CapCut[.]exe | Triage™

Resubmissions

04/06/2026, 05:44

260604-gfk3asbt2p

04/06/2026, 05:44

260604-gfd9rabt2j1

Sharing

Copy URL Twitter E-mail

General

Target
CapCut.exe
Size 4.7MB
Sample260604-gfk3asbt2p
SHA256 aaa072b211b33214251f202097f231cd26b7450b21376029771b6c84271620c1
MD5 2ae6c9b9ae3aeb527f48c9229f010e4d
SHA1 1f2e649600181d4f284a2e75d5e2ea5889e22d64
SHA512 e1a63eff1b9d2d7c8f88cd33f7790a5908ab7276e47e9f6102ce326d432b7bee433401503b1ede9f3b4811926577e14d7563f6f99477f9772cc9fc221e7d5ed1
SSDEEP 49152:ZN+zKli0YRjpI5e1hMQVPL9dBpF0q/POariWYzvn/a63mhBHAP5MKppx22dphCbQ:Z6Sg1/qSgsK5MoueRPv
TLSH
T18436060633F81388E1F7967C96B65716CA76BC198B21C7CF0160915E1E33AE58D7AB32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

CapCut.exe

.exe 4.7MB

CapCut.exe

IMPHASH 4d97d0e7157161f3b7d8a1765dd13a5e
SHA256 aaa072b211b33214251f202097f231cd26b7450b21376029771b6c84271620c1
MD5 2ae6c9b9ae3aeb527f48c9229f010e4d
SHA1 1f2e649600181d4f284a2e75d5e2ea5889e22d64
SHA512 e1a63eff1b9d2d7c8f88cd33f7790a5908ab7276e47e9f6102ce326d432b7bee433401503b1ede9f3b4811926577e14d7563f6f99477f9772cc9fc221e7d5ed1
SSDEEP 49152:ZN+zKli0YRjpI5e1hMQVPL9dBpF0q/POariWYzvn/a63mhBHAP5MKppx22dphCbQ:Z6Sg1/qSgsK5MoueRPv
TLSH
T18436060633F81388E1F7967C96B65716CA76BC198B21C7CF0160915E1E33AE58D7AB32
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

b3:28:2a:1c:71:03:92:bf:9a:55:5b:c7:12:dc:12:3e:4c:c2:16:27:80:13:e0:93:db:e2:a0:9f:85:7a:c9:53

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Chains

Apr 15, 2026

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Serial Number

0f:76:a4:51:32:93:8a:47:f6:53:2f:ea:5b:22:10:0d

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 8, 2025 - Aug 7, 2028

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

26476

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\76724\LVInstaller\VideofusionInstaller\src\JIanyingInstaller\x64\CC_RELEASE\JianyingLauncher.pdb

dbghelp

SymCleanup SymFunctionTableAccess64 SymGetModuleBase64 SymSetOptions SymInitialize SymGetSearchPathW SymSetSearchPathW SymFromAddr SymGetLineFromAddr64 StackWalk64

propsys

InitPropVariantFromCLSID

ws2_32

ioctlsocket

setupapi

CM_Get_Device_IDW SetupDiEnumDeviceInfo SetupDiGetClassDevsW

winmm

timeEndPeriod timeGetTime timeBeginPeriod

kernel32

WaitForSingleObject OpenProcess GetWindowsDirectoryW FreeLibrary LoadLibraryW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentProcess GetCurrentThread GetCurrentDirectoryW LocalFileTimeToFileTime SetFilePointer SetFileTime SystemTimeToFileTime DecodePointer InitializeCriticalSectionEx DeleteCriticalSection GetFileInformationByHandle GetLocalTime GetTickCount CreateFileMappingW MapViewOfFile UnmapViewOfFile FileTimeToSystemTime ProcessIdToSessionId GetCommandLineW GetEnvironmentVariableW CreateFileA GetDiskFreeSpaceExW GetVolumeInformationW QueryDosDeviceW GetTempPathW GetCurrentProcessId TerminateProcess GetExitCodeProcess CreateProcessW GetVersion GetSystemDirectoryW LocalAlloc lstrcmpW BeginUpdateResourceW UpdateResourceW EndUpdateResourceW CopyFileW MoveFileExW WTSGetActiveConsoleSessionId InitializeCriticalSection EnterCriticalSection LeaveCriticalSection SetEvent ResetEvent CreateEventW CreateThread MoveFileW SetEnvironmentVariableW InitializeCriticalSectionAndSpinCount Sleep OpenMutexA GetCurrentThreadId K32EnumProcessModules SetCurrentDirectoryW GetFileAttributesExW GetFinalPathNameByHandleW GetLogicalDriveStringsW GetVolumePathNameW DuplicateHandle GetModuleHandleA ReplaceFileW CreateHardLinkW FindFirstFileExW GetProcessId OutputDebugStringA FormatMessageA LoadLibraryExW GetModuleHandleExW GetNativeSystemInfo GetProductInfo IsWow64Process ReleaseSRWLockExclusive TryAcquireSRWLockExclusive QueryPerformanceCounter QueryPerformanceFrequency SetThreadPriority GetThreadPriority GetSystemTimeAsFileTime GetProcAddress SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime GetVersionExW GetFileSizeEx LockFileEx SetEndOfFile SetFileInformationByHandle SetFilePointerEx UnlockFileEx UnregisterWaitEx RegisterWaitForSingleObject IsDebuggerPresent GetThreadId GetUserDefaultLangID AcquireSRWLockExclusive lstrcmpiA GlobalMemoryStatusEx WaitForMultipleObjects TlsGetValue VirtualAlloc VirtualFree FlushViewOfFile VirtualQuery GetProcessTimes SetPriorityClass GetPriorityClass HeapSetInformation GetSystemInfo GetProcessIoCounters K32GetPerformanceInfo CreateThreadpool SetThreadpoolThreadMaximum SetThreadpoolThreadMinimum CloseThreadpool CallbackMayRunLong CreateThreadpoolWork SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks CloseThreadpoolWork TlsSetValue TlsAlloc TlsFree RtlCaptureStackBackTrace SetUnhandledExceptionFilter VerSetConditionMask VerifyVersionInfoW InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus SetInformationJobObject GetModuleHandleExA InitializeSRWLock ReleaseSRWLockShared AcquireSRWLockShared InitOnceExecuteOnce RtlVirtualUnwind VirtualProtect LoadLibraryExA OutputDebugStringW WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetTickCount64 GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW SleepConditionVariableCS FlsFree FlsSetValue FlsGetValue FlsAlloc LCMapStringEx EncodePointer TryEnterCriticalSection InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter RtlLookupFunctionEntry RtlCaptureContext WaitForSingleObjectEx LocalFree QueryThreadCycleTime GetStringTypeW CompareStringEx GetCPInfo RtlPcToFileHeader RtlUnwindEx GetModuleHandleW SetLastError DeviceIoControl GetDateFormatW SetFileAttributesW GetLongPathNameW GetFullPathNameW ExpandEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar CloseHandle WriteFile ReadFile GetFileSize CreateFileW FindResourceW SizeofResource LockResource LoadResource GetModuleFileNameW FindResourceExW GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException RemoveDirectoryW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CreateDirectoryW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait IsValidLocale GetUserDefaultLCID GetFileInformationByHandleEx CreateSymbolicLinkW EnumSystemLocalesW ReadConsoleW GetDriveTypeW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW FlushFileBuffers WriteConsoleW GetStdHandle ExitProcess GetConsoleMode GetConsoleOutputCP GetFileType SetStdHandle SetConsoleCtrlHandler InterlockedFlushSList InterlockedPushEntrySList RtlUnwind GetLocaleInfoEx

user32

SetTimer GetQueueStatus PostQuitMessage MsgWaitForMultipleObjectsEx PeekMessageW DefWindowProcW TranslateMessage CharUpperW SetProcessDPIAware RemovePropW SetPropW GetSystemMetrics GetUserObjectInformationW GetThreadDesktop GetWindowThreadProcessId GetClassNameW EnumWindows GetWindowLongW GetWindowTextLengthW GetWindowTextW PostMessageW ExitWindowsEx UnregisterClassW GetDesktopWindow GetDC RegisterClassExW CreateWindowExW DestroyWindow GetWindowLongPtrW SetWindowLongPtrW FindWindowExW KillTimer DispatchMessageW

advapi32

GetSidSubAuthorityCount SystemFunction036 RegNotifyChangeKeyValue RegEnumValueW RegDeleteValueW ConvertSidToStringSidW RegQueryInfoKeyW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegOpenKeyW RegEnumKeyExW RegDeleteKeyExW RegCreateKeyExW RegOpenCurrentUser RegCloseKey SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl MapGenericMask IsValidSecurityDescriptor InitializeSecurityDescriptor ImpersonateLoggedOnUser GetFileSecurityW FreeSid EqualSid DuplicateToken AllocateAndInitializeSid AddAccessAllowedAce AccessCheck LookupPrivilegeValueW RevertToSelf ImpersonateSelf AdjustTokenPrivileges OpenThreadToken SetThreadToken ConvertStringSidToSidW LookupAccountSidW SetTokenInformation GetTokenInformation DuplicateTokenEx OpenProcessToken CreateProcessAsUserW SetNamedSecurityInfoW GetNamedSecurityInfoW IsValidSid InitializeSid InitializeAcl GetSidSubAuthority GetSidLengthRequired GetLengthSid GetAclInformation GetAce CopySid AddAce

ole32

CoInitialize CoRevokeInitializeSpy CoRegisterInitializeSpy CoTaskMemFree CoTaskMemAlloc CoCreateInstance CoUninitialize CoInitializeEx PropVariantClear

shell32

CommandLineToArgvW SHGetKnownFolderPath ShellExecuteExW SHGetFolderPathW SHGetFolderPathA SHGetSpecialFolderPathW

oleaut32

VariantClear SysStringLen SysAllocString SysFreeString

shlwapi

StrToIntW ord437 PathMatchSpecW ord176 SHSetValueW StrChrW StrCmpNW StrCmpNIW StrRChrW StrCmpIW StrCpyNW SHGetValueW PathAppendW PathRemoveFileSpecW PathIsDirectoryW PathGetDriveNumberW PathFindExtensionW PathAddBackslashW PathFileExistsW

gdi32

DeleteObject GetDeviceCaps

userenv

CreateEnvironmentBlock UnloadUserProfile LoadUserProfileW DestroyEnvironmentBlock

mpr

WNetGetResourceInformationW

psapi

EnumProcessModules GetModuleFileNameExW EnumProcesses GetProcessImageFileNameW

iphlpapi

GetAdaptersAddresses

??0MemoryAllocatorDumpGuid@trace_event@base@@QEAA@_K@Z ??0ReadOnlySharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0ReadOnlySharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0ReadOnlySharedMemoryRegion@base@@QEAA@XZ ??0UnsafeSharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0UnsafeSharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0UnsafeSharedMemoryRegion@base@@QEAA@XZ ??0WritableSharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0WritableSharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0WritableSharedMemoryRegion@base@@QEAA@XZ ??1ReadOnlySharedMemoryRegion@base@@QEAA@XZ ??1UnsafeSharedMemoryRegion@base@@QEAA@XZ ??1WritableSharedMemoryRegion@base@@QEAA@XZ ??4MemoryAllocatorDumpGuid@trace_event@base@@QEAAAEAV012@$$QEAV012@@Z ??4MemoryAllocatorDumpGuid@trace_event@base@@QEAAAEAV012@AEBV012@@Z ??4ReadOnlySharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??4UnsafeSharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??4WritableSharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??8MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ??9MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ??MMemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ?ConvertToReadOnly@WritableSharedMemoryRegion@base@@SA?AVReadOnlySharedMemoryRegion@2@V12@@Z ?ConvertToUnsafe@WritableSharedMemoryRegion@base@@SA?AVUnsafeSharedMemoryRegion@2@V12@@Z ?Create@ReadOnlySharedMemoryRegion@base@@SA?AUMappedReadOnlyRegion@2@_K@Z ?Create@UnsafeSharedMemoryRegion@base@@SA?AV12@_K@Z ?Create@WritableSharedMemoryRegion@base@@SA?AV12@_K@Z ?Deserialize@ReadOnlySharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Deserialize@UnsafeSharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Deserialize@WritableSharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Duplicate@ReadOnlySharedMemoryRegion@base@@QEBA?AV12@XZ ?Duplicate@UnsafeSharedMemoryRegion@base@@QEBA?AV12@XZ ?GetGUID@ReadOnlySharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetGUID@UnsafeSharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetGUID@WritableSharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetPlatformHandle@ReadOnlySharedMemoryRegion@base@@QEBAPEAXXZ ?GetPlatformHandle@UnsafeSharedMemoryRegion@base@@QEBAPEAXXZ ?GetSize@ReadOnlySharedMemoryRegion@base@@QEBA_KXZ ?GetSize@UnsafeSharedMemoryRegion@base@@QEBA_KXZ ?GetSize@WritableSharedMemoryRegion@base@@QEBA_KXZ ?IsValid@ReadOnlySharedMemoryRegion@base@@QEBA_NXZ ?IsValid@UnsafeSharedMemoryRegion@base@@QEBA_NXZ ?IsValid@WritableSharedMemoryRegion@base@@QEBA_NXZ ?Map@ReadOnlySharedMemoryRegion@base@@QEBA?AVReadOnlySharedMemoryMapping@2@XZ ?Map@UnsafeSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@XZ ?Map@WritableSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@XZ ?MapAt@ReadOnlySharedMemoryRegion@base@@QEBA?AVReadOnlySharedMemoryMapping@2@J_K@Z ?MapAt@UnsafeSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@J_K@Z ?MapAt@WritableSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@J_K@Z ?TakeHandleForSerialization@ReadOnlySharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?TakeHandleForSerialization@UnsafeSharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?TakeHandleForSerialization@WritableSharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?ThrowBadVariantAccess@variant_internal@absl@@YAXXZ ?ToUint64@MemoryAllocatorDumpGuid@trace_event@base@@QEBA_KXZ ?UnsafeGetPlatformHandle@WritableSharedMemoryRegion@base@@QEBAPEAXXZ ?create_hook_@ReadOnlySharedMemoryRegion@base@@0P6A?AUMappedReadOnlyRegion@2@_K@ZEA ?create_hook_@UnsafeSharedMemoryRegion@base@@0P6A?AV12@_K@ZEA ?create_hook_@WritableSharedMemoryRegion@base@@0P6A?AV12@_K@ZEA ?empty@MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NXZ ?g_swallow_stream@logging@@3PEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@EA ?kDisableBestEffortTasks@switches@@3QBDB ?kDisableBreakpad@switches@@3QBDB ?kDisableFeatures@switches@@3QBDB ?kDisableHighResTimer@switches@@3QBDB ?kDisableLowEndDeviceMode@switches@@3QBDB ?kDisableUsbKeyboardDetect@switches@@3QBDB ?kEnableBackgroundThreadPool@switches@@3QBDB ?kEnableCrashReporter@switches@@3QBDB ?kEnableFeatures@switches@@3QBDB ?kEnableLowEndDeviceMode@switches@@3QBDB ?kForceFieldTrials@switches@@3QBDB ?kFullMemoryCrashReport@switches@@3QBDB ?kLogBestEffortTasks@switches@@3QBDB ?kNoErrorDialogs@switches@@3QBDB ?kProfilingAtStart@switches@@3QBDB ?kProfilingFile@switches@@3QBDB ?kProfilingFlush@switches@@3QBDB ?kTestChildProcess@switches@@3QBDB ?kTestDoNotInitializeIcu@switches@@3QBDB ?kTraceToFile@switches@@3QBDB ?kTraceToFileName@switches@@3QBDB ?kV@switches@@3QBDB ?kVModule@switches@@3QBDB ?kWaitForDebugger@switches@@3QBDB ?set_create_hook@ReadOnlySharedMemoryRegion@base@@CAXP6A?AUMappedReadOnlyRegion@2@_K@Z@Z ?set_create_hook@UnsafeSharedMemoryRegion@base@@CAXP6A?AV12@_K@Z@Z ?set_create_hook@WritableSharedMemoryRegion@base@@CAXP6A?AV12@_K@Z@Z ?throw_bad_optional_access@optional_internal@absl@@YAXXZ GetHandleVerifier

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

68KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

159KB

Virtual Size

159KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

minATL

Size

1024B

Virtual Size

809B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

337B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

1024B

Virtual Size

546B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

134KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

CapCut.exe

dbghelp

propsys

ws2_32

setupapi

winmm

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

gdi32

userenv

mpr

psapi

iphlpapi

generic