f4713307b79a7f14ea177d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-DVI1N.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-DVI1N.tmp
                                                                                                                                            • Size 814B
                                                                                                                                            • SHA256 f061d3e7feedd1c0490bd3047c7d8069a3f140cdf9aeac835efbdab2fd066979
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-FPOB1.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-FPOB1.tmp
                                                                                                                                            • Size 103B
                                                                                                                                            • SHA256 aca37fa582238a172251099e62a499589cd28f24f87184693c984467ca065c02
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-FV5FC.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-FV5FC.tmp
                                                                                                                                            • Size 733B
                                                                                                                                            • SHA256 ee9237be3e488f7efc370be769a4dff79ec177b80aba16a47864e6cecbd6489c
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-LCNVP.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-LCNVP.tmp
                                                                                                                                            • Size 827B
                                                                                                                                            • SHA256 cd8942c9e4bf1b8a9c1353daddc6121839c27970cf4ade4e571f49ee2ef58510
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-ON7SK.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-ON7SK.tmp
                                                                                                                                            • Size 900B
                                                                                                                                            • SHA256 2b3fccb31ebee6e8a6aa40e3bfd980f0ac2212d87110c19e7b5fcf64ca65a227
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-OQ2IP.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-OQ2IP.tmp
                                                                                                                                            • Size 549B
                                                                                                                                            • SHA256 dd7acc96fa45dc4493c324d845ca6cc6ca56e706e7e751d6f579d167930a205f
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-PUM1P.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-PUM1P.tmp
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 2ed74c9367c2ab9ded341ee48ae7e51f3e1eeda346282fc5a6254594cfa36847
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-TF3LI.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\MaskPreset\default\is-TF3LI.tmp
                                                                                                                                            • Size 758B
                                                                                                                                            • SHA256 b2823fe418b5c8e90760eebb6833b8e3da90358ce8c0610af39c8e1eaef65177
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-0DNCC.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Speed\is-0DNCC.tmp
                                                                                                                                            • Size 575B
                                                                                                                                            • SHA256 c74191c34146bc2e5a753222673dc9f3b74e077c892ac1bd7c058606bc9c2cf8
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-8K322.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Speed\is-8K322.tmp
                                                                                                                                            • Size 575B
                                                                                                                                            • SHA256 78f662578c89669fb14dc4f4d79da49f92fa04ac4a7b476e47cd0cf7be4e5f1c
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-C50ME.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Speed\is-C50ME.tmp
                                                                                                                                            • Size 466B
                                                                                                                                            • SHA256 60330f948dfa960c18d2eb7b908fce3c35d57d5e8b4b0d7ad6a9afee6f74bba1
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-HFIDQ.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Speed\is-HFIDQ.tmp
                                                                                                                                            • Size 901B
                                                                                                                                            • SHA256 06331653dc2b666873c6bca2e9de9271ea57c0d0fc0f404e6e1b2a2ca3607fc8
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-JBTPD.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Speed\is-JBTPD.tmp
                                                                                                                                            • Size 466B
                                                                                                                                            • SHA256 928f32418a12e8bfa28e05ac174fd034c5a3189753ce72b3ba943fba4642f59d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-M0M3G.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Speed\is-M0M3G.tmp
                                                                                                                                            • Size 684B
                                                                                                                                            • SHA256 343374c85dcd51d137515d2436b202bbdb063dee97abbc165bce302b56a18a41
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-NNH8B.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Speed\is-NNH8B.tmp
                                                                                                                                            • Size 684B
                                                                                                                                            • SHA256 bd75fa865dc339c0c45347cac9477097b1926d9d92e26d1e59fbf7a3d031055d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-5OM3G.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\TextStyle\is-5OM3G.tmp
                                                                                                                                            • Size 40KB
                                                                                                                                            • SHA256 c41f789fe60b3f86b625bfdbfa3095cc86ed0c1276655ef2cccbec5ed59eee82
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-DJKE6.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\configs\Transition\audio_fade\is-DJKE6.tmp
                                                                                                                                            • Size 167B
                                                                                                                                            • SHA256 40a1349c1911b4f4748cf3af95b66ed040cd656e125725b9ff7ed63558414bda
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            MagicXE.log
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\log\MagicXE.log
                                                                                                                                            • Size 6KB
                                                                                                                                            • SHA256 79bfc41fc7088ac2317ae0075959e073ee3a0e816f0a48c0d83d8bef548dc049
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            wsUpgrade.log
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\log\wsUpgrade.log
                                                                                                                                            • Size 355B
                                                                                                                                            • SHA256 3860058654f3a5c409f255ed11c5e4b774285b79ea7ee54b1e6683fbd2038142
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-A1MA1.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\desc_service\transform_immediately\is-A1MA1.tmp
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 db45b6c730d8ce75b963f3e5dbb85d9ca3f8647ce481f142b932783b21bc4414
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-17V54.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\material\CameraSettingFiles\is-17V54.tmp
                                                                                                                                            • Size 872B
                                                                                                                                            • SHA256 b3652e72cdfc36bd64d18c0e443fd1ea6b7c7c9b0f41a2a049339f47bf0521d5
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-34IQG.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\material\CameraSettingFiles\is-34IQG.tmp
                                                                                                                                            • Size 872B
                                                                                                                                            • SHA256 c2c1fdca17ee57a58280f53617637e0296c4954823f423db2005c39cd938bea1
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-4AC14.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\material\CameraSettingFiles\is-4AC14.tmp
                                                                                                                                            • Size 871B
                                                                                                                                            • SHA256 079848a22a4716db82eb8028123a9fb1e7217d77ed5b25bdcb27766f30705d29
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-5TA4N.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\material\CameraSettingFiles\is-5TA4N.tmp
                                                                                                                                            • Size 871B
                                                                                                                                            • SHA256 3a72f3862d63813574dcb59c286bc446f6a54ecf1725a283331559653a5e4eca
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-BBT27.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\material\CameraSettingFiles\is-BBT27.tmp
                                                                                                                                            • Size 873B
                                                                                                                                            • SHA256 9c53df36dee1f082e9161df4b3d9deb7560705c95b08874517808368a39ebc5c
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-C9PCE.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\material\CameraSettingFiles\is-C9PCE.tmp
                                                                                                                                            • Size 873B
                                                                                                                                            • SHA256 91b216b42bc6dd4f83071e8f367ccf2610310a2edf9a17a41b30051d08b45dda
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-JOV11.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\material\CameraSettingFiles\is-JOV11.tmp
                                                                                                                                            • Size 867B
                                                                                                                                            • SHA256 865d30e815575576171bb7c0dd53b394a8394f4009427a111243b3bc55750073
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-ML8KQ.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\material\CameraSettingFiles\is-ML8KQ.tmp
                                                                                                                                            • Size 872B
                                                                                                                                            • SHA256 bd56aac5738227390697cd419f555389fc4f6ebfde4f2ee2c852182886bd3ac3
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-C4946.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\Aibao\Data\is-C4946.tmp
                                                                                                                                            • Size 881B
                                                                                                                                            • SHA256 89e1f9f1760f65a3ced17a88d54f7193de94272d503c1964687ad27c0f0a3fcb
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-GSBJB.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\BaseFilter\ARFaceDeformation\Data\is-GSBJB.tmp
                                                                                                                                            • Size 156B
                                                                                                                                            • SHA256 247a3416831a73acdfd8e3a7b65f87765450813d549b8fb249eb9d3ba4abb3e0
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-7G7IT.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\BaseFilter\Beam 3D Logo\Data\is-7G7IT.tmp
                                                                                                                                            • Size 861B
                                                                                                                                            • SHA256 802f17a3a2fe6f19397c9c484e319a5b8449e511291e0baba17566661638267f
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-SF206.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\BaseFilter\Beam Edge Flow1\Data\is-SF206.tmp
                                                                                                                                            • Size 831B
                                                                                                                                            • SHA256 2c05e89d8ff8d3e20339555f7adcc810cd1ceca9fccf970771fbe748e7a0f184
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-S9BKP.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\BaseFilter\Beam Text Saber Line Fire\Data\is-S9BKP.tmp
                                                                                                                                            • Size 66KB
                                                                                                                                            • SHA256 e66f8b2c452544a66ce5808a16ef7a5754848f3d50d657eb676ebe9a951382e9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-6HV2B.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\BaseFilter\Beam\Data\is-6HV2B.tmp
                                                                                                                                            • Size 757B
                                                                                                                                            • SHA256 f0c916ef05f95faec2fd7686ef2029d492c779396be57f2658fe0d476d7c6984
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-UUGBA.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\BaseFilter\VectorText3DWhiteMode\Data\is-UUGBA.tmp
                                                                                                                                            • Size 157B
                                                                                                                                            • SHA256 11fdc43f6316601b8bbabf8c4706dc04972920bb293c0d706d1f9981dd6107f3
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-561FG.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\Black & White 2\Data\is-561FG.tmp
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 b38d1042edeee784fcc0339f7ad477b490758848f7f8a32834024dea17260182
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-NA0MO.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\Black & White 3\Data\is-NA0MO.tmp
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 51ee3a0dca70c7534eb36415eb1b8e8189f02b12763858d70be80536179cd459
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-6JTD0.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\Screen\Data\is-6JTD0.tmp
                                                                                                                                            • Size 105KB
                                                                                                                                            • SHA256 5ec8d82f58d9fdfc340480bd6745bb11a2518bca3aed63a999a5c209fdec38b2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-K4FC7.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\September\Data\is-K4FC7.tmp
                                                                                                                                            • Size 43KB
                                                                                                                                            • SHA256 3508a6cf9776181cdf1c10d3cb60fb0726e8695d2d6f2f8718b1a0da7c223faf
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-SU1EC.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\Sierra\Data\is-SU1EC.tmp
                                                                                                                                            • Size 21KB
                                                                                                                                            • SHA256 8d5c500600b2935929a9f23ac5cfba7348c492cb4beb59aafc408ad3321b7447
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-3J3P5.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\nle_default\Sutro\Data\is-3J3P5.tmp
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 d1292db4f1fc29589c951c5755e9076c730a3f360d19893b5fdece7f37b36dc9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-5HKDQ.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\resources\wfx_effect\plugin\AiEffect\WhiteWiperSegmentaion\Data\is-5HKDQ.tmp
                                                                                                                                            • Size 984B
                                                                                                                                            • SHA256 eaad98816ba844f0b055a284f7121a51322c3b582542dc44cab04cb6ed915973
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-6AN4N.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\ClickSound\is-6AN4N.tmp
                                                                                                                                            • Size 560B
                                                                                                                                            • SHA256 2d13ffa945549236a02494a9f6ee86ef61499c9c485d217bc0122857ebfab867
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-C0PJA.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\advanced\HumanSegmentationBackChange\is-C0PJA.tmp
                                                                                                                                            • Size 551B
                                                                                                                                            • SHA256 4e30202d068ab5b33e23325882d370ae44c17cb684d4fcec00a8e126db9272a8
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-QRR6E.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\advanced\HumanSegmentationCaptureBlur\is-QRR6E.tmp
                                                                                                                                            • Size 618B
                                                                                                                                            • SHA256 490fcc1f0e1d93f047c79ddbfe8208f5ae321ae26989f69e686a79eefbcb1603
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-CR57L.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\advanced\Mosaic\is-CR57L.tmp
                                                                                                                                            • Size 14KB
                                                                                                                                            • SHA256 eb8dafc89e8958115e9099cf9dac440ded711dba0f1028e46e7137fa111cad50
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-UF0K0.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\advanced\Mosaic\is-UF0K0.tmp
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 f988b4750a27effff1a6f08714af6113926f8a539a472bdf1685afc8d27d5fdc
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-77FTQ.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\advanced\pipBorder\is-77FTQ.tmp
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 1162aa0bf674f9fe0b00dd62c1fdcd4b532d59b53e0a272dcb439cd9131382f5
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-8FNBF.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\advanced\pipBorder\is-8FNBF.tmp
                                                                                                                                            • Size 17KB
                                                                                                                                            • SHA256 e3c6a50f30c7294d91ab03d2f6227a5ff3667f54befeac51e84b7c109c8b40ce
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-78FHV.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\normal\audio_ducking\is-78FHV.tmp
                                                                                                                                            • Size 518B
                                                                                                                                            • SHA256 00ed568ebdffc2614a6898994289e806c1efe0af2e746313b61729765917d0be
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-KSFTN.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\normal\dehum\is-KSFTN.tmp
                                                                                                                                            • Size 335B
                                                                                                                                            • SHA256 0b46bb78082b2c866886a7a5755a1f9759ec97025e169ae3e8de13cb7adf52af
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            is-2CUGQ.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\sysconfigs\default_effect\normal\dewind\is-2CUGQ.tmp
                                                                                                                                            • Size 148B
                                                                                                                                            • SHA256 5647168e4251418318ed8e1b2d3f35a6cd7f3b92e36d3ac1d9862a99867bcfa8
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            wes_black_list.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\13.3.12.7152\wes_black_list.json
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 3f6648fe5b26369cf4dcf2fe610d5b5ff4fea60179d1ab901a8e1fb1bc5a139b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Wondershare Filmora Launcher.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\Wondershare Filmora Launcher.exe
                                                                                                                                            • Size 859KB
                                                                                                                                            • SHA256 b1eb0588c87943063f6232246bfc769f6ff10f4026ae0ba7d26b4069c18ac252
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Filmora 13.msi
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\GetintoWAY\Wondershare Filmora 13.3.12.7152 0.0.0.0\install\FF26611\Filmora 13.msi
                                                                                                                                            • Size 3.6MB
                                                                                                                                            • SHA256 c1b59ceec0696070f9902121c148039142fb40d3bc73485e24feacb6f4477bf9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Setup.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\GetintoWAY\Wondershare Filmora 13.3.12.7152\prerequisites\Required Application\Setup.exe
                                                                                                                                            • Size 3.4MB
                                                                                                                                            • SHA256 59477a6c1c69dc95e3a92b259b3a7fbd26a479c0bc893f9b4e7a27941eb60d29
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Manos Mars - The Tunning.mp3
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\audio\6_Manos_Mars_-_The_Tunning\Data\Manos Mars - The Tunning.mp3
                                                                                                                                            • Size 5.1MB
                                                                                                                                            • SHA256 69b9e0e222a073c72a84b139a21ee039af5deb9870175421dd56c4430af0c4a7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            resinfo.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\audio\6_Manos_Mars_-_The_Tunning\resinfo.json
                                                                                                                                            • Size 4KB
                                                                                                                                            • SHA256 09181e16fcd92f8859aef5acba9cf4fc27eab8938df4f84f1ed00d8fd5ec879c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\audio\6_Manos_Mars_-_The_Tunning\thumbnail.png
                                                                                                                                            • Size 43KB
                                                                                                                                            • SHA256 5c36703eeb195224fd1185b5cc1b1bec94694624c3793bfc8624a6a6a89f9f13
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            Blur.conf
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Blur\Data\Blur.conf
                                                                                                                                            • Size 580B
                                                                                                                                            • SHA256 54f56b411a846c05988fb205893dd2b9a7c9611ef4996f5d0a85c3acc3b97b41
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            resinfo.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Blur\resinfo.json
                                                                                                                                            • Size 806B
                                                                                                                                            • SHA256 fbfdf49a2c3d23d6a607b4fc067c6a655e97a2ab77ec4140352e1d459749a44b
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Blur\thumbnail.png
                                                                                                                                            • Size 13KB
                                                                                                                                            • SHA256 38eb2e95a3647178e69a2f3fd0d267fadee1048902a6896db66128476e6b9cb9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-DVPNA.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Canvas\Data\is-DVPNA.tmp
                                                                                                                                            • Size 406KB
                                                                                                                                            • SHA256 07d7a66090ccfceaa73ee3eee3d45235ed0610d503f85333d1a88ca8e38ffdf1
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-6RHO8.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Cool_Film\Data\is-6RHO8.tmp
                                                                                                                                            • Size 896KB
                                                                                                                                            • SHA256 da828049365592b2c45b048094e989f9b9b14990633259e7ab6aa648dc12131e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-6L7P1.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\title\1_Basic_1\Data\is-6L7P1.tmp
                                                                                                                                            • Size 14KB
                                                                                                                                            • SHA256 810f268a6b3a0f98e8e5fc8603cc6cc90d4d28760fc7ee3c75e39bb4c01db58e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            is-LQSMR.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\title\1_Subtitle_3\is-LQSMR.tmp
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 d44fb5b7791936fd36db0f84577926aea506c4b5ef8a1bcb40ee02577d2b8a38
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            da7c232d4b37f1eba7629daafcc8e430_0.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Blur\da7c232d4b37f1eba7629daafcc8e430_0.png
                                                                                                                                            • Size 2.7MB
                                                                                                                                            • SHA256 c17b68e2d55cae2ffc345a85b56aaac76044dcd0e70b75a1ac4c1a08cd8d3b91
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            data.xml
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Blur\e4fb838f1c45da1b2bd7b4d119cdcf4e\Data\data.xml
                                                                                                                                            • Size 890B
                                                                                                                                            • SHA256 fe4d6be90fcfc68d9938a8600eead89cc9d4718959804cdf31cc9ad3e6e66352
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            filter.xml
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Blur\e4fb838f1c45da1b2bd7b4d119cdcf4e\Data\filter.xml
                                                                                                                                            • Size 247B
                                                                                                                                            • SHA256 2a8f8c8f2ef31c33bb27b709ad8e7d27eb5d197bb291b99ea43852399d2c93e3
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Blur\thumbnail.png
                                                                                                                                            • Size 75KB
                                                                                                                                            • SHA256 0451481fa6653859fa223af72e5eebc988678e17e50961ed02b751b0b48cda66
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            RGB_Stroke.cl
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\4e8b97ea3ccc35b649758d81e25d50ce\Data\RGB_Stroke.cl
                                                                                                                                            • Size 7KB
                                                                                                                                            • SHA256 1f4b25b4f4128a90f859168c9e7991df9699f388f7164d4a7cd37f235fa0227f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            RGB_Stroke.conf
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\4e8b97ea3ccc35b649758d81e25d50ce\Data\RGB_Stroke.conf
                                                                                                                                            • Size 823B
                                                                                                                                            • SHA256 7d7de70f54fd8d0825acf9f59e484cfa0d8c93f0a5db974b0777148e6caeeeed
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            RGB_Stroke.frag
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\4e8b97ea3ccc35b649758d81e25d50ce\Data\RGB_Stroke.frag
                                                                                                                                            • Size 4KB
                                                                                                                                            • SHA256 60f0786149012c66c405d626af754e1bc60ab4d849ba093de1bbbb91abee3e91
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            filter.xml
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\4e8b97ea3ccc35b649758d81e25d50ce\Data\filter.xml
                                                                                                                                            • Size 294B
                                                                                                                                            • SHA256 83246467d890b4ffa283f924c2779ee926bd6009561fa2b9aee6b83a897aa39b
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            version.md
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\4e8b97ea3ccc35b649758d81e25d50ce\version.md
                                                                                                                                            • Size 52B
                                                                                                                                            • SHA256 3ed69ec38548dbf172884026348e593caebcde2799dec418034b693205c6ce51
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            c39f85329af005e3ed9ed19e338dbf19_0.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\c39f85329af005e3ed9ed19e338dbf19_0.png
                                                                                                                                            • Size 2.9MB
                                                                                                                                            • SHA256 9f20b02335a32aa3a455de637343071100ce7df03301485ce4666dc82ed7c2e9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            preview.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\preview.png
                                                                                                                                            • Size 1.8MB
                                                                                                                                            • SHA256 f36afa6c6c4e01d0f92f89084e1c479116ea6d4a2ea0f1d73cfcd41fbbb76c5a
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            previewVideo.mp4
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\previewVideo.mp4
                                                                                                                                            • Size 1.0MB
                                                                                                                                            • SHA256 fe1279583d3d5a061da5e27830b70f02438d7df506c4f3573736754a5ab5e12e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\thumbnail.png
                                                                                                                                            • Size 92KB
                                                                                                                                            • SHA256 da87177ef255d2bef3f9e734b603b04d27b3921fed7b9c5eb06881252ab155a7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_Anton_Regular\TempData\thumbnail.png
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 0d7129699c411512a5307453240ec4bbe0fb0b2c710a37758ca098ef86c79e24
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_Lora_VariableFont_wght\TempData\thumbnail.png
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 c3eeff18d02dd2b16a43c85bc9fb259f8fb8997e39a7dd1df3c71d0356641d20
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_LuckiestGuy_Regular\TempData\thumbnail.png
                                                                                                                                            • Size 5KB
                                                                                                                                            • SHA256 057797e93f98c17c9e84d2001f48a38e2f3344840fecebc180c93eddae1051f9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_MarckScript_Regular\TempData\thumbnail.png
                                                                                                                                            • Size 13KB
                                                                                                                                            • SHA256 798ad0a00f46444e47af440dac56ce661f56cf63faf70f201e6ca58ed92b939d
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_Merriweather_Regular\TempData\thumbnail.png
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 3a306ef5c9de918c0c4e72fcbdc42ce72e9ae77bd84f119c3ba15532484dbdef
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_Nunito_Regular\TempData\thumbnail.png
                                                                                                                                            • Size 7KB
                                                                                                                                            • SHA256 7a5a71be0946bf5be470566936e5e3754d1d328f6a080fd9589b0646de4e915e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_Oswald_VariableFont_wght\TempData\thumbnail.png
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 2b7ab570816c4198783fe2d25717768e8adbdd82da62f70a557da2880a3f983c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_PTSans_Regular\TempData\thumbnail.png
                                                                                                                                            • Size 7KB
                                                                                                                                            • SHA256 930d04af913f5a19a8941f36d8341ae6fde1fefce61bf3cf83ea7dd15955a0cc
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_Raleway_VariableFont_wght\TempData\thumbnail.png
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 6b51c828adf4beac3fb97a824ad216be5cf52fb616800172dba180461a19854c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            thumbnail.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_ShipporiMincho_Regular\TempData\thumbnail.png
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 8ba70aa3564b98fad211bd1f81acc40dced68b9bbd71939886305080e85d8506
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            ShortcutSetting.xml
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\ShortcutSetting.xml
                                                                                                                                            • Size 33KB
                                                                                                                                            • SHA256 bfadd404fa0c2290f73873cd2b29afbe3391c2351e02462c3f8da40e0a6108d6
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            e585d0f.msi
                                                                                                                                            • Path C:\Windows\Installer\e585d0f.msi
                                                                                                                                            • Size 226KB
                                                                                                                                            • SHA256 dd6b7459aff8b29d19164e429b7e4d3b1f331e06191a86a4f12520b8bd6835b2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            memory/704-13185-0x0000000000400000-0x00000000004F2000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/704-13217-0x0000000000400000-0x00000000004F2000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1760-4311-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1760-11429-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1760-12739-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1952-11417-0x0000000003260000-0x0000000003275000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1952-13366-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1952-94-0x0000000003260000-0x0000000003275000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1952-13268-0x0000000003260000-0x0000000003275000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1952-13267-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1952-4309-0x0000000003260000-0x0000000003275000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1952-4307-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/1952-11410-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2004-12812-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2004-11437-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2656-11438-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2656-13008-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2656-3167-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2732-12741-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2732-4310-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2732-118-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/3332-13005-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/3332-11439-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/3332-12989-0x0000000000400000-0x0000000000572000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/4300-12814-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/4300-1766-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/4300-4312-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/4760-73-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/4760-4306-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/4760-13373-0x0000000000400000-0x000000000046C000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5156-13215-0x0000000000400000-0x0000000000731000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5188-13007-0x0000000000400000-0x00000000004BE000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5188-11482-0x0000000002120000-0x0000000002134000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5428-14131-0x0000021CD9F80000-0x0000021CDAD7E000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5428-14133-0x0000021CD9FC0000-0x0000021CDA9E8000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5428-14134-0x0000021CDA040000-0x0000021CDA990000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5428-14129-0x0000021CDAE80000-0x0000021CDC0AB000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5428-14127-0x0000021CD9F10000-0x0000021CDAE61000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5428-14122-0x0000000180000000-0x0000000181428000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5436-12983-0x0000000000AF0000-0x0000000000BA8000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5436-12981-0x0000000000400000-0x0000000000612000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5436-12957-0x0000000000AF0000-0x0000000000BA8000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5676-13009-0x0000000000400000-0x0000000000414000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5676-11275-0x0000000000400000-0x0000000000414000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13458-0x00000000054D0000-0x00000000054E5000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13453-0x00000000054D0000-0x00000000054E5000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13454-0x00000000054D0000-0x00000000054E5000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13433-0x0000000005600000-0x000000000571A000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13444-0x0000000005720000-0x0000000005800000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13457-0x00000000054D0000-0x00000000054E5000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13432-0x0000000005510000-0x00000000055AC000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13460-0x00000000054D0000-0x00000000054E5000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13448-0x00000000054D0000-0x00000000054EC000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/7124-13431-0x00000000008C0000-0x0000000000C28000-memory.dmp
                                                                                                                                            Download