Analysis

  • user interaction
    yes
  • max time kernel
    1200s
  • max time network
    1201s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/10/2026, 23:32

General

  • Target
    https://archive.org/details/capcut-1.5.0-windows
  • Sample261011-3jpqjsbc97

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file 3 IoCs
  • Drops file in Drivers directory 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 52 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 23 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Installs/modifies Browser Helper Object 2 TTPs 8 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

  • Discovers running processes 1 TTPs 1 IoCs

    Running process information can be used to identify security tools or plan follow-on actions.

  • Drops file in System32 directory 17 IoCs
  • Suspicious use of NtCreateThreadExHideFromDebugger 1 TTPs 4 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 7 IoCs
  • Queries system WMI classes for hardware identifiers 2 TTPs 3 IoCs

    Uses WMI to read hardware serial numbers or the system UUID, commonly used to fingerprint the victim machine.

  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Direct Volume Access: Opens a physical disk for reading 1 TTPs 1 IoCs

    Opens a raw handle to a physical disk, which bypasses file system access controls and is used for disk inspection, anti-VM checks and privilege checks.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 8 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 36 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 46 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies data under HKEY_USERS 41 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 3 IoCs
  • Runs net.exe
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: LoadsDriver 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 51 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://archive.org/details/capcut-1.5.0-windows"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5908
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://archive.org/details/capcut-1.5.0-windows
      2⤵
      • Downloads MZ/PE file
      • Subvert Trust Controls: Mark-of-the-Web Bypass
      • Checks processor information in registry
      • NTFS ADS
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5344
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1980 -prefsLen 27097 -prefMapHandle 1984 -prefMapSize 270279 -ipcHandle 2056 -initialChannelId {f538311c-69c6-4cc5-9c7d-dc946762741f} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:4164
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2448 -prefsLen 27133 -prefMapHandle 2452 -prefMapSize 270279 -ipcHandle 2460 -initialChannelId {f59d67c6-6556-4de5-a27c-5ced44e4f9c0} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:3544
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3856 -prefsLen 25164 -prefMapHandle 3860 -prefMapSize 270279 -jsInitHandle 3864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3872 -initialChannelId {b1ee78f7-3ccd-4d58-a5a8-71d9504390de} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:6072
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4020 -prefsLen 27274 -prefMapHandle 4024 -prefMapSize 270279 -ipcHandle 4092 -initialChannelId {c8aa1df7-1ef5-41aa-aad8-344c2906637f} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:4584
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2840 -prefsLen 34773 -prefMapHandle 2992 -prefMapSize 270279 -jsInitHandle 2996 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3156 -initialChannelId {7f5705d5-9e4e-4d68-a3f4-bca577d04c66} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:992
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5084 -prefsLen 34822 -prefMapHandle 5088 -prefMapSize 270279 -ipcHandle 5096 -initialChannelId {bb34ba92-c4cf-4859-8da0-b2751448ddb5} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:1824
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5348 -prefsLen 32900 -prefMapHandle 5528 -prefMapSize 270279 -jsInitHandle 1556 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2896 -initialChannelId {dff28c85-7a2d-4c50-bd9b-c6f9070677fc} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
              • Checks processor information in registry
              PID:4984
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5724 -prefsLen 32900 -prefMapHandle 5728 -prefMapSize 270279 -jsInitHandle 5732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5740 -initialChannelId {e6a7432a-34ed-4d7a-89b4-819c48326992} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
              3⤵
              • Checks processor information in registry
              PID:5084
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5936 -prefsLen 32900 -prefMapHandle 5940 -prefMapSize 270279 -jsInitHandle 5944 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5952 -initialChannelId {d77c9166-0a7b-4f97-b77e-c97efa636739} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
              3⤵
              • Checks processor information in registry
              PID:4636
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6472 -prefsLen 36981 -prefMapHandle 6480 -prefMapSize 270279 -jsInitHandle 6604 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7116 -initialChannelId {ca5f6108-2ff6-4680-b25f-42df0424f55c} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
              3⤵
              • Checks processor information in registry
              PID:572
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7276 -prefsLen 36981 -prefMapHandle 7292 -prefMapSize 270279 -jsInitHandle 7208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7268 -initialChannelId {f6e35008-6b4a-4889-95eb-a038d38a5dfe} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
              3⤵
              • Checks processor information in registry
              PID:5076
            • C:\Users\Admin\Downloads\Motrix-Setup-1.8.19.exe
              "C:\Users\Admin\Downloads\Motrix-Setup-1.8.19.exe"
              3⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              • NTFS ADS
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:3908
              • C:\Windows\SysWOW64\cmd.exe
                cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Motrix.exe" | %SYSTEMROOT%\System32\find.exe "Motrix.exe"
                4⤵
                • Executes a command shell one-liner
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:5932
                • C:\Windows\SysWOW64\tasklist.exe
                  tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Motrix.exe"
                  5⤵
                  • Discovers running processes
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of AdjustPrivilegeToken
                  PID:3080
                • C:\Windows\SysWOW64\find.exe
                  C:\Windows\System32\find.exe "Motrix.exe"
                  5⤵
                  • System Location Discovery: System Language Discovery
                  PID:2908
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4392 -prefsLen 36981 -prefMapHandle 5900 -prefMapSize 270279 -jsInitHandle 7344 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4032 -initialChannelId {69b097d8-7a27-473d-8653-ffcf491cdc48} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
              3⤵
              • Checks processor information in registry
              PID:6200
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4796 -prefsLen 36981 -prefMapHandle 6624 -prefMapSize 270279 -jsInitHandle 6716 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6536 -initialChannelId {9fb7e50d-618d-454c-9d89-75be039e279d} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
              3⤵
              • Checks processor information in registry
              PID:6664
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6020 -prefsLen 36981 -prefMapHandle 6036 -prefMapSize 270279 -jsInitHandle 5756 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5952 -initialChannelId {57c64582-a821-4e1a-8e45-b9abddebf008} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
              3⤵
              • Checks processor information in registry
              PID:7152
            • C:\Users\Admin\Downloads\idman643build15.exe
              "C:\Users\Admin\Downloads\idman643build15.exe"
              3⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:5824
              • C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp
                "C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp" -d "C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\"
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Installs/modifies Browser Helper Object
                • Drops file in Program Files directory
                • System Location Discovery: System Language Discovery
                • Modifies Internet Explorer settings
                • Modifies registry class
                PID:2996
                • C:\Windows\SysWOW64\regsvr32.exe
                  "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll"
                  5⤵
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:6312
                  • C:\Windows\system32\regsvr32.exe
                    /s "C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll"
                    6⤵
                    • Loads dropped DLL
                    • Modifies registry class
                    PID:6448
                • C:\Windows\SysWOW64\regsvr32.exe
                  "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll"
                  5⤵
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:6344
                  • C:\Windows\system32\regsvr32.exe
                    /s "C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll"
                    6⤵
                    • Loads dropped DLL
                    • Modifies registry class
                    PID:6492
                • C:\Windows\SysWOW64\regsvr32.exe
                  "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll"
                  5⤵
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:6356
                  • C:\Windows\system32\regsvr32.exe
                    /s "C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll"
                    6⤵
                    • Loads dropped DLL
                    • Modifies registry class
                    PID:6536
                • C:\Program Files (x86)\Internet Download Manager\idmBroker.exe
                  "C:\Program Files (x86)\Internet Download Manager\idmBroker.exe" -RegServer
                  5⤵
                  • Executes dropped EXE
                  • System Location Discovery: System Language Discovery
                  • Modifies Internet Explorer settings
                  • Modifies registry class
                  PID:6392
                • C:\Program Files (x86)\Internet Download Manager\IDMan.exe
                  "C:\Program Files (x86)\Internet Download Manager\IDMan.exe" /rtr
                  5⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Drops file in Program Files directory
                  • System Location Discovery: System Language Discovery
                  • Modifies Internet Explorer settings
                  • Modifies registry class
                  • Suspicious use of SetWindowsHookEx
                  PID:6488
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.internetdownloadmanager.com/support/installffextfrommozillasite.html
                    6⤵
                      PID:3728
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.internetdownloadmanager.com/support/installffextfrommozillasite.html
                        7⤵
                        • Checks processor information in registry
                        PID:6660
                    • C:\Program Files (x86)\Internet Download Manager\Uninstall.exe
                      "C:\Program Files (x86)\Internet Download Manager\Uninstall.exe" -instdriv
                      6⤵
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      PID:6760
                      • C:\Windows\system32\RUNDLL32.EXE
                        "C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Program Files (x86)\Internet Download Manager\idmwfp.inf
                        7⤵
                        • Adds Run key to start application
                        • Drops file in Windows directory
                        PID:6872
                        • C:\Windows\system32\runonce.exe
                          "C:\Windows\system32\runonce.exe" -r
                          8⤵
                          • Checks processor information in registry
                          PID:5976
                          • C:\Windows\System32\grpconv.exe
                            "C:\Windows\System32\grpconv.exe" -o
                            9⤵
                              PID:1248
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          7⤵
                          • System Location Discovery: System Language Discovery
                          PID:2060
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            8⤵
                            • System Location Discovery: System Language Discovery
                            PID:5208
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          7⤵
                          • System Location Discovery: System Language Discovery
                          PID:4500
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            8⤵
                            • System Location Discovery: System Language Discovery
                            PID:4556
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          7⤵
                          • System Location Discovery: System Language Discovery
                          PID:3448
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            8⤵
                            • System Location Discovery: System Language Discovery
                            PID:6452
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          7⤵
                          • System Location Discovery: System Language Discovery
                          PID:6208
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            8⤵
                            • System Location Discovery: System Language Discovery
                            PID:6420
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          7⤵
                          • System Location Discovery: System Language Discovery
                          PID:6496
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            8⤵
                            • System Location Discovery: System Language Discovery
                            PID:6620
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          7⤵
                          • System Location Discovery: System Language Discovery
                          PID:908
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            8⤵
                            • System Location Discovery: System Language Discovery
                            PID:6656
                        • C:\Windows\SysWOW64\regsvr32.exe
                          "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"
                          7⤵
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          PID:6768
                          • C:\Windows\system32\regsvr32.exe
                            /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"
                            8⤵
                            • Loads dropped DLL
                            PID:240
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7920 -prefsLen 36981 -prefMapHandle 7928 -prefMapSize 270279 -jsInitHandle 7936 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7836 -initialChannelId {1eab3e40-f359-4268-a095-2ef454f112d5} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                  3⤵
                  • Checks processor information in registry
                  PID:1968
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8172 -prefsLen 36981 -prefMapHandle 8168 -prefMapSize 270279 -jsInitHandle 7804 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8008 -initialChannelId {c84c5293-c365-4974-b552-e0349d92e439} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
                  3⤵
                  • Checks processor information in registry
                  PID:6108
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7672 -prefsLen 36981 -prefMapHandle 8280 -prefMapSize 270279 -jsInitHandle 7660 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4876 -initialChannelId {7c52bb13-85a1-4c13-b2bc-7fcbcd01564e} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
                  3⤵
                  • Checks processor information in registry
                  PID:7712
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 4 -prefsHandle 7028 -prefsLen 40118 -prefMapHandle 6856 -prefMapSize 270279 -ipcHandle 6544 -initialChannelId {94d08b41-e787-42a8-9432-e413c0e8d19a} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 utility
                  3⤵
                  • Checks processor information in registry
                  • Modifies registry class
                  • Suspicious use of SetWindowsHookEx
                  PID:8544
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7560 -prefsLen 37141 -prefMapHandle 7208 -prefMapSize 270279 -jsInitHandle 7916 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5268 -initialChannelId {c6e39ada-a922-4c3a-b0eb-ade52dbfda61} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
                  3⤵
                  • Checks processor information in registry
                  PID:5604
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7208 -prefsLen 37141 -prefMapHandle 7640 -prefMapSize 270279 -jsInitHandle 4400 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6228 -initialChannelId {983a8c69-5e3d-48de-a6e2-558f6c8a5449} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
                  3⤵
                  • Checks processor information in registry
                  PID:3596
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 8364 -prefsLen 40326 -prefMapHandle 8360 -prefMapSize 270279 -ipcHandle 8352 -initialChannelId {b2c28565-09b5-4230-b8e0-539cfb1ef5ef} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 utility
                  3⤵
                  • Checks processor information in registry
                  PID:9644
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 4 -prefsHandle 7136 -prefsLen 40326 -prefMapHandle 8484 -prefMapSize 270279 -ipcHandle 7984 -initialChannelId {7b742047-77ca-484f-be94-513546eeb26a} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 utility
                  3⤵
                  • Checks processor information in registry
                  • Suspicious use of SetWindowsHookEx
                  PID:6712
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9012 -prefsLen 40326 -prefMapHandle 9076 -prefMapSize 270279 -jsInitHandle 9080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3924 -initialChannelId {1ad3d985-a9d0-4abe-83d6-c0bfba041269} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
                  3⤵
                  • Checks processor information in registry
                  PID:7096
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9252 -prefsLen 37141 -prefMapHandle 9440 -prefMapSize 270279 -jsInitHandle 9424 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9408 -initialChannelId {2b9daad8-b8a5-4192-bc76-73edb7c49a6f} -parentPid 5344 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5344" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
                  3⤵
                  • Checks processor information in registry
                  PID:8296
            • C:\Windows\system32\taskmgr.exe
              "C:\Windows\system32\taskmgr.exe" /4
              1⤵
              • Checks SCSI registry key(s)
              • Checks processor information in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              PID:4292
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k GPSvcGroup
              1⤵
                PID:3560
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                1⤵
                  PID:3048
                • C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe
                  "C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe"
                  1⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • Suspicious use of WriteProcessMemory
                  PID:1928
                  • C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe
                    "C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Motrix" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1492 --field-trial-handle=1672,i,17993489936845120301,1451920205524736149,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                    2⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    PID:5240
                  • C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe
                    "C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Motrix" --mojo-platform-channel-handle=1936 --field-trial-handle=1672,i,17993489936845120301,1451920205524736149,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                    2⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Reads the TCP/IP host and domain name from the registry
                    PID:7000
                  • C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe
                    "C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\Motrix" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1580 --field-trial-handle=1672,i,17993489936845120301,1451920205524736149,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                    2⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    PID:240
                • C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe
                  "C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe"
                  1⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • Suspicious use of WriteProcessMemory
                  PID:7092
                  • C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe
                    "C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Motrix" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1548 --field-trial-handle=1636,i,209362665863593005,11045769851807729063,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                    2⤵
                    • Executes dropped EXE
                    PID:3164
                • C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe
                  "C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe"
                  1⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • Suspicious use of WriteProcessMemory
                  PID:4264
                  • C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe
                    "C:\Users\Admin\AppData\Local\Programs\Motrix\Motrix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Motrix" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1500 --field-trial-handle=1632,i,12910044717452649268,365957460414180460,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                    2⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    PID:2996
                • C:\Windows\system32\DrvInst.exe
                  DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{76d28bf4-cbe2-764c-8a0d-8651c71589a5}\idmwfp.inf" "9" "4fc2928b3" "00000000000000E0" "WinSta0\Default" "000000000000018C" "208" "C:\Program Files (x86)\Internet Download Manager"
                  1⤵
                  • Drops file in System32 directory
                  • Drops file in Windows directory
                  • Checks SCSI registry key(s)
                  • Modifies data under HKEY_USERS
                  PID:6884
                • C:\Windows\system32\DrvInst.exe
                  DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_be5722ccff6c2371\idmwfp.inf" "0" "4fc2928b3" "0000000000000184" "WinSta0\Default"
                  1⤵
                  • Drops file in Drivers directory
                  • Drops file in System32 directory
                  • Drops file in Windows directory
                  PID:4672
                • C:\Windows\system32\grpconv.exe
                  grpconv -o
                  1⤵
                    PID:3796
                  • C:\Program Files (x86)\Internet Download Manager\IDMan.exe
                    "C:\Program Files (x86)\Internet Download Manager\IDMan.exe"
                    1⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Adds Run key to start application
                    • Checks whether UAC is enabled
                    • Reads the TCP/IP host and domain name from the registry
                    • System Location Discovery: System Language Discovery
                    • Modifies Internet Explorer settings
                    • Modifies registry class
                    • Suspicious behavior: GetForegroundWindowSpam
                    • Suspicious use of SetWindowsHookEx
                    PID:5584
                    • C:\Windows\system32\regsvr32.exe
                      C:\Windows\Sysnative\regsvr32.exe /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"
                      2⤵
                      • Loads dropped DLL
                      PID:5992
                    • C:\Program Files (x86)\Internet Download Manager\IDMIntegrator64.exe
                      "C:\Program Files (x86)\Internet Download Manager\IDMIntegrator64.exe" -runcm
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Modifies registry class
                      • Suspicious use of SetWindowsHookEx
                      PID:6940
                    • C:\Program Files (x86)\Internet Download Manager\Uninstall.exe
                      "C:\Program Files (x86)\Internet Download Manager\Uninstall.exe" -instdriv
                      2⤵
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      PID:2468
                      • C:\Windows\system32\RUNDLL32.EXE
                        "C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Program Files (x86)\Internet Download Manager\idmwfp.inf
                        3⤵
                        • Adds Run key to start application
                        • Drops file in Windows directory
                        PID:6924
                        • C:\Windows\system32\runonce.exe
                          "C:\Windows\system32\runonce.exe" -r
                          4⤵
                          • Checks processor information in registry
                          PID:3528
                          • C:\Windows\System32\grpconv.exe
                            "C:\Windows\System32\grpconv.exe" -o
                            5⤵
                              PID:5576
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          3⤵
                          • System Location Discovery: System Language Discovery
                          PID:5892
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            4⤵
                            • System Location Discovery: System Language Discovery
                            PID:5896
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          3⤵
                          • System Location Discovery: System Language Discovery
                          PID:4068
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            4⤵
                            • System Location Discovery: System Language Discovery
                            PID:3480
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          3⤵
                          • System Location Discovery: System Language Discovery
                          PID:3112
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            4⤵
                            • System Location Discovery: System Language Discovery
                            PID:6268
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          3⤵
                          • System Location Discovery: System Language Discovery
                          PID:6248
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            4⤵
                            • System Location Discovery: System Language Discovery
                            PID:6200
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          3⤵
                          • System Location Discovery: System Language Discovery
                          PID:1544
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            4⤵
                            • System Location Discovery: System Language Discovery
                            PID:2376
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          3⤵
                          • System Location Discovery: System Language Discovery
                          PID:4516
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            4⤵
                            • System Location Discovery: System Language Discovery
                            PID:6188
                        • C:\Windows\SysWOW64\regsvr32.exe
                          "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"
                          3⤵
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          PID:6276
                          • C:\Windows\system32\regsvr32.exe
                            /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"
                            4⤵
                            • Loads dropped DLL
                            • Modifies registry class
                            PID:6384
                      • C:\Windows\SysWOW64\regsvr32.exe
                        "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"
                        2⤵
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:4360
                        • C:\Windows\system32\regsvr32.exe
                          /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"
                          3⤵
                          • Loads dropped DLL
                          • Modifies registry class
                          PID:6756
                      • C:\Windows\SysWOW64\regsvr32.exe
                        "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll"
                        2⤵
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:2700
                        • C:\Windows\system32\regsvr32.exe
                          /s "C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll"
                          3⤵
                          • Loads dropped DLL
                          PID:3416
                      • C:\Windows\SysWOW64\regsvr32.exe
                        "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll"
                        2⤵
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:6632
                        • C:\Windows\system32\regsvr32.exe
                          /s "C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll"
                          3⤵
                          • Loads dropped DLL
                          PID:6500
                      • C:\Windows\SysWOW64\regsvr32.exe
                        "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll"
                        2⤵
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:572
                        • C:\Windows\system32\regsvr32.exe
                          /s "C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll"
                          3⤵
                          • Loads dropped DLL
                          • Modifies registry class
                          PID:6684
                      • C:\Users\Admin\Downloads\Programs\capcut-1-5-0.exe
                        "C:\Users\Admin\Downloads\Programs\capcut-1-5-0.exe"
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:6456
                    • C:\Windows\system32\DrvInst.exe
                      DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_be5722ccff6c2371\idmwfp.inf" "0" "4fc2928b3" "0000000000000184" "WinSta0\Default"
                      1⤵
                      • Drops file in Drivers directory
                      • Drops file in Windows directory
                      PID:4256
                    • C:\Users\Admin\AppData\Local\CapCut\Apps\CapCut.exe
                      "C:\Users\Admin\AppData\Local\CapCut\Apps\CapCut.exe"
                      1⤵
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      PID:10104
                      • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\CapCut.exe
                        "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\CapCut.exe"
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Suspicious use of NtCreateThreadExHideFromDebugger
                        • Reads the TCP/IP host and domain name from the registry
                        PID:2012
                        • C:\Windows\System32\cmd.exe
                          C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                          3⤵
                          • Executes a command shell one-liner
                          PID:5980
                          • C:\Windows\System32\Wbem\WMIC.exe
                            wmic csproduct get Name,UUID /value
                            4⤵
                            • Queries system WMI classes for hardware identifiers
                            • Reads the TCP/IP host and domain name from the registry
                            PID:4872
                        • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\VEDetector.exe
                          C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\VEDetector.exe
                          3⤵
                          • Executes dropped EXE
                          • Direct Volume Access: Opens a physical disk for reading
                          • Reads the TCP/IP host and domain name from the registry
                          • Checks processor information in registry
                          • Suspicious behavior: AddClipboardFormatListener
                          • Suspicious behavior: GetForegroundWindowSpam
                          PID:6840
                          • C:\Windows\System32\cmd.exe
                            C:\Windows\System32\cmd.exe /c wmic csproduct get Name,UUID /value
                            4⤵
                            • Executes a command shell one-liner
                            PID:4732
                            • C:\Windows\System32\Wbem\WMIC.exe
                              wmic csproduct get Name,UUID /value
                              5⤵
                              • Queries system WMI classes for hardware identifiers
                              • Reads the TCP/IP host and domain name from the registry
                              PID:2600
                          • C:\Windows\System32\cmd.exe
                            C:\Windows\System32\cmd.exe /c wmic os get SerialNumber,Caption,BuildNumber,Version /value
                            4⤵
                            • Executes a command shell one-liner
                            PID:1740
                            • C:\Windows\System32\Wbem\WMIC.exe
                              wmic os get SerialNumber,Caption,BuildNumber,Version /value
                              5⤵
                              • Reads the TCP/IP host and domain name from the registry
                              PID:3508
                          • C:\Windows\System32\cmd.exe
                            C:\Windows\System32\cmd.exe /c wmic path Win32_VideoController get CurrentVerticalResolution,CurrentHorizontalResolution /value
                            4⤵
                            • Executes a command shell one-liner
                            PID:8248
                            • C:\Windows\System32\Wbem\WMIC.exe
                              wmic path Win32_VideoController get CurrentVerticalResolution,CurrentHorizontalResolution /value
                              5⤵
                              • Reads the TCP/IP host and domain name from the registry
                              PID:8308
                          • C:\Windows\System32\cmd.exe
                            C:\Windows\System32\cmd.exe /c wmic nicconfig get DefaultIPGateway,macaddress
                            4⤵
                            • Executes a command shell one-liner
                            PID:8464
                            • C:\Windows\System32\Wbem\WMIC.exe
                              wmic nicconfig get DefaultIPGateway,macaddress
                              5⤵
                              • Reads the TCP/IP host and domain name from the registry
                              PID:8508
                          • C:\Windows\System32\cmd.exe
                            C:\Windows\System32\cmd.exe /c wmic diskdrive get SerialNumber /value
                            4⤵
                            • Executes a command shell one-liner
                            PID:8568
                            • C:\Windows\System32\Wbem\WMIC.exe
                              wmic diskdrive get SerialNumber /value
                              5⤵
                              • Queries system WMI classes for hardware identifiers
                              • Reads the TCP/IP host and domain name from the registry
                              PID:8596
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" cuda
                            4⤵
                            • Executes dropped EXE
                            PID:9712
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" driverinfo
                            4⤵
                            • Executes dropped EXE
                            • Reads the TCP/IP host and domain name from the registry
                            PID:9720
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" cuvid
                            4⤵
                            • Executes dropped EXE
                            PID:9736
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" nv_enc
                            4⤵
                            • Executes dropped EXE
                            PID:9752
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" qsv
                            4⤵
                            • Executes dropped EXE
                            PID:9764
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" qsv_enc
                            4⤵
                            • Executes dropped EXE
                            PID:9776
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" qsv_enc_hw
                            4⤵
                            • Executes dropped EXE
                            PID:9800
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" amf_enc
                            4⤵
                            • Executes dropped EXE
                            PID:9808
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" new_nvenc
                            4⤵
                            • Executes dropped EXE
                            PID:9840
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" new_nvenc_av1
                            4⤵
                            • Executes dropped EXE
                            PID:9864
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" new_qsvenc
                            4⤵
                            • Executes dropped EXE
                            PID:9888
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" new_qsvenc_av1
                            4⤵
                            • Executes dropped EXE
                            PID:9904
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" oneVPL
                            4⤵
                            • Executes dropped EXE
                            PID:9912
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\VEDetector.exe
                            "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\VEDetector.exe" -check_intel_discrete_card 1111
                            4⤵
                            • Executes dropped EXE
                            PID:10768
                          • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\CapCut.exe
                            C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\CapCut.exe /launch=detector
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of NtCreateThreadExHideFromDebugger
                            • Reads the TCP/IP host and domain name from the registry
                            • Checks processor information in registry
                            • Suspicious behavior: AddClipboardFormatListener
                            • Suspicious use of SetWindowsHookEx
                            PID:10832
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\CapCut.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\CapCut.exe" --type=gpu-process --field-trial-handle=2812,10196096281427372764,207359762808836370,131072 --enable-features=CastMediaRouteProvider --disable-features=OutOfBlinkCors --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --log-severity=error --lang=zh-cn --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=2860 /prefetch:2
                              5⤵
                              • Executes dropped EXE
                              • Suspicious use of NtCreateThreadExHideFromDebugger
                              PID:8336
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\parfait_crash_handler.exe
                              C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\parfait_crash_handler.exe "--database=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" "--metrics-dir=C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\\" --annotation=is_debug=false "--annotation=os_version=Windows NT 10.0.26100" --annotation=parfait_version=1.3.2.3 --initial-client-data=0xeac,0xeb0,0xeb4,0xea8,0xe74,0x7ffb3110ea70,0x7ffb3110ea88,0x7ffb3110eaa0
                              5⤵
                              • Executes dropped EXE
                              PID:3884
                            • C:\Windows\SYSTEM32\cmd.exe
                              cmd /c "wmic diskdrive where index=0 get serialnumber"
                              5⤵
                              • Executes a command shell one-liner
                              PID:7112
                              • C:\Windows\System32\Wbem\WMIC.exe
                                wmic diskdrive where index=0 get serialnumber
                                6⤵
                                • Reads the TCP/IP host and domain name from the registry
                                PID:8340
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\CapCut.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\CapCut.exe" --type=utility --field-trial-handle=2812,10196096281427372764,207359762808836370,131072 --enable-features=CastMediaRouteProvider --disable-features=OutOfBlinkCors --lang=zh-CN --service-sandbox-type=network --no-sandbox --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --log-severity=error --lang=zh-cn --log-file="C:/Users/Admin/AppData/Local/CapCut/User Data/CEF\cef_log.log" --mojo-platform-channel-handle=4512 /prefetch:8
                              5⤵
                              • Executes dropped EXE
                              • Suspicious use of NtCreateThreadExHideFromDebugger
                              • Reads the TCP/IP host and domain name from the registry
                              PID:11760
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" cuda
                              5⤵
                              • Executes dropped EXE
                              PID:11956
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" cuvid
                              5⤵
                              • Executes dropped EXE
                              PID:11968
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" nv_enc
                              5⤵
                              • Executes dropped EXE
                              PID:11976
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" qsv
                              5⤵
                              • Executes dropped EXE
                              PID:11984
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" qsv_enc
                              5⤵
                              • Executes dropped EXE
                              PID:11992
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" qsv_enc_hw
                              5⤵
                              • Executes dropped EXE
                              PID:12000
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" amf_enc
                              5⤵
                              • Executes dropped EXE
                              PID:12016
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" new_nvenc
                              5⤵
                              • Executes dropped EXE
                              PID:12028
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" new_nvenc_av1
                              5⤵
                              • Executes dropped EXE
                              PID:12044
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" new_qsvenc
                              5⤵
                              • Executes dropped EXE
                              PID:12052
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" new_qsvenc_av1
                              5⤵
                              • Executes dropped EXE
                              PID:12068
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" oneVPL
                              5⤵
                              • Executes dropped EXE
                              PID:12080
                            • C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                              "C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe" driverinfo
                              5⤵
                              • Executes dropped EXE
                              • Reads the TCP/IP host and domain name from the registry
                              PID:8472
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                      1⤵
                      • Checks processor information in registry
                      PID:9172
                    • C:\Windows\System32\rundll32.exe
                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                      1⤵
                        PID:8380
                      • C:\Program Files\7-Zip\7zG.exe
                        "C:\Program Files\7-Zip\7zG.exe" a -i#7zMap14910:92:7zEvent20225 -tzip -sae -- "C:\Users\Admin\Desktop\Capcut 1.5.0 portable.zip"
                        1⤵
                          PID:5768
                        • C:\Windows\system32\sihost.exe
                          sihost.exe
                          1⤵
                            PID:10476
                            • C:\Windows\explorer.exe
                              explorer.exe /LOADSAVEDWINDOWS
                              2⤵
                              • Boot or Logon Autostart Execution: Active Setup
                              • Enumerates connected drives
                              • Checks SCSI registry key(s)
                              • Modifies Internet Explorer settings
                              • Suspicious use of SetWindowsHookEx
                              PID:4900
                              • C:\Windows\system32\msconfig.exe
                                "C:\Windows\system32\msconfig.exe"
                                3⤵
                                • Suspicious use of SetWindowsHookEx
                                PID:6816
                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                            1⤵
                            • Suspicious use of SetWindowsHookEx
                            PID:11268
                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                            1⤵
                            • Suspicious use of SetWindowsHookEx
                            PID:2328
                          • C:\Windows\System32\SecurityHealthHost.exe
                            \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                            1⤵
                              PID:10780

                            Network

                                  MITRE ATT&CK Enterprise v16

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  IDMGetAll.dll

                                  • Path C:\Program Files (x86)\Internet Download Manager\IDMGetAll.dll
                                  • Size 73KB
                                  • SHA256 33a8a6b9413d60a38237bafc4c331dfebf0bf64f8057abc335b4a6a6b95c9381
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IDMGetAll64.dll

                                  • Path C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll
                                  • Size 93KB
                                  • SHA256 117abaeb27451944c72ffee804e674046c58d769bd2e940c71e66edec0725bd1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IDMIECC.dll

                                  • Path C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
                                  • Size 463KB
                                  • SHA256 9a9989644213043f2cfff177b907ef2bdd496c2f65803d8f158eae9034918878
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IDMIECC64.dll

                                  • Path C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
                                  • Size 656KB
                                  • SHA256 d0c6d455d067e8717efe2cfb9bdcbeae27b48830fe77e9d45c351fbfb164716d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IDMan.exe

                                  • Path C:\Program Files (x86)\Internet Download Manager\IDMan.exe
                                  • Size 5.9MB
                                  • SHA256 e3fc655a335e17a6fdd09a9b315291d0c8863180f0d801e5dd7433c9e56afbd8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  downlWithIDM.dll

                                  • Path C:\Program Files (x86)\Internet Download Manager\downlWithIDM.dll
                                  • Size 197KB
                                  • SHA256 38ac192d707f3ec697dd5fe01a0c6fc424184793df729f427c0cf5dfab6705fe
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  downlWithIDM64.dll

                                  • Path C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll
                                  • Size 155KB
                                  • SHA256 8a51ece1c4c8bcb8c56ca10cb9d97bff0dfe75052412a8d8d970a5eb6933427b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  idmBroker.exe

                                  • Path C:\Program Files (x86)\Internet Download Manager\idmBroker.exe
                                  • Size 153KB
                                  • SHA256 97810e0b3838a7dca94d73a8b9e170107642b064713c084c231de6632cb68a9c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  idmfsa.dll

                                  • Path C:\Program Files (x86)\Internet Download Manager\idmfsa.dll
                                  • Size 90KB
                                  • SHA256 801d3a802a641212b54c9f0ef0d762b08bcca9ab4f2c8603d823a1c1bc38c75a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0301515ace295adf85c51bd0d66a5e082e2fdfc5.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\0301515ace295adf85c51bd0d66a5e082e2fdfc5.qmlc
                                  • Size 15KB
                                  • SHA256 31363d611d0c9f5c8b99b4ab2bac30399ec245303c7299a7acdb6d60ba8c6ea8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0b09d86d9451a1c8be7eb3f23f77143333f35e3e.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\0b09d86d9451a1c8be7eb3f23f77143333f35e3e.qmlc
                                  • Size 6KB
                                  • SHA256 652179c1206c50dd82ce0a1c7e637264ce6444fc3e93e9cae9afeb46ef6eb03e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0b47e023beb06862c386f23e176fcb88bdc2afe7.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\0b47e023beb06862c386f23e176fcb88bdc2afe7.qmlc
                                  • Size 3KB
                                  • SHA256 ed648f163ef0fd1bb22723df66dab8d693dd7cf691c69db39098ff348b374d46
                                  • MD5 SHA1 SHA512 TLSH

                                  0e1ecfabf7d6235fdd949091ea5fa2c460bbb2be.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\0e1ecfabf7d6235fdd949091ea5fa2c460bbb2be.qmlc
                                  • Size 3KB
                                  • SHA256 d843bb73ba5e9e05e23549dda2420427075599e01e8575acf7dbaaeeb93c4fef
                                  • MD5 SHA1 SHA512 TLSH

                                  1f1a6f5005ac0f7034cbca81ff6bbea8a33cd1fd.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\1f1a6f5005ac0f7034cbca81ff6bbea8a33cd1fd.qmlc
                                  • Size 10KB
                                  • SHA256 5db51eb58e3f27cf6607e5d6041db27fb8b3b72ef1f2a349ae132aabe08e0de8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  28006524ed58d13ae5fcc30a280a2c733cdc58ac.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\28006524ed58d13ae5fcc30a280a2c733cdc58ac.qmlc
                                  • Size 18KB
                                  • SHA256 f07f46fd315369bd9a6fcefa7d40162f2732514d96b5a06bd655dbf485814b01
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  2963acf36b1d1f06ab16330efb7912e47e59a439.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\2963acf36b1d1f06ab16330efb7912e47e59a439.qmlc
                                  • Size 1KB
                                  • SHA256 44c148c63e77e344177312475540b0cd8d3760a7e4eedaadd2633a847324bcf3
                                  • MD5 SHA1 SHA512 TLSH

                                  2a0877bb517c9d77f182b9953689cfc5faa8e5eb.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\2a0877bb517c9d77f182b9953689cfc5faa8e5eb.qmlc
                                  • Size 13KB
                                  • SHA256 27f2661b21890a88d4d6ca04c70f493d79d5809599e4fd11e7f2e7e026292cfa
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3470f526d9eef4a11d4ca7937137206e88b50f7a.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\3470f526d9eef4a11d4ca7937137206e88b50f7a.qmlc
                                  • Size 17KB
                                  • SHA256 91b92524769ffbee538d032b204ee3b00a482d49aa86fb010ceabec054cf471f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  39e48502033bc73ee351a387cd6fe68df66c84a7.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\39e48502033bc73ee351a387cd6fe68df66c84a7.qmlc
                                  • Size 6KB
                                  • SHA256 41fa19b19eec11cc327a2cb430541941c9d2e6a52834d73457105578c4a347b8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3e4258b6fda352b7ea1e1fea2e0dfe46e315c7ce.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\3e4258b6fda352b7ea1e1fea2e0dfe46e315c7ce.qmlc
                                  • Size 7KB
                                  • SHA256 59e88691ac0f0b909602e0962e05641ae0494d1f318427634a6d12c0a86db8ce
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3e9e7cc16f109d3a22d1d20ca55829bfa8073455.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\3e9e7cc16f109d3a22d1d20ca55829bfa8073455.qmlc
                                  • Size 13KB
                                  • SHA256 1aafc150482d3039322e602a99e1b7f7d38972e467fb6689841ca0eb7d18eb0e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3f20c9ce91918e41d416034fecb585715eb1ffa9.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\3f20c9ce91918e41d416034fecb585715eb1ffa9.qmlc
                                  • Size 10KB
                                  • SHA256 5d3fbd7efc22b53089a9b957b4a68c89e34251ba8a7be9563f938b606f8d4997
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  42fda608c1e345842c97b27a94a4a3ac7f3a0428.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\42fda608c1e345842c97b27a94a4a3ac7f3a0428.qmlc
                                  • Size 16KB
                                  • SHA256 7ce6b1267ab4f9ae1953aa5473b33a343c7a639d1b1101c25872914e3229fbc8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  4ab810bb302c75c99c415b6592be9c2b742222cd.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\4ab810bb302c75c99c415b6592be9c2b742222cd.qmlc
                                  • Size 59KB
                                  • SHA256 b17949e89f78d03d25255f6f50f7f67d968ca527fa94766c3f46ee8919ae5b60
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  4d584c655f14ef0e5ce79d0f4d0d825182395bac.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\4d584c655f14ef0e5ce79d0f4d0d825182395bac.qmlc
                                  • Size 20KB
                                  • SHA256 4999eaa5449ada3125e96f42a658ae71e006baba236b5449bc146ade11d0418c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  4f2975b988ed6aacdc53953ba6d23a0f21d3a696.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\4f2975b988ed6aacdc53953ba6d23a0f21d3a696.qmlc
                                  • Size 5KB
                                  • SHA256 bb50fa6718d25031cc8060ddad76a043094cb47a60046b8ddf364a56c70d91cf
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  51c77d09b9841106cc14c438fdae324791d9ddec.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\51c77d09b9841106cc14c438fdae324791d9ddec.qmlc
                                  • Size 7KB
                                  • SHA256 3d89ced41fd9352a48d9f159fdad655d7a406656bec966d32c8e28a957ea6928
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  52c93d1bfc2c5e49322c2b5178a601dd9ce387d6.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\52c93d1bfc2c5e49322c2b5178a601dd9ce387d6.qmlc
                                  • Size 9KB
                                  • SHA256 6db3a31acf20dd9a4f2481172bb1012eab6cb4d53ef621cffa2160aa157c90d6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  539458ccc0ec971c4aecfaa16c574077302ddd56.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\539458ccc0ec971c4aecfaa16c574077302ddd56.qmlc
                                  • Size 131KB
                                  • SHA256 e6ecc11f864bc90d2b056601daace9fb5ccdd0d883c232b76267b3e1f6891919
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  598c1b354cf8aee8ebdc5f3739d1321c1edba68d.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\598c1b354cf8aee8ebdc5f3739d1321c1edba68d.qmlc
                                  • Size 18KB
                                  • SHA256 7350b6116fbc5fda27427f3fc6c9c08abbabaa8cdb51fd944da2795c62ddc027
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  5feee9a2728b09668c8f20d4726dd70353fcae0b.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\5feee9a2728b09668c8f20d4726dd70353fcae0b.qmlc
                                  • Size 1KB
                                  • SHA256 73ece9fe07dc5788d1aaf44d95967203144cea692eae73278cf337b48210d59e
                                  • MD5 SHA1 SHA512 TLSH

                                  643e9a4d7f74f12cfe856861489761bca7572258.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\643e9a4d7f74f12cfe856861489761bca7572258.qmlc
                                  • Size 9KB
                                  • SHA256 8444ef68e726bad5e1a31c391cdc3c56b1a4492576fd53c4ac7f7cd3960deb2e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  65768449ed500263a5ba00b697403bef51ae5d3a.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\65768449ed500263a5ba00b697403bef51ae5d3a.qmlc
                                  • Size 16KB
                                  • SHA256 c458544e61f1a0c8c306baa3ded66969e36f4c5224e1dea38ecddec675052d6b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  67b033b9f8722242540f077a56a2f0e58e57e91a.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\67b033b9f8722242540f077a56a2f0e58e57e91a.qmlc
                                  • Size 15KB
                                  • SHA256 7e998dfe5188cad42f6abc0dfb682888264080145b6c90a884f2b18d981dd6c1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  71bb172b85662abfded54a2ee6734e5ec629e6d8.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\71bb172b85662abfded54a2ee6734e5ec629e6d8.qmlc
                                  • Size 6KB
                                  • SHA256 4349c0e77986dba5fd9a4960699b1d7528d88db6c58ebc5b9ec60b9a24e2a7ad
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  75a493c7c058a73ebcec8eeb44faac5a0f8eb597.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\75a493c7c058a73ebcec8eeb44faac5a0f8eb597.qmlc
                                  • Size 17KB
                                  • SHA256 56cd54ed029945df258db0be9fdf0b903f1ce1283a12e2071ef76a0b3ce26a25
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  78a842a9e11f8a9f1fdfa7d3e4f2dfc891b28c4d.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\78a842a9e11f8a9f1fdfa7d3e4f2dfc891b28c4d.qmlc
                                  • Size 21KB
                                  • SHA256 24ac7c2073b8b34d256877746d83cdb7766b793f10dfb26eb73a862302ddbad2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  7b8437ed7f52521d98839e727ce1b47d9302ddc5.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\7b8437ed7f52521d98839e727ce1b47d9302ddc5.qmlc
                                  • Size 1KB
                                  • SHA256 e51e0cb197e0982f7b28a9d76169c23f7cdda9b11c1aa924b5a72f1146c0cef1
                                  • MD5 SHA1 SHA512 TLSH

                                  7f12c11cd37573f77556e14e7c5fe2b363c08f0f.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\7f12c11cd37573f77556e14e7c5fe2b363c08f0f.qmlc
                                  • Size 61KB
                                  • SHA256 67a9ddef643f13bf5cfa6ce9ebbbdde7fe6e9338afde7cf1218cee9f95401f07
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  8b6e8546ce7d93ba6485235b3eaa9801ed47d50e.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\8b6e8546ce7d93ba6485235b3eaa9801ed47d50e.qmlc
                                  • Size 9KB
                                  • SHA256 3f035c9f4b326dabed3a554845a071229aa495b0ec3f574ad5dd064669cf4158
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  a0fd096bd8e0961ab003a855196174411fd0b403.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\a0fd096bd8e0961ab003a855196174411fd0b403.qmlc
                                  • Size 16KB
                                  • SHA256 e5fd67268ed3ffd5209da52ba34a90d6a09b8395b32a40302edb4ae2d8625c0c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  a15090d77e9428c5abfddb7ba67f5a14225adbe9.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\a15090d77e9428c5abfddb7ba67f5a14225adbe9.qmlc
                                  • Size 5KB
                                  • SHA256 a0c7a9ba0bd229de1b856a62bac802a6907bbe64b1cb084ad1f7ef2bbfc529c5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  a2cfda76d7baf0857af8eeda2f1ce1ea4598cf0b.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\a2cfda76d7baf0857af8eeda2f1ce1ea4598cf0b.qmlc
                                  • Size 3KB
                                  • SHA256 5ff390760057bb46a29d63ef8e1357a5839d7226a4d24b50f28bd310921cc546
                                  • MD5 SHA1 SHA512 TLSH

                                  b7d05d1809a67ef84b680e6780ccff2eb0e122ee.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\b7d05d1809a67ef84b680e6780ccff2eb0e122ee.qmlc
                                  • Size 10KB
                                  • SHA256 2ee55cc1632c19d19ce5c81d4830fbe69c0615bf5820a3c4614e5413b3b36787
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  bc541fbb8b4771fe0655172b98b9021b5762d06b.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\bc541fbb8b4771fe0655172b98b9021b5762d06b.qmlc
                                  • Size 36KB
                                  • SHA256 bfe74c1c6928cc79a5621aaf23048bbdaf071813a3f2af68cd39242f240f3d0d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  be7b03c6e5f1e2cbb8f9eaad38b89775281e899f.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\be7b03c6e5f1e2cbb8f9eaad38b89775281e899f.qmlc
                                  • Size 12KB
                                  • SHA256 b660e8b37dc392b32e52a1fe6c9b4c650ac5c84f24f77d6d28202ca24d22ecf7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  c6dfc1637f3a1a76307c6bfcf97c477502896cdc.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\c6dfc1637f3a1a76307c6bfcf97c477502896cdc.qmlc
                                  • Size 12KB
                                  • SHA256 8ce7de7d11ce965a0317f5eac2ae491c46698df2b3622b3c0f92891194cb79ed
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  c6fb3d97358d9716bca38b96af32065596ff6e1c.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\c6fb3d97358d9716bca38b96af32065596ff6e1c.qmlc
                                  • Size 64KB
                                  • SHA256 551ab1c458af7784cc7fd34c5cc67c6292f1acd9f480cb39fc51a2a458c3dde8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ca1cc06ce59dc55f7fee309dbc87be83a3bb62fd.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\ca1cc06ce59dc55f7fee309dbc87be83a3bb62fd.qmlc
                                  • Size 11KB
                                  • SHA256 d424d73ca8b2149c84bf257f6653eb9c96b0d8a59a4856b044582afe7ea89059
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  cb2fd31798c7b2f8d3518d96ef82207d0bf9d505.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\cb2fd31798c7b2f8d3518d96ef82207d0bf9d505.qmlc
                                  • Size 12KB
                                  • SHA256 ba99a1be643836ec77c5983dbbd3d0e56eb36de0047c67893f4c3a2d28f02534
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  e483b87142528102a069840bc4e5e02568bd94eb.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\e483b87142528102a069840bc4e5e02568bd94eb.qmlc
                                  • Size 7KB
                                  • SHA256 f435cd59cd6beb359fe932593801b041371f35d6bc112c1c824123933a532d71
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  e5e4c02d72e9962e311694970ec5d4404315e4ab.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\e5e4c02d72e9962e311694970ec5d4404315e4ab.qmlc
                                  • Size 14KB
                                  • SHA256 7fab916e9bedba852ef969c63d9adcc9c9d48fd7d3acd242b50f2f33f9610c53
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ee08a78a5005dc6f1c77a108402b6eea6517db92.qmlc

                                  • Path C:\Users\Admin\AppData\Local\Bytedance\CapCut\cache\qmlcache\ee08a78a5005dc6f1c77a108402b6eea6517db92.qmlc
                                  • Size 17KB
                                  • SHA256 9ee3f85cc5e532a4933a121ae179aa42feac81515f8ce17c2b76b827a743a63f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  HorizontalHeaderView.qml

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\QtQuick\Controls\Basic\HorizontalHeaderView.qml
                                  • Size 2KB
                                  • SHA256 cacbfa1525380483b722da298d58d0b93e9919a5e1e6faff50747d8c3c7425e1
                                  • MD5 SHA1 SHA512 TLSH

                                  VerticalHeaderView.qml

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\QtQuick\Controls\Basic\VerticalHeaderView.qml
                                  • Size 2KB
                                  • SHA256 6b769a6bcd02552aceea16cd1943a62d881f3bec71bf31c476ab2dc4af8d5ab6
                                  • MD5 SHA1 SHA512 TLSH

                                  ScrollView.qml

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\QtQuick\Controls\Fusion\ScrollView.qml
                                  • Size 2KB
                                  • SHA256 228069c59b7d348321d4ad8e1260d20ef8cfaae5be0c08676de49d8562fe6fda
                                  • MD5 SHA1 SHA512 TLSH

                                  default_music_ico.jpg

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\CloudMaterial\default_music_ico.jpg
                                  • Size 27KB
                                  • SHA256 58d1849acf87efe6334cdb13a11ac99016d0196d0c7c59bb098039e94e0bff61
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Curves\Curves\rt\outputTex.rt
                                  • Size 510B
                                  • SHA256 04f3515e2001470f579f2e4cfc6df63e2d35593d13ac259ba769e2d2d4ef68f1
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Curves\Curves\sticker.config
                                  • Size 276B
                                  • SHA256 8695d8d1cd532f86c340a46ff20f6c96f25f842d6c6f2d3c67b29e3c8d706fb0
                                  • MD5 SHA1 SHA512 TLSH

                                  entity.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Curves\Curves\xshader\entity.xshader
                                  • Size 1KB
                                  • SHA256 df215933763275ed647cbc3ca4aa61d61bae5d103c57d7aabdbfd693b7d83e1f
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness\amazingfeature\content.json
                                  • Size 367B
                                  • SHA256 870f92598444cae8f6c19b30d3e6fd8acf0e70c74660c9de2d89f9bcf4a3444d
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness\amazingfeature\material\filter.material
                                  • Size 533B
                                  • SHA256 7f9a923b50b983f5c010f96895cff9895b2c0333793f125db09d9a6e12e0b8ac
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness\amazingfeature\rt\outputTex.rt
                                  • Size 324B
                                  • SHA256 f28df7e33339f8d20f304cc3589fa95bc527cc81e092d6ecbe43aef068985cab
                                  • MD5 SHA1 SHA512 TLSH

                                  brightness.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness\amazingfeature\texture\brightness.texture
                                  • Size 7KB
                                  • SHA256 058ab15ec2c1b7f9914950d2f281f12d0678bd5b6bfa2af5147baa4aac116c90
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness\amazingfeature\xshader\filter.xshader
                                  • Size 740B
                                  • SHA256 c99d0ede6d9c4b8c56a80fa41a34321aa4e6e76047d64b58b45b96086b972eec
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 a2e7ba46e6b1611bb341f3189d40b4ae1f083cd4d335e456e65080829727fc7c
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness\config.json
                                  • Size 262B
                                  • SHA256 baf22b41272ffea6d0bbebfc834d27693a0fc1c122237109879534435fa86918
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\content.json
                                  • Size 829B
                                  • SHA256 b9f200151ac1ff1959919821801282963a4d1118ea835fd80cb327f70ff75cc3
                                  • MD5 SHA1 SHA512 TLSH

                                  brightness_max.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\image\brightness_max.png
                                  • Size 222B
                                  • SHA256 6b7a6b4aa0fcb7b02acf0beb8712bea4e5d544dd6a77bdd7e57a2d72a9b4f605
                                  • MD5 SHA1 SHA512 TLSH

                                  brightness_min.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\image\brightness_min.png
                                  • Size 4KB
                                  • SHA256 1beedb3709dee46ac1eb7524c20a7c4571d5cce93a39c84ad23359e2fad0a3a0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\main.scene
                                  • Size 2KB
                                  • SHA256 fd8e508ca5ec3c8d3e2d48c9c3150934fab181c6570da7153c7ceefe62cea802
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\material\filter.material
                                  • Size 757B
                                  • SHA256 ba238d02fcdfaba8a5e5ba3511a154b164bae0cf428921883aa731f31dce35ba
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\rt\outputTex.rt
                                  • Size 762B
                                  • SHA256 e70ec860fae4f68cc7cb1627717e725af493abecb59b4f3ed1236569adc28df4
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\xshader\filter.xshader
                                  • Size 1KB
                                  • SHA256 45390a5b6d9c3a4d71993c867d689023dcdfecc8a604cee36a457aac2c29ef57
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v1\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 6ccbcb6322f1a6a15e99b11f8d1001945ba8b3b727fdf97d762593c7020bc0e7
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\ImageBusinessSlider.json
                                  • Size 366B
                                  • SHA256 197da9d5298611f66fc071713880bddcbeec006626ce444ff97f5f9ef39ebb09
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\content.json
                                  • Size 129B
                                  • SHA256 63958d0a70d7b434db242d7a8618de32839dcf36e6789a4216f1e60f79b20c9b
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\lua\ImageBusinessSlider.lua
                                  • Size 1KB
                                  • SHA256 8d6a9dd335691f4807349657935618be4786fe00163ad810973c149ea8e8e1ac
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\lua\SeekModeScript.lua
                                  • Size 738B
                                  • SHA256 1adcf880046ab1aab94404cbf2075fb3544a4179272051afe51b809d11181081
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\main.scene
                                  • Size 2KB
                                  • SHA256 361ffa16d9bd885064ef0ecd828caa637013d7845c5e91799d7438ab9cdb9a48
                                  • MD5 SHA1 SHA512 TLSH

                                  pass1.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\material\pass1.material
                                  • Size 820B
                                  • SHA256 6123f56542eac004e63bfa918c8701b4d4e876204901960a1c1c827d9e87a308
                                  • MD5 SHA1 SHA512 TLSH

                                  quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\mesh\quad.mesh
                                  • Size 998B
                                  • SHA256 bd300a42b70a7692d967ab9ffe0a4a4483fd775f36f9bb5b3c100d46cc095c13
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\rt\outputTex.rt
                                  • Size 567B
                                  • SHA256 55f0dad2346ff7d0ff80fbf71f64a47497ca5d946af6fcbfe96e9e75f1fb0c3a
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\sticker.config
                                  • Size 317B
                                  • SHA256 a34a5b1c58f3273cef42a09c616687ba8c962f218c5c4343c56370cfa5d5d684
                                  • MD5 SHA1 SHA512 TLSH

                                  pass1.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\xshader\pass1.frag
                                  • Size 656B
                                  • SHA256 f2727ddf526a23c06f53b234aaf7447ee7becb32ec04af29260f7718645eb281
                                  • MD5 SHA1 SHA512 TLSH

                                  pass1.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\xshader\pass1.vert
                                  • Size 184B
                                  • SHA256 f93577872a69c94db0d335f89027c89d76583258784a60fbdde6c3912427c707
                                  • MD5 SHA1 SHA512 TLSH

                                  pass1.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\AmazingFeature\xshader\pass1.xshader
                                  • Size 1KB
                                  • SHA256 1e5466a6a928f06323feb1afa1a8b45c1f4d2dc077fa94f4ec90ea9259782c9b
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\brightness_v2\config.json
                                  • Size 302B
                                  • SHA256 05e11fd27db82d6437caa5d1e9ee6735baac562a69ed982eb6148995afe3e0ae
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast\amazingfeature\content.json
                                  • Size 365B
                                  • SHA256 679edf72c936ee363196dbf93204e69e09a9c73d10a115f45da534a6dba01f8d
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast\amazingfeature\material\filter.material
                                  • Size 531B
                                  • SHA256 12d0c438ce538b25b26d651734d19068df86ee97daff772cb0e3160949c27b2e
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast\amazingfeature\rt\outputTex.rt
                                  • Size 324B
                                  • SHA256 f7f3d8032bc39cf117e9854daea791c8ca453e7e3aca59e39228b847174e5ab8
                                  • MD5 SHA1 SHA512 TLSH

                                  contrast.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast\amazingfeature\texture\contrast.texture
                                  • Size 15KB
                                  • SHA256 acdcbac40ff37960db9bfa1dcec441b1ee5a3d6eeab7dac5f6305c9e35915fbe
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast\amazingfeature\xshader\filter.xshader
                                  • Size 740B
                                  • SHA256 917faafe6a4acd179881c63db3bb19ff15f015bb3033a19c7ad9e70f860e8ba0
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 8533ccfaffe0198cde0ee123388a609391e53e3fd5045039b4908b6dde7ced3e
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast\config.json
                                  • Size 260B
                                  • SHA256 eb98f13a252afda3c884261e8dca881e457ebd15049f8cc02efd2437d36742a3
                                  • MD5 SHA1 SHA512 TLSH

                                  LuaRTTI.MarkGen.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\LuaRTTI.MarkGen.lua
                                  • Size 190B
                                  • SHA256 2aa4ba3afc94d9d96a4c0f850dd5073c0b58560e9609cf758e3ae92f89d77220
                                  • MD5 SHA1 SHA512 TLSH

                                  algorithmConfig.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\algorithmConfig.json
                                  • Size 317B
                                  • SHA256 835c6031fb0e72d2f2b6ee80c45b95010a7e7cac7fa221d9b820d6708a8869a8
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\content.json
                                  • Size 124B
                                  • SHA256 ab3436784bb09cb188d585ea5b9dc9b5b7fa0697675eaa3598d74cc6a675071c
                                  • MD5 SHA1 SHA512 TLSH

                                  lua-meta.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\lua-meta.json
                                  • Size 1KB
                                  • SHA256 0369cf187ada27b589f8eae28cb6d25cc0ca8b7f0b9c826c16e2a91efbf60fa4
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\lua\SeekModeScript.lua
                                  • Size 3KB
                                  • SHA256 f9577cb0e4ce4469c1265db3209b6aeeb742a085a93caab9336c5d9562610bb3
                                  • MD5 SHA1 SHA512 TLSH

                                  Utils.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\lua\Utils.lua
                                  • Size 9KB
                                  • SHA256 df672b08916560cf1a04a0cecd1c3e8160557409a0c1c5da2483ffe16fc77d4c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  graphBuild.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\lua\graphBuild.lua
                                  • Size 5KB
                                  • SHA256 e99cfcfe93e9ea0fd243129a4da604c186b7fac0c5aec7788dc9bae6ee26fcc8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  renderChain.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\lua\renderChain.json
                                  • Size 259B
                                  • SHA256 244f156847921a6c4b34ccbffd09bc5effcc1cf69cf68ffb7e83cd9dadca00fa
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\main.scene
                                  • Size 2KB
                                  • SHA256 ba1c2855266e0994ee09dca975b9f828300aeefdccd0eaf8d4f53bb29f8eef83
                                  • MD5 SHA1 SHA512 TLSH

                                  Quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\mesh\Quad.mesh
                                  • Size 1KB
                                  • SHA256 1c56153b3aafd51f00f4c00df34f2d780d240ac525862c03b7751392e171b9f8
                                  • MD5 SHA1 SHA512 TLSH

                                  FliterEntity-2FFE6ABD.prefab

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\prefabs\FliterEntity-2FFE6ABD.prefab
                                  • Size 857B
                                  • SHA256 1d538614b992c7ae8c9c1c6f140e2c6ad8a7a80673001dac2db6bc27d2ddde28
                                  • MD5 SHA1 SHA512 TLSH

                                  fshader.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\fshader.frag
                                  • Size 7KB
                                  • SHA256 01914f316f7c1896348a7b866b38d857ace31c643496636e9ee41de211f3bce6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  material.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\material.material
                                  • Size 887B
                                  • SHA256 b3505e9500da71da80c96e871c18594821622d4734464dff3cf9057998f3e05c
                                  • MD5 SHA1 SHA512 TLSH

                                  xshader.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\xshader.xshader
                                  • Size 1KB
                                  • SHA256 6000493c6055709125d37005c8fa6b693f6c35ec76c967661ec073f1b34f7401
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\rt\outputTex.rt
                                  • Size 567B
                                  • SHA256 ca77feb4432805141de582bee6b6cae76865a68c278906f9da0512f6f73d6550
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\AmazingFeature\sticker.config
                                  • Size 305B
                                  • SHA256 4f218871d126b92e0a895646e01b0658c0b70934f85885b121d1b2c9267d0cfb
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v1\config.json
                                  • Size 203B
                                  • SHA256 2d4df42e6e6f3ac628f79a1c191459f921baa589c002b7b732a3ef7fc4c435b8
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\content.json
                                  • Size 124B
                                  • SHA256 2dc0cbb015349cbee83133cf61b2615ae288e0107b631284d067856df0662743
                                  • MD5 SHA1 SHA512 TLSH

                                  lua-meta.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\lua-meta.json
                                  • Size 1KB
                                  • SHA256 85c6be8c7a92ba01c3bdfecd4b5ef1f7b4b536d8112ea8a1ff9b3e890d7c5738
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\lua\SeekModeScript.lua
                                  • Size 3KB
                                  • SHA256 5eba8b5424bf8926353d9b50db99b37af1f9e254024765a25ab7667c502f8827
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\main.scene
                                  • Size 2KB
                                  • SHA256 1b4606f333dce90d2cbd1bef8859b03a86048dfbacc98bc5b9fd0132c5995eca
                                  • MD5 SHA1 SHA512 TLSH

                                  Quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\mesh\Quad.mesh
                                  • Size 1KB
                                  • SHA256 e8bb66f1490fe4a0bcad6ebaa19d031de238ecd0a1a36e26a4ebd1f11801ec81
                                  • MD5 SHA1 SHA512 TLSH

                                  FliterEntity-2FFE6ABD.prefab

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\prefabs\FliterEntity-2FFE6ABD.prefab
                                  • Size 857B
                                  • SHA256 bacbd7119e309a4d675d8a8b33cd1090948c936c3ebf3ce311fe3d0626450dba
                                  • MD5 SHA1 SHA512 TLSH

                                  material.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v2\AmazingFeature\prefabs\FliterEntity-2FFE6ABD\material.material
                                  • Size 887B
                                  • SHA256 885be6a1b70625f2d642539e8a1e9c5ec7ab685aa194b725a86f8df351f46bcd
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\contrast_v2\config.json
                                  • Size 203B
                                  • SHA256 ea382c7a30fe00882e2605ea9098e685b8cbd64e83ebdd6cadb1f6e61d03dc6f
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\fade\amazingfeature\content.json
                                  • Size 361B
                                  • SHA256 e01c04549651434ef4c8bf5e0c14e32fe89fae88a466af734c1f1bd6cbf330f1
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\fade\amazingfeature\material\filter.material
                                  • Size 531B
                                  • SHA256 7a38230a37a7da08880fc7874f97f5300625deacad874a3b77321653e1a76698
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\fade\amazingfeature\rt\outputTex.rt
                                  • Size 324B
                                  • SHA256 c8a0d9c33611ea876680bc826214c36027992be12116da2b2c6bb89859bdd854
                                  • MD5 SHA1 SHA512 TLSH

                                  fade_max.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\fade\amazingfeature\texture\fade_max.texture
                                  • Size 753B
                                  • SHA256 b532b69514c26c2f06c2ba03cc121bc7ba5a09ecef8da1e0c19ebce9ae9d5f0e
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\fade\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 b93f80f78ac96da50cb3f7d3978d03dbd340dedf5fab5a0a17fade85ed698160
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\fade\config.json
                                  • Size 256B
                                  • SHA256 6235b225ac73fdcbc4aa4803f931d37f9a647dbe82f4c136ff14e6da0067d96e
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\content.json
                                  • Size 366B
                                  • SHA256 c11959f34383f116d340093d8fb6674ccec83872c0b760a17ab4dddc394cb1a2
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\material\filter.material
                                  • Size 537B
                                  • SHA256 f8fe197dda58ec2433b10cca92c67a6257cfea047ee6c84206522bb2dff048ce
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\rt\outputTex.rt
                                  • Size 324B
                                  • SHA256 98853ef5d21e3d85a9773f5fabb6864054f486030f56ac4ff5339af82e5fc891
                                  • MD5 SHA1 SHA512 TLSH

                                  hightlight_max.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\texture\hightlight_max.texture
                                  • Size 5KB
                                  • SHA256 56ede5a5f85d68a298192ed605523df752d5460e4cb0ef54a335045b0da474dd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\xshader\filter.xshader
                                  • Size 740B
                                  • SHA256 129bdb4e03951342e91669b6ddd9e0ec4b25a9f5f04a759e2fe7be066e150527
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 a1a2fc310550620417e1619c871f09c29908467f8e02116885ada8d3820c6ffa
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight\config.json
                                  • Size 261B
                                  • SHA256 8200428a8b69067ec73ad0faa72496f1f5fe7df1ebafd1aabd4e00121850f177
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight_v1\amazingfeature\content.json
                                  • Size 830B
                                  • SHA256 c35d0c11019b43587fb6a90f5076975f69b76d310daa11969e8b83d1573eaf0f
                                  • MD5 SHA1 SHA512 TLSH

                                  highlight_max.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight_v1\amazingfeature\image\highlight_max.png
                                  • Size 20KB
                                  • SHA256 b310ae8c874d75074ba77b147bb7c3bb6b5a85224bebfb9d4f7a93aa690a8dbb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  highlight_min.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight_v1\amazingfeature\image\highlight_min.png
                                  • Size 21KB
                                  • SHA256 57206e57c14378ea87b34fd571fc8cf8e6f2016bd38921942cae9022fe122a52
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight_v1\amazingfeature\main.scene
                                  • Size 2KB
                                  • SHA256 6612e3970bce1dd2a892ce3855037e8b80aa8417b205cd2a7b1e2bd4d656701d
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight_v1\amazingfeature\material\filter.material
                                  • Size 753B
                                  • SHA256 06d1ffac2e790d6929020d4c2772e4e3fd4f04773cc9e7450aff1499d1c6e631
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight_v1\amazingfeature\rt\outputTex.rt
                                  • Size 761B
                                  • SHA256 78c37ab7c5a0043412c9b36cbeeeaed0fd97849d0605d09dcc391c679087f839
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight_v1\amazingfeature\xshader\filter.xshader
                                  • Size 1KB
                                  • SHA256 9547195bb858fcf624c63dfeda984656d1ca39b9fd41bf771a7cf3e9a241ee2a
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\highlight_v1\amazingfeature\xshader\gles2_filter.frag
                                  • Size 4KB
                                  • SHA256 f1885b24aa66202a9d9e0cb905bf61dad18615293f46ac88b9ec5a41ffd77b54
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\content.json
                                  • Size 130B
                                  • SHA256 b077ccd356a478e2e0878be27babf81006e8d33cd44d2a6626ad2fbce7f4aab5
                                  • MD5 SHA1 SHA512 TLSH

                                  temperature_max.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_max.png
                                  • Size 4KB
                                  • SHA256 16fa716c3483f2387763dbdef519f7627bee1151969a5548be91fde5d30b583b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  temperature_max.png.meta

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_max.png.meta
                                  • Size 352B
                                  • SHA256 99fb9eb6d93f1775e62e5ffcab477b45afb7d85584461d29aa070c651159abb5
                                  • MD5 SHA1 SHA512 TLSH

                                  temperature_min.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_min.png
                                  • Size 4KB
                                  • SHA256 4d6b06cbcc92d8bd42b0ff8da7661ed729652c4bb8ce3c7ce1d9c2db631c00a1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  temperature_min.png.meta

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\image\temperature_min.png.meta
                                  • Size 352B
                                  • SHA256 0dcfcfc4d3db8a69617016304ea3420627cebf851a5cada66c0c1fa5df63e21f
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\lua\SeekModeScript.lua
                                  • Size 2KB
                                  • SHA256 bdbcfcde5eaf281244b4b7768313d2bcaa16eb952515bc1bde34d4d90a1cf787
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\main.scene
                                  • Size 2KB
                                  • SHA256 ddf39775e5dd5cd52acf3ea780ea07440b5c4d8fe068ff2edd356478892f6f18
                                  • MD5 SHA1 SHA512 TLSH

                                  entity.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\material\entity.material
                                  • Size 839B
                                  • SHA256 35192ed64374b241d70d49e8789747909e129c53ab5a0804b7f28c05a3c6b77c
                                  • MD5 SHA1 SHA512 TLSH

                                  quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\mesh\quad.mesh
                                  • Size 1002B
                                  • SHA256 2589fe8d31dfcfd5f521aacd5c00a64a0292fa773aef26009dc85ee78e9bdcff
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\rt\outputTex.rt
                                  • Size 510B
                                  • SHA256 554c5c6ab074cd55cb6ad256f5ab52fc649c403e4b4c8efc26ef0b9567226e84
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\sticker.config
                                  • Size 276B
                                  • SHA256 628398a978ba0d718e5753bd40e2652a7db9bdab38952def94802ee2c9cf0eff
                                  • MD5 SHA1 SHA512 TLSH

                                  entity.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\xshader\entity.xshader
                                  • Size 1KB
                                  • SHA256 a112e4d48ad3b783194d4cff5f9eb31eb04c2d9ea7ece6ba6dd6ea634bece058
                                  • MD5 SHA1 SHA512 TLSH

                                  fshader.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\xshader\fshader.frag
                                  • Size 5KB
                                  • SHA256 399d3d2b08733a6926760c40da16e46316ae5973bc52522721c2d29dd67317a4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl\config.json
                                  • Size 318B
                                  • SHA256 85a973186f9e260957d41f64dc40bc685c502daa864093f04b91511fcc50fe7a
                                  • MD5 SHA1 SHA512 TLSH

                                  fshader.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\hsl_v1\HSL\xshader\fshader.frag
                                  • Size 9KB
                                  • SHA256 2ae908132907f3afea099d4339e6e314197b06624feb108d664239295065270d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\content.json
                                  • Size 829B
                                  • SHA256 8442628492699426791c8be69479d36eae252c6fdd6522def7f37ab39820c42d
                                  • MD5 SHA1 SHA512 TLSH

                                  lightSensation_max.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\image\lightSensation_max.png
                                  • Size 21KB
                                  • SHA256 229205389beae841f133e2cc9e524ed7949c3a5ab29240ecadb234238a87138a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  lightSensation_min.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\image\lightSensation_min.png
                                  • Size 21KB
                                  • SHA256 78301ba10f536d05575db598044a642842f43549352cd80b577b8d3854d865c4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\main.scene
                                  • Size 2KB
                                  • SHA256 d45760b850c257f42fd4667d6282b93612a7b10e9cb6c1011c3ecf1717e38893
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\material\filter.material
                                  • Size 765B
                                  • SHA256 1897e24d860d607e6291110deac37c11fd87d4517fb5c6bbe0d0c1a76105e380
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\rt\outputTex.rt
                                  • Size 760B
                                  • SHA256 f1dbdc346e56cf64d38547261ead95c94dd7ce5341b4131cd0c38bc5bd906f53
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\xshader\filter.xshader
                                  • Size 1KB
                                  • SHA256 540205ff815828384399d58f2652def3506b065326e8b0bb84479aa73580757c
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 293a4a59a17fa50158e6244cb81724bdc6f2f6b7000b53c2123432bbdc5e6e47
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\light_sensation\config.json
                                  • Size 266B
                                  • SHA256 822ed0b1e188c6e3dba3c985314f5a8fa6982d2213f0fd59a84b63fe1fb086e8
                                  • MD5 SHA1 SHA512 TLSH

                                  Transform.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle\amazingfeature\Transform.lua
                                  • Size 2KB
                                  • SHA256 bdb87303342dfb6c36111b540dade2fb81f56d1dc14fddcff7b27dc11db943f4
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle\amazingfeature\content.json
                                  • Size 967B
                                  • SHA256 c8e034e707488e1381df330c5de926a73a52880df7603b27e0399729a40b1e28
                                  • MD5 SHA1 SHA512 TLSH

                                  grain512x512.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle\amazingfeature\image\grain512x512.png
                                  • Size 230KB
                                  • SHA256 a6914f765d109ada7485b5609186231dce10c24262021365d6d6453b612cb07b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle\amazingfeature\material\filter.material
                                  • Size 735B
                                  • SHA256 c7562679a1a401d63fea2a48472bdf7950e3636f10b76d8740da340a2d4761df
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle\amazingfeature\xshader\gles2_filter.frag
                                  • Size 1KB
                                  • SHA256 e5b32d043a91b96c7f5dff76c345413dbf3d4159a2f37b2a4e0502530291c4da
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle\config.json
                                  • Size 258B
                                  • SHA256 11f3e12d66b21d11bec1fa921282c247512bc01a76fa4b5e807a7943bdde1ae2
                                  • MD5 SHA1 SHA512 TLSH

                                  algorithmConfig.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\algorithmConfig.json
                                  • Size 454B
                                  • SHA256 bb9ca7d984c8eecebebfd3aadff29bc267d9bf1cc6dc683a887c32823dae45d2
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\content.json
                                  • Size 129B
                                  • SHA256 8f72e2d5ebbf00be0a6473d8fd4ff494b628b7f6b972410c9cdc3f8484bbbe98
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\lua\SeekModeScript.lua
                                  • Size 2KB
                                  • SHA256 2e925fc5d94420003f4c7db5e8470e1510e129873afa1f87d5bc0340bcaf6d59
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\main.scene
                                  • Size 2KB
                                  • SHA256 335944a33967b6f2433d4dcf870f3a36d30fb52a6b3c3990cd18c58510132f5d
                                  • MD5 SHA1 SHA512 TLSH

                                  noise.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\material\noise.material
                                  • Size 652B
                                  • SHA256 fda54d574bbe6040e6dbf5cadca7340c0ed837f65d5f7c06a5bd9dab983b31ef
                                  • MD5 SHA1 SHA512 TLSH

                                  quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\mesh\quad.mesh
                                  • Size 998B
                                  • SHA256 879e4889ea6ee05a3835c75c99595c87740223d1354a679b85e9c7720809aef6
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\rt\outputTex.rt
                                  • Size 510B
                                  • SHA256 5cedbe5ea2f46408ba45424f6374b2a3666630a4a211d9a928cd241b0762dab4
                                  • MD5 SHA1 SHA512 TLSH

                                  scene.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\scene.config
                                  • Size 363B
                                  • SHA256 0adc55e18bdff0fcde5e163338cdcb74618b1198dbd95d315ca5ec256005921c
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\sticker.config
                                  • Size 276B
                                  • SHA256 c3de42b569951c70e76d4adb756b424c0ddaeaea6c1a0b61bf1935b7b7b1ee66
                                  • MD5 SHA1 SHA512 TLSH

                                  noise.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\xshader\noise.frag
                                  • Size 1KB
                                  • SHA256 c9c6b50e0b70aa15a6decddfa02f0cff2ba7bac73bf6b055252d1ce4418698c9
                                  • MD5 SHA1 SHA512 TLSH

                                  noise.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\AmazingFeature\xshader\noise.xshader
                                  • Size 1KB
                                  • SHA256 94d6bc0f3912ada7dc7c2fc6cb3ca7ef38bd2e54bc6a2a93ba5c62790e0bee92
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\particle_v1\config.json
                                  • Size 301B
                                  • SHA256 1b76c3df72fb1c360bf91611a5608678f11e4036a5271c637781eaaf27cf1e6a
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation\amazingfeature\content.json
                                  • Size 367B
                                  • SHA256 d86598727542fe9527eec4ce9dd93677698ff344cb2c98bc9b91fd6da4988e23
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation\amazingfeature\material\filter.material
                                  • Size 533B
                                  • SHA256 b78d73fb96a81f56e72d72795a1f347ccad2ce9ecdb757603c06af87fd479b08
                                  • MD5 SHA1 SHA512 TLSH

                                  saturation.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation\amazingfeature\texture\saturation.texture
                                  • Size 9KB
                                  • SHA256 6c8c2077a2f3f8c1467fb7083e364a8a5361e29a03a0bf837a53d3fe1df59ae8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 9a868016e550af81b6c2cd9bab5d67c000bbdb137cf996574a594c6f1eb79a3a
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation\config.json
                                  • Size 262B
                                  • SHA256 8ccbdf78f203f4e2b99e3008efab7cba442da566773fa650d06a5c5729db81cc
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\ImageBusinessSlider.json
                                  • Size 345B
                                  • SHA256 ec980f11457355fe5156c9cc3ae450c24195401e8a452d5ef628fdc5ec4e0353
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\content.json
                                  • Size 130B
                                  • SHA256 01fa9e2b148d931692285d1547a77eb0f89a83fffdc15c242f52a0259baa0e4e
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\lua\ImageBusinessSlider.lua
                                  • Size 1KB
                                  • SHA256 7bcb32c46716f17417cd2b1ed95c3ed95a5dd5d8b9754dccdbaa59fea198095c
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\main.scene
                                  • Size 1KB
                                  • SHA256 448728b1dae57c73ac99e80b399d640f569de45227ef8680eab5e8dffe6a31fa
                                  • MD5 SHA1 SHA512 TLSH

                                  noface.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\material\noface.material
                                  • Size 742B
                                  • SHA256 292e3182d9f8eecd53078ac4398473a5ef8e18cc166e9d37f93cfc52bf16820f
                                  • MD5 SHA1 SHA512 TLSH

                                  Quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\mesh\Quad.mesh
                                  • Size 1KB
                                  • SHA256 ba9daaa5d43a6cfedb2d41d0b368163758d0dab20f7c8b7bef3f93977d427745
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\rt\outputTex.rt
                                  • Size 567B
                                  • SHA256 f9a3f2a40af0efd6a191bd8a10340f55bea2509105f74855736759956cc40a9f
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\sticker.config
                                  • Size 278B
                                  • SHA256 e608b8177b852a81a59523d8bd9dd899d3cbb9af9ac3264e141c478a465aeb9e
                                  • MD5 SHA1 SHA512 TLSH

                                  noface.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\xshader\noface.xshader
                                  • Size 1KB
                                  • SHA256 e2cb9ada3aff1b5be54146ed100686efbf0a8c235d12fd83ee806855552dd501
                                  • MD5 SHA1 SHA512 TLSH

                                  quad.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\AmazingFeature\xshader\quad.frag
                                  • Size 1KB
                                  • SHA256 8620925f4ee4e8157a7424c8b8f21f779b4d3a5af28390775ac356679e08d237
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\saturation_v1\config.json
                                  • Size 300B
                                  • SHA256 dd7ee6a8d36f86ddcf0ace4a65a746eaefa30edc6963737fce70f21c8bae3f58
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow\amazingfeature\content.json
                                  • Size 363B
                                  • SHA256 7cb48ff244effee58dd5054313f1198052772b32d968299e1a14f50d9d363a25
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow\amazingfeature\material\filter.material
                                  • Size 533B
                                  • SHA256 e47ac8c79c18d106ba780a527013a25231fd2a2b296ba715f28e19f9afaa5238
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow\amazingfeature\rt\outputTex.rt
                                  • Size 324B
                                  • SHA256 e4cd16d35c3f30beb30ac1a1e0c7d8635576c77111cf7e5ed7ba687b7cf22445
                                  • MD5 SHA1 SHA512 TLSH

                                  shadow_max.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow\amazingfeature\texture\shadow_max.texture
                                  • Size 5KB
                                  • SHA256 a9e2a11e033868fed99e5701dc7818fbf77004960ae33420b85bbdecea770d33
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow\amazingfeature\xshader\filter.xshader
                                  • Size 740B
                                  • SHA256 904eb58fa8576e55dfeb2aecaff6f74fefe25845d9887821e6fe3e20765c4611
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 9519eeb84dca5e1306d5be18bedc79470eb7c1f821554eb8c2855f2cb7e181b2
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow\config.json
                                  • Size 258B
                                  • SHA256 6653c241339faaf3068cbf4bd6982b8e1239a3d251b315d8728ee794c7a9f360
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\ImageBusinessSlider.json
                                  • Size 1KB
                                  • SHA256 c87243387967a9712819daba2869ffc7957e94eedde1383e794ddd2a031820df
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\content.json
                                  • Size 130B
                                  • SHA256 fc2b74417e526dffd214dd36eccb1531e6c777a0cbfd2dcf7939b4a5a7f52cfb
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\lua\ImageBusinessSlider.lua
                                  • Size 1KB
                                  • SHA256 234d860004cf18476ec71e138722d28f5df672cf6196b45683b83864b303f129
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\lua\SeekModeScript.lua
                                  • Size 2KB
                                  • SHA256 22a5beb53cc88b765fe88d6e897fd67cc9957eaed8230b1835e2bb24426d25de
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\main.scene
                                  • Size 16KB
                                  • SHA256 a6129e2717e2afe4d3b0e1e081bf2883057ff3e08a588bdfe130dccb8d4cfb71
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  GaussX_2.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\GaussX_2.material
                                  • Size 802B
                                  • SHA256 bb3eee876daaf66c381852151905f2f99393c6c1cf8eed84aa698009478bea91
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussX_3.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\GaussX_3.material
                                  • Size 802B
                                  • SHA256 9ba45dff7ca433ae5f578b95a4676262b2cb5c44790b3e59d7073b151ae19061
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussX_4.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\GaussX_4.material
                                  • Size 803B
                                  • SHA256 9ee366374686d5278d08e56bd6698dbc3d71d41ac27675a31e4c860fe69b16ee
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussY_2.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\GaussY_2.material
                                  • Size 779B
                                  • SHA256 ad95a4b166ab0296940de3a8dc14ca6e2bb518b9c9f4cdc81c722ed6b9feafe5
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussY_3.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\GaussY_3.material
                                  • Size 779B
                                  • SHA256 fb92e5eec31dbd5730e9342da5180a7c23ddcfa8942f789c8b8c526da67932a5
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussY_4.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\GaussY_4.material
                                  • Size 779B
                                  • SHA256 b61a22b9d271e1d058e76221ef846283365658e4cda17a93fcda4c6f499f0833
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\blend.material
                                  • Size 746B
                                  • SHA256 05ba3353db47661e6b7cf8521191466427d0a7b2bc2890faf06b13814f998905
                                  • MD5 SHA1 SHA512 TLSH

                                  cameraRawAdjust.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\cameraRawAdjust.material
                                  • Size 1023B
                                  • SHA256 d4507227f59bad0e422c7956c179ccc77dbe52451c9b7a9698ec1eac3129904c
                                  • MD5 SHA1 SHA512 TLSH

                                  getGray.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\getGray.material
                                  • Size 683B
                                  • SHA256 67edd369889edda553a46a2d4da5e668e1858382221d3368b79cb0219b8ba7aa
                                  • MD5 SHA1 SHA512 TLSH

                                  guideFilter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\material\guideFilter.material
                                  • Size 741B
                                  • SHA256 6989e7a601a4291e4d2dc9ecb175691ebf08b1b46f4d23a2f777c43c1412e720
                                  • MD5 SHA1 SHA512 TLSH

                                  Quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\mesh\Quad.mesh
                                  • Size 1KB
                                  • SHA256 844c1880d87b789d86093af993c51d3f18f0c351b0adbd18e51cc85849d267d1
                                  • MD5 SHA1 SHA512 TLSH

                                  NewScreenRT.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\rt\NewScreenRT.rt
                                  • Size 548B
                                  • SHA256 0f766e970ee1bfbfd3317fd0baf2db8bc3da72db933070ce3eb657df7379d4a1
                                  • MD5 SHA1 SHA512 TLSH

                                  NewScreenRT_2.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\rt\NewScreenRT_2.rt
                                  • Size 548B
                                  • SHA256 a4bc50c05a7b74e1311c3db476e7c0b5374652cf1c6dfa9051b4db1081d4e096
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex1.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\rt\midTex1.rt
                                  • Size 489B
                                  • SHA256 f0d34f9273e84187b9aa07b8a66abc66570261c4301ec9957ce2b206a6800f29
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex2.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\rt\midTex2.rt
                                  • Size 489B
                                  • SHA256 c18bd4de4a7d442e98903cd6be07a9b8bdc29565b57f9f14ccd724dffa1ce560
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex3.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\rt\midTex3.rt
                                  • Size 489B
                                  • SHA256 af29c449a32dd70d3867c217dc5f62b7a15ba41366a8b11b01a225ab03204dbe
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex4.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\rt\midTex4.rt
                                  • Size 489B
                                  • SHA256 29612c9d3035d44a9a24d26663c30b32a1a842b7f32f667601570e7b0e02648b
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex5.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\rt\midTex5.rt
                                  • Size 500B
                                  • SHA256 48d71c2b5456fb1ba60922dba6259119cee37c6a3d2f8615c309a6296404560b
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\rt\outputTex.rt
                                  • Size 489B
                                  • SHA256 02ad81abb86d6f5a86addbc785901cde98ffc495ee6d25fec59de0f4c1d33767
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\sticker.config
                                  • Size 297B
                                  • SHA256 eb62bbf1d38cb3bdda35aa51ff5c68b72ecbecd151137121187a23a69674e145
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussX.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\GaussX.frag
                                  • Size 1KB
                                  • SHA256 0384e6b9c8b245aa05d595391b348a4b06a46fc2ba85d3dfc7cc2ea21fc1accb
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussX.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\GaussX.vert
                                  • Size 168B
                                  • SHA256 cf05efbf2e2640520fa59682c896f718000088d2e7cc83f07c224c813d30cad7
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussX.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\GaussX.xshader
                                  • Size 990B
                                  • SHA256 026d2c6857a07ca0bc9ab1238d21df89b2f069defaf922bca975bfe42f996e0c
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussX1.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\GaussX1.frag
                                  • Size 1KB
                                  • SHA256 3bd8a0bdda1a5d97038659d07ee83c08d45bcbdb8620996b7d8fed1fc4375d28
                                  • MD5 SHA1 SHA512 TLSH

                                  GaussX1.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\GaussX1.xshader
                                  • Size 991B
                                  • SHA256 c103e24cb7a9c85514392dec044e50be8fa0074a1d87197eb4306d3cf33cdeb7
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\blend.frag
                                  • Size 489B
                                  • SHA256 0e69608e65e285adeed451599783ea714ffacdca32454a113159579c0b038650
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\blend.vert
                                  • Size 282B
                                  • SHA256 a3dd0a14a9a48eb6a68b45de413c79a21134a3273ddca966cbf754f7b652fc0f
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\blend.xshader
                                  • Size 977B
                                  • SHA256 f788495ff65f560044c56287fb72cdaba53c415a587773702fbc498eaab406a9
                                  • MD5 SHA1 SHA512 TLSH

                                  cameraRawAdjust.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\cameraRawAdjust.xshader
                                  • Size 1KB
                                  • SHA256 1f2c82094a84b14066e6d93e7f4fa3e280614f370ccf297a28d23469e5c04e9f
                                  • MD5 SHA1 SHA512 TLSH

                                  cameraRawAdjustCore.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\cameraRawAdjustCore.frag
                                  • Size 8KB
                                  • SHA256 1aacd72f8b161cd6403d04f04f6746adf2df9863fbbc050fbf1cade49a0a816d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  getGray.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\getGray.frag
                                  • Size 234B
                                  • SHA256 e426d0ec442a009a3215e888bbcc8b99ca6308b8214d341dd4ad5a5b1ca305d8
                                  • MD5 SHA1 SHA512 TLSH

                                  getGray.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\getGray.xshader
                                  • Size 988B
                                  • SHA256 485ccbe9096f99af6f555aba5b0fafd93968af7ee0161bb228d55e817fcb14bc
                                  • MD5 SHA1 SHA512 TLSH

                                  guideFilter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\guideFilter.frag
                                  • Size 540B
                                  • SHA256 cbcbb33a2dcd5035b08aee178418020af2d449fc4eb8fcd759d53526283024d7
                                  • MD5 SHA1 SHA512 TLSH

                                  guideFilter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\guideFilter.xshader
                                  • Size 989B
                                  • SHA256 fce73b91ec527c7d950398d89e7afea52427f3fb3f6707b72cca647143baffe5
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\config.json
                                  • Size 301B
                                  • SHA256 4bc63e05cceae3dc77256818d2996f74f4177a63c2715dc9b7d077b0c87e0c8b
                                  • MD5 SHA1 SHA512 TLSH

                                  NewScreenRT.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\NewScreenRT.rt
                                  • Size 569B
                                  • SHA256 b0c05fd5785fb5ee51e8c6660de87496ef78cd17d09f8f91d067a8d19100a97e
                                  • MD5 SHA1 SHA512 TLSH

                                  NewScreenRT_2.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\NewScreenRT_2.rt
                                  • Size 569B
                                  • SHA256 3189e4c0600fd795fb7ecd64edd85cc79daefc64990270fa6eed0e30765dd981
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex1.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex1.rt
                                  • Size 510B
                                  • SHA256 988efa227c672c6777ef5309a997681556fe4d4bae09b57b5c224c4af8de7378
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex2.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex2.rt
                                  • Size 510B
                                  • SHA256 24b81322a7a5938f72d77dcd98d4d3ecae808f710e040f11746debe7dfa41d9e
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex3.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex3.rt
                                  • Size 510B
                                  • SHA256 e93def3db002de84dfaa6f9f4ea1b8e28944f417cde35b1a14ed5375fba0d44b
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex4.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex4.rt
                                  • Size 510B
                                  • SHA256 c0e1b493f8a10903083b406a3b767c152e1d72715a30d1f6264ec35cc35e8d58
                                  • MD5 SHA1 SHA512 TLSH

                                  midTex5.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\midTex5.rt
                                  • Size 521B
                                  • SHA256 95dc090b3cbf6abd6338336110e12cee49099d8ec9dbc7d38872abe40ec1676f
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles3\AmazingFeature\rt\outputTex.rt
                                  • Size 510B
                                  • SHA256 bc45c371bc37fa2003214b0496442f7998f7e3d9f9abdf6cd99e14b31484cf6e
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\lua\ImageBusinessSlider.lua
                                  • Size 1KB
                                  • SHA256 52deeb83842e3811c8eb8067449d3f29a85253df6621699b92af26bd73878ba0
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\lua\SeekModeScript.lua
                                  • Size 2KB
                                  • SHA256 e906ec75a242f169d1cba39244f1f12b74a9e370be150f6f26c55691d4280dae
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen\amazingfeature\content.json
                                  • Size 364B
                                  • SHA256 ce62b0d9c708fc5757341114fb08dff9a7140c570f5a5a7999c6b85b3aade44f
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen\amazingfeature\material\filter.material
                                  • Size 516B
                                  • SHA256 cc56f4312bf54b6ce7f00284d543c359457d43bbefbf8a6e86747042c39d698e
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen\amazingfeature\rt\outputTex.rt
                                  • Size 324B
                                  • SHA256 dd8e2aba52925a50a1cbb534780603bb536191830ae22b985cb7ae90430b8d18
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen\amazingfeature\xshader\filter.xshader
                                  • Size 740B
                                  • SHA256 b02252eec8e7a3b0d7ad727127e689cc2a8acf45421b85545063566685120cb4
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen\amazingfeature\xshader\gles2_filter.frag
                                  • Size 1KB
                                  • SHA256 9163138081839a398d143ec6846aa6a9025cd8754c19274ce860d9a5f4e65622
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen\config.json
                                  • Size 259B
                                  • SHA256 1ec1b0b34fcb2bc4d911d9708c052d9a289f8dd3c9aacad11613763d43864e9a
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\content.json
                                  • Size 124B
                                  • SHA256 bbd0569a9da80de14e90a699cc6ae4c4ca1f2da3d537039bc631a97093ac4534
                                  • MD5 SHA1 SHA512 TLSH

                                  lua-meta.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\lua-meta.json
                                  • Size 1KB
                                  • SHA256 3c2cde7d73f69ae2184f3b5ed0e9d06babd5beca0d336dbe86ce2abbc3723f69
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\lua\SeekModeScript.lua
                                  • Size 3KB
                                  • SHA256 437edc9ba75638eaf6feac90d19b0ee73102727f4a604ef2b1ce07cb28acaee1
                                  • MD5 SHA1 SHA512 TLSH

                                  graphBuild.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\lua\graphBuild.lua
                                  • Size 5KB
                                  • SHA256 5ecda7a02e33e5ac497aeb170f1abd15914bd71433d0c18cc888eb0b6d0d8270
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  renderChain.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\lua\renderChain.json
                                  • Size 243B
                                  • SHA256 99716cfc2ffb61e843f07ca9427c0ac8c148049f1bdcf43aa02a807656092d40
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\main.scene
                                  • Size 2KB
                                  • SHA256 857387773d3525a20f0422dbcf6f2567abf6ccc38237111d41af04a42e612523
                                  • MD5 SHA1 SHA512 TLSH

                                  Quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\mesh\Quad.mesh
                                  • Size 1KB
                                  • SHA256 ebaed63ce0d00b283a1c7bafa79726422cdfee1060202ec3daa378171c2566dc
                                  • MD5 SHA1 SHA512 TLSH

                                  sharp.prefab

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\prefabs\sharp.prefab
                                  • Size 825B
                                  • SHA256 0ce134df1385828d13ecb44737171f829ace89430da2b5eb3b5eecfec87f5246
                                  • MD5 SHA1 SHA512 TLSH

                                  fshader.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\prefabs\sharp\fshader.frag
                                  • Size 2KB
                                  • SHA256 359eb5ebfe4ab515af006b199eb9bb8537f84111c23bcd3115308f65d4dbe61f
                                  • MD5 SHA1 SHA512 TLSH

                                  material.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\prefabs\sharp\material.material
                                  • Size 750B
                                  • SHA256 5bc6691646288cbd0882bd176173c84b32c6c69e6448a18093a9b76d14aa7a2e
                                  • MD5 SHA1 SHA512 TLSH

                                  xshader.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\prefabs\sharp\xshader.xshader
                                  • Size 1KB
                                  • SHA256 9e595d7a5acf47b3284b620e46308a12b659f3de062a87370428e8579b9ec950
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\rt\outputTex.rt
                                  • Size 567B
                                  • SHA256 40a65c8c4212ee5eabb4189cbc1cedf772ef68e08b214cda850dd6499302641c
                                  • MD5 SHA1 SHA512 TLSH

                                  algorithmConfig.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\algorithmConfig.json
                                  • Size 110B
                                  • SHA256 71533a85ef48d9b7c060b1c4b9670d47673637627d03f5081a77449e801d2d6e
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\config.json
                                  • Size 203B
                                  • SHA256 17c3ab8c20f227633ce565eff6dadcf5c5436280c6963cababff65fa782f4667
                                  • MD5 SHA1 SHA512 TLSH

                                  extra.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\extra.json
                                  • Size 311B
                                  • SHA256 39894c5995a682b953bd192fe8cb4a97f0e34e5381a806fda94be33d309eccc4
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature\amazingfeature\content.json
                                  • Size 368B
                                  • SHA256 24f49d01db40c6798d6155a1754f477698b3cb6cfc7f862174f30972f2b5d481
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature\amazingfeature\material\filter.material
                                  • Size 534B
                                  • SHA256 c9f2db499cd48d80639bdaa1b01a6de271d9028dc03a05e116c04b60684a1489
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature\amazingfeature\rt\outputTex.rt
                                  • Size 324B
                                  • SHA256 2fd5492217aa85ab5345516a10063cd833accbbd6eb512858ce3f006271882c9
                                  • MD5 SHA1 SHA512 TLSH

                                  temperature.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature\amazingfeature\texture\temperature.texture
                                  • Size 14KB
                                  • SHA256 f014dd7d73d2030097c5a91012345f037c91660f359e8edba42f8908b93924de
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature\amazingfeature\xshader\filter.xshader
                                  • Size 740B
                                  • SHA256 537f2e303dd80f83f5567237eb98e8851c866adee1da5737c0e857adc98fe6ea
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 a7afcfe420ac627d27588a22e6beaf136e380d908dc1e28b40b1f9ddfd254980
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature\config.json
                                  • Size 263B
                                  • SHA256 9af5c27327c816668e8eaceac357f266aee78c2a060e1ccd35df6472933c8a69
                                  • MD5 SHA1 SHA512 TLSH

                                  LuaRTTI.MarkGen.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\LuaRTTI.MarkGen.lua
                                  • Size 166B
                                  • SHA256 425a0804076088345fabf8527182630f4886d04f185f02715191da72b50c0c6c
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\content.json
                                  • Size 130B
                                  • SHA256 18d1cebf5ba1d4f2d8a41aaa12117f908c13aca621c2d2bee44a272b19431428
                                  • MD5 SHA1 SHA512 TLSH

                                  lua-meta.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\lua-meta.json
                                  • Size 3KB
                                  • SHA256 638db9d286716cc0220a963bc43d46595b0f072255dd5971f220a1a67098ecc1
                                  • MD5 SHA1 SHA512 TLSH

                                  Lscript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\lua\Lscript.lua
                                  • Size 7KB
                                  • SHA256 de7be4d75eafe542a26c51be57c99712fc52e25459ee611f02e13f0cf31d10e2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\main.scene
                                  • Size 2KB
                                  • SHA256 a9d4b06d4eafca0dda1d409d9105fb73faa6122147eeabdd1716080eef229558
                                  • MD5 SHA1 SHA512 TLSH

                                  noface.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\material\noface.material
                                  • Size 692B
                                  • SHA256 8539040a84f693475dc16c925354935bc85cd485562befb7ced1ad1cb52d1ced
                                  • MD5 SHA1 SHA512 TLSH

                                  Quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\mesh\Quad.mesh
                                  • Size 1KB
                                  • SHA256 119e2e9f016877f83c4f7c91aa23614387189cd19d8a9098b5de338f5e0df38f
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\rt\outputTex.rt
                                  • Size 567B
                                  • SHA256 8cd4b0db123b2babd506e58a78020adc44f248cffeaaf0e819451807ad94bf9b
                                  • MD5 SHA1 SHA512 TLSH

                                  noface.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\xshader\noface.xshader
                                  • Size 1KB
                                  • SHA256 06de6e75308dc5b8451a2cf7e3109ca2262e144fa4014bc7706dc2f7fcac7f55
                                  • MD5 SHA1 SHA512 TLSH

                                  quad.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\AmazingFeature\xshader\quad.frag
                                  • Size 426B
                                  • SHA256 bcc5381a8f23a56eff9c2004d9ec11d9f8e1560e7d9f7677ecfbf902934bad00
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\temperature_tone_v2\config.json
                                  • Size 338B
                                  • SHA256 474a9d95cb7bc887cc2ac7324648a336e80d63976b76b21e3ff33f710f034b2d
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone\amazingfeature\content.json
                                  • Size 361B
                                  • SHA256 820428a1737b6d755682657c88c964ba9ecb0f91e69c746d9381f82fa77dbdee
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone\amazingfeature\material\filter.material
                                  • Size 526B
                                  • SHA256 4a0c785540ea11f5a8dec5d7478534ee05f353ead563de4c27a3bc951e049253
                                  • MD5 SHA1 SHA512 TLSH

                                  hue.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone\amazingfeature\texture\hue.texture
                                  • Size 11KB
                                  • SHA256 a7dfeeaa0bef9897e8219afd2c2e4e7925f2ae10ae95af05a8c50e80a0418340
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone\amazingfeature\xshader\filter.xshader
                                  • Size 740B
                                  • SHA256 f9289fc27ef441896a49d19c58413a6c45dfa0ba1016da3018fe1fc1007aab33
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 f6c56db1a583f5768e8499c4c9c51feaedd5c12a37db84eeb96bcf0b02f7c956
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone\config.json
                                  • Size 256B
                                  • SHA256 b57b933c9a505ba7d6351672147d522996a0124180156bfdf19705a0d8b93a74
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\content.json
                                  • Size 831B
                                  • SHA256 e5bfc056ec385d291d4c7b48b0e1ab81a7c0b501ff9ac9e579d48b9a75d3a652
                                  • MD5 SHA1 SHA512 TLSH

                                  hue_max.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\image\hue_max.png
                                  • Size 5KB
                                  • SHA256 fccecfed516ff5e6b9d9ac452d49ee803491ea070f2550e99ab68f6c5bad4205
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  hue_max.png.meta

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\image\hue_max.png.meta
                                  • Size 454B
                                  • SHA256 7853dfb08afcfe3ed11cc7a44cfd36835aa5282b13876d7759504465eceaf5d4
                                  • MD5 SHA1 SHA512 TLSH

                                  hue_min.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\image\hue_min.png
                                  • Size 5KB
                                  • SHA256 3c3533d27000205a9dd996efab0d29876db7ade008347ed63dc3f13c9bafab66
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  hue_min.png.meta

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\image\hue_min.png.meta
                                  • Size 455B
                                  • SHA256 41eb9dc9c4de53d258e3d30ba19e378126cf37cf8575010df92e7dc3d3140422
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\main.scene
                                  • Size 2KB
                                  • SHA256 127ab3c35a4b286a91473040e78b1ed9ff1e87efee25c16c108d0905724cfa6e
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\material\filter.material
                                  • Size 745B
                                  • SHA256 472509084119a4e16bf5b791cb8983537e86d915255bdf33185c3155d55bee5e
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\rt\outputTex.rt
                                  • Size 761B
                                  • SHA256 5cfc09a53d1120b811be0e547ed8d93742737806ea26f0f544b778b5eae3d6fd
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\xshader\filter.xshader
                                  • Size 1KB
                                  • SHA256 1161539b96bbbb23c5a8e747cedf75d28589bb25f51fb226d6c95e3fdc50df40
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\xshader\gles2_filter.frag
                                  • Size 2KB
                                  • SHA256 516963384855c94478abbfdddbcd88ff4f9a232d868f75f76751489fef810762
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting\amazingfeature\content.json
                                  • Size 829B
                                  • SHA256 b39cca0b9ad8fa8cb2208d743cd2db7749d52cb7ce02fd902edb1f0ae0fa00e6
                                  • MD5 SHA1 SHA512 TLSH

                                  anjiao.png

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting\amazingfeature\image\anjiao.png
                                  • Size 36KB
                                  • SHA256 ac8aaa8bbb406255adc7c649de92fa75ec424ff2280d98a7885f457b7d928c38
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting\amazingfeature\main.scene
                                  • Size 2KB
                                  • SHA256 e301ac89ed2a3d0065ad332fb766e4171796ca9204f226663a6a63f6c4bcfa28
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting\amazingfeature\material\filter.material
                                  • Size 666B
                                  • SHA256 bbeb09b8b2624e8021f218fb8bf2c4eb1697b64cc55585ce754c7ca85bd14615
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting\amazingfeature\rt\outputTex.rt
                                  • Size 762B
                                  • SHA256 3ef9eb627e5247b476e73c2e4e1d9e0b7f6932fa6f43b8807677e3f2437cd197
                                  • MD5 SHA1 SHA512 TLSH

                                  filter.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting\amazingfeature\xshader\filter.xshader
                                  • Size 1KB
                                  • SHA256 01155b0c16b9a789e0b01c71a7f2459268fd014cf3a501d977d4fc0a21bc56fd
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting\amazingfeature\xshader\gles2_filter.frag
                                  • Size 11KB
                                  • SHA256 7747704b9b71e1912aeebeb3a3a8d11b7017f26accbb729ed68fb5cfc4db9d65
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting\config.json
                                  • Size 261B
                                  • SHA256 b53dd4a8effda1eb9ee62b15b3f7a569c154d8a670cf21060def120904849184
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\ImageBusinessSlider.json
                                  • Size 150B
                                  • SHA256 f7774adaefdb7ec88e5798ffdbbc7bb6a32f9ed772e0daa5f519780e5fe09a56
                                  • MD5 SHA1 SHA512 TLSH

                                  algorithmConfig.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\algorithmConfig.json
                                  • Size 455B
                                  • SHA256 aa0c76370fb25498520aa44384a322d0da101a27cd1d922038de0daad58002f1
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\content.json
                                  • Size 131B
                                  • SHA256 888469310393d99b657309e0f40f388ab6533f1191e01cc57ed81d91dd917624
                                  • MD5 SHA1 SHA512 TLSH

                                  lua-meta.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\lua-meta.json
                                  • Size 4KB
                                  • SHA256 8025a5dffd695fafaaa4265a15187fc7ab253ff19836f3afc891c462035583dc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ImageBusinessSlider.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\lua\ImageBusinessSlider.lua
                                  • Size 778B
                                  • SHA256 4c022320fa398b3099f892bf637b49b319460ccb1741687301825801aa26617a
                                  • MD5 SHA1 SHA512 TLSH

                                  SeekModeScript.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\lua\SeekModeScript.lua
                                  • Size 3KB
                                  • SHA256 c0286f477acdade4c4626b5469f55537f6d3f0b79357dc90f2d1f66899ed47bc
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\main.scene
                                  • Size 2KB
                                  • SHA256 33525fca5c3a5acad1976f4e738a8805db47040e78f1c687f8fefea9922d0f7d
                                  • MD5 SHA1 SHA512 TLSH

                                  Sprite2D.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\material\Sprite2D.material
                                  • Size 708B
                                  • SHA256 d6b9adacbfd392597acf1d43bf613aa52b5e23c40b59f8924f5000e839258b77
                                  • MD5 SHA1 SHA512 TLSH

                                  dark_angle.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\material\dark_angle.material
                                  • Size 711B
                                  • SHA256 a72a9f6a64a6f255ed0e3c7cc1d946c250bba3f86fea6ead4fe67333fdeb6a9a
                                  • MD5 SHA1 SHA512 TLSH

                                  noface.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\material\noface.material
                                  • Size 712B
                                  • SHA256 69d791fd6d6303f35d36b9125c0ab41474d8e5a53ee2353fabdb469f4a3d2dad
                                  • MD5 SHA1 SHA512 TLSH

                                  Quad.mesh

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\mesh\Quad.mesh
                                  • Size 1KB
                                  • SHA256 2797834f059352ac54806f4b13ad63f32dba3893df516c70a884d95c0647dae7
                                  • MD5 SHA1 SHA512 TLSH

                                  outputTex.rt

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\rt\outputTex.rt
                                  • Size 546B
                                  • SHA256 05fc516c5f5c8e128b1b211ea09c9f2962c5c8412bd8db8e9e34b54a1d0cd171
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\sticker.config
                                  • Size 276B
                                  • SHA256 d4b124462c899c0197cf029e0dd0be5e73dab2b755003b330c2b94cb5e1c2eed
                                  • MD5 SHA1 SHA512 TLSH

                                  Bow0.texture

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\texture\Bow0.texture
                                  • Size 10KB
                                  • SHA256 c8c0fd082c3b87ea2fad1a5b2bdc26fe426fab5944f01be46cf7870ab02e2cad
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Sprite2D.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\xshader\Sprite2D.xshader
                                  • Size 1KB
                                  • SHA256 72ef0da3d6a8d638981b0618d366a7eb3c7c8ecb9f30889591de483a980c2c3f
                                  • MD5 SHA1 SHA512 TLSH

                                  dark_angle.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\xshader\dark_angle.frag
                                  • Size 1KB
                                  • SHA256 c6c0a0a713a2e7a5b4852cecf0e39199318838a2859ab22aa7927835c8ce068a
                                  • MD5 SHA1 SHA512 TLSH

                                  dark_angle.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\xshader\dark_angle.vert
                                  • Size 248B
                                  • SHA256 4245e1d0bdc811a9fca40021448b1ecba10036e851a24a970f99f3df6a65dc5c
                                  • MD5 SHA1 SHA512 TLSH

                                  dark_angle.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\xshader\dark_angle.xshader
                                  • Size 1KB
                                  • SHA256 eeee6ac93d7f36735198e8bbd1e582da459dd95f614e995b5ec62b4f8a9e4b9b
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_bvcwvg.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\xshader\gles2_bvcwvg.vert
                                  • Size 256B
                                  • SHA256 1abd6421f35467b621f7d5f84c95a5276d1494c984a61e9fd59e27afd60f80e6
                                  • MD5 SHA1 SHA512 TLSH

                                  noface.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\xshader\noface.xshader
                                  • Size 1KB
                                  • SHA256 f0ff82b903c593479505877414d7397160adb28d38161aaef7689dbed52e8f21
                                  • MD5 SHA1 SHA512 TLSH

                                  quad.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\AmazingFeature\xshader\quad.frag
                                  • Size 135B
                                  • SHA256 33bd697c8bbad3886238e15090a173ca758556eca672f4c462fb3690f6dbc3ce
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\DefaultAdjustBundle\vignetting_v1\config.json
                                  • Size 300B
                                  • SHA256 2ad0266794ea1645be22c425e05f958b4a032bccaff48ce0fbe168673d73adbf
                                  • MD5 SHA1 SHA512 TLSH

                                  seguiemj.ttf

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Font\Effect\seguiemj.ttf
                                  • Size 2.0MB
                                  • SHA256 7c0244dd8eeb7c6bdecdfc3f9e59833527fc18a66d0295ce47339069692a2b4f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  en.ttf

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Font\SystemFont\en.ttf
                                  • Size 103KB
                                  • SHA256 2fd497e00a1c25e497911cb9df64b7459fd87853f94879d5ed0fef8c32e138c0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ja.ttf

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Font\SystemFont\ja.ttf
                                  • Size 1.8MB
                                  • SHA256 af930a40372754b0946d21489c7186f1b379b7263fdd07ac241ee8ad1dc68162
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ko.ttf

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Font\SystemFont\ko.ttf
                                  • Size 3.2MB
                                  • SHA256 f3a7a7fc4d00b8ff12a944220a1643cfc337349b273b018dd89348dd5f0875f4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  th.ttf

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Font\SystemFont\th.ttf
                                  • Size 76KB
                                  • SHA256 1b7ed3a7c113af30ee07432fda6d4565ad50e4c795f38640480d7cff98be8c46
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  zh-hans.ttf

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Font\SystemFont\zh-hans.ttf
                                  • Size 1.6MB
                                  • SHA256 7d35517b8f48a9297dde75aefcf8a69c7020b0f87017df8e8ba0b0a04660243d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  zh-hant.ttf

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\Font\SystemFont\zh-hant.ttf
                                  • Size 3.4MB
                                  • SHA256 88ce21231b3dde4b28e0aa3e0e19f3ea7f94093b0fd6dc2d34ca9c0522b363de
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\042aa15b71b1e17bca0bd928eec6fba7\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 93b745e85efe46609727ca11c9b46cc91d2dc3308529b23c130cef9235ad7fa1
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\420c92a2b480dc8e402d9269a5f83515\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 f78ca8297457cc2124140f8e059d2cea9693a2338f7a570c069cf24e84a25be2
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\655f3590dd07ece41209fb312348ffe9\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 8a1d73ae3702e610344ad18b9c99c5bd4126c4ecc61bc0fd5195eac43b57b8ca
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\8001e07eefc5d8b69572b977ca14bef9\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 dd40215f9d7faa0132edf63447c73d8724b5716e8ffec71208f6df4160f0275a
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\840ca85a1a33e6fc3ea78bbdb2db8f60\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 2c20c0d47c8d6630254a7c484f761db577dd652fa6b007db73438a9e8603d971
                                  • MD5 SHA1 SHA512 TLSH

                                  MixMode.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\MixMode.json
                                  • Size 2KB
                                  • SHA256 ad19693613adcaf33e528b89ac1b96ae92e44807ed968b97cecf9e88e1497b71
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\b0e90c43dc266a317b05b0cd3ca5bfba\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 2f984f08311ace66b7b663e2633b9f3f307b13196cc6364f00550337bbfb5de9
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\b76087cda4833f553cf09e82fb81c463\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 9db4bae31042da8d4fcf645c41dc6368a12754f9bd3c6f0946e9679419013f30
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\d9c1d4ca7ab91df4f48d12b339f2da88\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 3941be973ca518143a688025a39fbeab3b8b97ed2420f16c8cf593c4277a2d5a
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\e6a48579910dfe831ba53a6acc6737f9\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 ec326738f3f48d5bf72b4e08e9d7622ac7cca41e62f74c8b497774f2594e6ffe
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\MixMode\f979dd10def50fad3ffb77c7f0df3db7\xshader\blend.frag
                                  • Size 1KB
                                  • SHA256 df05ff41e9dc5ed9db415ec8e48ac942e8147fee10402fa75396a163676cf3fc
                                  • MD5 SHA1 SHA512 TLSH

                                  ImageBusinessSlider.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\areaLocked\AmazingFeature\ImageBusinessSlider.json
                                  • Size 35B
                                  • SHA256 b408c5a3949a0a77bacbc934e82ced44e25db3491c54a891be064158592810cf
                                  • MD5 SHA1 SHA512

                                  gles2_yvsong.frag

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\areaLocked\AmazingFeature\xshader\gles2_yvsong.frag
                                  • Size 144B
                                  • SHA256 f5ce442c91816b0672f108d392357df34ac744da80704f8f2680aae1c53d797c
                                  • MD5 SHA1 SHA512 TLSH

                                  bt_espresso_mobile_offline_v1.4.model

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\audiosami\bt_espresso_mobile_offline_v1.4.model
                                  • Size 385KB
                                  • SHA256 0d934d44539a3de7e91a10444b7c8662fea4da704cb5d97d590d7b9bec67e41e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  lost-material.jpg

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\lost-material.jpg
                                  • Size 68KB
                                  • SHA256 c7c1b6f473043e6dac39830efcee95a1dc94973dc70d0a4fd2dbfdef30802544
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tt_matting_big_v15.0.model

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\models\mattingmodel\tt_matting_big_v15.0.model
                                  • Size 202KB
                                  • SHA256 99d906057972c82ac24c3558ae114d5dee000b7abc1b8b38de9bb22d8a7bf9ee
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tt_face_extra_fast_v14.0.model

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\models\ttfacemodel\tt_face_extra_fast_v14.0.model
                                  • Size 451KB
                                  • SHA256 e172e7c7b2b72a27d11675671e36ad8d278eb9e25c6eccebeb06dd6d7f41fac5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tt_face_extra_v14.0.model

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\models\ttfacemodel\tt_face_extra_v14.0.model
                                  • Size 562KB
                                  • SHA256 cb3271ce78a35fcc0412bff8a376879ed9199e6e69f2911f698f8ea37e6ba0d2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tt_face_v11.0.model

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\models\ttfacemodel\tt_face_v11.0.model
                                  • Size 889KB
                                  • SHA256 b69d155269d202cbdce46e4b7da209b687048d1db08484398a352630c712bcd3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tt_face_v11.1.model

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\models\ttfacemodel\tt_face_v11.1.model
                                  • Size 867KB
                                  • SHA256 c4b081d04f6829f7cd5849abca0941891f1a7f2cb250efd7f0e42fece5426610
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tt_fsnew_base_jianying_v2.0.model

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\Resources\models\ttfacemodel\tt_fsnew_base_jianying_v2.0.model
                                  • Size 1.3MB
                                  • SHA256 71d025fc4c74e8989c43f4117dce05b0042808c6addd1e5f654780750cbe256b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  VEDetector.exe

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\VEDetector.exe
                                  • Size 3.2MB
                                  • SHA256 1aff4c8eb76dd66a2b9e5c39fe01df0c0ed3912abf9862b0e098c9355d43b09b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  parfait_crash_handler.exe

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\parfait_crash_handler.exe
                                  • Size 606KB
                                  • SHA256 91f8b6becfb867a1d0acb4113086f47d85834a6aa78fa9420dcf6bc4d06fd71e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ttdaemon.exe

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\1.5.0.230\ttdaemon.exe
                                  • Size 252KB
                                  • SHA256 7de1031938dab39df352e4a2d61a337222b8dbb36b58ceae4a6bf4133a718c6d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  quicktooling.qmltypes

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\QtQuick\tooling\quicktooling.qmltypes
                                  • Size 215B
                                  • SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
                                  • MD5 SHA1 SHA512 TLSH

                                  scene.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\fade\amazingfeature\scene.config
                                  • Size 284B
                                  • SHA256 5b405fa29439f5853937c9714c794f10a01ed033f81866ba52f7f8ea5312b41e
                                  • MD5 SHA1 SHA512 TLSH

                                  Transform.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\Transform.lua
                                  • Size 743B
                                  • SHA256 f5ae7d270c41dc064723acb52c96339337d142f327ed98591ebb52c9518a2a78
                                  • MD5 SHA1 SHA512 TLSH

                                  main.scene

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\main.scene
                                  • Size 1KB
                                  • SHA256 b97663892b4a96ac2b5888965086c8e6e037e962a76f38529f8471d8b4e7dbad
                                  • MD5 SHA1 SHA512 TLSH

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\sticker.config
                                  • Size 243B
                                  • SHA256 6f8d212c18569ba0e1c3b1bc89c8c4b2a16377d94cc26d1d78df1bb920efe379
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\highlight\amazingfeature\xshader\gles2_filter.vert
                                  • Size 215B
                                  • SHA256 ff67b00d9d13e6ab219c94e61e36ad43f1e025d4e3f540f14a6ff26b1b7e8dbf
                                  • MD5 SHA1 SHA512 TLSH

                                  lua-meta.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\hsl\HSL\lua-meta.json
                                  • Size 2B
                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                  • MD5 SHA1 SHA512

                                  sticker.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\particle\amazingfeature\sticker.config
                                  • Size 258B
                                  • SHA256 9c9ba3ebe0c06582ce05df7831d4754061d2ed7c7e3ad6acaaaa563f7bbf7d2f
                                  • MD5 SHA1 SHA512 TLSH

                                  gles2_filter.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\particle\amazingfeature\xshader\gles2_filter.vert
                                  • Size 204B
                                  • SHA256 add8f8c4c8e970dcdbe6ca1ab7180f7124cafc4e5dd909d8b0d7cf1734b3409e
                                  • MD5 SHA1 SHA512 TLSH

                                  guideFilter.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\shadow_highlight_v2_gles2\AmazingFeature\xshader\guideFilter.vert
                                  • Size 245B
                                  • SHA256 fb3e9e7a966147cc5cb48b1a087931bfbdea744a0d0e0def0f07070ba48a73cc
                                  • MD5 SHA1 SHA512 TLSH

                                  LuaRTTI.MarkGen.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\shadow_v1\AmazingFeature\LuaRTTI.MarkGen.lua
                                  • Size 222B
                                  • SHA256 cf4f8b5ff1a50eff88236aba7f9bb48e696d337b779d98e911d00f6876800503
                                  • MD5 SHA1 SHA512 TLSH

                                  fshader.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\sharpen_v1\AmazingFeature\prefabs\sharp\fshader.vert
                                  • Size 171B
                                  • SHA256 eaf495d1de3a920ca4f87e5bfe868a822d1ac05ae9f8d10651d60a382ecdd1b7
                                  • MD5 SHA1 SHA512 TLSH

                                  Transform.lua

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\DefaultAdjustBundle\tone_v1\amazingfeature\Transform.lua
                                  • Size 716B
                                  • SHA256 4e4b7c19259ebab2fbe29d179122a20584b783f12632bfc2d214d82e522c303b
                                  • MD5 SHA1 SHA512 TLSH

                                  scene.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\LogWheel\Wheel\scene.config
                                  • Size 363B
                                  • SHA256 468a132a03b8569130faf2c5d8e0f05f3f7602a336b0510534026c11a73ab460
                                  • MD5 SHA1 SHA512 TLSH

                                  anim.prefab

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\MixMode\8001e07eefc5d8b69572b977ca14bef9\anim.prefab
                                  • Size 477B
                                  • SHA256 e9d87f8022efa9374e74d61c310d8bc11a98925b8d2e771ab75e1b865164c02e
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.material

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\MixMode\8001e07eefc5d8b69572b977ca14bef9\blend.material
                                  • Size 552B
                                  • SHA256 e8986f58f72446435468272d8d4e7c95a4fce58b3ad4838ed634b999196d3736
                                  • MD5 SHA1 SHA512 TLSH

                                  config.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\MixMode\8001e07eefc5d8b69572b977ca14bef9\config.json
                                  • Size 64B
                                  • SHA256 07232ba6befad39df9079b18e7c66235a11b2b375626c80cabd0b46f9b7d948f
                                  • MD5 SHA1 SHA512 TLSH

                                  content.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\MixMode\8001e07eefc5d8b69572b977ca14bef9\content.json
                                  • Size 65B
                                  • SHA256 424c068d0f0e848d3b8f25ec1a55f1086df3c87ad95eca13fe6b265c46400fc0
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.vert

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\MixMode\8001e07eefc5d8b69572b977ca14bef9\xshader\blend.vert
                                  • Size 283B
                                  • SHA256 2719896bc6ff9ed2ff5532a937ac685668479e4bcd19ef11ed708cdbf52c2fd5
                                  • MD5 SHA1 SHA512 TLSH

                                  blend.xshader

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\MixMode\8001e07eefc5d8b69572b977ca14bef9\xshader\blend.xshader
                                  • Size 726B
                                  • SHA256 a1a1915919f200668689f83694e4fb7b6bba2e3ff6cc2bacc7b84d36b7c48fc0
                                  • MD5 SHA1 SHA512 TLSH

                                  algorithmConfig.json

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\20261012003721054_1\JYPacket\1.5.0.230\Resources\PrimaryWheel\Wheel\algorithmConfig.json
                                  • Size 382B
                                  • SHA256 28251cedc501cb7285fe4c06af3714af3ec068834cc15c1ddcd913f91572ace0
                                  • MD5 SHA1 SHA512 TLSH

                                  CapCut.exe

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\CapCut.exe
                                  • Size 1.5MB
                                  • SHA256 03ca561168a8b7bf43b69d9f7d487709637417835422ac85b239ca4b09a6a64b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ProductInfo.xml

                                  • Path C:\Users\Admin\AppData\Local\CapCut\Apps\ProductInfo.xml
                                  • Size 169B
                                  • SHA256 0f31aa7c8e70b99b6db6703f79c982f2662eb42a5e2ae2aa03b2f8cac09214f1
                                  • MD5 SHA1 SHA512 TLSH

                                  temp-index

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\CEF\Cache\Code Cache\js\index-dir\temp-index
                                  • Size 48B
                                  • SHA256 60906ca47c538d4aecef2e3603a69b38aa36ee1997a0e650b12f1c50dd01884a
                                  • MD5 SHA1 SHA512

                                  DeviceRegister

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\DeviceRegister
                                  • Size 27B
                                  • SHA256 051ce45c8ec8bc8259a2970669735ce4aa4e4ae981a9ed6129563739b30486d5
                                  • MD5 SHA1 SHA512

                                  AppStoreRating.ini

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\Modules\AppStoreRating.ini
                                  • Size 75B
                                  • SHA256 f8b1fc2564f5d9f60e3abc3acc5a9c3c7822aac93352c1a6457756a58d500789
                                  • MD5 SHA1 SHA512 TLSH

                                  UserInstallInfo

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\UserInstallInfo
                                  • Size 36B
                                  • SHA256 bbe052d1a0c35e2ba976a0d48cef2df9cbd9923fd4d32ddcfde03efa858c9de1
                                  • MD5 SHA1 SHA512

                                  agency_dispatch_config.ini

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\agency_dispatch_config.ini
                                  • Size 50B
                                  • SHA256 c734656d8a1c51d1c82960135699b88a89debbab5b1edcc6db3de76cb3dcb757
                                  • MD5 SHA1 SHA512 TLSH

                                  buriedPointLogCfg

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\buriedPointLogCfg
                                  • Size 26B
                                  • SHA256 6561d3ca6cd3c5b619c318c98b0982eeb111d5276b8832748a3649b6237f8c2a
                                  • MD5 SHA1 SHA512

                                  channel

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\channel
                                  • Size 35B
                                  • SHA256 6c9dcc12b4a769d50a0485e0dc696718055ba512d40fc1e4e5d49aac83c902a7
                                  • MD5 SHA1 SHA512

                                  commonSetting.ini

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\commonSetting.ini
                                  • Size 58B
                                  • SHA256 e973945f2dfba15d969784b31f2b585233dd253e5e39ce34e196b530de5edbaa
                                  • MD5 SHA1 SHA512 TLSH

                                  commonSetting.ini.JaeFaP

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\commonSetting.ini.JaeFaP
                                  • Size 82B
                                  • SHA256 9d83396d48b63ede3c376781283f562352ce2d526d1d970b68b306aa525ad4bd
                                  • MD5 SHA1 SHA512 TLSH

                                  effect_ab_conf.ini

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\effect_ab_conf.ini
                                  • Size 91B
                                  • SHA256 72fb06aaee0e1da9192e7979b6b65afde79b96fc8598cd77d234976e3c412f7a
                                  • MD5 SHA1 SHA512 TLSH

                                  globalSetting

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\globalSetting
                                  • Size 1KB
                                  • SHA256 98a1986137897d398dfbad38d13cb8df3b6ad3236ca9b533d591ab40ea30b013
                                  • MD5 SHA1 SHA512 TLSH

                                  globalSetting

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\globalSetting
                                  • Size 23B
                                  • SHA256 74787607b908778cbffd6072f051ffa8ec00667e9b712da67df448f3f6daecda
                                  • MD5 SHA1 SHA512

                                  globalSetting.UOUWhR

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\globalSetting.UOUWhR
                                  • Size 1KB
                                  • SHA256 8550d4deda550d690a0e2c46fe5269e04cc64c2b6392a2eea62ea5320d458140
                                  • MD5 SHA1 SHA512 TLSH

                                  globalSetting.iARLyH

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\globalSetting.iARLyH
                                  • Size 1KB
                                  • SHA256 b4e4992c6365345321c9d1c6c043048b3d495e84ae14bc8146f25f4aedfaca84
                                  • MD5 SHA1 SHA512 TLSH

                                  gpuSupport.ini

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\gpuSupport.ini
                                  • Size 105B
                                  • SHA256 94c13340d485960a6dd4358e874c193a3cb42102f06e520d67e96eb74c65c77f
                                  • MD5 SHA1 SHA512 TLSH

                                  gwpasanSetting.ini

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\gwpasanSetting.ini
                                  • Size 119B
                                  • SHA256 cb9fb98d7c59b04f4fb69670f29b730938633924bacf021a4da871bd2f39ad32
                                  • MD5 SHA1 SHA512 TLSH

                                  keymapSettings

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\keymapSettings
                                  • Size 33B
                                  • SHA256 18888f814109c64e63e9c6d57acd9ef5823ee8513a33d160c61cfd039f91f833
                                  • MD5 SHA1 SHA512

                                  ve_ab_conf.ini

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Config\ve_ab_conf.ini
                                  • Size 2KB
                                  • SHA256 817ee0203b2be5b012ba4590f0a9225bba799004654f91d510f5983ff348dba8
                                  • MD5 SHA1 SHA512 TLSH

                                  crashuploadremark.ini

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\crashuploadremark.ini
                                  • Size 525B
                                  • SHA256 5694c907d612b99700d1eb50c6ed39353be95229638c26469367243f09e2bbf7
                                  • MD5 SHA1 SHA512 TLSH

                                  crashuploadremark.ini.lock

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Crash\crashuploadremark.ini.lock
                                  • Size 60B
                                  • SHA256 89a10504a08411d40568c23fe3ece776042fc1d1bb34724c88907f8861529938
                                  • MD5 SHA1 SHA512 TLSH

                                  db8dfbc7-fa85-46db-aee4-0984611e52f8.mp4

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\Projects\com.lveditor.draft\db8dfbc7-fa85-46db-aee4-0984611e52f8.mp4
                                  • Size 1B
                                  • SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
                                  • MD5 SHA1 SHA512

                                  663f5e73-681c-4b8c-aeb9-05f00038c6bc.tmp

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\TTNet\663f5e73-681c-4b8c-aeb9-05f00038c6bc.tmp
                                  • Size 709B
                                  • SHA256 ae1dd68c5bb2000b6fae8cfbb07df8b49118f92dca328e901aefe4adbe93f863
                                  • MD5 SHA1 SHA512 TLSH

                                  c5dad33a-d564-4f5d-aa7b-fa59d5154731.tmp

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\TTNet\c5dad33a-d564-4f5d-aa7b-fa59d5154731.tmp
                                  • Size 727B
                                  • SHA256 771b4fce269c9719aca5439bff23ae56ff4b3a8000718a500ec7d6c811fa9e20
                                  • MD5 SHA1 SHA512 TLSH

                                  ce630fec-a60d-463c-8f01-58fb2649f8f0.tmp

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\TTNet\ce630fec-a60d-463c-8f01-58fb2649f8f0.tmp
                                  • Size 688B
                                  • SHA256 4322905be13ffbe2623a5087286650df0bdfded8c546e1d5ce71e5b246b457b8
                                  • MD5 SHA1 SHA512 TLSH

                                  tt_net_config.config

                                  • Path C:\Users\Admin\AppData\Local\CapCut\User Data\TTNet\tt_net_config.config
                                  • Size 16B
                                  • SHA256 785173e056a4567cddb90861757a93cca5c0d4e5f0a9fb5d0a39f49ecd9bbdf8
                                  • MD5 SHA1 SHA512

                                  activity-stream.contile.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.contile.json
                                  • Size 4KB
                                  • SHA256 cee7d10e8fefb1ed6784253b9eeb0c9169eeed885b17b35a75fbdce48a602f87
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  activity-stream.discovery_stream.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.discovery_stream.json
                                  • Size 74KB
                                  • SHA256 9d7f0fe463325b1611f009efd176d41cf333ba68b1cb8c6177113a43b5046859
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  activity-stream.discovery_stream.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.discovery_stream.json
                                  • Size 76KB
                                  • SHA256 40637bee1b5e138dab2b62aaf85935479be32ac2d04fc3ba2a079e8a88b68061
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  activity-stream.personalization.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.personalization.json
                                  • Size 2KB
                                  • SHA256 fe35292a167567ed2e603b721032098cae202a5d1f1f2a03e375cbcef10eba37
                                  • MD5 SHA1 SHA512 TLSH

                                  13396

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\13396
                                  • Size 52B
                                  • SHA256 3f434749d8f70133f7bf8186ca1f1d22626528f70027ec2c5fefd8449eb78330
                                  • MD5 SHA1 SHA512 TLSH

                                  16696

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\16696
                                  • Size 7KB
                                  • SHA256 df386bd244fd51cb0d2bb30524b2dd76c1c0d3b3f01d7c44672aa1dc51760522
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  18896

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\18896
                                  • Size 354KB
                                  • SHA256 bf616130fad145defa151a076d30750691306502a28b94c2b1e70619a81de135
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  20887

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\20887
                                  • Size 7KB
                                  • SHA256 044bb322b81107ba21e820b0d4dc687d9dac200e7b79b000060fab91f5ff3f70
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  5986

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\5986
                                  • Size 15KB
                                  • SHA256 900ba265b54fd1da51b8814290db8990e49451d6aa771ebf86a51574d4a1a69e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  9953

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\9953
                                  • Size 354KB
                                  • SHA256 cf2042472aac22b4396d9a234edcce32eb1cec4ec5a05f9f371a11757267b396
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  2BD7B8BA113093088352FCE64AADBE83D2D22814

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\2BD7B8BA113093088352FCE64AADBE83D2D22814
                                  • Size 81KB
                                  • SHA256 baf3ce814e91d4b1f295c10dc74ca8c1a75ccf509663e6796153ea001f07d92c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  5FBF2913036CD2A5934BEBAF867519B193EFDB91

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\5FBF2913036CD2A5934BEBAF867519B193EFDB91
                                  • Size 20KB
                                  • SHA256 7a34be36512df5b14925644f2c4a9ef6025947b3185a1c71c45364f23397d10c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  7C2EEDB8CDF71FBDEC831C1909D845623D70AA9A

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\7C2EEDB8CDF71FBDEC831C1909D845623D70AA9A
                                  • Size 355KB
                                  • SHA256 04732c32a6897802d4ce0bd5c0b0272165b72bb1f4952c4940bd23341e9d5b72
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  7E6858191FB869BB32C1E39F2C1D8B1246E3306C

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\7E6858191FB869BB32C1E39F2C1D8B1246E3306C
                                  • Size 51KB
                                  • SHA256 c6e68f04c5e92abcb3fdd5a15816befe020e1811aeed589166f60aa92dc4f84d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  A6C74BC2260EAFF823C7AED38BBA607C962CCB55

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\A6C74BC2260EAFF823C7AED38BBA607C962CCB55
                                  • Size 38KB
                                  • SHA256 27bfb63d11c6e9fbf5a88b44b83cd695d8222ea1b2a143b5e43829944829624e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AF70F4F1264C51D5C4CC662157AC16C4245E8303

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\AF70F4F1264C51D5C4CC662157AC16C4245E8303
                                  • Size 114KB
                                  • SHA256 0822669bcee1ebd8fdd5e32ed191a9ff0c86fc242af7cf968d0677949f906dc2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  B69F58E40547444FD2CB758B5380153D2B4619E7

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\B69F58E40547444FD2CB758B5380153D2B4619E7
                                  • Size 16KB
                                  • SHA256 51a3294de09515c621c310a812d48707e06a89aef741b37f6163548996764e9b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  E9338C5CCF1E2FCF149487351399F198A4F9FCD6

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
                                  • Size 16KB
                                  • SHA256 50e462f4aa89bf1cf4bc34b3184dc3219dcb6dc38883a21d050e167cb7eacf92
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_arts_and_entertainment.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                                  • Size 67KB
                                  • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_autos_and_vehicles.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                                  • Size 44KB
                                  • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_beauty_and_fitness.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                                  • Size 33KB
                                  • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_blogging_resources_and_services.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                                  • Size 33KB
                                  • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_books_and_literature.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                                  • Size 67KB
                                  • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_business_and_industrial.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                                  • Size 45KB
                                  • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_computers_and_electronics.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                                  • Size 45KB
                                  • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_finance.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_finance.json
                                  • Size 33KB
                                  • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_food_and_drink.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                                  • Size 67KB
                                  • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_games.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_games.json
                                  • Size 44KB
                                  • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_health.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_health.json
                                  • Size 33KB
                                  • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_hobbies_and_leisure.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                                  • Size 67KB
                                  • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_home_and_garden.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                                  • Size 33KB
                                  • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_internet_and_telecom.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                                  • Size 67KB
                                  • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_jobs_and_education.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                                  • Size 33KB
                                  • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_law_and_government.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                                  • Size 68KB
                                  • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_online_communities.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                                  • Size 67KB
                                  • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_people_and_society.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                                  • Size 45KB
                                  • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_pets_and_animals.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                                  • Size 44KB
                                  • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_real_estate.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                                  • Size 67KB
                                  • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_reference.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_reference.json
                                  • Size 56KB
                                  • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_science.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_science.json
                                  • Size 56KB
                                  • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_shopping.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_shopping.json
                                  • Size 67KB
                                  • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_sports.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_sports.json
                                  • Size 56KB
                                  • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb_model_build_attachment_travel.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_travel.json
                                  • Size 67KB
                                  • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recipe_attachment.json

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\recipe_attachment.json
                                  • Size 1KB
                                  • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                                  • MD5 SHA1 SHA512 TLSH

                                  webext.sc.lz4

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\startupCache\webext.sc.lz4
                                  • Size 105KB
                                  • SHA256 fea7d63007c374f22fac24abc37409dd3ac3140f5f41d88a3824528fe1e7274a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  webext.sc.lz4

                                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\startupCache\webext.sc.lz4
                                  • Size 105KB
                                  • SHA256 c2a3102f0ba1e70d7b56ea8f508fa0a093b6297cde3e7ad2fffddd87072084fd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prep_Activatable Class_Hermes_perf.cache

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                  • Size 595B
                                  • SHA256 d4e60617c2afab8263febabe7f14f18595715078d71307a8cefe0707dae76dee
                                  • MD5 SHA1 SHA512 TLSH

                                  IDM1.tmp

                                  • Path C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp
                                  • Size 163KB
                                  • SHA256 6f6201b354dbf3c59c3bb0c01cd32264d9f68e0d3ad03b0681f5fbb629c40c83
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IDMSetup2.log

                                  • Path C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDMSetup2.log
                                  • Size 20KB
                                  • SHA256 ac4ecea27fcbeec744a3b10e9b3bdf6bba527f65124039607f8e20b84656780d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IDMSetup2.log

                                  • Path C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDMSetup2.log
                                  • Size 5KB
                                  • SHA256 317f7c312ba7783f42c25a6113688806c71e12924240f295b874928b4833e374
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IDMSetup2.log

                                  • Path C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDMSetup2.log
                                  • Size 8KB
                                  • SHA256 270f1fdc21baf4be36f02d3819383bd86946810f8626d7c9ad2f07ccb9926527
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  LICENSE.electron.txt

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\LICENSE.electron.txt
                                  • Size 1KB
                                  • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                  • MD5 SHA1 SHA512 TLSH

                                  LICENSES.chromium.html

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\LICENSES.chromium.html
                                  • Size 6.5MB
                                  • SHA256 86f5222580a4ab03dad8ea62e6cea22b23454dccf1c77e74ae0e0410a13b16fc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  chrome_100_percent.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\chrome_100_percent.pak
                                  • Size 126KB
                                  • SHA256 9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  chrome_200_percent.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\chrome_200_percent.pak
                                  • Size 175KB
                                  • SHA256 1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  d3dcompiler_47.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\d3dcompiler_47.dll
                                  • Size 4.7MB
                                  • SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ffmpeg.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\ffmpeg.dll
                                  • Size 2.6MB
                                  • SHA256 c8427ee59fe634071c813d803f086e4757ceaa4be061739a1644f49c4b051acd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  icudtl.dat

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\icudtl.dat
                                  • Size 10.0MB
                                  • SHA256 97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  libEGL.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\libEGL.dll
                                  • Size 473KB
                                  • SHA256 d019e2c51b5c3e28744aeb4bcabc1c5a29fe05f52936fbeee4ec6c96430db8af
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  libGLESv2.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\libGLESv2.dll
                                  • Size 7.2MB
                                  • SHA256 04e542edbf27f1bfc7d6620aa7c21b8039b05b6ac1b682d6f71ddddd771dd6d5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  af.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\af.pak
                                  • Size 340KB
                                  • SHA256 d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  am.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\am.pak
                                  • Size 551KB
                                  • SHA256 55357baf28716a73f79ac9a6af1ae63972eb79f93c415715518027fc5c528504
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ar.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ar.pak
                                  • Size 602KB
                                  • SHA256 e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  bg.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\bg.pak
                                  • Size 631KB
                                  • SHA256 fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  bn.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\bn.pak
                                  • Size 812KB
                                  • SHA256 e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ca.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ca.pak
                                  • Size 384KB
                                  • SHA256 e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  cs.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\cs.pak
                                  • Size 393KB
                                  • SHA256 936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  da.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\da.pak
                                  • Size 356KB
                                  • SHA256 1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  de.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\de.pak
                                  • Size 381KB
                                  • SHA256 e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  el.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\el.pak
                                  • Size 691KB
                                  • SHA256 92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  en-GB.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\en-GB.pak
                                  • Size 310KB
                                  • SHA256 463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  en-US.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\en-US.pak
                                  • Size 313KB
                                  • SHA256 bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  es-419.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\es-419.pak
                                  • Size 380KB
                                  • SHA256 5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  es.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\es.pak
                                  • Size 380KB
                                  • SHA256 267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  et.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\et.pak
                                  • Size 342KB
                                  • SHA256 d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  fa.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\fa.pak
                                  • Size 557KB
                                  • SHA256 221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  fi.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\fi.pak
                                  • Size 351KB
                                  • SHA256 5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  fil.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\fil.pak
                                  • Size 394KB
                                  • SHA256 4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  fr.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\fr.pak
                                  • Size 410KB
                                  • SHA256 1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  gu.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\gu.pak
                                  • Size 787KB
                                  • SHA256 c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  he.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\he.pak
                                  • Size 488KB
                                  • SHA256 875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  hi.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\hi.pak
                                  • Size 821KB
                                  • SHA256 1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  hr.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\hr.pak
                                  • Size 381KB
                                  • SHA256 3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  hu.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\hu.pak
                                  • Size 411KB
                                  • SHA256 3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  id.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\id.pak
                                  • Size 336KB
                                  • SHA256 9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  it.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\it.pak
                                  • Size 373KB
                                  • SHA256 c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ja.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ja.pak
                                  • Size 456KB
                                  • SHA256 3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  kn.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\kn.pak
                                  • Size 910KB
                                  • SHA256 90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ko.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ko.pak
                                  • Size 383KB
                                  • SHA256 b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  lt.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\lt.pak
                                  • Size 412KB
                                  • SHA256 9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  lv.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\lv.pak
                                  • Size 410KB
                                  • SHA256 b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ml.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ml.pak
                                  • Size 948KB
                                  • SHA256 61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  mr.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\mr.pak
                                  • Size 772KB
                                  • SHA256 481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ms.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ms.pak
                                  • Size 351KB
                                  • SHA256 fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nb.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\nb.pak
                                  • Size 344KB
                                  • SHA256 d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nl.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\nl.pak
                                  • Size 356KB
                                  • SHA256 55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  pl.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\pl.pak
                                  • Size 396KB
                                  • SHA256 53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  pt-BR.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\pt-BR.pak
                                  • Size 374KB
                                  • SHA256 c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  pt-PT.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\pt-PT.pak
                                  • Size 376KB
                                  • SHA256 c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ro.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ro.pak
                                  • Size 387KB
                                  • SHA256 7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ru.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ru.pak
                                  • Size 634KB
                                  • SHA256 b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  sk.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\sk.pak
                                  • Size 399KB
                                  • SHA256 75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  sl.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\sl.pak
                                  • Size 385KB
                                  • SHA256 6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  sr.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\sr.pak
                                  • Size 595KB
                                  • SHA256 524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  sv.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\sv.pak
                                  • Size 347KB
                                  • SHA256 3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  sw.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\sw.pak
                                  • Size 365KB
                                  • SHA256 690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ta.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ta.pak
                                  • Size 936KB
                                  • SHA256 7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  te.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\te.pak
                                  • Size 869KB
                                  • SHA256 d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  th.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\th.pak
                                  • Size 731KB
                                  • SHA256 cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tr.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\tr.pak
                                  • Size 371KB
                                  • SHA256 b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  uk.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\uk.pak
                                  • Size 634KB
                                  • SHA256 28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ur.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\ur.pak
                                  • Size 552KB
                                  • SHA256 4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  vi.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\vi.pak
                                  • Size 439KB
                                  • SHA256 b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  zh-CN.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\zh-CN.pak
                                  • Size 319KB
                                  • SHA256 a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  zh-TW.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\locales\zh-TW.pak
                                  • Size 316KB
                                  • SHA256 c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  resources.pak

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\resources.pak
                                  • Size 5.1MB
                                  • SHA256 66153f7b388503a9bab9df1fa157d3af88548bee264525694bca9a61ce3495e7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  app-update.yml

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\resources\app-update.yml
                                  • Size 91B
                                  • SHA256 580f2d42697fc6bdb3422fc7751a01a5c8059e4369ff4ae8b3e3aad9670afdf7
                                  • MD5 SHA1 SHA512 TLSH

                                  app.asar

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\resources\app.asar
                                  • Size 4.2MB
                                  • SHA256 05e4ca7d95e83bf40c849704da340b7d703084f0c4be54e30be6f89a079f3041
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  elevate.exe

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\resources\elevate.exe
                                  • Size 105KB
                                  • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  aria2.conf

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\resources\engine\aria2.conf
                                  • Size 3KB
                                  • SHA256 8ca5634875bf4b06b1d7cd61309d90c47c5597e88e62214bd48ea053d766dcc0
                                  • MD5 SHA1 SHA512 TLSH

                                  aria2c.exe

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\resources\engine\aria2c.exe
                                  • Size 7.8MB
                                  • SHA256 098a065ab71f639bf7048e790c870756fd6e83de9cc678915bbd07077d473fa2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  snapshot_blob.bin

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\snapshot_blob.bin
                                  • Size 168KB
                                  • SHA256 943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  v8_context_snapshot.bin

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\v8_context_snapshot.bin
                                  • Size 471KB
                                  • SHA256 c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  vk_swiftshader.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\vk_swiftshader.dll
                                  • Size 4.9MB
                                  • SHA256 7c71daf0fb1877bc9195894798ebb256215104ea55a04ed2a46f18c9d6d80ef3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  vk_swiftshader_icd.json

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\vk_swiftshader_icd.json
                                  • Size 106B
                                  • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                  • MD5 SHA1 SHA512 TLSH

                                  vulkan-1.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\7z-out\vulkan-1.dll
                                  • Size 894KB
                                  • SHA256 c3c0e649d7e0726a795f556ac0f057c18ce67cc6737e3b9c935af3b9b8991cef
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  StdUtils.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\StdUtils.dll
                                  • Size 100KB
                                  • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  System.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\System.dll
                                  • Size 12KB
                                  • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UAC.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\UAC.dll
                                  • Size 14KB
                                  • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WinShell.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\WinShell.dll
                                  • Size 3KB
                                  • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                  • MD5 SHA1 SHA512 TLSH

                                  nsDialogs.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\nsDialogs.dll
                                  • Size 9KB
                                  • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nsExec.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\nsExec.dll
                                  • Size 6KB
                                  • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nsis7z.dll

                                  • Path C:\Users\Admin\AppData\Local\Temp\nsz8858.tmp\nsis7z.dll
                                  • Size 424KB
                                  • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  remote-settings-startup-bundle-

                                  • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                                  • Size 573KB
                                  • SHA256 a276d16b868093930a184a30af415d42f00b4197ca4721ecb1654cb9a2bbb935
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tmpaddon

                                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                  • Size 21.6MB
                                  • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tmpaddon

                                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                  • Size 11KB
                                  • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tmpaddon

                                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                  • Size 502KB
                                  • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  vesdk.ini

                                  • Path C:\Users\Admin\AppData\Local\VEDetector\User Data\config\vesdk.ini
                                  • Size 1KB
                                  • SHA256 4c1da36e491597fc76c9b35e78447a6d01d6d0f9b82aaafa68c5bda3719663ac
                                  • MD5 SHA1 SHA512 TLSH

                                  capcut-1-5-0_1.log

                                  • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\capcut-1-5-0_1\capcut-1-5-0_1.log
                                  • Size 428B
                                  • SHA256 9b52bd9116537529470f0627d513bb10352a56d10429fe4767c4d412eb25f9b1
                                  • MD5 SHA1 SHA512 TLSH

                                  log_2.log

                                  • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\www_internetdownload_2\log_2.log
                                  • Size 541B
                                  • SHA256 f3dc8cb14ad17d7f671d50e10edfa6e078d49935e9b8d856b9b6e83fe7192dfc
                                  • MD5 SHA1 SHA512 TLSH

                                  www_internetdownload

                                  • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\www_internetdownload_2\www_internetdownload
                                  • Size 9KB
                                  • SHA256 005aa00e86b7553a314615598065a51f524d8d97425e3d85cb40f3fb7b3c2808
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  defextmap.dat

                                  • Path C:\Users\Admin\AppData\Roaming\IDM\defextmap.dat
                                  • Size 3KB
                                  • SHA256 9d1f79719b84eec484602b501d3d9eab89336c25b6d0cc586957bc2e10e845a1
                                  • MD5 SHA1 SHA512 TLSH

                                  urlexclist.dat

                                  • Path C:\Users\Admin\AppData\Roaming\IDM\urlexclist.dat
                                  • Size 3KB
                                  • SHA256 9efd5d506f16932728de5c0fb7dc0e4b75713920bbcefb108a610c6c1ae45430
                                  • MD5 SHA1 SHA512 TLSH

                                  42WD74H0FV7GGJR59NL2.temp

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\42WD74H0FV7GGJR59NL2.temp
                                  • Size 21KB
                                  • SHA256 c46452e439a6dcab18432d7246ded0134584f66168125c50e87272a38df392e8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  6824f4a902c78fbd.customDestinations-ms

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                  • Size 21KB
                                  • SHA256 d9dd74d47459e77e58ef70fdae5223061246d8e09dcb5970ff6af1f43d08c04c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CHSY4RSUSGS1DVPR8AYQ.temp

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CHSY4RSUSGS1DVPR8AYQ.temp
                                  • Size 20KB
                                  • SHA256 e89f4e25a0ef7f1d91be5e420778a83797957b81f371879d8938a1b7504db5a5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EA48Z2WJL9HE98K539GZ.temp

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EA48Z2WJL9HE98K539GZ.temp
                                  • Size 20KB
                                  • SHA256 70ddca312497385eedc187ca31beea830c03bb4287b896b14d2d6544b1e9ceb2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MJAAOHF06VX9QJN872FB.temp

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\MJAAOHF06VX9QJN872FB.temp
                                  • Size 21KB
                                  • SHA256 39e2afc5f5ac0eed5974f0dc9068f53f6226697883014033da04868c155685b9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Q0XETC5URDHC9ONPIMCH.temp

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Q0XETC5URDHC9ONPIMCH.temp
                                  • Size 20KB
                                  • SHA256 e025ec8fef1a15b11c7f9627dd214c94c523f53a41025c60c7c2804d6571b970
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Local State

                                  • Path C:\Users\Admin\AppData\Roaming\Motrix\Local State
                                  • Size 389B
                                  • SHA256 ce6e43d4c5f61334a24b81dcd98f349dd5a10048d5c139527e4a4ebfa6f3cbbf
                                  • MD5 SHA1 SHA512 TLSH

                                  e6b35099-dde5-4747-b040-52e5e124152f.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Motrix\e6b35099-dde5-4747-b040-52e5e124152f.tmp
                                  • Size 389B
                                  • SHA256 3bd19d4ab8054d62d7e13b578aa5c4e044aa164b51cac800174c488730f72781
                                  • MD5 SHA1 SHA512 TLSH

                                  main.log

                                  • Path C:\Users\Admin\AppData\Roaming\Motrix\logs\main.log
                                  • Size 2KB
                                  • SHA256 54ca8d4c0e085980b71c69fb3cfc5281f6f9147363869e35dc1471645b57f32f
                                  • MD5 SHA1 SHA512 TLSH

                                  main.log

                                  • Path C:\Users\Admin\AppData\Roaming\Motrix\logs\main.log
                                  • Size 2KB
                                  • SHA256 347499dfe3522f9109aa858dd0bb5deed6c7d3f230df1b46bade4b756b41de61
                                  • MD5 SHA1 SHA512 TLSH

                                  main.log

                                  • Path C:\Users\Admin\AppData\Roaming\Motrix\logs\main.log
                                  • Size 2KB
                                  • SHA256 ae0681f923a06f934eefff60f65827588df0a54f18a5c3e0b71a2ed7a66aa34a
                                  • MD5 SHA1 SHA512 TLSH

                                  main.log

                                  • Path C:\Users\Admin\AppData\Roaming\Motrix\logs\main.log
                                  • Size 3KB
                                  • SHA256 d8f348183ef0e233c022535e83456bc047703cadeae000051c967f32ae9c9f7b
                                  • MD5 SHA1 SHA512 TLSH

                                  system.json

                                  • Path C:\Users\Admin\AppData\Roaming\Motrix\system.json
                                  • Size 991B
                                  • SHA256 9f664520010c61175cce7a5c829165818f3a3365d905c2e3e83258d1822d12d2
                                  • MD5 SHA1 SHA512 TLSH

                                  system.json.tmp-176173401068d94f

                                  • Path C:\Users\Admin\AppData\Roaming\Motrix\system.json.tmp-176173401068d94f
                                  • Size 969B
                                  • SHA256 800de0abac563be40d8373d2737bd5f2f61c202f87c76e5d5a8680ffff6c2ac8
                                  • MD5 SHA1 SHA512 TLSH

                                  AlternateServices.bin

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\AlternateServices.bin
                                  • Size 11KB
                                  • SHA256 9f795d535f3d2891d27769744ebd84270e200dd4bf17fedf1a51742ac6dc45bc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AlternateServices.bin

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\AlternateServices.bin
                                  • Size 11KB
                                  • SHA256 ce46eafcd33234fcb799b27409683debab86444bd99a5e67855a283d9dc0311b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AlternateServices.bin

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\AlternateServices.bin
                                  • Size 10KB
                                  • SHA256 715eb8e3ce7195dc4ce6b55f2512a0518bb78a8756db3c079138f3a907520dc8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SiteSecurityServiceState.bin

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\SiteSecurityServiceState.bin
                                  • Size 4KB
                                  • SHA256 7218e848587fb07ab54c1778cd5f3b9129866811296187465099048573bacd57
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  addonStartup.json.lz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\addonStartup.json.lz4
                                  • Size 4KB
                                  • SHA256 0e45c1fff013bf5b30a49124074fa14362512c17462d819584ef00108c04d28a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  bookmarks-2026-10-12.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\bookmarkbackups\bookmarks-2026-10-12.jsonlz4
                                  • Size 856B
                                  • SHA256 b7e7f3f79d4a89c7fa3b685c93f5ed29156fbfba37f6de8fd8bd00e994a4d59a
                                  • MD5 SHA1 SHA512 TLSH

                                  broadcast-listeners.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\broadcast-listeners.json
                                  • Size 221B
                                  • SHA256 6cffdc59d50ce53047db137a8ed5fa3febfc9684c38e4cc103419d49b1ac39d6
                                  • MD5 SHA1 SHA512 TLSH

                                  store.json.mozlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\crashes\store.json.mozlz4
                                  • Size 66B
                                  • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
                                  • MD5 SHA1 SHA512 TLSH

                                  data.safe.bin

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.bin
                                  • Size 159KB
                                  • SHA256 6df52eef6b75d43aaea81455715cb52be250d07c74f2c8d33c3514c0e8296b22
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.bin

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.bin
                                  • Size 154KB
                                  • SHA256 66efadaf83aeee7c06da7b09b249e1eaeab53169482b0456dce6860293ffd20a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 29KB
                                  • SHA256 a80fa13aeb498f38c655b55b25eb24e16ed9337fc300166f15126384dffe92ff
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 58KB
                                  • SHA256 fdbffb93085ba4a275cfeddc1a4407de34bd5cc82c0da71f5f3768a743d04b8e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 29KB
                                  • SHA256 c22cf4d041a49cc9f48b33b402e62f30c48765941531917d1b9be34cac67378e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 29KB
                                  • SHA256 5d7fb4e739a72967e83abfa5a49eb361d4afe67a0e3d2e917217f79e0a4c98f1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 29KB
                                  • SHA256 356451005b8bc091a13bc20700625cb3bdc82dbcf357f3c8e0aad267145ad381
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 154KB
                                  • SHA256 9e472717078e0ea6844d6e43a54ba1f2f6a4da9d098756423a2a1c9c0b2dfe8a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 178KB
                                  • SHA256 1ac60e5fa7975a1e138bc13208cd4fc82f627eca10f083ea50931570ca4647d4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 35KB
                                  • SHA256 64242c6509ca0443595d52c1bb8184923e0620bc351c01e876872650d4b706d6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 176KB
                                  • SHA256 15498601ca3704f1518b19d4ce84850ad4b3574f3219673bc9b62f5a5d82fcaf
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 178KB
                                  • SHA256 c485a9e5ef54de2321ebe98a9b274bc1244e7d8846b941dba61699b0e48bed86
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data.safe.tmp

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                                  • Size 27KB
                                  • SHA256 0c23166648e9a7924c9f247f87d3c0f18be9f42e896254719f96a0bc013bab21
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  events

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
                                  • Size 1KB
                                  • SHA256 661f43909319bce3f10fe3ff224950e0439e4d879b2c2ba3f0b97a6490dae6e4
                                  • MD5 SHA1 SHA512 TLSH

                                  events

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
                                  • Size 5KB
                                  • SHA256 7c9089b26883a9a98f500f94c4231619c1660ee77b988d5101ee0bcc72d05be3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  13f47ad8-2559-4bbf-8f0d-eaec4d918283

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\13f47ad8-2559-4bbf-8f0d-eaec4d918283
                                  • Size 235B
                                  • SHA256 aad596f9275bf295298a037e74cd5bbaca94f72098e8af36e0d9c5d4142de98e
                                  • MD5 SHA1 SHA512 TLSH

                                  68c0a036-0d5a-4a26-8000-592c05337bf1

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\68c0a036-0d5a-4a26-8000-592c05337bf1
                                  • Size 2KB
                                  • SHA256 e47624f09398fd30b2a28d7b5fd180c34d3baa5d6b2fac1876dcf04dcea1f7a3
                                  • MD5 SHA1 SHA512 TLSH

                                  7f3818b5-dd5b-4baf-ac0e-6e4b35e28f59

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\7f3818b5-dd5b-4baf-ac0e-6e4b35e28f59
                                  • Size 886B
                                  • SHA256 b68e4c8d4c594eeec49c60949fca83920f4efc1b594d1d3a4927efa16e470086
                                  • MD5 SHA1 SHA512 TLSH

                                  b81869ba-0ae0-4fc9-bd23-ad40664e2f96

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\b81869ba-0ae0-4fc9-bd23-ad40664e2f96
                                  • Size 235B
                                  • SHA256 1535240968ba577d24b0a754d6504ef515be55f2361fbace7c81129d3082f997
                                  • MD5 SHA1 SHA512 TLSH

                                  df2222d2-5e31-4c50-a030-6c7b721195ff

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\df2222d2-5e31-4c50-a030-6c7b721195ff
                                  • Size 871B
                                  • SHA256 b19fb219b8768f09548065153bc6ffedea83eed5d7b5a2036597ad4ea9818bbe
                                  • MD5 SHA1 SHA512 TLSH

                                  downloads.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\downloads.json
                                  • Size 771B
                                  • SHA256 361b4e24c308cb1bcd306664d9b83b623713723268ef295bd9c0ed35c8bbd31b
                                  • MD5 SHA1 SHA512 TLSH

                                  downloads.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\downloads.json
                                  • Size 1KB
                                  • SHA256 0f2c459a75799cdaceeb86e4c1cebf2c8db8acc8aab9675b7053393790764ba9
                                  • MD5 SHA1 SHA512 TLSH

                                  downloads.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\downloads.json
                                  • Size 799B
                                  • SHA256 2ae77728c955489db4d17e466008bf4387aaa0f3b110f4c7caa4249e328af5ae
                                  • MD5 SHA1 SHA512 TLSH

                                  extension-preferences.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\extension-preferences.json
                                  • Size 942B
                                  • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                                  • MD5 SHA1 SHA512 TLSH

                                  extensions.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\extensions.json
                                  • Size 14KB
                                  • SHA256 87ec1ca454934723f1cf341eacdea73203f06130911d9bae7d7a1b923d06577f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  gmpopenh264.dll

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                  • Size 1.1MB
                                  • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  gmpopenh264.info

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                  • Size 116B
                                  • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                  • MD5 SHA1 SHA512 TLSH

                                  LICENSE

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
                                  • Size 473B
                                  • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                                  • MD5 SHA1 SHA512 TLSH

                                  manifest.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                  • Size 1002B
                                  • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                  • MD5 SHA1 SHA512 TLSH

                                  widevinecdm.dll

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                  • Size 21.6MB
                                  • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  widevinecdm.dll.sig

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
                                  • Size 1KB
                                  • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
                                  • MD5 SHA1 SHA512 TLSH

                                  prefs-1.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
                                  • Size 12KB
                                  • SHA256 651d1a30da9824616a4dc544e91c1085c6de08441f532f9497d6f9cfd779d542
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs-1.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
                                  • Size 12KB
                                  • SHA256 99f2e4800dd6c73b527483c14e9892dfa919684a1ab3aed7ae07dd49c3667b0d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs-1.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
                                  • Size 12KB
                                  • SHA256 4787207285a5bd4b7d940a38a16f92bb647aa2dceb9c597f638e321395b4238e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs-1.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
                                  • Size 7KB
                                  • SHA256 62b83d4d124ce7a63186a24d67e32e34dc7cdea087231bffa7d6d906c23c02f2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs-1.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
                                  • Size 6KB
                                  • SHA256 2252f79d2fe8a7d4e6003a4aadec59d05dc80e76338b2460feeb038fa69e875e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                                  • Size 6KB
                                  • SHA256 8dd3a154ecad1af13faaef344188d4747fcaf370311e812742c455b2f8c85405
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                                  • Size 12KB
                                  • SHA256 dc979e1a82c89a6dab3e59705e2b1cc88395eae8d7dfc7bc9a167db1a7668ba4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                                  • Size 6KB
                                  • SHA256 079e074bfb87db7b156375abab7dd5613dd50dac0f8f165a5ffdb58e5d5db960
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                                  • Size 7KB
                                  • SHA256 addf3e4acaec8380c6cd9abfc04bf2bfeec741436cf46330368f2d46a4ff5743
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                                  • Size 6KB
                                  • SHA256 ee9e7623573addf5b4930b60761ff13b07a3959eb1f47d0a0da91e1afd7d22c6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                                  • Size 12KB
                                  • SHA256 e08161c764dc31e8048cf97a19d7d38eee18a6bff3b6aa2421f60b8b4d92ef66
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs.js

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                                  • Size 6KB
                                  • SHA256 96eb4dc3800121510ee46d38bf096877e1832924e331c02f6fcf58a7b3ce498a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  search.json.mozlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\search.json.mozlz4
                                  • Size 350B
                                  • SHA256 2a317a8ff64d03538667913a28d8769f7483b207d7949590e83bce951ff9fe4a
                                  • MD5 SHA1 SHA512 TLSH

                                  sessionCheckpoints.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionCheckpoints.json
                                  • Size 53B
                                  • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                                  • MD5 SHA1 SHA512 TLSH

                                  sessionCheckpoints.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionCheckpoints.json
                                  • Size 90B
                                  • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                                  • MD5 SHA1 SHA512 TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 24KB
                                  • SHA256 8aa9d4a12f52a8c63308b6fca780b0692b30b53d7b9728fef7b43bad590ca4ff
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 20KB
                                  • SHA256 d27cdfb3ffcf7f5ae8c4d96dcc39edfa4cf5aee3a671bf0a6a62f1832114990c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 25KB
                                  • SHA256 ce6388304c7154afc02aebc48cad0731f3489bb4c53de81ed03778d3524bf1cc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 24KB
                                  • SHA256 f804faa6267598e8504c701a85300ee51033fb6d039b3fab9a99231030a8d01f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 5KB
                                  • SHA256 5595043ffd2d3ddd50b57300e43e0ee75e21e815342d4e18516fb4be465b5efd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 12KB
                                  • SHA256 099c5325db4e30ce1007685ba06277dfd078c188b5d0aab7af22d622004f3332
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 17KB
                                  • SHA256 87ccddbf1b15513fc969d2728e5b29e5ce2c648046b8aac390cb0db92c81fc22
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 20KB
                                  • SHA256 40eb75d3c542ea88ef6319a94a2ceb88dd18c88e17cf743ce51c462b0425c280
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 5KB
                                  • SHA256 dcf1530668153e5bbb928bed86d7fb636c1330b82ac12fc225f7d69c310dd8c9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 9KB
                                  • SHA256 266f0ef6da81d980f36a065425af4336ec662c01dd3cc7c850b6a40158b8b541
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 15KB
                                  • SHA256 69b1513cd0f838be66f14a470b746795d3aee182038187a8eaf7da63519d5491
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 17KB
                                  • SHA256 a3a9fe462dca237f8ad8741ec0ad5d60865bd579877f4ce1fdc29ec294bc0cf7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  recovery.jsonlz4

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                                  • Size 4KB
                                  • SHA256 aafad5f19ad68b17a707d76ca19a2e6080a056428e49001df6f3a3668b5b7aef
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  581034704_b_Dmsmwaip.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\default\https+++www.mediafire.com\idb\581034704_b_Dmsmwaip.sqlite
                                  • Size 48KB
                                  • SHA256 85fe454781ad82e717cf6f61dcaeb3f737ff566163cdfd70d48762ee19b6cc78
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 7.6MB
                                  • SHA256 2e02701104fb77c16c1e20231adf6a8bbe2a222fbab42b29b88f2e330645fc58
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 5.5MB
                                  • SHA256 9315d07ba44e5f52943a30c40d93604b0af36fce137a551a5cb4f4b763860ada
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 5.5MB
                                  • SHA256 fb046acba4e0f8cf0b3b7c204fd4d9163bc62470c994d9ed06960cf96cb43fa3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 7.5MB
                                  • SHA256 1cbfb59fae4986dce4d0ac65ba09c656815c92dde76199121ab476ac55af2910
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 7.6MB
                                  • SHA256 c3edae1f2034c3b10f128f38d797ae25a7aa3451ded19d2b7ff8c8a26278e417
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 7.6MB
                                  • SHA256 e467eaf05d7266231ce6e551c4c95d211358c9fdd505f618c2f0e1ad7bae9d2c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 7.6MB
                                  • SHA256 636f703ed6e6e8c916bdfede7d1817d223de80f3b0f5dfe3547818bfae4e61e1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 7.6MB
                                  • SHA256 6558da41eb3bdffb1484031e3a6722273b63ea9d38ba742425c2da7dd3feb5c9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  3870112724rsegmnoittet-es.sqlite

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                  • Size 7.6MB
                                  • SHA256 95310030bbe1f5d8859ab3a9c365ae413e38538dd083c9b7b678fe111710ae74
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  targeting.snapshot.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\targeting.snapshot.json
                                  • Size 3KB
                                  • SHA256 f46294c410907c6f974a4fb4f91876cb877121f4a09a645c1a5dfd24313c8599
                                  • MD5 SHA1 SHA512 TLSH

                                  xulstore.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\xulstore.json
                                  • Size 174B
                                  • SHA256 a2e6aa43b77b9f14db972d7728f6cd5d1a741ecb01c7b867757e9571f9802d1d
                                  • MD5 SHA1 SHA512 TLSH

                                  xulstore.json

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\xulstore.json
                                  • Size 170B
                                  • SHA256 9a064be7a03a41018e66e7987d47ffc3736718756ee071ba8494a49c857636d6
                                  • MD5 SHA1 SHA512 TLSH

                                  Motrix.lnk

                                  • Path C:\Users\Admin\Desktop\Motrix.lnk
                                  • Size 2KB
                                  • SHA256 e5658655cdd9f63da9467e830ddab3de83ee25eb7a09455572128177fd821518
                                  • MD5 SHA1 SHA512 TLSH

                                  8F11k-Jf.exe.part

                                  • Path C:\Users\Admin\Downloads\8F11k-Jf.exe.part
                                  • Size 63KB
                                  • SHA256 036a52bc31d230a0e5dd4e09b2f8914738a0346de07c2f20c9f81aeeec81f595
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Motrix-Setup-1.EnOAs638.8.19.exe.part

                                  • Path C:\Users\Admin\Downloads\Motrix-Setup-1.EnOAs638.8.19.exe.part
                                  • Size 121.8MB
                                  • SHA256 eb8afbda006962da47bf99f5ecc2d73ae2d51f293965ae4ad637acbf55108645
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  S1TmOCeA.exe.part

                                  • Path C:\Users\Admin\Downloads\S1TmOCeA.exe.part
                                  • Size 2KB
                                  • SHA256 098736bc3bbfd0aa5f28ea35a54a3961f85feccd5d29809d748a3981a694ad61
                                  • MD5 SHA1 SHA512 TLSH

                                  idman643build15.exe

                                  • Path C:\Users\Admin\Downloads\idman643build15.exe
                                  • Size 12.0MB
                                  • SHA256 a902e77169a3e4d8a88ee2ccaab11d3d43ab209483625a3602438ed4a22bbfd9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  desktop.ini

                                  • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                  • Size 190B
                                  • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                  • MD5 SHA1 SHA512 TLSH

                                  idmwfp.inf_amd64_be5722ccff6c2371.ini

                                  • Path C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_be5722ccff6c2371.ini
                                  • Size 415B
                                  • SHA256 1ba31e7c907190d2a6784d5bbe5741dec7f4562ac7081be4330aeeec32a8880e
                                  • MD5 SHA1 SHA512 TLSH

                                  memory/240-4049-0x000002687F1C0000-0x000002687F1C1000-memory.dmp

                                  memory/240-4041-0x000002687F1C0000-0x000002687F1C1000-memory.dmp

                                  memory/240-4050-0x000002687F1C0000-0x000002687F1C1000-memory.dmp

                                  memory/240-4048-0x000002687F1C0000-0x000002687F1C1000-memory.dmp

                                  memory/240-4043-0x000002687F1C0000-0x000002687F1C1000-memory.dmp

                                  memory/240-4051-0x000002687F1C0000-0x000002687F1C1000-memory.dmp

                                  memory/240-4052-0x000002687F1C0000-0x000002687F1C1000-memory.dmp

                                  memory/2012-9600-0x00007FFB17CC0000-0x00007FFB17CD0000-memory.dmp

                                  memory/2012-9601-0x00007FFB11120000-0x00007FFB15B42000-memory.dmp

                                  memory/2468-3208-0x0000000000400000-0x000000000042B000-memory.dmp

                                  memory/2996-2370-0x0000020E1D5C0000-0x0000020E1D93C000-memory.dmp

                                  memory/2996-2637-0x0000000000400000-0x000000000042B000-memory.dmp

                                  memory/2996-3084-0x0000000000400000-0x000000000042B000-memory.dmp

                                  memory/4292-442-0x00000293A1F30000-0x00000293A1F31000-memory.dmp

                                  memory/4292-435-0x00000293A1F30000-0x00000293A1F31000-memory.dmp

                                  memory/4292-440-0x00000293A1F30000-0x00000293A1F31000-memory.dmp

                                  memory/4292-433-0x00000293A1F30000-0x00000293A1F31000-memory.dmp

                                  memory/4292-444-0x00000293A1F30000-0x00000293A1F31000-memory.dmp

                                  memory/4292-443-0x00000293A1F30000-0x00000293A1F31000-memory.dmp

                                  memory/4292-441-0x00000293A1F30000-0x00000293A1F31000-memory.dmp

                                  memory/4292-439-0x00000293A1F30000-0x00000293A1F31000-memory.dmp

                                  memory/5240-2371-0x00000145CCBC0000-0x00000145CCF3C000-memory.dmp

                                  memory/5240-1964-0x00007FFB57D60000-0x00007FFB57D61000-memory.dmp

                                  memory/6760-3201-0x0000000000400000-0x000000000042B000-memory.dmp

                                  memory/6840-9617-0x00007FFB2EDD0000-0x00007FFB2F27B000-memory.dmp

                                  memory/6840-9616-0x00007FFB2A890000-0x00007FFB2AE39000-memory.dmp

                                  memory/8336-9802-0x00007FFB11120000-0x00007FFB15B42000-memory.dmp

                                  memory/10768-9770-0x00007FFB2EDD0000-0x00007FFB2F27B000-memory.dmp

                                  memory/10768-9769-0x00007FFB2A890000-0x00007FFB2AE39000-memory.dmp

                                  memory/10832-9915-0x000002A2E30E0000-0x000002A2E30E3000-memory.dmp

                                  memory/10832-9775-0x00007FFB17CC0000-0x00007FFB17CD0000-memory.dmp

                                  memory/10832-9776-0x00007FFB11120000-0x00007FFB15B42000-memory.dmp

                                  memory/10832-9848-0x000002A2E15E0000-0x000002A2E1A20000-memory.dmp

                                  memory/10832-9850-0x000002A2E1A20000-0x000002A2E1C20000-memory.dmp

                                  memory/10832-9875-0x000002A2E3060000-0x000002A2E3061000-memory.dmp

                                  memory/10832-9880-0x000002A2E3070000-0x000002A2E3073000-memory.dmp

                                  memory/10832-9885-0x000002A2E3080000-0x000002A2E3085000-memory.dmp

                                  memory/10832-9860-0x000002A2E3000000-0x000002A2E3003000-memory.dmp

                                  memory/10832-9865-0x000002A2E3020000-0x000002A2E3025000-memory.dmp

                                  memory/10832-9870-0x000002A2E3030000-0x000002A2E3035000-memory.dmp

                                  memory/10832-9993-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-10001-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-10000-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-9999-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-9890-0x000002A2E3090000-0x000002A2E3092000-memory.dmp

                                  memory/10832-9998-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-9895-0x000002A2E30A0000-0x000002A2E30A4000-memory.dmp

                                  memory/10832-9997-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-9996-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-9995-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-9900-0x000002A2E30B0000-0x000002A2E30B4000-memory.dmp

                                  memory/10832-9905-0x000002A2E30C0000-0x000002A2E30C1000-memory.dmp

                                  memory/10832-9910-0x000002A2E30D0000-0x000002A2E30D2000-memory.dmp

                                  memory/10832-9985-0x000002A2E31C0000-0x000002A2E31CF000-memory.dmp

                                  memory/10832-9920-0x000002A2E30F0000-0x000002A2E30F4000-memory.dmp

                                  memory/10832-9925-0x000002A2E3100000-0x000002A2E3103000-memory.dmp

                                  memory/10832-9930-0x000002A2E3110000-0x000002A2E3112000-memory.dmp

                                  memory/10832-9935-0x000002A2E3120000-0x000002A2E3125000-memory.dmp

                                  memory/10832-9940-0x000002A2E3130000-0x000002A2E3134000-memory.dmp

                                  memory/10832-9945-0x000002A2E3140000-0x000002A2E3143000-memory.dmp

                                  memory/10832-9950-0x000002A2E3150000-0x000002A2E3155000-memory.dmp

                                  memory/10832-9955-0x000002A2E3160000-0x000002A2E3166000-memory.dmp

                                  memory/10832-9960-0x000002A2E3170000-0x000002A2E3172000-memory.dmp

                                  memory/10832-9994-0x000002A2E31F0000-0x000002A2E31F1000-memory.dmp

                                  memory/10832-9965-0x000002A2E3180000-0x000002A2E3185000-memory.dmp

                                  memory/10832-9970-0x000002A2E3190000-0x000002A2E3192000-memory.dmp

                                  memory/10832-9975-0x000002A2E31A0000-0x000002A2E31B0000-memory.dmp

                                  memory/10832-9980-0x000002A2E31B0000-0x000002A2E31B5000-memory.dmp