Overview

overview

6

Static

static

1

Instalador...ma.exe

windows11-21h2-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    300s
  • max time network
    339s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    27/08/2026, 22:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Instalador del programa.exe
  • Size 781.9MB
  • Sample260827-2fxfjsdq21
  • SHA256 3a688dfbac601e3618fa0a72775300443f76e6c77e1cdabc747c024023c76562
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoveryinstallerpersistenceprivilege_escalationspyware

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Badlisted process makes network request 1 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 5 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Modifies Windows Firewall 2 TTPs 1 IoCs
    defense_evasion
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Discovers running processes 1 TTPs 4 IoCs

    Running process information can be used to identify security tools or plan follow-on actions.

    discovery
  • Drops file in System32 directory 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 42 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 60 IoCs
  • Loads dropped DLL 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • System Location Discovery: System Language Discovery 1 TTPs 17 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 15 IoCs

    Inno Setup installer

    installer
  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 17 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Control Panel 1 IoCs
    defense_evasion
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 62 IoCs
  • Suspicious use of SetWindowsHookEx 51 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Instalador del programa.exe
    "C:\Users\Admin\AppData\Local\Temp\Instalador del programa.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4916
    • C:\Users\Admin\AppData\Local\Temp\is-HPI3U.tmp\Instalador del programa.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-HPI3U.tmp\Instalador del programa.tmp" /SL5="$9005A,817783343,401920,C:\Users\Admin\AppData\Local\Temp\Instalador del programa.exe"
      2⤵
      • Drops file in System32 directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2312
      • C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\_isetup\_setup64.tmp
        helper 105 0x42C
        3⤵
        • Executes dropped EXE
        PID:3144
      • C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 1.exe
        "C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 1.exe" /VERYSILENT /SUPPRESSMSGBOXES /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061" /UPGRADE_HWND=787216
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1204
        • C:\Users\Admin\AppData\Local\Temp\is-5DJLQ.tmp\Wondershare Filmora SubPack 1.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-5DJLQ.tmp\Wondershare Filmora SubPack 1.tmp" /SL5="$90284,320653162,401920,C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 1.exe" /VERYSILENT /SUPPRESSMSGBOXES /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061" /UPGRADE_HWND=787216
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:4204
          • C:\Users\Admin\AppData\Local\Temp\is-JJB6C.tmp\_isetup\_setup64.tmp
            helper 105 0x26C
            5⤵
            • Executes dropped EXE
            PID:6556
      • C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 2.exe
        "C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 2.exe" /VERYSILENT /SUPPRESSMSGBOXES /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061" /UPGRADE_HWND=131750
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2824
        • C:\Users\Admin\AppData\Local\Temp\is-8QFMT.tmp\Wondershare Filmora SubPack 2.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-8QFMT.tmp\Wondershare Filmora SubPack 2.tmp" /SL5="$202A4,152573355,401920,C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 2.exe" /VERYSILENT /SUPPRESSMSGBOXES /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061" /UPGRADE_HWND=131750
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:460
          • C:\Users\Admin\AppData\Local\Temp\is-IR5L5.tmp\_isetup\_setup64.tmp
            helper 105 0x274
            5⤵
            • Executes dropped EXE
            PID:7880
      • C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 3.exe
        "C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 3.exe" /VERYSILENT /SUPPRESSMSGBOXES /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061" /UPGRADE_HWND=524366
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4812
        • C:\Users\Admin\AppData\Local\Temp\is-BFDLT.tmp\Wondershare Filmora SubPack 3.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-BFDLT.tmp\Wondershare Filmora SubPack 3.tmp" /SL5="$3021C,145612264,401920,C:\Wondershare\{DA129482-1474-47A0-B45A-80E4947A6E50}\Wondershare Filmora SubPack 3.exe" /VERYSILENT /SUPPRESSMSGBOXES /DIR="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061" /UPGRADE_HWND=524366
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          PID:3380
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s FilmoraContextMenu.dll
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:4736
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s atimpenc.dll
        3⤵
          PID:4700
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s atixcode.dll
          3⤵
            PID:7080
          • C:\Windows\system32\regsvr32.exe
            "C:\Windows\system32\regsvr32.exe" /s CFDecode64.ax
            3⤵
              PID:5588
            • C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\Wondershare NativePush.exe
              "C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\Wondershare NativePush.exe" /VERYSILENT /BINDINSTALL
              3⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:7952
              • C:\Users\Admin\AppData\Local\Temp\is-16F3N.tmp\Wondershare NativePush.tmp
                "C:\Users\Admin\AppData\Local\Temp\is-16F3N.tmp\Wondershare NativePush.tmp" /SL5="$9022C,2831824,938496,C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\Wondershare NativePush.exe" /VERYSILENT /BINDINSTALL
                4⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of WriteProcessMemory
                PID:3316
                • C:\Users\Admin\AppData\Local\Temp\is-O2AHQ.tmp\_isetup\_setup64.tmp
                  helper 105 0x428
                  5⤵
                  • Executes dropped EXE
                  PID:4384
                • C:\Windows\system32\netsh.exe
                  "netsh.exe" advfirewall firewall add rule name="WsToastNotification" dir=in security=authnoencap action=allow program="C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe"
                  5⤵
                  • Modifies Windows Firewall
                  • Event Triggered Execution: Netsh Helper DLL
                  PID:6884
                • C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
                  "C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe" install
                  5⤵
                  • Executes dropped EXE
                  PID:7300
                • C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
                  "C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe" start
                  5⤵
                  • Executes dropped EXE
                  PID:6964
            • C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\Wondershare Helper Compact.exe
              "C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\Wondershare Helper Compact.exe" /VERYSILENT /SP-
              3⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:6140
              • C:\Users\Admin\AppData\Local\Temp\is-TDPGQ.tmp\Wondershare Helper Compact.tmp
                "C:\Users\Admin\AppData\Local\Temp\is-TDPGQ.tmp\Wondershare Helper Compact.tmp" /SL5="$A022C,2102590,54272,C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\Wondershare Helper Compact.exe" /VERYSILENT /SP-
                4⤵
                • Adds Run key to start application
                • Drops file in Program Files directory
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of WriteProcessMemory
                PID:5964
                • C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
                  "C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" /regserver
                  5⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Modifies registry class
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SetWindowsHookEx
                  PID:7336
            • C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\vcredist_x64.exe
              "C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\vcredist_x64.exe" /q
              3⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:6852
              • \??\f:\cae62d04c0d15b5fd41c2b\install.exe
                f:\cae62d04c0d15b5fd41c2b\.\install.exe /q
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious use of AdjustPrivilegeToken
                PID:6636
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" http://cbs.wondershare.com/go.php?pid=846&m=i&product_version=14.2.9.11061&client_sign={e43db3f2-eb64-4bba-8a0f-c57695777d07G}&is_silent_install=2
              3⤵
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of WriteProcessMemory
              PID:7688
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff964c3c728,0x7ff964c3c734,0x7ff964c3c740
                4⤵
                  PID:7472
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1808,i,10288865749624727569,12189242569053284061,262144 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1932 /prefetch:2
                  4⤵
                    PID:2512
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2276,i,12991250405126349300,12766610953175902990,524288 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2264 /prefetch:11
                    4⤵
                    • System Time Discovery
                    PID:2800
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2332,i,4280405890008376002,15226043340079704847,524288 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2404 /prefetch:13
                    4⤵
                      PID:4280
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3168,i,3303951719434752694,18296696193997162077,2097152 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3180 /prefetch:1
                      4⤵
                        PID:6076
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3176,i,15225860133715672770,14858069319615833834,2097152 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3412 /prefetch:1
                        4⤵
                          PID:3448
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4508,i,1969087039565977234,12320689254148963706,2097152 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4564 /prefetch:9
                          4⤵
                            PID:4840
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4548,i,14309549891566186463,7290406241746503022,2097152 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4524 /prefetch:1
                            4⤵
                              PID:5712
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5100,i,2117668336653933457,15743924063445390008,2097152 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5104 /prefetch:1
                              4⤵
                                PID:1476
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3428,i,15934399677608384379,12816474250095618049,2097152 --field-trial-handle=1936,i,6127106410223527477,2980026693603016129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4948 /prefetch:1
                                4⤵
                                  PID:7956
                              • C:\Windows\system32\ie4uinit.exe
                                "C:\Windows\system32\ie4uinit.exe" "-show"
                                3⤵
                                • Boot or Logon Autostart Execution: Active Setup
                                • Modifies Internet Explorer settings
                                PID:4264
                              • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\Wondershare Filmora Launcher.exe
                                "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\Wondershare Filmora Launcher.exe"
                                3⤵
                                • Executes dropped EXE
                                • Suspicious behavior: EnumeratesProcesses
                                • Suspicious use of WriteProcessMemory
                                PID:6792
                                • C:\Windows\explorer.exe
                                  "C:\Windows\explorer.exe" C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Wondershare Filmora.exe
                                  4⤵
                                    PID:796
                            • C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
                              "C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe"
                              1⤵
                              • Executes dropped EXE
                              • Suspicious behavior: EnumeratesProcesses
                              • Suspicious use of WriteProcessMemory
                              PID:4452
                              • C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
                                "C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe"
                                2⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Modifies registry class
                                • Suspicious behavior: EnumeratesProcesses
                                PID:2284
                            • C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
                              "C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe"
                              1⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • System Location Discovery: System Language Discovery
                              • Suspicious use of FindShellTrayWindow
                              • Suspicious use of SetWindowsHookEx
                              PID:3848
                            • C:\Windows\system32\msiexec.exe
                              C:\Windows\system32\msiexec.exe /V
                              1⤵
                              • Badlisted process makes network request
                              • Enumerates connected drives
                              • Drops file in Windows directory
                              • Modifies data under HKEY_USERS
                              • Modifies registry class
                              • Suspicious behavior: EnumeratesProcesses
                              • Suspicious use of AdjustPrivilegeToken
                              PID:3196
                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                              1⤵
                                PID:7220
                              • C:\Windows\explorer.exe
                                C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                1⤵
                                • Suspicious use of WriteProcessMemory
                                PID:5200
                                • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Wondershare Filmora.exe
                                  "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Wondershare Filmora.exe"
                                  2⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Checks processor information in registry
                                  • Modifies Control Panel
                                  • Modifies registry class
                                  • Suspicious behavior: AddClipboardFormatListener
                                  • Suspicious behavior: EnumeratesProcesses
                                  • Suspicious behavior: GetForegroundWindowSpam
                                  • Suspicious use of SetWindowsHookEx
                                  • Suspicious use of WriteProcessMemory
                                  PID:5652
                                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\DataReporting.exe
                                    DataReporting.exe {\"process_guid\":\"c8b6f09d-0bd2-4882-8c5f-513c4144b8e1\",\"process_name\":\"DataReporting\",\"process_type\":3,\"server_guid\":\"7fa1f78b-9ac4-4950-b307-cbbb4ae62f2e\",\"server_name\":\"WS_Filmora\",\"server_process_id\":5652,\"server_process_start_time\":1787870296563}
                                    3⤵
                                    • Executes dropped EXE
                                    • Suspicious behavior: AddClipboardFormatListener
                                    • Suspicious use of SetWindowsHookEx
                                    PID:2996
                                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\PlayServer.exe
                                    PlayServer.exe {\"process_guid\":\"c26ff955-d7ec-4753-933d-6878166b88f3\",\"process_name\":\"PlayServer\",\"process_type\":11,\"server_guid\":\"7fa1f78b-9ac4-4950-b307-cbbb4ae62f2e\",\"server_name\":\"WS_Filmora\"}
                                    3⤵
                                    • Enumerates connected drives
                                    • Executes dropped EXE
                                    • Suspicious behavior: AddClipboardFormatListener
                                    • Suspicious behavior: GetForegroundWindowSpam
                                    • Suspicious use of FindShellTrayWindow
                                    • Suspicious use of SetWindowsHookEx
                                    PID:7556
                                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Performance.exe
                                    "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Performance.exe"
                                    3⤵
                                    • Executes dropped EXE
                                    • Checks processor information in registry
                                    • Suspicious behavior: AddClipboardFormatListener
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious use of SetWindowsHookEx
                                    PID:2440
                                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\FilmoraPlayer.exe
                                    "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\FilmoraPlayer.exe" check
                                    3⤵
                                    • Enumerates connected drives
                                    • Executes dropped EXE
                                    • Suspicious behavior: AddClipboardFormatListener
                                    • Suspicious use of SetWindowsHookEx
                                    PID:6244
                                  • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\ofx_check.exe
                                    "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\ofx_check.exe" --app-path "C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora/14.2.9.11061" --cache-file-path "C:/Users/Admin/AppData/Local/Temp/Wondershare Filmora" --enable-common-ofx-path
                                    3⤵
                                    • Executes dropped EXE
                                    PID:7736
                                  • C:\Windows\System32\Wbem\wmic.exe
                                    wmic diskdrive where index=1 get serialnumber
                                    3⤵
                                      PID:7836
                                    • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\WebBrowser.exe
                                      WebBrowser.exe {\"prload_url_list\":[\"https://app.filmora.io/#/ai/copilot?embed=client\",\"https://filmora.wondershare.com/client/upgrade-v14.html?preload=1\",\"https://wae.wondershare.cc/nps2/?embed=desktop&preload=yes\"],\"process_guid\":\"076c12e5-7ee3-485d-88b1-d174c47be4a9\",\"process_name\":\"WebBrowser\",\"process_type\":1,\"proxy_info_mode\":0,\"proxy_info_password\":\"\",\"proxy_info_port\":0,\"proxy_info_server\":\"\",\"proxy_info_type\":2,\"proxy_info_user\":\"\",\"server_guid\":\"7fa1f78b-9ac4-4950-b307-cbbb4ae62f2e\",\"server_name\":\"WS_Filmora\"}
                                      3⤵
                                      • Executes dropped EXE
                                      • Suspicious behavior: AddClipboardFormatListener
                                      • Suspicious use of SetWindowsHookEx
                                      • Suspicious use of WriteProcessMemory
                                      PID:2632
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing" --type=renderer --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --field-trial-handle=2108,1337279218896394358,8379863893724997191,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=2 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2180 /prefetch:1
                                        4⤵
                                        • Executes dropped EXE
                                        PID:1292
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing" --type=gpu-process --field-trial-handle=2108,1337279218896394358,8379863893724997191,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --lang=en-US --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --mojo-platform-channel-handle=2248 /prefetch:2
                                        4⤵
                                        • Executes dropped EXE
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:7440
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,1337279218896394358,8379863893724997191,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=utility --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --lang=en-US --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --mojo-platform-channel-handle=2296 /prefetch:8
                                        4⤵
                                        • Executes dropped EXE
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:5980
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,1337279218896394358,8379863893724997191,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=network --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --lang=en-US --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --mojo-platform-channel-handle=2304 /prefetch:8
                                        4⤵
                                        • Executes dropped EXE
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:3244
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing" --type=renderer --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --field-trial-handle=2108,1337279218896394358,8379863893724997191,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
                                        4⤵
                                        • Executes dropped EXE
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:5960
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing" --type=renderer --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --field-trial-handle=2108,1337279218896394358,8379863893724997191,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1
                                        4⤵
                                        • Executes dropped EXE
                                        PID:5972
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2108,1337279218896394358,8379863893724997191,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=audio --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --lang=en-US --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --mojo-platform-channel-handle=3404 /prefetch:8
                                        4⤵
                                        • Executes dropped EXE
                                        PID:240
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\CefViewWing" --type=renderer --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --field-trial-handle=2108,1337279218896394358,8379863893724997191,131072 --enable-features=CastMediaRouteProvider --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources\locales" --log-file="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\debug.log" --resources-dir-path="C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cefresources" --user-agent="CEF89.0.0.win64/QCefView 1.0 (Windows; en-us) wondershare_filmora_win" --use-mock-keychain --renderer-process-limit=1 --disable-gpu --bridge-obj-name=filmora --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
                                        4⤵
                                        • Executes dropped EXE
                                        PID:1936
                                    • C:\Windows\System32\Wbem\wmic.exe
                                      wmic diskdrive where index=1 get serialnumber
                                      3⤵
                                        PID:7116
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cmdCheckATI.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cmdCheckATI.exe"
                                        3⤵
                                        • Executes dropped EXE
                                        • Checks processor information in registry
                                        PID:1936
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\coremediaserver.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\coremediaserver.exe" 9d47ea2a29de4aea-92a82a68f3d76354 42164 5652 "C:\Users\Admin\AppData\Local\Temp\Wondershare Filmora\MediaInfo\Wondershare Filmora.exe.sqldb" "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\proxypath" "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\" "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\" "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Log"
                                        3⤵
                                        • Executes dropped EXE
                                        • Checks processor information in registry
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:5020
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cmdCheckHEVC.exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\cmdCheckHEVC.exe" 875967049 320 240 1000 3000
                                        3⤵
                                        • Executes dropped EXE
                                        • Checks processor information in registry
                                        PID:7192
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Wondershare Filmora Update(x64).exe
                                        "C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\\Wondershare Filmora Update(x64).exe" /VERYSILENT /SP- "/DIR=C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora Update/"
                                        3⤵
                                        • Executes dropped EXE
                                        • System Location Discovery: System Language Discovery
                                        PID:940
                                        • C:\Users\Admin\AppData\Local\Temp\is-PSGAD.tmp\Wondershare Filmora Update(x64).tmp
                                          "C:\Users\Admin\AppData\Local\Temp\is-PSGAD.tmp\Wondershare Filmora Update(x64).tmp" /SL5="$1F02C4,8272281,163840,C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Wondershare Filmora Update(x64).exe" /VERYSILENT /SP- "/DIR=C:/Users/Admin/AppData/Local/Wondershare/Wondershare Filmora Update/"
                                          4⤵
                                          • Executes dropped EXE
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious behavior: EnumeratesProcesses
                                          • Suspicious use of FindShellTrayWindow
                                          PID:7676
                                          • C:\Users\Admin\AppData\Local\Temp\is-ABTPR.tmp\_isetup\_setup64.tmp
                                            helper 105 0x438
                                            5⤵
                                            • Executes dropped EXE
                                            PID:7456
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single audio_separation_lite "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:8100
                                      • C:\Windows\system32\tasklist.exe
                                        tasklist /FI "\"PID EQ 5652 \""
                                        3⤵
                                        • Discovers running processes
                                        PID:3816
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single autoreframe "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:1356
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single face_landmarks "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:3340
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single face_pose_estimator "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:2076
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single face_visibility "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:6504
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single facedetector "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:4900
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single humansegmentation_effect "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:7144
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single humansegmentation_highacc "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:3608
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single plane_track "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:6844
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single humansegmentation_highacc "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/download//check/humansegmentation_highacc_3.1.6/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:7960
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single semantic_segmentation "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:6988
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single sky_segment "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:8056
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single speech_enhance_v3 "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:3436
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single video_denoising_lite "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:6868
                                      • C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\magic_xe_supported_detect.exe
                                        magic_xe_supported_detect.exe single video_frame_interpolation "C:\ProgramData\Wondershare Filmora\VblProductData/VblExtension/Models/" ./resources/wfx_effect/material/models/model_data.json ./resources/wfx_effect/material/models/magic_xe.lic ./log
                                        3⤵
                                        • Executes dropped EXE
                                        PID:5704
                                        • C:\Windows\System32\Conhost.exe
                                          \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                          4⤵
                                            PID:1292
                                        • C:\Windows\system32\tasklist.exe
                                          tasklist /FI "\"PID EQ 5652 \""
                                          3⤵
                                          • Discovers running processes
                                          PID:7368
                                        • C:\Windows\system32\tasklist.exe
                                          tasklist /FI "\"PID EQ 5652 \""
                                          3⤵
                                          • Discovers running processes
                                          PID:3240
                                        • C:\Windows\System32\Wbem\wmic.exe
                                          wmic diskdrive where index=1 get serialnumber
                                          3⤵
                                            PID:8152
                                          • C:\Windows\system32\tasklist.exe
                                            tasklist /FI "\"PID EQ 5652 \""
                                            3⤵
                                            • Discovers running processes
                                            PID:352
                                      • C:\Windows\system32\taskmgr.exe
                                        "C:\Windows\system32\taskmgr.exe" /0
                                        1⤵
                                        • Checks SCSI registry key(s)
                                        • Checks processor information in registry
                                        • Suspicious use of SendNotifyMessage
                                        PID:7848

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Reconnaissance

                                            Resource Development

                                            Initial Access

                                            Execution

                                            Persistence

                                            Boot or Logon Autostart Execution

                                            2
                                            T1547

                                            Active Setup

                                            1
                                            T1547.014

                                            Registry Run Keys / Startup Folder

                                            1
                                            T1547.001

                                            Create or Modify System Process

                                            1
                                            T1543

                                            Windows Service

                                            1
                                            T1543.003

                                            Event Triggered Execution

                                            2
                                            T1546

                                            Component Object Model Hijacking

                                            1
                                            T1546.015

                                            Netsh Helper DLL

                                            1
                                            T1546.007

                                            Privilege Escalation

                                            Boot or Logon Autostart Execution

                                            2
                                            T1547

                                            Active Setup

                                            1
                                            T1547.014

                                            Registry Run Keys / Startup Folder

                                            1
                                            T1547.001

                                            Create or Modify System Process

                                            1
                                            T1543

                                            Windows Service

                                            1
                                            T1543.003

                                            Event Triggered Execution

                                            2
                                            T1546

                                            Component Object Model Hijacking

                                            1
                                            T1546.015

                                            Netsh Helper DLL

                                            1
                                            T1546.007

                                            Defense Evasion

                                            Impair Defenses

                                            1
                                            T1562

                                            Disable or Modify System Firewall

                                            1
                                            T1562.004

                                            Modify Registry

                                            3
                                            T1112

                                            Credential Access

                                            Discovery

                                            Browser Information Discovery

                                            1
                                            T1217

                                            Network Share Discovery

                                            1
                                            T1135

                                            Peripheral Device Discovery

                                            2
                                            T1120

                                            Process Discovery

                                            1
                                            T1057

                                            Query Registry

                                            5
                                            T1012

                                            System Information Discovery

                                            5
                                            T1082

                                            System Location Discovery

                                            1
                                            T1614

                                            System Language Discovery

                                            1
                                            T1614.001

                                            System Time Discovery

                                            1
                                            T1124

                                            Lateral Movement

                                            Collection

                                            Command and Control

                                            Exfiltration

                                            Impact

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            WSHelper.ini
                                            • Path C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.ini
                                            • Size 4KB
                                            • SHA256 1d4afc4972196e99b21e80adc7fa4d10dc870721de00c47d94a524631d992e93
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-1QV6K.tmp
                                            • Path C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\is-1QV6K.tmp
                                            • Size 35KB
                                            • SHA256 2476d897a6d20653578fcb98737c85ccd96a42e57f67843ffbc431c0d05909a7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-60ONE.tmp
                                            • Path C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\is-60ONE.tmp
                                            • Size 48KB
                                            • SHA256 e6be04c390cee6b4955c8af0c78221fdea3907ca5d0fb5f4f256fe7b05e8a332
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-7BL6R.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\AnimationThumbnail\Motion\is-7BL6R.tmp
                                            • Size 14KB
                                            • SHA256 080cf38a264bd06666e8e7750f29942a026e959fd89fc59873794ddcaa1f0680
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-JIPQJ.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\AnimationThumbnail\Motion\is-JIPQJ.tmp
                                            • Size 4KB
                                            • SHA256 c9e19bc5ca79ddd3eef37e443eacc8161acd92c312afccd4be6294a72618b8c7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Back_UpdateInfo.json
                                            • Path C:\ProgramData\Wondershare Filmora\Back_UpdateInfo.json
                                            • Size 748B
                                            • SHA256 426c42872f18c07227dfcafcf359474db98f8706da3a369c4b6878a2b270e290
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-0V21T.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-0V21T.tmp
                                            • Size 868B
                                            • SHA256 e1ece607477c51659ee152f802a37da359c517157c179295d2aafd11f0666f89
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-19FA4.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-19FA4.tmp
                                            • Size 872B
                                            • SHA256 39be632613d649c385088a0b2e385b2551413754b3f2bf397e08dbba75748ae6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-3QBNE.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-3QBNE.tmp
                                            • Size 869B
                                            • SHA256 a7d4902a50086b407f62b20f38c08990dbdfd655517c9f14fb15f47705bd4eda
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-4SAAU.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-4SAAU.tmp
                                            • Size 869B
                                            • SHA256 0b2d213c0d143e8fb53400458ce7b1f05797fffb9264237e27af9f60b6219de5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-9KBLD.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-9KBLD.tmp
                                            • Size 871B
                                            • SHA256 a724d74a8a8397b9ad9c5d897fbd2ef0a7b8c1c611489a6b499e3b672a3e6730
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-HNRRP.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-HNRRP.tmp
                                            • Size 868B
                                            • SHA256 22a07da2b217afb478993f21af2c909d92289ac0eb899290b290b5b00ee0292b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-LKHI5.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-LKHI5.tmp
                                            • Size 869B
                                            • SHA256 1d73d0a001daa01387c3259f7a7a49e2be82e79a500f102a6594bc72dd72e0ef
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-MU9IU.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-MU9IU.tmp
                                            • Size 870B
                                            • SHA256 6aacec619d4c3c77baef7a86e65b018ae88b6ff244b2ce64bd54f4bd6d31a52e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-ODCRL.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-ODCRL.tmp
                                            • Size 869B
                                            • SHA256 7f42e4e411cf791fe847db4d272381fc2d194c78ce70e35dc8877b35250f1d0b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-Q82UU.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-Q82UU.tmp
                                            • Size 872B
                                            • SHA256 1fc78174d305af5c6aeb39a2bfdfa1a27759f108d02a3b1977a715e111c88530
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-QH76A.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-QH76A.tmp
                                            • Size 869B
                                            • SHA256 ec3d238d912ea9f0bfe781ad764945ae5343244d047743e02635f52804210188
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-SE15A.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\ActionCam\CameraSettingFiles\is-SE15A.tmp
                                            • Size 872B
                                            • SHA256 356716bd0b47c47bfab1ce62808ecba98c6cf1bf97108862bc6fe75a253c3dae
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-38OEO.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-38OEO.tmp
                                            • Size 896KB
                                            • SHA256 c6be9d6e7391f2527fdbe49947fb2e0029866921ed33e1f2e4f364085f7ac951
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-84R9F.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-84R9F.tmp
                                            • Size 896KB
                                            • SHA256 a7f775394b2234981539a0640df966fc2ba7fb3bed03ce2b5c597b48dc2c3334
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-9FG9Q.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-9FG9Q.tmp
                                            • Size 896KB
                                            • SHA256 2cde1809d3f8f02059b9b0c992d3951f0fd8b3810a664060270457f465c18f3f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-C8GLI.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-C8GLI.tmp
                                            • Size 896KB
                                            • SHA256 73374a19daa1603b8cde5ae2dd130542b18f0b2e36f5dc658b416c9bff0a4f49
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-I0EM4.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-I0EM4.tmp
                                            • Size 896KB
                                            • SHA256 78d54e5f7a5d16c0379155294de80b079d7f204813d120fdd0a11b810c7c67e0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-J469E.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-J469E.tmp
                                            • Size 896KB
                                            • SHA256 8a0ddca0a4f2900564b81ebf5300adb74674dc2a098d090c0103ac1894995cf3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-K3PLS.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-K3PLS.tmp
                                            • Size 896KB
                                            • SHA256 1be3d7bf5df34657ecd4375d74600efea703f8d3bbead26bb239d6733044560b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-QAQC6.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-QAQC6.tmp
                                            • Size 896KB
                                            • SHA256 21aeabf1641980e77388abe5a2c9553176d7ee873e13cfcecc9f1eaa3616525b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-QKPI5.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-QKPI5.tmp
                                            • Size 896KB
                                            • SHA256 7af6f666cc4087326fc05f282c5a894b5aa3c89cbf4e0665e0cf3dc8bc061005
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-QNBL3.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\Default Effects\LightRoom\CubeLUTFiles\is-QNBL3.tmp
                                            • Size 896KB
                                            • SHA256 803264c78fb91b15f438ad6b8dc05eeed8b38978afd12752bd0d25986b905ad0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            FConfig.ini
                                            • Path C:\ProgramData\Wondershare Filmora\FConfig.ini
                                            • Size 7KB
                                            • SHA256 6124271f887e4a74e2b2d0014d2945595dba7a1391638dcea0682516c20ccaba
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            FConfig.ini.lock
                                            • Path C:\ProgramData\Wondershare Filmora\FConfig.ini.lock
                                            • Size 72B
                                            • SHA256 1d2acd395c4465f55fcf243bbbd9c91ffde1cd5e15c681d69000f9c3d977cd96
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Filmora.ini
                                            • Path C:\ProgramData\Wondershare Filmora\Filmora.ini
                                            • Size 673B
                                            • SHA256 31724ce6c9eeabff7cc0fa9b3d4a16a23f004954f678fbf348f92a5b733b0666
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Dark.qss
                                            • Path C:\ProgramData\Wondershare Filmora\Skin\Dark\Stand\Dark.qss
                                            • Size 724KB
                                            • SHA256 edf1a10208592ec738e7f274af16aea2fc5669c86f2dc00143aad58f3eea4307
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_AudioSeparationLite_CPU_OpenVino_online_FP32_v1.0.0.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\audio_separation_lite\WM_AudioSeparationLite_CPU_OpenVino_online_FP32_v1.0.0.model
                                            • Size 28.3MB
                                            • SHA256 62e56234dd900b380a651939e19b63ceb0d739ba1f51d1bfec3cbc3bf9a3b7f1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\audio_separation_lite\version
                                            • Size 5B
                                            • SHA256 92521fc3cbd964bdc9f584a991b89fddaa5754ed1cc96d6d42445338669c1305
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WM_AutoReframe_X86_Openvino_Fp16.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\autoreframe\WM_AutoReframe_X86_Openvino_Fp16.model
                                            • Size 3.5MB
                                            • SHA256 0c3082d072db970ce7f0058d4b4463b62334ed456b5ff1521eccde273f84be6f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            humansegmentation_highacc.zip
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\download\humansegmentation_highacc.zip
                                            • Size 9.3MB
                                            • SHA256 b3d29e127a53d23fd5c813b2c88d9163c80c942206eace30befba569c6f52723
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_EyeLandmarks_CPU_Online_Openvino_FP32_3.0.0.0.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\eye_landmarks\WM_EyeLandmarks_CPU_Online_Openvino_FP32_3.0.0.0.model
                                            • Size 408KB
                                            • SHA256 268272c47132d073483f855794f92b9b5f7c599694adf99302a8d09a151785e9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_FaceLandmarks_CPU_Openvino_FP32_3.0.0.0.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\face_landmarks\WM_FaceLandmarks_CPU_Openvino_FP32_3.0.0.0.model
                                            • Size 1.8MB
                                            • SHA256 409e98e49c0a278b393b612cb4338b2d30439579c779dbee6db95110c20fed11
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\face_landmarks\version
                                            • Size 5B
                                            • SHA256 892bef45a1a5205bfddb7849303ee13093d77185b84931419c334a38bc035672
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WM_FacePoseEstimator_Net_Binary_1.0.0.0.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\face_pose_estimator\WM_FacePoseEstimator_Net_Binary_1.0.0.0.model
                                            • Size 120KB
                                            • SHA256 5e6d82e60dbe66ba34b44a5157f83172a115b3ff99f75187ae08c13c8a5b8e98
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_FaceVisibility_Online_Openvino_CPU_FP32_1.0.0.0.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\face_visibility\WM_FaceVisibility_Online_Openvino_CPU_FP32_1.0.0.0.model
                                            • Size 1.8MB
                                            • SHA256 4ec62fa883e00a3afa5335594c398ce7ef1e7ff08768ca2da0b2d4d894c35a09
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_FaceDetector_x86_Openvino_v1.0.0.0.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\facedetector\WM_FaceDetector_x86_Openvino_v1.0.0.0.model
                                            • Size 1.2MB
                                            • SHA256 59346887750aa3e16fdb79c702b0f185bc8216142cf5bc004256c39098e9c73c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\facedetector\version
                                            • Size 5B
                                            • SHA256 ce0a2005da2b159fde33efc005d063470ccc2ccc54ffb702dfafb2c330285040
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WM_EffectHumanSegment_X86_CPU_Openvino_Fp16_2.4.1.1.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_effect\WM_EffectHumanSegment_X86_CPU_Openvino_Fp16_2.4.1.1.model
                                            • Size 1.7MB
                                            • SHA256 57507175c2286d674a1d06fcc4fa61e030b852023953960f073835dcea4e5901
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_effect\version
                                            • Size 5B
                                            • SHA256 b3d093ffde5f9d8d1530cd57966760ffd2730bf73aa90d592d13a88663984dc4
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WM_HumanSegmentHighAcc_CPU_Openvino_FP16_3.1.0.4.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_highacc\WM_HumanSegmentHighAcc_CPU_Openvino_FP16_3.1.0.4.model
                                            • Size 6.9MB
                                            • SHA256 aa6997c58298c62871dc3b646b8d6fc2feb6d0fd9cdd86b84165fabedbe0f791
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_HumanSegmentHighAcc_CPU_Openvino_INT8_3.1.0.5.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_highacc\WM_HumanSegmentHighAcc_CPU_Openvino_INT8_3.1.0.5.model
                                            • Size 3.9MB
                                            • SHA256 b919c3f1d4aeceb5eb5ca37723940a28b9596a800285ef5e6dde8615cfb7e29e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\humansegmentation_highacc\version
                                            • Size 5B
                                            • SHA256 b7f5bb4ad5872543b02944ca39a59415579bb0b693bbae55f340742fa21cc8ef
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WM_PlaneTrack_X86_CPU_OpenVino_FP16_v1.0.0.0.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\plane_track\WM_PlaneTrack_X86_CPU_OpenVino_FP16_v1.0.0.0.model
                                            • Size 17.9MB
                                            • SHA256 8a86d0bd211410812b62dbef08ec0300117bf661b0ea582c21d3dbb83b853d45
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\plane_track\version
                                            • Size 5B
                                            • SHA256 20d2cb096d1ab41a4140246d12f07bf6b8cb743fd48122b72532c03d44c5c14a
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WM_SemanticSegmentation_X86_Openvino_FP32_1.0.2.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\semantic_segmentation\WM_SemanticSegmentation_X86_Openvino_FP32_1.0.2.model
                                            • Size 6.6MB
                                            • SHA256 c155c992fe27e6ff20a4ac0d5500c6c6787ea14b8ac5b70ddd70f18cd54f205a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_SkySegment_X86_OpenVino_Fp16_v1.0.0.1.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\sky_segment\WM_SkySegment_X86_OpenVino_Fp16_v1.0.0.1.model
                                            • Size 2.0MB
                                            • SHA256 216c23b5c0056bad279b324b6106af49b500f5918b003fe50f21627730dd9272
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Speech_Enhance_X86_Openvino.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\speech_enhance\Speech_Enhance_X86_Openvino.model
                                            • Size 5.6MB
                                            • SHA256 0f791ca5bc7bf5cc368514a436d9ed0ace50dc3e54d98e1c194ef614d8628714
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_SpeechEnhanceV3_DF_CPU_Openvino_Online_FP32_v1.0.0.1.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\speech_enhance_v3\WM_SpeechEnhanceV3_DF_CPU_Openvino_Online_FP32_v1.0.0.1.model
                                            • Size 3.2MB
                                            • SHA256 fe13831f5f8487e808404b8eacb354b63fd36d1dd92d1ee8efb43ffcd4d5f80d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_SpeechEnhanceV3_Enc_CPU_Openvino_Online_FP32_v1.0.0.1.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\speech_enhance_v3\WM_SpeechEnhanceV3_Enc_CPU_Openvino_Online_FP32_v1.0.0.1.model
                                            • Size 1.9MB
                                            • SHA256 b6ea1293096ef3717ec04a5d82467c202d1aaba4cdbed5790f4f1e3bc4f84ecb
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_SpeechEnhanceV3_Erb_CPU_Openvino_Online_FP32_v1.0.0.1.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\speech_enhance_v3\WM_SpeechEnhanceV3_Erb_CPU_Openvino_Online_FP32_v1.0.0.1.model
                                            • Size 3.1MB
                                            • SHA256 110f8fa0f42fd9f566be3d87141845d52ba18b4348ec75cc1a3134e7dbbd1ee9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WM_VideoDenoisingLite_Openvino_Mnn.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_denoising_lite\WM_VideoDenoisingLite_Openvino_Mnn.model
                                            • Size 530KB
                                            • SHA256 668ecb6c867831838cab4bdbdd0cd417e4b7b62523679db5ab84255b005356a1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_denoising_lite\version
                                            • Size 5B
                                            • SHA256 c9163ff21f1f2b0390dc48bdda47179718f772f507a7cebceca59ce1a7129029
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WM_Video_Feature_Extraction_Openvino_FP16_1.0.0.0.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_feature_extraction\WM_Video_Feature_Extraction_Openvino_FP16_1.0.0.0.model
                                            • Size 21.4MB
                                            • SHA256 706d0088cde4ef654f8fbe2c7647646b54481054a351596b6bcde94c65b3a6d5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_feature_extraction\version
                                            • Size 5B
                                            • SHA256 d51e6ec94058554a84558a5b402ee6ef5fdf5455e35c902feda61cda8752943a
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WM_VideoFrameInterpolation_Openvino_Mnn_FP16.model
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_frame_interpolation\WM_VideoFrameInterpolation_Openvino_Mnn_FP16.model
                                            • Size 3.2MB
                                            • SHA256 53818a4dac6c0dcbf9decb10fb468f2d8c213beec2de154025c1e4e5f46b740f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            version
                                            • Path C:\ProgramData\Wondershare Filmora\VblProductData\VblExtension\Models\video_frame_interpolation\version
                                            • Size 5B
                                            • SHA256 11b66d3032607cb6df8b0a8470a6856bdcb631ef3fafd9397b6bc8db6b6d19b2
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            the-real-index
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\Code Cache\js\index-dir\the-real-index
                                            • Size 864B
                                            • SHA256 3133d2c99526b7944cd9c8f35636f8cfdea6859233772ff3cdb1c98afd377cf2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            the-real-index
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\Code Cache\js\index-dir\the-real-index
                                            • Size 48B
                                            • SHA256 a9daba30c941b68b7e68c2f29ffe6ec5831fea39f2e0e4f08b465cf6bd45cf44
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            MANIFEST-000001
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\MANIFEST-000001
                                            • Size 41B
                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            Network Persistent State
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\Network Persistent State
                                            • Size 1KB
                                            • SHA256 6bc2c2885879eb32c1e6936a10fcf6a71e26d9b4e64ba1f9d1c396c6cabaf4ae
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Network Persistent State~RFe5b1123.TMP
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\Network Persistent State~RFe5b1123.TMP
                                            • Size 59B
                                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            index
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\Service Worker\CacheStorage\830298353dc526c33afb68ee78e080294535b7fc\00129ec8-4fac-4843-a48b-041b1569a7c4\index
                                            • Size 24B
                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            the-real-index
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 96B
                                            • SHA256 6a604efd0c2d149e361ee09d06c49fa3f951dafa7011d9cfded8928b981a2974
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            the-real-index~RFe5a828f.TMP
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a828f.TMP
                                            • Size 48B
                                            • SHA256 b918974165fada14cebacfe66a6ee359ecb021eb5d4224102d2db40f8b5f87b1
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            CURRENT
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\Session Storage\CURRENT
                                            • Size 16B
                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 533B
                                            • SHA256 324fe8bb7449661a8eb40a6834d6f8a3a7553aa10ce10bcfa452029a73797a24
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 533B
                                            • SHA256 ba6e52fbf7afe7658c5b3dacfb99ea0603324bd06c1cace907912d6384c4816a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 533B
                                            • SHA256 22db988d39e1fcc4f15187a758ccbbfba9722de3403091f6db4bd66f59a6f88f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 533B
                                            • SHA256 fa995750adcc5a33a3c4027383266c6ac6bc8b1f41f3e1271b88c9c923cf67a4
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 c8292d7129b225346a9769852fd1b4770789fee5f6d0b6af23903827e7fb99ec
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 f0d1297a0328df25a5da73c305ee7be29fe0fc06315982545be4e060448372cf
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 935540b65fa86cb3de73e3613f006b20cf20330f568facd70f3745e20637db04
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 161220e0cf0874e27028338d1171749bb9977c077b15904b536a67dd298a8c30
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 256e24cc4ad09340a71433fadd59238f0960ac23424d57fd14c6b5315366ef9a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 25e112cdd15da5b426cccef96d96dd4401e9788b13a17106d5ebdf0e2f1a2cf2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 3293fc1457cf4c7ccfc36612f7b077190406326914584b153313704be667ca5a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 e236e18644af290ce4cf85470ce1d2e9b2af02d9f5f97ec6dad494f8251ee38e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 faed3d6ead2879bc5f197a17a3e7d1887fa970346cb6b439d6592b2f1de83fca
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 533B
                                            • SHA256 95c88068c5c573e203d1abfb4a93cad6cdac8062499bb143322e328116fa3edb
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 533B
                                            • SHA256 7c51d6c293bd7a5a77beb96888ee8d15aeac554606e172f637738d38c1a4e194
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 533B
                                            • SHA256 59a75042f79f8badd9c73f005f81e2700bed8fca3899bfa04e533a6c061fcaa0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 533B
                                            • SHA256 e5b658bdeef5cd2ac47251cf5dec9fa2412f35c99908f3886e94c4b7109f74d6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 369e910be521f60a184c392e9c92a751c8417b6f7df5a10a597c5f36066b95bf
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 b76df339f8ee8b0e6f9cc7675a986a1146fefeb8adc7e854f6f4f8f9c5af0e9d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity
                                            • Size 535B
                                            • SHA256 6cbd6a54605b302a33c8c224eee96eb6ece607e57c54006f9195fd35da465191
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TransportSecurity~RFe5a4121.TMP
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\TransportSecurity~RFe5a4121.TMP
                                            • Size 537B
                                            • SHA256 17482b9241b34abc458511177e74e68d8d4a9eef02972e0da1904fe29e69b5f8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            1
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\blob_storage\a949819f-e542-4c25-b1a8-a9452fc22864\1
                                            • Size 28.5MB
                                            • SHA256 457b2fe1bf252b1991d07c565c01846b0033530d02e26ee2e2a337f8180d1d6a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            2
                                            • Path C:\ProgramData\Wondershare Filmora\cefcaches\WebBrowser\blob_storage\a949819f-e542-4c25-b1a8-a9452fc22864\2
                                            • Size 28.5MB
                                            • SHA256 752011dd9afa633faaf7bcd4364291738f0f0088c73abb3f2d770bc975f632e3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-HORG9.tmp
                                            • Path C:\ProgramData\Wondershare Filmora\configs\ColorAnd3dLutPreset\default\60_color_Vignette_3\Data\is-HORG9.tmp
                                            • Size 6KB
                                            • SHA256 9fc8f2725a06712b9d9fedddeb343d3896bbc569115c37366535ddad5e637505
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Filmora.ini
                                            • Path C:\ProgramData\Wondershare\Wondershare Creative Center\AppInstallInfo\Filmora.ini
                                            • Size 297B
                                            • SHA256 e7b4bfcbd6a0bc1438f4a59ebdc03f2cbf3c482338a1dd6f8f44e7e4e7a7dfec
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            BookmarkMergedSurfaceOrdering
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            the-real-index
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 1KB
                                            • SHA256 ccf4150ff9c26fea54fd83e23707065eaedc4eff056a72db8b2d6b15aa2f3f52
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Network Persistent State
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                            • Size 6KB
                                            • SHA256 ced5cae5bc637285c62fa28c58f08143a815e7660d49acaecb86354695f30da6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            SCT Auditing Pending Reports
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                            • Size 1KB
                                            • SHA256 f94671522cfbb6fe1de425d19dd77f2165d4d0411ee0a4dad8f09a2670f303e1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Preferences
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                            • Size 11KB
                                            • SHA256 c38667e30078f879e1a0ca80558b3798454e6c616baa221c3beafbf18eed4725
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Secure Preferences
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                            • Size 17KB
                                            • SHA256 6580b9be38e043e5d2436ff4ae9296f74b369cbea58296d9af5604bd4b1cc474
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            index.txt
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b5fb6a4311b698e4f248cf3970e1a1f966de8cd0\index.txt
                                            • Size 149B
                                            • SHA256 037f593ec335b650f0c20afbb828143a21f5601afe96070d7fd2b8948e840534
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            index.txt~RFe59aa5f.TMP
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b5fb6a4311b698e4f248cf3970e1a1f966de8cd0\index.txt~RFe59aa5f.TMP
                                            • Size 156B
                                            • SHA256 70fb8e0708a1fa2ce8748d9fb10324422930a38a2307c0e0421ff3079003855d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            the-real-index
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 144B
                                            • SHA256 1582b956e152a381abc66350170dc44fdf4ea41ce03d388cb4baca116eb4b40c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            the-real-index~RFe59aa40.TMP
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59aa40.TMP
                                            • Size 96B
                                            • SHA256 a8b3170ee4d0c7bade361455fdc500e1e8236ce4019aa719661ebd274e3ec05d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Local State
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                            • Size 116KB
                                            • SHA256 7ae8f8afb3c7de5eb40900204cbc98275aa15eea5315fe0890cc7a08ed872b1b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Local State
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                            • Size 115KB
                                            • SHA256 d42865e4b17bde35984834f3d0750dbe834239edca26c8161974e79db9991c8f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            data_1
                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                            • Size 264KB
                                            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            WMSDKNS.XML
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.2\WMSDKNS.XML
                                            • Size 9KB
                                            • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            VWL91F5.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\VWL91F5.tmp
                                            • Size 392B
                                            • SHA256 205aea57345756d52cfedf1f458e722a12da8e590ae6a241bb7af2d5c6d97065
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            wsUpgrade.log
                                            • Path C:\Users\Admin\AppData\Local\Temp\Wondershare\NativePush\wsUpgrade.log
                                            • Size 342B
                                            • SHA256 74140b2822d1de76d4e03451e0cb3cf2b60d495c0676cc8aa8120d87c439a90b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            wsUpgrade.log
                                            • Path C:\Users\Admin\AppData\Local\Temp\Wondershare\NativePush\wsUpgrade.log
                                            • Size 610B
                                            • SHA256 05680e2e2df0d55ef0d62687aafefc59cd7dedf5129a8c30868be43cd0add89b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Wondershare Filmora SubPack 1.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-5DJLQ.tmp\Wondershare Filmora SubPack 1.tmp
                                            • Size 1.4MB
                                            • SHA256 e334f3ba34cc05ee806fa4e85c78e03093e68d99b3dd39d386deaf9f06c9092b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Wondershare Filmora SubPack 2.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-8QFMT.tmp\Wondershare Filmora SubPack 2.tmp
                                            • Size 1.4MB
                                            • SHA256 c10d71912ad173f7de89396c6d2887c4ec959527b5c0fbd478ee79b5154bde0b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            _shfoldr.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-ABTPR.tmp\_isetup\_shfoldr.dll
                                            • Size 22KB
                                            • SHA256 9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Wondershare Filmora SubPack 3.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-BFDLT.tmp\Wondershare Filmora SubPack 3.tmp
                                            • Size 1.4MB
                                            • SHA256 21945826bb16113488bf48d58cb0bfae2a86543ada9928c4292b41f1705a91ea
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Customization.xml
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\Customization.xml
                                            • Size 918KB
                                            • SHA256 aebdb1a4c861922aeb76257fe1355916115eb8413e249d42153a62fb66bba7d6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            InnoUtils.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\InnoUtils.dll
                                            • Size 501KB
                                            • SHA256 46da6f1d82ba378b06cca92970f959b8d258b684b364fc63fcd8a5644c1ea1ba
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            InstallHelper.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\InstallHelper.dll
                                            • Size 122KB
                                            • SHA256 ec3dd19d446eaf62d396d65029c1c627205bd1fd33608e122be7f4d8af7b5ad4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WSUtilities_Setup.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\WSUtilities_Setup.dll
                                            • Size 202KB
                                            • SHA256 b42085777505d324d56122f2bd6195ec3a6ce47030a31f9ce6b853c5fa8cd5a8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WS_Log_Setup.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\WS_Log_Setup.dll
                                            • Size 104KB
                                            • SHA256 43391e665a63b5e9e1288a3c608691f73ece57478e0655363918e8195d85cf81
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WebUtility.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\WebUtility.dll
                                            • Size 114KB
                                            • SHA256 78a2782ba753ce020b063e1b696da3a799531c2ca495447f2ed3068188c84978
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Wondershare Helper Compact.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\Wondershare Helper Compact.exe
                                            • Size 2.3MB
                                            • SHA256 79827a18a6a7902e8644f6d997ee38e8965a4c954ad03dc0cd25d0f3c7a4b2ff
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            _setup64.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\_isetup\_setup64.tmp
                                            • Size 6KB
                                            • SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            innocallback.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\innocallback.dll
                                            • Size 63KB
                                            • SHA256 6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            vcredist_x64.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G8T4D.tmp\vcredist_x64.exe
                                            • Size 5.0MB
                                            • SHA256 7451ba5c6c05347789717561e871a303a4d171850790a3cdc99d4ddbf07e320b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Instalador del programa.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-HPI3U.tmp\Instalador del programa.tmp
                                            • Size 1.4MB
                                            • SHA256 5d7129a3571131c97b3c0eddab42ddb5164753a2b54f284325d7c92bfa40122d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            WSHelper.ini
                                            • Path C:\Users\Admin\AppData\Local\Temp\is-MN9V6.tmp\WSHelper.ini
                                            • Size 4KB
                                            • SHA256 0c0fd5929f7d258aac1ae23adfd23a4f4d6f37468003ee794465132336d24b21
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Customization.xml
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Customization.xml
                                            • Size 868KB
                                            • SHA256 6c01b388ba11d97800e9fa3974e3c9ac530fb4a88713105314c12ea437f77ba6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            LayoutConfig.xml
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\LayoutConfig.xml
                                            • Size 6KB
                                            • SHA256 230b01e1b2c1deb2136e858f97d24a21c3cf56be6edf61d3e2e964439f2332bb
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Wondershare NativePush.exe
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\Wondershare NativePush.exe
                                            • Size 3.6MB
                                            • SHA256 8ea10b9b0763ac43a8b759fbabd2ef3a7c7d9d92c702675f64ad005dfa9dd79a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-4BTA2.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{08E343EF-8274-459e-86D0-CDE548615C94}\is-4BTA2.tmp
                                            • Size 3KB
                                            • SHA256 db18149432839d834ca639cfee32aa79946cb9481f3a246dfe2d918c292e8a8d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-SS3NS.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{1F2849C2-F6DF-4c6d-885F-7EA49873B135}\is-SS3NS.tmp
                                            • Size 3KB
                                            • SHA256 acdd32014990d0168b11872ede470fa3c76409d3ad9346335923a1c8fa32688d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-IS3C6.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{43E73D69-FF43-40a8-95CA-30FF96100407}\is-IS3C6.tmp
                                            • Size 3KB
                                            • SHA256 718203a5f176e5770e9184a8617ee2b9e8eaec6f35bb317ff903c03061d85ac0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-CRTAM.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{6E71FDB5-7BAA-4d15-949A-1F8F23682B75}\is-CRTAM.tmp
                                            • Size 3KB
                                            • SHA256 67bfa06df70bacfdac13b689299141a494d953323753071ea4dd9c1986b59dcc
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-7NJGC.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{73F5B4FA-B137-440b-9A86-F31790F3566A}\is-7NJGC.tmp
                                            • Size 3KB
                                            • SHA256 0f10377e57242f01afc0c397077d1942255a40cc9b9807c69740ecbe3315ec97
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-44BHE.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{A878EC0E-7104-4ded-AD3C-946BE84412C1}\is-44BHE.tmp
                                            • Size 3KB
                                            • SHA256 4017b678c8ac1715d9c875f5cf327e7824a45fd313dbe32ca0a0a80175b1ca81
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-V3O7C.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{B43FD11A-F689-40db-9B05-D34A89ABDF5F}\is-V3O7C.tmp
                                            • Size 5KB
                                            • SHA256 10bc1e6ba0ead119ae9bf8bb61f7e96154472684ecd81bf1e59b8cc79337d92f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-3I5ET.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{B62F36A8-847C-4423-A95A-5C74E22F7860}\is-3I5ET.tmp
                                            • Size 3KB
                                            • SHA256 f0fc449b70d9c653e87c7da9be94ba1fb01966fe8cdd229139703461a4e9185d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-1Q2LV.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationKeyFrame\{BFC167D0-6AB4-41e6-9BF4-ECB740B9A52D}\is-1Q2LV.tmp
                                            • Size 3KB
                                            • SHA256 4d21ec65760a3413553d84066b75855cce8290a9616be04b76ff4fc01c0eebfd
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-TRON0.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{07D46F93-A963-4a48-AA1D-53EC456DA91D}\is-TRON0.tmp
                                            • Size 463B
                                            • SHA256 22f849a216519f55cf49e794c73970c18a0e5e9a0be621ec5a905c1d36f21ef8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-808US.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{0C02B80B-9B8E-471a-B4E1-076949A17F96}\is-808US.tmp
                                            • Size 176B
                                            • SHA256 47a11bcda5f09483e28fa13f447232b5be6a9b4db1f80d26586811adf95bdd2b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-MIG7B.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{0FD53C8E-D963-4e15-B905-9D278CE07FB2}\is-MIG7B.tmp
                                            • Size 187B
                                            • SHA256 cd1f35a72e046cc040c83fee98e5e48854c446f5669b3e41ba300ac13e34e799
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-2DF7F.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{131C9392-CFC2-474c-AF2F-DA3246222949}\is-2DF7F.tmp
                                            • Size 187B
                                            • SHA256 257a8a4d184fe0ff5b1de511af9e93d866058d125f462dcfcd421a8788ff08f0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-PLSEO.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{139D8383-91B0-4238-BF61-EE3DBC443A51}\is-PLSEO.tmp
                                            • Size 720B
                                            • SHA256 0af1f6ef107fcdf46391851d95cb587e015e51ff2098867bbc77803485fdc0e4
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-SDQ95.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{22A34B2E-ED23-4897-A06A-03ACD486A246}\is-SDQ95.tmp
                                            • Size 181B
                                            • SHA256 ebfb0ae7cae00a0030947874d7ea2ea019eb80d24da1d4441b35259d6feb6642
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-4BHRQ.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{25B9419C-8ACC-4526-9E34-DADB82EFE76C}\is-4BHRQ.tmp
                                            • Size 720B
                                            • SHA256 9c3bbcb6dc67f82966bd1be2c742c4f0e989e339e13ecff035590d3db342dbee
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-J2TRO.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{2D761D56-F30C-4ffc-A4F2-6FEC74135367}\is-J2TRO.tmp
                                            • Size 460B
                                            • SHA256 228b38006999f3de0a0a06e7b2bbd9f41d4a99deff6c630d80625f5b660f616c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-8CN4A.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{38B700C8-1C4F-475c-A85B-2C6B3A32AE81}\is-8CN4A.tmp
                                            • Size 176B
                                            • SHA256 c79260fa82ee6bcb6912268dee459c76d4ca1870cdd9cf53eac0705c439d69fc
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-MBUQC.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{3B33C7F0-2A40-4909-9701-1FFDDFB45DC7}\is-MBUQC.tmp
                                            • Size 186B
                                            • SHA256 3dcecf11effbeb47beadb97e2b28523fcca094e2e7f731231a18652478592f78
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-2TJM8.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{3EA4BC06-1115-44a1-A272-4A3C99F36D38}\is-2TJM8.tmp
                                            • Size 186B
                                            • SHA256 a6579cd384374ead981f136c7cb79086611e1474b7445f591df745ac01ea9e9b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-J9V9H.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{40B11ADC-F655-4dde-8153-C7D22164C0AA}\is-J9V9H.tmp
                                            • Size 721B
                                            • SHA256 938a251b2c8ab726a5999fc2d79df8c75fb5552c99712fc3d766f7ac9b75fe96
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-QJV7N.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{5090BB3C-1DA9-487c-9F3D-41DCCE0179D8}\is-QJV7N.tmp
                                            • Size 724B
                                            • SHA256 09fe2939e7a5db91e58772b09fce0fbcc95600c6b0bd0e29aaa1ad3fa6bda4e5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-1MOP0.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{580775C8-B035-4fcd-92D3-120B5ADEFA3D}\is-1MOP0.tmp
                                            • Size 155B
                                            • SHA256 018de2813cb719e5c665898373b9f077e99e4acfb5becef7a67a3e3a7c7c2dfd
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-CEO0D.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{7545C97E-229D-4c5c-9599-74B44DBE987B}\is-CEO0D.tmp
                                            • Size 178B
                                            • SHA256 9d753be7838dc3cd77e35b8e340c0429d88b624b411d577704c81d2712d11260
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-4TQ1T.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{7883CBAC-C937-4924-A771-6607A10DC07E}\is-4TQ1T.tmp
                                            • Size 180B
                                            • SHA256 31e6edba561a815332ad57c883531bc60c3b0a37174bf4b404f84c2cf08be62b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-LCF01.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{78B71349-3F0D-4e65-8236-D74C51E06F20}\is-LCF01.tmp
                                            • Size 185B
                                            • SHA256 c0e4f6b6f2e0901b60d4926684ea3c4990d7cdb168bd2b0fd868e320823edc52
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-AJPAT.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{7CEB20EB-2FA9-4889-80B1-9596EED5E728}\is-AJPAT.tmp
                                            • Size 180B
                                            • SHA256 5f4cc9200bb0d4a523494d0baef657daeed70d85f6e6cd1e74327e4d9fbc0f4d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-5DVMN.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{802E2DDE-CC59-4c15-BE02-0A0EE220AE00}\is-5DVMN.tmp
                                            • Size 968B
                                            • SHA256 7fd7f9608caae2411d66faf7cab8fc53d0028fde01e9e18ede04e0cbf2a42649
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-UBFCG.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{84A6867F-2525-4a8b-8313-76B48B9C4C1E}\is-UBFCG.tmp
                                            • Size 175B
                                            • SHA256 7beb7633a738b76c9a5e0fc57469445b7208554cab953b2b664bef21c5557983
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-Q4KTR.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{8721CAC1-FBD6-4062-940D-302C4994D6A4}\is-Q4KTR.tmp
                                            • Size 182B
                                            • SHA256 c0b33107f7038274a693031468041124e5c545e110286b6c559f12b23af2fb07
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-TV7Q7.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{883CC73C-FF2B-43b9-B52F-912F7FB914BF}\is-TV7Q7.tmp
                                            • Size 185B
                                            • SHA256 18aa8eea2a538f5a84fa0184fea6bdcc8b5778581c6d4824ccae4ffeeacfef3f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-0R981.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{93E3B5E9-CAEF-494c-B736-DC9749337720}\is-0R981.tmp
                                            • Size 179B
                                            • SHA256 7f5d80199e595f625f5c6d419afe5c31b2141a192157580aa0340c227a39b084
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-9O3JB.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{99C431D2-E9A2-41d1-AEF8-0425CCC13B82}\is-9O3JB.tmp
                                            • Size 176B
                                            • SHA256 d5f188caa4efcf3a1301fd58ff88a94bdd1c2c627a6e6fbcb5b5b5c934deb8c4
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-JVEUA.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{9AFBFBD3-30BF-4dc2-A28B-84434BB8D954}\is-JVEUA.tmp
                                            • Size 978B
                                            • SHA256 27b1f0ba010213d6e23337777b2f88a98ee166599f602e556018e7d06f0e8256
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-S5SS7.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{9B404780-7E9E-4b3f-B26D-09077053687B}\is-S5SS7.tmp
                                            • Size 179B
                                            • SHA256 26a5bf6fb487a580835db9ae7219f7dc48959aa8c73ca851aa2df37f541c3de1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-19REM.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{ABD0149B-5029-496a-AC67-0C152E296FEB}\is-19REM.tmp
                                            • Size 184B
                                            • SHA256 50fb26bc20bc9e332ddc8fec698a4b1588c9dc796612c25297f14cd63e290ece
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-0MUEQ.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{B2104C03-69BF-4f9e-9FD0-38803ABB8904}\is-0MUEQ.tmp
                                            • Size 175B
                                            • SHA256 aadc9aa2f26d299d387282d5545538f6f21a1e158ffefb7fb7a82cd949d8c627
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-97ACC.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\AnimationNew\{B8315CBF-F926-4e24-963E-49DA16EFF575}\is-97ACC.tmp
                                            • Size 5KB
                                            • SHA256 4ce8280d23d7531daebd4236b7fc48ff086d65fbefb5fe9f8413655504f08756
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-FJ0JD.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Category\zh-hk\is-FJ0JD.tmp
                                            • Size 643KB
                                            • SHA256 ecdf6bfdbbf532d5ae59535a04aa284ee231aca9b62300ee5e169cc744cada35
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-0ID96.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-0ID96.tmp
                                            • Size 47KB
                                            • SHA256 a6d96a379419ae181db5d266f2383a4e1c2233277f35e6b5ed9c8600996c6991
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-1QH83.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-1QH83.tmp
                                            • Size 47KB
                                            • SHA256 37affaba4ae54c09f140b38a8adf9d6d913bdd79893df60c33ce8218e0534805
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-4H9V4.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-4H9V4.tmp
                                            • Size 47KB
                                            • SHA256 c1b414f875099c0f5ac9c1fcd8352fa5c60ec960270bd5c579f35f3f965edbb1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-9S089.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-9S089.tmp
                                            • Size 47KB
                                            • SHA256 5c4df57dd48f13b0fde4890ec94618c9770be166c088b7e3f173bcaa43e8c86d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-FU9RL.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-FU9RL.tmp
                                            • Size 47KB
                                            • SHA256 0d870f0c78c7e2e1ebf1b386eae6f0b855c70d6dd4a80aa5263e32d779b56b41
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-H6UBP.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-H6UBP.tmp
                                            • Size 47KB
                                            • SHA256 a27e3057eb06bab7da1a5a9b63c6b52368509a65db9cc7baddc58a75ffb6b125
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-MPPL6.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-MPPL6.tmp
                                            • Size 47KB
                                            • SHA256 6bf8ae2be6a7448587e4ac1f5d52b3d25b7ea154184b082fa4dce64f192ae4da
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-UTA9C.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\ColorAnd3dLutPreset\CubeLUTFiles\is-UTA9C.tmp
                                            • Size 47KB
                                            • SHA256 68bb65c958a806d8378878f613f8c65897e74695bbf071ee6d3113b5133d4520
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-7ILQO.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-7ILQO.tmp
                                            • Size 549B
                                            • SHA256 dd7acc96fa45dc4493c324d845ca6cc6ca56e706e7e751d6f579d167930a205f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-901VC.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-901VC.tmp
                                            • Size 885B
                                            • SHA256 0552b6f130cd03811054694e7a1c44391b20dcaca9f4713307b79a7f14ea177d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-AJVB3.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-AJVB3.tmp
                                            • Size 758B
                                            • SHA256 b2823fe418b5c8e90760eebb6833b8e3da90358ce8c0610af39c8e1eaef65177
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-BGTGG.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-BGTGG.tmp
                                            • Size 103B
                                            • SHA256 aca37fa582238a172251099e62a499589cd28f24f87184693c984467ca065c02
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-BKHM4.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-BKHM4.tmp
                                            • Size 827B
                                            • SHA256 cd8942c9e4bf1b8a9c1353daddc6121839c27970cf4ade4e571f49ee2ef58510
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-J3G7C.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-J3G7C.tmp
                                            • Size 814B
                                            • SHA256 f061d3e7feedd1c0490bd3047c7d8069a3f140cdf9aeac835efbdab2fd066979
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-O9H4L.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-O9H4L.tmp
                                            • Size 900B
                                            • SHA256 2b3fccb31ebee6e8a6aa40e3bfd980f0ac2212d87110c19e7b5fcf64ca65a227
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-OPNFP.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-OPNFP.tmp
                                            • Size 1KB
                                            • SHA256 2ed74c9367c2ab9ded341ee48ae7e51f3e1eeda346282fc5a6254594cfa36847
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-SKPE4.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\MaskPreset\default\is-SKPE4.tmp
                                            • Size 733B
                                            • SHA256 ee9237be3e488f7efc370be769a4dff79ec177b80aba16a47864e6cecbd6489c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-9GQ8M.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Speed\is-9GQ8M.tmp
                                            • Size 684B
                                            • SHA256 343374c85dcd51d137515d2436b202bbdb063dee97abbc165bce302b56a18a41
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-A68A7.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Speed\is-A68A7.tmp
                                            • Size 466B
                                            • SHA256 928f32418a12e8bfa28e05ac174fd034c5a3189753ce72b3ba943fba4642f59d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-BTMTO.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Speed\is-BTMTO.tmp
                                            • Size 575B
                                            • SHA256 c74191c34146bc2e5a753222673dc9f3b74e077c892ac1bd7c058606bc9c2cf8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-L1KOC.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Speed\is-L1KOC.tmp
                                            • Size 684B
                                            • SHA256 bd75fa865dc339c0c45347cac9477097b1926d9d92e26d1e59fbf7a3d031055d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-NU86R.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Speed\is-NU86R.tmp
                                            • Size 466B
                                            • SHA256 60330f948dfa960c18d2eb7b908fce3c35d57d5e8b4b0d7ad6a9afee6f74bba1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-Q270R.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Speed\is-Q270R.tmp
                                            • Size 575B
                                            • SHA256 78f662578c89669fb14dc4f4d79da49f92fa04ac4a7b476e47cd0cf7be4e5f1c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-VTUD4.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Speed\is-VTUD4.tmp
                                            • Size 901B
                                            • SHA256 06331653dc2b666873c6bca2e9de9271ea57c0d0fc0f404e6e1b2a2ca3607fc8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-9O0RH.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\TextStyle\is-9O0RH.tmp
                                            • Size 40KB
                                            • SHA256 c41f789fe60b3f86b625bfdbfa3095cc86ed0c1276655ef2cccbec5ed59eee82
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-VNE5K.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\Transition\audio_fade\is-VNE5K.tmp
                                            • Size 167B
                                            • SHA256 40a1349c1911b4f4748cf3af95b66ed040cd656e125725b9ff7ed63558414bda
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-FMF3D.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\configs\is-FMF3D.tmp
                                            • Size 8KB
                                            • SHA256 cd0666a9324617ae54207402c7adca32df260b4c71a88387bad3e6bf29823de2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            MagicXE.log
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\log\MagicXE.log
                                            • Size 8KB
                                            • SHA256 57eae368ed78374382752942a3eef15570acd68e2868f28a1fafb8d1f0a9351d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            wsUpgrade.log
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\log\wsUpgrade.log
                                            • Size 355B
                                            • SHA256 49925137937817ff8b9cd91e4f5adb626afba524b92aa0528404489357f77964
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            wsUpgrade.log
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\log\wsUpgrade.log
                                            • Size 602B
                                            • SHA256 96688a05057a661c136c6ccc9bbbe2f3dba0be769428ba96d8ae01e5fde92a95
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-65BV6.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\desc_service\transform_immediately\is-65BV6.tmp
                                            • Size 1KB
                                            • SHA256 db45b6c730d8ce75b963f3e5dbb85d9ca3f8647ce481f142b932783b21bc4414
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-1DMD7.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CameraSettingFiles\is-1DMD7.tmp
                                            • Size 867B
                                            • SHA256 865d30e815575576171bb7c0dd53b394a8394f4009427a111243b3bc55750073
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-357A8.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CameraSettingFiles\is-357A8.tmp
                                            • Size 871B
                                            • SHA256 3a72f3862d63813574dcb59c286bc446f6a54ecf1725a283331559653a5e4eca
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-7FQN7.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CameraSettingFiles\is-7FQN7.tmp
                                            • Size 873B
                                            • SHA256 9c53df36dee1f082e9161df4b3d9deb7560705c95b08874517808368a39ebc5c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-8DTGE.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CameraSettingFiles\is-8DTGE.tmp
                                            • Size 871B
                                            • SHA256 079848a22a4716db82eb8028123a9fb1e7217d77ed5b25bdcb27766f30705d29
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-F551C.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CameraSettingFiles\is-F551C.tmp
                                            • Size 873B
                                            • SHA256 91b216b42bc6dd4f83071e8f367ccf2610310a2edf9a17a41b30051d08b45dda
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-G55GD.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CameraSettingFiles\is-G55GD.tmp
                                            • Size 872B
                                            • SHA256 bd56aac5738227390697cd419f555389fc4f6ebfde4f2ee2c852182886bd3ac3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-RJ880.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CameraSettingFiles\is-RJ880.tmp
                                            • Size 872B
                                            • SHA256 c2c1fdca17ee57a58280f53617637e0296c4954823f423db2005c39cd938bea1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-TM6LV.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CameraSettingFiles\is-TM6LV.tmp
                                            • Size 872B
                                            • SHA256 b3652e72cdfc36bd64d18c0e443fd1ea6b7c7c9b0f41a2a049339f47bf0521d5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-9CA68.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CubeLUTFiles\is-9CA68.tmp
                                            • Size 896KB
                                            • SHA256 d0038fa1cce4122ad373cb621126a1c752734d4ee1bdbad67d74f4af557a94c9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-LLK9E.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CubeLUTFiles\is-LLK9E.tmp
                                            • Size 896KB
                                            • SHA256 a434f4028d113176cc96bfe2a35c6abd4fd099ec62da7cd9a3887ad8dfefb97e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-OLOL2.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CubeLUTFiles\is-OLOL2.tmp
                                            • Size 896KB
                                            • SHA256 4efcf045f97bfc3452dbc90a1c12076c49851e4f8e65418ea1f80fa8f54d248b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-P9TPA.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CubeLUTFiles\is-P9TPA.tmp
                                            • Size 896KB
                                            • SHA256 57a86dc3f7af3d6c125de2787f2f277c58433b1ac1800ced18213f5f15de6413
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-USMAU.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CubeLUTFiles\is-USMAU.tmp
                                            • Size 896KB
                                            • SHA256 fa6c9586d9a301a12240da7af73598906768f1a585175c8fcea99c5de2732a90
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-V2PE6.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\material\CubeLUTFiles\is-V2PE6.tmp
                                            • Size 896KB
                                            • SHA256 da87241148b9244c0e45a875ffa365994cd5003034bf497d3e0f8450175528c9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-Q2909.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Audio Visual Halo Spectrum\Data\is-Q2909.tmp
                                            • Size 861B
                                            • SHA256 89a99019a1a72dcb930fa8f323229a37fb5bd0fb6e044ab1cbb2d0bb2e552220
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-GDQNO.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Audio Visualization 02\Data\is-GDQNO.tmp
                                            • Size 952B
                                            • SHA256 ccc788ebcf4373915c4672f408d36ecd99bde4dda896af8f19158ca486a395fb
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-IEPR7.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Audio Visualization 02\Data\is-IEPR7.tmp
                                            • Size 35KB
                                            • SHA256 b643160a556d3eb9ba3fa601d05e123530906843403cb298a0283b5b8ce57633
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-7461H.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Audio Visualization 04\Data\is-7461H.tmp
                                            • Size 948B
                                            • SHA256 b0f82436ee9a9fbaf2f939bebf0010fa5f5c0ecd7ad1c1e6a9794a81e4817125
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-JAK44.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Audio Visualization 10\Data\is-JAK44.tmp
                                            • Size 17KB
                                            • SHA256 70c72bab5d572eebd96922fb87ba8ac6292acb2e423e90333774d9df3e185c07
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-BOURM.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Audio Visualization 12\Data\is-BOURM.tmp
                                            • Size 20KB
                                            • SHA256 aeaca57b80ee51e4ac70ce1f2c7d1fe8f55c3134fd240bfe4452813de99163e8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-TG97F.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Audio Visualization 28\Data\is-TG97F.tmp
                                            • Size 2KB
                                            • SHA256 74b4855363febd65e77483c3310b064b951a3e0e307efa145b9e52943aaf1368
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-PDTRR.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Audio Visualization Human Segment Halo 3d\Data\is-PDTRR.tmp
                                            • Size 938B
                                            • SHA256 d90443f82a2586b0bc8ab2afd9118837516eadb9042e0705c8bffde926f0e6a2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-4P69N.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\BaseFilter\ARFaceDeformation\Data\is-4P69N.tmp
                                            • Size 156B
                                            • SHA256 247a3416831a73acdfd8e3a7b65f87765450813d549b8fb249eb9d3ba4abb3e0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-Q46KI.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\BaseFilter\Beam 3D Logo\Data\is-Q46KI.tmp
                                            • Size 861B
                                            • SHA256 802f17a3a2fe6f19397c9c484e319a5b8449e511291e0baba17566661638267f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-HM6V7.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\BaseFilter\Beam Edge Flow1\Data\is-HM6V7.tmp
                                            • Size 831B
                                            • SHA256 2c05e89d8ff8d3e20339555f7adcc810cd1ceca9fccf970771fbe748e7a0f184
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-LLV4C.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\BaseFilter\Beam Text Saber Line Fire\Data\is-LLV4C.tmp
                                            • Size 66KB
                                            • SHA256 e66f8b2c452544a66ce5808a16ef7a5754848f3d50d657eb676ebe9a951382e9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-076D6.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\BaseFilter\Beam\Data\is-076D6.tmp
                                            • Size 757B
                                            • SHA256 f0c916ef05f95faec2fd7686ef2029d492c779396be57f2658fe0d476d7c6984
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-ADT8V.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\BaseFilter\VectorText3DWhiteMode\Data\is-ADT8V.tmp
                                            • Size 157B
                                            • SHA256 11fdc43f6316601b8bbabf8c4706dc04972920bb293c0d706d1f9981dd6107f3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-1O11R.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Black & White 2\Data\is-1O11R.tmp
                                            • Size 1KB
                                            • SHA256 b38d1042edeee784fcc0339f7ad477b490758848f7f8a32834024dea17260182
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-5VSU3.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Black & White 3\Data\is-5VSU3.tmp
                                            • Size 2KB
                                            • SHA256 51ee3a0dca70c7534eb36415eb1b8e8189f02b12763858d70be80536179cd459
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-DJ442.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Classic\Data\is-DJ442.tmp
                                            • Size 406KB
                                            • SHA256 07d7a66090ccfceaa73ee3eee3d45235ed0610d503f85333d1a88ca8e38ffdf1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-K7H6I.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Screen\Data\is-K7H6I.tmp
                                            • Size 105KB
                                            • SHA256 5ec8d82f58d9fdfc340480bd6745bb11a2518bca3aed63a999a5c209fdec38b2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-NG1M5.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\September\Data\is-NG1M5.tmp
                                            • Size 43KB
                                            • SHA256 3508a6cf9776181cdf1c10d3cb60fb0726e8695d2d6f2f8718b1a0da7c223faf
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-39B5D.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Sierra\Data\is-39B5D.tmp
                                            • Size 21KB
                                            • SHA256 8d5c500600b2935929a9f23ac5cfba7348c492cb4beb59aafc408ad3321b7447
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-0LMQP.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\nle_default\Sutro\Data\is-0LMQP.tmp
                                            • Size 10KB
                                            • SHA256 d1292db4f1fc29589c951c5755e9076c730a3f360d19893b5fdece7f37b36dc9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-P5NJ1.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\plugin\AiEffect\HumanSegmentationBackChange\Data\is-P5NJ1.tmp
                                            • Size 890B
                                            • SHA256 6a9f09db3178ce9b155146f3b5ed8c6726cf13788865ebd7e6578a1aa486ccff
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-LFV0U.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\resources\wfx_effect\plugin\AiEffect\WhiteWiperSegmentaion\Data\is-LFV0U.tmp
                                            • Size 984B
                                            • SHA256 eaad98816ba844f0b055a284f7121a51322c3b582542dc44cab04cb6ed915973
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-J51PK.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\ClickSound\is-J51PK.tmp
                                            • Size 560B
                                            • SHA256 2d13ffa945549236a02494a9f6ee86ef61499c9c485d217bc0122857ebfab867
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-D71GS.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\default_effect\advanced\HumanSegmentationBackChange\is-D71GS.tmp
                                            • Size 551B
                                            • SHA256 4e30202d068ab5b33e23325882d370ae44c17cb684d4fcec00a8e126db9272a8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-L4BBG.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\default_effect\advanced\HumanSegmentationCaptureBlur\is-L4BBG.tmp
                                            • Size 618B
                                            • SHA256 490fcc1f0e1d93f047c79ddbfe8208f5ae321ae26989f69e686a79eefbcb1603
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-4EJKG.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\default_effect\advanced\HumanSegmentationHairEffect\Data\is-4EJKG.tmp
                                            • Size 266B
                                            • SHA256 ac8a9c8d2adf640fa57e51b308b5c48ebd0258e3b6c0cb7521e9ddb5919e2d11
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-840TU.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\default_effect\advanced\Mosaic\is-840TU.tmp
                                            • Size 1KB
                                            • SHA256 f988b4750a27effff1a6f08714af6113926f8a539a472bdf1685afc8d27d5fdc
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-FC7BU.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\default_effect\advanced\Mosaic\is-FC7BU.tmp
                                            • Size 14KB
                                            • SHA256 eb8dafc89e8958115e9099cf9dac440ded711dba0f1028e46e7137fa111cad50
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-93713.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\default_effect\normal\audio_ducking\is-93713.tmp
                                            • Size 518B
                                            • SHA256 00ed568ebdffc2614a6898994289e806c1efe0af2e746313b61729765917d0be
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-GT07T.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\default_effect\normal\dehum\is-GT07T.tmp
                                            • Size 335B
                                            • SHA256 0b46bb78082b2c866886a7a5755a1f9759ec97025e169ae3e8de13cb7adf52af
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-E46S9.tmp
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\14.2.9.11061\sysconfigs\default_effect\normal\dewind\is-E46S9.tmp
                                            • Size 148B
                                            • SHA256 5647168e4251418318ed8e1b2d3f35a6cd7f3b92e36d3ac1d9862a99867bcfa8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Wondershare Filmora Launcher.exe
                                            • Path C:\Users\Admin\AppData\Local\Wondershare\Wondershare Filmora\Wondershare Filmora Launcher.exe
                                            • Size 1.9MB
                                            • SHA256 b5f6547b52cde152c967f5b8cd3846e6d0add01ddb4d7c213369fd992d4cfd71
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Manos Mars - The Tunning.mp3
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\audio\6_Manos_Mars_-_The_Tunning\Data\Manos Mars - The Tunning.mp3
                                            • Size 5.1MB
                                            • SHA256 69b9e0e222a073c72a84b139a21ee039af5deb9870175421dd56c4430af0c4a7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            resinfo.json
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\audio\6_Manos_Mars_-_The_Tunning\resinfo.json
                                            • Size 4KB
                                            • SHA256 09181e16fcd92f8859aef5acba9cf4fc27eab8938df4f84f1ed00d8fd5ec879c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\audio\6_Manos_Mars_-_The_Tunning\thumbnail.png
                                            • Size 43KB
                                            • SHA256 5c36703eeb195224fd1185b5cc1b1bec94694624c3793bfc8624a6a6a89f9f13
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Blur.conf
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Blur\Data\Blur.conf
                                            • Size 580B
                                            • SHA256 54f56b411a846c05988fb205893dd2b9a7c9611ef4996f5d0a85c3acc3b97b41
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            data.xml
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Blur\Data\data.xml
                                            • Size 890B
                                            • SHA256 fe4d6be90fcfc68d9938a8600eead89cc9d4718959804cdf31cc9ad3e6e66352
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            resinfo.json
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Blur\resinfo.json
                                            • Size 806B
                                            • SHA256 fbfdf49a2c3d23d6a607b4fc067c6a655e97a2ab77ec4140352e1d459749a44b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Blur\thumbnail.png
                                            • Size 13KB
                                            • SHA256 38eb2e95a3647178e69a2f3fd0d267fadee1048902a6896db66128476e6b9cb9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-A09U8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Chromatic_Aberration\Data\is-A09U8.tmp
                                            • Size 881B
                                            • SHA256 89e1f9f1760f65a3ced17a88d54f7193de94272d503c1964687ad27c0f0a3fcb
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-LD57J.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Cool_Film\Data\is-LD57J.tmp
                                            • Size 896KB
                                            • SHA256 da828049365592b2c45b048094e989f9b9b14990633259e7ab6aa648dc12131e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            roiBlur.conf
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Mosaic_f3\Data\roiBlur.conf
                                            • Size 1KB
                                            • SHA256 803c747fb709c1aeafd0d170073edf950a927d47489e9cc2543eaf04e1e74a8a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            roiBlur.frag
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_Mosaic_f3\Data\roiBlur.frag
                                            • Size 12KB
                                            • SHA256 42feb431d45a53b98e7300f25cd083d3c903a9b7219852f0f9586d3f9795f0e8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            filter10.cl
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\filter\3_TVwall\Data\filter10.cl
                                            • Size 2KB
                                            • SHA256 8e2a8b8871e1f34a12c8e40bc43f890dd7500cdb95544827796f0790f64b0cac
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            RGB_Stroke.conf
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\overlay\4_4_RGB_Stroke\Data\RGB_Stroke.conf
                                            • Size 822B
                                            • SHA256 3a71097be4bbb7f4ae453738d8f43a44d80d9191d258a74df75d3476bfbae423
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            filter.xml
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\overlay\4_4_RGB_Stroke\Data\filter.xml
                                            • Size 304B
                                            • SHA256 70feaa5d61c5555e6e4ce754c8e993b1ec9a5bbe5b6d54d3c2abdf802e5517f1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            is-L7Q65.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\title\1_Basic_1\Data\is-L7Q65.tmp
                                            • Size 14KB
                                            • SHA256 810f268a6b3a0f98e8e5fc8603cc6cc90d4d28760fc7ee3c75e39bb4c01db58e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            is-PVK0F.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\title\1_Subtitle_3\is-PVK0F.tmp
                                            • Size 10KB
                                            • SHA256 d44fb5b7791936fd36db0f84577926aea506c4b5ef8a1bcb40ee02577d2b8a38
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Filmora\title\1_Subtitle_3\thumbnail.png
                                            • Size 2KB
                                            • SHA256 2c1a1ca73711f7d17c88bf865df164d501134fd334f749182aa3b33abaf64ba7
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            filter.xml
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Blur\a5c07d1370f2586ffba80c84832bdf62\Data\filter.xml
                                            • Size 247B
                                            • SHA256 2a8f8c8f2ef31c33bb27b709ad8e7d27eb5d197bb291b99ea43852399d2c93e3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            da7c232d4b37f1eba7629daafcc8e430_0.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Blur\da7c232d4b37f1eba7629daafcc8e430_0.png
                                            • Size 2.7MB
                                            • SHA256 c17b68e2d55cae2ffc345a85b56aaac76044dcd0e70b75a1ac4c1a08cd8d3b91
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            previewVideo.mp4
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Blur\previewVideo.mp4
                                            • Size 271KB
                                            • SHA256 71eb6cf2374b4e1b3f9337768fab515d7d85c6a7ceb9e17c870253ed5fad5ca5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Blur\thumbnail.png
                                            • Size 27KB
                                            • SHA256 b7b5d6986327d0ecdbc74ba8e2738969a02466d71fdcd3ca41320ec25ee3b23a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            8c2832ac233c04ba2769a934f86a60a5_0.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Mosaic_f3\8c2832ac233c04ba2769a934f86a60a5_0.png
                                            • Size 2.2MB
                                            • SHA256 5fc12b2697c4a876edf9a0759f4ca412d3c82c21fdd0b5612867754713613e64
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            data.xml
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Mosaic_f3\b119b84897ef0687ca6cdb7c6bf2e46c\Data\data.xml
                                            • Size 1KB
                                            • SHA256 141c7bdaa59d9e44591cb43041ff35db973dca777a6c02f38e846e6859b69f4f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            previewVideo.mp4
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Mosaic_f3\previewVideo.mp4
                                            • Size 316KB
                                            • SHA256 4aeff523befdb5b71cdfe9f5d5dff430abb51c1c2838dbbf372275910854cc60
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_Mosaic_f3\thumbnail.png
                                            • Size 33KB
                                            • SHA256 d3b4de3dc9f99521dfb1da9e8aff8399d161a8ff2d48d8f6fe32183d411df985
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            96fd19522fd019bf73a283c987c2dd2a_0.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_TVwall\96fd19522fd019bf73a283c987c2dd2a_0.png
                                            • Size 3.7MB
                                            • SHA256 90b28a8470da750af65511da768c77e4cbabc29b1af0c078413fcb2aa4d037e5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            filter.xml
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_TVwall\fb145fe44d1be500d80b7ec90d5e8dcc\Data\filter.xml
                                            • Size 296B
                                            • SHA256 dd58c2cccddadeb8dc1865d459de17c8c83ca54e4d8883a74be634531ce1538a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TVWall.jpg
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_TVwall\fb145fe44d1be500d80b7ec90d5e8dcc\TVWall.jpg
                                            • Size 18KB
                                            • SHA256 15b2569cc8c0873f5cee12e17c0d6c2eb0c98799333f38c506083c632e2abbff
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            TVWall.conf
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_TVwall\fb145fe44d1be500d80b7ec90d5e8dcc\TempData\TVWall.conf
                                            • Size 495B
                                            • SHA256 97f76db7175902ac3df52ff4544258f124c4348f046fe132ee460653d71a07cb
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            TVWall.frag
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_TVwall\fb145fe44d1be500d80b7ec90d5e8dcc\TempData\TVWall.frag
                                            • Size 1KB
                                            • SHA256 bfce7523e8b6e8dd3c320c08618d3f108c4a2cde517c955cd8b5fbf0cca88632
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            previewVideo.mp4
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_TVwall\previewVideo.mp4
                                            • Size 39KB
                                            • SHA256 44ca205f6d88e0667226c59b2c6a890c09f3a36c1f0adef39841170139a20be5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\filter\3_TVwall\thumbnail.png
                                            • Size 5KB
                                            • SHA256 c0bd3bcf55e33a32c07ac6451c293f9811213159ad25124ee749e07981e10075
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            RGB_Stroke.cl
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\2f82309b65415f16b8a0a9a22ead0694\TempData\RGB_Stroke.cl
                                            • Size 7KB
                                            • SHA256 1f4b25b4f4128a90f859168c9e7991df9699f388f7164d4a7cd37f235fa0227f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            RGB_Stroke.conf
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\2f82309b65415f16b8a0a9a22ead0694\TempData\RGB_Stroke.conf
                                            • Size 823B
                                            • SHA256 7d7de70f54fd8d0825acf9f59e484cfa0d8c93f0a5db974b0777148e6caeeeed
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            RGB_Stroke.frag
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\2f82309b65415f16b8a0a9a22ead0694\TempData\RGB_Stroke.frag
                                            • Size 4KB
                                            • SHA256 60f0786149012c66c405d626af754e1bc60ab4d849ba093de1bbbb91abee3e91
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            filter.xml
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\2f82309b65415f16b8a0a9a22ead0694\TempData\filter.xml
                                            • Size 294B
                                            • SHA256 83246467d890b4ffa283f924c2779ee926bd6009561fa2b9aee6b83a897aa39b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            version.md
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\2f82309b65415f16b8a0a9a22ead0694\version.md
                                            • Size 52B
                                            • SHA256 3ed69ec38548dbf172884026348e593caebcde2799dec418034b693205c6ce51
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            c39f85329af005e3ed9ed19e338dbf19_0.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\c39f85329af005e3ed9ed19e338dbf19_0.png
                                            • Size 2.9MB
                                            • SHA256 9f20b02335a32aa3a455de637343071100ce7df03301485ce4666dc82ed7c2e9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            preview.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\preview.png
                                            • Size 1.8MB
                                            • SHA256 f36afa6c6c4e01d0f92f89084e1c479116ea6d4a2ea0f1d73cfcd41fbbb76c5a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            previewVideo.mp4
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\previewVideo.mp4
                                            • Size 509KB
                                            • SHA256 1d55cfd606bd4b7b72f47b3cb4167cd53082e0f9bca627555b468e0a1d332488
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\overlay\4_4_RGB_Stroke\thumbnail.png
                                            • Size 78KB
                                            • SHA256 46a3bd948650640a6c65fa1af894eade87d43cf9a20f5ea02ee4ba8288551ff8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\resFont\35_Helvetica_World_Bd_Monotype\TempData\thumbnail.png
                                            • Size 2KB
                                            • SHA256 95e5daa428f852f916009eddde1ea54d17a2e9140665bf1624530377cf017f42
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            thumbnail.png
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\Download\Temp\title\1_Basic_1\thumbnail.png
                                            • Size 772B
                                            • SHA256 eb733c2f8a617513cf60292e7a7701f762797b3ba5e9f1388c371048fd9c317b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            FilmoraSettings.xml
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\FilmoraSettings.xml
                                            • Size 8KB
                                            • SHA256 9ad73644becb3726a3b69c0585096c085d2dd7aec615e1068c6fc164a4f792ef
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            ShortcutSetting.xml
                                            • Path C:\Users\Admin\AppData\Roaming\Wondershare\Wondershare Filmora\ShortcutSetting.xml
                                            • Size 38KB
                                            • SHA256 8ec5fda06d39ae1589585a19a0b7c42d45d3fdec0b6f44274894f75e3eb4fdcc
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            e5988be.msi
                                            • Path C:\Windows\Installer\e5988be.msi
                                            • Size 226KB
                                            • SHA256 dd6b7459aff8b29d19164e429b7e4d3b1f331e06191a86a4f12520b8bd6835b2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            FilmoraContextMenu.dll
                                            • Path C:\Windows\System32\FilmoraContextMenu.dll
                                            • Size 737KB
                                            • SHA256 5864eadf0167a3e77b49dd2b2a15c40babd63e89901bdbd3e742b8df90ff716b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            memory/460-7199-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/460-12140-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/460-12243-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/460-2335-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/1204-49-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/1204-14814-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/1204-1245-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/2312-9831-0x0000000003480000-0x0000000003495000-memory.dmp
                                            Download

                                            memory/2312-1243-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/2312-15054-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/2312-6036-0x0000000003480000-0x0000000003495000-memory.dmp
                                            Download

                                            memory/2312-15055-0x0000000003480000-0x0000000003495000-memory.dmp
                                            Download

                                            memory/2312-6028-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/2312-15210-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/2312-1244-0x0000000003480000-0x0000000003495000-memory.dmp
                                            Download

                                            memory/2312-42-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/2312-9830-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/2312-12598-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/2312-15209-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/2312-5-0x00000000022F0000-0x00000000022F1000-memory.dmp
                                            Download

                                            memory/2312-43-0x0000000003480000-0x0000000003495000-memory.dmp
                                            Download

                                            memory/2312-44-0x00000000022F0000-0x00000000022F1000-memory.dmp
                                            Download

                                            memory/2312-21-0x0000000003480000-0x0000000003495000-memory.dmp
                                            Download

                                            memory/2824-2334-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/2824-12248-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/2824-150-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/2996-15215-0x00007FF95A520000-0x00007FF95AA95000-memory.dmp
                                            Download

                                            memory/2996-15213-0x00007FF9591A0000-0x00007FF9596E1000-memory.dmp
                                            Download

                                            memory/3316-12039-0x0000000000400000-0x0000000000731000-memory.dmp
                                            Download

                                            memory/3380-4441-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/3380-7748-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/3848-15177-0x0000000000AE0000-0x0000000000B98000-memory.dmp
                                            Download

                                            memory/3848-13466-0x0000000000AE0000-0x0000000000B98000-memory.dmp
                                            Download

                                            memory/3848-15176-0x0000000000400000-0x0000000000612000-memory.dmp
                                            Download

                                            memory/4204-14813-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/4204-11454-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/4204-6937-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/4204-1246-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/4204-14743-0x0000000000400000-0x0000000000572000-memory.dmp
                                            Download

                                            memory/4812-8033-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/4812-764-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/4812-3266-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/4916-41-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/4916-15211-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/4916-0-0x0000000000400000-0x000000000046C000-memory.dmp
                                            Download

                                            memory/5652-15191-0x00007FF95ED90000-0x00007FF95F538000-memory.dmp
                                            Download

                                            memory/5652-15189-0x00007FF95FBA0000-0x00007FF960430000-memory.dmp
                                            Download

                                            memory/5652-15196-0x00007FF9591A0000-0x00007FF9596E1000-memory.dmp
                                            Download

                                            memory/5652-15188-0x00007FF961150000-0x00007FF961B4D000-memory.dmp
                                            Download

                                            memory/5652-15190-0x00007FF95F540000-0x00007FF95FB9C000-memory.dmp
                                            Download

                                            memory/5652-15194-0x00007FF964820000-0x00007FF964A9D000-memory.dmp
                                            Download

                                            memory/5652-15187-0x00007FF960AD0000-0x00007FF96114A000-memory.dmp
                                            Download

                                            memory/5652-15195-0x00007FF6A6030000-0x00007FF6A68CD000-memory.dmp
                                            Download

                                            memory/5652-15192-0x00007FF95E7E0000-0x00007FF95EA8E000-memory.dmp
                                            Download

                                            memory/5652-15193-0x00007FF95A520000-0x00007FF95AA95000-memory.dmp
                                            Download

                                            memory/5652-15186-0x00007FF962D40000-0x00007FF963095000-memory.dmp
                                            Download

                                            memory/5652-15197-0x00007FF9596F0000-0x00007FF95A520000-memory.dmp
                                            Download

                                            memory/5964-13429-0x0000000000400000-0x00000000004BE000-memory.dmp
                                            Download

                                            memory/5964-12137-0x0000000003A20000-0x0000000003A34000-memory.dmp
                                            Download

                                            memory/6140-13454-0x0000000000400000-0x0000000000414000-memory.dmp
                                            Download

                                            memory/6140-12108-0x0000000000400000-0x0000000000414000-memory.dmp
                                            Download

                                            memory/7336-13030-0x0000000000C20000-0x0000000000CD8000-memory.dmp
                                            Download

                                            memory/7336-13314-0x0000000000C20000-0x0000000000CD8000-memory.dmp
                                            Download

                                            memory/7336-13303-0x0000000000400000-0x0000000000612000-memory.dmp
                                            Download

                                            memory/7952-9879-0x0000000000400000-0x00000000004F2000-memory.dmp
                                            Download

                                            memory/7952-12057-0x0000000000400000-0x00000000004F2000-memory.dmp
                                            Download