9bb1ffc5759cda1bf670be9acfe8626abfdb3b23b50504e4dfc00b609df2b7ad

Analysis

max time kernel
141s
max time network
146s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
09-05-2023 15:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
Size

1.9MB
MD5

1176914c8a8cfee425ba582c595065d6
SHA1

3f38397cd5e7aa69902badf6d7b9b935f5e822df
SHA256

9bb1ffc5759cda1bf670be9acfe8626abfdb3b23b50504e4dfc00b609df2b7ad
SHA512

e6597857c382b8e52f3080f75b442b3347abde1213c9b0ea53ffb8f6c42f14e4d138f46c1d116cb864f5808d33b916a633c0beef7db578599328d7474cf914f5
SSDEEP

49152:lvhlHWBwS6D7ddSNPHu0gbZs3HaGYLWEdZYgVbBr:RLHW2ZWH5gO3HXYLu2

Score

8^/10

bootkit persistence

Malware Config

Signatures

Downloads MZ/PE file

Checks BIOS information in registry 2 TTPs 2 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

InstallerGUI.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	InstallerGUI.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	InstallerGUI.exe

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
bootkit persistence

Bootkit
T1067

Processes:

InstallerGUI.exe

description ioc process

File opened for modification \??\PhysicalDrive0 InstallerGUI.exe
Drops file in Windows directory 1 IoCs

Processes:

InstallerGUI.exe

description ioc process

File opened for modification C:\Windows\Q487734.log InstallerGUI.exe

description	ioc	process
File opened for modification	\??\PhysicalDrive0	InstallerGUI.exe

description	ioc	process
File opened for modification	C:\Windows\Q487734.log	InstallerGUI.exe

Executes dropped EXE 38 IoCs

Processes:

1239641131_Wnzkvto_.exeInstallerGUI.execrashpad_handler.exeMovaviStatistics.exeMovaviStatistics.exePluginChecker.exePluginChecker.exeMovaviStatistics.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.execonhost.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exeMovaviStatistics.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exe

pid	process
1676	1239641131_Wnzkvto_.exe
1008	InstallerGUI.exe
1656	crashpad_handler.exe
1788	MovaviStatistics.exe
300	MovaviStatistics.exe
2004	PluginChecker.exe
984	PluginChecker.exe
1160	MovaviStatistics.exe
268	PluginChecker.exe
1700	PluginChecker.exe
1468	PluginChecker.exe
1936	PluginChecker.exe
1196	PluginChecker.exe
880	PluginChecker.exe
1464	PluginChecker.exe
1576	PluginChecker.exe
1368	PluginChecker.exe
1744	PluginChecker.exe
608	PluginChecker.exe
1768	conhost.exe
1548	PluginChecker.exe
1160	PluginChecker.exe
1216	PluginChecker.exe
1768	conhost.exe
1548	PluginChecker.exe
932	PluginChecker.exe
1552	PluginChecker.exe
1540	PluginChecker.exe
1968	PluginChecker.exe
1704	PluginChecker.exe
1512	MovaviStatistics.exe
1660	PluginChecker.exe
1496	PluginChecker.exe
1368	PluginChecker.exe
876	PluginChecker.exe
2004	PluginChecker.exe
1876	PluginChecker.exe
1492	PluginChecker.exe

Loads dropped DLL 64 IoCs

Processes:

MovaviVideoEditorPlusSetupC_Wnzkvto_.exe1239641131_Wnzkvto_.exeInstallerGUI.exe

pid	process
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1676	1239641131_Wnzkvto_.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe

Modifies registry class 15 IoCs

Processes:

InstallerGUI.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{961EE1CE-3381-7580-E2CB}	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{961EE1CE-3381-7580-E2CB}\khxuuwnb = 347615dfa23cd0bd78fc08f742e44fa624deb410	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{862988D9-7D99-1E06-4CEA}\uumvmmux = dda4b61540addec9f8eccff798f72fb87dee988b	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{961EE1CE-3381-7580-E2CB}\khxuuwnb = c4a729e1bca61ffe54e3100874f82fc8e8f26adf	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{961EE1CE-3381-7580-E2CB}\khxuuwnb = 343a39debe07a0ff18d407ab7ac350cd586210c2	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{862988D9-7D99-1E06-4CEA}\uumvmmux = dd62280c3ec89fffe49be7ac828c5ecd7d8d0e96	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{862988D9-7D99-1E06-4CEA}\uumvmmux = 595b4715b86c6f8f94ead7d37ce09ad0f904258f	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{862988D9-7D99-1E06-4CEA}	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{C0937617-604C-9916-B043}	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{C0937617-604C-9916-B043}\vnvfowhy = b489756622732fa64cb918c3a6246c51c4c76270	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{C602395E-E89F-DEDE-1AF3}	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{C602395E-E89F-DEDE-1AF3}\vumkpgpo = de6136cc407c0fb86cbe1ef434c7cf74fa21b8ac	InstallerGUI.exe
Key created	\REGISTRY\USER\S-1-5-21-3948302646-268491222-1934009652-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\MuiCache	InstallerGUI.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

Processes:

InstallerGUI.exePluginChecker.exe

pid process

1008 InstallerGUI.exe
2004 PluginChecker.exe
Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes:

InstallerGUI.exe

pid process

1008 InstallerGUI.exe
1008 InstallerGUI.exe
1008 InstallerGUI.exe
1008 InstallerGUI.exe
1008 InstallerGUI.exe
1008 InstallerGUI.exe

pid	process
1008	InstallerGUI.exe
2004	PluginChecker.exe

pid	process
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe
1008	InstallerGUI.exe

Suspicious use of SetWindowsHookEx 22 IoCs

Processes:

MovaviVideoEditorPlusSetupC_Wnzkvto_.exeInstallerGUI.exeMovaviStatistics.exePluginChecker.exeMovaviStatistics.exe

pid	process
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
1008	InstallerGUI.exe
1788	MovaviStatistics.exe
1788	MovaviStatistics.exe
2004	PluginChecker.exe
1788	MovaviStatistics.exe
2004	PluginChecker.exe
1512	MovaviStatistics.exe
1512	MovaviStatistics.exe
1512	MovaviStatistics.exe
1512	MovaviStatistics.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

MovaviVideoEditorPlusSetupC_Wnzkvto_.exe1239641131_Wnzkvto_.exeInstallerGUI.exe

description	pid	process	target process
PID 1292 wrote to memory of 1676	1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe	1239641131_Wnzkvto_.exe
PID 1292 wrote to memory of 1676	1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe	1239641131_Wnzkvto_.exe
PID 1292 wrote to memory of 1676	1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe	1239641131_Wnzkvto_.exe
PID 1292 wrote to memory of 1676	1292	MovaviVideoEditorPlusSetupC_Wnzkvto_.exe	1239641131_Wnzkvto_.exe
PID 1676 wrote to memory of 1008	1676	1239641131_Wnzkvto_.exe	InstallerGUI.exe
PID 1676 wrote to memory of 1008	1676	1239641131_Wnzkvto_.exe	InstallerGUI.exe
PID 1676 wrote to memory of 1008	1676	1239641131_Wnzkvto_.exe	InstallerGUI.exe
PID 1008 wrote to memory of 1656	1008	InstallerGUI.exe	crashpad_handler.exe
PID 1008 wrote to memory of 1656	1008	InstallerGUI.exe	crashpad_handler.exe
PID 1008 wrote to memory of 1656	1008	InstallerGUI.exe	crashpad_handler.exe
PID 1008 wrote to memory of 300	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 300	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 300	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 1788	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 1788	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 1788	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 2004	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 2004	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 2004	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 984	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 984	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 984	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1160	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 1160	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 1160	1008	InstallerGUI.exe	MovaviStatistics.exe
PID 1008 wrote to memory of 268	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 268	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 268	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1700	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1700	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1700	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1468	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1468	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1468	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1936	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1936	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1936	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1196	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1196	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1196	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 880	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 880	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 880	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1464	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1464	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1464	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1576	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1576	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1576	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1368	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1368	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1368	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1744	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1744	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1744	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 608	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 608	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 608	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1768	1008	InstallerGUI.exe	conhost.exe
PID 1008 wrote to memory of 1768	1008	InstallerGUI.exe	conhost.exe
PID 1008 wrote to memory of 1768	1008	InstallerGUI.exe	conhost.exe
PID 1008 wrote to memory of 1548	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1548	1008	InstallerGUI.exe	PluginChecker.exe
PID 1008 wrote to memory of 1548	1008	InstallerGUI.exe	PluginChecker.exe

C:\Users\Admin\AppData\Local\Temp\MovaviVideoEditorPlusSetupC_Wnzkvto_.exe
"C:\Users\Admin\AppData\Local\Temp\MovaviVideoEditorPlusSetupC_Wnzkvto_.exe"
1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1292

C:\Users\Admin\AppData\Local\Temp\MovaviWebInstaller-1116767015\1239641131_Wnzkvto_.exe
C:/Users/Admin/AppData/Local/Temp/MovaviWebInstaller-1116767015/1239641131_Wnzkvto_.exe /S /LOCALE=en_US /D=C:/Users/Admin/AppData/Roaming /WEBUID=nzkvto /PREFERRED_BROWSER=chrome.exe
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1676

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\InstallerGUI.exe
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\InstallerGUI.exe "--distrib-name=C:\Users\Admin\AppData\Local\Temp\MovaviWebInstaller-1116767015\1239641131_Wnzkvto_.exe" "/S" "/LOCALE=en_US" "/D=C:/Users/Admin/AppData/Roaming" "/WEBUID=nzkvto" "/PREFERRED_BROWSER=chrome.exe"
3⤵
- Checks BIOS information in registry
- Writes to the Master Boot Record (MBR)
- Drops file in Windows directory
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1008

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\crashpad_handler.exe
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0 --metrics-dir=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0 --url=https://o474997.ingest.sentry.io:443/api/4504371526893568/minidump/?sentry_client=sentry.native/0.5.0&sentry_key=be163ba9c8fc4472baedcce3cfb2b09b --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0\e9b3d959-6063-40fe-b482-309df60ec777.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0\e9b3d959-6063-40fe-b482-309df60ec777.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0\e9b3d959-6063-40fe-b482-309df60ec777.run\__sentry-breadcrumb2 --initial-client-data=0x1f0,0x1f4,0x1f8,0x1c4,0x1fc,0x7fef7341fe8,0x7fef7342000,0x7fef7342018
4⤵
- Executes dropped EXE
PID:1656

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MovaviStatistics.exe
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MovaviStatistics.exe a17701da2aa42d9fc36aebcc41083540 "Movavi Video Editor Plus" Movavi 23.3.0.0 DEFAULT 3162353164333834383337303238353035643836386562363865326330343338 fa1078ce9ffcb0574d9b857eaae74aefffffd81c https proxysss.movavi.com 0 80 "C:/Users/Admin/AppData/Local/Movavi/Movavi Video Editor 23/cache\a17701da2aa42d9fc36aebcc41083540\23.3.0.0"
4⤵
- Executes dropped EXE
PID:300

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MovaviStatistics.exe
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MovaviStatistics.exe a17701da2aa42d9fc36aebcc41083540 "Movavi Video Editor Plus" Movavi 23.3.0.0 DEFAULT 3162353164333834383337303238353035643836386562363865326330343338 fa1078ce9ffcb0574d9b857eaae74aefffffd81c https proxysss.movavi.com 0 80 "C:/Users/Admin/AppData/Local/Movavi/Movavi Video Editor 23/cache\a17701da2aa42d9fc36aebcc41083540\23.3.0.0"
4⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:1788

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" OglManager OglManager
4⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2004

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" FiltersFF AlgorithmFactory
4⤵
- Executes dropped EXE
PID:984

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MovaviStatistics.exe
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MovaviStatistics.exe a17701da2aa42d9fc36aebcc41083540 "Movavi Video Editor Plus" Movavi 23.3.0.0 DEFAULT 3162353164333834383337303238353035643836386562363865326330343338 fa1078ce9ffcb0574d9b857eaae74aefffffd81c https proxysss.movavi.com 0 80 "C:/Users/Admin/AppData/Local/Movavi/Movavi Video Editor 23/cache\a17701da2aa42d9fc36aebcc41083540\23.3.0.0"
4⤵
- Executes dropped EXE
PID:1160

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" DecodersFF CodecFactory
4⤵
- Executes dropped EXE
PID:268

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EncodersFF CodecFactory
4⤵
- Executes dropped EXE
PID:1700

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EncoderLossless CodecFactory
4⤵
- Executes dropped EXE
PID:1468

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EncoderNVENC CodecFactory
4⤵
- Executes dropped EXE
PID:1936

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" DecoderNVDEC CodecFactory
4⤵
- Executes dropped EXE
PID:1196

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EncoderAMF CodecFactory
4⤵
- Executes dropped EXE
PID:880

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EncoderIM CodecFactory
4⤵
- Executes dropped EXE
PID:1464

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" DecoderMF CodecFactory
4⤵
- Executes dropped EXE
PID:1576

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EncoderMF CodecFactory
4⤵
- Executes dropped EXE
PID:1368

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" DecoderRAW CodecFactory
4⤵
- Executes dropped EXE
PID:1744

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" Effects EffectFactory
4⤵
- Executes dropped EXE
PID:608

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EffectsFF EffectFactory
4⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EffectsOgl EffectFactory
4⤵
PID:1548

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" EffectsOnnxRT EffectFactory
4⤵
- Executes dropped EXE
PID:1160

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" Filters FilterFactory
4⤵
- Executes dropped EXE
PID:1216

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" FiltersFF FilterFactory
4⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" FiltersOgl FilterFactory
4⤵
- Executes dropped EXE
PID:1548

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" FiltersSpeex FilterFactory
4⤵
- Executes dropped EXE
PID:932

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" FiltersOnnxRT FilterFactory
4⤵
- Executes dropped EXE
PID:1552

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" AnalyzerAudio AnalyzerFactory
4⤵
- Executes dropped EXE
PID:1540

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" AnalyzerVideoOpenCV AnalyzerFactory
4⤵
- Executes dropped EXE
PID:1968

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" AnalyzerVideoOnnxRT AnalyzerFactory
4⤵
- Executes dropped EXE
PID:1704

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MovaviStatistics.exe
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MovaviStatistics.exe a17701da2aa42d9fc36aebcc41083540 "Movavi Video Editor Plus" Movavi 23.3.0.0 DEFAULT 3162353164333834383337303238353035643836386562363865326330343338 fa1078ce9ffcb0574d9b857eaae74aefffffd81c https proxysss.movavi.com 0 80 "C:/Users/Admin/AppData/Local/Movavi/Movavi Video Editor 23/cache\a17701da2aa42d9fc36aebcc41083540\23.3.0.0"
4⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:1512

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" MuxerFF MuxerFactory
4⤵
- Executes dropped EXE
PID:1660

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" MuxerHEIF MuxerFactory
4⤵
- Executes dropped EXE
PID:1496

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" MuxerNetworkAPI MuxerFactory
4⤵
- Executes dropped EXE
PID:1368

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" ParserFF ParserFactory
4⤵
- Executes dropped EXE
PID:876

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" ParserHEIF ParserFactory
4⤵
- Executes dropped EXE
PID:2004

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" ParserRAW ParserFactory
4⤵
- Executes dropped EXE
PID:1876

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\PluginChecker.exe" ParserCD ParserFactory
4⤵
- Executes dropped EXE
PID:1492

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\CodecChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\CodecChecker.exe" DECODER MEDIA_FOUNDATION_IMPL CODEC_ID_H264 ""
4⤵
PID:996

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\CodecChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\CodecChecker.exe" DECODER MEDIA_FOUNDATION_IMPL CODEC_ID_AAC ""
4⤵
PID:1936

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\CodecChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\CodecChecker.exe" DECODER MEDIA_FOUNDATION_IMPL CODEC_ID_WMV3 ""
4⤵
PID:1232

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-709204528-51008632-484782426243020716348661165830711601-634297110-922346068"
1⤵
- Executes dropped EXE
PID:1768

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0\e9b3d959-6063-40fe-b482-309df60ec777.run\__sentry-breadcrumb1

Filesize
1KB

MD5
edaa84141fc2912ce338cbed8d05ef57

SHA1
6759d5b869ceeb60681ffd21a8bd2f602721c3c0

SHA256
d504c2c6ff84a278a194a3f5e2d49e0b97988d6c90759ce55abb2bcd77d2815c

SHA512
3d76fe584f524be8161518ec206563c426cf77af4378ba345e24467027a01f0225009aedfe53e69e8525e43dfd956d66f04877b0546ac5ead62b5bbb46f73803

Download Submit
C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0\e9b3d959-6063-40fe-b482-309df60ec777.run\__sentry-breadcrumb1

Filesize
12KB

MD5
a6eb1840065c22da9d2013d5fc3ce47b

SHA1
5a4abd779fdce64663a42d81cd7d4efad10e5f25

SHA256
0a417448c164702bf7d72c5a715f9936743e03f631f46351e48f8f8df63a6065

SHA512
db149d903036d81171e8e2af03403520b3558a973844ac309e55b14a42a39196ad80067985684e1040d460644218e7883f4ecc5cce69eeb8eb4e9325a056a940

Download Submit
C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0\e9b3d959-6063-40fe-b482-309df60ec777.run\__sentry-breadcrumb2

Filesize
3KB

MD5
2ea2d4a5f157c14ae89bfd4e9c03f084

SHA1
2c02bd12d03ef621152c8e3c400680f5974e7120

SHA256
8f074ee48d2bd8d18ff24f6dae439f019c72827981116e0a94068c2384713dc0

SHA512
7a6287c785ef6ac21e75aa38431028e909ad227ee377290745b948d366061f6ca17bd34a894f3cdc602a7d35c4a43f1cbed237ceaf29ba2d71b081c080ac31f0

Download Submit
C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.3.0\installer\0.5.0\e9b3d959-6063-40fe-b482-309df60ec777.run\__sentry-breadcrumb2

Filesize
8KB

MD5
363c3c306ec541920985b440d8cabd6b

SHA1
f527f2764eb593cfcb0383abc928ab1bd28074c2

SHA256
f97404de9894a160e38df45fbac3021a1006f4e108bd7cffb7a491fb9a0d4f4b

SHA512
751e132ec0e36d643b2d83cd6cc03532b1f8b6f27e260c0dc1ed147ff5ca48337a6dd5d57539009da3efaf79f1ef1e7fee2803c3e9507c8a0dc4d62f9444d976

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\CrashHandlerInitializer.dll

Filesize
31KB

MD5
e1fe130b0636a255bcaa4844c6ed0ff5

SHA1
3fb3dd877ed186d8519cf8576f12713cf1e5beac

SHA256
aa9ae51ccaf0f3541c52e7467b79125d7eaa241ff801c39c32c898ee38f9e4da

SHA512
54fbb1aab0d468010dfea04fa94a1ed0180f72d3fbcadfaa6de7f588fb745600a70226484d8fbd2b6ec7c30c5482f5924b75e444465dd93c5982ad3e2588fc6c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndAppLocations.dll

Filesize
39KB

MD5
dc0ec7778b96ec91fe68ad7feb558190

SHA1
74beb549d5751a70dedb4ebce3cc6c98ba6e6bf2

SHA256
a3d99f4a54c22a24c9963d3ed7672a307ccc8fe320faed1a2b79f4a043395765

SHA512
e385f411fd33976d8203c0b24a2b16ed0a2b72bca8d7e20a0b968f425ff38a48e4763bb1de904a7bb42da8621f87fa43325186de23cd49d66272f82a7bc66a93

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndCrashHandler.dll

Filesize
486KB

MD5
56be485ce1ea20c3a42d5ba9751e941a

SHA1
2f58b8be604d2d1f22e58da0090ed22b13862ed9

SHA256
a5b2419a7eae92053c1c42948f305438ca5088bd1f528d79bf632b70cdbc7feb

SHA512
94a2b0fe36176b621ea0e462a7a2902cc8abe0c959babd677eff2e9269ea6608be22a6a8b9b7c6eaec8b3119e4cfb9636275d61f4f3ecdcfe7968ba5695985d2

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndFilesystem.dll

Filesize
261KB

MD5
5638f68acc7cafcad1c5eaffce5d90ee

SHA1
ea7c5d1a6c5a77a6a7bb3513d93a3fab18008520

SHA256
3a35dcc3853676772e311b958caf07f91cbcae7aa7e167884ad4f4f498ae2cfd

SHA512
14647953063eaf76cf1e76e27565862bb71a8c76e696b95ec86e51acb05f3beb871c1afad991c74e0e8b82d8525be6998bf76c776cfa78ee2aa0286698c19b0d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndHash.dll

Filesize
88KB

MD5
36e7f422036ce0af573e47f17fba2284

SHA1
de7078428b03e0fb0d60dc1b51568c5b9981c0f4

SHA256
645391f0a7f6e3474d9ee4eedc09fdd291bf2510f7aad7324a0c0ddbe748153d

SHA512
7a8cff98cf1ece0bd9430bd597a956c749c550dd602ade957c8d3a011f10fc94db914bf7a7f74b05b0b352e7489b2c3fc40c2e6bdcd859f74aa2f09ac7ebe691

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndPointer.dll

Filesize
25KB

MD5
69926b244ee491952a770cafd3a7d114

SHA1
8eee2c704a1167d28fe8c895d99408dfe8e5f639

SHA256
1fdac480d2517c6b92960ad0e016a13872b7903fd94012036f6dc5c1202f29a8

SHA512
98bb10fdf3ff00013134eb0ff18e17dd91b7f69aa62350da69baa29cb3d378134b92baea9ace2308f86dfe0be0dfb429ee56c7a568f963be9e4fcfaab9c6b86e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndString.dll

Filesize
44KB

MD5
4c4658bfe43229134aba7c476da5e0cf

SHA1
de537933c23c0417e560f4f4a83ef9fcaaee5f37

SHA256
b1ba4cc11c018b8021c29317a75e598248213f417ac4e447c6f93995c830ef57

SHA512
00b7f4dcbaae16882f21ad9b29ca4e0b9177383aa3bf7ebbd8bba813b18fa948d311ef51d56fe5a39a94153ebe623908fd30904d799299473c28895c3bc295cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\InstallerGUI.exe

Filesize
1.1MB

MD5
9d36fafb8a367e89c58b7a5f2f629352

SHA1
b9b9a48cb9346a8b847b6da7e983b1dcd318c38d

SHA256
d930e724628c447ce71f0b725f7b451563c8402bc76faca42ef9d48ce708e76d

SHA512
2b840e9bb0489737572106addb5f3d16c2d97a80722774773c29b9b90699c8718de181a8649e6993ffbb04883215887bad07e5b286b4cfa63a8f2a1fc7e9b96d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\MSVCP140.dll

Filesize
552KB

MD5
29c6c243cfb1cec96b4a1008274f9600

SHA1
c54b10ef6305cc3814c68e6c8fd6daecbb27622a

SHA256
44a5af24f8d5f9c50a9e5a200a0486100afb6a0e86377e2e3e622a7bbb57cb04

SHA512
39c34554ea7b6d433c2aecfdeff87959e625e943bf7a446ebca8e5878eaf24198c1b188359a0343fb78478f2bc8b986ca4d0e69d39bac6ff80cb901fe4f113ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\VCRUNTIME140.dll

Filesize
94KB

MD5
02794a29811ba0a78e9687a0010c37ce

SHA1
97b5701d18bd5e25537851614099e2ffce25d6d8

SHA256
1729421a22585823493d5a125cd43a470889b952a2422f48a7bc8193f5c23b0f

SHA512
caf2a478e9c78c8e93dd2288ed98a9261fcf2b7e807df84f2e4d76f8130c2e503eb2470c947a678ac63e59d7d54f74e80e743d635428aa874ec2d06df68d0272

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\VCRUNTIME140_1.dll

Filesize
36KB

MD5
d8d1a08176ba2542c58669c1c04da1b7

SHA1
e0d0059baf23fb5e1d2dadedc12e2f53c930256d

SHA256
26c29d01df73a8e35d32e430c892d925abb6e4ad62d3630ae42b69daacba1a0d

SHA512
5308790fbcf6348e87e7d5b9235ed66942527326f7ba556c910d68d94617bdd247a4ed540b4b9f8d4e73d15cf4a7204c0a57d4fd348ec26e53f39b91be8617fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-file-l1-2-0.dll

Filesize
11KB

MD5
5a72a803df2b425d5aaff21f0f064011

SHA1
4b31963d981c07a7ab2a0d1a706067c539c55ec5

SHA256
629e52ba4e2dca91b10ef7729a1722888e01284eed7dda6030d0a1ec46c94086

SHA512
bf44997c405c2ba80100eb0f2ff7304938fc69e4d7ae3eac52b3c236c3188e80c9f18bda226b5f4fde0112320e74c198ad985f9ffd7cea99aca22980c39c7f69

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-file-l2-1-0.dll

Filesize
11KB

MD5
721b60b85094851c06d572f0bd5d88cd

SHA1
4d0ee4d717aeb9c35da8621a545d3e2b9f19b4e7

SHA256
dac867476caa42ff8df8f5dfe869ffd56a18dadee17d47889afb69ed6519afbf

SHA512
430a91fcecde4c8cc4ac7eb9b4c6619243ab244ee88c34c9e93ca918e54bd42b08aca8ea4475d4c0f5fa95241e4aacb3206cbae863e92d15528c8e7c9f45601b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-localization-l1-2-0.dll

Filesize
14KB

MD5
1ed0b196ab58edb58fcf84e1739c63ce

SHA1
ac7d6c77629bdee1df7e380cc9559e09d51d75b7

SHA256
8664222823e122fca724620fd8b72187fc5336c737d891d3cef85f4f533b8de2

SHA512
e1fa7f14f39c97aaa3104f3e13098626b5f7cfd665ba52dcb2312a329639aaf5083a9177e4686d11c4213e28acc40e2c027988074b6cc13c5016d5c5e9ef897b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
11KB

MD5
7e8b61d27a9d04e28d4dae0bfa0902ed

SHA1
861a7b31022915f26fb49c79ac357c65782c9f4b

SHA256
1ef06c600c451e66e744b2ca356b7f4b7b88ba2f52ec7795858d21525848ac8c

SHA512
1c5b35026937b45beb76cb8d79334a306342c57a8e36cc15d633458582fc8f7d9ab70ace7a92144288c6c017f33ecfc20477a04432619b40a21c9cda8d249f6d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-synch-l1-2-0.dll

Filesize
11KB

MD5
e86cfc5e1147c25972a5eefed7be989f

SHA1
0075091c0b1f2809393c5b8b5921586bdd389b29

SHA256
72c639d1afda32a65143bcbe016fe5d8b46d17924f5f5190eb04efe954c1199a

SHA512
ea58a8d5aa587b7f5bde74b4d394921902412617100ed161a7e0bef6b3c91c5dae657065ea7805a152dd76992997017e070f5415ef120812b0d61a401aa8c110

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-timezone-l1-1-0.dll

Filesize
11KB

MD5
91a2ae3c4eb79cf748e15a58108409ad

SHA1
d402b9df99723ea26a141bfc640d78eaf0b0111b

SHA256
b0eda99eabd32fefecc478fd9fe7439a3f646a864fdab4ec3c1f18574b5f8b34

SHA512
8527af610c1e2101b6f336a142b1a85ac9c19bb3af4ad4a245cfb6fd602dc185da0f7803358067099475102f3a8f10a834dc75b56d3e6ded2ed833c00ad217ed

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-convert-l1-1-0.dll

Filesize
15KB

MD5
4ec4790281017e616af632da1dc624e1

SHA1
342b15c5d3e34ab4ac0b9904b95d0d5b074447b7

SHA256
5cf5bbb861608131b5f560cbf34a3292c80886b7c75357acc779e0bf98e16639

SHA512
80c4e20d37eff29c7577b2d0ed67539a9c2c228edb48ab05d72648a6ed38f5ff537715c130342beb0e3ef16eb11179b9b484303354a026bda3a86d5414d24e69

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-environment-l1-1-0.dll

Filesize
11KB

MD5
7a859e91fdcf78a584ac93aa85371bc9

SHA1
1fa9d9cad7cc26808e697373c1f5f32aaf59d6b7

SHA256
b7ee468f5b6c650dada7db3ad9e115a0e97135b3df095c3220dfd22ba277b607

SHA512
a368f21eca765afca86e03d59cf953500770f4a5bff8b86b2ac53f1b5174c627e061ce9a1f781dc56506774e0d0b09725e9698d4dc2d3a59e93da7ef3d900887

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
13KB

MD5
972544ade7e32bfdeb28b39bc734cdee

SHA1
87816f4afabbdec0ec2cfeb417748398505c5aa9

SHA256
7102f8d9d0f3f689129d7fe071b234077fba4dd3687071d1e2aeaa137b123f86

SHA512
5e1131b405e0c7a255b1c51073aff99e2d5c0d28fd3e55cabc04d463758a575a954008ea1ba5b4e2b345b49af448b93ad21dfc4a01573b3cb6e7256d9ecceef1

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-heap-l1-1-0.dll

Filesize
12KB

MD5
8906279245f7385b189a6b0b67df2d7c

SHA1
fcf03d9043a2daafe8e28dee0b130513677227e4

SHA256
f5183b8d7462c01031992267fe85680ab9c5b279bedc0b25ab219f7c2184766f

SHA512
67cac89ae58cc715976107f3bdf279b1e78945afd07e6f657e076d78e92ee1a98e3e7b8feae295af5ce35e00c804f3f53a890895badb1eed32377d85c21672b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-locale-l1-1-0.dll

Filesize
11KB

MD5
dd8176e132eedea3322443046ac35ca2

SHA1
d13587c7cc52b2c6fbcaa548c8ed2c771a260769

SHA256
2eb96422375f1a7b687115b132a4005d2e7d3d5dc091fb0eb22a6471e712848e

SHA512
77cb8c44c8cc8dd29997fba4424407579ac91176482db3cf7bc37e1f9f6aa4c4f5ba14862d2f3a9c05d1fdd7ca5a043b5f566bd0e9a9e1ed837da9c11803b253

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-math-l1-1-0.dll

Filesize
20KB

MD5
a6a3d6d11d623e16866f38185853facd

SHA1
fbeadd1e9016908ecce5753de1d435d6fcf3d0b5

SHA256
a768339f0b03674735404248a039ec8591fcba6ff61a3c6812414537badd23b0

SHA512
abbf32ceb35e5ec6c1562f9f3b2652b96b7dbd97bfc08d918f987c0ec0503e8390dd697476b2a2389f0172cd8cf16029fd2ec5f32a9ba3688bf2ebeefb081b2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
15KB

MD5
f1a23c251fcbb7041496352ec9bcffbe

SHA1
be4a00642ec82465bc7b3d0cc07d4e8df72094e8

SHA256
d899c2f061952b3b97ab9cdbca2450290b0f005909ddd243ed0f4c511d32c198

SHA512
31f8c5cd3b6e153073e2e2edf0ca8072d0f787784f1611a57219349c1d57d6798a3adbd6942b0f16cef781634dd8691a5ec0b506df21b24cb70aee5523a03fd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
17KB

MD5
55b2eb7f17f82b2096e94bca9d2db901

SHA1
44d85f1b1134ee7a609165e9c142188c0f0b17e0

SHA256
f9d3f380023a4c45e74170fe69b32bca506ee1e1fbe670d965d5b50c616da0cb

SHA512
0cf0770f5965a83f546253decfa967d8f85c340b5f6ea220d3caa14245f3cdb37c53bf8d3da6c35297b22a3fa88e7621202634f6b3649d7d9c166a221d3456a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-string-l1-1-0.dll

Filesize
17KB

MD5
9b79965f06fd756a5efde11e8d373108

SHA1
3b9de8bf6b912f19f7742ad34a875cbe2b5ffa50

SHA256
1a916c0db285deb02c0b9df4d08dad5ea95700a6a812ea067bd637a91101a9f6

SHA512
7d4155c00d65c3554e90575178a80d20dc7c80d543c4b5c4c3f508f0811482515638fe513e291b82f958b4d7a63c9876be4e368557b07ff062961197ed4286fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-time-l1-1-0.dll

Filesize
13KB

MD5
1d48a3189a55b632798f0e859628b0fb

SHA1
61569a8e4f37adc353986d83efc90dc043cdc673

SHA256
b56bc94e8539603dd2f0fea2f25efd17966315067442507db4bffafcbc2955b0

SHA512
47f329102b703bfbb1ebaeb5203d1c8404a0c912019193c93d150a95bb0c5ba8dc101ac56d3283285f9f91239fc64a66a5357afe428a919b0be7194bada1f64f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-utility-l1-1-0.dll

Filesize
11KB

MD5
dbc27d384679916ba76316fb5e972ea6

SHA1
fb9f021f2220c852f6ff4ea94e8577368f0616a4

SHA256
dd14133adf5c534539298422f6c4b52739f80aca8c5a85ca8c966dea9964ceb1

SHA512
cc0d8c56749ccb9d007b6d3f5c4a8f1d4e368bb81446ebcd7cc7b40399bbd56d0acaba588ca172ecb7472a8cbddbd4c366ffa38094a832f6d7e343b813ba565e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\boost_filesystem-mt-x64.dll

Filesize
124KB

MD5
f1f8544abaae47b61cbbb5c8ba4bdcbd

SHA1
8ff7de499f3bf503be60851262fba516152d6bba

SHA256
57731503db5a05f1dff01b00c983ff5b00c6bd228f8615301afaeeef83437f08

SHA512
13a3a4cb288c485750fcf5c6c033511547b44cc705ca42e16bf4c554e6c104313eaaf78eb6fbf42e356656d8b103aadcc8e08f7593166c85f4a2ecc792493207

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\glog.dll

Filesize
114KB

MD5
4f255c84763533758bbaaa44bfa3ab65

SHA1
c59e416aee8573ce29f4df713b239e85938d5de0

SHA256
cd2cbd578f37b834fb5c3567711d790643ec1b78aa701b4dc2966d6a72e2a4a2

SHA512
bb68f5a7fbf2151d1ae65871123bf9abd33ea682d475e607f19034eb0da0338d83d45c6bc4604385fcd4164cda0fbea538044cdf2f8fce37b62ed204c056cd33

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\ucrtbase.DLL

Filesize
1011KB

MD5
849959a003fa63c5a42ae87929fcd18b

SHA1
d1b80b3265e31a2b5d8d7da6183146bbd5fb791b

SHA256
6238cbfe9f57c142b75e153c399c478d492252fda8cb40ee539c2dcb0f2eb232

SHA512
64958dabdb94d21b59254c2f074db5d51e914ddbc8437452115dff369b0c134e50462c3fdbbc14b6fa809a6ee19ab2fb83d654061601cc175cddcb7d74778e09

Download Submit
C:\Users\Admin\AppData\Local\Temp\MovaviWebInstaller-1116767015\1239641131_Wnzkvto_.exe

Filesize
90.1MB

MD5
5df245fde4e3f391c971eef69cd5b81a

SHA1
d850c5d0b1426b20016e43cc1260f8dc453daf40

SHA256
e0ab15ac2da2fb2fdbe3f2c47179453665aa2dd0ec0bfe47654a0cc9ed9cabc8

SHA512
bbd0f1296e21b6ba4c06b6699c386e63a4d74d3f2a00daec4d93cfe17c9838b81c955141610e2286700b79c963ac0daf3b54b00216e414bbc56fc2bdd0739d91

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\animations\All\05__Downward\meta.json

Filesize
57B

MD5
397860e39114807636143cf9cded92d0

SHA1
105b7f704618fff593c5a0cdd3195496ff8dd770

SHA256
4e1bffe7ba9fc5997d2772351ed5fc876bbb9082876867668ac2f3374fe0a967

SHA512
add114e352c8b98bbf0f404cbdaad92495ad149c91d64b3b4139a8a99e7d502ccbdb1e63d9b0146b6ab298c6ce3a5ceadf47785c75c197d7977a023bb50d8961

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\imports\Audio\Audio_Beep_set\images\preview.png

Filesize
5KB

MD5
2be0449cb69305f3d7108801d75220e8

SHA1
a00d24ed4f86a990d608aaee0aab41b052ca3faa

SHA256
0e3e825d4ad89330bdf051defaadc3fb1401bab8af64337b05a8802542718f2e

SHA512
97f40c818dad8013995e8267604ab65990bd34150ce44b63318f7491665fd28e24869722eaa90b3d6b2d46269b9a3bb1a8020674f35d25631520771f5ec05919

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockNewEffects2020\effects\all\{bbed1f60-10d7-4b68-a9e9-4c808f3b4fee}\version.xml

Filesize
111B

MD5
ee967846b96120d073ae5e8322a23b3e

SHA1
79d2551e78f09fcfbe3768bb785baca08d994bb6

SHA256
3d8f290b1548b462c6ea73f1d075abc84ea951641e237e853f639268318c5e03

SHA512
89b215294f0c498492d82c5a9fc62e30eac65299a760c9b73fcd693975eec1aab373b2d25e1fe75289d41620135c204beb605eb0726e2f3554fd7b35f924b162

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockThemesPack\imports\all\{475708e8-6e49-416f-b2e8-c08c5fd663da}\version.xml

Filesize
111B

MD5
f4e01c472f397751b00783072ee3d41b

SHA1
7bbb4c67cdb42bc4ab9011c51ea5307dce46138e

SHA256
2fd01c6dc5ddb425d4c2e2a2c40f46cff667e2768385dbbae4d622dfe509a5f0

SHA512
c63f1fe50d01b9171ce107262ab5e03db8e3b7ee922e48c21404d33b59f7b8893493bf39e35c4e4e2c99550f4e22510488b5e2b75f7d20f64372a436fb925d50

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockThemesPack\resources\randomTheme\theme\version.xml

Filesize
111B

MD5
40b03fd39ce75a817795881d9bb408db

SHA1
7a32668c8d74d470a16e5dd6bd53a85bd68d53e0

SHA256
769cadc93b30fc0a019d7e6ae27f4191bfcd03d2dc05029303971183f3b55d23

SHA512
8f9d027a765b2e7d00f74e35b1f97ae4df19db4d0b56da7c7213ac594ae9def7100aab74e86ce8dd92a3d13ee7d8f4069c891da4e9ff3ea650383c2a040f0803

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockTransitionsWithAudio\Transitions\all\{98e9e41e-3a7d-499e-84b9-8d264b0fab94}\version.xml

Filesize
112B

MD5
5a92f85207732f261e8c9780ee31d4f1

SHA1
62735ffceaceee0f5662ab56c534401f95cabb78

SHA256
18f339c06a84c2075b9de5610233f1775e999fc4f56856e123f02e23c6bf54fd

SHA512
8877bc84ba928e98e103c5d7e24f885b9ba2639119b959b26e9a812061f706875577bd467b9e720c998999a65d81908b87ff93f864bb09652afbc7258b785447

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockWhooshTransitions\transitions\all\{1c3ea148-67bc-4ebf-a4c2-9386a130026c}\version.xml

Filesize
108B

MD5
5eef0966fad2031510ea22c37c06cf16

SHA1
0bb95bc1d28700e13547e4b58d3861a7b2a5e8cf

SHA256
3f8def7c6ee86d81011715cd98fc70d1fdb36dd9cfcbec117f0237bcea211c67

SHA512
a91cf3b139c781e10d6ea674c27e3f0b72831d2e62ba0f6c092c1b144ba2ac49b925f3cb8b548d5b14ec5068ef2a6e29d2fb65cca7c5950c3fa7e371af32dec8

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\CrashHandlerInitializer.dll

Filesize
31KB

MD5
e1fe130b0636a255bcaa4844c6ed0ff5

SHA1
3fb3dd877ed186d8519cf8576f12713cf1e5beac

SHA256
aa9ae51ccaf0f3541c52e7467b79125d7eaa241ff801c39c32c898ee38f9e4da

SHA512
54fbb1aab0d468010dfea04fa94a1ed0180f72d3fbcadfaa6de7f588fb745600a70226484d8fbd2b6ec7c30c5482f5924b75e444465dd93c5982ad3e2588fc6c

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndAppLocations.dll

Filesize
39KB

MD5
dc0ec7778b96ec91fe68ad7feb558190

SHA1
74beb549d5751a70dedb4ebce3cc6c98ba6e6bf2

SHA256
a3d99f4a54c22a24c9963d3ed7672a307ccc8fe320faed1a2b79f4a043395765

SHA512
e385f411fd33976d8203c0b24a2b16ed0a2b72bca8d7e20a0b968f425ff38a48e4763bb1de904a7bb42da8621f87fa43325186de23cd49d66272f82a7bc66a93

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndCrashHandler.dll

Filesize
486KB

MD5
56be485ce1ea20c3a42d5ba9751e941a

SHA1
2f58b8be604d2d1f22e58da0090ed22b13862ed9

SHA256
a5b2419a7eae92053c1c42948f305438ca5088bd1f528d79bf632b70cdbc7feb

SHA512
94a2b0fe36176b621ea0e462a7a2902cc8abe0c959babd677eff2e9269ea6608be22a6a8b9b7c6eaec8b3119e4cfb9636275d61f4f3ecdcfe7968ba5695985d2

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndFilesystem.dll

Filesize
261KB

MD5
5638f68acc7cafcad1c5eaffce5d90ee

SHA1
ea7c5d1a6c5a77a6a7bb3513d93a3fab18008520

SHA256
3a35dcc3853676772e311b958caf07f91cbcae7aa7e167884ad4f4f498ae2cfd

SHA512
14647953063eaf76cf1e76e27565862bb71a8c76e696b95ec86e51acb05f3beb871c1afad991c74e0e8b82d8525be6998bf76c776cfa78ee2aa0286698c19b0d

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndHash.dll

Filesize
88KB

MD5
36e7f422036ce0af573e47f17fba2284

SHA1
de7078428b03e0fb0d60dc1b51568c5b9981c0f4

SHA256
645391f0a7f6e3474d9ee4eedc09fdd291bf2510f7aad7324a0c0ddbe748153d

SHA512
7a8cff98cf1ece0bd9430bd597a956c749c550dd602ade957c8d3a011f10fc94db914bf7a7f74b05b0b352e7489b2c3fc40c2e6bdcd859f74aa2f09ac7ebe691

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndPointer.dll

Filesize
25KB

MD5
69926b244ee491952a770cafd3a7d114

SHA1
8eee2c704a1167d28fe8c895d99408dfe8e5f639

SHA256
1fdac480d2517c6b92960ad0e016a13872b7903fd94012036f6dc5c1202f29a8

SHA512
98bb10fdf3ff00013134eb0ff18e17dd91b7f69aa62350da69baa29cb3d378134b92baea9ace2308f86dfe0be0dfb429ee56c7a568f963be9e4fcfaab9c6b86e

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\FndString.dll

Filesize
44KB

MD5
4c4658bfe43229134aba7c476da5e0cf

SHA1
de537933c23c0417e560f4f4a83ef9fcaaee5f37

SHA256
b1ba4cc11c018b8021c29317a75e598248213f417ac4e447c6f93995c830ef57

SHA512
00b7f4dcbaae16882f21ad9b29ca4e0b9177383aa3bf7ebbd8bba813b18fa948d311ef51d56fe5a39a94153ebe623908fd30904d799299473c28895c3bc295cd

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\InstallerGUI.exe

Filesize
1.1MB

MD5
9d36fafb8a367e89c58b7a5f2f629352

SHA1
b9b9a48cb9346a8b847b6da7e983b1dcd318c38d

SHA256
d930e724628c447ce71f0b725f7b451563c8402bc76faca42ef9d48ce708e76d

SHA512
2b840e9bb0489737572106addb5f3d16c2d97a80722774773c29b9b90699c8718de181a8649e6993ffbb04883215887bad07e5b286b4cfa63a8f2a1fc7e9b96d

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-file-l1-2-0.dll

Filesize
11KB

MD5
5a72a803df2b425d5aaff21f0f064011

SHA1
4b31963d981c07a7ab2a0d1a706067c539c55ec5

SHA256
629e52ba4e2dca91b10ef7729a1722888e01284eed7dda6030d0a1ec46c94086

SHA512
bf44997c405c2ba80100eb0f2ff7304938fc69e4d7ae3eac52b3c236c3188e80c9f18bda226b5f4fde0112320e74c198ad985f9ffd7cea99aca22980c39c7f69

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-file-l2-1-0.dll

Filesize
11KB

MD5
721b60b85094851c06d572f0bd5d88cd

SHA1
4d0ee4d717aeb9c35da8621a545d3e2b9f19b4e7

SHA256
dac867476caa42ff8df8f5dfe869ffd56a18dadee17d47889afb69ed6519afbf

SHA512
430a91fcecde4c8cc4ac7eb9b4c6619243ab244ee88c34c9e93ca918e54bd42b08aca8ea4475d4c0f5fa95241e4aacb3206cbae863e92d15528c8e7c9f45601b

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-localization-l1-2-0.dll

Filesize
14KB

MD5
1ed0b196ab58edb58fcf84e1739c63ce

SHA1
ac7d6c77629bdee1df7e380cc9559e09d51d75b7

SHA256
8664222823e122fca724620fd8b72187fc5336c737d891d3cef85f4f533b8de2

SHA512
e1fa7f14f39c97aaa3104f3e13098626b5f7cfd665ba52dcb2312a329639aaf5083a9177e4686d11c4213e28acc40e2c027988074b6cc13c5016d5c5e9ef897b

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
11KB

MD5
7e8b61d27a9d04e28d4dae0bfa0902ed

SHA1
861a7b31022915f26fb49c79ac357c65782c9f4b

SHA256
1ef06c600c451e66e744b2ca356b7f4b7b88ba2f52ec7795858d21525848ac8c

SHA512
1c5b35026937b45beb76cb8d79334a306342c57a8e36cc15d633458582fc8f7d9ab70ace7a92144288c6c017f33ecfc20477a04432619b40a21c9cda8d249f6d

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-synch-l1-2-0.dll

Filesize
11KB

MD5
e86cfc5e1147c25972a5eefed7be989f

SHA1
0075091c0b1f2809393c5b8b5921586bdd389b29

SHA256
72c639d1afda32a65143bcbe016fe5d8b46d17924f5f5190eb04efe954c1199a

SHA512
ea58a8d5aa587b7f5bde74b4d394921902412617100ed161a7e0bef6b3c91c5dae657065ea7805a152dd76992997017e070f5415ef120812b0d61a401aa8c110

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-core-timezone-l1-1-0.dll

Filesize
11KB

MD5
91a2ae3c4eb79cf748e15a58108409ad

SHA1
d402b9df99723ea26a141bfc640d78eaf0b0111b

SHA256
b0eda99eabd32fefecc478fd9fe7439a3f646a864fdab4ec3c1f18574b5f8b34

SHA512
8527af610c1e2101b6f336a142b1a85ac9c19bb3af4ad4a245cfb6fd602dc185da0f7803358067099475102f3a8f10a834dc75b56d3e6ded2ed833c00ad217ed

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-convert-l1-1-0.dll

Filesize
15KB

MD5
4ec4790281017e616af632da1dc624e1

SHA1
342b15c5d3e34ab4ac0b9904b95d0d5b074447b7

SHA256
5cf5bbb861608131b5f560cbf34a3292c80886b7c75357acc779e0bf98e16639

SHA512
80c4e20d37eff29c7577b2d0ed67539a9c2c228edb48ab05d72648a6ed38f5ff537715c130342beb0e3ef16eb11179b9b484303354a026bda3a86d5414d24e69

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-environment-l1-1-0.dll

Filesize
11KB

MD5
7a859e91fdcf78a584ac93aa85371bc9

SHA1
1fa9d9cad7cc26808e697373c1f5f32aaf59d6b7

SHA256
b7ee468f5b6c650dada7db3ad9e115a0e97135b3df095c3220dfd22ba277b607

SHA512
a368f21eca765afca86e03d59cf953500770f4a5bff8b86b2ac53f1b5174c627e061ce9a1f781dc56506774e0d0b09725e9698d4dc2d3a59e93da7ef3d900887

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
13KB

MD5
972544ade7e32bfdeb28b39bc734cdee

SHA1
87816f4afabbdec0ec2cfeb417748398505c5aa9

SHA256
7102f8d9d0f3f689129d7fe071b234077fba4dd3687071d1e2aeaa137b123f86

SHA512
5e1131b405e0c7a255b1c51073aff99e2d5c0d28fd3e55cabc04d463758a575a954008ea1ba5b4e2b345b49af448b93ad21dfc4a01573b3cb6e7256d9ecceef1

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-heap-l1-1-0.dll

Filesize
12KB

MD5
8906279245f7385b189a6b0b67df2d7c

SHA1
fcf03d9043a2daafe8e28dee0b130513677227e4

SHA256
f5183b8d7462c01031992267fe85680ab9c5b279bedc0b25ab219f7c2184766f

SHA512
67cac89ae58cc715976107f3bdf279b1e78945afd07e6f657e076d78e92ee1a98e3e7b8feae295af5ce35e00c804f3f53a890895badb1eed32377d85c21672b9

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-locale-l1-1-0.dll

Filesize
11KB

MD5
dd8176e132eedea3322443046ac35ca2

SHA1
d13587c7cc52b2c6fbcaa548c8ed2c771a260769

SHA256
2eb96422375f1a7b687115b132a4005d2e7d3d5dc091fb0eb22a6471e712848e

SHA512
77cb8c44c8cc8dd29997fba4424407579ac91176482db3cf7bc37e1f9f6aa4c4f5ba14862d2f3a9c05d1fdd7ca5a043b5f566bd0e9a9e1ed837da9c11803b253

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-math-l1-1-0.dll

Filesize
20KB

MD5
a6a3d6d11d623e16866f38185853facd

SHA1
fbeadd1e9016908ecce5753de1d435d6fcf3d0b5

SHA256
a768339f0b03674735404248a039ec8591fcba6ff61a3c6812414537badd23b0

SHA512
abbf32ceb35e5ec6c1562f9f3b2652b96b7dbd97bfc08d918f987c0ec0503e8390dd697476b2a2389f0172cd8cf16029fd2ec5f32a9ba3688bf2ebeefb081b2c

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
15KB

MD5
f1a23c251fcbb7041496352ec9bcffbe

SHA1
be4a00642ec82465bc7b3d0cc07d4e8df72094e8

SHA256
d899c2f061952b3b97ab9cdbca2450290b0f005909ddd243ed0f4c511d32c198

SHA512
31f8c5cd3b6e153073e2e2edf0ca8072d0f787784f1611a57219349c1d57d6798a3adbd6942b0f16cef781634dd8691a5ec0b506df21b24cb70aee5523a03fd9

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
17KB

MD5
55b2eb7f17f82b2096e94bca9d2db901

SHA1
44d85f1b1134ee7a609165e9c142188c0f0b17e0

SHA256
f9d3f380023a4c45e74170fe69b32bca506ee1e1fbe670d965d5b50c616da0cb

SHA512
0cf0770f5965a83f546253decfa967d8f85c340b5f6ea220d3caa14245f3cdb37c53bf8d3da6c35297b22a3fa88e7621202634f6b3649d7d9c166a221d3456a5

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-string-l1-1-0.dll

Filesize
17KB

MD5
9b79965f06fd756a5efde11e8d373108

SHA1
3b9de8bf6b912f19f7742ad34a875cbe2b5ffa50

SHA256
1a916c0db285deb02c0b9df4d08dad5ea95700a6a812ea067bd637a91101a9f6

SHA512
7d4155c00d65c3554e90575178a80d20dc7c80d543c4b5c4c3f508f0811482515638fe513e291b82f958b4d7a63c9876be4e368557b07ff062961197ed4286fb

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-time-l1-1-0.dll

Filesize
13KB

MD5
1d48a3189a55b632798f0e859628b0fb

SHA1
61569a8e4f37adc353986d83efc90dc043cdc673

SHA256
b56bc94e8539603dd2f0fea2f25efd17966315067442507db4bffafcbc2955b0

SHA512
47f329102b703bfbb1ebaeb5203d1c8404a0c912019193c93d150a95bb0c5ba8dc101ac56d3283285f9f91239fc64a66a5357afe428a919b0be7194bada1f64f

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\api-ms-win-crt-utility-l1-1-0.dll

Filesize
11KB

MD5
dbc27d384679916ba76316fb5e972ea6

SHA1
fb9f021f2220c852f6ff4ea94e8577368f0616a4

SHA256
dd14133adf5c534539298422f6c4b52739f80aca8c5a85ca8c966dea9964ceb1

SHA512
cc0d8c56749ccb9d007b6d3f5c4a8f1d4e368bb81446ebcd7cc7b40399bbd56d0acaba588ca172ecb7472a8cbddbd4c366ffa38094a832f6d7e343b813ba565e

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\boost_filesystem-mt-x64.dll

Filesize
124KB

MD5
f1f8544abaae47b61cbbb5c8ba4bdcbd

SHA1
8ff7de499f3bf503be60851262fba516152d6bba

SHA256
57731503db5a05f1dff01b00c983ff5b00c6bd228f8615301afaeeef83437f08

SHA512
13a3a4cb288c485750fcf5c6c033511547b44cc705ca42e16bf4c554e6c104313eaaf78eb6fbf42e356656d8b103aadcc8e08f7593166c85f4a2ecc792493207

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\glog.dll

Filesize
114KB

MD5
4f255c84763533758bbaaa44bfa3ab65

SHA1
c59e416aee8573ce29f4df713b239e85938d5de0

SHA256
cd2cbd578f37b834fb5c3567711d790643ec1b78aa701b4dc2966d6a72e2a4a2

SHA512
bb68f5a7fbf2151d1ae65871123bf9abd33ea682d475e607f19034eb0da0338d83d45c6bc4604385fcd4164cda0fbea538044cdf2f8fce37b62ed204c056cd33

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\msvcp140.dll

Filesize
552KB

MD5
29c6c243cfb1cec96b4a1008274f9600

SHA1
c54b10ef6305cc3814c68e6c8fd6daecbb27622a

SHA256
44a5af24f8d5f9c50a9e5a200a0486100afb6a0e86377e2e3e622a7bbb57cb04

SHA512
39c34554ea7b6d433c2aecfdeff87959e625e943bf7a446ebca8e5878eaf24198c1b188359a0343fb78478f2bc8b986ca4d0e69d39bac6ff80cb901fe4f113ee

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\ucrtbase.dll

Filesize
1011KB

MD5
849959a003fa63c5a42ae87929fcd18b

SHA1
d1b80b3265e31a2b5d8d7da6183146bbd5fb791b

SHA256
6238cbfe9f57c142b75e153c399c478d492252fda8cb40ee539c2dcb0f2eb232

SHA512
64958dabdb94d21b59254c2f074db5d51e914ddbc8437452115dff369b0c134e50462c3fdbbc14b6fa809a6ee19ab2fb83d654061601cc175cddcb7d74778e09

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\vcruntime140.dll

Filesize
94KB

MD5
02794a29811ba0a78e9687a0010c37ce

SHA1
97b5701d18bd5e25537851614099e2ffce25d6d8

SHA256
1729421a22585823493d5a125cd43a470889b952a2422f48a7bc8193f5c23b0f

SHA512
caf2a478e9c78c8e93dd2288ed98a9261fcf2b7e807df84f2e4d76f8130c2e503eb2470c947a678ac63e59d7d54f74e80e743d635428aa874ec2d06df68d0272

Download Submit
\Users\Admin\AppData\Local\Temp\Movavi-installer-464b377d-9cb9-4b12-88f3-ab8e8c2abb54\vcruntime140_1.dll

Filesize
36KB

MD5
d8d1a08176ba2542c58669c1c04da1b7

SHA1
e0d0059baf23fb5e1d2dadedc12e2f53c930256d

SHA256
26c29d01df73a8e35d32e430c892d925abb6e4ad62d3630ae42b69daacba1a0d

SHA512
5308790fbcf6348e87e7d5b9235ed66942527326f7ba556c910d68d94617bdd247a4ed540b4b9f8d4e73d15cf4a7204c0a57d4fd348ec26e53f39b91be8617fb

Download Submit
\Users\Admin\AppData\Local\Temp\MovaviWebInstaller-1116767015\1239641131_Wnzkvto_.exe

Filesize
90.1MB

MD5
5df245fde4e3f391c971eef69cd5b81a

SHA1
d850c5d0b1426b20016e43cc1260f8dc453daf40

SHA256
e0ab15ac2da2fb2fdbe3f2c47179453665aa2dd0ec0bfe47654a0cc9ed9cabc8

SHA512
bbd0f1296e21b6ba4c06b6699c386e63a4d74d3f2a00daec4d93cfe17c9838b81c955141610e2286700b79c963ac0daf3b54b00216e414bbc56fc2bdd0739d91

Download Submit
memory/268-802-0x000007FEF2E10000-0x000007FEF2EA5000-memory.dmp

Filesize
596KB

Download
memory/268-800-0x000007FEF2EB0000-0x000007FEF30ED000-memory.dmp

Filesize
2.2MB

Download
memory/268-796-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/268-793-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/268-782-0x000007FEED3B0000-0x000007FEEFB81000-memory.dmp

Filesize
39.8MB

Download
memory/268-778-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/268-779-0x000007FEF30F0000-0x000007FEF3118000-memory.dmp

Filesize
160KB

Download
memory/268-776-0x000007FEF3120000-0x000007FEF31B2000-memory.dmp

Filesize
584KB

Download
memory/984-759-0x000007FEF2E10000-0x000007FEF2EA5000-memory.dmp

Filesize
596KB

Download
memory/984-760-0x000007FEEFCB0000-0x000007FEEFF3D000-memory.dmp

Filesize
2.6MB

Download
memory/984-752-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/984-753-0x000007FEF30F0000-0x000007FEF3118000-memory.dmp

Filesize
160KB

Download
memory/984-754-0x000007FEED3B0000-0x000007FEEFB81000-memory.dmp

Filesize
39.8MB

Download
memory/984-751-0x000007FEF3120000-0x000007FEF31B2000-memory.dmp

Filesize
584KB

Download
memory/984-762-0x000007FEF1D20000-0x000007FEF1D50000-memory.dmp

Filesize
192KB

Download
memory/984-761-0x0000000068DC0000-0x00000000690B1000-memory.dmp

Filesize
2.9MB

Download
memory/984-755-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/984-756-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/984-758-0x000007FEF2EB0000-0x000007FEF30ED000-memory.dmp

Filesize
2.2MB

Download
memory/1008-5210-0x0000000002E40000-0x0000000002E4A000-memory.dmp

Filesize
40KB

Download
memory/1008-479-0x0000000002070000-0x0000000002080000-memory.dmp

Filesize
64KB

Download
memory/1008-733-0x000007FEF2EB0000-0x000007FEF30ED000-memory.dmp

Filesize
2.2MB

Download
memory/1008-739-0x0000000068DC0000-0x00000000690B1000-memory.dmp

Filesize
2.9MB

Download
memory/1008-408-0x000007FEF6190000-0x000007FEF66DA000-memory.dmp

Filesize
5.3MB

Download
memory/1008-5162-0x0000000002E40000-0x0000000002E4A000-memory.dmp

Filesize
40KB

Download
memory/1008-731-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/1008-728-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/1008-713-0x000007FEF3120000-0x000007FEF31B2000-memory.dmp

Filesize
584KB

Download
memory/1008-717-0x000007FEF30F0000-0x000007FEF3118000-memory.dmp

Filesize
160KB

Download
memory/1008-715-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/1008-5174-0x0000000002E40000-0x0000000002E4A000-memory.dmp

Filesize
40KB

Download
memory/1008-5186-0x0000000002E40000-0x0000000002E4A000-memory.dmp

Filesize
40KB

Download
memory/1008-5198-0x0000000002E40000-0x0000000002E4A000-memory.dmp

Filesize
40KB

Download
memory/1008-719-0x000007FEED3B0000-0x000007FEEFB81000-memory.dmp

Filesize
39.8MB

Download
memory/1008-5222-0x0000000002E40000-0x0000000002E4A000-memory.dmp

Filesize
40KB

Download
memory/1008-909-0x000007FEEFD70000-0x000007FEF032B000-memory.dmp

Filesize
5.7MB

Download
memory/1008-5236-0x0000000002E40000-0x0000000002E4A000-memory.dmp

Filesize
40KB

Download
memory/1008-483-0x000007FEECDF0000-0x000007FEED3AB000-memory.dmp

Filesize
5.7MB

Download
memory/1008-737-0x000007FEF2E10000-0x000007FEF2EA5000-memory.dmp

Filesize
596KB

Download
memory/1008-421-0x000007FEEFD70000-0x000007FEF032B000-memory.dmp

Filesize
5.7MB

Download
memory/1008-417-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/1008-416-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/1008-905-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/1008-903-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/1008-409-0x000007FEF50A0000-0x000007FEF549D000-memory.dmp

Filesize
4.0MB

Download
memory/1464-2027-0x0000000002400000-0x000000000240A000-memory.dmp

Filesize
40KB

Download
memory/1464-2172-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-3870-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-2202-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-2026-0x0000000002400000-0x000000000240A000-memory.dmp

Filesize
40KB

Download
memory/1464-2028-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-2192-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-2191-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-2183-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-2173-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-2165-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1464-2185-0x0000000002500000-0x000000000250A000-memory.dmp

Filesize
40KB

Download
memory/1512-4939-0x00000000005A0000-0x00000000005B0000-memory.dmp

Filesize
64KB

Download
memory/1576-2331-0x000007FEC02B0000-0x000007FEC02BA000-memory.dmp

Filesize
40KB

Download
memory/1700-843-0x000007FEED3B0000-0x000007FEEFB81000-memory.dmp

Filesize
39.8MB

Download
memory/1700-858-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/1700-862-0x000007FEF2E10000-0x000007FEF2EA5000-memory.dmp

Filesize
596KB

Download
memory/1700-860-0x000007FEF2EB0000-0x000007FEF30ED000-memory.dmp

Filesize
2.2MB

Download
memory/1700-855-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/1700-839-0x000007FEF30F0000-0x000007FEF3118000-memory.dmp

Filesize
160KB

Download
memory/1700-838-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/1700-836-0x000007FEF3120000-0x000007FEF31B2000-memory.dmp

Filesize
584KB

Download
memory/1788-851-0x0000000000650000-0x0000000000660000-memory.dmp

Filesize
64KB

Download
memory/2004-729-0x000007FEF2EB0000-0x000007FEF30ED000-memory.dmp

Filesize
2.2MB

Download
memory/2004-734-0x000007FEF2E10000-0x000007FEF2EA5000-memory.dmp

Filesize
596KB

Download
memory/2004-726-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/2004-724-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/2004-708-0x000007FEED3B0000-0x000007FEEFB81000-memory.dmp

Filesize
39.8MB

Download
memory/2004-706-0x000007FEF30F0000-0x000007FEF3118000-memory.dmp

Filesize
160KB

Download
memory/2004-704-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/2004-702-0x000007FEF3120000-0x000007FEF31B2000-memory.dmp

Filesize
584KB

Download
memory/2004-622-0x0000000001E00000-0x0000000001E0A000-memory.dmp

Filesize
40KB

Download
memory/2004-621-0x0000000001DF0000-0x0000000001DFA000-memory.dmp

Filesize
40KB

Download
memory/2004-620-0x0000000001DD0000-0x0000000001DE0000-memory.dmp

Filesize
64KB

Download