Analysis

  • user interaction
    yes
  • max time kernel
    600s
  • max time network
    632s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/07/2026, 15:06

General

  • Target
    CapCut.7z
  • Size 555.8MB
  • Sample260727-sgspbawsgx
  • SHA256 57469fb10952aab5dd23df2807329eec4c407a589384147cb180fb89469c55b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Drops desktop.ini file(s) 2 IoCs
  • Looks up external IP address via web service 1 TTPs 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of NtCreateThreadExHideFromDebugger 23 IoCs
  • Drops file in Windows directory 57 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 5 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 20 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 34 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 4 IoCs
  • Modifies registry class 8 IoCs
  • Modifies system certificate store 2 TTPs 8 IoCs
  • Suspicious behavior: AddClipboardFormatListener 22 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 31 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\CapCut.7z"
    1⤵
    • Drops desktop.ini file(s)
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:2416
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:936
    • C:\Users\Admin\Desktop\CapCut\CapCutPort.exe
      "C:\Users\Admin\Desktop\CapCut\CapCutPort.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:2448
      • C:\Windows\SYSTEM32\cmd.exe
        cmd /c mklink /J "C:\Users\Admin\AppData\Local\CapCut" "C:\Users\Admin\Desktop\CapCut\Data"
        2⤵
        • Executes a command shell one-liner
        PID:3560
      • C:\Users\Admin\Desktop\CapCut\App\CapCut\CapCut.exe
        "C:\Users\Admin\Desktop\CapCut\App\CapCut\CapCut.exe"
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5016
        • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
          "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of NtCreateThreadExHideFromDebugger
          • Checks processor information in registry
          • Modifies system certificate store
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:768
          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
            "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2528 --field-trial-handle=2696,i,9980801137639236607,14802153978714267859,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
            4⤵
            • Executes dropped EXE
            • Suspicious use of NtCreateThreadExHideFromDebugger
            • Suspicious behavior: EnumeratesProcesses
            PID:4824
          • C:\Windows\System32\cmd.exe
            C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
            4⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:3908
            • C:\Windows\System32\Wbem\WMIC.exe
              wmic csproduct get Name,UUID /value
              5⤵
              • Suspicious use of AdjustPrivilegeToken
              PID:3328
          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe
            C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=6 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=768 "--annotation=os_version=Windows NT 10.0.19041" --annotation=parfait_version=1.5.3.8 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/Desktop/CapCut/App/CapCut/4.3.0.1694/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0xc48,0xc4c,0xc40,0x1014,0x1144,0x7ff9cd1aa410,0x7ff9cd1aa428,0x7ff9cd1aa440
            4⤵
            • Executes dropped EXE
            PID:1200
          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
            "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=5068 --field-trial-handle=2696,i,9980801137639236607,14802153978714267859,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
            4⤵
            • Executes dropped EXE
            • Suspicious use of NtCreateThreadExHideFromDebugger
            • Suspicious behavior: EnumeratesProcesses
            PID:2876
          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
            C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe -detect_qt_render
            4⤵
            • Executes dropped EXE
            • Suspicious behavior: AddClipboardFormatListener
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:1888
            • C:\Windows\System32\cmd.exe
              C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
              5⤵
              • Executes a command shell one-liner
              • Suspicious use of WriteProcessMemory
              PID:4256
              • C:\Windows\System32\Wbem\WMIC.exe
                wmic csproduct get Name,UUID /value
                6⤵
                • Suspicious use of AdjustPrivilegeToken
                PID:1032
            • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
              C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe /launch=detector
              5⤵
              • Executes dropped EXE
              • Suspicious use of NtCreateThreadExHideFromDebugger
              • Checks processor information in registry
              • Suspicious behavior: AddClipboardFormatListener
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of WriteProcessMemory
              PID:1628
              • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2448 --field-trial-handle=2628,i,16393027907147303605,13471334026658471555,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                6⤵
                • Executes dropped EXE
                • Suspicious use of NtCreateThreadExHideFromDebugger
                • Suspicious behavior: EnumeratesProcesses
                PID:3084
              • C:\Windows\System32\cmd.exe
                C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                6⤵
                • Executes a command shell one-liner
                • Suspicious use of WriteProcessMemory
                PID:5040
                • C:\Windows\System32\Wbem\WMIC.exe
                  wmic csproduct get Name,UUID /value
                  7⤵
                    PID:4344
                • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe
                  C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=6 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=1628 "--annotation=os_version=Windows NT 10.0.19041" --annotation=parfait_version=1.5.3.8 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/Desktop/CapCut/App/CapCut/4.3.0.1694/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0xf38,0xf28,0xf2c,0x1050,0xfe0,0x7ff9ddbba410,0x7ff9ddbba428,0x7ff9ddbba440
                  6⤵
                  • Executes dropped EXE
                  PID:4996
                • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                  C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                  6⤵
                  • Executes dropped EXE
                  • Checks processor information in registry
                  • Suspicious behavior: AddClipboardFormatListener
                  • Suspicious use of WriteProcessMemory
                  PID:4896
                  • C:\Windows\System32\cmd.exe
                    C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                    7⤵
                    • Executes a command shell one-liner
                    • Suspicious use of WriteProcessMemory
                    PID:2440
                    • C:\Windows\System32\Wbem\WMIC.exe
                      wmic csproduct get Name,UUID /value
                      8⤵
                        PID:4184
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" driverinfo
                      7⤵
                      • Executes dropped EXE
                      PID:4324
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" cuda
                      7⤵
                      • Executes dropped EXE
                      PID:868
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" cuvid
                      7⤵
                      • Executes dropped EXE
                      PID:4540
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" nv_enc
                      7⤵
                      • Executes dropped EXE
                      PID:4752
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" qsv
                      7⤵
                      • Executes dropped EXE
                      PID:3224
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" qsv_enc
                      7⤵
                      • Executes dropped EXE
                      PID:1788
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" qsv_enc_hw
                      7⤵
                      • Executes dropped EXE
                      PID:4580
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" amf_enc
                      7⤵
                      • Executes dropped EXE
                      PID:4156
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" getCreateLensSuc
                      7⤵
                      • Executes dropped EXE
                      PID:4560
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_nvenc
                      7⤵
                      • Executes dropped EXE
                      PID:1816
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_nvenc_hevc_alpha
                      7⤵
                      • Executes dropped EXE
                      PID:2956
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_nvenc_av1
                      7⤵
                      • Executes dropped EXE
                      PID:3328
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_qsvenc
                      7⤵
                      • Executes dropped EXE
                      PID:400
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_qsvenc_av1
                      7⤵
                      • Executes dropped EXE
                      PID:2712
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" oneVPL
                      7⤵
                      • Executes dropped EXE
                      PID:4772
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" mt_enc
                      7⤵
                      • Executes dropped EXE
                      PID:3140
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_hw_support
                      7⤵
                      • Executes dropped EXE
                      • Suspicious behavior: AddClipboardFormatListener
                      PID:2800
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_sw_support
                      7⤵
                      • Executes dropped EXE
                      • Suspicious behavior: AddClipboardFormatListener
                      • Suspicious use of SetWindowsHookEx
                      PID:2760
                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                      C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe /launch=detector
                      7⤵
                      • Executes dropped EXE
                      • Suspicious use of NtCreateThreadExHideFromDebugger
                      • Checks processor information in registry
                      • Suspicious behavior: AddClipboardFormatListener
                      • Suspicious use of WriteProcessMemory
                      PID:2840
                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2368 --field-trial-handle=2576,i,8489590242956001857,2177517809493263014,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                        8⤵
                        • Executes dropped EXE
                        • Suspicious use of NtCreateThreadExHideFromDebugger
                        PID:3772
                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe
                        C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=7 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=2840 "--annotation=os_version=Windows NT 10.0.19041" --annotation=parfait_version=1.5.3.8 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/Desktop/CapCut/App/CapCut/4.3.0.1694/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0x10c8,0x10cc,0x10d0,0x103c,0x10e8,0x7ff9ddbba410,0x7ff9ddbba428,0x7ff9ddbba440
                        8⤵
                        • Executes dropped EXE
                        PID:4136
                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2908 --field-trial-handle=2576,i,8489590242956001857,2177517809493263014,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
                        8⤵
                        • Executes dropped EXE
                        • Suspicious use of NtCreateThreadExHideFromDebugger
                        PID:2812
                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                        C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe -detect_qt_render
                        8⤵
                        • Executes dropped EXE
                        • Checks processor information in registry
                        • Suspicious behavior: AddClipboardFormatListener
                        • Suspicious use of WriteProcessMemory
                        PID:2428
                        • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                          "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_hw_support
                          9⤵
                          • Executes dropped EXE
                          • Suspicious behavior: AddClipboardFormatListener
                          PID:4348
                        • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                          "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_sw_support
                          9⤵
                          • Executes dropped EXE
                          • Suspicious behavior: AddClipboardFormatListener
                          • Suspicious use of SetWindowsHookEx
                          PID:3044
                        • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                          C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe /launch=detector
                          9⤵
                          • Executes dropped EXE
                          • Suspicious use of NtCreateThreadExHideFromDebugger
                          • Checks processor information in registry
                          • Suspicious behavior: AddClipboardFormatListener
                          • Suspicious use of WriteProcessMemory
                          PID:2972
                          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                            "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2404 --field-trial-handle=2592,i,657092684922888892,3512103435912793622,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                            10⤵
                            • Executes dropped EXE
                            • Suspicious use of NtCreateThreadExHideFromDebugger
                            PID:3992
                          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe
                            C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=7 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=2972 "--annotation=os_version=Windows NT 10.0.19041" --annotation=parfait_version=1.5.3.8 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/Desktop/CapCut/App/CapCut/4.3.0.1694/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0x1168,0x116c,0x1170,0x100c,0x118c,0x7ff9e998a410,0x7ff9e998a428,0x7ff9e998a440
                            10⤵
                            • Executes dropped EXE
                            PID:4072
                          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                            "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2944 --field-trial-handle=2592,i,657092684922888892,3512103435912793622,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
                            10⤵
                            • Executes dropped EXE
                            • Suspicious use of NtCreateThreadExHideFromDebugger
                            PID:1860
                          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                            C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe -detect_qt_render
                            10⤵
                            • Executes dropped EXE
                            • Checks processor information in registry
                            • Suspicious behavior: AddClipboardFormatListener
                            • Suspicious use of WriteProcessMemory
                            PID:4196
                            • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                              "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_hw_support
                              11⤵
                              • Executes dropped EXE
                              • Suspicious behavior: AddClipboardFormatListener
                              PID:1032
                            • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                              "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_sw_support
                              11⤵
                              • Executes dropped EXE
                              • Suspicious behavior: AddClipboardFormatListener
                              • Suspicious use of SetWindowsHookEx
                              PID:4960
                            • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                              C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe /launch=detector
                              11⤵
                              • Executes dropped EXE
                              • Suspicious use of NtCreateThreadExHideFromDebugger
                              • Checks processor information in registry
                              • Suspicious behavior: AddClipboardFormatListener
                              • Suspicious use of WriteProcessMemory
                              PID:3776
                              • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2448 --field-trial-handle=2564,i,17721395528803056747,3190582566235052077,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                                12⤵
                                • Executes dropped EXE
                                • Suspicious use of NtCreateThreadExHideFromDebugger
                                PID:4948
                              • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe
                                C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=7 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=3776 "--annotation=os_version=Windows NT 10.0.19041" --annotation=parfait_version=1.5.3.8 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/Desktop/CapCut/App/CapCut/4.3.0.1694/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0x10f8,0x10fc,0x1100,0x104c,0x1118,0x7ff9e998a410,0x7ff9e998a428,0x7ff9e998a440
                                12⤵
                                • Executes dropped EXE
                                PID:2796
                              • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2620 --field-trial-handle=2564,i,17721395528803056747,3190582566235052077,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
                                12⤵
                                • Executes dropped EXE
                                • Suspicious use of NtCreateThreadExHideFromDebugger
                                PID:4596
                              • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                                C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe -detect_qt_render
                                12⤵
                                • Executes dropped EXE
                                • Checks processor information in registry
                                • Suspicious behavior: AddClipboardFormatListener
                                • Suspicious use of WriteProcessMemory
                                PID:5048
                                • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                                  "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_hw_support
                                  13⤵
                                  • Executes dropped EXE
                                  • Suspicious behavior: AddClipboardFormatListener
                                  PID:808
                                • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                                  "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_sw_support
                                  13⤵
                                  • Executes dropped EXE
                                  • Suspicious behavior: AddClipboardFormatListener
                                  • Suspicious use of SetWindowsHookEx
                                  PID:2416
                                • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                  C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe /launch=detector
                                  13⤵
                                  • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                  • Checks computer location settings
                                  • Executes dropped EXE
                                  • Suspicious use of NtCreateThreadExHideFromDebugger
                                  • Checks processor information in registry
                                  • Enumerates system info in registry
                                  • Modifies registry class
                                  • Suspicious behavior: AddClipboardFormatListener
                                  • Suspicious behavior: GetForegroundWindowSpam
                                  • Suspicious use of FindShellTrayWindow
                                  • Suspicious use of SetWindowsHookEx
                                  • Suspicious use of WriteProcessMemory
                                  PID:1584
                                  • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                    "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=gpu-process --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2452 --field-trial-handle=2584,i,11186927755569881380,1146341875358416494,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                                    14⤵
                                    • Executes dropped EXE
                                    • Suspicious use of NtCreateThreadExHideFromDebugger
                                    PID:868
                                  • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe
                                    C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=crop_type=7 --annotation=enable_crash_event=true --annotation=execute-if-childprocess-crash=true --annotation=is_debug=false --annotation=main_pid=1584 "--annotation=os_version=Windows NT 10.0.19041" --annotation=parfait_version=1.5.3.8 "--annotation=posthandler-copy-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash/crash_post_reports" --annotation=posthandler-process-path=C:/Users/Admin/Desktop/CapCut/App/CapCut/4.3.0.1694/VECrashHandler.exe --annotation=posthandler-wait-result=true --annotation=posthandler-wait-timeout=120 --initial-client-data=0x113c,0x1140,0x1144,0x1034,0x1160,0x7ff9e998a410,0x7ff9e998a428,0x7ff9e998a440
                                    14⤵
                                    • Executes dropped EXE
                                    PID:4200
                                  • C:\Windows\system32\wbem\wmic.exe
                                    C:\Windows\system32\wbem\wmic.exe diskdrive where index=0 get serialnumber
                                    14⤵
                                      PID:3956
                                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                                      C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe -detect_simulate_check
                                      14⤵
                                      • Executes dropped EXE
                                      • Checks processor information in registry
                                      • Suspicious behavior: AddClipboardFormatListener
                                      PID:1968
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" driverinfo
                                        15⤵
                                          PID:5524
                                        • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                                          "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_hw_support
                                          15⤵
                                          • Suspicious behavior: AddClipboardFormatListener
                                          PID:6388
                                        • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe
                                          "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEDetector.exe" -cmd_qt6render_dx_sw_support
                                          15⤵
                                          • Suspicious behavior: AddClipboardFormatListener
                                          • Suspicious use of SetWindowsHookEx
                                          PID:6576
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=5976 --field-trial-handle=2584,i,11186927755569881380,1146341875358416494,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
                                        14⤵
                                        • Executes dropped EXE
                                        • Suspicious use of NtCreateThreadExHideFromDebugger
                                        PID:3416
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=5288 --field-trial-handle=2584,i,11186927755569881380,1146341875358416494,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
                                        14⤵
                                        • Executes dropped EXE
                                        • Suspicious use of NtCreateThreadExHideFromDebugger
                                        PID:4772
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=renderer --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --first-renderer-process --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=6972 --field-trial-handle=2584,i,11186927755569881380,1146341875358416494,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
                                        14⤵
                                        • Checks computer location settings
                                        • Suspicious use of NtCreateThreadExHideFromDebugger
                                        PID:3540
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=renderer --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=6980 --field-trial-handle=2584,i,11186927755569881380,1146341875358416494,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
                                        14⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • Suspicious use of NtCreateThreadExHideFromDebugger
                                        PID:2168
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" driverinfo
                                        14⤵
                                        • Executes dropped EXE
                                        PID:3804
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" cuda
                                        14⤵
                                        • Executes dropped EXE
                                        PID:5236
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" cuvid
                                        14⤵
                                        • Executes dropped EXE
                                        PID:5260
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" nv_enc
                                        14⤵
                                        • Executes dropped EXE
                                        PID:5264
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" qsv
                                        14⤵
                                        • Executes dropped EXE
                                        PID:5276
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" qsv_enc
                                        14⤵
                                        • Executes dropped EXE
                                        PID:5280
                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" qsv_enc_hw
                                        14⤵
                                          PID:5292
                                        • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                          "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" amf_enc
                                          14⤵
                                            PID:5300
                                          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                            "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" getCreateLensSuc
                                            14⤵
                                              PID:5308
                                            • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                              "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_nvenc
                                              14⤵
                                                PID:5316
                                              • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                                "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_nvenc_hevc_alpha
                                                14⤵
                                                  PID:5324
                                                • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                                  "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_nvenc_av1
                                                  14⤵
                                                    PID:5332
                                                  • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                                    "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_qsvenc
                                                    14⤵
                                                      PID:5344
                                                    • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                                      "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" new_qsvenc_av1
                                                      14⤵
                                                        PID:5360
                                                      • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                                        "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" oneVPL
                                                        14⤵
                                                          PID:5368
                                                        • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe
                                                          "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ttdaemon.exe" mt_enc
                                                          14⤵
                                                            PID:5396
                                                          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                                            "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=renderer --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --disable-gpu-compositing --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=8948 --field-trial-handle=2584,i,11186927755569881380,1146341875358416494,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
                                                            14⤵
                                                            • Checks computer location settings
                                                            • Suspicious use of NtCreateThreadExHideFromDebugger
                                                            PID:6336
                                                          • C:\Windows\system32\mmc.exe
                                                            "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
                                                            14⤵
                                                            • Drops file in System32 directory
                                                            • Drops file in Windows directory
                                                            • Checks SCSI registry key(s)
                                                            • Suspicious use of SetWindowsHookEx
                                                            PID:6396
                                                          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                                            "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=renderer --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --disable-gpu-compositing --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=12396 --field-trial-handle=2584,i,11186927755569881380,1146341875358416494,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
                                                            14⤵
                                                            • Checks computer location settings
                                                            • Suspicious use of NtCreateThreadExHideFromDebugger
                                                            PID:12272
                                                          • C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                                            "C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --log-severity=error --user-agent-product="CAPCUT_PC/4.3.0 Chrome/109.1.18.2719" --lang=ru-RU --user-data-dir="C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\User Data" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=13188 --field-trial-handle=2584,i,11186927755569881380,1146341875358416494,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                                                            14⤵
                                                            • Suspicious use of NtCreateThreadExHideFromDebugger
                                                            PID:12688
                                • C:\Users\Admin\Desktop\CapCut\CapCutPort.exe
                                  "C:\Users\Admin\Desktop\CapCut\CapCutPort.exe"
                                  1⤵
                                  • Executes dropped EXE
                                  • System Location Discovery: System Language Discovery
                                  PID:3508
                                • C:\Windows\system32\AUDIODG.EXE
                                  C:\Windows\system32\AUDIODG.EXE 0x4b4 0x2ec
                                  1⤵
                                    PID:4272

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        ScrollView.qml

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\QtQuick\Controls\Universal\ScrollView.qml
                                        • Size 2KB
                                        • SHA256 228069c59b7d348321d4ad8e1260d20ef8cfaae5be0c08676de49d8562fe6fda
                                        • MD5 SHA1 SHA512 TLSH

                                        plugins.qmltypes

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\QtQuick\Controls\Windows\plugins.qmltypes
                                        • Size 215B
                                        • SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
                                        • MD5 SHA1 SHA512 TLSH

                                        smoothx.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\Chroma2\amazingfeature\xshader\smoothx.vert
                                        • Size 182B
                                        • SHA256 54398dcfc26f5079254a3cfd48b71db52dc2e9c133607f9e98f32a231eeee69f
                                        • MD5 SHA1 SHA512 TLSH

                                        default_video_ico.jpg

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\CloudMaterial\default_video_ico.jpg
                                        • Size 26KB
                                        • SHA256 391a65dd47d49f567593efcaef0dd56f4f38a9a13ae81b40a378815eb6412b70
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        js-meta.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\clear\AmazingFeature\js-meta.json
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512

                                        pass.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\clear\AmazingFeature\xshader\pass.vert
                                        • Size 245B
                                        • SHA256 fb3e9e7a966147cc5cb48b1a087931bfbdea744a0d0e0def0f07070ba48a73cc
                                        • MD5 SHA1 SHA512 TLSH

                                        LuaRTTI.MarkGen.lua

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\combine_adjust\AmazingFeature\LuaRTTI.MarkGen.lua
                                        • Size 222B
                                        • SHA256 cf4f8b5ff1a50eff88236aba7f9bb48e696d337b779d98e911d00f6876800503
                                        • MD5 SHA1 SHA512 TLSH

                                        scene.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast\amazingfeature\scene.config
                                        • Size 284B
                                        • SHA256 5b405fa29439f5853937c9714c794f10a01ed033f81866ba52f7f8ea5312b41e
                                        • MD5 SHA1 SHA512 TLSH

                                        fshader.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\fshader.vert
                                        • Size 171B
                                        • SHA256 eaf495d1de3a920ca4f87e5bfe868a822d1ac05ae9f8d10651d60a382ecdd1b7
                                        • MD5 SHA1 SHA512 TLSH

                                        LuaRTTI.MarkGen.lua

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\LuaRTTI.MarkGen.lua
                                        • Size 190B
                                        • SHA256 2aa4ba3afc94d9d96a4c0f850dd5073c0b58560e9609cf758e3ae92f89d77220
                                        • MD5 SHA1 SHA512 TLSH

                                        algorithmConfig.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\algorithmConfig.json
                                        • Size 317B
                                        • SHA256 835c6031fb0e72d2f2b6ee80c45b95010a7e7cac7fa221d9b820d6708a8869a8
                                        • MD5 SHA1 SHA512 TLSH

                                        Utils.lua

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\lua\Utils.lua
                                        • Size 9KB
                                        • SHA256 df672b08916560cf1a04a0cecd1c3e8160557409a0c1c5da2483ffe16fc77d4c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        graphBuild.lua

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\lua\graphBuild.lua
                                        • Size 5KB
                                        • SHA256 e99cfcfe93e9ea0fd243129a4da604c186b7fac0c5aec7788dc9bae6ee26fcc8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        renderChain.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\lua\renderChain.json
                                        • Size 259B
                                        • SHA256 244f156847921a6c4b34ccbffd09bc5effcc1cf69cf68ffb7e83cd9dadca00fa
                                        • MD5 SHA1 SHA512 TLSH

                                        xshader.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\xshader.xshader
                                        • Size 1KB
                                        • SHA256 6000493c6055709125d37005c8fa6b693f6c35ec76c967661ec073f1b34f7401
                                        • MD5 SHA1 SHA512 TLSH

                                        outputTex.rt

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\rt\outputTex.rt
                                        • Size 567B
                                        • SHA256 ca77feb4432805141de582bee6b6cae76865a68c278906f9da0512f6f73d6550
                                        • MD5 SHA1 SHA512 TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\sticker.config
                                        • Size 305B
                                        • SHA256 4f218871d126b92e0a895646e01b0658c0b70934f85885b121d1b2c9267d0cfb
                                        • MD5 SHA1 SHA512 TLSH

                                        colorAdjust.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\contrast_v3\AmazingFeature\xshader\colorAdjust.vert
                                        • Size 186B
                                        • SHA256 779bb2782d6a6cf5c2a6be9126c7fa78f2c0fdb66bcdae1718eb5fca6413733f
                                        • MD5 SHA1 SHA512 TLSH

                                        Transform.lua

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\fade\amazingfeature\Transform.lua
                                        • Size 743B
                                        • SHA256 f5ae7d270c41dc064723acb52c96339337d142f327ed98591ebb52c9518a2a78
                                        • MD5 SHA1 SHA512 TLSH

                                        main.scene

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\fade\amazingfeature\main.scene
                                        • Size 1KB
                                        • SHA256 b97663892b4a96ac2b5888965086c8e6e037e962a76f38529f8471d8b4e7dbad
                                        • MD5 SHA1 SHA512 TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\fade\amazingfeature\sticker.config
                                        • Size 243B
                                        • SHA256 6f8d212c18569ba0e1c3b1bc89c8c4b2a16377d94cc26d1d78df1bb920efe379
                                        • MD5 SHA1 SHA512 TLSH

                                        gles2_filter.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\fade\amazingfeature\xshader\gles2_filter.vert
                                        • Size 215B
                                        • SHA256 ff67b00d9d13e6ab219c94e61e36ad43f1e025d4e3f540f14a6ff26b1b7e8dbf
                                        • MD5 SHA1 SHA512 TLSH

                                        scene.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\hsl_v1\HSL\scene.config
                                        • Size 363B
                                        • SHA256 468a132a03b8569130faf2c5d8e0f05f3f7602a336b0510534026c11a73ab460
                                        • MD5 SHA1 SHA512 TLSH

                                        Transform.lua

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\Transform.lua
                                        • Size 716B
                                        • SHA256 4e4b7c19259ebab2fbe29d179122a20584b783f12632bfc2d214d82e522c303b
                                        • MD5 SHA1 SHA512 TLSH

                                        lightSensation_max.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\image\lightSensation_max.png
                                        • Size 21KB
                                        • SHA256 229205389beae841f133e2cc9e524ed7949c3a5ab29240ecadb234238a87138a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        lightSensation_min.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\image\lightSensation_min.png
                                        • Size 21KB
                                        • SHA256 78301ba10f536d05575db598044a642842f43549352cd80b577b8d3854d865c4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\sticker.config
                                        • Size 258B
                                        • SHA256 9c9ba3ebe0c06582ce05df7831d4754061d2ed7c7e3ad6acaaaa563f7bbf7d2f
                                        • MD5 SHA1 SHA512 TLSH

                                        gles2_filter.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\xshader\gles2_filter.vert
                                        • Size 204B
                                        • SHA256 add8f8c4c8e970dcdbe6ca1ab7180f7124cafc4e5dd909d8b0d7cf1734b3409e
                                        • MD5 SHA1 SHA512 TLSH

                                        fade_max.texture

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_adjustColor\image\fade_max.texture
                                        • Size 1KB
                                        • SHA256 648fde49b34f96e49c7ff2558e5fd0c695969ac135ee4b76d2fad3ead2a53ef3
                                        • MD5 SHA1 SHA512 TLSH

                                        lightSensation_max.png.meta

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_adjustColor\image\lightSensation_max.png.meta
                                        • Size 389B
                                        • SHA256 7bae80006b76ea192e0f1b51d674de35e85ba338e1c83ee65c993a3b9bdc0c43
                                        • MD5 SHA1 SHA512 TLSH

                                        lightSensation_min.png.meta

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_adjustColor\image\lightSensation_min.png.meta
                                        • Size 389B
                                        • SHA256 fa4dd2a994ad097971c8a87fea47fe89653dc90179fc8c605e423744b4f9d9fe
                                        • MD5 SHA1 SHA512 TLSH

                                        colorAdjust.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_adjustColor\material\colorAdjust.material
                                        • Size 939B
                                        • SHA256 95e44e38d0710c34f8569e52a24a79e5121bb3205abc5919294c4452d029e777
                                        • MD5 SHA1 SHA512 TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_adjustColor\sticker.config
                                        • Size 274B
                                        • SHA256 2c92aa803fc71e03f2416995f77f971953bf792dc11e395c2106f483494e65d0
                                        • MD5 SHA1 SHA512 TLSH

                                        colorAdjust.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_adjustColor\xshader\colorAdjust.xshader
                                        • Size 1KB
                                        • SHA256 6b5459dbf2270d8393188997f53998e447e1d0801dcce73ab792609223f8848f
                                        • MD5 SHA1 SHA512 TLSH

                                        ImageBusinessSlider.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_blend\ImageBusinessSlider.json
                                        • Size 35B
                                        • SHA256 b408c5a3949a0a77bacbc934e82ced44e25db3491c54a891be064158592810cf
                                        • MD5 SHA1 SHA512

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_blit_color\sticker.config
                                        • Size 276B
                                        • SHA256 f883daf39bd812b9ce40a457046f29afb5100d178c2e242eea662d3142fe4bae
                                        • MD5 SHA1 SHA512 TLSH

                                        content.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\content.json
                                        • Size 130B
                                        • SHA256 b077ccd356a478e2e0878be27babf81006e8d33cd44d2a6626ad2fbce7f4aab5
                                        • MD5 SHA1 SHA512 TLSH

                                        temperature_max.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\image\temperature_max.png
                                        • Size 4KB
                                        • SHA256 16fa716c3483f2387763dbdef519f7627bee1151969a5548be91fde5d30b583b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        temperature_max.png.meta

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\image\temperature_max.png.meta
                                        • Size 352B
                                        • SHA256 99fb9eb6d93f1775e62e5ffcab477b45afb7d85584461d29aa070c651159abb5
                                        • MD5 SHA1 SHA512 TLSH

                                        temperature_min.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\image\temperature_min.png
                                        • Size 4KB
                                        • SHA256 4d6b06cbcc92d8bd42b0ff8da7661ed729652c4bb8ce3c7ce1d9c2db631c00a1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        temperature_min.png.meta

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\image\temperature_min.png.meta
                                        • Size 352B
                                        • SHA256 0dcfcfc4d3db8a69617016304ea3420627cebf851a5cada66c0c1fa5df63e21f
                                        • MD5 SHA1 SHA512 TLSH

                                        main.scene

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\main.scene
                                        • Size 2KB
                                        • SHA256 ddf39775e5dd5cd52acf3ea780ea07440b5c4d8fe068ff2edd356478892f6f18
                                        • MD5 SHA1 SHA512 TLSH

                                        entity.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\material\entity.material
                                        • Size 839B
                                        • SHA256 35192ed64374b241d70d49e8789747909e129c53ab5a0804b7f28c05a3c6b77c
                                        • MD5 SHA1 SHA512 TLSH

                                        quad.mesh

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\mesh\quad.mesh
                                        • Size 1002B
                                        • SHA256 2589fe8d31dfcfd5f521aacd5c00a64a0292fa773aef26009dc85ee78e9bdcff
                                        • MD5 SHA1 SHA512 TLSH

                                        outputTex.rt

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\rt\outputTex.rt
                                        • Size 510B
                                        • SHA256 554c5c6ab074cd55cb6ad256f5ab52fc649c403e4b4c8efc26ef0b9567226e84
                                        • MD5 SHA1 SHA512 TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\sticker.config
                                        • Size 276B
                                        • SHA256 628398a978ba0d718e5753bd40e2652a7db9bdab38952def94802ee2c9cf0eff
                                        • MD5 SHA1 SHA512 TLSH

                                        entity.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_hsl\xshader\entity.xshader
                                        • Size 1KB
                                        • SHA256 a112e4d48ad3b783194d4cff5f9eb31eb04c2d9ea7ece6ba6dd6ea634bece058
                                        • MD5 SHA1 SHA512 TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_logWheel\sticker.config
                                        • Size 276B
                                        • SHA256 8695d8d1cd532f86c340a46ff20f6c96f25f842d6c6f2d3c67b29e3c8d706fb0
                                        • MD5 SHA1 SHA512 TLSH

                                        entity.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_logWheel\xshader\entity.xshader
                                        • Size 1KB
                                        • SHA256 df215933763275ed647cbc3ca4aa61d61bae5d103c57d7aabdbfd693b7d83e1f
                                        • MD5 SHA1 SHA512 TLSH

                                        outputTex.rt

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\merge_all_adjust_color\AmazingFeature_primaryWheel\rt\outputTex.rt
                                        • Size 510B
                                        • SHA256 04f3515e2001470f579f2e4cfc6df63e2d35593d13ac259ba769e2d2d4ef68f1
                                        • MD5 SHA1 SHA512 TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\sticker.config
                                        • Size 276B
                                        • SHA256 c3de42b569951c70e76d4adb756b424c0ddaeaea6c1a0b61bf1935b7b7b1ee66
                                        • MD5 SHA1 SHA512 TLSH

                                        algorithmConfig.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v2\AmazingFeature\algorithmConfig.json
                                        • Size 454B
                                        • SHA256 bb9ca7d984c8eecebebfd3aadff29bc267d9bf1cc6dc683a887c32823dae45d2
                                        • MD5 SHA1 SHA512 TLSH

                                        content.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v2\AmazingFeature\content.json
                                        • Size 129B
                                        • SHA256 8f72e2d5ebbf00be0a6473d8fd4ff494b628b7f6b972410c9cdc3f8484bbbe98
                                        • MD5 SHA1 SHA512 TLSH

                                        main.scene

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v2\AmazingFeature\main.scene
                                        • Size 2KB
                                        • SHA256 335944a33967b6f2433d4dcf870f3a36d30fb52a6b3c3990cd18c58510132f5d
                                        • MD5 SHA1 SHA512 TLSH

                                        noise.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v2\AmazingFeature\material\noise.material
                                        • Size 652B
                                        • SHA256 fda54d574bbe6040e6dbf5cadca7340c0ed837f65d5f7c06a5bd9dab983b31ef
                                        • MD5 SHA1 SHA512 TLSH

                                        quad.mesh

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v2\AmazingFeature\mesh\quad.mesh
                                        • Size 998B
                                        • SHA256 879e4889ea6ee05a3835c75c99595c87740223d1354a679b85e9c7720809aef6
                                        • MD5 SHA1 SHA512 TLSH

                                        outputTex.rt

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v2\AmazingFeature\rt\outputTex.rt
                                        • Size 510B
                                        • SHA256 5cedbe5ea2f46408ba45424f6374b2a3666630a4a211d9a928cd241b0762dab4
                                        • MD5 SHA1 SHA512 TLSH

                                        scene.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v2\AmazingFeature\scene.config
                                        • Size 363B
                                        • SHA256 0adc55e18bdff0fcde5e163338cdcb74618b1198dbd95d315ca5ec256005921c
                                        • MD5 SHA1 SHA512 TLSH

                                        noise.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\particle_v2\AmazingFeature\xshader\noise.xshader
                                        • Size 1KB
                                        • SHA256 94d6bc0f3912ada7dc7c2fc6cb3ca7ef38bd2e54bc6a2a93ba5c62790e0bee92
                                        • MD5 SHA1 SHA512 TLSH

                                        filter.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\saturation\amazingfeature\xshader\filter.xshader
                                        • Size 740B
                                        • SHA256 c99d0ede6d9c4b8c56a80fa41a34321aa4e6e76047d64b58b45b96086b972eec
                                        • MD5 SHA1 SHA512 TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_highlight_v3_gles3\AmazingFeature\sticker.config
                                        • Size 297B
                                        • SHA256 eb62bbf1d38cb3bdda35aa51ff5c68b72ecbecd151137121187a23a69674e145
                                        • MD5 SHA1 SHA512 TLSH

                                        ImageBusinessSlider.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\ImageBusinessSlider.json
                                        • Size 1KB
                                        • SHA256 c87243387967a9712819daba2869ffc7957e94eedde1383e794ddd2a031820df
                                        • MD5 SHA1 SHA512 TLSH

                                        content.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\content.json
                                        • Size 130B
                                        • SHA256 fc2b74417e526dffd214dd36eccb1531e6c777a0cbfd2dcf7939b4a5a7f52cfb
                                        • MD5 SHA1 SHA512 TLSH

                                        main.scene

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\main.scene
                                        • Size 16KB
                                        • SHA256 a6129e2717e2afe4d3b0e1e081bf2883057ff3e08a588bdfe130dccb8d4cfb71
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        GaussX_2.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\GaussX_2.material
                                        • Size 802B
                                        • SHA256 bb3eee876daaf66c381852151905f2f99393c6c1cf8eed84aa698009478bea91
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussX_3.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\GaussX_3.material
                                        • Size 802B
                                        • SHA256 9ba45dff7ca433ae5f578b95a4676262b2cb5c44790b3e59d7073b151ae19061
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussX_4.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\GaussX_4.material
                                        • Size 803B
                                        • SHA256 9ee366374686d5278d08e56bd6698dbc3d71d41ac27675a31e4c860fe69b16ee
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussY_2.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\GaussY_2.material
                                        • Size 779B
                                        • SHA256 ad95a4b166ab0296940de3a8dc14ca6e2bb518b9c9f4cdc81c722ed6b9feafe5
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussY_3.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\GaussY_3.material
                                        • Size 779B
                                        • SHA256 fb92e5eec31dbd5730e9342da5180a7c23ddcfa8942f789c8b8c526da67932a5
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussY_4.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\GaussY_4.material
                                        • Size 779B
                                        • SHA256 b61a22b9d271e1d058e76221ef846283365658e4cda17a93fcda4c6f499f0833
                                        • MD5 SHA1 SHA512 TLSH

                                        blend.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\blend.material
                                        • Size 746B
                                        • SHA256 05ba3353db47661e6b7cf8521191466427d0a7b2bc2890faf06b13814f998905
                                        • MD5 SHA1 SHA512 TLSH

                                        cameraRawAdjust.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\cameraRawAdjust.material
                                        • Size 1023B
                                        • SHA256 d4507227f59bad0e422c7956c179ccc77dbe52451c9b7a9698ec1eac3129904c
                                        • MD5 SHA1 SHA512 TLSH

                                        getGray.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\getGray.material
                                        • Size 683B
                                        • SHA256 67edd369889edda553a46a2d4da5e668e1858382221d3368b79cb0219b8ba7aa
                                        • MD5 SHA1 SHA512 TLSH

                                        guideFilter.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\material\guideFilter.material
                                        • Size 741B
                                        • SHA256 6989e7a601a4291e4d2dc9ecb175691ebf08b1b46f4d23a2f777c43c1412e720
                                        • MD5 SHA1 SHA512 TLSH

                                        Quad.mesh

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\mesh\Quad.mesh
                                        • Size 1KB
                                        • SHA256 844c1880d87b789d86093af993c51d3f18f0c351b0adbd18e51cc85849d267d1
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussX.frag

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\GaussX.frag
                                        • Size 1KB
                                        • SHA256 0384e6b9c8b245aa05d595391b348a4b06a46fc2ba85d3dfc7cc2ea21fc1accb
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussX.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\GaussX.vert
                                        • Size 168B
                                        • SHA256 cf05efbf2e2640520fa59682c896f718000088d2e7cc83f07c224c813d30cad7
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussX.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\GaussX.xshader
                                        • Size 990B
                                        • SHA256 026d2c6857a07ca0bc9ab1238d21df89b2f069defaf922bca975bfe42f996e0c
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussX1.frag

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\GaussX1.frag
                                        • Size 1KB
                                        • SHA256 3bd8a0bdda1a5d97038659d07ee83c08d45bcbdb8620996b7d8fed1fc4375d28
                                        • MD5 SHA1 SHA512 TLSH

                                        GaussX1.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\GaussX1.xshader
                                        • Size 991B
                                        • SHA256 c103e24cb7a9c85514392dec044e50be8fa0074a1d87197eb4306d3cf33cdeb7
                                        • MD5 SHA1 SHA512 TLSH

                                        blend.frag

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\blend.frag
                                        • Size 489B
                                        • SHA256 0e69608e65e285adeed451599783ea714ffacdca32454a113159579c0b038650
                                        • MD5 SHA1 SHA512 TLSH

                                        blend.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\blend.vert
                                        • Size 282B
                                        • SHA256 a3dd0a14a9a48eb6a68b45de413c79a21134a3273ddca966cbf754f7b652fc0f
                                        • MD5 SHA1 SHA512 TLSH

                                        blend.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\blend.xshader
                                        • Size 977B
                                        • SHA256 f788495ff65f560044c56287fb72cdaba53c415a587773702fbc498eaab406a9
                                        • MD5 SHA1 SHA512 TLSH

                                        cameraRawAdjust.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\cameraRawAdjust.xshader
                                        • Size 1KB
                                        • SHA256 1f2c82094a84b14066e6d93e7f4fa3e280614f370ccf297a28d23469e5c04e9f
                                        • MD5 SHA1 SHA512 TLSH

                                        cameraRawAdjustCore.frag

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\cameraRawAdjustCore.frag
                                        • Size 8KB
                                        • SHA256 73e723c7e4032dec8da3f40c1c4df7917803ac0c5bfbf0955800c0d9687f72dd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        getGray.frag

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\getGray.frag
                                        • Size 234B
                                        • SHA256 e426d0ec442a009a3215e888bbcc8b99ca6308b8214d341dd4ad5a5b1ca305d8
                                        • MD5 SHA1 SHA512 TLSH

                                        getGray.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\getGray.xshader
                                        • Size 988B
                                        • SHA256 485ccbe9096f99af6f555aba5b0fafd93968af7ee0161bb228d55e817fcb14bc
                                        • MD5 SHA1 SHA512 TLSH

                                        guideFilter.frag

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\guideFilter.frag
                                        • Size 540B
                                        • SHA256 cbcbb33a2dcd5035b08aee178418020af2d449fc4eb8fcd759d53526283024d7
                                        • MD5 SHA1 SHA512 TLSH

                                        guideFilter.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\xshader\guideFilter.xshader
                                        • Size 989B
                                        • SHA256 fce73b91ec527c7d950398d89e7afea52427f3fb3f6707b72cca647143baffe5
                                        • MD5 SHA1 SHA512 TLSH

                                        config.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\shadow_v1\config.json
                                        • Size 330B
                                        • SHA256 f3c3bbd6671e8b331ce242bdf7d0a6c70539afbdf86d150bb1265d3b76898494
                                        • MD5 SHA1 SHA512 TLSH

                                        LuaRTTI.MarkGen.lua

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\LuaRTTI.MarkGen.lua
                                        • Size 166B
                                        • SHA256 425a0804076088345fabf8527182630f4886d04f185f02715191da72b50c0c6c
                                        • MD5 SHA1 SHA512 TLSH

                                        content.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\content.json
                                        • Size 130B
                                        • SHA256 18d1cebf5ba1d4f2d8a41aaa12117f908c13aca621c2d2bee44a272b19431428
                                        • MD5 SHA1 SHA512 TLSH

                                        main.scene

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\main.scene
                                        • Size 2KB
                                        • SHA256 a9d4b06d4eafca0dda1d409d9105fb73faa6122147eeabdd1716080eef229558
                                        • MD5 SHA1 SHA512 TLSH

                                        noface.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\material\noface.material
                                        • Size 692B
                                        • SHA256 8539040a84f693475dc16c925354935bc85cd485562befb7ced1ad1cb52d1ced
                                        • MD5 SHA1 SHA512 TLSH

                                        Quad.mesh

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\mesh\Quad.mesh
                                        • Size 1KB
                                        • SHA256 119e2e9f016877f83c4f7c91aa23614387189cd19d8a9098b5de338f5e0df38f
                                        • MD5 SHA1 SHA512 TLSH

                                        outputTex.rt

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\rt\outputTex.rt
                                        • Size 567B
                                        • SHA256 8cd4b0db123b2babd506e58a78020adc44f248cffeaaf0e819451807ad94bf9b
                                        • MD5 SHA1 SHA512 TLSH

                                        noface.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\temperature_tone_v3\AmazingFeature\xshader\noface.xshader
                                        • Size 1KB
                                        • SHA256 06de6e75308dc5b8451a2cf7e3109ca2262e144fa4014bc7706dc2f7fcac7f55
                                        • MD5 SHA1 SHA512 TLSH

                                        gles2_yvsong.frag

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\xshader\gles2_yvsong.frag
                                        • Size 144B
                                        • SHA256 f5ce442c91816b0672f108d392357df34ac744da80704f8f2680aae1c53d797c
                                        • MD5 SHA1 SHA512 TLSH

                                        algorithmConfig.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\LogWheel\log_wheel_v0\algorithmConfig.json
                                        • Size 382B
                                        • SHA256 28251cedc501cb7285fe4c06af3714af3ec068834cc15c1ddcd913f91572ace0
                                        • MD5 SHA1 SHA512 TLSH

                                        main.scene

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\LogWheel\log_wheel_v1\Wheel\main.scene
                                        • Size 2KB
                                        • SHA256 f630541101f49569681b40d3cd767b7f7f865c6dfce0bd8ba070d691f1796e88
                                        • MD5 SHA1 SHA512 TLSH

                                        entity.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\LogWheel\log_wheel_v1\Wheel\material\entity.material
                                        • Size 1KB
                                        • SHA256 be0c54d0ccdf8eeed3863f94edbb631c66276c4b9a5d8368b3df9780c6129777
                                        • MD5 SHA1 SHA512 TLSH

                                        quad.mesh

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\LogWheel\log_wheel_v1\Wheel\mesh\quad.mesh
                                        • Size 1002B
                                        • SHA256 b5339f5b1ec50d2b96912b65bed7cb54a579ce37db5846274b3f283e13f5e013
                                        • MD5 SHA1 SHA512 TLSH

                                        outputTex.rt

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\LogWheel\log_wheel_v1\Wheel\rt\outputTex.rt
                                        • Size 510B
                                        • SHA256 57ac434848fd35efc32aa5eacee6505de7d49bc15f35491b0966a614bb9b2688
                                        • MD5 SHA1 SHA512 TLSH

                                        anim.prefab

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\MixMode\655f3590dd07ece41209fb312348ffe9\anim.prefab
                                        • Size 477B
                                        • SHA256 e9d87f8022efa9374e74d61c310d8bc11a98925b8d2e771ab75e1b865164c02e
                                        • MD5 SHA1 SHA512 TLSH

                                        blend.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\MixMode\655f3590dd07ece41209fb312348ffe9\blend.material
                                        • Size 552B
                                        • SHA256 e8986f58f72446435468272d8d4e7c95a4fce58b3ad4838ed634b999196d3736
                                        • MD5 SHA1 SHA512 TLSH

                                        config.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\MixMode\655f3590dd07ece41209fb312348ffe9\config.json
                                        • Size 64B
                                        • SHA256 07232ba6befad39df9079b18e7c66235a11b2b375626c80cabd0b46f9b7d948f
                                        • MD5 SHA1 SHA512 TLSH

                                        content.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\MixMode\655f3590dd07ece41209fb312348ffe9\content.json
                                        • Size 65B
                                        • SHA256 424c068d0f0e848d3b8f25ec1a55f1086df3c87ad95eca13fe6b265c46400fc0
                                        • MD5 SHA1 SHA512 TLSH

                                        blend.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\MixMode\655f3590dd07ece41209fb312348ffe9\xshader\blend.vert
                                        • Size 283B
                                        • SHA256 2719896bc6ff9ed2ff5532a937ac685668479e4bcd19ef11ed708cdbf52c2fd5
                                        • MD5 SHA1 SHA512 TLSH

                                        blend.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\MixMode\655f3590dd07ece41209fb312348ffe9\xshader\blend.xshader
                                        • Size 726B
                                        • SHA256 a1a1915919f200668689f83694e4fb7b6bba2e3ff6cc2bacc7b84d36b7c48fc0
                                        • MD5 SHA1 SHA512 TLSH

                                        main.scene

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\PrimaryWheel\primary_wheel_v1\Wheel\main.scene
                                        • Size 2KB
                                        • SHA256 8b41cb8cf776c78309c68fead2fa95e92529c9edd9764c03cc928d38b92c9078
                                        • MD5 SHA1 SHA512 TLSH

                                        entity.material

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\PrimaryWheel\primary_wheel_v1\Wheel\material\entity.material
                                        • Size 1KB
                                        • SHA256 f4fc36c30bd72c21563e3f42c7c2d90a84c23f16f78f46554cd1adcf8619000a
                                        • MD5 SHA1 SHA512 TLSH

                                        quad.mesh

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\PrimaryWheel\primary_wheel_v1\Wheel\mesh\quad.mesh
                                        • Size 1002B
                                        • SHA256 a5ad7764a1bcae85153cc52e80897618042c0b7a5f870830147a00b137f01500
                                        • MD5 SHA1 SHA512 TLSH

                                        entity.xshader

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\PrimaryWheel\primary_wheel_v1\Wheel\xshader\entity.xshader
                                        • Size 1KB
                                        • SHA256 b7c5f73366fa465b38532069aa290049a9d3fd50af66e96613de917f565d741f
                                        • MD5 SHA1 SHA512 TLSH

                                        mask_faceu.vert

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\figure\beauty_head\beauty_root_pack\AmazingFeature\xshader\mask_faceu.vert
                                        • Size 535B
                                        • SHA256 96ca09106a66055d2040069806965b88b710942a569c3af6caceb0eaf4fad5ee
                                        • MD5 SHA1 SHA512 TLSH

                                        publish-filter-single.efdeb61f.css

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\image_h5_material_publish\static\css\publish-filter-single.efdeb61f.css
                                        • Size 10KB
                                        • SHA256 f8a1929af639b5381308c1bbef8f76bc1b77132b56f4bca6b1bf7d5cbdfaeaf5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        publish-filter-single.dac3d2d9.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\image_h5_material_publish\static\js\publish-filter-single.dac3d2d9.js
                                        • Size 39KB
                                        • SHA256 cdb7178ad49c1efc4750714638d83b8267a5940f7a1a7e8a5185d26539686ce6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        sticker-publish-single.bbaa332b.css

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\image_h5_sticker_publish\static\css\sticker-publish-single.bbaa332b.css
                                        • Size 15KB
                                        • SHA256 bc4db337419452015714560742969469ce9b78150d2d481c45eaa71b47c7a8f1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        207.8355af33.css

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\image_h5_text_template_publish\static\css\async\207.8355af33.css
                                        • Size 48KB
                                        • SHA256 110c434f0f0b7bbbafe7a26fd3a710fee6539d74418ffa079d2a6d8f9205d2c6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        publish-text-template-collection_page.593bf4e0.css

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zE0791B0E8\CapCut\App\CapCut\4.3.0.1694\Resources\image_h5_text_template_publish\static\css\async\publish-text-template-collection_page.593bf4e0.css
                                        • Size 10KB
                                        • SHA256 dbc7f8fb4348f2ad5fb3273fab9b5a9e4a120aa14b25d1d0f5be50ce6b45bef4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        System.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsyB118.tmp\System.dll
                                        • Size 11KB
                                        • SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        newtextreplace.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsyB118.tmp\newtextreplace.dll
                                        • Size 11KB
                                        • SHA256 156b9b583399faf13c4d46b89339fb0f7f38dc847ac2d7872178d8e3998b9734
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        nsExec.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsyB118.tmp\nsExec.dll
                                        • Size 6KB
                                        • SHA256 d29afce2588d8dd7bb94c00ca91cac0e85b80ffa6b221f5ffcb83a2497228eb2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        registry.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsyB118.tmp\registry.dll
                                        • Size 29KB
                                        • SHA256 acb79c55b3b9c460d032a6f3aaf6c642bf8c1d450e23279d091cc0c6ca510973
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        gpuSupport.ini

                                        • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\gpuSupport.ini
                                        • Size 161B
                                        • SHA256 1764f84d4b30363af9c5e1496b2e5924dd745dec33358ba582a6543a8c957f7a
                                        • MD5 SHA1 SHA512 TLSH

                                        gpuSupport.ini

                                        • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\gpuSupport.ini
                                        • Size 177B
                                        • SHA256 564d46c1d84a47f9082fbbed0a3458adb5b1e3f161df7aaf549cc94cfeb1af16
                                        • MD5 SHA1 SHA512 TLSH

                                        ve_hw_check.ini

                                        • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\ve_hw_check.ini
                                        • Size 1016B
                                        • SHA256 3322b6835dd79d0e75952f33b8bd83a470391d3e88175abd913a725ad9b80997
                                        • MD5 SHA1 SHA512 TLSH

                                        vesdk.ini

                                        • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\vesdk.ini
                                        • Size 1KB
                                        • SHA256 e110e2032986274983215733cdcdb6d34c830980177598d306f1e5ccba55d258
                                        • MD5 SHA1 SHA512 TLSH

                                        CapCutPort.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\App\AppInfo\Launcher\CapCutPort.ini
                                        • Size 905B
                                        • SHA256 8bf246a1fdf29e8e81905bdb5c4785e7146ec0fc3eddc6862e44012e92f00942
                                        • MD5 SHA1 SHA512 TLSH

                                        appinfo.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\App\AppInfo\appinfo.ini
                                        • Size 214B
                                        • SHA256 c36c06cce245e193349adeae45048f80f7273a7f11ce1b5a9951c0224d7e373f
                                        • MD5 SHA1 SHA512 TLSH

                                        CapCut.exe

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\CapCut.exe
                                        • Size 84KB
                                        • SHA256 40bf8e3216505f6a5c13cf3f11b35253703fb4645963bea2dfd44732056fe812
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        GeckoSDK.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\GeckoSDK.dll
                                        • Size 5.0MB
                                        • SHA256 6438baaaa93ba1ad7b62108a3caf054f75a3ba699744ddaa990e1322027e8d55
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        PlatinumWebView.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\PlatinumWebView.dll
                                        • Size 576KB
                                        • SHA256 e0561eef2abcebfb6a6b5bb0576d36c6969e528199b7717828814ad145afadb7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6Core.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6Core.dll
                                        • Size 5.3MB
                                        • SHA256 1b8bc49d6dc30e3e8324d0307112c607c7993933a49b98c86bbba69c2c947e15
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6Core5Compat.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6Core5Compat.dll
                                        • Size 808KB
                                        • SHA256 8c52f8698cb04b6e39c0251f4c771ca2ca0991154ae4e668b4c25a70a08c3bca
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6Gui.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6Gui.dll
                                        • Size 6.7MB
                                        • SHA256 06f5b4d85388106b3fa723b954e54c987ecd500be1d53eb0ccdfd11aeea92e80
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6Network.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6Network.dll
                                        • Size 1.4MB
                                        • SHA256 b66a5258de04e2d12c43713afa2d61561c8b6e6d3342a0bf1ceaacd5c254e275
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6Qml.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6Qml.dll
                                        • Size 4.1MB
                                        • SHA256 8a3036b7abba833b0348c97b632cf6be4fda42218379a66b559c14aff166742e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6Quick.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6Quick.dll
                                        • Size 4.7MB
                                        • SHA256 4ec7279bf94e181cea5a1dbc6dc67428a80b8759a7a7a06fb277f91a77c9e453
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6QuickControls2.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6QuickControls2.dll
                                        • Size 64KB
                                        • SHA256 a34cecfc53e288a148fe2c03cc519ef9430bed236e85fe82f50c866914402e43
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6Svg.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6Svg.dll
                                        • Size 352KB
                                        • SHA256 6947801f7372065f43299dd477cb4f29b92bd23c86c0b97452b1521f6f8de9c4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Qt6Widgets.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\Qt6Widgets.dll
                                        • Size 5.7MB
                                        • SHA256 52ac51a2ba1fb6ef642bf585afdf8248ec52fa1d70222be12790eac12a912fb7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        VEConfig.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VEConfig.dll
                                        • Size 226KB
                                        • SHA256 e3261e1253465ba19d13d95be702ac6bae385eefcf9a1d53a8184863279edcf2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        VESafeGuard.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\VESafeGuard.dll
                                        • Size 313KB
                                        • SHA256 3a665152a9e4d8a6b006f6c68860d6add1f48550bb5d5896269e47072f884432
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        deviceregister_shared.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\deviceregister_shared.dll
                                        • Size 133KB
                                        • SHA256 845be5b08bec57f63ce23ebefb83279d4652f389c22bcda660bfd779e695171a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ever_cloud_sdk.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\ever_cloud_sdk.dll
                                        • Size 7.7MB
                                        • SHA256 9ae6b4dfd58fb42469118d560b9ac7bea0d17292a6680a94abe88abd084168a1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        lynx.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\lynx.dll
                                        • Size 5.3MB
                                        • SHA256 e028a66d83b7d03431588a8e5d9509c783fdcd2e2145de6f650eeb3d971d28f0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        metasecml.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\metasecml.dll
                                        • Size 9.9MB
                                        • SHA256 c92c718087c40968bf0381a971b253206cc4028d0b7ee915b267790444033653
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        msvcp140.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\msvcp140.dll
                                        • Size 556KB
                                        • SHA256 647b54efaee5656af68a84a7487378aa4b2ed5749973dd2e972181178dfc6caa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        msvcp140_1.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\msvcp140_1.dll
                                        • Size 27KB
                                        • SHA256 e3174bbb8dbbf04790f2da73c420f41efcb9adbd2c5520e656eaa34378e060e3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pc_push.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\pc_push.dll
                                        • Size 23.0MB
                                        • SHA256 99a1aa1c3e4ee1bf355f2efee43edc6ba752883e7f399d1bc839c50b53d36a66
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        sync-sdk.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\sync-sdk.dll
                                        • Size 4.3MB
                                        • SHA256 cf7a3c461fbae570f8bdbf1700ac3afce40070b35a8ad13b2d66abdf59cbc3e7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        vcruntime140.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\vcruntime140.dll
                                        • Size 99KB
                                        • SHA256 2031bc8c9e8d40dd6f9fe0418fce555709806fe59cb69a55d2713ccf5f086382
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        vcruntime140_1.dll

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\4.3.0.1694\vcruntime140_1.dll
                                        • Size 40KB
                                        • SHA256 e39a2a023ff082e8af4ddd84a8f12edf08384eb3a56e33a870349207d62e13cf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        CapCut.exe

                                        • Path C:\Users\Admin\Desktop\CapCut\App\CapCut\CapCut.exe
                                        • Size 1.5MB
                                        • SHA256 fa3491a8a852c23592c5b2e75f7c2f3eb4863565f6376c969d88753efeb396bc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Language

                                        • Path C:\Users\Admin\Desktop\CapCut\App\DefaultData\User Data\Config\Language
                                        • Size 23B
                                        • SHA256 d3e62d8492064f9886d551b7163387fded942d406c15ea1672a2a56093ea8d97
                                        • MD5 SHA1 SHA512

                                        globalSetting

                                        • Path C:\Users\Admin\Desktop\CapCut\App\DefaultData\User Data\Config\globalSetting
                                        • Size 335B
                                        • SHA256 41484f5fc0e354d81798ff02148724c176bb06968ade60791957a2bc165f9fe8
                                        • MD5 SHA1 SHA512 TLSH

                                        updateInfo

                                        • Path C:\Users\Admin\Desktop\CapCut\App\DefaultData\User Data\Config\updateInfo
                                        • Size 60B
                                        • SHA256 d0236f5b0f04bba7cfc1c29a8281aa6873e9198ca9f0ed5eee0e4cf862fb5423
                                        • MD5 SHA1 SHA512 TLSH

                                        CapCut.reg

                                        • Path C:\Users\Admin\Desktop\CapCut\App\DefaultData\settings\CapCut.reg
                                        • Size 1KB
                                        • SHA256 1114dfc6600800c432ce321a74ecdc5503b14cf27b7938e47d5fe87880ecfe2d
                                        • MD5 SHA1 SHA512 TLSH

                                        CapCutPort.exe

                                        • Path C:\Users\Admin\Desktop\CapCut\CapCutPort.exe
                                        • Size 157KB
                                        • SHA256 5deb72f9ebf109fd58d3d8b529ea6d35f8576bcc662367411a4bde1eb3cd24ae
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Code Cache\js\index-dir\the-real-index
                                        • Size 48B
                                        • SHA256 2fdd6f803a382499ebb142cd3e4eb63df0949e78ff8007de9ced32165fab488c
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Code Cache\js\index-dir\the-real-index
                                        • Size 600B
                                        • SHA256 1bce673cc21dd0510101c65ff754f057130800a538ad70eda33fc906929fc82c
                                        • MD5 SHA1 SHA512 TLSH

                                        CURRENT

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Local Storage\leveldb\CURRENT
                                        • Size 16B
                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                        • MD5 SHA1 SHA512

                                        Network Persistent State

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Network\Network Persistent State
                                        • Size 527B
                                        • SHA256 a458fede6b7f807c08e0dfd0ee12114dc6a0d531f8e935ddb770a46765896ca0
                                        • MD5 SHA1 SHA512 TLSH

                                        Network Persistent State

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Network\Network Persistent State
                                        • Size 994B
                                        • SHA256 3c4ddc52545b72164354c1582e917dc593465bef193eb727f0de4df142885cf6
                                        • MD5 SHA1 SHA512 TLSH

                                        Network Persistent State~RFe5ca80f.TMP

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Network\Network Persistent State~RFe5ca80f.TMP
                                        • Size 59B
                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                        • MD5 SHA1 SHA512 TLSH

                                        TransportSecurity

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Network\TransportSecurity
                                        • Size 370B
                                        • SHA256 9682151db3ac9d27cac0777bf7f6c12d6ac7d379b78dee8500e6927a600de488
                                        • MD5 SHA1 SHA512 TLSH

                                        TransportSecurity

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Network\TransportSecurity
                                        • Size 1014B
                                        • SHA256 b577cd2c229b77f5b2b4a324161b7c70b7e258444b7fec6e3b132f8b18795dbe
                                        • MD5 SHA1 SHA512 TLSH

                                        TransportSecurity

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Network\TransportSecurity
                                        • Size 370B
                                        • SHA256 f031485230aa7625d3734554f157c072146c84fdb24f3ec706de393d63a27926
                                        • MD5 SHA1 SHA512 TLSH

                                        TransportSecurity

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Network\TransportSecurity
                                        • Size 1014B
                                        • SHA256 92f8d5fc4aa10d241f4ecbcc44e19f53a5cdf9a6aaebb40d7810d0c34b38174a
                                        • MD5 SHA1 SHA512 TLSH

                                        TransportSecurity~RFe5be432.TMP

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Network\TransportSecurity~RFe5be432.TMP
                                        • Size 370B
                                        • SHA256 3b3ae5ecde54dc5a305e3aaf5636f47560604cf285d2e069bbc551771935810c
                                        • MD5 SHA1 SHA512 TLSH

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\Cache\Session Storage\MANIFEST-000001
                                        • Size 41B
                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                        • MD5 SHA1 SHA512

                                        LocalPrefs.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\LocalPrefs.json
                                        • Size 657B
                                        • SHA256 2d367e59d096c7cf1b10b3c0cd990dc368d6766807199cc2fdc5ebb4c16debd6
                                        • MD5 SHA1 SHA512 TLSH

                                        LocalPrefs.json~RFe5c5f4e.TMP

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\CEF\LocalPrefs.json~RFe5c5f4e.TMP
                                        • Size 484B
                                        • SHA256 38e866485cfe133195bce60ee105a6a704a50324f5974c5d3e93e1c39834252a
                                        • MD5 SHA1 SHA512 TLSH

                                        98c46aef-980a-42e5-98b0-7eb9c22658cf.mp4

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\agencycache\98c46aef-980a-42e5-98b0-7eb9c22658cf.mp4
                                        • Size 1B
                                        • SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
                                        • MD5 SHA1 SHA512

                                        817.cb016cac.css

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\deployment\3d692397b923263594be6bf2b778858c\image_h5_material_publish\static\css\async\817.cb016cac.css
                                        • Size 137KB
                                        • SHA256 166b8fc549546bc47de0c7b818172bde8d79dd6d21cda63fb611535638815caa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        236.42d9977a.js

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\deployment\3d692397b923263594be6bf2b778858c\image_h5_material_publish\static\js\async\236.42d9977a.js
                                        • Size 20KB
                                        • SHA256 e62c5684158a57807167c81972b268030b49f11168c2301126e16300652e7e06
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        279.7b123624.js

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\deployment\3d692397b923263594be6bf2b778858c\image_h5_material_publish\static\js\async\279.7b123624.js
                                        • Size 40KB
                                        • SHA256 110356322274937b4fa80c8a91e6b8eff1a243e1223410dc03ed274cc2a68f82
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        422.6bcdb837.js

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\deployment\3d692397b923263594be6bf2b778858c\image_h5_material_publish\static\js\async\422.6bcdb837.js
                                        • Size 67KB
                                        • SHA256 d35925e62ab9db914d4f74198c9cc19a45b4a081e6c0b3778a47fd31c6e97e56
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        858.83930b8f.js

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\deployment\3d692397b923263594be6bf2b778858c\image_h5_material_publish\static\js\async\858.83930b8f.js
                                        • Size 76KB
                                        • SHA256 2a28e714fcc256110c94f4cd788dad01107c8c47097306782e2cb9dac50ef9bc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        lib-mobx.3b424269.js

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\deployment\3d692397b923263594be6bf2b778858c\image_h5_material_publish\static\js\lib-mobx.3b424269.js
                                        • Size 56KB
                                        • SHA256 054e6f0088e1014e5fe2be9bdd978ac6b77f9f1efd832111ea83b0a7d986737d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        639.7ffd9a4f.js

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\deployment\3d692397b923263594be6bf2b778858c\image_h5_sticker_publish\static\js\async\639.7ffd9a4f.js
                                        • Size 9KB
                                        • SHA256 dad813b6bfdef5fc3b460bdfd82dcbe51375918436df4f1c9b696bdd3a971230
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        makeup3dLipPoutNormal_zilf_1665303912.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\105359684\79f5955356bb0e1c46f40696bcc4c3c8\AmazingFeature\image\lip3d\makeup3dLipPoutNormal_zilf_1665303912.png
                                        • Size 20KB
                                        • SHA256 4aec845c944ce4af631f7932f0f576dc5f520c72dc5b1bd4390755df656e3f41
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        lipGloss.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\105359684\79f5955356bb0e1c46f40696bcc4c3c8\AmazingFeature\image\lip\lipGloss.png
                                        • Size 1KB
                                        • SHA256 724f20e35a17f232fde06ac4f34a7e4238bce1101cf7c720661985ffe7bc7a2b
                                        • MD5 SHA1 SHA512 TLSH

                                        lipClose.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708449\a49369117eda099cc1b964196303af45\image\lip_BlendModeMultiply\default\lipClose.png.meta
                                        • Size 389B
                                        • SHA256 28d3e3db4b7f9cc6e88f64c26def40c781a6b01d7763f33d15d89ae326a50460
                                        • MD5 SHA1 SHA512 TLSH

                                        lipOpen.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708449\a49369117eda099cc1b964196303af45\image\lip_BlendModeMultiply\default\lipOpen.png.meta
                                        • Size 389B
                                        • SHA256 6525d6d8761ac00fc739b2e8b097d74d77b89dc74b219c9a75a8f2a0c1bacb93
                                        • MD5 SHA1 SHA512 TLSH

                                        lipClose.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\image\lip_BlendModeColor\default\lipClose.png.meta
                                        • Size 389B
                                        • SHA256 d28afeb4485fd0bc450a63adde7ccdb5d52efb13aff07a511f26983c3f405ebc
                                        • MD5 SHA1 SHA512 TLSH

                                        lipOpen.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\image\lip_BlendModeColor\default\lipOpen.png.meta
                                        • Size 389B
                                        • SHA256 48b7c5666907a4678087505204dc0f1378cef11352095f2df721ed7c88b8684f
                                        • MD5 SHA1 SHA512 TLSH

                                        lipClose.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\image\lip_BlendModeScreen\default\lipClose.png
                                        • Size 2KB
                                        • SHA256 52c83682fa56643ab687807eeb9b67b4594a714f36cf853913bb2ab9c1ac51ba
                                        • MD5 SHA1 SHA512 TLSH

                                        lipClose.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\image\lip_BlendModeScreen\default\lipClose.png.meta
                                        • Size 389B
                                        • SHA256 90199f4419689a068fbe880b75ac5d86cdf0b6f46ad237c512955693a2d3bf57
                                        • MD5 SHA1 SHA512 TLSH

                                        lipOpen.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\image\lip_BlendModeScreen\default\lipOpen.png
                                        • Size 2KB
                                        • SHA256 56add7d582ebbd5b2a97dece74b574d451f332d453107111d431979e3f2c7542
                                        • MD5 SHA1 SHA512 TLSH

                                        lipOpen.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\image\lip_BlendModeScreen\default\lipOpen.png.meta
                                        • Size 389B
                                        • SHA256 5c9403b1478256efe3d3c638c115996efbd5e1f25b1980f2e2efc71a45040cc5
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\makeup.prefab
                                        • Size 6KB
                                        • SHA256 cb06bc3c33fb9fc70348509673f93a0f92a336e735489006414c828125e9c9d1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        default.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\material\lip_BlendModeColor\default.material
                                        • Size 1KB
                                        • SHA256 fd15d72071dc0c57aee5bcdf09729d33747c2fae18dc56d3694c72a6ad954da4
                                        • MD5 SHA1 SHA512 TLSH

                                        default.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\material\lip_BlendModeMultiply\default.material
                                        • Size 1KB
                                        • SHA256 838b2a88dfe75e6606c268a887e3d58b6df0143d7b3dfb2e6442b045c13d6174
                                        • MD5 SHA1 SHA512 TLSH

                                        default.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\material\lip_BlendModeScreen\default.material
                                        • Size 1KB
                                        • SHA256 60ddfe848ad55cbb9936b3ac46d0a20667052920d9919bf1bd57310c8bb68197
                                        • MD5 SHA1 SHA512 TLSH

                                        lips_keypoint_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\mesh\lips_keypoint_faceu_mesh.mesh
                                        • Size 63KB
                                        • SHA256 aec1aa31d2ee0ab2c549c24c7bf6783239067b6ab97339f7088d9fcabbfb3815
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        lips_keypoint_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\xshader\lip_BlendModeColor\lips_keypoint_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 e36f8db78a8f7b8bb02534b3153cd76c8a685993e0a79e729555a2ed84f1f9b1
                                        • MD5 SHA1 SHA512 TLSH

                                        lips_keypoint_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\xshader\lip_BlendModeMultiply\lips_keypoint_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 6b9beb260bd5a3e11dfe7780cfb42d4de086fb03d61ddeabe74f2a4dd77b6cad
                                        • MD5 SHA1 SHA512 TLSH

                                        lips_keypoint_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\109708451\6e73061652a2aded9a47e44901c6b135\xshader\lip_BlendModeScreen\lips_keypoint_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 cdfd393bbc1f44a09d6535d877d9b18e9fd26eb17c15d7601c3305f9db4c038f
                                        • MD5 SHA1 SHA512 TLSH

                                        effectStyle.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1150052650\d229bef8f1fe5e923bd2b14cfac3f2d0\effectStyle.json
                                        • Size 3KB
                                        • SHA256 9077020c7fa8643ad49e7e9f2c8e4b21bbf82077a559a36d0a0ca4948a883e4c
                                        • MD5 SHA1 SHA512 TLSH

                                        content.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\content.json
                                        • Size 124B
                                        • SHA256 0669de323ba67f574e25e3bdfee2a4f83728e9cd816daadd2ca377e3ca85befc
                                        • MD5 SHA1 SHA512 TLSH

                                        highlight.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\image\blusher\highlight.png
                                        • Size 3KB
                                        • SHA256 fdc44ec844974bdeb4843c0d0d0141b593171eec665acdc037b586e8c7a15d08
                                        • MD5 SHA1 SHA512 TLSH

                                        eyemazingScreen.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\image\eyemazing\eyemazingScreen.png
                                        • Size 854B
                                        • SHA256 7426c4a830267456ebff3b7086fddbf5c750a75bed0e51bb1ed688725af77ead
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3d_ydku_1658219217.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\image\mask3d\makeup3d_ydku_1658219217.png
                                        • Size 3KB
                                        • SHA256 b30fea7cb736b41155b14120fd18a8850cffe59a692282a8a1f2cc985dda1c1a
                                        • MD5 SHA1 SHA512 TLSH

                                        pupilBlend.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\image\pupil\pupilBlend.png
                                        • Size 2KB
                                        • SHA256 69b6f5ad4478419726f6b21c9ea294e5c9dc7247a686f59fafa962d3b56197cf
                                        • MD5 SHA1 SHA512 TLSH

                                        pupilMask.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\image\pupil\pupilMask.png
                                        • Size 13KB
                                        • SHA256 1d92065d246931a45962c3f3ab2d3faf531553cb657d273de8287dd4201f0545
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        makeup.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\image\sequin3d\makeup.png
                                        • Size 2KB
                                        • SHA256 f223c32df2d3ea7b8e8c86e17b7ba830f780582464c1981dbc01f1007667f5cc
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.lua

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\lua\makeup.lua
                                        • Size 11KB
                                        • SHA256 d6b29b3dbad7448ace6a12d94b324ad2a63e114aa497c4f728ec5ef9ea784e52
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        blusher_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\blusher_faceu_mesh.mesh
                                        • Size 63KB
                                        • SHA256 2d85c3a2c7c574d9cba016e138f30aa90e98c1c151f50f218e68571a2c25ea34
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        brow_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\brow_faceu_mesh.mesh
                                        • Size 83KB
                                        • SHA256 b335edacbb7bbef18660820df3c70649d93f07f28a59fcd9b673620b0941dbd7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eyelash_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\eyelash_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 202b45fb18ab68677cba522620b08b8fb17234944fb8c01984972273606c84f0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eyeline_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\eyeline_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 d3c7a7fbc5bf20fd49eb2e827301ab7e92676aa1a1e1d16a794c7fa2b949657a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eyemazing_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\eyemazing_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 4339f8c202c4a6c5a3ad9dfda5ae644e7dae2bb9c6f0330081f673b53e9c184b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eyeshadow_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\eyeshadow_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 23289099487da2bf9da9e2fe47cc1dd3c60e13ef1918468be08b502497a3a415
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        face3d0_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\face3d0_mesh.mesh
                                        • Size 60KB
                                        • SHA256 1dff2409b09b132743968b4caf63a44d9c51bf0edb2fdceb405bc9a3425930af
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        lips_keypoint_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\lips_keypoint_faceu_mesh.mesh
                                        • Size 63KB
                                        • SHA256 250e058fe5853ad39086aff53fe8af95a27c9a5598f5ec037a70d1d6f8898aae
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pupil_cutoff_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\pupil_cutoff_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 ca2b9c36d66138f330d406ee57480100092c87a32044d4727526d9561e0bb0d2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pupil_main_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\pupil_main_faceu_mesh.mesh
                                        • Size 28KB
                                        • SHA256 35822c1f49274af2a4a8a41a91f377226d89533394c3805787e74de4ed4a4996
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        stereo_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\mesh\stereo_faceu_mesh.mesh
                                        • Size 63KB
                                        • SHA256 811f5ed512566735df26e99549e723fe59f19b20edacdef3559483ab1b925d8a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        scene.config

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\122701293\b0d7edcba031d1f3c7110dfee59b89f8\AmazingFeature\scene.config
                                        • Size 327B
                                        • SHA256 a40ad6b5727237f47ed479a8ac9fd0ccb0971b0180627b0301145b474295c751
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\147688242\8f3bc975aaaf27219892c2f0957c9062\AmazingFeature\image\lip3d\makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png
                                        • Size 9KB
                                        • SHA256 4a34ef0878e32eae577c0247b7be2c8eb2ca7f52d71bd53fd6834d63917a4451
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\147688242\8f3bc975aaaf27219892c2f0957c9062\AmazingFeature\image\lip3d\makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png
                                        • Size 9KB
                                        • SHA256 4126d34856e02e79291ddb2752d1ae4ee554bb07dd20315ab6e7a0265f154263
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\148796720\3577e818eb57f6667aa359b8aa20d3ec\makeup.prefab
                                        • Size 1KB
                                        • SHA256 37ac27f799ab49aa5f9677fb43267c15998d7149b2af9b677753600b52b3518f
                                        • MD5 SHA1 SHA512 TLSH

                                        Blusher_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\148796720\3577e818eb57f6667aa359b8aa20d3ec\material\Blusher_MATERIAL.material
                                        • Size 1KB
                                        • SHA256 5ffa96b9f59f9b3661817a3d10bdbe629e1a418de8b916fa415a576924827ce4
                                        • MD5 SHA1 SHA512 TLSH

                                        blusher_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\148796720\3577e818eb57f6667aa359b8aa20d3ec\mesh\blusher_faceu_mesh.mesh
                                        • Size 63KB
                                        • SHA256 8e8d1da449e7b351407718ed96433b938acab9941e88fbfc020935078c68044b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        blusher.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\148796728\b4147a4c79ba1b5edc8cd08e068aeebb\image\blusher\blusher.png.meta
                                        • Size 372B
                                        • SHA256 d4eb132d63301b90a7d848da64c1c44a77f6b686d5c77e01c6d60601932c0105
                                        • MD5 SHA1 SHA512 TLSH

                                        highlight.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\148796728\b4147a4c79ba1b5edc8cd08e068aeebb\image\blusher\highlight.png
                                        • Size 3KB
                                        • SHA256 1cb846c3b8d24fd6e7f2d6b2d63fb96cbc21aa41cf68403a140c124ce3eb75dd
                                        • MD5 SHA1 SHA512 TLSH

                                        highlight.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\148796728\b4147a4c79ba1b5edc8cd08e068aeebb\image\blusher\highlight.png.meta
                                        • Size 372B
                                        • SHA256 c6e89673d4a3ebab0c951e66bffbc89111f7eb9429dbf925844e0a5da697f18f
                                        • MD5 SHA1 SHA512 TLSH

                                        a49e09f507b225efa5d518d755141a22.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\15318655\5e73b9655ea23c6ea73a491b59567c8e\Library\ShaderData\0007e48d815c3c80bd9d3bd0646828af\shaderGLES\a49e09f507b225efa5d518d755141a22.vert
                                        • Size 389B
                                        • SHA256 d5f28353f549f07e2d920679a70c388b64da3f517fdda5fd8d27ad8872f8a56c
                                        • MD5 SHA1 SHA512 TLSH

                                        a49e09f507b225efa5d518d755141a22.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\15318655\5e73b9655ea23c6ea73a491b59567c8e\Library\ShaderData\0007e48d815c3c80bd9d3bd0646828af\shaderMetal\a49e09f507b225efa5d518d755141a22.vert
                                        • Size 776B
                                        • SHA256 2c8707b0f0ddc18954e184c81fed827c5fbaf7018ec184585a2f67800bdae8ea
                                        • MD5 SHA1 SHA512 TLSH

                                        stereo.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\154253155\2bc750d1bdbf4296d1273e2daab19bda\image\stereo\stereo.png.meta
                                        • Size 372B
                                        • SHA256 dcc463c0ee813e42d4e0e05066f696703653ebf4d390cfa81ae35863b64854d8
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\154253155\2bc750d1bdbf4296d1273e2daab19bda\makeup.prefab
                                        • Size 1KB
                                        • SHA256 28de7130ac8b2159af2661864a757489eff76468dd001977d0c6445815f44c42
                                        • MD5 SHA1 SHA512 TLSH

                                        Stereo_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\154253155\2bc750d1bdbf4296d1273e2daab19bda\material\Stereo_MATERIAL.material
                                        • Size 944B
                                        • SHA256 4562c281136130121b1471b3822fb76568f876ed330905efb90858ea43695910
                                        • MD5 SHA1 SHA512 TLSH

                                        stereo_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\154253155\2bc750d1bdbf4296d1273e2daab19bda\mesh\stereo_faceu_mesh.mesh
                                        • Size 63KB
                                        • SHA256 846cb6c3b80c15ceaf29ccf6e134503c38e24ae7002fb4ec33116c09cfe09c5e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        algorithmConfig.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602318397\5c09bfcce17ece9a45b61b546f3cf017\AmazingFeature\algorithmConfig.json
                                        • Size 1KB
                                        • SHA256 fc5def8345d70bc9a9fa64798af85ecf03f932d68c418e3cae08e243672efd3d
                                        • MD5 SHA1 SHA512 TLSH

                                        Quad.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602318397\5c09bfcce17ece9a45b61b546f3cf017\AmazingFeature\mesh\Quad.mesh
                                        • Size 1KB
                                        • SHA256 d9235bfc369cdfabf1925aaa6dbfe15849fbcff9cb087d7a9d4e30aea3bf0e3a
                                        • MD5 SHA1 SHA512 TLSH

                                        maskV2FaceU.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602318397\5c09bfcce17ece9a45b61b546f3cf017\AmazingFeature\mesh\maskV2FaceU.mesh
                                        • Size 44KB
                                        • SHA256 76ac90d58584a3bb19e467cfce6849dca3132ea87bf19bd2425f7a8d456f856f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602318397\5c09bfcce17ece9a45b61b546f3cf017\AmazingFeature\sticker.config
                                        • Size 284B
                                        • SHA256 0a426cb6f8e48b35d829117eb0bab4202eaf9d508bbac44b7582ff1fa9630e98
                                        • MD5 SHA1 SHA512 TLSH

                                        algorithmConfig.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602318397\5c09bfcce17ece9a45b61b546f3cf017\algorithmConfig.json
                                        • Size 1KB
                                        • SHA256 97508721427557fd638152826f5d4d61c82af686127e78fe40cfa1819bf38133
                                        • MD5 SHA1 SHA512 TLSH

                                        filter_bg.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\image\filter_bg.png
                                        • Size 2KB
                                        • SHA256 c7e00507981bc06c2dded864c622fbadaae8e189cb64055c08606f2ce0cc4771
                                        • MD5 SHA1 SHA512 TLSH

                                        mask.rt

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\rt\mask.rt
                                        • Size 569B
                                        • SHA256 968ec53c34fb5808f18829f3ef23a74f8540f7d8f725f68dab58598d64748e9b
                                        • MD5 SHA1 SHA512 TLSH

                                        renderOutput.rt

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\rt\renderOutput.rt
                                        • Size 567B
                                        • SHA256 0a1eec4370c28cfaa59f4b1161dc1ab986e7e684e78fa23a78833c5894f14e32
                                        • MD5 SHA1 SHA512 TLSH

                                        filter_skin.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\xshader\filter_skin.png
                                        • Size 115KB
                                        • SHA256 6bb029d1ec88c5d7c7d745ab3e75118004242a7d7758b33dfc0d80ee6e091d69
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        mask.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\xshader\mask.frag
                                        • Size 197B
                                        • SHA256 2f6cfd14a35b13b37d040e37c5752872e250eaea64e74df1cd9aeda42f330b86
                                        • MD5 SHA1 SHA512 TLSH

                                        mask.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\xshader\mask.vert
                                        • Size 332B
                                        • SHA256 697343bf1153aa14cd79be5872b5e8cb0a4492608642a191e1c0fcbe447b1d5c
                                        • MD5 SHA1 SHA512 TLSH

                                        mask.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\xshader\mask.xshader
                                        • Size 2KB
                                        • SHA256 41294e832a59fe1b7d0bd792044f28604deedd9124a8c5cc72994652b9fcd4d5
                                        • MD5 SHA1 SHA512 TLSH

                                        skinSeg.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\xshader\skinSeg.frag
                                        • Size 4KB
                                        • SHA256 fde43cc642d14c4d952c82081bf3cb77db1aea3efb07eb4c852625f977645b34
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        skinSeg.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\xshader\skinSeg.vert
                                        • Size 262B
                                        • SHA256 3a01466f907240d1a6a1340f1927e70b35842ba59db42a50c956fbeb2aa1880d
                                        • MD5 SHA1 SHA512 TLSH

                                        skinSeg.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\1602325308\79a3e8e3cfa6a02bc7065dd7d856b69d\AmazingFeature\xshader\skinSeg.xshader
                                        • Size 2KB
                                        • SHA256 6ce36da77a87c2a5a2a937ba5053805a4808a614b95f79bfa40e2fdbf33fa79b
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183539036\0e74d8d9739ee72017116c963446167d\makeup.prefab
                                        • Size 1KB
                                        • SHA256 df7e70abca8744abd7221d21de3638e9997fd7c23498bd66a43f401940740480
                                        • MD5 SHA1 SHA512 TLSH

                                        Brow.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183539036\0e74d8d9739ee72017116c963446167d\material\Brow.material
                                        • Size 1KB
                                        • SHA256 9ee15b28be2d6822f33dea3c1b3a6774d7e9db3aebf32a8653c8484d1aaa1931
                                        • MD5 SHA1 SHA512 TLSH

                                        brow_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183539036\0e74d8d9739ee72017116c963446167d\mesh\brow_faceu_mesh.mesh
                                        • Size 83KB
                                        • SHA256 b3131906b92066516ca6554e908e890e8624e9241ba97646d42be7acb1aa4876
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        brow_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183539036\0e74d8d9739ee72017116c963446167d\xshader\brow_faceu.frag
                                        • Size 7KB
                                        • SHA256 d0a2aeab856aecdd12391b38104f4055bac4761c2b095c05c0c69ce63c19ec77
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        brow_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183539036\0e74d8d9739ee72017116c963446167d\xshader\brow_faceu_xshader.xshader
                                        • Size 1KB
                                        • SHA256 ccb19281f41a3d085d11f0322ec69376d15ba8e1750c4fa79a9b6c3264763c40
                                        • MD5 SHA1 SHA512 TLSH

                                        eyebrow.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183539056\01e593a081e9d83a1d395a0b2bc52b5f\image\eyebrow\eyebrow.png.meta
                                        • Size 389B
                                        • SHA256 9922ccd1bcc6f081378c71c9c6be5f0721ee79f4960a3b59393f6c04b8d1fc6b
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.lua

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183539056\01e593a081e9d83a1d395a0b2bc52b5f\lua\makeup.lua
                                        • Size 13KB
                                        • SHA256 65736fab7c2626daf058d30bbcc64e4ae99b10612985d759b320ce051dffe96c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eyeline.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183545427\3ea115b69e5ec2f6121ab20b7e962be8\image\eyeline\eyeline.png.meta
                                        • Size 389B
                                        • SHA256 fb6add39b4089e6621e573312359929185e172e1f5d2d450e9465d98fde33756
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183545427\3ea115b69e5ec2f6121ab20b7e962be8\makeup.prefab
                                        • Size 1KB
                                        • SHA256 fb7a0e9e87b37f6945519f5c80459031caf6aec646583cebc0d1cdbb81f8d68c
                                        • MD5 SHA1 SHA512 TLSH

                                        Eyeline.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183545427\3ea115b69e5ec2f6121ab20b7e962be8\material\Eyeline.material
                                        • Size 1KB
                                        • SHA256 c52afccff0bd9df3096ca0ed874de125fad1ec6de75d4d24f4fdded905cd581b
                                        • MD5 SHA1 SHA512 TLSH

                                        eyeline_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183545427\3ea115b69e5ec2f6121ab20b7e962be8\mesh\eyeline_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 e93247f6f2136b20c6be7994c441cd64a10a48f5e320be605d9464ec2d26d29b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eye_part_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\183545427\3ea115b69e5ec2f6121ab20b7e962be8\xshader\eye_part_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 f8c6a319734bb923101cc301ab8b4bddc63aff4deba18af7efed41f3b76b3de7
                                        • MD5 SHA1 SHA512 TLSH

                                        fdx.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\208999222\97f83e1ca839d3c686f41001d162e749\AmazingFeature\xshader\fdx.frag
                                        • Size 144B
                                        • SHA256 95fa84eab1997804a7e57c53906417d2c79708aedec5d7524741d3353a2d0cc3
                                        • MD5 SHA1 SHA512 TLSH

                                        fdx.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\208999222\97f83e1ca839d3c686f41001d162e749\AmazingFeature\xshader\fdx.vert
                                        • Size 186B
                                        • SHA256 7e9795207bc2409092b891b6d0173987320fc1514ae7ea108788e3a276c3b369
                                        • MD5 SHA1 SHA512 TLSH

                                        wry_eye_left_mask.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209037762\ad266b4c243dd44894de3f4bf5e618fe\AmazingFeature\image\wry_eye_left_mask.png
                                        • Size 17KB
                                        • SHA256 0b985d8d356e7b7e03683e69f55512d772be59546805e93756622d7c01005bc4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        fd_withMask.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209037762\ad266b4c243dd44894de3f4bf5e618fe\AmazingFeature\xshader\left_eyebrow\fd_withMask.frag
                                        • Size 394B
                                        • SHA256 302f91e4312294c6598f41aa14ac4d458180b1283493e4cb1315aeb3f73d1b24
                                        • MD5 SHA1 SHA512 TLSH

                                        fd_withMask.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209037762\ad266b4c243dd44894de3f4bf5e618fe\AmazingFeature\xshader\right_eyebrow\fd_withMask.frag
                                        • Size 394B
                                        • SHA256 5d0de8ab72347416e17c3c35675c8ccc5389071807fd1c6ac32453e022e5762a
                                        • MD5 SHA1 SHA512 TLSH

                                        fd_withMask_neg.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209037762\ad266b4c243dd44894de3f4bf5e618fe\AmazingFeature\xshader\smile_all\fd_withMask_neg.frag
                                        • Size 337B
                                        • SHA256 b907b4405a5a1ead688443533f83a65cfe3283722bf2ccda26e5ee12a3d6dbaf
                                        • MD5 SHA1 SHA512 TLSH

                                        fd_withMask_neg.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209108778\7fe9dfed61d7a1298ca2521f6a660d6e\AmazingFeature\xshader\mouth_all\fd_withMask_neg.frag
                                        • Size 373B
                                        • SHA256 9d74ad01344b5626ae51fcd62e30ba706e378790c6c559317cfdfc23072150ad
                                        • MD5 SHA1 SHA512 TLSH

                                        fd_withoutMask.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209140712\51c7d4646423fff2ccfbc3314150b43c\v6\xshader\fd_withoutMask.frag
                                        • Size 143B
                                        • SHA256 c406f750403fc65a9a9dabb48aca03263a039f696a6196c671f9fd8a004d7b92
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3dMesh4.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209141070\cf0b131897e47e265ac3f20e742d6c71\AmazingFeature\mesh\makeup3dMesh4.mesh
                                        • Size 131KB
                                        • SHA256 cb217d420132b9438857b5b1a37f98e7b7b8d8c4105e8820e742b796aa38bf6e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        blusher.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\blusher\blusher.png.meta
                                        • Size 372B
                                        • SHA256 5353e97a26c433fc990be9cac6b756c405a68b8d2c7b8a87f604d24e0f417dd9
                                        • MD5 SHA1 SHA512 TLSH

                                        highlight.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\blusher\highlight.png.meta
                                        • Size 372B
                                        • SHA256 08451466120be81fe790d1e76d389454f671c96ec6d5a964ae08c74ef501593d
                                        • MD5 SHA1 SHA512 TLSH

                                        empty.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\empty.png.meta
                                        • Size 372B
                                        • SHA256 2c46bd9a4ae4ac3eaa08dac4d32fc842547fa15d379fdbfcf0b3b4caefb19849
                                        • MD5 SHA1 SHA512 TLSH

                                        eyebrow.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\eyebrow\eyebrow.png.meta
                                        • Size 372B
                                        • SHA256 2ff453e8335b8dc35a0e1c0a3ee3983d899a8f18d0f07765eeb225a364af9e97
                                        • MD5 SHA1 SHA512 TLSH

                                        eyelash.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\eyelash\eyelash.png.meta
                                        • Size 372B
                                        • SHA256 e0ac0b4cfbe3a91f2e52faf3f0a5d835e3e39e869daad94d80cfa0b13b7e473b
                                        • MD5 SHA1 SHA512 TLSH

                                        eyeline.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\eyeline\eyeline.png.meta
                                        • Size 372B
                                        • SHA256 724a84b295239def4ecdf76345e2062c53f50a65f69bf1ea438eda802636b5c1
                                        • MD5 SHA1 SHA512 TLSH

                                        eyemazing.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\eyemazing\eyemazing.png.meta
                                        • Size 372B
                                        • SHA256 2287d5fc5e6df6a6fc8a60b2ec1aa34733e2140a93d940faaaf817fc631c81b7
                                        • MD5 SHA1 SHA512 TLSH

                                        eyemazingScreen.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\eyemazing\eyemazingScreen.png.meta
                                        • Size 372B
                                        • SHA256 5d84cedeb80e497cb856cb1f19045b8f97e17bb91ed93412e09a16f9d12fca79
                                        • MD5 SHA1 SHA512 TLSH

                                        eyeshadow.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\eyeshadow\eyeshadow.png.meta
                                        • Size 372B
                                        • SHA256 bf40f1ae102b155b45ed90b16e62676fb859c207dd3af6af376de6bd3a69e768
                                        • MD5 SHA1 SHA512 TLSH

                                        eyeshadowScreen.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\eyeshadow\eyeshadowScreen.png.meta
                                        • Size 372B
                                        • SHA256 0284e3cc79a92cd9d6d5368ecd22eb5434192271018d472c4ea70fb05e14a760
                                        • MD5 SHA1 SHA512 TLSH

                                        highlight_khgp_1655297390.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\highlight3d\highlight_khgp_1655297390.png.meta
                                        • Size 372B
                                        • SHA256 7baefcec0ce42df999c84784119db109058c72fdbcf901cd8ceca4dae5ee02cc
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3dLipPoutEnvironment2_advj_1665303912.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\lip3d\makeup3dLipPoutEnvironment2_advj_1665303912.png.meta
                                        • Size 372B
                                        • SHA256 5c8e3929d43f33bead031153496d01a11dbc55da3e74755cc34969106a17d865
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\lip3d\makeup3dLipPoutEnvironmentMask2_laxx_1665303912.png.meta
                                        • Size 372B
                                        • SHA256 e21fea8ac79a3aec26370b013b3e16cf66dfde3cc23ca54e159cfbe68ca6bb79
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\lip3d\makeup3dLipPoutEnvironmentMask_ysjn_1665303912.png.meta
                                        • Size 372B
                                        • SHA256 bea84ead42b64d565f103d5afdc06328f533d54bd9a793dd8496d23f1166361d
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3dLipPoutEnvironment_mfgl_1665303912.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\lip3d\makeup3dLipPoutEnvironment_mfgl_1665303912.png.meta
                                        • Size 372B
                                        • SHA256 5e6e41e763388f63d5038ea7375d2ae42ee42671e6a8cea57fa51bb45c741b12
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3dLipPoutNormal_zilf_1665303912.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\lip3d\makeup3dLipPoutNormal_zilf_1665303912.png.meta
                                        • Size 372B
                                        • SHA256 e971a65ed0dad75cc860ea1f7d92d1c7dbdef84f47afa6b5f079aacda1605076
                                        • MD5 SHA1 SHA512 TLSH

                                        lipClose.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\lip\lipClose.png.meta
                                        • Size 372B
                                        • SHA256 101f18298b3bb53859a52b0a15a27dea7d36c6fdad25654930f15af7e23c38c8
                                        • MD5 SHA1 SHA512 TLSH

                                        lipGloss.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\lip\lipGloss.png.meta
                                        • Size 372B
                                        • SHA256 49ff5ae94bac7bf11b5d9060301b97d7b10c6c689eee70d7ba01a4ffec5ba54d
                                        • MD5 SHA1 SHA512 TLSH

                                        lipOpen.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\lip\lipOpen.png.meta
                                        • Size 372B
                                        • SHA256 6c9fa2e1ac14c7c7f77a5329fe4354963a3a81c6f73e123a0ab37175f6a6cf4a
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup3d_ydku_1658219217.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\mask3d\makeup3d_ydku_1658219217.png.meta
                                        • Size 372B
                                        • SHA256 641f3a8e037f0ce9b8d23c492f2ceca152f145d8d972c884f4765e04af09f53e
                                        • MD5 SHA1 SHA512 TLSH

                                        pupilBlend.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\pupil\pupilBlend.png.meta
                                        • Size 372B
                                        • SHA256 0688f8d39b11e93a565401cc044b0461192e675fd5f9ddd6ce5c254c49db480a
                                        • MD5 SHA1 SHA512 TLSH

                                        pupilMask.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\pupil\pupilMask.png.meta
                                        • Size 372B
                                        • SHA256 8446aaa88d8f0af99967f5b0ff1d0108d4d942b149f33ea7937c484ac2650709
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\sequin3d\makeup.png.meta
                                        • Size 372B
                                        • SHA256 d6a759edeeb0e2a2bd68959913b26e22aa4903e0dfc1db4d970996b6b42c46cd
                                        • MD5 SHA1 SHA512 TLSH

                                        stereo.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\image\stereo\stereo.png.meta
                                        • Size 372B
                                        • SHA256 5777be1002e3d32bf51f8311de7c5803c60051af2f4e7a55b426ee47e320ede8
                                        • MD5 SHA1 SHA512 TLSH

                                        main.scene

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\main.scene
                                        • Size 19KB
                                        • SHA256 cb91ed21d78c6f2cf607ad737648e75a490c936c6f71b22eeeb4f2b7fe93ae55
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Blit_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Blit_MATERIAL.material
                                        • Size 566B
                                        • SHA256 bc3681e220f6d6ee22a6d1f8f6e3c89b25b7f30c6f1c441478e253e56e7558dc
                                        • MD5 SHA1 SHA512 TLSH

                                        Blusher_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Blusher_MATERIAL.material
                                        • Size 1KB
                                        • SHA256 1bab23f4d517a78324217d431246cb031cd3345fa28c2d5915b259dd8eb31362
                                        • MD5 SHA1 SHA512 TLSH

                                        Brow_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Brow_MATERIAL.material
                                        • Size 895B
                                        • SHA256 322af39f51cc7d6e598c38701d68e568fd35e66a01a3ca92165b91d18dddcc05
                                        • MD5 SHA1 SHA512 TLSH

                                        Eyelash_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Eyelash_MATERIAL.material
                                        • Size 874B
                                        • SHA256 94d6aafa9c053e352c21055ecabcaecd34d601476f50530d8e8c6af31aae3c5a
                                        • MD5 SHA1 SHA512 TLSH

                                        Eyeline_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Eyeline_MATERIAL.material
                                        • Size 874B
                                        • SHA256 53eaa958dfff1419f7c8770fe46615df4f74bb1b9d3ed5a9a63ac9d03bb7f078
                                        • MD5 SHA1 SHA512 TLSH

                                        Eyemazing_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Eyemazing_MATERIAL.material
                                        • Size 1KB
                                        • SHA256 94c0db2feffe71043001b4a9aa662301c354f59603e6f048a00602c8682d8413
                                        • MD5 SHA1 SHA512 TLSH

                                        Eyeshadow_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Eyeshadow_MATERIAL.material
                                        • Size 1KB
                                        • SHA256 6cd36cb72083cb6e12fe3daa1f1cd89c10db68e340dc6dad65e41e21ccdb088e
                                        • MD5 SHA1 SHA512 TLSH

                                        Face3D_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Face3D_MATERIAL.material
                                        • Size 2KB
                                        • SHA256 0cbff7eff050aa3e378cddde1e8cff8beb8ea61de8e5a87962bdc26336b7aeee
                                        • MD5 SHA1 SHA512 TLSH

                                        Lip_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Lip_MATERIAL.material
                                        • Size 1KB
                                        • SHA256 640a89c448183e7d1869b5f0cdb59f9c4cc60b08178b46ba6dd3c369a0a48a6c
                                        • MD5 SHA1 SHA512 TLSH

                                        PupilCutoff_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\PupilCutoff_MATERIAL.material
                                        • Size 804B
                                        • SHA256 503e185e175a864f12a00a880c5d0d1fdda609e5cb1b6b922521baf68f25720a
                                        • MD5 SHA1 SHA512 TLSH

                                        Pupil_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Pupil_MATERIAL.material
                                        • Size 1KB
                                        • SHA256 93cc83a0f6f07469845de6a5090cb77d063a1a8fabe98433961c05e835573e2b
                                        • MD5 SHA1 SHA512 TLSH

                                        Stereo_MATERIAL.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\material\Stereo_MATERIAL.material
                                        • Size 868B
                                        • SHA256 2fed6ebca1cd0505bdf5c0f0b74981a335667dbd2ec01d30610b58326f5e1a88
                                        • MD5 SHA1 SHA512 TLSH

                                        Quad.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\mesh\Quad.mesh
                                        • Size 1KB
                                        • SHA256 1e6ece018cf6cab71d4b6bfba35dcc8f53fb2f4ea7be46c600df1e2a419cf3fc
                                        • MD5 SHA1 SHA512 TLSH

                                        face3d1_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\mesh\face3d1_mesh.mesh
                                        • Size 60KB
                                        • SHA256 ce8fdc2fbf72bb65bbd62283d4caa07acef42f257183be1d4f71e1cbaa7900b5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        face3d2_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\mesh\face3d2_mesh.mesh
                                        • Size 60KB
                                        • SHA256 d4ee80f6229cbc328111d6b4424546235fcedcd437794f4b843820ce4550f553
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        face3d3_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\mesh\face3d3_mesh.mesh
                                        • Size 60KB
                                        • SHA256 d11a7269c87ea75a097efec55fce7744d18b22852cdb7094f6baa6cea0292913
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        face3d4_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\mesh\face3d4_mesh.mesh
                                        • Size 60KB
                                        • SHA256 c541ef6bea057f1f2d7728124ad48980debbd57f57d7cbebb6425a3ef7ffadf7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        output2d.rt

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\rt\output2d.rt
                                        • Size 626B
                                        • SHA256 43fa8c754724209ce7783cfd4bd5b7c444653b602c645174fef405309ed5b13f
                                        • MD5 SHA1 SHA512 TLSH

                                        outputTex.rt

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\rt\outputTex.rt
                                        • Size 510B
                                        • SHA256 0418727a0ecef6bc7e84e3ee75d19177d7abb3b2da96033b8e146a017beb0d55
                                        • MD5 SHA1 SHA512 TLSH

                                        blit_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\xshader\blit_xshader.xshader
                                        • Size 1KB
                                        • SHA256 cefeb2ae7e438bff67a991424b645aae8645e47e052a2cb66bded383abc5bc06
                                        • MD5 SHA1 SHA512 TLSH

                                        brow_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\xshader\brow_faceu_xshader.xshader
                                        • Size 1KB
                                        • SHA256 3e9653bacd688598a778208af66e038ad38a4e4b13aff8c838e14eef218bbad5
                                        • MD5 SHA1 SHA512 TLSH

                                        eye_part_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\xshader\eye_part_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 489013c92ecc869e979ea03bdab3974e4d3590ca277899fd2b84f1a953b89176
                                        • MD5 SHA1 SHA512 TLSH

                                        face3d_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\xshader\face3d_xshader.xshader
                                        • Size 3KB
                                        • SHA256 77ca4f0110fa032cbe5fd4f66a136c87fe8f867521cdc7727b0d5c915814db76
                                        • MD5 SHA1 SHA512 TLSH

                                        lips_keypoint_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\xshader\lips_keypoint_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 b117e7eeb45d2b3cf8f6de01d75e96c0593b01dff760cc2aa05c264bf9d56384
                                        • MD5 SHA1 SHA512 TLSH

                                        mask_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\xshader\mask_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 e3cc733a9c7f7444b4115cf4381a2f2b113d9a531d454e46ccd4da3e7539ca67
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_cutoff_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\xshader\pupil_cutoff_faceu_xshader.xshader
                                        • Size 1KB
                                        • SHA256 7238ac2234a741a096cc4072223c9af548349e8f9e761944b895930211349448
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_main_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\AmazingFeature\xshader\pupil_main_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 cfe45286dd2088124a63f542dcfb0ed0899cf143003a184c8270288c99977fed
                                        • MD5 SHA1 SHA512 TLSH

                                        algorithmConfig.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\209144312\f8b7c8f567614de720f10f884cc0edb2\algorithmConfig.json
                                        • Size 1KB
                                        • SHA256 64225d764d871973fc103a62fa034b8d6671926dba7f1da6ff753e07944d082d
                                        • MD5 SHA1 SHA512 TLSH

                                        freckles.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224122391\b8e0a5c1dd9016c936b8cfa0eb375370\image\mask3d\freckles.png.meta
                                        • Size 389B
                                        • SHA256 ae1bd5fcef02bc463e7688e365e1b27175bb34e172b7a3281922659bddb18950
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224122391\b8e0a5c1dd9016c936b8cfa0eb375370\makeup.prefab
                                        • Size 810B
                                        • SHA256 6363e4188dfaa247234743cc9587f2dd199e36e2c326996d95d13c183bd8e406
                                        • MD5 SHA1 SHA512 TLSH

                                        Freckles.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224122391\b8e0a5c1dd9016c936b8cfa0eb375370\material\Freckles.material
                                        • Size 1KB
                                        • SHA256 b8d4b4d9b62656ef189287844d3b2dfc61749a60901073130c416b0b5aacb029
                                        • MD5 SHA1 SHA512 TLSH

                                        highlight_khgp_1655297390.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224151435\d693b21f37cb011c0f2aff3482b7484f\image\highlight3d\highlight_khgp_1655297390.png.meta
                                        • Size 389B
                                        • SHA256 1570f754acd864a92b14083f2b6837e3a0abc9d23918bcf26e32ec59f726ed7c
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224151435\d693b21f37cb011c0f2aff3482b7484f\makeup.prefab
                                        • Size 812B
                                        • SHA256 d0cf789981d52b6ccab89d4277e5a34b43a2883df9571ea40174b8e0ca111367
                                        • MD5 SHA1 SHA512 TLSH

                                        Highlight.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224151435\d693b21f37cb011c0f2aff3482b7484f\material\Highlight.material
                                        • Size 1KB
                                        • SHA256 f80377e3485b4360f3efdaf3d9fdaf91035832c90ac2418f01d05b7570066da0
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.lua

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224151628\c3baa4a9c2500fb186aec89d038d8d1f\lua\makeup.lua
                                        • Size 23KB
                                        • SHA256 d17e1f07d888d91f79afc135019eacd53fa53e4c0c1c16bf4ec3cf2b60356ec3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        face3d.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224151628\c3baa4a9c2500fb186aec89d038d8d1f\xshader\face3d.frag
                                        • Size 24KB
                                        • SHA256 be863db84b7416c77b8e79d6b4dbb6d8d496121d7668430ae238ccf97da79e99
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        face3d.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224151628\c3baa4a9c2500fb186aec89d038d8d1f\xshader\face3d.xshader
                                        • Size 3KB
                                        • SHA256 2f0718212ce60d757384d638e94252891a4305a5acce00b8a6a3b66fb8512ddf
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_mask.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\image\pupil\pupil_mask.png.meta
                                        • Size 389B
                                        • SHA256 20c488afc4ab267139daec3c40929b5af76389cdfd7d31211b2406f2c04de0ef
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_normal.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\image\pupil\pupil_normal.png.meta
                                        • Size 389B
                                        • SHA256 fc864b03fe7db240ac644642777df50224891dfe70204cefcc0e442e110a22c9
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_screen.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\image\pupil\pupil_screen.png.meta
                                        • Size 389B
                                        • SHA256 a5d5bf3e91ddda99e65a52900a1f11c67d1559612d0ecccccfa0fd7c5b2bc74c
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.lua

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\lua\makeup.lua
                                        • Size 16KB
                                        • SHA256 907653b3843ba20e5e0e2815379a48d1a565a8ebd192e9e43a6280af315da433
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\makeup.prefab
                                        • Size 3KB
                                        • SHA256 7b1a836bd3ddd1c750e04c93dc93663a0f11fd9f34d92733b4b36b1f724d81fc
                                        • MD5 SHA1 SHA512 TLSH

                                        Pupil.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\material\Pupil.material
                                        • Size 1KB
                                        • SHA256 9fabba3d27d423601ee26916dc8b4c576a15931a3a684b9e946918c5eaa15cc6
                                        • MD5 SHA1 SHA512 TLSH

                                        PupilCutoff.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\material\PupilCutoff.material
                                        • Size 974B
                                        • SHA256 d46460794f87ef4340906c701c8af88a93e704bcf13c151fb7e351552176060c
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_cutoff_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\mesh\pupil_cutoff_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 ec84ae195c09682d4ce74a27897a19adc58089fc5a53edd6ded21aa5ebcf4457
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pupil_main_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\mesh\pupil_main_faceu_mesh.mesh
                                        • Size 28KB
                                        • SHA256 dba4bd6dba5216583d0f72746f9ca18031245b10870d314072aee7f70dc6a883
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pupil_cutoff_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\xshader\pupil_cutoff_faceu.frag
                                        • Size 334B
                                        • SHA256 0e73feab762154c9309bfc810767fd49fd2dbdf2bab8ee42948db972d9654bac
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_cutoff_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\xshader\pupil_cutoff_faceu_xshader.xshader
                                        • Size 1KB
                                        • SHA256 fbeba719f3d67edd1b48bc5f7564a3cc7e39dd0a7a582cfdd2e595595c9f77ce
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_main_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\xshader\pupil_main_faceu.frag
                                        • Size 7KB
                                        • SHA256 42375964dc572d6d7227416e9a33910ae97b7e05ecf8a30e93a23fbdfb2e84dc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pupil_main_faceu.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\xshader\pupil_main_faceu.vert
                                        • Size 492B
                                        • SHA256 8712ba7f01887a489ae022f4aa1b19a398c1ab1014aab841928e6b63d6af7a41
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_main_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\224167888\46dec5de0e4dad6bfa81636d71530f41\xshader\pupil_main_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 d4a79792e5e6f6f17d81a81b1305ee1485e60f3053bc5bf3a3a4bf68e095e245
                                        • MD5 SHA1 SHA512 TLSH

                                        empty.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\232454626\15ae372d6e2b41bfe83be06203b7be00\AmazingFeature\image\empty.png
                                        • Size 1KB
                                        • SHA256 525395c550b72851bee477e1a44bd3360890aadaaa7d2fc43fe4bf86361f1da5
                                        • MD5 SHA1 SHA512 TLSH

                                        lips_keypoint_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\232454626\15ae372d6e2b41bfe83be06203b7be00\AmazingFeature\xshader\lip_BlendModeScreen\lips_keypoint_faceu.frag
                                        • Size 10KB
                                        • SHA256 68dda49d7f2ae14c820243af3993a9ae60864531c41a42f8e565015ff5af649b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        sticker.config

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\315610668\d847a0a7ac9eba32e272e2ae718a092e\AmazingFeature\sticker.config
                                        • Size 284B
                                        • SHA256 57f8db0d37752e1fdc3f9ae0c885021920907bba3300d7767bfc6e5b4bae0138
                                        • MD5 SHA1 SHA512 TLSH

                                        face3d.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\315610668\d847a0a7ac9eba32e272e2ae718a092e\AmazingFeature\xshader\face3d.frag
                                        • Size 24KB
                                        • SHA256 3b122cc4d33f67b007c5ca8ff6a09875ec55aacf357cab71c48406bc2bb2ab88
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        config.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3197355\ca0367d4e28ad273f187747c45d27d57\config.json
                                        • Size 109B
                                        • SHA256 15a1917460b23db6adda6ea1fd2bd0ac6cecbb8ed1a4c393f682aa8f99a08617
                                        • MD5 SHA1 SHA512 TLSH

                                        fDShader_negative.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3240465\4b109f0dc2c4f4f028ccbe033c3a115f\AmazingFeature\xshader\BrowTilt\fDShader_negative.vert
                                        • Size 3KB
                                        • SHA256 a3e59df632c4032d4ef5b737a0363ae74f3bfb62cc3221211221cada10843480
                                        • MD5 SHA1 SHA512 TLSH

                                        fDShader_positive.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3240465\4b109f0dc2c4f4f028ccbe033c3a115f\AmazingFeature\xshader\BrowTilt\fDShader_positive.vert
                                        • Size 3KB
                                        • SHA256 6e8f5059fb4a511912050891e254ba2901f9e33e7460255b61e173a4c593d52d
                                        • MD5 SHA1 SHA512 TLSH

                                        fDShader_positive.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3240465\4b109f0dc2c4f4f028ccbe033c3a115f\AmazingFeature\xshader\EyeSize\fDShader_positive.frag
                                        • Size 1KB
                                        • SHA256 f4830eb370be51a43443a6646d8a3bc049e7093a150e3d340d380debd785b267
                                        • MD5 SHA1 SHA512 TLSH

                                        fDShader_negative.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3240465\4b109f0dc2c4f4f028ccbe033c3a115f\AmazingFeature\xshader\LipLine\fDShader_negative.vert
                                        • Size 3KB
                                        • SHA256 d1bbe2af2ece1d1cedb8d17768ab6213a6f12b083a24a47cc26cccf29582c9e2
                                        • MD5 SHA1 SHA512 TLSH

                                        fDShader_negative.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3240465\4b109f0dc2c4f4f028ccbe033c3a115f\AmazingFeature\xshader\MouseWidth\fDShader_negative.frag
                                        • Size 1KB
                                        • SHA256 47692825ca23d9aeb28b348c9b0b1f6cef67c5f294eabdf229a21b3168937627
                                        • MD5 SHA1 SHA512 TLSH

                                        fDShader_positive.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3240465\4b109f0dc2c4f4f028ccbe033c3a115f\AmazingFeature\xshader\NoseSize\fDShader_positive.frag
                                        • Size 1KB
                                        • SHA256 dff5d7af1c4c6fa9ba3b443698a43688feb1b64031a3a8a8a1ef671cae4cc341
                                        • MD5 SHA1 SHA512 TLSH

                                        fDShader_positive.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3240465\4b109f0dc2c4f4f028ccbe033c3a115f\AmazingFeature\xshader\UpperLip\fDShader_positive.vert
                                        • Size 3KB
                                        • SHA256 4e3eb8177012c42ad67c8a934d487fdaef6c15bdee1e91351dbe7fdc2760c1a1
                                        • MD5 SHA1 SHA512 TLSH

                                        fDShader_positive.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\3240472\b52a31369802c14a5042a5a06b4991bd\AmazingFeature\xshader\NoseBridge\fDShader_positive.vert
                                        • Size 3KB
                                        • SHA256 1c0ba86a7c6393d9ba87e351df084d62b99d5e8bd0ccdac411a575ae44a0dd6e
                                        • MD5 SHA1 SHA512 TLSH

                                        mask.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\4389237\e0e46271507c5ba80cc245764767dbca\AmazingFeature\image\mask.png
                                        • Size 32KB
                                        • SHA256 10ab78389948415d84e3455f4cbdeb55201cf5bb3bc5b6dcea53d1efc79ac58c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        EffectFaceMakeup.lua

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\4389237\e0e46271507c5ba80cc245764767dbca\AmazingFeature\lua\EffectFaceMakeup.lua
                                        • Size 3KB
                                        • SHA256 ba4b749f153eda791d28aa29fdc472888940cd5d46e11c17a8d1b06ca024dbce
                                        • MD5 SHA1 SHA512 TLSH

                                        maskV2FaceU.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\4389237\e0e46271507c5ba80cc245764767dbca\AmazingFeature\material\maskV2FaceU.material
                                        • Size 990B
                                        • SHA256 2f07a0fbebfec51f43c002726c15ef57578cb4ffdddd60a1898e77f14cf2ba72
                                        • MD5 SHA1 SHA512 TLSH

                                        skinSeg.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\4389237\e0e46271507c5ba80cc245764767dbca\AmazingFeature\material\skinSeg.material
                                        • Size 1KB
                                        • SHA256 f15bb2cabb11a11748d3b718180b6370a89a82f8b0f3b60bc5c9b757ffc826f9
                                        • MD5 SHA1 SHA512 TLSH

                                        config.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\4389237\e0e46271507c5ba80cc245764767dbca\config.json
                                        • Size 962B
                                        • SHA256 78806482d760ed2bb3a25826b352b65fbf3d4d30f92bc45248f4f57999f506bf
                                        • MD5 SHA1 SHA512 TLSH

                                        eyeline.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\4984558\c3bf77796e1e2694307bd63881544b06\AmazingFeature\image\eyeline\eyeline.png
                                        • Size 84B
                                        • SHA256 f2fdf73bf9e3c5ef885cda05ae803263e8e539d160c41c02b8019149fd3f4070
                                        • MD5 SHA1 SHA512 TLSH

                                        mask_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\533506178\37063398bdf5a5d57affd03ec01e546e\xshader\mask_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 0fe9578b1db1a08a380f39536fbcd8f8293232b40a87ad7fe50bfa7d3ec63af1
                                        • MD5 SHA1 SHA512 TLSH

                                        blit.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\blit.frag
                                        • Size 137B
                                        • SHA256 3b69b67a7dcc3baac7b3bb025e2899b869b5b69c3265839437577f69ca44a8c7
                                        • MD5 SHA1 SHA512 TLSH

                                        blit.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\blit.vert
                                        • Size 181B
                                        • SHA256 33fe7bcfa4e6cd6934a01f7c0f834477c5b065e2b0dca6feecf4fbf44a15eedb
                                        • MD5 SHA1 SHA512 TLSH

                                        brow_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\brow_faceu.frag
                                        • Size 7KB
                                        • SHA256 37b3f531ede79a734b2bfb0c821f7281f5967f1581a4ceb38cf7aa55f680d6c1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        brow_faceu.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\brow_faceu.vert
                                        • Size 739B
                                        • SHA256 cafcfb2635ceba24f7b02ddcfd1a1c19e749ef6db51cdaa2b7dd87f313d34a84
                                        • MD5 SHA1 SHA512 TLSH

                                        face3d.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\face3d.vert
                                        • Size 1KB
                                        • SHA256 86dbf51d41f47c182c8c8ed8955f2238edeed990a879627324ea5f7860dc0c3a
                                        • MD5 SHA1 SHA512 TLSH

                                        mask_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\mask_faceu.frag
                                        • Size 9KB
                                        • SHA256 753fcb56c0877d52e4143bcef6051115e9b1ec6a1cb80b503dcd38431064ac3f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pupil_cutoff_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\pupil_cutoff_faceu.frag
                                        • Size 339B
                                        • SHA256 22e983dd1223efefb6003acb9480b148d547bf9e4622c09b0353a30a4b9d12d9
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_cutoff_faceu.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\pupil_cutoff_faceu.vert
                                        • Size 382B
                                        • SHA256 3bc49b5692e2f20a57046cca46e9b3038d64c5f89336c7a839b0159b3ee3bb52
                                        • MD5 SHA1 SHA512 TLSH

                                        pupil_main_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\pupil_main_faceu.frag
                                        • Size 9KB
                                        • SHA256 cdd0c45313e0cdbda311c96f036677885d84545275a507d458a92142e7997c9d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pupil_main_faceu.vert

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\81269496\ea86033c1962806dd12902ed9edd4ae2\AmazingFeature\xshader\pupil_main_faceu.vert
                                        • Size 492B
                                        • SHA256 1f26984f5756d03c0cab29e356932a76c30aaae51b79a4599aba1a8475f23a89
                                        • MD5 SHA1 SHA512 TLSH

                                        Default_brow.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85920407\89ad943ef61e4509b877db7105e3216e\AmazingFeature\material\Default_brow.material
                                        • Size 883B
                                        • SHA256 fa52aa51ff502a550e719a33556cb34eb80bd33f167783318f6491404962e78e
                                        • MD5 SHA1 SHA512 TLSH

                                        reshapeV5_single.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85920407\89ad943ef61e4509b877db7105e3216e\AmazingFeature\xshader\reshapeV5_single.frag
                                        • Size 128B
                                        • SHA256 1ad2cd572241b9dfa5db523a34394ef2a2e224970e228f1d2729ed6669d8e0d6
                                        • MD5 SHA1 SHA512 TLSH

                                        lipOpen.png

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921628\3d12170bb03d8acd5302eeb9d9f10415\image\lip\default\lipOpen.png
                                        • Size 33KB
                                        • SHA256 6da540df9d986c563da38f8ec6d58b9f556a86563d54c5e928441b899a6b8d40
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        lips_keypoint_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921628\3d12170bb03d8acd5302eeb9d9f10415\xshader\lips_keypoint_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 38becff419978f50779daffd6d064f028f0ec804c1aed3dad39abd8ab1ac128e
                                        • MD5 SHA1 SHA512 TLSH

                                        lips_keypoint_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921629\b1c572c928b7fe5c1a04dc2b632752da\mesh\lips_keypoint_faceu_mesh.mesh
                                        • Size 63KB
                                        • SHA256 13c9bb636f7352cde6e9895259c8cdbabd4f87707e0c5c18f24fed90017ecf26
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eyeshadow.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921702\fbca58375dffd228d34d243a3866b334\image\eyeshadow\default\eyeshadow.png.meta
                                        • Size 372B
                                        • SHA256 91c59c39912805223ca70cc562c8bc420c614ea7693ccd37992f0632db84db2b
                                        • MD5 SHA1 SHA512 TLSH

                                        eyeshadowScreen.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921702\fbca58375dffd228d34d243a3866b334\image\eyeshadow\default\eyeshadowScreen.png.meta
                                        • Size 372B
                                        • SHA256 a12304877b234e8a31675436bb9c0fcc637fc83d25aeb700cb1a382aba00b760
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921702\fbca58375dffd228d34d243a3866b334\makeup.prefab
                                        • Size 1KB
                                        • SHA256 ae593ed56c3249f15d587d292fc9f0366ba6b6f443f7432ad971162364c1e042
                                        • MD5 SHA1 SHA512 TLSH

                                        default.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921702\fbca58375dffd228d34d243a3866b334\material\eyeshadow\default.material
                                        • Size 1KB
                                        • SHA256 7dfb807536053f909884fd9414b8704b5ef70046a108175e8b6fdf949f9b6091
                                        • MD5 SHA1 SHA512 TLSH

                                        eyeshadow_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921702\fbca58375dffd228d34d243a3866b334\mesh\eyeshadow_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 733d21eaabe6a8c06600c43744b34bb84ad6239d4f8d18ba483bb22302d617af
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        LuaRTTI.MarkGen.lua

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921970\7117f587a9a6f4cae7239fb6e0e53e4f\LuaRTTI.MarkGen.lua
                                        • Size 158B
                                        • SHA256 f2660fa70cf92cb5046a44e9364e861f6deb9311ece7ad060188038c627cf754
                                        • MD5 SHA1 SHA512 TLSH

                                        eye_part_faceu.frag

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921970\7117f587a9a6f4cae7239fb6e0e53e4f\xshader\eye_part_faceu.frag
                                        • Size 10KB
                                        • SHA256 b3e2a77d106ae4f17c3272d879cc1e951cdcade1f603209ac9bba1fb4a0aa82f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eye_part_faceu_xshader.xshader

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921970\7117f587a9a6f4cae7239fb6e0e53e4f\xshader\eye_part_faceu_xshader.xshader
                                        • Size 2KB
                                        • SHA256 6158df3a5795949033d9ddaea4f4d589871ba8e9ca2d4ac5b0b661b9d577a16b
                                        • MD5 SHA1 SHA512 TLSH

                                        eyelash.png.meta

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921971\6059f4c7706d69a2fc2813c914ecc116\image\eyelash\default\eyelash.png.meta
                                        • Size 372B
                                        • SHA256 c16d14526675fbd5e10254d9d8ea8fd76d506c0a83878bd0ae6702e07fd32b9a
                                        • MD5 SHA1 SHA512 TLSH

                                        makeup.lua

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921971\6059f4c7706d69a2fc2813c914ecc116\lua\makeup.lua
                                        • Size 7KB
                                        • SHA256 825b9ee46ad1ecda0a2373e618ae1013ffa74479c73c5d36739b92c94bb81fe5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        makeup.prefab

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921971\6059f4c7706d69a2fc2813c914ecc116\makeup.prefab
                                        • Size 1KB
                                        • SHA256 6bdaa98eea44bfa92f3bdc8ba9e558a6845a9433207ef8987c96dada60385b49
                                        • MD5 SHA1 SHA512 TLSH

                                        default.material

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921971\6059f4c7706d69a2fc2813c914ecc116\material\eyelash\default.material
                                        • Size 958B
                                        • SHA256 5c53c470b147eabca174b42bd1bc778d39e83afab233693967ed663a142485c9
                                        • MD5 SHA1 SHA512 TLSH

                                        eyelash_faceu_mesh.mesh

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\85921971\6059f4c7706d69a2fc2813c914ecc116\mesh\eyelash_faceu_mesh.mesh
                                        • Size 49KB
                                        • SHA256 3da8be411d9930030b735cb07c607947dcafd19d9e8d4576960e8c0814e9068a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        saliency_matting_v1.0_size0_md55882cbfb5e9c1f205cd599d3c5d0833a.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\saliency_matting_v1.0_size0_md55882cbfb5e9c1f205cd599d3c5d0833a.model
                                        • Size 6.7MB
                                        • SHA256 ac2ae6badafc6a94641dc59b5844762676eee71b218785bfad37169eea380341
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        single_object_tracking_v1.0_size0_md5d0b0e377347d69bacef2473f5bae4799.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\single_object_tracking_v1.0_size0_md5d0b0e377347d69bacef2473f5bae4799.model
                                        • Size 612KB
                                        • SHA256 7951eba5af0daa1f78e3962073b938169171d102107ed1585a5c6851adf3aab2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        skinunified_v1.0_size0_md53d9f40470eed902719f291fb4f7fad83.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\skinunified_v1.0_size0_md53d9f40470eed902719f291fb4f7fad83.model
                                        • Size 1.9MB
                                        • SHA256 a2e26b958b676be499b7abbc0afd7f97abd9fe37de6031e69c2495be89325af6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        tt_face_extra_v15.0_size0_md540355868b9ccc603edb1d32d44cbbf07.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\tt_face_extra_v15.0_size0_md540355868b9ccc603edb1d32d44cbbf07.model
                                        • Size 562KB
                                        • SHA256 cb3271ce78a35fcc0412bff8a376879ed9199e6e69f2911f698f8ea37e6ba0d2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        tt_face_v11.1_size0_md58572969b01c3ca4b84b7078b3d9bde0a.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\tt_face_v11.1_size0_md58572969b01c3ca4b84b7078b3d9bde0a.model
                                        • Size 867KB
                                        • SHA256 c4b081d04f6829f7cd5849abca0941891f1a7f2cb250efd7f0e42fece5426610
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        tt_facefitting1220_v2.0_size0_md55ef72a364cb25d9e729fc80b0cba27f6.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\tt_facefitting1220_v2.0_size0_md55ef72a364cb25d9e729fc80b0cba27f6.model
                                        • Size 536KB
                                        • SHA256 77050dd76d7fcf73c632d7d0eb6cc71cc3f382e66db40c7e9f3121badeb9657b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        tt_facefitting1256_v2.0_size0_md5fffe6eddf140be723d9256df98cf6122.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\tt_facefitting1256_v2.0_size0_md5fffe6eddf140be723d9256df98cf6122.model
                                        • Size 644KB
                                        • SHA256 aca792bb00c815b19db2836f65f380ab7a84a0266f5f54cbc01aeddde06757e1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        tt_freid_v2.0_size0_md58a6f6a1c942d1241256e71eb3c56f154.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\tt_freid_v2.0_size0_md58a6f6a1c942d1241256e71eb3c56f154.model
                                        • Size 11.8MB
                                        • SHA256 b70a9f470ddec49b10cb10942c6e61f0454342f2ac5857c1bfc45648fae07d68
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        tt_matting_video_v1.2_size6_md53d483565757bd96185debaa2ba07e7ba.model

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\effect\model\tt_matting_video_v1.2_size6_md53d483565757bd96185debaa2ba07e7ba.model
                                        • Size 5.6MB
                                        • SHA256 dc59e384c70bcc01dbfe61cdc26239f1aecec55296bce677af08ea232db45aa6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        05cc1ea0e0d10b24aa691b6fba153c06

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\image\05cc1ea0e0d10b24aa691b6fba153c06
                                        • Size 10KB
                                        • SHA256 10409177e6db5705cce97f93d2a2b2fbff1c5187b40d4aedc560acb3ee642f93
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        8d390451f2695fc40e34db4e164f5792

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Cache\image\8d390451f2695fc40e34db4e164f5792
                                        • Size 3KB
                                        • SHA256 8853329a974861a56b442338cad1d7b5e30758286629315148d133a8dd194399
                                        • MD5 SHA1 SHA512 TLSH

                                        beauty_panels_ru-RU.ini.TAmIYM

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\Modules\beauty_panels_ru-RU.ini.TAmIYM
                                        • Size 179KB
                                        • SHA256 2e389e9fe113f4157a9789ac08f3a69b451c80198b2485df828e6d026c7b681d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        beauty_panels_ru-RU.ini.yBZvBl

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\Modules\beauty_panels_ru-RU.ini.yBZvBl
                                        • Size 63KB
                                        • SHA256 af47fc46c7e0a7922979a60508eb107f173398f64911f1eef13bfa874e0f4778
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        buriedPointLogCfg

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\buriedPointLogCfg
                                        • Size 26B
                                        • SHA256 6561d3ca6cd3c5b619c318c98b0982eeb111d5276b8832748a3649b6237f8c2a
                                        • MD5 SHA1 SHA512

                                        buriedPointLogCfg.LSCbEK

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\buriedPointLogCfg.LSCbEK
                                        • Size 51B
                                        • SHA256 e64107c8b150e3e733aed14a728920bef2963027f4375f5f26693fe5c0810e72
                                        • MD5 SHA1 SHA512 TLSH

                                        buriedPointLogCfg.lock

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\buriedPointLogCfg.lock
                                        • Size 58B
                                        • SHA256 8984c5105115ea407eb0c9774d4733ffc38bdcff785b8378dad3ef2507bfe942
                                        • MD5 SHA1 SHA512 TLSH

                                        channel

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\channel
                                        • Size 28B
                                        • SHA256 ef7dad85f30d81917615f96640d81f43674ebd75e48342129d2ac56a47457fd1
                                        • MD5 SHA1 SHA512

                                        commonSetting.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\commonSetting.ini
                                        • Size 154B
                                        • SHA256 f54449df1134bc87fbb5ae6cc762c0ccd622b72cbf1c664d5019f1834bdb0a29
                                        • MD5 SHA1 SHA512 TLSH

                                        commonSetting.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\commonSetting.ini
                                        • Size 323B
                                        • SHA256 1b21c28a0f68eacfe95c5554535587ec6746395a69aa6f51eef1e3d5240bdeba
                                        • MD5 SHA1 SHA512 TLSH

                                        commonSetting.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\commonSetting.ini
                                        • Size 294B
                                        • SHA256 4a81be987f228674cde26f8dcc3aa79baeab97bdc920564eb55444272d52ad45
                                        • MD5 SHA1 SHA512 TLSH

                                        commonSetting.ini.IpVSNA

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\commonSetting.ini.IpVSNA
                                        • Size 272B
                                        • SHA256 1cf48207b98c3927c6a1879593fba8b63d020e84f4063b9635449dfdcf96224e
                                        • MD5 SHA1 SHA512 TLSH

                                        commonSetting.ini.TKgMri

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\commonSetting.ini.TKgMri
                                        • Size 243B
                                        • SHA256 3405527aeb947326aa0d6488ef2946d489dde50ec3243fb58fc283952cb1587f
                                        • MD5 SHA1 SHA512 TLSH

                                        commonSetting.ini.TdWyON

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\commonSetting.ini.TdWyON
                                        • Size 178B
                                        • SHA256 6b15439e09d9bd833a6d2a5fa33af0542602eb8ea86154dca4115868383aae4a
                                        • MD5 SHA1 SHA512 TLSH

                                        commonSetting.ini.WlTOSE

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\commonSetting.ini.WlTOSE
                                        • Size 244B
                                        • SHA256 31815693a82bf884aaa08d1f1e340438debe33c2c4b82444c237b5c6a4c3c5bf
                                        • MD5 SHA1 SHA512 TLSH

                                        globalSetting

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\globalSetting
                                        • Size 1KB
                                        • SHA256 9b4a3b997209c7a70f97965de09b9624547439a277249a284c5cc94bab6f9a0a
                                        • MD5 SHA1 SHA512 TLSH

                                        globalSetting

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\globalSetting
                                        • Size 2KB
                                        • SHA256 aec0aa98146255e7bee3f68201699354e3c2c809e65239745aa472abb250d733
                                        • MD5 SHA1 SHA512 TLSH

                                        globalSetting.IlBgwr

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\globalSetting.IlBgwr
                                        • Size 1KB
                                        • SHA256 dc2e3727af70c6bd7b75653ebb1a86f1ef891c92ee8bab00993de547dfdf537b
                                        • MD5 SHA1 SHA512 TLSH

                                        globalSetting.SoRSuu

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\globalSetting.SoRSuu
                                        • Size 1KB
                                        • SHA256 9a23a36668bee926e856633ad86a24c1a6cf97e78a1f51923b2b46a81690eebc
                                        • MD5 SHA1 SHA512 TLSH

                                        highlight_penetrate.ini.lock

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\highlight_penetrate.ini.lock
                                        • Size 59B
                                        • SHA256 cabdb20f2d0110c4c9065490243f12cab9cd491e8b8078e1ead4bb47dc69819b
                                        • MD5 SHA1 SHA512 TLSH

                                        looki_settings

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\looki_settings
                                        • Size 241B
                                        • SHA256 3b1793d1f010218685672e6ce985245635dfbd085604899426ab3a6a5494f6bd
                                        • MD5 SHA1 SHA512 TLSH

                                        lv_safe_guard.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\lv_safe_guard.ini
                                        • Size 215B
                                        • SHA256 c1c262c75f1cae4a561a32e5dd47c853d2862023afb68193feda8ff98bfc0ef6
                                        • MD5 SHA1 SHA512 TLSH

                                        systemCompatModeCheck.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\systemCompatModeCheck.ini
                                        • Size 116B
                                        • SHA256 f5abbbb801c691c8325bc1ca9eb7e5a3b64afb8fef3f7ceb400f86504e66ad97
                                        • MD5 SHA1 SHA512 TLSH

                                        systemCompatModeCheck.ini.SQZqeo

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\systemCompatModeCheck.ini.SQZqeo
                                        • Size 116B
                                        • SHA256 6e6e47cd8f85d82e0b1dbf50cc0622c418e8ac71b37f90132583a0606eebbace
                                        • MD5 SHA1 SHA512 TLSH

                                        systemCompatModeCheck.ini.lock

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\systemCompatModeCheck.ini.lock
                                        • Size 59B
                                        • SHA256 c8b25ee94e76b5bfea6c2b99843111312dec1cda552293ce8e451a9845760f15
                                        • MD5 SHA1 SHA512 TLSH

                                        systemCompatModeCheck.ini.lock

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\systemCompatModeCheck.ini.lock
                                        • Size 59B
                                        • SHA256 0a19957331b7316cb9c68f855240bc6863e4a5c0c39072df5d098f09ceaf5205
                                        • MD5 SHA1 SHA512 TLSH

                                        systemCompatModeCheck.ini.lock

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\systemCompatModeCheck.ini.lock
                                        • Size 59B
                                        • SHA256 373ab9462f348ab65b6abfef1525c6a007c792536068db4e98c9008c5f481b79
                                        • MD5 SHA1 SHA512 TLSH

                                        systemCompatModeCheck.ini.lock

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\systemCompatModeCheck.ini.lock
                                        • Size 59B
                                        • SHA256 19271b310f9dd733de2e28922ddb314f837c0fac4ff9601570691189e5d32fd8
                                        • MD5 SHA1 SHA512 TLSH

                                        vesdk.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\vesdk.ini
                                        • Size 1KB
                                        • SHA256 ff3a18739019f5825afaf136416fd46e350627d58fcc2a70f519a27cb8813eea
                                        • MD5 SHA1 SHA512 TLSH

                                        vesdk.ini.lock

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Config\vesdk.ini.lock
                                        • Size 63B
                                        • SHA256 1fd5feafd25137a142d9c9d390239571553acb3bb1374f9b02c1facf4cfad77b
                                        • MD5 SHA1 SHA512 TLSH

                                        settings.dat

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Crash\settings.dat
                                        • Size 40B
                                        • SHA256 a55fd0db97d6afaea03cb0f33126919736e795bb911749192d1d7d2c18b1f829
                                        • MD5 SHA1 SHA512

                                        gpu_driver_bug_list.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Download\gpu_driver_bug_list.json
                                        • Size 25KB
                                        • SHA256 8ee1a6903c3263a6cfc99b8c5e7023b0150edf5b9a3f2eb190b0bdae08148500
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7514586528234063376.pftconfig

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\ParfaitServer\settings\359289\pft_4.3.0.1694_\pft_all\7514586528234063376.pftconfig
                                        • Size 1KB
                                        • SHA256 40f1328311c3add27312c27d83e830f54e456fced92f1ee373b0c9f2bf37793b
                                        • MD5 SHA1 SHA512 TLSH

                                        draft_content.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Projects\com.lveditor.draft\0727\draft_content.json
                                        • Size 2KB
                                        • SHA256 c3a21e6e810e9f9600b8c19f59f323b0e8f31892069f718f46a69d6ec8e175ac
                                        • MD5 SHA1 SHA512 TLSH

                                        draft_content.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Projects\com.lveditor.draft\0727\draft_content.json
                                        • Size 8KB
                                        • SHA256 ea6b0b0acd16454445d279bd1b1465cf617eb024281aff1fdfd3fa10c5e70f67
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        903da427-5913-4fe9-8db4-796812bc17d5.tmp

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\TTNet\903da427-5913-4fe9-8db4-796812bc17d5.tmp
                                        • Size 701B
                                        • SHA256 2927fa9a065be7a5266a5e9a898251b41c95331b5eb5879da8acf84dc19c44e5
                                        • MD5 SHA1 SHA512 TLSH

                                        5cebc512-aa4f-4fcc-aeac-e65b9069cbe7.tmp

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\TTNet\prefs\5cebc512-aa4f-4fcc-aeac-e65b9069cbe7.tmp
                                        • Size 5KB
                                        • SHA256 aa6265c7de56406d5c05f5261f7b19075b0ea955ee6d493100eefbb147d5553f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        local_prefs.json

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\TTNet\prefs\local_prefs.json
                                        • Size 5KB
                                        • SHA256 53bea52f6471ee2128c6ce6160e3f2706c68cf91f93494b643251f733a2a3b70
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        tt_net_config.config

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\TTNet\tt_net_config.config
                                        • Size 688B
                                        • SHA256 58bdb363194f5457543bddffec087643974e8319fe206c260052618bfb65b718
                                        • MD5 SHA1 SHA512 TLSH

                                        tt_net_config.config

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\TTNet\tt_net_config.config
                                        • Size 737B
                                        • SHA256 d4f67ffbec8268afbf03f755bf5b1888e095ac92dfe5115b0c5c69aeb84d1364
                                        • MD5 SHA1 SHA512 TLSH

                                        tt_net_config.config

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\TTNet\tt_net_config.config
                                        • Size 719B
                                        • SHA256 136e0ee9a0821fa3b42cc56e0a75866335c8db1fc8b195e112d27d69aec83dba
                                        • MD5 SHA1 SHA512 TLSH

                                        tracking.db

                                        • Path C:\Users\Admin\Desktop\CapCut\Data\User Data\Tracking\tracking.db
                                        • Size 8KB
                                        • SHA256 4c5711e325c71f9ecb82621acdfc2a65f35c737b948b91c78efc7fd956e19e4c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        desktop.ini

                                        • Path C:\Users\Admin\Desktop\CapCut\desktop.ini
                                        • Size 61B
                                        • SHA256 8498e18455dc0cdb2be8fba34dbddf6021a2d17e590219e3644592cd3806a3eb
                                        • MD5 SHA1 SHA512 TLSH

                                        memory/768-5569-0x00007FF9BA280000-0x00007FF9BB280000-memory.dmp

                                        memory/768-5570-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/768-5537-0x00007FF9B7F70000-0x00007FF9B7F80000-memory.dmp

                                        memory/768-5568-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/768-5573-0x00007FF9D7DF0000-0x00007FF9D9090000-memory.dmp

                                        memory/768-5567-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/768-5536-0x00007FF9B7F70000-0x00007FF9B7F80000-memory.dmp

                                        memory/768-5572-0x00007FF9F9F10000-0x00007FF9F9F12000-memory.dmp

                                        memory/1628-5718-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/1628-5717-0x00007FF9B7F70000-0x00007FF9B7F80000-memory.dmp

                                        memory/1628-5719-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/1628-5724-0x00007FF9D8250000-0x00007FF9D94F0000-memory.dmp

                                        memory/1628-5721-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/1628-5716-0x00007FF9B7F70000-0x00007FF9B7F80000-memory.dmp

                                        memory/1888-5714-0x00007FF9F9F10000-0x00007FF9F9F12000-memory.dmp

                                        memory/1888-5708-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/1888-5707-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/1888-5706-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/2428-6083-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2428-6081-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/2428-6082-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2448-5511-0x0000000074AA4000-0x0000000074AA5000-memory.dmp

                                        memory/2448-5680-0x0000000074AA4000-0x0000000074AA5000-memory.dmp

                                        memory/2760-5978-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2760-5979-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2760-5977-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/2800-5976-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2800-5975-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2800-5974-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/2812-6065-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/2812-6064-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2812-6073-0x00007FF9D8250000-0x00007FF9D94F0000-memory.dmp

                                        memory/2812-6067-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2840-6012-0x00007FF9D8250000-0x00007FF9D94F0000-memory.dmp

                                        memory/2840-6004-0x00007FF9B7F70000-0x00007FF9B7F80000-memory.dmp

                                        memory/2840-6005-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/2840-6003-0x00007FF9B7F70000-0x00007FF9B7F80000-memory.dmp

                                        memory/2840-6006-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2840-6008-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2840-6007-0x00007FF9A8B20000-0x00007FF9A9B20000-memory.dmp

                                        memory/2876-5697-0x00007FF9D7DF0000-0x00007FF9D9090000-memory.dmp

                                        memory/2876-5694-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2876-5691-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/2876-5692-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/3044-6101-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/3044-6102-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/3084-5752-0x00007FF9D8250000-0x00007FF9D94F0000-memory.dmp

                                        memory/3084-5739-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/3084-5740-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/3084-5742-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/3772-6024-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/3772-6027-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/3772-6049-0x00007FF9D8250000-0x00007FF9D94F0000-memory.dmp

                                        memory/3772-6025-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/4348-6098-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/4348-6099-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/4348-6100-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/4824-5637-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/4824-5634-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/4824-5635-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/4824-5660-0x00007FF9D7DF0000-0x00007FF9D9090000-memory.dmp

                                        memory/4896-5961-0x000000006EB80000-0x000000006EC25000-memory.dmp

                                        memory/4896-5760-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/4896-5761-0x00007FF9DA170000-0x00007FF9DA61B000-memory.dmp

                                        memory/4896-5759-0x00007FF9D9BC0000-0x00007FF9DA169000-memory.dmp

                                        memory/4896-5775-0x0000017975E60000-0x0000017975E61000-memory.dmp