Analysis

  • max time kernel
    745s
  • max time network
    2292s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 04:39

General

  • Target
    https://www.capcut.com/capcut_pc_web/fission_receive?code=Obotrg38591925&lng=en
  • Sample240929-e9yt5sshpd
Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Executes dropped EXE 22 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Suspicious use of NtCreateThreadExHideFromDebugger 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 7 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
  • Suspicious behavior: AddClipboardFormatListener 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 43 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 20 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.capcut.com/capcut_pc_web/fission_receive?code=Obotrg38591925&lng=en
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2068
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fefb469758,0x7fefb469768,0x7fefb469778
      2⤵
        PID:2256
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1164 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:2
        2⤵
          PID:2712
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1520 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:8
          2⤵
            PID:2768
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1616 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:8
            2⤵
              PID:2832
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2272 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:1
              2⤵
                PID:2572
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2348 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:1
                2⤵
                  PID:2632
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1348 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:2
                  2⤵
                    PID:908
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3228 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:1
                    2⤵
                      PID:1944
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2808 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:8
                      2⤵
                        PID:2224
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3600 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:8
                        2⤵
                          PID:3016
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3464 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:8
                          2⤵
                            PID:2404
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:8
                            2⤵
                              PID:2664
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3532 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:8
                              2⤵
                                PID:880
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3520 --field-trial-handle=1224,i,9623328797498909856,17689008489597629048,131072 /prefetch:8
                                2⤵
                                  PID:2540
                                • C:\Users\Admin\Downloads\capcut_capcutpc_invitefission_1.2.4_installer.exe
                                  "C:\Users\Admin\Downloads\capcut_capcutpc_invitefission_1.2.4_installer.exe"
                                  2⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • System Location Discovery: System Language Discovery
                                  PID:2496
                                  • C:\Windows\SysWOW64\cmd.exe
                                    C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                                    3⤵
                                    • System Location Discovery: System Language Discovery
                                    PID:2232
                                    • C:\Windows\SysWOW64\Wbem\WMIC.exe
                                      wmic csproduct get Name,UUID /value
                                      4⤵
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious use of AdjustPrivilegeToken
                                      PID:2180
                                  • C:\Windows\SysWOW64\cmd.exe
                                    C:\Windows\System32\cmd.exe /c wmic os get SerialNumber,Caption,BuildNumber,Version /value
                                    3⤵
                                    • System Location Discovery: System Language Discovery
                                    PID:1548
                                    • C:\Windows\SysWOW64\Wbem\WMIC.exe
                                      wmic os get SerialNumber,Caption,BuildNumber,Version /value
                                      4⤵
                                      • System Location Discovery: System Language Discovery
                                      PID:3040
                                  • C:\Windows\SysWOW64\cmd.exe
                                    C:\Windows\System32\cmd.exe /c wmic path Win32_VideoController get CurrentVerticalResolution,CurrentHorizontalResolution /value
                                    3⤵
                                    • System Location Discovery: System Language Discovery
                                    PID:2576
                                    • C:\Windows\SysWOW64\Wbem\WMIC.exe
                                      wmic path Win32_VideoController get CurrentVerticalResolution,CurrentHorizontalResolution /value
                                      4⤵
                                      • System Location Discovery: System Language Discovery
                                      PID:2908
                                  • C:\Windows\SysWOW64\cmd.exe
                                    C:\Windows\System32\cmd.exe /c wmic nicconfig get DefaultIPGateway,macaddress
                                    3⤵
                                    • System Location Discovery: System Language Discovery
                                    PID:2112
                                    • C:\Windows\SysWOW64\Wbem\WMIC.exe
                                      wmic nicconfig get DefaultIPGateway,macaddress
                                      4⤵
                                      • System Location Discovery: System Language Discovery
                                      PID:3028
                                  • C:\Windows\SysWOW64\cmd.exe
                                    C:\Windows\System32\cmd.exe /c wmic diskdrive get SerialNumber /value
                                    3⤵
                                    • System Location Discovery: System Language Discovery
                                    PID:2224
                                    • C:\Windows\SysWOW64\Wbem\WMIC.exe
                                      wmic diskdrive get SerialNumber /value
                                      4⤵
                                      • System Location Discovery: System Language Discovery
                                      PID:1052
                                  • C:\Users\Admin\AppData\Local\app_shell_cache_359289\app_package_245f698fc8.exe
                                    "C:\Users\Admin\AppData\Local\app_shell_cache_359289\app_package_245f698fc8.exe" /s /create_desktop=1 /install_path="C:\Users\Admin\AppData\Local\CapCut"
                                    3⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Location Discovery: System Language Discovery
                                    • Modifies registry class
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:2948
                                  • C:\Users\Admin\AppData\Local\CapCut\CapCut.exe
                                    "C:\Users\Admin\AppData\Local\CapCut\\CapCut.exe"
                                    3⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Location Discovery: System Language Discovery
                                    PID:1536
                                    • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                                      "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe"
                                      4⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious use of NtCreateThreadExHideFromDebugger
                                      • Modifies system certificate store
                                      • Suspicious behavior: AddClipboardFormatListener
                                      PID:1696
                                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                                        "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=1792 --field-trial-handle=1832,i,16998690307492989175,13850658928359543817,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                                        5⤵
                                        • Executes dropped EXE
                                        • Suspicious use of NtCreateThreadExHideFromDebugger
                                        PID:2052
                                      • C:\Windows\System32\cmd.exe
                                        C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                                        5⤵
                                          PID:2280
                                          • C:\Windows\System32\Wbem\WMIC.exe
                                            wmic csproduct get Name,UUID /value
                                            6⤵
                                              PID:360
                                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                                            C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                                            5⤵
                                            • Executes dropped EXE
                                            • Checks processor information in registry
                                            • Suspicious behavior: AddClipboardFormatListener
                                            PID:2148
                                            • C:\Windows\System32\cmd.exe
                                              C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                                              6⤵
                                                PID:3020
                                                • C:\Windows\System32\Wbem\WMIC.exe
                                                  wmic csproduct get Name,UUID /value
                                                  7⤵
                                                    PID:832
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" driverinfo
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:1576
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuda
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2132
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" cuvid
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2848
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" nv_enc
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:848
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2392
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:1108
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" qsv_enc_hw
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2788
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" amf_enc
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2060
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2640
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_nvenc_av1
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2124
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2824
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" new_qsvenc_av1
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2508
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" oneVPL
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:1964
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\ttdaemon.exe" mt_enc
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:2492
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe" -cmd_qt6render_gl_hw_support
                                                  6⤵
                                                  • Executes dropped EXE
                                                  • Suspicious behavior: AddClipboardFormatListener
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  • Suspicious use of SetWindowsHookEx
                                                  PID:2616
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe" -cmd_qt6render_gl_sw_support
                                                  6⤵
                                                  • Executes dropped EXE
                                                  • Suspicious behavior: AddClipboardFormatListener
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  • Suspicious use of SetWindowsHookEx
                                                  PID:2072
                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                                                  C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe /launch=detector
                                                  6⤵
                                                    PID:2932
                                                    • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                                                      "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=1788 --field-trial-handle=1816,i,1181301416237913569,17908395167295669568,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                                                      7⤵
                                                        PID:884
                                                      • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\parfait_crash_handler.exe
                                                        C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=7 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=2932 "--annotation=os_version=Windows NT 6.1.7601" --annotation=parfait_version=1.4.6.11 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/AppData/Local/CapCut/3.3.0.1161/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0xd44,0xd48,0xd4c,0xb24,0xd60,0x7fef461ebe0,0x7fef461ebf8,0x7fef461ec10
                                                        7⤵
                                                          PID:2796
                                                          • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VECrashHandler.exe
                                                            C:/Users/Admin/AppData/Local/CapCut/3.3.0.1161/VECrashHandler.exe "--dump_path=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports\5cc63841-daa6-4485-8f2e-12b70f16644e.dmp"
                                                            8⤵
                                                              PID:880
                                                          • C:\Windows\system32\wbem\wmic.exe
                                                            C:\Windows\system32\wbem\wmic.exe diskdrive where index=0 get serialnumber
                                                            7⤵
                                                              PID:1912
                                                            • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe
                                                              C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VEDetector.exe -detect_simulate_check
                                                              7⤵
                                                                PID:2820
                                                              • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VECrashHandler.exe
                                                                "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VECrashHandler.exe" "--dump_path=C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut_2024-09-29_05-08-38-752_1.dmp"
                                                                7⤵
                                                                  PID:3016
                                                                • C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VECrashHandler.exe
                                                                  "C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VECrashHandler.exe" "--dump_upload=only_crash_event"
                                                                  7⤵
                                                                    PID:2600
                                                      • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                        "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                        1⤵
                                                          PID:2620
                                                        • C:\Windows\system32\conhost.exe
                                                          \??\C:\Windows\system32\conhost.exe "-1402999140-1354940965-1710219997126110122614468249592138145019-2089836157-1366968488"
                                                          1⤵
                                                            PID:2052
                                                          • C:\Windows\system32\AUDIODG.EXE
                                                            C:\Windows\system32\AUDIODG.EXE 0xc8
                                                            1⤵
                                                              PID:2132
                                                            • C:\Windows\system32\AUDIODG.EXE
                                                              C:\Windows\system32\AUDIODG.EXE 0x164
                                                              1⤵
                                                                PID:1476
                                                              • C:\Windows\system32\AUDIODG.EXE
                                                                C:\Windows\system32\AUDIODG.EXE 0x1bc
                                                                1⤵
                                                                  PID:2012
                                                                • C:\Windows\system32\AUDIODG.EXE
                                                                  C:\Windows\system32\AUDIODG.EXE 0x5d8
                                                                  1⤵
                                                                    PID:1920
                                                                  • C:\Windows\system32\AUDIODG.EXE
                                                                    C:\Windows\system32\AUDIODG.EXE 0x5d4
                                                                    1⤵
                                                                      PID:1632
                                                                    • C:\Windows\system32\AUDIODG.EXE
                                                                      C:\Windows\system32\AUDIODG.EXE 0x5dc
                                                                      1⤵
                                                                        PID:1772
                                                                      • C:\Windows\system32\AUDIODG.EXE
                                                                        C:\Windows\system32\AUDIODG.EXE 0x5e0
                                                                        1⤵
                                                                          PID:2132

                                                                        Network

                                                                              MITRE ATT&CK Enterprise v15

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads

                                                                              94308059B57B3142E455B38A6EB92015

                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                                                              • Size 342B
                                                                              • SHA256 ea2b21785462c7c13978e7e1499449a96a12e8a9f0d930869e983f08b23a2b13
                                                                              • MD5 SHA1 SHA512

                                                                              94308059B57B3142E455B38A6EB92015

                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                                                              • Size 342B
                                                                              • SHA256 950bae0562b5e3a58a93aa14031fe245b5d5ec6cf9eaf5182ecf0c1e87709e70
                                                                              • MD5 SHA1 SHA512

                                                                              MSVCP140.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\MSVCP140.dll
                                                                              • Size 556KB
                                                                              • SHA256 67f968bb1574eb11860c98814f96ab20bc77a70046523e541c7e82bfdd822a46
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              Qt6Core.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Qt6Core.dll
                                                                              • Size 5.3MB
                                                                              • SHA256 fa2c2c8487b1435ace3c858ac03947d450f015966e401d0d4a8ac7c6868fc61a
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              ScrollView.qml

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\QtQuick\Controls\Material\ScrollView.qml
                                                                              • Size 2KB
                                                                              • SHA256 228069c59b7d348321d4ad8e1260d20ef8cfaae5be0c08676de49d8562fe6fda
                                                                              • MD5 SHA1 SHA512

                                                                              default_photo_ico.jpg

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\CloudMaterial\default_photo_ico.jpg
                                                                              • Size 29KB
                                                                              • SHA256 c18e010061abbf3ec5ec5b93393565704275cb158942a9dec2391c4d7dd1830b
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness\amazingfeature\rt\outputTex.rt
                                                                              • Size 324B
                                                                              • SHA256 f28df7e33339f8d20f304cc3589fa95bc527cc81e092d6ecbe43aef068985cab
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness\config.json
                                                                              • Size 262B
                                                                              • SHA256 baf22b41272ffea6d0bbebfc834d27693a0fc1c122237109879534435fa86918
                                                                              • MD5 SHA1 SHA512

                                                                              main.scene

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\main.scene
                                                                              • Size 2KB
                                                                              • SHA256 fd8e508ca5ec3c8d3e2d48c9c3150934fab181c6570da7153c7ceefe62cea802
                                                                              • MD5 SHA1 SHA512

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\rt\outputTex.rt
                                                                              • Size 762B
                                                                              • SHA256 e70ec860fae4f68cc7cb1627717e725af493abecb59b4f3ed1236569adc28df4
                                                                              • MD5 SHA1 SHA512

                                                                              filter.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\xshader\filter.xshader
                                                                              • Size 1KB
                                                                              • SHA256 45390a5b6d9c3a4d71993c867d689023dcdfecc8a604cee36a457aac2c29ef57
                                                                              • MD5 SHA1 SHA512

                                                                              ImageBusinessSlider.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\clear\AmazingFeature\ImageBusinessSlider.json
                                                                              • Size 35B
                                                                              • SHA256 b408c5a3949a0a77bacbc934e82ced44e25db3491c54a891be064158592810cf
                                                                              • MD5 SHA1 SHA512

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast\amazingfeature\rt\outputTex.rt
                                                                              • Size 324B
                                                                              • SHA256 f7f3d8032bc39cf117e9854daea791c8ca453e7e3aca59e39228b847174e5ab8
                                                                              • MD5 SHA1 SHA512

                                                                              LuaRTTI.MarkGen.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\LuaRTTI.MarkGen.lua
                                                                              • Size 190B
                                                                              • SHA256 2aa4ba3afc94d9d96a4c0f850dd5073c0b58560e9609cf758e3ae92f89d77220
                                                                              • MD5 SHA1 SHA512

                                                                              algorithmConfig.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\algorithmConfig.json
                                                                              • Size 317B
                                                                              • SHA256 835c6031fb0e72d2f2b6ee80c45b95010a7e7cac7fa221d9b820d6708a8869a8
                                                                              • MD5 SHA1 SHA512

                                                                              Utils.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\lua\Utils.lua
                                                                              • Size 9KB
                                                                              • SHA256 df672b08916560cf1a04a0cecd1c3e8160557409a0c1c5da2483ffe16fc77d4c
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              fshader.frag

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\fshader.frag
                                                                              • Size 7KB
                                                                              • SHA256 c9a66d612106da8aed4e7eca785067c9411113d09f58a5e9cd2d535adbc1945c
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              sticker.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\sticker.config
                                                                              • Size 305B
                                                                              • SHA256 4f218871d126b92e0a895646e01b0658c0b70934f85885b121d1b2c9267d0cfb
                                                                              • MD5 SHA1 SHA512

                                                                              lua-meta.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\lua-meta.json
                                                                              • Size 1KB
                                                                              • SHA256 85c6be8c7a92ba01c3bdfecd4b5ef1f7b4b536d8112ea8a1ff9b3e890d7c5738
                                                                              • MD5 SHA1 SHA512

                                                                              graphBuild.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\lua\graphBuild.lua
                                                                              • Size 5KB
                                                                              • SHA256 e99cfcfe93e9ea0fd243129a4da604c186b7fac0c5aec7788dc9bae6ee26fcc8
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              renderChain.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\lua\renderChain.json
                                                                              • Size 259B
                                                                              • SHA256 244f156847921a6c4b34ccbffd09bc5effcc1cf69cf68ffb7e83cd9dadca00fa
                                                                              • MD5 SHA1 SHA512

                                                                              main.scene

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\main.scene
                                                                              • Size 2KB
                                                                              • SHA256 1b4606f333dce90d2cbd1bef8859b03a86048dfbacc98bc5b9fd0132c5995eca
                                                                              • MD5 SHA1 SHA512

                                                                              Quad.mesh

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\mesh\Quad.mesh
                                                                              • Size 1KB
                                                                              • SHA256 e8bb66f1490fe4a0bcad6ebaa19d031de238ecd0a1a36e26a4ebd1f11801ec81
                                                                              • MD5 SHA1 SHA512

                                                                              FliterEntity-2FFE6ABD.prefab

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\prefabs\FliterEntity-2FFE6ABD.prefab
                                                                              • Size 857B
                                                                              • SHA256 bacbd7119e309a4d675d8a8b33cd1090948c936c3ebf3ce311fe3d0626450dba
                                                                              • MD5 SHA1 SHA512

                                                                              material.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\material.material
                                                                              • Size 887B
                                                                              • SHA256 885be6a1b70625f2d642539e8a1e9c5ec7ab685aa194b725a86f8df351f46bcd
                                                                              • MD5 SHA1 SHA512

                                                                              xshader.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\xshader.xshader
                                                                              • Size 1KB
                                                                              • SHA256 6000493c6055709125d37005c8fa6b693f6c35ec76c967661ec073f1b34f7401
                                                                              • MD5 SHA1 SHA512

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\rt\outputTex.rt
                                                                              • Size 567B
                                                                              • SHA256 ca77feb4432805141de582bee6b6cae76865a68c278906f9da0512f6f73d6550
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\contrast_v2\config.json
                                                                              • Size 293B
                                                                              • SHA256 3dbd07565db5d5418da1e76a951a20c355fdd4f44dcb9ac9ffa84da897ef46ed
                                                                              • MD5 SHA1 SHA512

                                                                              filter.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\fade\amazingfeature\xshader\filter.xshader
                                                                              • Size 740B
                                                                              • SHA256 c99d0ede6d9c4b8c56a80fa41a34321aa4e6e76047d64b58b45b96086b972eec
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\highlight\config.json
                                                                              • Size 261B
                                                                              • SHA256 8200428a8b69067ec73ad0faa72496f1f5fe7df1ebafd1aabd4e00121850f177
                                                                              • MD5 SHA1 SHA512

                                                                              content.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\content.json
                                                                              • Size 130B
                                                                              • SHA256 b077ccd356a478e2e0878be27babf81006e8d33cd44d2a6626ad2fbce7f4aab5
                                                                              • MD5 SHA1 SHA512

                                                                              temperature_max.png

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_max.png
                                                                              • Size 4KB
                                                                              • SHA256 16fa716c3483f2387763dbdef519f7627bee1151969a5548be91fde5d30b583b
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              temperature_max.png.meta

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_max.png.meta
                                                                              • Size 352B
                                                                              • SHA256 99fb9eb6d93f1775e62e5ffcab477b45afb7d85584461d29aa070c651159abb5
                                                                              • MD5 SHA1 SHA512

                                                                              temperature_min.png

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_min.png
                                                                              • Size 4KB
                                                                              • SHA256 4d6b06cbcc92d8bd42b0ff8da7661ed729652c4bb8ce3c7ce1d9c2db631c00a1
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              temperature_min.png.meta

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_min.png.meta
                                                                              • Size 352B
                                                                              • SHA256 0dcfcfc4d3db8a69617016304ea3420627cebf851a5cada66c0c1fa5df63e21f
                                                                              • MD5 SHA1 SHA512

                                                                              main.scene

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\main.scene
                                                                              • Size 2KB
                                                                              • SHA256 ddf39775e5dd5cd52acf3ea780ea07440b5c4d8fe068ff2edd356478892f6f18
                                                                              • MD5 SHA1 SHA512

                                                                              entity.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\material\entity.material
                                                                              • Size 839B
                                                                              • SHA256 35192ed64374b241d70d49e8789747909e129c53ab5a0804b7f28c05a3c6b77c
                                                                              • MD5 SHA1 SHA512

                                                                              quad.mesh

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\mesh\quad.mesh
                                                                              • Size 1002B
                                                                              • SHA256 2589fe8d31dfcfd5f521aacd5c00a64a0292fa773aef26009dc85ee78e9bdcff
                                                                              • MD5 SHA1 SHA512

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\rt\outputTex.rt
                                                                              • Size 510B
                                                                              • SHA256 554c5c6ab074cd55cb6ad256f5ab52fc649c403e4b4c8efc26ef0b9567226e84
                                                                              • MD5 SHA1 SHA512

                                                                              sticker.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\sticker.config
                                                                              • Size 276B
                                                                              • SHA256 628398a978ba0d718e5753bd40e2652a7db9bdab38952def94802ee2c9cf0eff
                                                                              • MD5 SHA1 SHA512

                                                                              entity.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\HSL\xshader\entity.xshader
                                                                              • Size 1KB
                                                                              • SHA256 a112e4d48ad3b783194d4cff5f9eb31eb04c2d9ea7ece6ba6dd6ea634bece058
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\hsl\config.json
                                                                              • Size 318B
                                                                              • SHA256 85a973186f9e260957d41f64dc40bc685c502daa864093f04b91511fcc50fe7a
                                                                              • MD5 SHA1 SHA512

                                                                              algorithmConfig.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\algorithmConfig.json
                                                                              • Size 454B
                                                                              • SHA256 bb9ca7d984c8eecebebfd3aadff29bc267d9bf1cc6dc683a887c32823dae45d2
                                                                              • MD5 SHA1 SHA512

                                                                              content.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\content.json
                                                                              • Size 129B
                                                                              • SHA256 8f72e2d5ebbf00be0a6473d8fd4ff494b628b7f6b972410c9cdc3f8484bbbe98
                                                                              • MD5 SHA1 SHA512

                                                                              main.scene

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\main.scene
                                                                              • Size 2KB
                                                                              • SHA256 335944a33967b6f2433d4dcf870f3a36d30fb52a6b3c3990cd18c58510132f5d
                                                                              • MD5 SHA1 SHA512

                                                                              noise.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\material\noise.material
                                                                              • Size 652B
                                                                              • SHA256 fda54d574bbe6040e6dbf5cadca7340c0ed837f65d5f7c06a5bd9dab983b31ef
                                                                              • MD5 SHA1 SHA512

                                                                              quad.mesh

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\mesh\quad.mesh
                                                                              • Size 998B
                                                                              • SHA256 879e4889ea6ee05a3835c75c99595c87740223d1354a679b85e9c7720809aef6
                                                                              • MD5 SHA1 SHA512

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\rt\outputTex.rt
                                                                              • Size 510B
                                                                              • SHA256 5cedbe5ea2f46408ba45424f6374b2a3666630a4a211d9a928cd241b0762dab4
                                                                              • MD5 SHA1 SHA512

                                                                              scene.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\scene.config
                                                                              • Size 363B
                                                                              • SHA256 0adc55e18bdff0fcde5e163338cdcb74618b1198dbd95d315ca5ec256005921c
                                                                              • MD5 SHA1 SHA512

                                                                              noise.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\xshader\noise.xshader
                                                                              • Size 1KB
                                                                              • SHA256 94d6bc0f3912ada7dc7c2fc6cb3ca7ef38bd2e54bc6a2a93ba5c62790e0bee92
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\particle_v1\config.json
                                                                              • Size 301B
                                                                              • SHA256 1b76c3df72fb1c360bf91611a5608678f11e4036a5271c637781eaaf27cf1e6a
                                                                              • MD5 SHA1 SHA512

                                                                              SeekModeScript.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\lua\SeekModeScript.lua
                                                                              • Size 2KB
                                                                              • SHA256 22a5beb53cc88b765fe88d6e897fd67cc9957eaed8230b1835e2bb24426d25de
                                                                              • MD5 SHA1 SHA512

                                                                              sticker.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\sticker.config
                                                                              • Size 297B
                                                                              • SHA256 eb62bbf1d38cb3bdda35aa51ff5c68b72ecbecd151137121187a23a69674e145
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\config.json
                                                                              • Size 330B
                                                                              • SHA256 f3c3bbd6671e8b331ce242bdf7d0a6c70539afbdf86d150bb1265d3b76898494
                                                                              • MD5 SHA1 SHA512

                                                                              ImageBusinessSlider.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\ImageBusinessSlider.json
                                                                              • Size 1KB
                                                                              • SHA256 c87243387967a9712819daba2869ffc7957e94eedde1383e794ddd2a031820df
                                                                              • MD5 SHA1 SHA512

                                                                              content.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\content.json
                                                                              • Size 130B
                                                                              • SHA256 fc2b74417e526dffd214dd36eccb1531e6c777a0cbfd2dcf7939b4a5a7f52cfb
                                                                              • MD5 SHA1 SHA512

                                                                              main.scene

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\main.scene
                                                                              • Size 16KB
                                                                              • SHA256 a6129e2717e2afe4d3b0e1e081bf2883057ff3e08a588bdfe130dccb8d4cfb71
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              GaussX_2.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussX_2.material
                                                                              • Size 802B
                                                                              • SHA256 bb3eee876daaf66c381852151905f2f99393c6c1cf8eed84aa698009478bea91
                                                                              • MD5 SHA1 SHA512

                                                                              GaussX_3.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussX_3.material
                                                                              • Size 802B
                                                                              • SHA256 9ba45dff7ca433ae5f578b95a4676262b2cb5c44790b3e59d7073b151ae19061
                                                                              • MD5 SHA1 SHA512

                                                                              GaussX_4.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussX_4.material
                                                                              • Size 803B
                                                                              • SHA256 9ee366374686d5278d08e56bd6698dbc3d71d41ac27675a31e4c860fe69b16ee
                                                                              • MD5 SHA1 SHA512

                                                                              GaussY_2.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussY_2.material
                                                                              • Size 779B
                                                                              • SHA256 ad95a4b166ab0296940de3a8dc14ca6e2bb518b9c9f4cdc81c722ed6b9feafe5
                                                                              • MD5 SHA1 SHA512

                                                                              GaussY_3.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussY_3.material
                                                                              • Size 779B
                                                                              • SHA256 fb92e5eec31dbd5730e9342da5180a7c23ddcfa8942f789c8b8c526da67932a5
                                                                              • MD5 SHA1 SHA512

                                                                              GaussY_4.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\GaussY_4.material
                                                                              • Size 779B
                                                                              • SHA256 b61a22b9d271e1d058e76221ef846283365658e4cda17a93fcda4c6f499f0833
                                                                              • MD5 SHA1 SHA512

                                                                              blend.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\blend.material
                                                                              • Size 746B
                                                                              • SHA256 05ba3353db47661e6b7cf8521191466427d0a7b2bc2890faf06b13814f998905
                                                                              • MD5 SHA1 SHA512

                                                                              cameraRawAdjust.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\cameraRawAdjust.material
                                                                              • Size 1023B
                                                                              • SHA256 d4507227f59bad0e422c7956c179ccc77dbe52451c9b7a9698ec1eac3129904c
                                                                              • MD5 SHA1 SHA512

                                                                              getGray.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\getGray.material
                                                                              • Size 683B
                                                                              • SHA256 67edd369889edda553a46a2d4da5e668e1858382221d3368b79cb0219b8ba7aa
                                                                              • MD5 SHA1 SHA512

                                                                              guideFilter.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\material\guideFilter.material
                                                                              • Size 741B
                                                                              • SHA256 6989e7a601a4291e4d2dc9ecb175691ebf08b1b46f4d23a2f777c43c1412e720
                                                                              • MD5 SHA1 SHA512

                                                                              Quad.mesh

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\mesh\Quad.mesh
                                                                              • Size 1KB
                                                                              • SHA256 844c1880d87b789d86093af993c51d3f18f0c351b0adbd18e51cc85849d267d1
                                                                              • MD5 SHA1 SHA512

                                                                              NewScreenRT.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\NewScreenRT.rt
                                                                              • Size 569B
                                                                              • SHA256 b0c05fd5785fb5ee51e8c6660de87496ef78cd17d09f8f91d067a8d19100a97e
                                                                              • MD5 SHA1 SHA512

                                                                              NewScreenRT_2.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\NewScreenRT_2.rt
                                                                              • Size 569B
                                                                              • SHA256 3189e4c0600fd795fb7ecd64edd85cc79daefc64990270fa6eed0e30765dd981
                                                                              • MD5 SHA1 SHA512

                                                                              midTex1.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex1.rt
                                                                              • Size 510B
                                                                              • SHA256 988efa227c672c6777ef5309a997681556fe4d4bae09b57b5c224c4af8de7378
                                                                              • MD5 SHA1 SHA512

                                                                              midTex2.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex2.rt
                                                                              • Size 510B
                                                                              • SHA256 24b81322a7a5938f72d77dcd98d4d3ecae808f710e040f11746debe7dfa41d9e
                                                                              • MD5 SHA1 SHA512

                                                                              midTex3.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex3.rt
                                                                              • Size 510B
                                                                              • SHA256 e93def3db002de84dfaa6f9f4ea1b8e28944f417cde35b1a14ed5375fba0d44b
                                                                              • MD5 SHA1 SHA512

                                                                              midTex4.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex4.rt
                                                                              • Size 510B
                                                                              • SHA256 c0e1b493f8a10903083b406a3b767c152e1d72715a30d1f6264ec35cc35e8d58
                                                                              • MD5 SHA1 SHA512

                                                                              midTex5.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex5.rt
                                                                              • Size 521B
                                                                              • SHA256 95dc090b3cbf6abd6338336110e12cee49099d8ec9dbc7d38872abe40ec1676f
                                                                              • MD5 SHA1 SHA512

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\outputTex.rt
                                                                              • Size 510B
                                                                              • SHA256 bc45c371bc37fa2003214b0496442f7998f7e3d9f9abdf6cd99e14b31484cf6e
                                                                              • MD5 SHA1 SHA512

                                                                              GaussX.frag

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX.frag
                                                                              • Size 1KB
                                                                              • SHA256 0384e6b9c8b245aa05d595391b348a4b06a46fc2ba85d3dfc7cc2ea21fc1accb
                                                                              • MD5 SHA1 SHA512

                                                                              GaussX.vert

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX.vert
                                                                              • Size 168B
                                                                              • SHA256 cf05efbf2e2640520fa59682c896f718000088d2e7cc83f07c224c813d30cad7
                                                                              • MD5 SHA1 SHA512

                                                                              GaussX.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX.xshader
                                                                              • Size 990B
                                                                              • SHA256 026d2c6857a07ca0bc9ab1238d21df89b2f069defaf922bca975bfe42f996e0c
                                                                              • MD5 SHA1 SHA512

                                                                              GaussX1.frag

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX1.frag
                                                                              • Size 1KB
                                                                              • SHA256 3bd8a0bdda1a5d97038659d07ee83c08d45bcbdb8620996b7d8fed1fc4375d28
                                                                              • MD5 SHA1 SHA512

                                                                              GaussX1.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\GaussX1.xshader
                                                                              • Size 991B
                                                                              • SHA256 c103e24cb7a9c85514392dec044e50be8fa0074a1d87197eb4306d3cf33cdeb7
                                                                              • MD5 SHA1 SHA512

                                                                              blend.frag

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\blend.frag
                                                                              • Size 489B
                                                                              • SHA256 0e69608e65e285adeed451599783ea714ffacdca32454a113159579c0b038650
                                                                              • MD5 SHA1 SHA512

                                                                              blend.vert

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\blend.vert
                                                                              • Size 282B
                                                                              • SHA256 a3dd0a14a9a48eb6a68b45de413c79a21134a3273ddca966cbf754f7b652fc0f
                                                                              • MD5 SHA1 SHA512

                                                                              blend.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\blend.xshader
                                                                              • Size 977B
                                                                              • SHA256 f788495ff65f560044c56287fb72cdaba53c415a587773702fbc498eaab406a9
                                                                              • MD5 SHA1 SHA512

                                                                              cameraRawAdjust.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\cameraRawAdjust.xshader
                                                                              • Size 1KB
                                                                              • SHA256 1f2c82094a84b14066e6d93e7f4fa3e280614f370ccf297a28d23469e5c04e9f
                                                                              • MD5 SHA1 SHA512

                                                                              cameraRawAdjustCore.frag

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\cameraRawAdjustCore.frag
                                                                              • Size 8KB
                                                                              • SHA256 73e723c7e4032dec8da3f40c1c4df7917803ac0c5bfbf0955800c0d9687f72dd
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              getGray.frag

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\getGray.frag
                                                                              • Size 234B
                                                                              • SHA256 e426d0ec442a009a3215e888bbcc8b99ca6308b8214d341dd4ad5a5b1ca305d8
                                                                              • MD5 SHA1 SHA512

                                                                              getGray.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\getGray.xshader
                                                                              • Size 988B
                                                                              • SHA256 485ccbe9096f99af6f555aba5b0fafd93968af7ee0161bb228d55e817fcb14bc
                                                                              • MD5 SHA1 SHA512

                                                                              guideFilter.frag

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\guideFilter.frag
                                                                              • Size 540B
                                                                              • SHA256 cbcbb33a2dcd5035b08aee178418020af2d449fc4eb8fcd759d53526283024d7
                                                                              • MD5 SHA1 SHA512

                                                                              guideFilter.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\xshader\guideFilter.xshader
                                                                              • Size 989B
                                                                              • SHA256 fce73b91ec527c7d950398d89e7afea52427f3fb3f6707b72cca647143baffe5
                                                                              • MD5 SHA1 SHA512

                                                                              LuaRTTI.MarkGen.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\LuaRTTI.MarkGen.lua
                                                                              • Size 166B
                                                                              • SHA256 425a0804076088345fabf8527182630f4886d04f185f02715191da72b50c0c6c
                                                                              • MD5 SHA1 SHA512

                                                                              content.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\content.json
                                                                              • Size 130B
                                                                              • SHA256 18d1cebf5ba1d4f2d8a41aaa12117f908c13aca621c2d2bee44a272b19431428
                                                                              • MD5 SHA1 SHA512

                                                                              lua-meta.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\lua-meta.json
                                                                              • Size 3KB
                                                                              • SHA256 638db9d286716cc0220a963bc43d46595b0f072255dd5971f220a1a67098ecc1
                                                                              • MD5 SHA1 SHA512

                                                                              Lscript.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\lua\Lscript.lua
                                                                              • Size 8KB
                                                                              • SHA256 87feea0d99750fd2cd91230d723c77bf8c4b48f8e504c714970365427759f9db
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              main.scene

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\main.scene
                                                                              • Size 2KB
                                                                              • SHA256 a9d4b06d4eafca0dda1d409d9105fb73faa6122147eeabdd1716080eef229558
                                                                              • MD5 SHA1 SHA512

                                                                              noface.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\material\noface.material
                                                                              • Size 692B
                                                                              • SHA256 8539040a84f693475dc16c925354935bc85cd485562befb7ced1ad1cb52d1ced
                                                                              • MD5 SHA1 SHA512

                                                                              Quad.mesh

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\mesh\Quad.mesh
                                                                              • Size 1KB
                                                                              • SHA256 119e2e9f016877f83c4f7c91aa23614387189cd19d8a9098b5de338f5e0df38f
                                                                              • MD5 SHA1 SHA512

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\rt\outputTex.rt
                                                                              • Size 567B
                                                                              • SHA256 8cd4b0db123b2babd506e58a78020adc44f248cffeaaf0e819451807ad94bf9b
                                                                              • MD5 SHA1 SHA512

                                                                              noface.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\xshader\noface.xshader
                                                                              • Size 1KB
                                                                              • SHA256 06de6e75308dc5b8451a2cf7e3109ca2262e144fa4014bc7706dc2f7fcac7f55
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v2\config.json
                                                                              • Size 338B
                                                                              • SHA256 474a9d95cb7bc887cc2ac7324648a336e80d63976b76b21e3ff33f710f034b2d
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\DefaultAdjustBundle\tone\config.json
                                                                              • Size 256B
                                                                              • SHA256 b57b933c9a505ba7d6351672147d522996a0124180156bfdf19705a0d8b93a74
                                                                              • MD5 SHA1 SHA512

                                                                              entity.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\LogWheel\log_wheel_v0\Wheel\xshader\entity.xshader
                                                                              • Size 1KB
                                                                              • SHA256 df215933763275ed647cbc3ca4aa61d61bae5d103c57d7aabdbfd693b7d83e1f
                                                                              • MD5 SHA1 SHA512

                                                                              outputTex.rt

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\PrimaryWheel\primary_wheel_v0\Wheel\rt\outputTex.rt
                                                                              • Size 510B
                                                                              • SHA256 04f3515e2001470f579f2e4cfc6df63e2d35593d13ac259ba769e2d2d4ef68f1
                                                                              • MD5 SHA1 SHA512

                                                                              lips_keypoint_faceu.vert

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\figure\beauty_head\beauty_root_pack\AmazingFeature\xshader\lips_keypoint_faceu.vert
                                                                              • Size 535B
                                                                              • SHA256 96ca09106a66055d2040069806965b88b710942a569c3af6caceb0eaf4fad5ee
                                                                              • MD5 SHA1 SHA512

                                                                              2.ef46db37.css

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\css\2.ef46db37.css
                                                                              • Size 1B
                                                                              • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                                                              • MD5 SHA1 SHA512

                                                                              836.8f441f5d.css

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\css\async\836.8f441f5d.css
                                                                              • Size 60KB
                                                                              • SHA256 dab65bbf236f9dfc62df33e359ab6b3491cfd984789683339990e3ae1925c392
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              707.3e4b9351.js

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\js\707.3e4b9351.js
                                                                              • Size 50KB
                                                                              • SHA256 e3aadd6c43fc0c0da41d71b75cafefadb1ad2b9f5591f2be746263ebffad6fe9
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              220.be5ea522.js

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\js\async\220.be5ea522.js
                                                                              • Size 11KB
                                                                              • SHA256 9f164e88258c70e0f2ac1d6c0bb299f574fce513abde1f2005a30d95710d0c35
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              lib-react.b1974d26.js

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\js\lib-react.b1974d26.js
                                                                              • Size 133KB
                                                                              • SHA256 940d1502ea51a99be7496a9691793f9f2d8347a4d7b8a9ca63c8106abab0cba9
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              lib-router.ca41585f.js

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\image_h5_sticker_publish\static\js\lib-router.ca41585f.js
                                                                              • Size 45KB
                                                                              • SHA256 01f382bde2e17c54a1254f75bdc04d6cdd75528dfb33bce34d07ac4dc58b2b20
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              tt_fsnew_base_jianying_v2.0.model

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\Resources\models\ttfacemodel\tt_fsnew_base_jianying_v2.0.model
                                                                              • Size 1.3MB
                                                                              • SHA256 71d025fc4c74e8989c43f4117dce05b0042808c6addd1e5f654780750cbe256b
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              VCRUNTIME140.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VCRUNTIME140.dll
                                                                              • Size 99KB
                                                                              • SHA256 a132cc216e8516136ca4739cac85519371f934f7cd8e14c69b464a01f3fc87d9
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              VECrashHandler.exe

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VECrashHandler.exe
                                                                              • Size 1.6MB
                                                                              • SHA256 70f010a0a01d3286fc47a9174e589a8248f0b73fa7424ad8e8d20b47317d3fff
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              VECrashMonitor.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\VECrashMonitor.dll
                                                                              • Size 52KB
                                                                              • SHA256 26beb987b10e21f07ea8c6680f0fb898a4154ecb674b1142a7d0b518e661518d
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-core-file-l2-1-0.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-file-l2-1-0.dll
                                                                              • Size 16KB
                                                                              • SHA256 654e25cf12ac536bc4c5277cb6c4e6895954185c8b2d38a4c1400e51c0c67fda
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-core-localization-l1-2-0.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-localization-l1-2-0.dll
                                                                              • Size 18KB
                                                                              • SHA256 3682be1dee2b46fb9a8192e7abec25cd59e1c7e7bf6aeb0e749b2bee14114fc2
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-core-processthreads-l1-1-1.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-processthreads-l1-1-1.dll
                                                                              • Size 16KB
                                                                              • SHA256 aa7d14b1a0c9d6657b9873f5398399fc7eac4d652ea58b43a3372a65034d6944
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-core-timezone-l1-1-0.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-timezone-l1-1-0.dll
                                                                              • Size 16KB
                                                                              • SHA256 1e4c13ffa12701848612f328d6be37264b4bca84a0dbdbecdbfa1f655f322142
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-crt-convert-l1-1-0.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-convert-l1-1-0.dll
                                                                              • Size 20KB
                                                                              • SHA256 3085863d03dc5c612b7e0bc5436149592328866b2c6c112721a14f9f1df7d302
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-crt-string-l1-1-0.dll

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-string-l1-1-0.dll
                                                                              • Size 22KB
                                                                              • SHA256 7d5349def3f8b1f18647157ecc573cb72a3474d95f7aee3c739d80143da9eca5
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              quickwindow.qmltypes

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\QtQuick\Window\quickwindow.qmltypes
                                                                              • Size 215B
                                                                              • SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
                                                                              • MD5 SHA1 SHA512

                                                                              scene.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\highlight\amazingfeature\scene.config
                                                                              • Size 284B
                                                                              • SHA256 5b405fa29439f5853937c9714c794f10a01ed033f81866ba52f7f8ea5312b41e
                                                                              • MD5 SHA1 SHA512

                                                                              Transform.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\saturation\amazingfeature\Transform.lua
                                                                              • Size 743B
                                                                              • SHA256 f5ae7d270c41dc064723acb52c96339337d142f327ed98591ebb52c9518a2a78
                                                                              • MD5 SHA1 SHA512

                                                                              main.scene

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\saturation\amazingfeature\main.scene
                                                                              • Size 1KB
                                                                              • SHA256 b97663892b4a96ac2b5888965086c8e6e037e962a76f38529f8471d8b4e7dbad
                                                                              • MD5 SHA1 SHA512

                                                                              sticker.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\saturation\amazingfeature\sticker.config
                                                                              • Size 243B
                                                                              • SHA256 6f8d212c18569ba0e1c3b1bc89c8c4b2a16377d94cc26d1d78df1bb920efe379
                                                                              • MD5 SHA1 SHA512

                                                                              gles2_filter.vert

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\saturation\amazingfeature\xshader\gles2_filter.vert
                                                                              • Size 215B
                                                                              • SHA256 ff67b00d9d13e6ab219c94e61e36ad43f1e025d4e3f540f14a6ff26b1b7e8dbf
                                                                              • MD5 SHA1 SHA512

                                                                              guideFilter.vert

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\guideFilter.vert
                                                                              • Size 245B
                                                                              • SHA256 fb3e9e7a966147cc5cb48b1a087931bfbdea744a0d0e0def0f07070ba48a73cc
                                                                              • MD5 SHA1 SHA512

                                                                              fshader.vert

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\prefabs\sharp\fshader.vert
                                                                              • Size 171B
                                                                              • SHA256 eaf495d1de3a920ca4f87e5bfe868a822d1ac05ae9f8d10651d60a382ecdd1b7
                                                                              • MD5 SHA1 SHA512

                                                                              sticker.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\sticker.config
                                                                              • Size 276B
                                                                              • SHA256 c3de42b569951c70e76d4adb756b424c0ddaeaea6c1a0b61bf1935b7b7b1ee66
                                                                              • MD5 SHA1 SHA512

                                                                              sticker.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\sticker.config
                                                                              • Size 258B
                                                                              • SHA256 9c9ba3ebe0c06582ce05df7831d4754061d2ed7c7e3ad6acaaaa563f7bbf7d2f
                                                                              • MD5 SHA1 SHA512

                                                                              gles2_filter.vert

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\xshader\gles2_filter.vert
                                                                              • Size 204B
                                                                              • SHA256 add8f8c4c8e970dcdbe6ca1ab7180f7124cafc4e5dd909d8b0d7cf1734b3409e
                                                                              • MD5 SHA1 SHA512

                                                                              Transform.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\vignetting\amazingfeature\Transform.lua
                                                                              • Size 716B
                                                                              • SHA256 4e4b7c19259ebab2fbe29d179122a20584b783f12632bfc2d214d82e522c303b
                                                                              • MD5 SHA1 SHA512

                                                                              LuaRTTI.MarkGen.lua

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\LuaRTTI.MarkGen.lua
                                                                              • Size 222B
                                                                              • SHA256 cf4f8b5ff1a50eff88236aba7f9bb48e696d337b779d98e911d00f6876800503
                                                                              • MD5 SHA1 SHA512

                                                                              js-meta.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\js-meta.json
                                                                              • Size 2B
                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                              • MD5 SHA1 SHA512

                                                                              scene.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\LogWheel\log_wheel_v1\Wheel\scene.config
                                                                              • Size 363B
                                                                              • SHA256 468a132a03b8569130faf2c5d8e0f05f3f7602a336b0510534026c11a73ab460
                                                                              • MD5 SHA1 SHA512

                                                                              anim.prefab

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\anim.prefab
                                                                              • Size 477B
                                                                              • SHA256 e9d87f8022efa9374e74d61c310d8bc11a98925b8d2e771ab75e1b865164c02e
                                                                              • MD5 SHA1 SHA512

                                                                              blend.material

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\blend.material
                                                                              • Size 552B
                                                                              • SHA256 e8986f58f72446435468272d8d4e7c95a4fce58b3ad4838ed634b999196d3736
                                                                              • MD5 SHA1 SHA512

                                                                              config.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\config.json
                                                                              • Size 64B
                                                                              • SHA256 07232ba6befad39df9079b18e7c66235a11b2b375626c80cabd0b46f9b7d948f
                                                                              • MD5 SHA1 SHA512

                                                                              content.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\content.json
                                                                              • Size 65B
                                                                              • SHA256 424c068d0f0e848d3b8f25ec1a55f1086df3c87ad95eca13fe6b265c46400fc0
                                                                              • MD5 SHA1 SHA512

                                                                              blend.vert

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\xshader\blend.vert
                                                                              • Size 283B
                                                                              • SHA256 2719896bc6ff9ed2ff5532a937ac685668479e4bcd19ef11ed708cdbf52c2fd5
                                                                              • MD5 SHA1 SHA512

                                                                              blend.xshader

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\xshader\blend.xshader
                                                                              • Size 726B
                                                                              • SHA256 a1a1915919f200668689f83694e4fb7b6bba2e3ff6cc2bacc7b84d36b7c48fc0
                                                                              • MD5 SHA1 SHA512

                                                                              algorithmConfig.json

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\PrimaryWheel\primary_wheel_v0\algorithmConfig.json
                                                                              • Size 382B
                                                                              • SHA256 28251cedc501cb7285fe4c06af3714af3ec068834cc15c1ddcd913f91572ace0
                                                                              • MD5 SHA1 SHA512

                                                                              sticker.config

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\PrimaryWheel\primary_wheel_v1\Wheel\sticker.config
                                                                              • Size 276B
                                                                              • SHA256 8695d8d1cd532f86c340a46ff20f6c96f25f842d6c6f2d3c67b29e3c8d706fb0
                                                                              • MD5 SHA1 SHA512

                                                                              publish-video.efdeb61f.css

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\image_h5_material_publish\static\css\publish-video.efdeb61f.css
                                                                              • Size 10KB
                                                                              • SHA256 f8a1929af639b5381308c1bbef8f76bc1b77132b56f4bca6b1bf7d5cbdfaeaf5
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              publish-video.b44e3ef4.js

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Apps\2024929044318504_1\JYPacket\3.3.0.1161\Resources\image_h5_material_publish\static\js\publish-video.b44e3ef4.js
                                                                              • Size 39KB
                                                                              • SHA256 08488558209a47221955af71831367b2ce99a80bdc4d63c839ad17775fb35b3f
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              Configure.ini

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\Configure.ini
                                                                              • Size 28B
                                                                              • SHA256 e2b2952b674d2f65b3be4af3deb6194c65bb3985b45731e17061a0eb1ae49f2d
                                                                              • MD5 SHA1 SHA512

                                                                              channel

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\channel
                                                                              • Size 47B
                                                                              • SHA256 bbd4a0d7e01b263b4d270944c0dabb4cf7d42ec0282dbc3bbdc7a25dc49ca29e
                                                                              • MD5 SHA1 SHA512

                                                                              commonSetting.ini

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\commonSetting.ini
                                                                              • Size 28B
                                                                              • SHA256 58eedaf944b2ba382e8b4ecbe5b5cbfa628762b71b8f0e60d4a74b2d45878abd
                                                                              • MD5 SHA1 SHA512

                                                                              commonSetting.ini.lock

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\commonSetting.ini.lock
                                                                              • Size 63B
                                                                              • SHA256 3d17c4cde10a259a6fa7a8801dd3cb335048efede390098b38add411297cd4c1
                                                                              • MD5 SHA1 SHA512

                                                                              globalSetting.lock

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\globalSetting.lock
                                                                              • Size 59B
                                                                              • SHA256 62060cbe5ea2b433a2076a56e2dba6099c6a848fe6abd3581fc7dd7ebd95c5f2
                                                                              • MD5 SHA1 SHA512

                                                                              highlight_penetrate.ini.lock

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\highlight_penetrate.ini.lock
                                                                              • Size 59B
                                                                              • SHA256 c0a8d858587be5bbe8e725f1b6946f8c920f2c8c836e399bfbff9ded27b4e252
                                                                              • MD5 SHA1 SHA512

                                                                              vesdk.ini

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\vesdk.ini
                                                                              • Size 31B
                                                                              • SHA256 d266a7949f5f4cb67d3cd4622ad2dee4e8bc78bb824522e957e1103987294358
                                                                              • MD5 SHA1 SHA512

                                                                              5cc63841-daa6-4485-8f2e-12b70f16644e.dmp

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\crash_post_reports\5cc63841-daa6-4485-8f2e-12b70f16644e.dmp
                                                                              • Size 94KB
                                                                              • SHA256 651730e6926da677c20b7e97a935a92a6e05493d7bbbe6075d95b4c006929840
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\settings.dat
                                                                              • Size 40B
                                                                              • SHA256 7e4cd218fba168016f2f655c50e0255b55eef77f7be17a9177959d8f4c3fc025
                                                                              • MD5 SHA1 SHA512

                                                                              5b150a47-f5ed-4b9c-88ab-96c50fd3c703.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\TTNet\5b150a47-f5ed-4b9c-88ab-96c50fd3c703.tmp
                                                                              • Size 808B
                                                                              • SHA256 676b080af11535f07541868d8425f3040edfc75f6b1f2829a950db9695498082
                                                                              • MD5 SHA1 SHA512

                                                                              7ee98fcd-f87f-4bb0-8e3a-1ac6ab5fba81.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\CapCut\User Data\TTNet\7ee98fcd-f87f-4bb0-8e3a-1ac6ab5fba81.tmp
                                                                              • Size 851B
                                                                              • SHA256 24f431bda4dab7e50e8661e85d88c0b21bb22c7d28d58acbf509ffcac0e77fe2
                                                                              • MD5 SHA1 SHA512

                                                                              438138e5-1f09-4fea-a930-771184ec9387.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\438138e5-1f09-4fea-a930-771184ec9387.tmp
                                                                              • Size 5KB
                                                                              • SHA256 45e7239630387649095e6b7b9ed24a3a247441b69ec122dd2cc208f490c8a829
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              data_1

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1
                                                                              • Size 264KB
                                                                              • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                              • Size 4KB
                                                                              • SHA256 542cd9c9010761ae48dbb30535923d77c87a1d8602187e664258fd530bc25db3
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                              • Size 4KB
                                                                              • SHA256 1d63bb3e0a018dabf586d65605ee51ede0e199fda22f9d151af9c803f5e9b940
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                              • Size 4KB
                                                                              • SHA256 c8d86bba2dc3f7a422e6cbea6ab71096b8fcb1b7d9fa88fbb75904767e476ef5
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              000007.dbtmp

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000007.dbtmp
                                                                              • Size 16B
                                                                              • SHA256 8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
                                                                              • MD5 SHA1 SHA512

                                                                              Cab80.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\Cab80.tmp
                                                                              • Size 70KB
                                                                              • SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              TarB2.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\TarB2.tmp
                                                                              • Size 181KB
                                                                              • SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              downloader_nsis_plugin.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nskD22F.tmp\downloader_nsis_plugin.dll
                                                                              • Size 1.2MB
                                                                              • SHA256 3ef7a13886328dafba1c49ec096da122e63839ac6965bf4f3d4dcce3a35ccc6d
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              gpuSupport.ini

                                                                              • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\gpuSupport.ini
                                                                              • Size 121B
                                                                              • SHA256 7b7b8c6153f80f996c36e6f65e1b2b93f73eb88da50cd3754bfa5e6777bbd552
                                                                              • MD5 SHA1 SHA512

                                                                              ve_hw_check.ini

                                                                              • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\ve_hw_check.ini
                                                                              • Size 844B
                                                                              • SHA256 177be37eb43c4a0c944515778c41209eb2ceb43cd1034515e667e4d11d92f661
                                                                              • MD5 SHA1 SHA512

                                                                              vesdk.ini

                                                                              • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\vesdk.ini
                                                                              • Size 1KB
                                                                              • SHA256 05b604a4cf0baf0878e91e2d6523447573dbc50309b225b70b1d6f7fe3aeca90
                                                                              • MD5 SHA1 SHA512

                                                                              Unconfirmed 126900.crdownload

                                                                              • Path C:\Users\Admin\Downloads\Unconfirmed 126900.crdownload
                                                                              • Size 2.2MB
                                                                              • SHA256 aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              CapCut.exe

                                                                              • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\CapCut.exe
                                                                              • Size 225KB
                                                                              • SHA256 633d3c71ff3c8995d399bdeca109352c68921cd1caef62101ef5cf5df9a0fc4d
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              VESafeGuard.dll

                                                                              • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\VESafeGuard.dll
                                                                              • Size 276KB
                                                                              • SHA256 f82c78e8e4eb8f2a9e1b31968bb50045dce387beee101801e5fe9431f94dfb40
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-core-file-l1-2-0.dll

                                                                              • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-file-l1-2-0.dll
                                                                              • Size 16KB
                                                                              • SHA256 47e6421627c8ce16887912fe7fea89ab2e19f0119a2aa776bfb4c70323e65804
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-core-synch-l1-2-0.dll

                                                                              • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-core-synch-l1-2-0.dll
                                                                              • Size 16KB
                                                                              • SHA256 6525c24e9804a3b446e6a4dd40b62ccc79b9e372576a606ddf9645f3f3429778
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-crt-heap-l1-1-0.dll

                                                                              • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-heap-l1-1-0.dll
                                                                              • Size 17KB
                                                                              • SHA256 a1829be94d76cd982fc26e94afa8278b0a3a0199965ccc8e982d1a2b51c96909
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-crt-runtime-l1-1-0.dll

                                                                              • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-runtime-l1-1-0.dll
                                                                              • Size 20KB
                                                                              • SHA256 b09318006b088580bad4c2121078e16da3c8a64592408df9168312bc97879988
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              api-ms-win-crt-stdio-l1-1-0.dll

                                                                              • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\api-ms-win-crt-stdio-l1-1-0.dll
                                                                              • Size 22KB
                                                                              • SHA256 8d1909161541b5b6c0624c5fdcc8f497a3f6baf320bf71a1ec74b78697f243e0
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              ucrtbase.dll

                                                                              • Path \Users\Admin\AppData\Local\CapCut\3.3.0.1161\ucrtbase.dll
                                                                              • Size 998KB
                                                                              • SHA256 73f140818242bc885ff496a3306071e386bf3ec25149fdfb528f50c7e8d8f975
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              CapCut.exe

                                                                              • Path \Users\Admin\AppData\Local\CapCut\CapCut.exe
                                                                              • Size 1.5MB
                                                                              • SHA256 d12cf2bed6e91aa3f9a0ab0c87aee5493f727024efd2919aad8646aaa1b0b7d3
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              7zip.dll

                                                                              • Path \Users\Admin\AppData\Local\Temp\E9DDA433-AA83-40F3-BEA5-93BAD32DD698\7zip.dll
                                                                              • Size 751KB
                                                                              • SHA256 fe604c8747171a85f883b08fcaf32a64d59ff7c7ed89e862ad252d366ab66368
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              BgWorker.dll

                                                                              • Path \Users\Admin\AppData\Local\Temp\nskD22F.tmp\BgWorker.dll
                                                                              • Size 2KB
                                                                              • SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
                                                                              • MD5 SHA1 SHA512

                                                                              System.dll

                                                                              • Path \Users\Admin\AppData\Local\Temp\nskD22F.tmp\System.dll
                                                                              • Size 12KB
                                                                              • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              deviceregister_shared.dll

                                                                              • Path \Users\Admin\AppData\Local\Temp\nskD22F.tmp\deviceregister_shared.dll
                                                                              • Size 226KB
                                                                              • SHA256 7c2a74c4be8d524a121e78e763c05c7b5cb58b524119ac8897c493e717a1d42a
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              shell_downloader.dll

                                                                              • Path \Users\Admin\AppData\Local\Temp\nskD22F.tmp\shell_downloader.dll
                                                                              • Size 2.2MB
                                                                              • SHA256 0c4abb66d9a69c80cfaa0eb3c988d4dc40d989843a87e95ed3cc6e75dae31559
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              memory/1108-6527-0x0000000000100000-0x000000000010A000-memory.dmp

                                                                              memory/1108-6535-0x0000000000100000-0x000000000010A000-memory.dmp

                                                                              memory/1696-6308-0x00000000036C0000-0x00000000036CA000-memory.dmp

                                                                              memory/1696-6309-0x00000000036C0000-0x00000000036CA000-memory.dmp

                                                                              memory/1696-6122-0x00000000374A0000-0x00000000374B0000-memory.dmp

                                                                              memory/1696-6123-0x00000000374A0000-0x00000000374B0000-memory.dmp

                                                                              memory/2148-6529-0x00000000020F0000-0x00000000020FA000-memory.dmp

                                                                              memory/2148-6381-0x00000000020F0000-0x00000000020FA000-memory.dmp

                                                                              memory/2148-6341-0x000007FEF20C0000-0x000007FEF2669000-memory.dmp

                                                                              memory/2148-6379-0x000007FEF3470000-0x000007FEF391B000-memory.dmp

                                                                              memory/2148-6380-0x00000000020F0000-0x00000000020FA000-memory.dmp

                                                                              memory/2148-6528-0x00000000020F0000-0x00000000020FA000-memory.dmp

                                                                              memory/2148-6391-0x00000000025D0000-0x00000000025D1000-memory.dmp

                                                                              memory/2148-6390-0x000007FEEC0C0000-0x000007FEECB19000-memory.dmp

                                                                              memory/2616-6580-0x0000000000520000-0x000000000052A000-memory.dmp

                                                                              memory/2616-6579-0x0000000000520000-0x000000000052A000-memory.dmp

                                                                              memory/2932-6787-0x0000000005800000-0x000000000580A000-memory.dmp

                                                                              memory/2932-6799-0x00000000058B0000-0x00000000058B1000-memory.dmp

                                                                              memory/2932-7165-0x0000000005800000-0x000000000580A000-memory.dmp

                                                                              memory/2932-7167-0x0000000005800000-0x000000000580A000-memory.dmp

                                                                              memory/2932-6789-0x00000000058B0000-0x00000000058B1000-memory.dmp

                                                                              memory/2932-6629-0x0000000000160000-0x0000000000161000-memory.dmp

                                                                              memory/2932-6628-0x00000000374A0000-0x00000000374B0000-memory.dmp

                                                                              memory/2932-6627-0x00000000374A0000-0x00000000374B0000-memory.dmp