9bb1ffc5759cda1bf670be9acfe8626abfdb3b23b50504e4dfc00b609df2b7ad

Analysis

max time kernel
119s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
26-05-2023 03:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
Size

1.9MB
MD5

1176914c8a8cfee425ba582c595065d6
SHA1

3f38397cd5e7aa69902badf6d7b9b935f5e822df
SHA256

9bb1ffc5759cda1bf670be9acfe8626abfdb3b23b50504e4dfc00b609df2b7ad
SHA512

e6597857c382b8e52f3080f75b442b3347abde1213c9b0ea53ffb8f6c42f14e4d138f46c1d116cb864f5808d33b916a633c0beef7db578599328d7474cf914f5
SSDEEP

49152:lvhlHWBwS6D7ddSNPHu0gbZs3HaGYLWEdZYgVbBr:RLHW2ZWH5gO3HXYLu2

Score

8^/10

bootkit persistence

Malware Config

Signatures

Downloads MZ/PE file

Checks BIOS information in registry 2 TTPs 2 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

InstallerGUI.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	InstallerGUI.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	InstallerGUI.exe

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
bootkit persistence

Bootkit
T1067

Processes:

InstallerGUI.exe

description ioc process

File opened for modification \??\PhysicalDrive0 InstallerGUI.exe
Drops file in Windows directory 1 IoCs

Processes:

InstallerGUI.exe

description ioc process

File opened for modification C:\Windows\Q487734.log InstallerGUI.exe

description	ioc	process
File opened for modification	\??\PhysicalDrive0	InstallerGUI.exe

description	ioc	process
File opened for modification	C:\Windows\Q487734.log	InstallerGUI.exe

Executes dropped EXE 10 IoCs

Processes:

1196919900_Wnpxqjh_.exeInstallerGUI.execrashpad_handler.exeCoreChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exePluginChecker.exe

pid	process
1120	1196919900_Wnpxqjh_.exe
1240	InstallerGUI.exe
3892	crashpad_handler.exe
1880	CoreChecker.exe
5116	PluginChecker.exe
4100	PluginChecker.exe
4604	PluginChecker.exe
2820	PluginChecker.exe
3784	PluginChecker.exe
2316	PluginChecker.exe

Loads dropped DLL 64 IoCs

Processes:

InstallerGUI.exe

pid	process
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe
1240	InstallerGUI.exe

Modifies registry class 14 IoCs

Processes:

InstallerGUI.exe

description	ioc	process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{C0937617-604C-9916-B043}\vnvfowhy = c4867512226d2f766cb7185bc6246ca9d4c4621c	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{C602395E-E89F-DEDE-1AF3}	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{862988D9-7D99-1E06-4CEA}\uumvmmux = 2870b9b27ce07a8b3a4b998c006480dc9e7f2759	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{862988D9-7D99-1E06-4CEA}\uumvmmux = 3670468aa86d517c1478cc7c9c540bab3a614820	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{961EE1CE-3381-7580-E2CB}	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{862988D9-7D99-1E06-4CEA}	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{961EE1CE-3381-7580-E2CB}\khxuuwnb = 04122ec08a20817b4437577afe9b802acce12ced	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{C0937617-604C-9916-B043}	InstallerGUI.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{C602395E-E89F-DEDE-1AF3}\vumkpgpo = 266936ccbcd10f7870081f9ce8b8cf2c0286b88c	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{961EE1CE-3381-7580-E2CB}\khxuuwnb = b4a9145bbe5eb87d7c4e089fceab38ae6836b40c	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{862988D9-7D99-1E06-4CEA}\uumvmmux = 289058d28ae0b8da4a792fe0fa3bb32f9693ecb8	InstallerGUI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\CcFWSettg.Category\CLSID\{961EE1CE-3381-7580-E2CB}\khxuuwnb = 4475e9a2689f7662a882f05ff8437ccf14991e70	InstallerGUI.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

Processes:

InstallerGUI.exePluginChecker.exe

pid process

1240 InstallerGUI.exe
5116 PluginChecker.exe
Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes:

InstallerGUI.exe

pid process

1240 InstallerGUI.exe
1240 InstallerGUI.exe
1240 InstallerGUI.exe
1240 InstallerGUI.exe
1240 InstallerGUI.exe
1240 InstallerGUI.exe

Suspicious use of SetWindowsHookEx 12 IoCs

Processes:

MovaviVideoEditorPlusSetupC_Wnpxqjh_.exeInstallerGUI.exePluginChecker.exe

pid	process
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
1240	InstallerGUI.exe
5116	PluginChecker.exe
5116	PluginChecker.exe

Suspicious use of WriteProcessMemory 20 IoCs

Processes:

MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe1196919900_Wnpxqjh_.exeInstallerGUI.exeCoreChecker.exe

description	pid	process	target process
PID 4936 wrote to memory of 1120	4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe	1196919900_Wnpxqjh_.exe
PID 4936 wrote to memory of 1120	4936	MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe	1196919900_Wnpxqjh_.exe
PID 1120 wrote to memory of 1240	1120	1196919900_Wnpxqjh_.exe	InstallerGUI.exe
PID 1120 wrote to memory of 1240	1120	1196919900_Wnpxqjh_.exe	InstallerGUI.exe
PID 1240 wrote to memory of 3892	1240	InstallerGUI.exe	crashpad_handler.exe
PID 1240 wrote to memory of 3892	1240	InstallerGUI.exe	crashpad_handler.exe
PID 1240 wrote to memory of 1880	1240	InstallerGUI.exe	CoreChecker.exe
PID 1240 wrote to memory of 1880	1240	InstallerGUI.exe	CoreChecker.exe
PID 1880 wrote to memory of 5116	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 5116	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 4100	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 4100	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 4604	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 4604	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 2820	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 2820	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 3784	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 3784	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 2316	1880	CoreChecker.exe	PluginChecker.exe
PID 1880 wrote to memory of 2316	1880	CoreChecker.exe	PluginChecker.exe

C:\Users\Admin\AppData\Local\Temp\MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe
"C:\Users\Admin\AppData\Local\Temp\MovaviVideoEditorPlusSetupC_Wnpxqjh_.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4936

C:\Users\Admin\AppData\Local\Temp\MovaviWebInstaller-1417002543\1196919900_Wnpxqjh_.exe
C:/Users/Admin/AppData/Local/Temp/MovaviWebInstaller-1417002543/1196919900_Wnpxqjh_.exe /S /LOCALE=en_US /D=C:/Users/Admin/AppData/Roaming /WEBUID=npxqjh /PREFERRED_BROWSER=chrome.exe
2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1120

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\InstallerGUI.exe
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\InstallerGUI.exe "--distrib-name=C:\Users\Admin\AppData\Local\Temp\MovaviWebInstaller-1417002543\1196919900_Wnpxqjh_.exe" "/S" "/LOCALE=en_US" "/D=C:/Users/Admin/AppData/Roaming" "/WEBUID=npxqjh" "/PREFERRED_BROWSER=chrome.exe"
3⤵
- Checks BIOS information in registry
- Writes to the Master Boot Record (MBR)
- Drops file in Windows directory
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1240

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\crashpad_handler.exe
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.4.1\installer\0.5.0 --metrics-dir=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.4.1\installer\0.5.0 --url=https://o474997.ingest.sentry.io:443/api/4504371526893568/minidump/?sentry_client=sentry.native/0.5.0&sentry_key=be163ba9c8fc4472baedcce3cfb2b09b --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.4.1\installer\0.5.0\e2dc43e8-e4a2-4a5c-1f54-917e8dde9ce3.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.4.1\installer\0.5.0\e2dc43e8-e4a2-4a5c-1f54-917e8dde9ce3.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.4.1\installer\0.5.0\e2dc43e8-e4a2-4a5c-1f54-917e8dde9ce3.run\__sentry-breadcrumb2 --initial-client-data=0x38c,0x390,0x394,0x368,0x398,0x7ff8b3a31fe8,0x7ff8b3a32000,0x7ff8b3a32018
4⤵
- Executes dropped EXE
PID:3892

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\CoreChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\CoreChecker.exe" all
4⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1880

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" OglManager OglManager
5⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5116

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" FiltersFF AlgorithmFactory
5⤵
- Executes dropped EXE
PID:4100

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" DecodersFF CodecFactory
5⤵
- Executes dropped EXE
PID:4604

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EncodersFF CodecFactory
5⤵
- Executes dropped EXE
PID:2820

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EncoderLossless CodecFactory
5⤵
- Executes dropped EXE
PID:3784

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EncoderNVENC CodecFactory
5⤵
- Executes dropped EXE
PID:2316

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" DecoderNVDEC CodecFactory
5⤵
PID:3456

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EncoderAMF CodecFactory
5⤵
PID:2972

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EncoderIM CodecFactory
5⤵
PID:548

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" DecoderMF CodecFactory
5⤵
PID:3796

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EncoderMF CodecFactory
5⤵
PID:4136

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" DecoderRAW CodecFactory
5⤵
PID:4944

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" Effects EffectFactory
5⤵
PID:3484

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EffectsFF EffectFactory
5⤵
PID:1668

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EffectsOgl EffectFactory
5⤵
PID:2116

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" EffectsOnnxRT EffectFactory
5⤵
PID:4564

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" Filters FilterFactory
5⤵
PID:3568

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" FiltersFF FilterFactory
5⤵
PID:856

C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe
"C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\PluginChecker.exe" FiltersOgl FilterFactory
5⤵
PID:3344

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Movavi\Sentry\videoeditorplus\23.4.1\installer\0.5.0\e2dc43e8-e4a2-4a5c-1f54-917e8dde9ce3.run\__sentry-breadcrumb1

Filesize
1002B

MD5
33431ef2120009d90af3a019d7a32b61

SHA1
309bf03556c8cd58409888f9adf83130aa384816

SHA256
506b8eda93e87a830e29b2c5512efd4d9ec148f75cc0f963dda592acd6031370

SHA512
a6bd86d3473218d143c895e920492864160325040319605a892935eba924b1d1a59ed300bdb8ed5f0d0293f74412e99195c5ba8aa478b8d8e882041a2d9543fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\AppActivation.dll

Filesize
768KB

MD5
9ef57498983111f710d503e4f1e417aa

SHA1
c5050f4d90cbb7858d75ac3d6beddefdbe07ddc1

SHA256
566c1cbcc9246b2eb7ac70dfae0fe96eefe0305c108831c9e88a444e935f186a

SHA512
41b5bad690b5d486783dc26ed7ec8cb39268493c18b506b8f7640561691d977727fa3a01856ce5913c980f43208166179e2a7365b0b2ec8963038094829271c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\AppActivation.dll

Filesize
768KB

MD5
9ef57498983111f710d503e4f1e417aa

SHA1
c5050f4d90cbb7858d75ac3d6beddefdbe07ddc1

SHA256
566c1cbcc9246b2eb7ac70dfae0fe96eefe0305c108831c9e88a444e935f186a

SHA512
41b5bad690b5d486783dc26ed7ec8cb39268493c18b506b8f7640561691d977727fa3a01856ce5913c980f43208166179e2a7365b0b2ec8963038094829271c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\AppcoreTrackerWrapper.dll

Filesize
92KB

MD5
9977d014f404da95094f7b7f52f0947f

SHA1
fe06a9f429778b167e18bc2e788d790ad63fdf56

SHA256
7f80cae3936f44e672eb42927d614e5129e533467cf281081751e7715f8afb7d

SHA512
569a22f19273409bb79a86f98a7f4f9bf05e73c5abac33c6754b6a4e71d0ad18b8d8a5274894998e1ff3170a4a7130bd04529d7c6bdeb07b11a8b9786f3e9f7a

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\AppcoreTrackerWrapper.dll

Filesize
92KB

MD5
9977d014f404da95094f7b7f52f0947f

SHA1
fe06a9f429778b167e18bc2e788d790ad63fdf56

SHA256
7f80cae3936f44e672eb42927d614e5129e533467cf281081751e7715f8afb7d

SHA512
569a22f19273409bb79a86f98a7f4f9bf05e73c5abac33c6754b6a4e71d0ad18b8d8a5274894998e1ff3170a4a7130bd04529d7c6bdeb07b11a8b9786f3e9f7a

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\CoreApp.dll

Filesize
426KB

MD5
49496fbfee22b5ffe766962c0117c815

SHA1
6be000bd233543047f0555cf9625f5e0ff034fc7

SHA256
a25b84833fb1f380c17d8c20619ecf3e3a40854f3a8ca45acd63c0b030264f12

SHA512
2b5fdc4a25e08ccf39abec8ccbc3454ab39c3e1f0526dea10e1711be9328360c760cb3f4dd6bf504b77dcbf499a486bdd98d40a83889191247847116c6bbd55f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\CoreApp.dll

Filesize
426KB

MD5
49496fbfee22b5ffe766962c0117c815

SHA1
6be000bd233543047f0555cf9625f5e0ff034fc7

SHA256
a25b84833fb1f380c17d8c20619ecf3e3a40854f3a8ca45acd63c0b030264f12

SHA512
2b5fdc4a25e08ccf39abec8ccbc3454ab39c3e1f0526dea10e1711be9328360c760cb3f4dd6bf504b77dcbf499a486bdd98d40a83889191247847116c6bbd55f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\CrashHandlerInitializer.dll

Filesize
29KB

MD5
8aa014ff326eddcfc9248119ee0a520e

SHA1
854c45a667af74400f085ce39400335781fb8978

SHA256
a6b0569d09cc14b5984520326c0fee7fe29ad72dae86dea7691fbec33568aed7

SHA512
ea6bcc2fb5ba2129bd6bd5c1b6e1003c6a509d6face93b0155222f9061d7e9739951a9699bb7a6436a241a4454528a5d7b61eb4b4234a2030a2decc0ce183966

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\CrashHandlerInitializer.dll

Filesize
29KB

MD5
8aa014ff326eddcfc9248119ee0a520e

SHA1
854c45a667af74400f085ce39400335781fb8978

SHA256
a6b0569d09cc14b5984520326c0fee7fe29ad72dae86dea7691fbec33568aed7

SHA512
ea6bcc2fb5ba2129bd6bd5c1b6e1003c6a509d6face93b0155222f9061d7e9739951a9699bb7a6436a241a4454528a5d7b61eb4b4234a2030a2decc0ce183966

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndAppLocations.dll

Filesize
37KB

MD5
963ff787a8e0b75bd66d43c5216f2199

SHA1
fbcb32d69a064d99547d8d34118fa747a481105a

SHA256
df4d2cc8560a68017255d6ca08d18fe7693b23e6a34de5666439c39e8353e26e

SHA512
a211c8b784d4fd64ef6a133cce2c107f54ab45c3701e4e904c2f556c61eb25434032624776fcfb8580fea34fede54ad7b8f9aab37ae8f9c820385a2cb911ba00

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndAppLocations.dll

Filesize
37KB

MD5
963ff787a8e0b75bd66d43c5216f2199

SHA1
fbcb32d69a064d99547d8d34118fa747a481105a

SHA256
df4d2cc8560a68017255d6ca08d18fe7693b23e6a34de5666439c39e8353e26e

SHA512
a211c8b784d4fd64ef6a133cce2c107f54ab45c3701e4e904c2f556c61eb25434032624776fcfb8580fea34fede54ad7b8f9aab37ae8f9c820385a2cb911ba00

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndCrashHandler.dll

Filesize
484KB

MD5
f7c8f7e9947c7c83b5f8394787806dc9

SHA1
17b993e20b5a30457fd0e237dec49aee354b4ab1

SHA256
bcaa788be6b0c02949aa71447b053d23d59b49d56b2c24ba9fda25dce519091b

SHA512
063482b01e9343bd94c16a27f544349a7cdc3288e057dc235feaefadc619f6d0601da07bb16ba196cff5b675bab62ff0376f261549150ad192ceb4c6dc913a64

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndCrashHandler.dll

Filesize
484KB

MD5
f7c8f7e9947c7c83b5f8394787806dc9

SHA1
17b993e20b5a30457fd0e237dec49aee354b4ab1

SHA256
bcaa788be6b0c02949aa71447b053d23d59b49d56b2c24ba9fda25dce519091b

SHA512
063482b01e9343bd94c16a27f544349a7cdc3288e057dc235feaefadc619f6d0601da07bb16ba196cff5b675bab62ff0376f261549150ad192ceb4c6dc913a64

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndDyLib.dll

Filesize
104KB

MD5
a34266aa346f8ae830b82f6343174650

SHA1
6b84ecb4b6d8141cea9038a39636bbb57c7a8831

SHA256
db965370577579d469726ac2842387853740b1e8c5a7e7b83933ac7d190b073d

SHA512
bd99de890d9d83fc84251f5b3d8df3fb42bbbb6c7b5e2f06e11b556da411a78d3b51afbe698e4b341050c2f6f9193579b1cb3b0cd0d257fd119baab18c81bbc5

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndDyLib.dll

Filesize
104KB

MD5
a34266aa346f8ae830b82f6343174650

SHA1
6b84ecb4b6d8141cea9038a39636bbb57c7a8831

SHA256
db965370577579d469726ac2842387853740b1e8c5a7e7b83933ac7d190b073d

SHA512
bd99de890d9d83fc84251f5b3d8df3fb42bbbb6c7b5e2f06e11b556da411a78d3b51afbe698e4b341050c2f6f9193579b1cb3b0cd0d257fd119baab18c81bbc5

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndException.dll

Filesize
110KB

MD5
55d96c7e3a9e61a4099fcd6527cb21e7

SHA1
2840a8b52009f5eced24626dd92683aa5e53b06f

SHA256
e672b5db0907c31126200905b5a1f1986fc3de5cf955f92c483a42f65ca64f48

SHA512
bc0db4b3b63beed517e830795c8cced94e572d9b698f29a0d51c438f1e34b4a2053a749f336d74f6b69e30e9738619d5837c8332b30ba866f155b08b65f5dfdb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndException.dll

Filesize
110KB

MD5
55d96c7e3a9e61a4099fcd6527cb21e7

SHA1
2840a8b52009f5eced24626dd92683aa5e53b06f

SHA256
e672b5db0907c31126200905b5a1f1986fc3de5cf955f92c483a42f65ca64f48

SHA512
bc0db4b3b63beed517e830795c8cced94e572d9b698f29a0d51c438f1e34b4a2053a749f336d74f6b69e30e9738619d5837c8332b30ba866f155b08b65f5dfdb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndException.dll

Filesize
110KB

MD5
55d96c7e3a9e61a4099fcd6527cb21e7

SHA1
2840a8b52009f5eced24626dd92683aa5e53b06f

SHA256
e672b5db0907c31126200905b5a1f1986fc3de5cf955f92c483a42f65ca64f48

SHA512
bc0db4b3b63beed517e830795c8cced94e572d9b698f29a0d51c438f1e34b4a2053a749f336d74f6b69e30e9738619d5837c8332b30ba866f155b08b65f5dfdb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndFilesystem.dll

Filesize
284KB

MD5
5e9ba1ef5a7729b1c13de629841e7380

SHA1
fbb7969dd1de6e1027c0ba17170c62f67a9633a0

SHA256
4374e34fa4a25a40de94f71a722b050797944f16b6d1a6fdc967b86975c9560c

SHA512
b5b07db9152026164d436095a2835549a25daa4f93f7d2e58b60821209b2e0ed26c9c9684e8f9b6ebac5228d76457250616d02471eefb10ead65ebd663d0d74a

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndFilesystem.dll

Filesize
284KB

MD5
5e9ba1ef5a7729b1c13de629841e7380

SHA1
fbb7969dd1de6e1027c0ba17170c62f67a9633a0

SHA256
4374e34fa4a25a40de94f71a722b050797944f16b6d1a6fdc967b86975c9560c

SHA512
b5b07db9152026164d436095a2835549a25daa4f93f7d2e58b60821209b2e0ed26c9c9684e8f9b6ebac5228d76457250616d02471eefb10ead65ebd663d0d74a

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndHash.dll

Filesize
86KB

MD5
bb501ae56cae0a5aa9b848a4fc5cd334

SHA1
7b32a73b602ca657c968201b19ba60a06060b75f

SHA256
41aef0e61187a1d71f25a19d05f26218e83b54023153ad65bf0581c38cbf18de

SHA512
e4be98321f23c4ef1d160f8d90b31bb2aeb1c9b4524e00f7b5acf7cbbd6b74c3852aa811a6402d8c95613e8ac6d67e2bbb7592b5f81f7a3964e784bc8357abf2

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndHash.dll

Filesize
86KB

MD5
bb501ae56cae0a5aa9b848a4fc5cd334

SHA1
7b32a73b602ca657c968201b19ba60a06060b75f

SHA256
41aef0e61187a1d71f25a19d05f26218e83b54023153ad65bf0581c38cbf18de

SHA512
e4be98321f23c4ef1d160f8d90b31bb2aeb1c9b4524e00f7b5acf7cbbd6b74c3852aa811a6402d8c95613e8ac6d67e2bbb7592b5f81f7a3964e784bc8357abf2

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndOS.dll

Filesize
176KB

MD5
01a0ad24fa8adef6ac329504d62ecff9

SHA1
30fefdd74ab516cb53a699bbcc48a8011fd5d01f

SHA256
44f9f53546404afdf449a752362873a6f9f340cbe043dee20ce4dd34a5e12245

SHA512
eed0cea7e7ac2056c648e763f4b8d02a2d6f462450bdad4e81c0bd595826145232acae9485f60700c2299544ff06fb0bfe1085f1c06e446285c443772b2f993c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndOS.dll

Filesize
176KB

MD5
01a0ad24fa8adef6ac329504d62ecff9

SHA1
30fefdd74ab516cb53a699bbcc48a8011fd5d01f

SHA256
44f9f53546404afdf449a752362873a6f9f340cbe043dee20ce4dd34a5e12245

SHA512
eed0cea7e7ac2056c648e763f4b8d02a2d6f462450bdad4e81c0bd595826145232acae9485f60700c2299544ff06fb0bfe1085f1c06e446285c443772b2f993c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndPointer.dll

Filesize
23KB

MD5
08f1e921a44622a96b5949232f003842

SHA1
2573c96da564212b050ad21d2f75dc93c364eec9

SHA256
4a0a567e53e031e8c9dd5af1098d3bcfc59a6ae4db3ff6ffba60d37e4fd23d04

SHA512
da03c04b1bb5352631b6f987e59d328e3d535576d6020da35655f9ccacd3a94f0d5f240fcc8a7e1216a0356de056f139bee67294d65b1d9c3e9542682c9fa9ec

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndPointer.dll

Filesize
23KB

MD5
08f1e921a44622a96b5949232f003842

SHA1
2573c96da564212b050ad21d2f75dc93c364eec9

SHA256
4a0a567e53e031e8c9dd5af1098d3bcfc59a6ae4db3ff6ffba60d37e4fd23d04

SHA512
da03c04b1bb5352631b6f987e59d328e3d535576d6020da35655f9ccacd3a94f0d5f240fcc8a7e1216a0356de056f139bee67294d65b1d9c3e9542682c9fa9ec

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndString.dll

Filesize
42KB

MD5
7a4d31b1809fbd0e4b03c7f4ee80519b

SHA1
9a7605669c6ffa946aac1cc6bfd684a3a22e15ac

SHA256
3c2ef452b64c96a2478d40bf1a59ec80c191f07de9376edd5c9dc2fb594c2341

SHA512
e1d8e71fd7308f0dcf2cd532abf843baf093ec0f6b3182eb563664736a8744c2dbe3fd165ef982e0e2b718b75f6e5d516763d8494866e95c8a6e18e4d83b4d94

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndString.dll

Filesize
42KB

MD5
7a4d31b1809fbd0e4b03c7f4ee80519b

SHA1
9a7605669c6ffa946aac1cc6bfd684a3a22e15ac

SHA256
3c2ef452b64c96a2478d40bf1a59ec80c191f07de9376edd5c9dc2fb594c2341

SHA512
e1d8e71fd7308f0dcf2cd532abf843baf093ec0f6b3182eb563664736a8744c2dbe3fd165ef982e0e2b718b75f6e5d516763d8494866e95c8a6e18e4d83b4d94

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndVersion.dll

Filesize
65KB

MD5
0b1439ae9d7114e7814e367c8fd9697e

SHA1
df67da6d722f1f3e89c3aeebf2dc2d6f5bb0ccde

SHA256
36a07722b269a0c0d4c8e1f9913d9ed113a6c7ce1ac54118ee8faf0bdbc793ba

SHA512
130392906397bf9c434b1654f1b21b82af795fd029aaeed8ab9e6f1af42323689cfa1b0b3b7e602008bd92fb6d080f994fa976df38176cf42ff0ec63336c5922

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\FndVersion.dll

Filesize
65KB

MD5
0b1439ae9d7114e7814e367c8fd9697e

SHA1
df67da6d722f1f3e89c3aeebf2dc2d6f5bb0ccde

SHA256
36a07722b269a0c0d4c8e1f9913d9ed113a6c7ce1ac54118ee8faf0bdbc793ba

SHA512
130392906397bf9c434b1654f1b21b82af795fd029aaeed8ab9e6f1af42323689cfa1b0b3b7e602008bd92fb6d080f994fa976df38176cf42ff0ec63336c5922

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\GeneralMovaviTrackerWrapper.dll

Filesize
85KB

MD5
fa7fcf427ed094a7f04bcbcc27a0e4f3

SHA1
90a99269f107e52b5b584e307a6b04d0e03123e7

SHA256
ef184c9a9d2b00dcb0eed3ba799a92d19827d873cc3e3231ea19310925f7894d

SHA512
c6b36bd007182fb748f92e4017e0ceb399cffbc2ed1c0d6d2e98e8ce972563a20ee10077d6da0ca593871f4820866c455bc389c587b83088e6d0370df3127738

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\GeneralMovaviTrackerWrapper.dll

Filesize
85KB

MD5
fa7fcf427ed094a7f04bcbcc27a0e4f3

SHA1
90a99269f107e52b5b584e307a6b04d0e03123e7

SHA256
ef184c9a9d2b00dcb0eed3ba799a92d19827d873cc3e3231ea19310925f7894d

SHA512
c6b36bd007182fb748f92e4017e0ceb399cffbc2ed1c0d6d2e98e8ce972563a20ee10077d6da0ca593871f4820866c455bc389c587b83088e6d0370df3127738

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\InstallerGUI.exe

Filesize
1.1MB

MD5
1d18bd6c2650155763c69ef13c61d5ba

SHA1
1881232d78cb058f8a7687870f468783fd0f3141

SHA256
27b2fe086b03178faf707e549594efe207ea9721e31f7b0c962f37691bffbb4f

SHA512
3dcfd05fe0b4b2ccedff3e65810479e18a13af03fa79880d3ce8dde89fb7e3437717be9211e336ad05b0eab4bae947a2ec708d2f3614dc42c7838c8a672b3df9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\InstallerGUI.exe

Filesize
1.1MB

MD5
1d18bd6c2650155763c69ef13c61d5ba

SHA1
1881232d78cb058f8a7687870f468783fd0f3141

SHA256
27b2fe086b03178faf707e549594efe207ea9721e31f7b0c962f37691bffbb4f

SHA512
3dcfd05fe0b4b2ccedff3e65810479e18a13af03fa79880d3ce8dde89fb7e3437717be9211e336ad05b0eab4bae947a2ec708d2f3614dc42c7838c8a672b3df9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\InstallerLib.dll

Filesize
4.3MB

MD5
4c9c838da16a8ea94df30b498380fc0d

SHA1
e26b4322cebf6aa9ee90766e401ba3b927106473

SHA256
e195dcf57976a16f430a7c6537e2ada9f1ccfa548c8e44132a2478a1d13909a6

SHA512
950c0d0987a268f4511679a51ff1762bbfb07e9dd9fab27e48ca4241c8560e88567efebd5f203209b1ce00963ee4d407f341ab029917d2c60facec3dd0a8fdf6

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\InstallerLib.dll

Filesize
4.3MB

MD5
4c9c838da16a8ea94df30b498380fc0d

SHA1
e26b4322cebf6aa9ee90766e401ba3b927106473

SHA256
e195dcf57976a16f430a7c6537e2ada9f1ccfa548c8e44132a2478a1d13909a6

SHA512
950c0d0987a268f4511679a51ff1762bbfb07e9dd9fab27e48ca4241c8560e88567efebd5f203209b1ce00963ee4d407f341ab029917d2c60facec3dd0a8fdf6

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\InstantTracker.dll

Filesize
473KB

MD5
266c5fd276e86f587f38bb063eaf41ac

SHA1
5899cf206d1a7888f29ee04b94f492b3970265c1

SHA256
6f4fbedbc0b6da5e92abe83c26cfcaa00555506acb002603557c9d03aaa76e34

SHA512
4da6929972c93f4dd3b042e62b37511455de50a340d78495ee5b244dbeace8dfa553cba4d9b429ca498024df05a764c530023f1ccd932e976450260c15cbe36c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\InstantTracker.dll

Filesize
473KB

MD5
266c5fd276e86f587f38bb063eaf41ac

SHA1
5899cf206d1a7888f29ee04b94f492b3970265c1

SHA256
6f4fbedbc0b6da5e92abe83c26cfcaa00555506acb002603557c9d03aaa76e34

SHA512
4da6929972c93f4dd3b042e62b37511455de50a340d78495ee5b244dbeace8dfa553cba4d9b429ca498024df05a764c530023f1ccd932e976450260c15cbe36c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\MQtUtil.dll

Filesize
532KB

MD5
910f8b287a1db318fe55dc1c5dde81c1

SHA1
296fbf459c7bb06f840b9b5182e0c93b461bac83

SHA256
4544047c4e14ea04d75f93bbb6f25846d7a753a794e490f2461b28a083a4ea15

SHA512
c13640dd3b9703dab845ba24b45c36bf381e333749d0b2013c1b8cf35be1143d74cc00f642e623fb26953c304bff932ce976932490af57e79f89e92973836dae

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\MQtUtil.dll

Filesize
532KB

MD5
910f8b287a1db318fe55dc1c5dde81c1

SHA1
296fbf459c7bb06f840b9b5182e0c93b461bac83

SHA256
4544047c4e14ea04d75f93bbb6f25846d7a753a794e490f2461b28a083a4ea15

SHA512
c13640dd3b9703dab845ba24b45c36bf381e333749d0b2013c1b8cf35be1143d74cc00f642e623fb26953c304bff932ce976932490af57e79f89e92973836dae

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\MSVCP140.dll

Filesize
552KB

MD5
29c6c243cfb1cec96b4a1008274f9600

SHA1
c54b10ef6305cc3814c68e6c8fd6daecbb27622a

SHA256
44a5af24f8d5f9c50a9e5a200a0486100afb6a0e86377e2e3e622a7bbb57cb04

SHA512
39c34554ea7b6d433c2aecfdeff87959e625e943bf7a446ebca8e5878eaf24198c1b188359a0343fb78478f2bc8b986ca4d0e69d39bac6ff80cb901fe4f113ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\MovaviWidget.dll

Filesize
440KB

MD5
3a451c9c57c455c5217aed242d700216

SHA1
6d5d2a280d6d78a179f2331ab5e42fd3a60f9d04

SHA256
220e0605e5e738062a65b51cef03b6619e6688626d7186edfb3aa888b14c4b5d

SHA512
73988384662d8ab9b4fa6f1c791944ec5a9f5ed89f5f8a29f4ab707ef1098e377b2658c92f95910fda2d078a8713b595c5a84a95e2c31dff11d4d0a86d3180d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\MovaviWidget.dll

Filesize
440KB

MD5
3a451c9c57c455c5217aed242d700216

SHA1
6d5d2a280d6d78a179f2331ab5e42fd3a60f9d04

SHA256
220e0605e5e738062a65b51cef03b6619e6688626d7186edfb3aa888b14c4b5d

SHA512
73988384662d8ab9b4fa6f1c791944ec5a9f5ed89f5f8a29f4ab707ef1098e377b2658c92f95910fda2d078a8713b595c5a84a95e2c31dff11d4d0a86d3180d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Qt5Core.dll

Filesize
5.8MB

MD5
4e7e551d868475a263bdb703043e85c0

SHA1
da98ec68c996e6caaf07f64d95261dd4aefaab72

SHA256
47893d798a643bdde5c3f88a35b0cbe3059ba897a7f1a6ce49447247eb383472

SHA512
f70537ccb883b8ce054ce6af1c5415d24e682131595cd9a5e40b601aeb96f4c8b78b6bd171e700314d3b1d6d430a9ab0be4ba3e3935ea9cf77191e07a2cd5047

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Qt5Core.dll

Filesize
5.8MB

MD5
4e7e551d868475a263bdb703043e85c0

SHA1
da98ec68c996e6caaf07f64d95261dd4aefaab72

SHA256
47893d798a643bdde5c3f88a35b0cbe3059ba897a7f1a6ce49447247eb383472

SHA512
f70537ccb883b8ce054ce6af1c5415d24e682131595cd9a5e40b601aeb96f4c8b78b6bd171e700314d3b1d6d430a9ab0be4ba3e3935ea9cf77191e07a2cd5047

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Qt5Gui.dll

Filesize
6.5MB

MD5
843a16a559d0e4ae99788031514585ca

SHA1
6a85b073645d2343200de7cb2cc5196396aa65a4

SHA256
d4a6d5527d5418454ee6cff5ced377d2b104bf24223a2e7ebf83d826eaeec9ce

SHA512
b80fd4d90747a226c39983646f8b649949911835ba25b495fa969741cd2d37d8d91dfe819f23f6d123f0ce1f2c44a181843592d7f159935fafb4484b38941805

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Qt5Gui.dll

Filesize
6.5MB

MD5
843a16a559d0e4ae99788031514585ca

SHA1
6a85b073645d2343200de7cb2cc5196396aa65a4

SHA256
d4a6d5527d5418454ee6cff5ced377d2b104bf24223a2e7ebf83d826eaeec9ce

SHA512
b80fd4d90747a226c39983646f8b649949911835ba25b495fa969741cd2d37d8d91dfe819f23f6d123f0ce1f2c44a181843592d7f159935fafb4484b38941805

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Qt5Quick.dll

Filesize
4.0MB

MD5
41e834d88a18aec64ab5425d32b81554

SHA1
e73773fa4a82289b2fb2952178eb6805c630e97a

SHA256
b35c8ef66b4e487bb44d98834289c533b9520279c070277aedc576c5e8c2cf0c

SHA512
d1946aa095993da45c994b8a4ae7ee8a588939260af3e9b08072af8cf3bf7c5b6ef68072a2f52cdd837929ddeb62d9bd8382449c5689121790edbdf45f139ffd

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Qt5Quick.dll

Filesize
4.0MB

MD5
41e834d88a18aec64ab5425d32b81554

SHA1
e73773fa4a82289b2fb2952178eb6805c630e97a

SHA256
b35c8ef66b4e487bb44d98834289c533b9520279c070277aedc576c5e8c2cf0c

SHA512
d1946aa095993da45c994b8a4ae7ee8a588939260af3e9b08072af8cf3bf7c5b6ef68072a2f52cdd837929ddeb62d9bd8382449c5689121790edbdf45f139ffd

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Qt5Widgets.dll

Filesize
5.3MB

MD5
f771329739fe27083a360b31e728075f

SHA1
7dd23793d4a3cde8eb3aba478978e394d582b61e

SHA256
dba211ec8fc47ed94163212a702e38df05bd1c84b49b6a9312268f7e503c2307

SHA512
1fcca12a0fe67f0251fb382d7936a4b4bcf5246c192e4495fa5e3c087a2e8b72dadc9428f566c523a2e9064d8e5964ee9e66ca571da50bc5bde7d5d74e837cad

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Qt5Widgets.dll

Filesize
5.3MB

MD5
f771329739fe27083a360b31e728075f

SHA1
7dd23793d4a3cde8eb3aba478978e394d582b61e

SHA256
dba211ec8fc47ed94163212a702e38df05bd1c84b49b6a9312268f7e503c2307

SHA512
1fcca12a0fe67f0251fb382d7936a4b4bcf5246c192e4495fa5e3c087a2e8b72dadc9428f566c523a2e9064d8e5964ee9e66ca571da50bc5bde7d5d74e837cad

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Tracker.dll

Filesize
41KB

MD5
65ccc656e764fa9faf3d4b3ee12c804f

SHA1
f7b601ae0391df99351259be01b1795085f59a9b

SHA256
631a0ab74258e3ab5a6849f7eeb324d8fcc2b53154916a2f531564ef4ee67120

SHA512
ec169f9efb44b11690d98c10afe07f9c1afec3632480ff323299f6bcafbfe4629a3659571523bc8cca9cd9be72ea348ef5dd47e78a05fb7e4339bb9527f904e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\Tracker.dll

Filesize
41KB

MD5
65ccc656e764fa9faf3d4b3ee12c804f

SHA1
f7b601ae0391df99351259be01b1795085f59a9b

SHA256
631a0ab74258e3ab5a6849f7eeb324d8fcc2b53154916a2f531564ef4ee67120

SHA512
ec169f9efb44b11690d98c10afe07f9c1afec3632480ff323299f6bcafbfe4629a3659571523bc8cca9cd9be72ea348ef5dd47e78a05fb7e4339bb9527f904e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\TrackerFactory.dll

Filesize
36KB

MD5
85556c071148eb68b8539c8e6cdc178d

SHA1
53fc5ffe97ba2296a28310ce880d1f1a8bcf93bf

SHA256
2e91275058b0080eaaa6e9f075ef60d3a37a89f9b30b0442df60bdc8bc3aa494

SHA512
4341779ba21504da68f845d742bea140ac62e999129b2278c2a17c5517b6a0d782866a5d87b6c5bc2e01f036444776eef040d4285db2ed05ac9d0d7c3475801f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\TrackerFactory.dll

Filesize
36KB

MD5
85556c071148eb68b8539c8e6cdc178d

SHA1
53fc5ffe97ba2296a28310ce880d1f1a8bcf93bf

SHA256
2e91275058b0080eaaa6e9f075ef60d3a37a89f9b30b0442df60bdc8bc3aa494

SHA512
4341779ba21504da68f845d742bea140ac62e999129b2278c2a17c5517b6a0d782866a5d87b6c5bc2e01f036444776eef040d4285db2ed05ac9d0d7c3475801f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\VCRUNTIME140.dll

Filesize
94KB

MD5
02794a29811ba0a78e9687a0010c37ce

SHA1
97b5701d18bd5e25537851614099e2ffce25d6d8

SHA256
1729421a22585823493d5a125cd43a470889b952a2422f48a7bc8193f5c23b0f

SHA512
caf2a478e9c78c8e93dd2288ed98a9261fcf2b7e807df84f2e4d76f8130c2e503eb2470c947a678ac63e59d7d54f74e80e743d635428aa874ec2d06df68d0272

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\VCRUNTIME140_1.dll

Filesize
36KB

MD5
d8d1a08176ba2542c58669c1c04da1b7

SHA1
e0d0059baf23fb5e1d2dadedc12e2f53c930256d

SHA256
26c29d01df73a8e35d32e430c892d925abb6e4ad62d3630ae42b69daacba1a0d

SHA512
5308790fbcf6348e87e7d5b9235ed66942527326f7ba556c910d68d94617bdd247a4ed540b4b9f8d4e73d15cf4a7204c0a57d4fd348ec26e53f39b91be8617fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\boost_filesystem-mt-x64.dll

Filesize
122KB

MD5
31da89363adca29f49020ca60fb251db

SHA1
0f5c9326f296c9c14516171bc8411521185ecd2f

SHA256
575501d52d546d52efc36514da3c102718a8557b6014896997179df0b22de8c9

SHA512
cb024b3bc9b6a674d165f701134ff5c3187ec3efd57de7c9309b318b8d629dd0f1c07701c828980699f4ce7624ab64fd0e8ad193ce1511cbd4f94240e6d71c61

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\boost_filesystem-mt-x64.dll

Filesize
122KB

MD5
31da89363adca29f49020ca60fb251db

SHA1
0f5c9326f296c9c14516171bc8411521185ecd2f

SHA256
575501d52d546d52efc36514da3c102718a8557b6014896997179df0b22de8c9

SHA512
cb024b3bc9b6a674d165f701134ff5c3187ec3efd57de7c9309b318b8d629dd0f1c07701c828980699f4ce7624ab64fd0e8ad193ce1511cbd4f94240e6d71c61

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\glog.dll

Filesize
112KB

MD5
73d9be6e551abe3c896094e1ea3a66e4

SHA1
4c3aa841094f25da9f4f105363eb006d9c00d9b3

SHA256
3b46b2a798c870e1d5d32711fc733ea1b5830e8c7e3dc115fa223139cd972902

SHA512
7cd12fbc77de30e7b2ab5c55ae5ad4a24ad07ce9afed035ff95410cc6500419a44ccc25e625b9a996a2d9a7cd8d9fab58469b89e36b49e9800998f0ae28b01ce

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\msvcp140.dll

Filesize
552KB

MD5
29c6c243cfb1cec96b4a1008274f9600

SHA1
c54b10ef6305cc3814c68e6c8fd6daecbb27622a

SHA256
44a5af24f8d5f9c50a9e5a200a0486100afb6a0e86377e2e3e622a7bbb57cb04

SHA512
39c34554ea7b6d433c2aecfdeff87959e625e943bf7a446ebca8e5878eaf24198c1b188359a0343fb78478f2bc8b986ca4d0e69d39bac6ff80cb901fe4f113ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\vcruntime140.dll

Filesize
94KB

MD5
02794a29811ba0a78e9687a0010c37ce

SHA1
97b5701d18bd5e25537851614099e2ffce25d6d8

SHA256
1729421a22585823493d5a125cd43a470889b952a2422f48a7bc8193f5c23b0f

SHA512
caf2a478e9c78c8e93dd2288ed98a9261fcf2b7e807df84f2e4d76f8130c2e503eb2470c947a678ac63e59d7d54f74e80e743d635428aa874ec2d06df68d0272

Download Submit
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-b6cdc0e2-a556-44de-86a5-0a5d1f19d7d7\vcruntime140_1.dll

Filesize
36KB

MD5
d8d1a08176ba2542c58669c1c04da1b7

SHA1
e0d0059baf23fb5e1d2dadedc12e2f53c930256d

SHA256
26c29d01df73a8e35d32e430c892d925abb6e4ad62d3630ae42b69daacba1a0d

SHA512
5308790fbcf6348e87e7d5b9235ed66942527326f7ba556c910d68d94617bdd247a4ed540b4b9f8d4e73d15cf4a7204c0a57d4fd348ec26e53f39b91be8617fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\MovaviWebInstaller-1417002543\1196919900_Wnpxqjh_.exe

Filesize
92.9MB

MD5
2018fc813b7c9187985db6f95d3710bd

SHA1
23bc69dd4843190872a5dfaef477e8ca0f05e6da

SHA256
b0cba5a3a840d5224edac9762f5115d3967e81e768ca882dd4aab52cc013c473

SHA512
950fcd294ca986f8cda1140795e4bc385344be305a08482a705699e19dc29c390ff062e1d4b2f667bce9823002daef43498716daf5858adaabb390c33873bf08

Download Submit
C:\Users\Admin\AppData\Local\Temp\MovaviWebInstaller-1417002543\1196919900_Wnpxqjh_.exe

Filesize
92.9MB

MD5
2018fc813b7c9187985db6f95d3710bd

SHA1
23bc69dd4843190872a5dfaef477e8ca0f05e6da

SHA256
b0cba5a3a840d5224edac9762f5115d3967e81e768ca882dd4aab52cc013c473

SHA512
950fcd294ca986f8cda1140795e4bc385344be305a08482a705699e19dc29c390ff062e1d4b2f667bce9823002daef43498716daf5858adaabb390c33873bf08

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\animations\All\05__Downward\meta.json

Filesize
57B

MD5
4f8135f11ccd766f922dc8b9f57a94cc

SHA1
5196d6a5290ab0a56681f2cc9e5306f99702cfd0

SHA256
ee8c7882ba0b39e936662a0b537b371888ece13fb07174688874a53cf333fb33

SHA512
44572598ef8a8441f974209afca226bd8b86b293d81d127ad6256bad8ab322ccde3124cf0114a5e4a30fd6d6bac7b79f7e46ce30536a387bfe02600cb4c83ccd

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\imports\Audio\Audio_Beep_set\images\preview.png

Filesize
5KB

MD5
2be0449cb69305f3d7108801d75220e8

SHA1
a00d24ed4f86a990d608aaee0aab41b052ca3faa

SHA256
0e3e825d4ad89330bdf051defaadc3fb1401bab8af64337b05a8802542718f2e

SHA512
97f40c818dad8013995e8267604ab65990bd34150ce44b63318f7491665fd28e24869722eaa90b3d6b2d46269b9a3bb1a8020674f35d25631520771f5ec05919

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockNewEffects2020\effects\all\{bbed1f60-10d7-4b68-a9e9-4c808f3b4fee}\version.xml

Filesize
111B

MD5
ee967846b96120d073ae5e8322a23b3e

SHA1
79d2551e78f09fcfbe3768bb785baca08d994bb6

SHA256
3d8f290b1548b462c6ea73f1d075abc84ea951641e237e853f639268318c5e03

SHA512
89b215294f0c498492d82c5a9fc62e30eac65299a760c9b73fcd693975eec1aab373b2d25e1fe75289d41620135c204beb605eb0726e2f3554fd7b35f924b162

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockThemesPack\imports\all\{475708e8-6e49-416f-b2e8-c08c5fd663da}\version.xml

Filesize
111B

MD5
f4e01c472f397751b00783072ee3d41b

SHA1
7bbb4c67cdb42bc4ab9011c51ea5307dce46138e

SHA256
2fd01c6dc5ddb425d4c2e2a2c40f46cff667e2768385dbbae4d622dfe509a5f0

SHA512
c63f1fe50d01b9171ce107262ab5e03db8e3b7ee922e48c21404d33b59f7b8893493bf39e35c4e4e2c99550f4e22510488b5e2b75f7d20f64372a436fb925d50

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockThemesPack\resources\randomTheme\theme\version.xml

Filesize
111B

MD5
40b03fd39ce75a817795881d9bb408db

SHA1
7a32668c8d74d470a16e5dd6bd53a85bd68d53e0

SHA256
769cadc93b30fc0a019d7e6ae27f4191bfcd03d2dc05029303971183f3b55d23

SHA512
8f9d027a765b2e7d00f74e35b1f97ae4df19db4d0b56da7c7213ac594ae9def7100aab74e86ce8dd92a3d13ee7d8f4069c891da4e9ff3ea650383c2a040f0803

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockTransitionsWithAudio\Transitions\all\{98e9e41e-3a7d-499e-84b9-8d264b0fab94}\version.xml

Filesize
112B

MD5
5a92f85207732f261e8c9780ee31d4f1

SHA1
62735ffceaceee0f5662ab56c534401f95cabb78

SHA256
18f339c06a84c2075b9de5610233f1775e999fc4f56856e123f02e23c6bf54fd

SHA512
8877bc84ba928e98e103c5d7e24f885b9ba2639119b959b26e9a812061f706875577bd467b9e720c998999a65d81908b87ff93f864bb09652afbc7258b785447

Download Submit
C:\Users\Admin\AppData\Roaming\Movavi Video Editor 23\resources\samples\stock\packages\Content\RemotePackages\MESStockWhooshTransitions\transitions\all\{1c3ea148-67bc-4ebf-a4c2-9386a130026c}\version.xml

Filesize
108B

MD5
5eef0966fad2031510ea22c37c06cf16

SHA1
0bb95bc1d28700e13547e4b58d3861a7b2a5e8cf

SHA256
3f8def7c6ee86d81011715cd98fc70d1fdb36dd9cfcbec117f0237bcea211c67

SHA512
a91cf3b139c781e10d6ea674c27e3f0b72831d2e62ba0f6c092c1b144ba2ac49b925f3cb8b548d5b14ec5068ef2a6e29d2fb65cca7c5950c3fa7e371af32dec8

Download Submit
memory/1240-503-0x0000018BB8D40000-0x0000018BB8D50000-memory.dmp

Filesize
64KB

Download
memory/1240-1755-0x00007FF8AF210000-0x00007FF8AF7DA000-memory.dmp

Filesize
5.8MB

Download
memory/1240-4571-0x0000018BB8D40000-0x0000018BB8D50000-memory.dmp

Filesize
64KB

Download
memory/1240-486-0x00007FF8B0DC0000-0x00007FF8B11BD000-memory.dmp

Filesize
4.0MB

Download
memory/1240-485-0x00007FF8B1E30000-0x00007FF8B237A000-memory.dmp

Filesize
5.3MB

Download
memory/1240-492-0x00007FF8AF390000-0x00007FF8AF95A000-memory.dmp

Filesize
5.8MB

Download
memory/1240-3552-0x00007FF8AF390000-0x00007FF8AF95A000-memory.dmp

Filesize
5.8MB

Download
memory/1240-563-0x00007FF8AF210000-0x00007FF8AF7DA000-memory.dmp

Filesize
5.8MB

Download
memory/1880-3801-0x0000000068DC0000-0x00000000690B1000-memory.dmp

Filesize
2.9MB

Download
memory/1880-4401-0x00007FF8AE670000-0x00007FF8AE705000-memory.dmp

Filesize
596KB

Download
memory/1880-4382-0x00007FF8AE710000-0x00007FF8AE738000-memory.dmp

Filesize
160KB

Download
memory/1880-4314-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/1880-4515-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/1880-4210-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/1880-3864-0x00007FF8AECA0000-0x00007FF8AED32000-memory.dmp

Filesize
584KB

Download
memory/1880-3913-0x00007FF8A84E0000-0x00007FF8AACB1000-memory.dmp

Filesize
39.8MB

Download
memory/1880-4175-0x00007FF8AE940000-0x00007FF8AEB7D000-memory.dmp

Filesize
2.2MB

Download
memory/2316-4752-0x00007FF8B1E30000-0x00007FF8B237A000-memory.dmp

Filesize
5.3MB

Download
memory/2316-4754-0x00007FF8A84E0000-0x00007FF8AACB1000-memory.dmp

Filesize
39.8MB

Download
memory/2820-4523-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/2820-4257-0x00007FF8AE940000-0x00007FF8AEB7D000-memory.dmp

Filesize
2.2MB

Download
memory/2820-4454-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/2820-4394-0x00007FF8AE670000-0x00007FF8AE705000-memory.dmp

Filesize
596KB

Download
memory/2820-3703-0x00007FF8B1E30000-0x00007FF8B237A000-memory.dmp

Filesize
5.3MB

Download
memory/2820-4313-0x00007FF8AECA0000-0x00007FF8AED32000-memory.dmp

Filesize
584KB

Download
memory/2820-4346-0x00007FF8AE710000-0x00007FF8AE738000-memory.dmp

Filesize
160KB

Download
memory/2820-4614-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/2820-3919-0x00007FF8A84E0000-0x00007FF8AACB1000-memory.dmp

Filesize
39.8MB

Download
memory/3784-4751-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/3784-4742-0x00007FF8B1E30000-0x00007FF8B237A000-memory.dmp

Filesize
5.3MB

Download
memory/3784-4746-0x00007FF8AECA0000-0x00007FF8AED32000-memory.dmp

Filesize
584KB

Download
memory/3784-4750-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/3784-4748-0x00007FF8AE670000-0x00007FF8AE705000-memory.dmp

Filesize
596KB

Download
memory/3784-4749-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/3784-4747-0x00007FF8AE710000-0x00007FF8AE738000-memory.dmp

Filesize
160KB

Download
memory/3784-4744-0x00007FF8A84E0000-0x00007FF8AACB1000-memory.dmp

Filesize
39.8MB

Download
memory/3784-4745-0x00007FF8AE940000-0x00007FF8AEB7D000-memory.dmp

Filesize
2.2MB

Download
memory/4100-2185-0x00007FF8AE670000-0x00007FF8AE705000-memory.dmp

Filesize
596KB

Download
memory/4100-1170-0x00007FF8B1E30000-0x00007FF8B237A000-memory.dmp

Filesize
5.3MB

Download
memory/4100-1751-0x00007FF8A84E0000-0x00007FF8AACB1000-memory.dmp

Filesize
39.8MB

Download
memory/4100-2076-0x00007FF8AE940000-0x00007FF8AEB7D000-memory.dmp

Filesize
2.2MB

Download
memory/4100-2137-0x00007FF8AECA0000-0x00007FF8AED32000-memory.dmp

Filesize
584KB

Download
memory/4100-2139-0x00007FF8AE710000-0x00007FF8AE738000-memory.dmp

Filesize
160KB

Download
memory/4100-2397-0x0000000068DC0000-0x00000000690B1000-memory.dmp

Filesize
2.9MB

Download
memory/4100-2231-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/4100-2261-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/4100-2307-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/4100-2332-0x00007FF8AE250000-0x00007FF8AE4DD000-memory.dmp

Filesize
2.6MB

Download
memory/4100-2512-0x00007FF8AE220000-0x00007FF8AE250000-memory.dmp

Filesize
192KB

Download
memory/4136-4997-0x000001EA479F0000-0x000001EA47A00000-memory.dmp

Filesize
64KB

Download
memory/4604-3519-0x00007FF8AE670000-0x00007FF8AE705000-memory.dmp

Filesize
596KB

Download
memory/4604-3549-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/4604-3551-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/4604-3550-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/4604-3498-0x00007FF8AE710000-0x00007FF8AE738000-memory.dmp

Filesize
160KB

Download
memory/4604-3463-0x00007FF8AECA0000-0x00007FF8AED32000-memory.dmp

Filesize
584KB

Download
memory/4604-3436-0x00007FF8AE940000-0x00007FF8AEB7D000-memory.dmp

Filesize
2.2MB

Download
memory/4604-3141-0x00007FF8A84E0000-0x00007FF8AACB1000-memory.dmp

Filesize
39.8MB

Download
memory/4604-2655-0x00007FF8B1E30000-0x00007FF8B237A000-memory.dmp

Filesize
5.3MB

Download
memory/5116-1168-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/5116-1169-0x000000006FC40000-0x000000006FDA5000-memory.dmp

Filesize
1.4MB

Download
memory/5116-1110-0x00007FF8AE670000-0x00007FF8AE705000-memory.dmp

Filesize
596KB

Download
memory/5116-1116-0x0000000061440000-0x000000006145A000-memory.dmp

Filesize
104KB

Download
memory/5116-1031-0x00007FF8AECA0000-0x00007FF8AED32000-memory.dmp

Filesize
584KB

Download
memory/5116-1044-0x00007FF8AE710000-0x00007FF8AE738000-memory.dmp

Filesize
160KB

Download
memory/5116-821-0x00007FF8A84E0000-0x00007FF8AACB1000-memory.dmp

Filesize
39.8MB

Download
memory/5116-942-0x00007FF8AE940000-0x00007FF8AEB7D000-memory.dmp

Filesize
2.2MB

Download
memory/5116-818-0x000001EA479F0000-0x000001EA47A00000-memory.dmp

Filesize
64KB

Download
memory/5116-697-0x00007FF8B1E30000-0x00007FF8B237A000-memory.dmp

Filesize
5.3MB

Download