Analysis
- max time kernel
2460s - max time network
2461s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
- submitted
29/09/2024, 04:39
General
- Target https://www.capcut.com/capcut_pc_web/fission_receive?code=Obotrg38591925&lng=en
- Sample240929-e9yt5sshpd
Malware Config
Signatures
- Detected google phishing page
- Renames multiple (610) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Contacts a large (553) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Downloads MZ/PE file
- Checks computer location settings 2 TTPs 6 IoCs
Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE 64 IoCs
- Loads dropped DLL 64 IoCs
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
- Suspicious use of NtCreateThreadExHideFromDebugger 20 IoCs
- Drops file in Program Files directory 6 IoCs
- Drops file in Windows directory 22 IoCs
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 16 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Checks SCSI registry key(s) 3 TTPs 18 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 15 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 15 IoCs
- Modifies Internet Explorer settings 1 TTPs 3 IoCs
- Modifies data under HKEY_USERS 3 IoCs
- Modifies registry class 64 IoCs
- Modifies system certificate store 2 TTPs 8 IoCs
- Suspicious behavior: AddClipboardFormatListener 11 IoCs
- Suspicious behavior: EnumeratesProcesses 14 IoCs
- Suspicious behavior: GetForegroundWindowSpam 3 IoCs
- Suspicious behavior: MapViewOfSection 26 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of FindShellTrayWindow 64 IoCs
- Suspicious use of SendNotifyMessage 58 IoCs
- Suspicious use of SetWindowsHookEx 64 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.capcut.com/capcut_pc_web/fission_receive?code=Obotrg38591925&lng=en1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffb49589758,0x7ffb49589768,0x7ffb495897782⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1568 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:22⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1908 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2076 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2916 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2924 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3784 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5008 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5208 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5236 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5592 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3808 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2992 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5528 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Users\Admin\Downloads\capcut_capcutpc_invitefission_1.2.4_installer.exe"C:\Users\Admin\Downloads\capcut_capcutpc_invitefission_1.2.4_installer.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value3⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\Wbem\WMIC.exewmic csproduct get Name,UUID /value4⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\cmd.exe /c wmic os get SerialNumber,Caption,BuildNumber,Version /value3⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\Wbem\WMIC.exewmic os get SerialNumber,Caption,BuildNumber,Version /value4⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\cmd.exe /c wmic path Win32_VideoController get CurrentVerticalResolution,CurrentHorizontalResolution /value3⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\Wbem\WMIC.exewmic path Win32_VideoController get CurrentVerticalResolution,CurrentHorizontalResolution /value4⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\cmd.exe /c wmic nicconfig get DefaultIPGateway,macaddress3⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\Wbem\WMIC.exewmic nicconfig get DefaultIPGateway,macaddress4⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\cmd.exe /c wmic diskdrive get SerialNumber /value3⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\Wbem\WMIC.exewmic diskdrive get SerialNumber /value4⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Users\Admin\AppData\Local\app_shell_cache_359289\app_package_245f698fc8.exe"C:\Users\Admin\AppData\Local\app_shell_cache_359289\app_package_245f698fc8.exe" /s /create_desktop=1 /install_path="C:\Users\Admin\AppData\Local\CapCut"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\\CapCut.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtCreateThreadExHideFromDebugger
- Modifies system certificate store
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2560 --field-trial-handle=2668,i,2702695766218163653,2710661790510427448,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:25⤵
- Executes dropped EXE
- Suspicious use of NtCreateThreadExHideFromDebugger
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\System32\cmd.exeC:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value5⤵
-
C:\Windows\System32\Wbem\WMIC.exewmic csproduct get Name,UUID /value6⤵
-
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exeC:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe5⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\cmd.exeC:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value6⤵
-
C:\Windows\System32\Wbem\WMIC.exewmic csproduct get Name,UUID /value7⤵
-
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" driverinfo6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuda6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuvid6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" nv_enc6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc_hw6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" amf_enc6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc_av16⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc_av16⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" oneVPL6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" mt_enc6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_164286⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_164286⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_164286⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_164286⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_166476⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_166476⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_166476⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_166476⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe" -cmd_qt6render_dx_hw_support6⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exeC:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe /launch=detector6⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtCreateThreadExHideFromDebugger
- Drops file in Program Files directory
- Checks processor information in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2268 --field-trial-handle=2556,i,16507761324201478289,9552342612000217919,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:27⤵
- Executes dropped EXE
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\parfait_crash_handler.exeC:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=7 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=4736 "--annotation=os_version=Windows NT 10.0.15063" --annotation=parfait_version=1.4.6.11 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/AppData/Local/CapCut/3.3.0.1161/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0xf9c,0xfa0,0xfa4,0xf98,0xfb0,0x7ffb3354ebe0,0x7ffb3354ebf8,0x7ffb3354ec107⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\system32\wbem\wmic.exeC:\Windows\system32\wbem\wmic.exe diskdrive where index=0 get serialnumber7⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exeC:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe -detect_simulate_check7⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" driverinfo8⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuda8⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuvid8⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" nv_enc8⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv8⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc8⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc_hw8⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" amf_enc8⤵
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV19⤵
-
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc8⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc_av18⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc8⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc_av18⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" oneVPL8⤵
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV19⤵
-
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" mt_enc8⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_164288⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_164288⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_164288⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_164288⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_166478⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_166478⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_166478⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_166478⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe" -cmd_qt6render_dx_hw_support8⤵
- Suspicious behavior: AddClipboardFormatListener
-
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2472 --field-trial-handle=2556,i,16507761324201478289,9552342612000217919,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:87⤵
- Executes dropped EXE
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" driverinfo7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuda7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuvid7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" nv_enc7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV18⤵
-
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc_hw7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" amf_enc7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc_av17⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc_av17⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" oneVPL7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" mt_enc7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_164287⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_164287⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_164287⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_164287⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_166477⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_166477⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_166477⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_166477⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=9208 --field-trial-handle=2556,i,16507761324201478289,9552342612000217919,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:87⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=renderer --log-severity=error --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --first-renderer-process --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=9408 --field-trial-handle=2556,i,16507761324201478289,9552342612000217919,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:17⤵
- Checks computer location settings
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=renderer --log-severity=error --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=9416 --field-trial-handle=2556,i,16507761324201478289,9552342612000217919,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:17⤵
- Checks computer location settings
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=6880 --field-trial-handle=2556,i,16507761324201478289,9552342612000217919,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:87⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=8952 --field-trial-handle=2556,i,16507761324201478289,9552342612000217919,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:27⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
-
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=976 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=2112 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5612 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5752 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5908 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=5952 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=4516 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=3896 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=1536 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=6028 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5976 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=2592 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=3872 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5364 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5232 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5492 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6336 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3028 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6704 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=6916 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=6316 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=7240 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=7236 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=7140 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=7412 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=7672 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=7688 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=7848 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=7864 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=8280 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=8564 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=8716 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=8928 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=8936 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=9264 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=9572 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=8692 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=8604 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=2192 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=4524 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=6120 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=5964 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=2452 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5644 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5232 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=4768 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=5800 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=5836 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=9844 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9836 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=10048 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=10188 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9872 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10232 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=9984 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=9860 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=9668 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=9728 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=8928 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=5788 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=4604 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=8916 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=10468 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=10288 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=10896 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=10984 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=11072 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=11184 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=11364 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --mojo-platform-channel-handle=11512 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=11660 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=11684 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=11728 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --mojo-platform-channel-handle=11748 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --mojo-platform-channel-handle=11200 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=11224 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=11888 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=11908 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --mojo-platform-channel-handle=11924 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --mojo-platform-channel-handle=11940 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --mojo-platform-channel-handle=11972 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --mojo-platform-channel-handle=11988 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --mojo-platform-channel-handle=12104 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --mojo-platform-channel-handle=12356 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --mojo-platform-channel-handle=12476 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --mojo-platform-channel-handle=12640 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --mojo-platform-channel-handle=12808 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --mojo-platform-channel-handle=12724 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --mojo-platform-channel-handle=12736 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --mojo-platform-channel-handle=12816 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --mojo-platform-channel-handle=12848 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --mojo-platform-channel-handle=12872 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --mojo-platform-channel-handle=12888 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --mojo-platform-channel-handle=11956 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --mojo-platform-channel-handle=12988 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --mojo-platform-channel-handle=12984 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --mojo-platform-channel-handle=11564 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --mojo-platform-channel-handle=12772 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --mojo-platform-channel-handle=13020 --field-trial-handle=1760,i,15345816550823654098,13146080953110814590,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2981⤵
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Suspicious behavior: MapViewOfSection
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Suspicious behavior: MapViewOfSection
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffb49589758,0x7ffb49589768,0x7ffb495897782⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1640 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:22⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1804 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1844 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2820 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2828 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4420 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4600 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4740 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4680 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3808 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5160 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4592 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5192 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1612 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=2004 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3216 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1500 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4520 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=3192 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5300 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=5412 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=5536 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=5568 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5800 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5972 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=6084 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=6092 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=3816 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=6308 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6280 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=6808 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6952 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=7092 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=7356 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=7236 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=6408 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=7516 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=7972 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=8116 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=8304 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=5996 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=7992 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=8576 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7804 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:82⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\CapCut.exe" " capcut://com.ies.videocut/account/login/third?code=%7B%22code%22%3A%22ST68IKwqmq5C9w3jMF60z0hY5hL9_uwBiT6tTXmNQPanN2S_IIxmEcxGuOrzMg_rrJkkRB7OM3CFzPK8ffrVbN5KGR75arMhN7oAzL1cTSO761zg3AXYx-w53AxZODnFEiY5VGwq9zXKe1a7ZUdrb1UPdIuc1kvAnI_OchBkUo1Oua3GYLXQbSgHX45LdzwOdIG2CwRwKpCCZ340ke_ULg*1%214965.e1%22%2C%22fe_version%22%3A2%7D&platform=tiktok&id_token=undefined&redirectUri=https%3A%2F%2Fwww.capcut.com%2Flvpc_web%2Flogin_success"2⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" " capcut://com.ies.videocut/account/login/third?code=%7B%22code%22%3A%22ST68IKwqmq5C9w3jMF60z0hY5hL9_uwBiT6tTXmNQPanN2S_IIxmEcxGuOrzMg_rrJkkRB7OM3CFzPK8ffrVbN5KGR75arMhN7oAzL1cTSO761zg3AXYx-w53AxZODnFEiY5VGwq9zXKe1a7ZUdrb1UPdIuc1kvAnI_OchBkUo1Oua3GYLXQbSgHX45LdzwOdIG2CwRwKpCCZ340ke_ULg*1%214965.e1%22%2C%22fe_version%22%3A2%7D&platform=tiktok&id_token=undefined&redirectUri=https%3A%2F%2Fwww.capcut.com%2Flvpc_web%2Flogin_success"3⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2268 --field-trial-handle=2356,i,6783965128320314740,13855755938358407524,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:24⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=1624 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\CapCut.exe" " capcut://com.ies.videocut/account/login/third?code=%7B%22code%22%3A%22ST68IKwqmq5C9w3jMF60z0hY5hL9_uwBiT6tTXmNQPanN2S_IIxmEcxGuOrzMg_rrJkkRB7OM3CFzPK8ffrVbN5KGR75arMhN7oAzL1cTSO761zg3AXYx-w53AxZODnFEiY5VGwq9zXKe1a7ZUdrb1UPdIuc1kvAnI_OchBkUo1Oua3GYLXQbSgHX45LdzwOdIG2CwRwKpCCZ340ke_ULg*1%214965.e1%22%2C%22fe_version%22%3A2%7D&platform=tiktok&id_token=undefined&redirectUri=https%3A%2F%2Fwww.capcut.com%2Flvpc_web%2Flogin_success"2⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" " capcut://com.ies.videocut/account/login/third?code=%7B%22code%22%3A%22ST68IKwqmq5C9w3jMF60z0hY5hL9_uwBiT6tTXmNQPanN2S_IIxmEcxGuOrzMg_rrJkkRB7OM3CFzPK8ffrVbN5KGR75arMhN7oAzL1cTSO761zg3AXYx-w53AxZODnFEiY5VGwq9zXKe1a7ZUdrb1UPdIuc1kvAnI_OchBkUo1Oua3GYLXQbSgHX45LdzwOdIG2CwRwKpCCZ340ke_ULg*1%214965.e1%22%2C%22fe_version%22%3A2%7D&platform=tiktok&id_token=undefined&redirectUri=https%3A%2F%2Fwww.capcut.com%2Flvpc_web%2Flogin_success"3⤵
- Checks computer location settings
- Suspicious use of NtCreateThreadExHideFromDebugger
- Checks processor information in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2272 --field-trial-handle=2336,i,12504891845048250082,11922051545802065848,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:24⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\parfait_crash_handler.exeC:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=7 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=7676 "--annotation=os_version=Windows NT 10.0.15063" --annotation=parfait_version=1.4.6.11 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/AppData/Local/CapCut/3.3.0.1161/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0xf48,0xf4c,0xf50,0xec4,0xfb8,0x7ffb35b1ebe0,0x7ffb35b1ebf8,0x7ffb35b1ec104⤵
-
-
C:\Windows\system32\wbem\wmic.exeC:\Windows\system32\wbem\wmic.exe diskdrive where index=0 get serialnumber4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exeC:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe -detect_simulate_check4⤵
- Checks processor information in registry
- Suspicious behavior: AddClipboardFormatListener
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" driverinfo5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuda5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuvid5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" nv_enc5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc_hw5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" amf_enc5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc_av15⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc_av15⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" oneVPL5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" mt_enc5⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_164285⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_164285⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_164285⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_164285⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_166475⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_166475⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_166475⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_166475⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe" -cmd_qt6render_dx_hw_support5⤵
- Suspicious behavior: AddClipboardFormatListener
-
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2644 --field-trial-handle=2336,i,12504891845048250082,11922051545802065848,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:84⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" driverinfo4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuda4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuvid4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" nv_enc4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc_hw4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" amf_enc4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc_av14⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc_av14⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" oneVPL4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" mt_enc4⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_164284⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_164284⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_164284⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_164284⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx11_166474⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dx9_166474⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" dxdecode11_166474⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" checkGLEnv_166474⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=8172 --field-trial-handle=2336,i,12504891845048250082,11922051545802065848,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:84⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=renderer --log-severity=error --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --first-renderer-process --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=7796 --field-trial-handle=2336,i,12504891845048250082,11922051545802065848,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=renderer --log-severity=error --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=7788 --field-trial-handle=2336,i,12504891845048250082,11922051545802065848,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=6488 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=8568 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=4832 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=8376 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Users\Admin\AppData\Local\CapCut\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\CapCut.exe" " capcut://com.ies.videocut/account/login/third?code=%7B%22code%22%3A%228SnljkfHdCNkH1KN6KaNwr3qPmcNG6nWXRF9ZaSjnKvp5ny-UduZJ93rcpxr_JuGbldSsm0hWVgbvXm6G6nR2F5S3Bvjvv-NLbiY7O-_7QlJw4F-Mhmb242YD9XYZiNOdSYdD2MMROx5YDPuiTz1IQpjUAdn-aPweRYzc6AQYQ_QoNctdnGNdSY5S2YVeN2hLSGZP1B5r7ZulP3yn3R8lw*3%215039.e1%22%2C%22fe_version%22%3A2%7D&platform=tiktok&id_token=undefined&redirectUri=https%3A%2F%2Fwww.capcut.com%2Flvpc_web%2Flogin_success"2⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" " capcut://com.ies.videocut/account/login/third?code=%7B%22code%22%3A%228SnljkfHdCNkH1KN6KaNwr3qPmcNG6nWXRF9ZaSjnKvp5ny-UduZJ93rcpxr_JuGbldSsm0hWVgbvXm6G6nR2F5S3Bvjvv-NLbiY7O-_7QlJw4F-Mhmb242YD9XYZiNOdSYdD2MMROx5YDPuiTz1IQpjUAdn-aPweRYzc6AQYQ_QoNctdnGNdSY5S2YVeN2hLSGZP1B5r7ZulP3yn3R8lw*3%215039.e1%22%2C%22fe_version%22%3A2%7D&platform=tiktok&id_token=undefined&redirectUri=https%3A%2F%2Fwww.capcut.com%2Flvpc_web%2Flogin_success"3⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
-
C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2268 --field-trial-handle=2404,i,17367419298629773771,9687890412856165086,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:24⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=2104 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=3320 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=7600 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=6328 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=3080 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=8404 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=8668 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=8320 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=8832 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=4900 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=3080 --field-trial-handle=2272,i,7245029405457074279,10517689610542858828,131072 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\0e63071375a1463cb4b2d57e1518fd2a /t 648 /p 47361⤵
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Suspicious behavior: MapViewOfSection
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
Network
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1Replay Monitor
Loading Replay Monitor...
Downloads
manifest.json
CapCut.exe
MSVCP140.dll
Qt6Qml.dll
ScrollView.qml
default_photo_ico.jpg
lua-meta.json
Lscript.lua
quad.frag
content.json
filter.material
outputTex.rt
brightness.texture
gles2_filter.frag
config.json
content.json
brightness_max.png
brightness_min.png
main.scene
filter.material
outputTex.rt
filter.xshader
gles2_filter.frag
ImageBusinessSlider.json
content.json
ImageBusinessSlider.lua
SeekModeScript.lua
main.scene
pass1.material
quad.mesh
outputTex.rt
sticker.config
pass1.frag
pass1.vert
pass1.xshader
config.json
ImageBusinessSlider.json
content.json
lua-meta.json
ImageBusinessSlider.lua
SeekModeScript.lua
main.scene
passAdd1.material
passAdd2.material
passAdd3.material
passAdd4.material
passAdd5.material
passAdd6.material
passAdd7.material
passFinal.material
passPyr0.material
passPyr1.material
passPyr2.material
passPyr3.material
passPyr4.material
passPyr5.material
passPyr6.material
passPyr7.material
passSaturation.material
passValue.material
Quad.mesh
MidPyr0.rt
MidPyr1.rt
MidPyr1Up.rt
MidPyr2.rt
MidPyr2Up.rt
MidPyr3.rt
MidPyr3Up.rt
MidPyr4.rt
MidPyr4Up.rt
MidPyr5.rt
MidPyr5Up.rt
MidPyr6.rt
MidPyr6Up.rt
MidPyr7.rt
Pyr0.rt
Pyr1.rt
Pyr2.rt
Pyr3.rt
Pyr4.rt
Pyr5.rt
Pyr6.rt
Pyr7.rt
Saturation.rt
outputTex.rt
sticker.config
passAdd.frag
passAdd.xshader
passFinal.frag
passFinal.xshader
passPyr.frag
passPyr.xshader
passPyrLast.frag
passPyrLast.xshader
passSaturation.frag
passSaturation.xshader
passValue.frag
passValue.xshader
algorithmConfig.json
config.json
content.json
filter.material
outputTex.rt
contrast.texture
filter.xshader
gles2_filter.frag
config.json
LuaRTTI.MarkGen.lua
algorithmConfig.json
content.json
lua-meta.json
SeekModeScript.lua
Utils.lua
main.scene
Quad.mesh
FliterEntity-2FFE6ABD.prefab
material.material
sticker.config
config.json
content.json
lua-meta.json
SeekModeScript.lua
graphBuild.lua
renderChain.json
main.scene
Quad.mesh
FliterEntity-2FFE6ABD.prefab
material.material
xshader.xshader
outputTex.rt
config.json
content.json
SeekModeScript.lua
fshader.frag
content.json
filter.material
outputTex.rt
fade_max.texture
filter.xshader
gles2_filter.frag
config.json
content.json
filter.material
outputTex.rt
hightlight_max.texture
filter.xshader
gles2_filter.frag
config.json
content.json
highlight_max.png
highlight_min.png
main.scene
filter.material
outputTex.rt
filter.xshader
gles2_filter.frag
content.json
temperature_max.png
temperature_max.png.meta
temperature_min.png
temperature_min.png.meta
SeekModeScript.lua
main.scene
entity.material
quad.mesh
outputTex.rt
sticker.config
entity.xshader
fshader.frag
config.json
SeekModeScript.lua
fshader.frag
content.json
lightSensation_max.png
lightSensation_min.png
main.scene
filter.material
outputTex.rt
filter.xshader
gles2_filter.frag
config.json
Transform.lua
content.json
grain512x512.png
filter.material
gles2_filter.frag
config.json
algorithmConfig.json
content.json
SeekModeScript.lua
main.scene
noise.material
quad.mesh
outputTex.rt
scene.config
noise.frag
noise.xshader
config.json
SeekModeScript.lua
noise.frag
content.json
filter.material
saturation.texture
gles2_filter.frag
config.json
ImageBusinessSlider.json
content.json
ImageBusinessSlider.lua
main.scene
noface.material
Quad.mesh
outputTex.rt
sticker.config
noface.xshader
quad.frag
config.json
content.json
filter.material
outputTex.rt
shadow_max.texture
filter.xshader
gles2_filter.frag
config.json
ImageBusinessSlider.lua
SeekModeScript.lua
NewScreenRT.rt
NewScreenRT_2.rt
midTex1.rt
midTex2.rt
midTex3.rt
midTex4.rt
midTex5.rt
outputTex.rt
sticker.config
config.json
ImageBusinessSlider.json
content.json
ImageBusinessSlider.lua
main.scene
GaussX_2.material
GaussX_3.material
GaussX_4.material
GaussY_2.material
GaussY_3.material
GaussY_4.material
blend.material
cameraRawAdjust.material
getGray.material
guideFilter.material
Quad.mesh
NewScreenRT.rt
NewScreenRT_2.rt
midTex1.rt
midTex2.rt
midTex3.rt
midTex4.rt
midTex5.rt
outputTex.rt
GaussX.frag
GaussX.vert
GaussX.xshader
GaussX1.frag
GaussX1.xshader
blend.frag
blend.vert
blend.xshader
cameraRawAdjust.xshader
cameraRawAdjustCore.frag
getGray.frag
getGray.xshader
guideFilter.frag
guideFilter.xshader
LuaRTTI.MarkGen.lua
algorithmConfig.json
content.json
lua-meta.json
ScriptComp.lua
main.scene
HighlightShadow.material
HighlightShadow.mesh
outputTex.rt
HighlightShadow.frag
HighlightShadow.xshader
ImageBusinessSlider.lua
SeekModeScript.lua
content.json
filter.material
outputTex.rt
filter.xshader
gles2_filter.frag
config.json
content.json
lua-meta.json
SeekModeScript.lua
graphBuild.lua
renderChain.json
main.scene
Quad.mesh
sharp.prefab
fshader.frag
material.material
xshader.xshader
outputTex.rt
algorithmConfig.json
config.json
extra.json
content.json
filter.material
outputTex.rt
temperature.texture
filter.xshader
gles2_filter.frag
config.json
LuaRTTI.MarkGen.lua
content.json
lua-meta.json
Lscript.lua
main.scene
noface.material
Quad.mesh
outputTex.rt
noface.xshader
quad.frag
config.json
quad.frag
content.json
filter.material
hue.texture
filter.xshader
gles2_filter.frag
config.json
content.json
hue_max.png
hue_max.png.meta
hue_min.png
hue_min.png.meta
main.scene
filter.material
outputTex.rt
filter.xshader
gles2_filter.frag
content.json
anjiao.png
main.scene
filter.material
outputTex.rt
filter.xshader
gles2_filter.frag
config.json
ImageBusinessSlider.json
algorithmConfig.json
content.json
lua-meta.json
ImageBusinessSlider.lua
SeekModeScript.lua
main.scene
Sprite2D.material
dark_angle.material
noface.material
Quad.mesh
outputTex.rt
sticker.config
Bow0.texture
Sprite2D.xshader
dark_angle.frag
dark_angle.vert
dark_angle.xshader
gles2_bvcwvg.vert
gles2_yvsong.frag
noface.xshader
quad.frag
config.json
seguiemj.ttf
NotoSans-Regular.ttf
NotoSansArabic-Regular.ttf
NotoSansBengali-Regular.ttf
NotoSansHebrew-Regular.ttf
NotoSansKhmer-Regular.ttf
NotoSansMyanmar-Regular.ttf
NotoSansSymbols2-Regular.ttf
NotoSansThai-Regular.ttf
en.ttf
ja.ttf
ko.ttf
th.ttf
zh-hans.ttf
zh-hant.ttf
entity.xshader
blend.frag
blend.frag
blend.frag
blend.frag
blend.frag
MixMode.json
blend.frag
blend.frag
blend.frag
blend.frag
blend.frag
outputTex.rt
lips_keypoint_faceu.vert
2.ef46db37.css
836.8f441f5d.css
707.3e4b9351.js
220.be5ea522.js
lib-react.b1974d26.js
lib-router.ca41585f.js
tt_fsnew_base_jianying_v2.0.model
quickwindow.qmltypes
scene.config
Transform.lua
main.scene
sticker.config
gles2_filter.vert
guideFilter.vert
fshader.vert
sticker.config
sticker.config
gles2_filter.vert
Transform.lua
LuaRTTI.MarkGen.lua
js-meta.json
scene.config
anim.prefab
blend.material
config.json
content.json
blend.vert
blend.xshader
algorithmConfig.json
sticker.config
publish-video.efdeb61f.css
publish-video.b44e3ef4.js
CapCut.exe
Configure.ini
the-real-index
the-real-index
the-real-index
CURRENT
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State~RFe62aa06.TMP
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity~RFe64da05.TMP
MANIFEST-000001
LocalPrefs.json
LocalPrefs.json~RFe628ba0.TMP
529.5d015bde.css
943.b6d29b92.css
publish-filter-collection.39982cf7.css
369.bf66d653.js
86.e20387e4.js
sticker-publish-single.d23b3e2f.js
publish-text-template.4f361e30.css
79f5955356bb0e1c46f40696bcc4c3c8.zip
blusher.png
eyebrow.png
eyelash.png
eyeline.png
eyemazingScreen.png
eyeshadow.png
highlight_khgp_1655297390.png
lipClose.png
lipOpen.png
stereo.png
config.json
a49369117eda099cc1b964196303af45.zip
config.json
lipClose.png
lipOpen.png
lipClose.png
lipOpen.png
c1d7d72da46d29cc9dc985b3a53fc516.zip
lipClose.png.meta
lipOpen.png.meta
lipClose.png.meta
lipOpen.png.meta
lipClose.png
lipClose.png.meta
lipOpen.png
lipOpen.png.meta
makeup.prefab
default.material
default.material
default.material
lips_keypoint_faceu_mesh.mesh
lips_keypoint_faceu_xshader.xshader
lips_keypoint_faceu_xshader.xshader
lips_keypoint_faceu_xshader.xshader
6e73061652a2aded9a47e44901c6b135.zip
config.json
lipClose.png
lipOpen.png
lipClose.png
lipOpen.png
89a86a28d7ed7595371a397316d75074.zip
config.json
lipClose.png
lipOpen.png
lipClose.png
lipOpen.png
c872301726a2bf0c3140c9cb5dcc1162.zip
config.json
lipClose.png
lipOpen.png
lipClose.png
lipOpen.png
9122d375a75c769eb15eda443fa3efb0.zip
blusher.png
blusher.png.meta
highlight.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadowScreen.png.meta
lipClose.png.meta
lipGloss.png.meta
lipOpen.png
lipOpen.png.meta
pupilBlend.png
pupilBlend.png.meta
pupilMask.png.meta
stereo.png
stereo.png.meta
makeup.lua
main.scene
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
lips_keypoint_faceu_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
outputTex.rt
scene.config
brow_faceu_xshader.xshader
eye_part_faceu_xshader.xshader
lips_keypoint_faceu_xshader.xshader
mask_faceu_xshader.xshader
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu_xshader.xshader
algorithmConfig.json
config.json
b0d7edcba031d1f3c7110dfee59b89f8.zip
blusher.png
eyebrow.png
eyelash.png
eyeline.png
eyemazing.png
eyeshadow.png
highlight_khgp_1655297390.png
lipClose.png
lipGloss.png
lipOpen.png
stereo.png
config.json
465a1d9f0a3ea06ab7eef6b0e73193a7.zip
content.json
back1.png
back1.png.meta
fill1.png
fill1.png.meta
IFSprite_default.png
IFSprite_default.png.meta
whiteThumb.png
whiteThumb.png.meta
global.lua
ie_console.lua
main.scene
noface.material
Quad.mesh
Slider.prefab
outputTex.rt
sticker.config
noface.xshader
quad.frag
quad.vert
algorithmConfig.json
config.json
extra.json
358c56a7a8c14cd8bb6bde4ddca600ee.zip
config.json
eyelash.png.meta
makeup.prefab
default.material
eyelash_faceu_mesh.mesh
d2ff0e93ca8bea12fdb3eb60277cc137.zip
content.json
BachAlgorithm.lua
main.scene
noface.material
Quad.mesh
outputTex.rt
noface.xshader
quad.frag
quad.vert
Feature.js
algorithmConfig.json
config.json
extra.json
lens_vhdr_image_lut_rgb.bin
eda6b8e3406cfd802809cb000992c424.zip
content.json
slimbody.lua
main.scene
slimbody.material
outputTex.rt
sticker.config
slimbody.frag
slimbody.vert
slimbody.xshader
algorithmConfig.json
config.json
8f3bc975aaaf27219892c2f0957c9062.zip
blusher.png
eyebrow.png
eyelash.png
eyeshadow.png
highlight_khgp_1655297390.png
makeup3dLipPoutEnvironment2_advj_1665303912.png
makeup3dLipPoutEnvironment_mfgl_1665303912.png
lipClose.png
lipGloss.png
lipOpen.png
stereo.png
config.json
1b8980593f53f667ff74fd68cb6fa6c8.zip
config.json
blusher.png
48355b1887a2533e93d1aab62eeac3d4.zip
config.json
blusher.png
20503b8998e2d782c8e31420d8b9e040.zip
config.json
blusher.png
3577e818eb57f6667aa359b8aa20d3ec.zip
config.json
blusher.png
b4147a4c79ba1b5edc8cd08e068aeebb.zip
config.json
blusher.png
blusher.png.meta
highlight.png
highlight.png.meta
makeup.prefab
Blusher_MATERIAL.material
blusher_faceu_mesh.mesh
d764552d7a92af5a4c4d0d4b664e6fde.zip
config.json
blusher.png
13fd5bb6c22236bb299c266428395180.zip
TextBloom.lua
effect_platform_children.tag
extra.json
noface.material
NewScreenRT.rt
NewScreenRT_2.rt
NewScreenRT_3.rt
blend.frag
blend.vert
blurX.frag
blurY.frag
blurY.vert
noface.xshader
quad.frag
quad.vert
quad1.frag
quad1.vert
b1985a36a9c9ecd0395004fb85ab9097.zip
TextBloom.lua
TextBloom.prefab
config.json
effect_platform_children.tag
extra.json
noface.material
gaussianBlurMidRT.rt
midRT.rt
midRT1.rt
midRT3.rt
midRT4.rt
outputTex.rt
GaussianBlur.vert
GaussianBlurX1.frag
GaussianBlurX2.frag
GaussianBlurY1.frag
GaussianBlurY2.frag
blend.frag
blend.vert
noface.xshader
normal.frag
quad.frag
quad.vert
eb8f4360c4c4ac9e008050d682f2105d.zip
config.json
stereo.png
2aee6ddcf43e7d7cad032ef9cd4584fc.zip
config.json
stereo.png
5f7b475e2a564170edaf9dbf5a21f961.zip
config.json
stereo.png
bbc7e564bcd56626495a38f1ee751443.zip
config.json
stereo.png
e100dbdfd9e84358d247c5b5962197a9.zip
config.json
stereo.png
stereo.png.meta
makeup.prefab
Stereo_MATERIAL.material
stereo_faceu_mesh.mesh
2bc750d1bdbf4296d1273e2daab19bda.zip
config.json
stereo.png
mask_faceu_xshader.xshader
54d922e8f85b929b369f81b8bcbd599f.zip
config.json
stereo.png
95742e5d510e20abab5b28b9c42f3799.zip
content.json
face_info.lua
main.scene
Face145_mesh.mesh
outputTex.rt
scene.config
sticker.config
algorithmConfig.json
config.json
1663d05e29e7c3cda97ba4d6440881a5.zip
config.json
eyelash.png
6991e25cc45bd9e91501a21aac419806.zip
config.json
eyelash.png
4d64a5141911c1c66e0c1a3dc1e58c3a.zip
config.json
eyebrow.png
ef172c78cd6ae8ca8ad40270ba5a00a1.zip
config.json
eyebrow.png
ed62e6dc7d65e2a9bcc1da68a58ec1d7.zip
config.json
eyebrow.png
0e74d8d9739ee72017116c963446167d.zip
eyebrow.png.meta
makeup.lua
makeup.prefab
Brow.material
brow_faceu_mesh.mesh
brow_faceu.frag
brow_faceu_xshader.xshader
baca3c16c7d414eb33f7b86352ac6c37.zip
LuaRTTI.MarkGen.lua
config.json
eyebrow.png
01e593a081e9d83a1d395a0b2bc52b5f.zip
config.json
eyebrow.png
fa81c3da32f52eb9676f4ff87a760383.zip
config.json
eyeline.png
eyeline.png.meta
makeup.prefab
Eyeline.material
eyeline_faceu_mesh.mesh
eye_part_faceu_xshader.xshader
3ea115b69e5ec2f6121ab20b7e962be8.zip
config.json
eyeline.png
c9fe89a93002dd608ddbe3b9ac445199.zip
config.json
eyeline.png
009d3d290c7aec0f30ce35f6e2bd7074.zip
8a6c4d4df5bcbbe7fce13961251e73f2.zip
config.json
eyeline.png
b4b0586a654ae45253a300c63ab38225.zip
config.json
eyeline.png
97f83e1ca839d3c686f41001d162e749.zip
content.json
reshape.lua
main.scene
FDV6Material_withoutMask.material
FaceDistortionV5Material0.material
outputTex.rt
scene.config
sticker.config
FDxshader_withoutMask.xshader
Fdxshader.xshader
fd_withoutMask.vert
fdx.vert
algorithmConfig.json
config.json
ad266b4c243dd44894de3f4bf5e618fe.zip
content.json
wry_eye_all_mask.png.meta
wry_eye_left_mask.png.meta
wry_eye_right_mask.png.meta
wry_eyebrow_biaozhun.png
wry_eyebrow_biaozhun.png.meta
wry_eyebrow_jianmei.png.meta
wry_eyebrow_liuye.png
wry_eyebrow_liuye.png.meta
wry_eyebrow_oushi.png
wry_eyebrow_oushi.png.meta
wry_mouth_mask.png.meta
wry_smile_all_mask.png
wry_smile_all_mask.png.meta
FaceReshapeControlSystem.lua
main.scene
eyebrow_all_1.material
eyebrow_all_2.material
eyebrow_all_3.material
eyebrow_all_4.material
eyebrow_left_1.material
eyebrow_left_2.material
eyebrow_left_3.material
eyebrow_left_4.material
eyebrow_right_1.material
eyebrow_right_2.material
eyebrow_right_3.material
eyebrow_right_4.material
wry_eye_all_neg_material.material
wry_eye_all_pos_material.material
wry_eye_left_neg_material.material
wry_eye_left_pos_material.material
wry_eye_right_neg_material.material
wry_eye_right_pos_material.material
wry_mouth_all_neg_material.material
wry_mouth_all_pos_material.material
wry_smile_all_neg_material.material
wry_smile_all_pos_material.material
wry_eye_all_neg_xshader.xshader
wry_eye_all_pos_xshader.xshader
eyebrow_all_xshader.xshader
fd_withMask.frag
fdx.vert
fd_withMask_neg.frag
wry_left_neg_xshader.xshader
wry_left_pos_xshader.xshader
eyebrow_left_xshader.xshader
fd_withMask.vert
wry_mouth_neg_xshder.xshader
wry_mouth_pos_xshder.xshader
fd_withMask_neg.frag
fd_withMask_neg.vert
wry_eye_right_neg_xshader.xshader
wry_eye_right_pos_xshader.xshader
eyebrow_right_xshader.xshader
fd_withMask_neg.vert
wry_smile_all_neg_xshder.xshader
wry_smile_all_pos_xshder.xshader
algorithmConfig.json
config.json
7fe9dfed61d7a1298ca2521f6a660d6e.zip
content.json
wry_eye_all_mask.png.meta
wry_eye_left_mask.png.meta
wry_eye_right_mask.png.meta
wry_mouth_mask.png
wry_mouth_mask.png.meta
wry_smile_all_mask.png.meta
FaceReshapeControlSystem.lua
main.scene
wry_eye_all_neg_material.material
wry_eye_all_pos_material.material
wry_eye_left_neg_material.material
wry_eye_left_pos_material.material
wry_eye_right_neg_material.material
wry_eye_right_pos_material.material
wry_mouth_all_neg_material.material
wry_mouth_all_pos_material.material
wry_smile_all_neg_material.material
wry_smile_all_pos_material.material
outputTex.rt
sticker.config
fd_withMask_neg.frag
fd_withMask_pos.vert
wry_eye_all_neg_xshader.xshader
wry_eye_all_pos_xshader.xshader
fd_withMask_neg.frag
fd_withMask_neg.vert
wry_left_neg_xshader.xshader
wry_left_pos_xshader.xshader
fd_withMask_neg.vert
wry_mouth_neg_xshder.xshader
wry_mouth_pos_xshder.xshader
fd_withMask_neg.frag
fd_withMask_neg.vert
wry_eye_right_neg_xshader.xshader
wry_eye_right_pos_xshader.xshader
fd_withMask_neg.vert
fd_withMask_pos.vert
wry_smile_all_neg_xshder.xshader
wry_smile_all_pos_xshder.xshader
algorithmConfig.json
config.json
effect_platform_children.tag
3cb8994fa65c349935c900a0e7be47ef.zip
content.json
eyeDetailLookup000.png.meta
faceMask.png.meta
EyeDetails.lua
main.scene
blur1.material
blur2.material
eyeDetail.material
Face145_mesh_0.mesh
Face145_mesh_1.mesh
Face145_mesh_2.mesh
Face145_mesh_3.mesh
Face145_mesh_4.mesh
sticker.config
blur.xshader
eyeDetail.xshader
algorithmConfig.json
config.json
2672ec7924b75f536446626369fd680b.zip
content.json
blusher000.png
blusher000.png.meta
facialSeq_000.png
facialSeq_000.png.meta
highlight_khgp_1655297390.png.meta
Masheng.lua
main.scene
FDV6Material_withoutMask.material
makeup3dLipGloss_lpru_1656388438.material
mask_faceuv22986_MATERIAL.material
mask_faceuv22994_MATERIAL.material
makeup3dMesh0.mesh
makeup3dMesh1.mesh
makeup3dMesh2.mesh
makeup3dMesh3.mesh
makeup3dMesh4.mesh
mask_faceuv22986_mesh.mesh
mask_faceuv22994_mesh.mesh
renderOutput.rt
sticker.config
FDxshader_withoutMask.xshader
makeup3dLipGloss_lpru_1656388438.xshader
mask_faceuv22986_xshader.xshader
mask_faceuv22994_xshader.xshader
config.json
content.json
reshape.lua
main.scene
FDV6Material_withoutMask.material
outputTex.rt
FDxshader_withoutMask.xshader
51c7d4646423fff2ccfbc3314150b43c.zip
content.json
blusher000.png
blusher000.png.meta
facialSeq_000.png
facialSeq_000.png.meta
highlight_khgp_1655297390.png.meta
XiaoQiaoBi.lua
main.scene
FDV6Material_withoutMask.material
makeup3dLipGloss_lpru_1656388438.material
mask_faceuv22986_MATERIAL.material
mask_faceuv22994_MATERIAL.material
makeup3dMesh0.mesh
makeup3dMesh1.mesh
makeup3dMesh2.mesh
makeup3dMesh3.mesh
makeup3dMesh4.mesh
mask_faceuv22986_mesh.mesh
mask_faceuv22994_mesh.mesh
renderOutput.rt
FDxshader_withoutMask.xshader
fd_withoutMask.frag
makeup3dLipGloss_lpru_1656388438.xshader
mask_faceuv22986_xshader.xshader
mask_faceuv22994_xshader.xshader
config.json
content.json
reshape.lua
main.scene
FDV6Material_withoutMask.material
outputTex.rt
FDxshader_withoutMask.xshader
cf0b131897e47e265ac3f20e742d6c71.zip
content.json
blusher000.png
blusher000.png.meta
facialSeq_000.png
facialSeq_000.png.meta
highlight_khgp_1655297390.png
highlight_khgp_1655297390.png.meta
Tuofeng.lua
main.scene
makeup3dLipGloss_lpru_1656388438.material
mask_faceuv22986_MATERIAL.material
makeup3dMesh2.mesh
mask_faceuv22986_mesh.mesh
mask_faceuv22994_mesh.mesh
scene.config
sticker.config
face_makeup_gloss_b013b9bd7c52631240d507e14cde9678.vert
face_makeup_gloss_fcb3990da7c5f3ea43b8db92c1da62ea.frag
fd_withoutMask.vert
makeup3dLipGloss_lpru_1656388438.xshader
mask_faceuv22986.frag
mask_faceuv22986.vert
mask_faceuv22994.frag
mask_faceuv22994.vert
algorithmConfig.json
config.json
content.json
reshape.lua
main.scene
FDV6Material_withoutMask.material
outputTex.rt
FDxshader_withoutMask.xshader
a5cc0d2377d81dc5953b19cf1f58d905.zip
content.json
wry_eye_all_mask.png
wry_eye_all_mask.png.meta
wry_eye_left_mask.png.meta
wry_eye_right_mask.png.meta
wry_mouth_mask.png.meta
FaceReshapeControlSystem.lua
main.scene
wry_eye_all_neg_material.material
wry_eye_all_pos_material.material
wry_eye_left_neg_material.material
wry_eye_left_pos_material.material
wry_eye_right_neg_material.material
wry_eye_right_pos_material.material
wry_mouth_all_neg_material.material
wry_mouth_all_pos_material.material
SeekModeScript.lua
sticker.config
fd_withMask_pos.vert
wry_eye_all_neg_xshader.xshader
wry_eye_all_pos_xshader.xshader
fd_withMask_neg.vert
wry_left_neg_xshader.xshader
wry_left_pos_xshader.xshader
fd_withMask_neg.frag
fd_withMask_neg.vert
wry_mouth_neg_xshder.xshader
wry_mouth_pos_xshder.xshader
wry_eye_right_neg_xshader.xshader
wry_eye_right_pos_xshader.xshader
algorithmConfig.json
config.json
30846aa11e22fe953906b2f3704d9318.zip
blusher.png
eyebrow.png
eyelash.png
eyeshadow.png
highlight_khgp_1655297390.png
lipClose.png
lipOpen.png
stereo.png
config.json
140c836f5d22f3ffe7a10c6e097fa1aa.zip
config.json
freckles.png
freckles.png.meta
makeup.prefab
Freckles.material
9dd5fa82bc0b103a1f1664d9f706017b.zip
config.json
freckles.png
b8e0a5c1dd9016c936b8cfa0eb375370.zip
config.json
freckles.png
cfc41661ea99c212b5acb40f17225659.zip_temp
config.json
freckles.png
makeup.lua
face3d.frag
face3d.xshader
33765bd9bcd7dcd57c5125f075380bdb.zip
config.json
freckles.png
79208fcc94d75fcb7cf6a2cd53f84ebd.zip
config.json
highlight_khgp_1655297390.png
d693b21f37cb011c0f2aff3482b7484f.zip
config.json
highlight_khgp_1655297390.png
37b9016e0212229f5eec4c8e20e3b96d.zip
config.json
highlight_khgp_1655297390.png
b2c8d036682078e842c59c0161b1162e.zip
config.json
highlight_khgp_1655297390.png
c3baa4a9c2500fb186aec89d038d8d1f.zip
config.json
highlight_khgp_1655297390.png
highlight_khgp_1655297390.png.meta
makeup.prefab
Highlight.material
baff612db3a0c0414d1e7eba3a93fbb3.zip
config.json
highlight_khgp_1655297390.png
c7baf7d720e864b650680adfb12b86b6.zip
config.json
pupil_normal.png
a36c52aee6b997d4f2bf83a1b06710f0.zip
config.json
pupil_normal.png
pupil_screen.png
3d99c2b3caa2b97885d73a79f5aa8e7f.zip
config.json
pupil_normal.png
6893307dca2f02664a3efbcbedc99ebe.zip
config.json
pupil_normal.png
pupil_screen.png
46dec5de0e4dad6bfa81636d71530f41.zip
config.json
pupil_normal.png
pupil_screen.png
cadf8134f7fb699f5b6fade68e465c65.zip
config.json
pupil_mask.png.meta
pupil_normal.png
pupil_normal.png.meta
pupil_screen.png.meta
makeup.lua
makeup.prefab
Pupil.material
PupilCutoff.material
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
pupil_cutoff_faceu.frag
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu.frag
pupil_main_faceu.vert
pupil_main_faceu_xshader.xshader
15ae372d6e2b41bfe83be06203b7be00.zip
content.json
blusher.png
blusher.png.meta
blusher.png
blusher.png.meta
blusher.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadow.png.meta
highlight_khgp_1655297390.png
highlight_khgp_1655297390.png.meta
makeup3dLipPoutEnvironment2_advj_1665303912.png
makeup3dLipPoutEnvironment2_advj_1665303912.png.meta
makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png.meta
makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png.meta
makeup3dLipPoutEnvironment_mfgl_1665303912.png
makeup3dLipPoutEnvironment_mfgl_1665303912.png.meta
makeup3dLipPoutNormal_zilf_1665303912.png.meta
lipClose.png
lipClose.png.meta
lipOpen.png
lipOpen.png.meta
lipClose.png
lipClose.png.meta
lipOpen.png
lipOpen.png.meta
lipClose.png.meta
lipOpen.png.meta
makeup3d_ydku_1658219217.png.meta
pupilBlend.png.meta
pupilMask.png.meta
makeup.png.meta
stereo.png
stereo.png.meta
ImageBusinessSlider.lua
makeup.lua
main.scene
Blit_MATERIAL.material
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Face3D_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
Lip_MATERIAL.material
Lip_MATERIAL.material
Lip_MATERIAL.material
Quad.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
Makeup2DCamera.prefab
output2d.rt
outputTex.rt
blit_xshader.xshader
mask_faceu.frag
mask_faceu_xshader.xshader
brow_faceu_xshader.xshader
eye_part_faceu_xshader.xshader
eye_part_faceu.frag
eye_part_faceu_xshader.xshader
face3d_xshader.xshader
lips_keypoint_faceu_xshader.xshader
lips_keypoint_faceu_xshader.xshader
lips_keypoint_faceu_xshader.xshader
lips_keypoint_faceu_xshader.xshader
mask_faceu_xshader.xshader
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu_xshader.xshader
algorithmConfig.json
config.json
extra.json
c3b24ff4fdef4dbe52f69df46cf3af55.zip
config.json
eyelash.png
55aa8a5ec3a342aae28a04b65a6fff9c.zip
blusher.png
eyeshadow.png
makeup3dLipPoutEnvironment2_advj_1665303912.png
makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png
makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png
makeup3dLipPoutEnvironment_mfgl_1665303912.png
lipClose.png
lipOpen.png
config.json
d847a0a7ac9eba32e272e2ae718a092e.zip
content.json
blusher.png
highlight.png
eyebrow.png
eyelash.png
eyeline.png
eyemazingScreen.png
eyeshadow.png
highlight_khgp_1655297390.png
makeup3dLipPoutNormal_zilf_1665303912.png
lipClose.png
lipGloss.png
lipOpen.png
makeup3d_ydku_1658219217.png
pupilBlend.png
pupilMask.png
makeup.png
stereo.png
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
lips_keypoint_faceu_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
scene.config
algorithmConfig.json
config.json
ef5288aad455297cae7678dd8d004cf6.zip
reshape.lua
main.scene
faceMaterial0.material
outputTex.rt
scene.config
sticker.config
Fdxshader.xshader
fdx.frag
config.json
b1c6f6201f7726196688b12d27ef5544.zip
content.json
reshape.lua
main.scene
reshapeV5_single.frag
algorithmConfig.json
config.json
4b109f0dc2c4f4f028ccbe033c3a115f.zip
FaceReshapeControlSystem.lua
main.scene
BrowDistance_Neg.material
BrowDistance_Pos.material
BrowPosition_Neg.material
BrowPosition_Pos.material
BrowRidge_Neg.material
BrowRidge_Pos.material
BrowSize_Neg.material
BrowSize_Pos.material
BrowTilt_Neg.material
BrowTilt_Pos.material
BrowWidth_Neg.material
BrowWidth_Pos.material
EyeDistance_Neg.material
EyeDistance_Pos.material
EyeHeight_Neg.material
EyeHeight_Pos.material
EyeInnerCorner_Neg.material
EyeInnerCorner_Pos.material
EyeLowerEyelid_Neg.material
EyeLowerEyelid_Pos.material
EyeOuterCornerInout_Neg.material
EyeOuterCornerInout_Pos.material
EyeOuterCorner_Neg.material
EyeOuterCorner_Pos.material
EyePosition_Neg.material
EyePosition_Pos.material
EyePupil_Neg.material
EyePupil_Pos.material
EyeSize_Neg.material
EyeSize_Pos.material
EyeWidth_Neg.material
EyeWidth_Pos.material
FaceCheekbone_Neg.material
FaceCheekbone_Pos.material
FaceJaw_Neg.material
FaceJaw_Pos.material
FacePointyChin_Neg.material
FacePointyChin_Pos.material
FaceTemple_Neg.material
FaceTemple_Pos.material
FaceUnderJaw_Neg.material
FaceUnderJaw_Pos.material
LipLine_Neg.material
LipLine_Pos.material
LowerAtrium_Neg.material
LowerAtrium_Pos.material
MidAtrium_Neg.material
MidAtrium_Pos.material
MouseCorner_Neg.material
MouseCorner_Pos.material
MousePosition_Neg.material
MousePosition_Pos.material
MouseSize_Neg.material
MouseSize_Pos.material
MouseWidth_Neg.material
MouseWidth_Pos.material
NoseBridge_Neg.material
NoseBridge_Pos.material
NosePosition_Neg.material
NosePosition_Pos.material
NoseRoot_Neg.material
NoseRoot_Pos.material
NoseSize_Neg.material
NoseSize_Pos.material
NoseTip_Neg.material
NoseTip_Pos.material
NoseWing_Neg.material
NoseWing_Pos.material
ScaleMaterial.material
UnderLip_Neg.material
UnderLip_Pos.material
UpperAtrium_Neg.material
UpperAtrium_Pos.material
UpperLip_Neg.material
UpperLip_Pos.material
finalDrawMaterial.material
Quad.mesh
outputTex.rt
renderTexture1.rt
scene.config
sticker.config
BrowPosition_N_mask.png
BrowPosition_N_mask.png.meta
BrowPosition_P_mask.png
BrowPosition_P_mask.png.meta
BrowTilt_N_mask.png
BrowTilt_N_mask.png.meta
BrowTilt_P_mask.png
BrowTilt_P_mask.png.meta
BrowWidth_N_mask.png
BrowWidth_N_mask.png.meta
Brow_mask.png
Brow_mask.png.meta
EyeDistance_mask.png
EyeDistance_mask.png.meta
EyeHeight_P_mask.png
EyeHeight_P_mask.png.meta
EyeLowerEyelid_mask.png
EyeLowerEyelid_mask.png.meta
EyeOuterCornerInout_mask.png
EyeOuterCornerInout_mask.png.meta
EyeOuterCorner_mask.png
EyeOuterCorner_mask.png.meta
EyePosition_N_mask.png
EyePosition_N_mask.png.meta
EyePosition_P_mask.png
EyePosition_P_mask.png.meta
EyeSize_P_mask.png
EyeSize_P_mask.png.meta
EyeWidth_mask.png
EyeWidth_mask.png.meta
FaceCheekbone_N_mask.png
FaceCheekbone_N_mask.png.meta
FaceCheekbone_P_mask.png
FaceCheekbone_P_mask.png.meta
FaceJaw_N_mask.png
FaceJaw_N_mask.png.meta
FaceJaw_P_mask.png
FaceJaw_P_mask.png.meta
FaceTemple_mask.png
FaceTemple_mask.png.meta
LowerAtrium_Neg_mask.png
LowerAtrium_Neg_mask.png.meta
LowerAtrium_Pos_mask.png
LowerAtrium_Pos_mask.png.meta
MidAtrium_Neg_mask.png
MidAtrium_Neg_mask.png.meta
MidAtrium_Pos_mask.png
MidAtrium_Pos_mask.png.meta
MousePosition_N_mask.png
MousePosition_N_mask.png.meta
MousePosition_P_mask.png
MousePosition_P_mask.png.meta
MouseSize_mask.png
MouseSize_mask.png.meta
MouseWidth_mask.png
MouseWidth_mask.png.meta
NoseRoot_mask.png
NoseRoot_mask.png.meta
NoseTip_mask.png
NoseTip_mask.png.meta
NoseWing_N_mask.png
NoseWing_N_mask.png.meta
NoseWing_P_mask.png
NoseWing_P_mask.png.meta
Nose_mask.png
Nose_mask.png.meta
UpperAtrium_Neg_mask.png
UpperAtrium_Neg_mask.png.meta
UpperAtrium_Pos_mask.png
UpperAtrium_Pos_mask.png.meta
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_positive.vert
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_negative.vert
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_negative.vert
fDShader_positive.vert
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_negative.vert
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_positive.vert
Neg.xshader
Pos.xshader
fDShader_negative.vert
fDShader_positive.vert
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_negative.vert
fDShader_positive.frag
fDShader_positive.vert
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_positive.frag
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_negative.vert
fDShader_positive.frag
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_positive.frag
fDShader_positive.vert
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
Scale.frag
ScaleXShader.xshader
Neg.xshader
Pos.xshader
Neg.xshader
Pos.xshader
fDShader_negative.vert
fDShader_positive.vert
Neg.xshader
Pos.xshader
finalDraw.frag
finalDrawXShader.xshader
config.json
5c5f33121388d6155de7c8c3f80117a2.zip
content.json
reshape.lua
main.scene
FaceDistortionV5Material0.material
FaceDistortionV5Material1.material
outputTex.rt
sticker.config
Fdxshader.xshader
ReshapeV5_singlePerson.xshader
algorithmConfig.json
config.json
bb43f486ffb797d56e883de07415612a.zip
content.json
mask.png
mask.png.meta
Face3DSystem.lua
main.scene
NoseFXAA.material
face.material
Mesh1200wan_3_0.mesh
Mesh1200wan_3_1.mesh
Mesh1200wan_3_2.mesh
Mesh1200wan_3_3.mesh
Mesh1200wan_3_4.mesh
Mesh1200wan_3_5.mesh
3DNoseRT.rt
outputTex.rt
scene.config
sticker.config
NoseFXAA.frag
NoseFXAA.vert
NoseFXAA.xshader
face.frag
face.vert
face.xshader
algorithmConfig.json
config.json
b52a31369802c14a5042a5a06b4991bd.zip
content.json
FaceReshapeControlSystem.lua
fDShader_positive.vert
Scale.vert
algorithmConfig.json
7622e579af947edadd9a1d0e7d89d98d.zip
content.json
eyeDetailLookup000.png
eyeDetailLookup000.png.meta
faceMask.png
faceMask.png.meta
EyeDetails.lua
main.scene
blur1.material
blur2.material
eyeDetail.material
Face145_mesh_0.mesh
Face145_mesh_1.mesh
Face145_mesh_2.mesh
Face145_mesh_3.mesh
Face145_mesh_4.mesh
blur1.rt
blur2.rt
outputTex.rt
scale.rt
scene.config
sticker.config
blur.frag
blur.vert
blur.xshader
eyeDetail.frag
eyeDetail.vert
eyeDetail.xshader
algorithmConfig.json
config.json
1c00076048af9de4e70af9228d56b2cd.zip
content.json
brighten.png
brighten.png.meta
faceMask.png
faceMask.png.meta
SmoothV12.lua
main.scene
blend.material
blend2.material
blur1.material
blur2.material
blur3.material
blur4.material
hsv.material
makeup.material
Face145_mesh.mesh
Triangle.mesh
blend.rt
blur1.rt
blur2.rt
outputTex.rt
skinMask.rt
scene.config
sticker.config
blend.frag
blend.vert
blend.xshader
blend2.frag
blend2.vert
blend2.xshader
blur1.frag
blur1.vert
blur1.xshader
blur2.frag
blur2.vert
blur2.xshader
blur3.frag
blur3.vert
blur3.xshader
blur4.vert
blur4.xshader
hsv.frag
hsv.vert
hsv.xshader
makeup.frag
makeup.vert
makeup.xshader
algorithmConfig.json
config.json
extra.json
1d17d59bcdbce6111645a7f98d14c0b7.zip
content.json
mask.png
mask.png.meta
teeth_lut.png
teeth_lut.png.meta
teeth.lua
main.scene
lips_keypoint_faceu2993_MATERIAL.material
lips_keypoint_faceu2993_mesh.mesh
outputTex.rt
sticker.config
gles2_bvcwvg.vert
gles2_yvsong.frag
lips_keypoint_faceu2993_xshader_xshader.xshader
algorithmConfig.json
config.json
9b76f61461adec71381935c454d95c1c.zip
content.json
brighten.png.meta
faceMask.png
faceMask.png.meta
smooth.lua
main.scene
blend.material
blend2.material
blur1.material
blur2.material
blur3.material
blur4.material
faceMask.material
hsv.material
Quad.mesh
mask_faceuv22994_mesh.mesh
allSkinMask.rt
blend.rt
blur1.rt
blur2.rt
blur3.rt
blur4.rt
outputTex.rt
sticker.config
blend.frag
blend.xshader
blend2.frag
blend2.xshader
blur1.frag
blur1.xshader
blur2.frag
blur2.xshader
blur3.frag
blur3.xshader
blur4.xshader
faceMask.frag
faceMask.vert
faceMask.xshader
hsv.frag
hsv.vert
hsv.xshader
algorithmConfig.json
config.json
6010b1ed648fd569364376dc7722dddb.zip
content.json
filter.png
filter.png.meta
ModeScript.lua
main.scene
filter.material
Quad.mesh
outputTex.rt
sticker.config
Filter.frag
Filter.vert
filtter.xshader
algorithmConfig.json
config.json
31fce94de5565e0d031c6daa93adccb5.zip
content.json
filter_bg.png.meta
filter_skin.png
filter_skin.png.meta
mask.png.meta
temperature_max.png.meta
temperature_min.png.meta
main.scene
filter_skin.png.meta
de330e0711817ed71cb099e0f4a6d13b.zip
content.json
filter_bg.png.meta
filter_skin.png
filter_skin.png.meta
mask.png.meta
temperature_max.png.meta
temperature_min.png.meta
main.scene
filter_skin.png.meta
3ceca71c5e3fd1102b2d87270a2321a4.zip
algorithmConfig.json
content.json
filter_bg.png
filter_bg.png.meta
filter_skin.png
filter_skin.png.meta
mask.png
mask.png.meta
temperature_max.png.meta
temperature_min.png.meta
EffectFaceMakeup.lua
main.scene
maskV2FaceU.material
skinSeg.material
Quad.mesh
maskV2FaceU.mesh
mask.rt
renderOutput.rt
sticker.config
filter_skin.png
filter_skin.png.meta
mask.frag
mask.vert
mask.xshader
skinSeg.frag
skinSeg.vert
skinSeg.xshader
algorithmConfig.json
config.json
e25b249b36957f7a93630e76a2c6a958.zip
e0e46271507c5ba80cc245764767dbca.zip
content.json
filter_bg.png.meta
filter_skin.png
filter_skin.png.meta
mask.png.meta
temperature_max.png.meta
temperature_min.png.meta
main.scene
filter_skin.png.meta
df956ae3455a2ce9fe4492126e174698.zip
4c7fb4c468cb3974afc8cddad665e5f6.zip
config.json
lipClose.png
lipOpen.png
lipClose.png
lipOpen.png
7d6605389d74046d4be1b93aab057b75.zip
content.json
blusher.png
blusher.png.meta
highlight.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadowScreen.png
eyeshadowScreen.png.meta
makeup.png
makeup.png.meta
lipClose.png
lipClose.png.meta
lipGloss.png
lipGloss.png.meta
lipOpen.png
lipOpen.png.meta
makeup3d_open.png
makeup3d_open.png.meta
pupilBlend.png
pupilBlend.png.meta
pupilMask.png
pupilMask.png.meta
stereo.png
stereo.png.meta
makeup.lua
main.scene
Blit_MATERIAL.material
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Face3D_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
Quad.mesh
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
lips_keypoint_faceu_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
output2d.rt
outputTex.rt
scene.config
sticker.config
blit.frag
blit.vert
blit_xshader.xshader
brow_faceu_xshader.xshader
eye_part_faceu_xshader.xshader
face3d.frag
face3d.vert
face3d_xshader.xshader
lips_keypoint_faceu_xshader.xshader
mask_faceu_xshader.xshader
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu_xshader.xshader
algorithmConfig.json
config.json
c3bf77796e1e2694307bd63881544b06.zip
blusher.png
blusher.png.meta
highlight.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadowScreen.png.meta
highlight_khgp_1655297390.png
highlight_khgp_1655297390.png.meta
lipClose.png
lipClose.png.meta
lipGloss.png.meta
lipOpen.png
lipOpen.png.meta
makeup3d_ydku_1658219217.png
makeup3d_ydku_1658219217.png.meta
pupilBlend.png
pupilBlend.png.meta
pupilMask.png.meta
stereo.png
stereo.png.meta
main.scene
Blit_MATERIAL.material
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Face3D_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
Quad.mesh
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
lips_keypoint_faceu_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
output2d.rt
outputTex.rt
scene.config
blit_xshader.xshader
brow_faceu_xshader.xshader
eye_part_faceu_xshader.xshader
face3d_xshader.xshader
lips_keypoint_faceu_xshader.xshader
mask_faceu_xshader.xshader
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu_xshader.xshader
algorithmConfig.json
config.json
b2fde1a3e0679f0cd777c8b8fd3287a9.zip
blusher.png
blusher.png.meta
highlight.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadowScreen.png
eyeshadowScreen.png.meta
makeup.png
makeup.png.meta
lipClose.png
lipClose.png.meta
lipGloss.png
lipGloss.png.meta
lipOpen.png
lipOpen.png.meta
pupilBlend.png
pupilBlend.png.meta
pupilMask.png.meta
stereo.png
stereo.png.meta
main.scene
Blit_MATERIAL.material
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Face3D_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
Quad.mesh
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
lips_keypoint_faceu_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
output2d.rt
outputTex.rt
scene.config
blit_xshader.xshader
brow_faceu.frag
brow_faceu.vert
brow_faceu_xshader.xshader
eye_part_faceu.frag
eye_part_faceu_xshader.xshader
face3d_xshader.xshader
lips_keypoint_faceu.frag
lips_keypoint_faceu_xshader.xshader
mask_faceu.frag
mask_faceu_xshader.xshader
pupil_cutoff_faceu.frag
pupil_cutoff_faceu.vert
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu.frag
pupil_main_faceu.vert
pupil_main_faceu_xshader.xshader
algorithmConfig.json
config.json
6c2f3b68c55e6c985834a2913b96f740.zip
blusher.png
blusher.png.meta
highlight.png
highlight.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadowScreen.png
eyeshadowScreen.png.meta
lipClose.png
lipClose.png.meta
lipGloss.png
lipGloss.png.meta
lipOpen.png
lipOpen.png.meta
makeup3d_open.png
makeup3d_open.png.meta
pupilBlend.png
pupilBlend.png.meta
pupilMask.png
pupilMask.png.meta
makeup.png
makeup.png.meta
stereo.png
stereo.png.meta
main.scene
Blit_MATERIAL.material
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Face3D_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
Quad.mesh
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
lips_keypoint_faceu_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
output2d.rt
outputTex.rt
scene.config
blit_xshader.xshader
brow_faceu_xshader.xshader
eye_part_faceu_xshader.xshader
face3d_xshader.xshader
lips_keypoint_faceu_xshader.xshader
mask_faceu_xshader.xshader
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu_xshader.xshader
algorithmConfig.json
config.json
64ac6df4a182f75c22f02b37f984789a.zip
blusher.png
blusher.png.meta
highlight.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadowScreen.png.meta
highlight_khgp_1655297390.png
highlight_khgp_1655297390.png.meta
lipClose.png
lipClose.png.meta
lipGloss.png.meta
lipOpen.png
lipOpen.png.meta
pupilBlend.png
pupilBlend.png.meta
pupilMask.png.meta
makeup.png
makeup.png.meta
stereo.png
stereo.png.meta
main.scene
Blit_MATERIAL.material
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Face3D_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
Quad.mesh
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
lips_keypoint_faceu_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
output2d.rt
outputTex.rt
scene.config
blit_xshader.xshader
brow_faceu_xshader.xshader
eye_part_faceu_xshader.xshader
face3d_xshader.xshader
lips_keypoint_faceu_xshader.xshader
mask_faceu_xshader.xshader
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu_xshader.xshader
algorithmConfig.json
config.json
1359d5f5b9236f1b1a48de132b14f983.zip
blusher.png
blusher.png.meta
highlight.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadowScreen.png
eyeshadowScreen.png.meta
highlight_khgp_1655297390.png
highlight_khgp_1655297390.png.meta
makeup3dLipPoutEnvironment2_advj_1665303912.png
makeup3dLipPoutEnvironment2_advj_1665303912.png.meta
makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png
makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png.meta
makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png
makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png.meta
makeup3dLipPoutEnvironment_mfgl_1665303912.png
makeup3dLipPoutEnvironment_mfgl_1665303912.png.meta
makeup3dLipPoutNormal_zilf_1665303912.png
makeup3dLipPoutNormal_zilf_1665303912.png.meta
lipClose.png
lipClose.png.meta
lipGloss.png
lipGloss.png.meta
lipOpen.png
lipOpen.png.meta
makeup3d_open.png
makeup3d_open.png.meta
pupilBlend.png
pupilBlend.png.meta
pupilMask.png.meta
makeup.png
makeup.png.meta
stereo.png
stereo.png.meta
main.scene
Blit_MATERIAL.material
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Face3D_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
Quad.mesh
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
lips_keypoint_faceu_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
output2d.rt
outputTex.rt
scene.config
blit_xshader.xshader
brow_faceu_xshader.xshader
eye_part_faceu_xshader.xshader
face3d_xshader.xshader
lips_keypoint_faceu_xshader.xshader
mask_faceu_xshader.xshader
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu_xshader.xshader
algorithmConfig.json
config.json
37063398bdf5a5d57affd03ec01e546e.zip
config.json
blusher.png
d0696f4e244d3ca9945f233e26bc2689.zip
config.json
blusher.png
ea86033c1962806dd12902ed9edd4ae2.zip
blusher.png
blusher.png.meta
highlight.png.meta
empty.png.meta
eyebrow.png
eyebrow.png.meta
eyelash.png
eyelash.png.meta
eyeline.png.meta
eyemazing.png.meta
eyemazingScreen.png.meta
eyeshadow.png
eyeshadow.png.meta
eyeshadowScreen.png.meta
highlight_khgp_1655297390.png
highlight_khgp_1655297390.png.meta
makeup3dLipPoutEnvironment2_advj_1665303912.png.meta
makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png
makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png.meta
makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png
makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png.meta
makeup3dLipPoutEnvironment_mfgl_1665303912.png.meta
makeup3dLipPoutNormal_zilf_1665303912.png
makeup3dLipPoutNormal_zilf_1665303912.png.meta
lipClose.png
lipClose.png.meta
lipGloss.png
lipGloss.png.meta
lipOpen.png
lipOpen.png.meta
makeup3d_ydku_1658219217.png.meta
pupilBlend.png.meta
pupilMask.png.meta
makeup.png.meta
stereo.png
stereo.png.meta
main.scene
Blit_MATERIAL.material
Blusher_MATERIAL.material
Brow_MATERIAL.material
Eyelash_MATERIAL.material
Eyeline_MATERIAL.material
Eyemazing_MATERIAL.material
Eyeshadow_MATERIAL.material
Face3D_MATERIAL.material
Lip_MATERIAL.material
PupilCutoff_MATERIAL.material
Pupil_MATERIAL.material
Stereo_MATERIAL.material
Quad.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
output2d.rt
outputTex.rt
blit_xshader.xshader
brow_faceu_xshader.xshader
eye_part_faceu_xshader.xshader
face3d_xshader.xshader
lips_keypoint_faceu_xshader.xshader
mask_faceu_xshader.xshader
pupil_cutoff_faceu_xshader.xshader
pupil_main_faceu_xshader.xshader
config.json
89ad943ef61e4509b877db7105e3216e.zip
content.json
none.png
none.png.meta
lua-meta.json
main.scene
Blit.material
Default.material
Default_blusher.material
Default_brow.material
Default_eyelash.material
Default_eyeline.material
Default_eyeshadow.material
Default_lip.material
Default_pupil.material
Default_pupilcutoff.material
Default_stereo.material
Face3D.material
Quad.mesh
blusher_faceu_mesh.mesh
brow_faceu_mesh.mesh
eyelash_faceu_mesh.mesh
eyeline_faceu_mesh.mesh
eyemazing_faceu_mesh.mesh
eyeshadow_faceu_mesh.mesh
face3d0_mesh.mesh
face3d1_mesh.mesh
face3d2_mesh.mesh
face3d3_mesh.mesh
face3d4_mesh.mesh
pupil_cutoff_faceu_mesh.mesh
pupil_main_faceu_mesh.mesh
stereo_faceu_mesh.mesh
output2d.rt
outputTex.rt
scene.config
ReshapeV5_singlePerson.xshader
blit.xshader
brow_faceu.xshader
lips_keypoint_faceu.xshader
pupil_cutoff_faceu.xshader
pupil_main_faceu.xshader
algorithmConfig.json
config.json
1309d3ae22dd93d5b5a61bf4b80c193f.zip
config.json
lipClose.png.meta
lipOpen.png.meta
makeup.prefab
default.material
3d12170bb03d8acd5302eeb9d9f10415.zip
config.json
lipClose.png.meta
lipOpen.png.meta
makeup.prefab
default.material
lips_keypoint_faceu_xshader.xshader
b1c572c928b7fe5c1a04dc2b632752da.zip
config.json
lipClose.png.meta
lipOpen.png
lipOpen.png.meta
makeup.prefab
default.material
11d39eefff5ba8fb136b5cc1d93d11bb.zip
config.json
lipClose.png.meta
lipOpen.png.meta
makeup.prefab
default.material
6cd4790bde3ffbc3af956071c184435c.zip
lipOpen.png
lips_keypoint_faceu_mesh.mesh
8faca7f8b283fd332d9a6d48d48d554c.zip
config.json
lipClose.png
lipClose.png.meta
lipOpen.png
lipOpen.png.meta
makeup.prefab
default.material
22510b58b68337b3f578ad94e7e19bdc.zip
config.json
eyeshadow.png
eyeshadowScreen.png
fbca58375dffd228d34d243a3866b334.zip_temp
config.json
eyeshadow.png
makeup.lua
53d2abccbf228f1c2698fe5e2d00bc25.zip
config.json
eyeshadow.png
eyeshadowScreen.png
7f7f06578ddbea280d42a47626fa72b0.zip
eyeshadow.png.meta
eyeshadowScreen.png
eyeshadowScreen.png.meta
makeup.prefab
default.material
eyeshadow_faceu_mesh.mesh
16e9f924eb8e892986680eb8f0da5ed6.zip
config.json
eyeshadow.png
eyeshadowScreen.png
034ff65ea17f544d9a2e181562cc908c.zip
config.json
eyeshadow.png
d4d9cf62c44b451fd5798c7b3b904dd0.zip
config.json
eyelash.png
eye_part_faceu_xshader.xshader
b3a2419752f2e1320fe62211852cb2c8.zip
config.json
eyelash.png
ee75da693d799af2d7b0c02166c70f51.zip
eyelash.png
5d0225605b46ed1c3afc2ede06b45dd8.zip
config.json
eyelash.png
7117f587a9a6f4cae7239fb6e0e53e4f.zip
config.json
eyelash.png
6059f4c7706d69a2fc2813c914ecc116.zip
config.json
eyelash.png
tt_bigbrother_v6.0_size0_md58c983e1fd93590f31a738f9ea966f850.model_temp
tt_face_extra_v15.0_size0_md540355868b9ccc603edb1d32d44cbbf07.model_temp
tt_faceverify_v7.0_size0_md53db2ac0e3367889c3dc6aeddb0842fd5.model_temp
05cc1ea0e0d10b24aa691b6fba153c06
d5121058390f4ce322813c96c341261c
crypto_key_store.dat
AppStoreRating.ini.pDHNHv
UserInstallInfo
buriedPointLogCfg
buriedPointLogCfg.lock
buriedPointLogCfg.lock
buriedPointLogCfg.pRGpNN
buriedPointLogCfg.xegFZW
channel
commonSetting.ini
commonSetting.ini
commonSetting.ini
effect_ab_conf.ini
fission.ini
globalSetting
globalSetting
globalSetting
gpuSupport.ini
gpuSupport.ini
highlight_penetrate.ini
highlight_penetrate.ini
keymapSettings
keymapSettings.lock
lv_safe_guard.ini
ve_ab_conf.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
vesdk.ini
vesdk.ini.lock
gpu_driver_bug_list.json
MidPyr7Up.rt
fshader.frag
local_prefs.json
local_prefs.json
local_prefs.json
local_prefs.json~RFe63790e.TMP
tt_net_config.config
tt_net_config.config
tt_net_config.config
tt_net_config.config
settings.dat
f_000009
f_00000a
f_00001f
f_000020
f_000022
f_000023
f_00004a
f_00004c
f_00004d
f_00004e
f_00004f
f_000050
f_000053
f_000054
f_000055
f_000056
f_000057
f_000058
f_000059
f_00005a
f_00005b
f_00005c
f_00005e
f_00005f
f_000060
f_000061
f_000062
f_000063
f_000064
f_000065
f_000066
f_000067
f_000068
f_000069
f_00006a
f_00006b
f_00006c
f_00006d
f_00006e
f_00006f
f_000070
f_000072
f_000073
f_000075
f_000079
f_0000a9
f_0000ae
f_0000b3
f_0000da
f_0000e1
f_000100
f_000107
001c254713fba6d4_0
022d679a37a7553b_0
084d4e3e8f4a6a3a_0
0e4a4370143d83d1_0
1c241b2a79d7702e_0
255032036bc6a626_0
29154bfd3957dfd1_0
461f6c32ce754c60_0
4c307b02b4dcc58c_0
4f660ef002b76b62_0
897428a21dd93423_0
8d62fec8239477a8_0
94d42b78e59fa2c5_0
b1ae21fbc96704ef_0
ca7d8c2cd16b0131_0
d58629c44995db8b_0
e46f9660c67c85a1_0
edb2f1892c7d0050_0
edcf37653c4fc11a_0
ee2becab20065a1a_0
temp-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
LOG.old
LOG.old
LOG.old
LOG.old
LOG.old
LOG.old~RFe6a3b38.TMP
MANIFEST-000001
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
TransportSecurity
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Secure Preferences
the-real-index
the-real-index
the-real-index~RFe70a186.TMP
index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index~RFe697046.TMP
the-real-index~RFe6c47b1.TMP
the-real-index~RFe6cf2a7.TMP
the-real-index~RFe6e3374.TMP
the-real-index~RFe6ec592.TMP
the-real-index~RFe701e9a.TMP
the-real-index~RFe71e224.TMP
todelete_b82aaf592933a8c9_0_1
the-real-index
the-real-index~RFe6971dd.TMP
index.txt
index.txt
index.txt
index.txt
index.txt
index.txt~RFe692217.TMP
013888a1cda32b90_0
297ecea5cebb5dfe_0
297ecea5cebb5dfe_1
2cc80dabc69f58b6_0
2cc80dabc69f58b6_1
4cb013792b196a35_0
4cb013792b196a35_1
67a473248953641b_0
67a473248953641b_1
b6c28cea6ed9dfc1_0
b6c28cea6ed9dfc1_1
ba23d8ecda68de77_0
ba23d8ecda68de77_1
f1cdccba37924bda_0
f1cdccba37924bda_1
fa813c9ad67834ac_0
fa813c9ad67834ac_1
the-real-index
the-real-index~RFe697008.TMP
Local State
Local State
Local State
Local State
Local State
Local State
Local State
Module Info Cache
Module Info Cache
Module Info Cache
Module Info Cache
Module Info Cache
Module Info Cache
data_1
c9aa2eb3-27a3-4847-894e-1eeb8424e932.tmp
persisted_first_party_sets.json
edgecompatviewlist[1].xml
roottools.conf
TikTokDisplayFont-Regular[1].woff2
index[1].js
npm-b3a903c8.bfb1ef8c2ef900ac657d[1].js
npm-d801507b.4dbfee890f763b81da15[1].js
npm-ea8a6886.470c16fd332812766f4f[1].js
slardar.web.pre[1].js
TikTokFont-Regular[1].woff2
TikTokFont-Semibold[1].woff2
init[1].js
multi-cluster-domain.093e2c7e80fb16f36171[1].js
npm-596046b7.e20a8abe54f4a10ec6d3[1].js
es-polyfill.5733c014217ce42f236a[1].js
init[1].js
login-tip-modal.f14c635561dcd42a95ab[1].js
login_proxy[1].htm
npm-7842561a.c74f2558d5bba7de8186[1].js
sdk-web-sg[1].js
warmup[2].gif
webapp-login-page.34a8130abfa48883c711[1].js
8c38d0bc3eca55cfff39[1].css
TikTokDisplayFont-Bold[1].woff2
TikTokDisplayFont-Semibold[1].woff2
TikTokFont-Bold[1].woff2
npm-74d9c565.3c2ed31f2c6762c432ab[1].js
runtime.b82bcde4d086c2d1c675[1].js
vendor.e01ba2f4a23a31cc48d4[1].js
www.tiktok[1].xml
www.capcut[1].xml
www.capcut[1].xml
www.capcut[1].xml
www.capcut[1].xml
www.capcut[1].xml
IEOneBox_V2[1].appcache
www.bing[1].xml
www.bing[1].xml
www.bing[1].xml
suggestions[1].en-US
favicon[1].png
edb.log
imagestore.dat
~DFFF2B754BD429AD06.TMP
gpuSupport.ini
gpuSupport.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
ve_hw_check.ini
vesdk.ini
capcut_capcutpc_invitefission_1.2.4_installer.exe
PlatinumWebView.dll
Qt6Core.dll
Qt6Core5Compat.dll
Qt6Quick.dll
Qt6QuickControls2.dll
Qt6Svg.dll
VEConfig.dll
VECrashMonitor.dll
VESafeGuard.dll
libcrypto-1_1-x64.dll
libcurl.dll
libssl-1_1-x64.dll
msvcp140_1.dll
vcruntime140.dll
vcruntime140_1.dll
7zip.dll
BgWorker.dll
System.dll
deviceregister_shared.dll
downloader_nsis_plugin.dll
shell_downloader.dll
memory/380-6806-0x000001F7A87D0000-0x000001F7A97D0000-memory.dmp
memory/380-6790-0x00007FFB0F980000-0x00007FFB0F990000-memory.dmp
memory/380-6805-0x00007FFB35E80000-0x00007FFB3632B000-memory.dmp
memory/380-6789-0x00007FFB0F980000-0x00007FFB0F990000-memory.dmp
memory/1432-7293-0x00007FFB35E80000-0x00007FFB3632B000-memory.dmp
memory/1432-7294-0x0000021EDECE0000-0x0000021EDFCE0000-memory.dmp
memory/1480-6902-0x00007FFB32200000-0x00007FFB32C59000-memory.dmp
memory/1480-6875-0x00007FFB35E80000-0x00007FFB3632B000-memory.dmp
memory/1480-6904-0x000002BBAF700000-0x000002BBAF701000-memory.dmp
memory/1480-6874-0x00007FFB32C60000-0x00007FFB33209000-memory.dmp
memory/1480-6903-0x00007FFB32200000-0x00007FFB32C59000-memory.dmp
memory/1480-7182-0x000000006EB80000-0x000000006EC25000-memory.dmp
memory/2140-6857-0x00007FFB35E80000-0x00007FFB3632B000-memory.dmp
memory/2140-6858-0x000001E5A3D00000-0x000001E5A4D00000-memory.dmp
memory/4440-7214-0x00007FFB32C60000-0x00007FFB33209000-memory.dmp
memory/4440-7215-0x00007FFB35E80000-0x00007FFB3632B000-memory.dmp
memory/4736-7371-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7369-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7381-0x000002B895590000-0x000002B895591000-memory.dmp
memory/4736-7380-0x000002B895590000-0x000002B895591000-memory.dmp
memory/4736-7379-0x000002B895590000-0x000002B895591000-memory.dmp
memory/4736-7378-0x000002B895590000-0x000002B895591000-memory.dmp
memory/4736-7377-0x000002B895590000-0x000002B895591000-memory.dmp
memory/4736-7376-0x000002B895590000-0x000002B895591000-memory.dmp
memory/4736-7375-0x000002B895590000-0x000002B895591000-memory.dmp
memory/4736-7373-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7372-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7319-0x000002B8937F0000-0x000002B8939F0000-memory.dmp
memory/4736-7370-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7322-0x00007FFB32200000-0x00007FFB32C59000-memory.dmp
memory/4736-7368-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7367-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7366-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7365-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7364-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7363-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7362-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7361-0x000002B895580000-0x000002B895581000-memory.dmp
memory/4736-7268-0x00007FFB35E80000-0x00007FFB3632B000-memory.dmp
memory/4736-7267-0x00007FFB0F980000-0x00007FFB0F990000-memory.dmp
memory/4736-7266-0x00007FFB0F980000-0x00007FFB0F990000-memory.dmp
memory/4736-7269-0x000002B880000000-0x000002B881000000-memory.dmp
memory/4736-7317-0x000002B8933B0000-0x000002B8937F0000-memory.dmp
memory/4736-7321-0x00007FFB32200000-0x00007FFB32C59000-memory.dmp