Analysis

  • max time kernel
    63s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    08-12-2024 12:30

General

  • Target

    MovaviVideoEditorPlusSetupF_Wsk684a_(1).exe

  • Size

    5.2MB

  • MD5

    88065d90d2e4922ed918462de8e7a6f5

  • SHA1

    e214b15adc2ec75806117bd227fc06233230941b

  • SHA256

    e6e0b0f8e5e10da103f9e7403e61226c646bc33d6099e34c1a9358716a6b24a0

  • SHA512

    e9523faa7c39d769ed3523208374c9d8cf77d7a3e69288b2752e27db95851d51fdb24722947756fd1cb1f84e90d162cabf5053c6ce066a168049ad0e14e13e7d

  • SSDEEP

    98304:BqsDtGsL+3HXYLr9FqjrhC5o7OjNks3+XUAGT7WD/Jh/xmid/lYtbFa3pd:BqTsq3Eqjl3K+q+kf7kBJsiqbFYpd

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 44 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MovaviVideoEditorPlusSetupF_Wsk684a_(1).exe
    "C:\Users\Admin\AppData\Local\Temp\MovaviVideoEditorPlusSetupF_Wsk684a_(1).exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2120
    • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\installer.exe
      C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\installer.exe "--distrib-name=C:\Users\Admin\AppData\Local\Temp\MovaviVideoEditorPlusSetupF_Wsk684a_(1).exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:2564
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2564 -s 200
        3⤵
        • Loads dropped DLL
        PID:1360
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef72b9758,0x7fef72b9768,0x7fef72b9778
      2⤵
        PID:2884
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1148 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:2
        2⤵
          PID:1720
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1540 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:8
          2⤵
            PID:824
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1668 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:8
            2⤵
              PID:956
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2292 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:1
              2⤵
                PID:808
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2304 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:1
                2⤵
                  PID:1984
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1392 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:2
                  2⤵
                    PID:2680
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3224 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:1
                    2⤵
                      PID:2396
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3692 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:8
                      2⤵
                        PID:2552
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3696 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:1
                        2⤵
                          PID:2536
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=1656 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:1
                          2⤵
                            PID:2372
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2100 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:1
                            2⤵
                              PID:1592
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3380 --field-trial-handle=1376,i,15741029836450424234,8185798874885714309,131072 /prefetch:1
                              2⤵
                                PID:1268
                            • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                              "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                              1⤵
                                PID:3036

                              Network

                              MITRE ATT&CK Enterprise v15

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

                                Filesize

                                215KB

                                MD5

                                2be38925751dc3580e84c3af3a87f98d

                                SHA1

                                8a390d24e6588bef5da1d3db713784c11ca58921

                                SHA256

                                1412046f2516b688d644ff26b6c7ef2275b6c8f132eb809bd32e118208a4ec1b

                                SHA512

                                1341ffc84f16c1247eb0e9baacd26a70c6b9ee904bc2861e55b092263613c0f09072efd174b3e649a347ef3192ae92d7807cc4f5782f8fd07389703d75c4c4e2

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002

                                Filesize

                                41KB

                                MD5

                                e319c7af7370ac080fbc66374603ed3a

                                SHA1

                                4f0cd3c48c2e82a167384d967c210bdacc6904f9

                                SHA256

                                5ad4c276af3ac5349ee9280f8a8144a30d33217542e065864c8b424a08365132

                                SHA512

                                4681a68a428e15d09010e2b2edba61e22808da1b77856f3ff842ebd022a1b801dfbb7cbb2eb8c1b6c39ae397d20892a3b7af054650f2899d0d16fc12d3d1a011

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1517e4721857e2b4_0

                                Filesize

                                19KB

                                MD5

                                3be9f7282a7ca262c85c3dcd527dd65c

                                SHA1

                                ea14b86b443074e64e2a09ed7d19dd13f72942ac

                                SHA256

                                493e2c38a250caea197494319ae1a12517cc2f24318e3c373299c79f83605b22

                                SHA512

                                c8dce8de6d8e3b54cd3c1b02b07bec5a9a1c23ad79a0d723f2f1fc1cbf1f5942c4d44101fcef819d77486826e0f9236533852572384d7b143533085afdb32dda

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\616bcee8f6ce0989_0

                                Filesize

                                280B

                                MD5

                                22258407ddf4f4a05a4b16faa98faa40

                                SHA1

                                2f7092fd242fa8fd1ee2e524cd83bf9db7c0e716

                                SHA256

                                1892067cf36c06ddefadce1c54d914805e6c2d0e5c645ae71e28a4bb0f0b70e5

                                SHA512

                                931bc300b4c63540c4a8fceb39001a70609a4d4c31118258affab1f9184baf1336e3952a28705ce6351aef72109878404e893d86841f15640f71b5b524cfe213

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                168B

                                MD5

                                858813616edd5e89a270f9959bd384f0

                                SHA1

                                80648eafa3ca836f986481d206e9bbe5f3818de8

                                SHA256

                                7cb01536e6a93bcbe45331a9ad27681d8078968db89635271ab22a8e48c77230

                                SHA512

                                fb439b63245ffc90ee0269e34c05ffc90a61cfd09b0e919b08ea0eabd4115f6148c2b32e92e129b0002064db7468d9ed84244228fe7f0a77c0dc53328e0c2f30

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                168B

                                MD5

                                68090bec31e0af120526e15dd421d919

                                SHA1

                                2a2bf15074095819ed0fa3f61fb0743681113bf7

                                SHA256

                                7aa5ea8f1115702162404ddda784751f46e5fac6997f95c3dbc135adb72546b6

                                SHA512

                                ac6f2ef1c04759a1bdd16b15ded7f201a7fe04cef6c323bb06a70ef15f3d1b75d5916b18a47dfb9c08d4819212026d18dddde4c4ad986986ae57af0e8b56fb48

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

                                Filesize

                                16B

                                MD5

                                aefd77f47fb84fae5ea194496b44c67a

                                SHA1

                                dcfbb6a5b8d05662c4858664f81693bb7f803b82

                                SHA256

                                4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                                SHA512

                                b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

                                Filesize

                                264KB

                                MD5

                                f50f89a0a91564d0b8a211f8921aa7de

                                SHA1

                                112403a17dd69d5b9018b8cede023cb3b54eab7d

                                SHA256

                                b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                SHA512

                                bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                Filesize

                                1KB

                                MD5

                                700103da779c423cc38d4784cbfe8c03

                                SHA1

                                1e729efcca022949ffc9bb9c2567ab39d8caa9bc

                                SHA256

                                28244ed1d2b2fc217734988d760a1e1481a3d5438580d7ad3bd1de17f8f3d386

                                SHA512

                                8065ace31d21093c547949c5674968d3c834c7692556fb4f85d1bc2b60c9973633adbcdbe1ae8de58990d03bd8dd4fbf64a4292d5dea7b871690096fe4bfcd04

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                363B

                                MD5

                                42ac0853ad45308401e657964710b3d6

                                SHA1

                                f2fe31411d089afd934c67658ae44f20183e6bea

                                SHA256

                                1016149a2149473c4c8d39b58d3692fcec77670b79f0a006716ce8ed6accb0f8

                                SHA512

                                eb2eb1fff51de852c556900c089447b54ff3e97980a901aaa3efdb77bb24371929e3cbd2edba6a4dfa0d4a7e77594c457ceca9651c6adbeece81d96c50a9b936

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                363B

                                MD5

                                6e9488b4c5c172870c2025132750ebd2

                                SHA1

                                fbbe126c5671bd2f80870440018a7832bbc6cc2f

                                SHA256

                                86ae6c21e91a9326aea59795a625412b767b27594377e20e86ce87173340f50f

                                SHA512

                                c49208d8fa87d4afb3ac425c7083b43652e5636864a0d4c5e4886740e0d50e13fb11646ef37adf103ed32b504d5f662ccd3523ee59e7fcdfe8a989f1fb05d927

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                6KB

                                MD5

                                4f944a6a8f41ce59067679b98831cb58

                                SHA1

                                ff1cad212d87a5b08ba954c48bced36aba1592f0

                                SHA256

                                2f871b4b3b5a475c5d73e7c48264c264ffaa995b9db9b6e337e1f60e9ea42584

                                SHA512

                                e44fafbfa94234ee55840f9f422ec79383d41d2f049465d6239ac05334ad64b236229889f0239ca22f1514c2bbaff79baf9d23ec981e3ca607cf700d31d6d462

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                6KB

                                MD5

                                7b0c0feea6451e486cd81d0b0118322f

                                SHA1

                                fe27fadf1c8b87f5aec08f6d283fce9eedbe21ec

                                SHA256

                                39dac12acc0ea8924de1a618ca8d3b01a7635ca13ced9e3bfd52a169ab049bcf

                                SHA512

                                ddf8a83654b00ff5abfa54348758048db241afd227b3d4ef2837854678e8c00ec06f3ca9658038206c09742c33541c1d534804d9d8b056725a1fb9afdb720eda

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                5KB

                                MD5

                                8f0c4ce9708abc09483ba05877ad7bdb

                                SHA1

                                720dc6c1c93e663f5eaef43b54030347260a48bc

                                SHA256

                                2d92f24c2ceb5eb602d0122b062150fcc8674e2b3850f4020c618e9dff7c3afe

                                SHA512

                                7475252bc50de96b1fb5fd712de7517d6935597fcae0461a97998a8752129e9b84a63177608ceacc262828bc9c4bcdc622325c7e1604473bfd69d4eea8500c90

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT

                                Filesize

                                16B

                                MD5

                                18e723571b00fb1694a3bad6c78e4054

                                SHA1

                                afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                SHA256

                                8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                SHA512

                                43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\FndAppLocations.dll

                                Filesize

                                45KB

                                MD5

                                796399bd60ac6321d4745abf7a0802c6

                                SHA1

                                1fa7b82ef5c30e206e66db17c8a8303fa8ea500e

                                SHA256

                                971504f367f5a445c7be52a4f2bf7754b01afcdb7cfe89c50557d59f90fa7e13

                                SHA512

                                f54469e7b35b0f828295fb3bace7d45d3e73a7cb5c2dd7e4201b970a9f64e7734b64d24ecec2ca9699b899bc42f91ddaa2bb211d2d9e74eae0d9c545e9c60642

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\FndCrashHandler.dll

                                Filesize

                                679KB

                                MD5

                                d8f8136c700177739251d9e6ae63fe7e

                                SHA1

                                3c58b0f568cd8f087ff98e3fb22b775122cebf56

                                SHA256

                                fb96d40b97e03213b7055b89250262e69bef594330185b2e80b7871c6986ed5a

                                SHA512

                                e4bc9778d41e2f1e5743733d169fb3530e35755575b0190431ee8b842e85cff9f79a019e6f4441e94794d680d11be63c77bc9f291e8695419b8a771f9f4faa89

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\FndFilesystem.dll

                                Filesize

                                291KB

                                MD5

                                f692a8ea00203828b1f5e7062206a24f

                                SHA1

                                9212982ce8d70765b304fbcbba2d020eeae8e148

                                SHA256

                                9c14af3a8d05bb9e14615ef187a6d7bcd57c7cb38beb19fb7e2358d71d82d55c

                                SHA512

                                6b7b6b1952c60bbec5038266020eaff3f6d5389301d0acbb20b76ef8dc8b456d4db93c2cba7b2db61f2c25d7d0bba08660c020139e1f20a0e9027f95d539cf91

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\FndHash.dll

                                Filesize

                                90KB

                                MD5

                                c239ccdc54913a907d2f8878bde3ec7a

                                SHA1

                                b451de652485202732763789d1f401d255b3b977

                                SHA256

                                aa20a44dd95ec030ac0db499f2d269121b56de40baea12a2859d46c8626fbf82

                                SHA512

                                cce34fc6883c0156ae7371bf4e252d386bb70f61eb8e197d17ea835e4d5140383bab7a6210c6f16412818a7390ce135dea4ff591107e6f3a17c1c019b42a0392

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\FndOS.dll

                                Filesize

                                179KB

                                MD5

                                a660f30191c525019c152f910dbc5e08

                                SHA1

                                a933163422c4e00b4633c152ae97e854263a4b1e

                                SHA256

                                e1a6194068c4a52b2c25b306bfbe15737ba257591e57b6326a1d253dee8e1d7f

                                SHA512

                                9fd810765109a31b3c9b713c7196e5ae1828b35f6ca9c19efd18defa8f21db79bbcb452c5e71eb18ab10c62b269b0087c5d37918b56dd1379ad0744760970c4b

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\FndPointer.dll

                                Filesize

                                24KB

                                MD5

                                4696e3256a966d1ef481ca21bf7de26d

                                SHA1

                                4c186bc4e3f980bca0b4eaef1e25ab6fd6d8ae4d

                                SHA256

                                4890ca47ee41118310293866287779c2df06b5c204519acbd6342728ecf1cf36

                                SHA512

                                dfcd56f93392943964c14a113043b237926fd13647509d2f9746d1c09ca1a39533449b87ea8a23446ac7f4a8af3bfc8476081d2007ba2b297bb0da050a3157f2

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\FndString.dll

                                Filesize

                                43KB

                                MD5

                                aad9516dc5fffbd75c04487e941235e1

                                SHA1

                                f1f9998b15f953b44a98edb3bb3865bb07503779

                                SHA256

                                362276915d9927b71c6dd4910108e6a2f1d5d82e74c2d855e2c7429dc4473165

                                SHA512

                                80d0d7ea91195109bb180a01545e38a93c44a64dee797b284538da207f7b458ff8fb29b03696c2adc2feb4c15803d7fd6bf2bb427c0575966d11abf03e95cd97

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\MSVCP140.dll

                                Filesize

                                552KB

                                MD5

                                29c6c243cfb1cec96b4a1008274f9600

                                SHA1

                                c54b10ef6305cc3814c68e6c8fd6daecbb27622a

                                SHA256

                                44a5af24f8d5f9c50a9e5a200a0486100afb6a0e86377e2e3e622a7bbb57cb04

                                SHA512

                                39c34554ea7b6d433c2aecfdeff87959e625e943bf7a446ebca8e5878eaf24198c1b188359a0343fb78478f2bc8b986ca4d0e69d39bac6ff80cb901fe4f113ee

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\VCRUNTIME140.dll

                                Filesize

                                94KB

                                MD5

                                02794a29811ba0a78e9687a0010c37ce

                                SHA1

                                97b5701d18bd5e25537851614099e2ffce25d6d8

                                SHA256

                                1729421a22585823493d5a125cd43a470889b952a2422f48a7bc8193f5c23b0f

                                SHA512

                                caf2a478e9c78c8e93dd2288ed98a9261fcf2b7e807df84f2e4d76f8130c2e503eb2470c947a678ac63e59d7d54f74e80e743d635428aa874ec2d06df68d0272

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\VCRUNTIME140_1.dll

                                Filesize

                                36KB

                                MD5

                                d8d1a08176ba2542c58669c1c04da1b7

                                SHA1

                                e0d0059baf23fb5e1d2dadedc12e2f53c930256d

                                SHA256

                                26c29d01df73a8e35d32e430c892d925abb6e4ad62d3630ae42b69daacba1a0d

                                SHA512

                                5308790fbcf6348e87e7d5b9235ed66942527326f7ba556c910d68d94617bdd247a4ed540b4b9f8d4e73d15cf4a7204c0a57d4fd348ec26e53f39b91be8617fb

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\WebUid.dll

                                Filesize

                                3.5MB

                                MD5

                                fa0618b0f7e5d86e10296174d7d479e1

                                SHA1

                                b5c2b2233f1d216182c3494ef3445b8b7b20e675

                                SHA256

                                abeb43db61694d701ce7c3929216ef6d9d68063ace79d62b1e62b4d9aa28e84b

                                SHA512

                                638e1f8f3dc3046922be2ba046eead82f5d217170f878126383569ce196681ff4463e61635b64c69ce030f9b864bc162586b4e13b6aa62d883768b0274cbd226

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-core-processthreads-l1-1-1.dll

                                Filesize

                                11KB

                                MD5

                                7e8b61d27a9d04e28d4dae0bfa0902ed

                                SHA1

                                861a7b31022915f26fb49c79ac357c65782c9f4b

                                SHA256

                                1ef06c600c451e66e744b2ca356b7f4b7b88ba2f52ec7795858d21525848ac8c

                                SHA512

                                1c5b35026937b45beb76cb8d79334a306342c57a8e36cc15d633458582fc8f7d9ab70ace7a92144288c6c017f33ecfc20477a04432619b40a21c9cda8d249f6d

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-core-synch-l1-2-0.dll

                                Filesize

                                11KB

                                MD5

                                e86cfc5e1147c25972a5eefed7be989f

                                SHA1

                                0075091c0b1f2809393c5b8b5921586bdd389b29

                                SHA256

                                72c639d1afda32a65143bcbe016fe5d8b46d17924f5f5190eb04efe954c1199a

                                SHA512

                                ea58a8d5aa587b7f5bde74b4d394921902412617100ed161a7e0bef6b3c91c5dae657065ea7805a152dd76992997017e070f5415ef120812b0d61a401aa8c110

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-core-timezone-l1-1-0.dll

                                Filesize

                                11KB

                                MD5

                                91a2ae3c4eb79cf748e15a58108409ad

                                SHA1

                                d402b9df99723ea26a141bfc640d78eaf0b0111b

                                SHA256

                                b0eda99eabd32fefecc478fd9fe7439a3f646a864fdab4ec3c1f18574b5f8b34

                                SHA512

                                8527af610c1e2101b6f336a142b1a85ac9c19bb3af4ad4a245cfb6fd602dc185da0f7803358067099475102f3a8f10a834dc75b56d3e6ded2ed833c00ad217ed

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-environment-l1-1-0.dll

                                Filesize

                                11KB

                                MD5

                                7a859e91fdcf78a584ac93aa85371bc9

                                SHA1

                                1fa9d9cad7cc26808e697373c1f5f32aaf59d6b7

                                SHA256

                                b7ee468f5b6c650dada7db3ad9e115a0e97135b3df095c3220dfd22ba277b607

                                SHA512

                                a368f21eca765afca86e03d59cf953500770f4a5bff8b86b2ac53f1b5174c627e061ce9a1f781dc56506774e0d0b09725e9698d4dc2d3a59e93da7ef3d900887

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-filesystem-l1-1-0.dll

                                Filesize

                                13KB

                                MD5

                                972544ade7e32bfdeb28b39bc734cdee

                                SHA1

                                87816f4afabbdec0ec2cfeb417748398505c5aa9

                                SHA256

                                7102f8d9d0f3f689129d7fe071b234077fba4dd3687071d1e2aeaa137b123f86

                                SHA512

                                5e1131b405e0c7a255b1c51073aff99e2d5c0d28fd3e55cabc04d463758a575a954008ea1ba5b4e2b345b49af448b93ad21dfc4a01573b3cb6e7256d9ecceef1

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-runtime-l1-1-0.dll

                                Filesize

                                15KB

                                MD5

                                f1a23c251fcbb7041496352ec9bcffbe

                                SHA1

                                be4a00642ec82465bc7b3d0cc07d4e8df72094e8

                                SHA256

                                d899c2f061952b3b97ab9cdbca2450290b0f005909ddd243ed0f4c511d32c198

                                SHA512

                                31f8c5cd3b6e153073e2e2edf0ca8072d0f787784f1611a57219349c1d57d6798a3adbd6942b0f16cef781634dd8691a5ec0b506df21b24cb70aee5523a03fd9

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-stdio-l1-1-0.dll

                                Filesize

                                17KB

                                MD5

                                55b2eb7f17f82b2096e94bca9d2db901

                                SHA1

                                44d85f1b1134ee7a609165e9c142188c0f0b17e0

                                SHA256

                                f9d3f380023a4c45e74170fe69b32bca506ee1e1fbe670d965d5b50c616da0cb

                                SHA512

                                0cf0770f5965a83f546253decfa967d8f85c340b5f6ea220d3caa14245f3cdb37c53bf8d3da6c35297b22a3fa88e7621202634f6b3649d7d9c166a221d3456a5

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\boost_filesystem-mt-x64.dll

                                Filesize

                                149KB

                                MD5

                                2f2e0dddd859a3181210b8cf4af1cfd1

                                SHA1

                                dbc6ad5d58440ca49f2ba4f76eb2a6c68d0e1914

                                SHA256

                                bca94e8d7c999225df115e89f9c92bb9950b1d58039c1844fd5a55c2cf86f72c

                                SHA512

                                f276b3d7384bdbfa68204bc45e46ba8b41bbc107c2386bacc7f8d345445797a77b0f835a4c2d36b4c5ddafbc92c381302da7566530d6e08b841751f374841277

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\glog.dll

                                Filesize

                                135KB

                                MD5

                                57b8afbec7618ebd7d53756f96654b76

                                SHA1

                                144ecb9eefab77e985e9e8f30dda24597443b40f

                                SHA256

                                da02659d29e815726bf02d01890671c46465650e778cb4cd0605a6676f61f783

                                SHA512

                                741ddc187083645977e4c35c22fc39c28ae73fc9589b7506808026405fedcdc0c9e0ef1d8e1138391535f677006334a31082570997892e231a95c66bbde8b3b4

                              • C:\Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\ucrtbase.DLL

                                Filesize

                                1011KB

                                MD5

                                849959a003fa63c5a42ae87929fcd18b

                                SHA1

                                d1b80b3265e31a2b5d8d7da6183146bbd5fb791b

                                SHA256

                                6238cbfe9f57c142b75e153c399c478d492252fda8cb40ee539c2dcb0f2eb232

                                SHA512

                                64958dabdb94d21b59254c2f074db5d51e914ddbc8437452115dff369b0c134e50462c3fdbbc14b6fa809a6ee19ab2fb83d654061601cc175cddcb7d74778e09

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-core-file-l1-2-0.dll

                                Filesize

                                11KB

                                MD5

                                5a72a803df2b425d5aaff21f0f064011

                                SHA1

                                4b31963d981c07a7ab2a0d1a706067c539c55ec5

                                SHA256

                                629e52ba4e2dca91b10ef7729a1722888e01284eed7dda6030d0a1ec46c94086

                                SHA512

                                bf44997c405c2ba80100eb0f2ff7304938fc69e4d7ae3eac52b3c236c3188e80c9f18bda226b5f4fde0112320e74c198ad985f9ffd7cea99aca22980c39c7f69

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-core-file-l2-1-0.dll

                                Filesize

                                11KB

                                MD5

                                721b60b85094851c06d572f0bd5d88cd

                                SHA1

                                4d0ee4d717aeb9c35da8621a545d3e2b9f19b4e7

                                SHA256

                                dac867476caa42ff8df8f5dfe869ffd56a18dadee17d47889afb69ed6519afbf

                                SHA512

                                430a91fcecde4c8cc4ac7eb9b4c6619243ab244ee88c34c9e93ca918e54bd42b08aca8ea4475d4c0f5fa95241e4aacb3206cbae863e92d15528c8e7c9f45601b

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-core-localization-l1-2-0.dll

                                Filesize

                                14KB

                                MD5

                                1ed0b196ab58edb58fcf84e1739c63ce

                                SHA1

                                ac7d6c77629bdee1df7e380cc9559e09d51d75b7

                                SHA256

                                8664222823e122fca724620fd8b72187fc5336c737d891d3cef85f4f533b8de2

                                SHA512

                                e1fa7f14f39c97aaa3104f3e13098626b5f7cfd665ba52dcb2312a329639aaf5083a9177e4686d11c4213e28acc40e2c027988074b6cc13c5016d5c5e9ef897b

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-convert-l1-1-0.dll

                                Filesize

                                15KB

                                MD5

                                4ec4790281017e616af632da1dc624e1

                                SHA1

                                342b15c5d3e34ab4ac0b9904b95d0d5b074447b7

                                SHA256

                                5cf5bbb861608131b5f560cbf34a3292c80886b7c75357acc779e0bf98e16639

                                SHA512

                                80c4e20d37eff29c7577b2d0ed67539a9c2c228edb48ab05d72648a6ed38f5ff537715c130342beb0e3ef16eb11179b9b484303354a026bda3a86d5414d24e69

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-heap-l1-1-0.dll

                                Filesize

                                12KB

                                MD5

                                8906279245f7385b189a6b0b67df2d7c

                                SHA1

                                fcf03d9043a2daafe8e28dee0b130513677227e4

                                SHA256

                                f5183b8d7462c01031992267fe85680ab9c5b279bedc0b25ab219f7c2184766f

                                SHA512

                                67cac89ae58cc715976107f3bdf279b1e78945afd07e6f657e076d78e92ee1a98e3e7b8feae295af5ce35e00c804f3f53a890895badb1eed32377d85c21672b9

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-locale-l1-1-0.dll

                                Filesize

                                11KB

                                MD5

                                dd8176e132eedea3322443046ac35ca2

                                SHA1

                                d13587c7cc52b2c6fbcaa548c8ed2c771a260769

                                SHA256

                                2eb96422375f1a7b687115b132a4005d2e7d3d5dc091fb0eb22a6471e712848e

                                SHA512

                                77cb8c44c8cc8dd29997fba4424407579ac91176482db3cf7bc37e1f9f6aa4c4f5ba14862d2f3a9c05d1fdd7ca5a043b5f566bd0e9a9e1ed837da9c11803b253

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-math-l1-1-0.dll

                                Filesize

                                20KB

                                MD5

                                a6a3d6d11d623e16866f38185853facd

                                SHA1

                                fbeadd1e9016908ecce5753de1d435d6fcf3d0b5

                                SHA256

                                a768339f0b03674735404248a039ec8591fcba6ff61a3c6812414537badd23b0

                                SHA512

                                abbf32ceb35e5ec6c1562f9f3b2652b96b7dbd97bfc08d918f987c0ec0503e8390dd697476b2a2389f0172cd8cf16029fd2ec5f32a9ba3688bf2ebeefb081b2c

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-string-l1-1-0.dll

                                Filesize

                                17KB

                                MD5

                                9b79965f06fd756a5efde11e8d373108

                                SHA1

                                3b9de8bf6b912f19f7742ad34a875cbe2b5ffa50

                                SHA256

                                1a916c0db285deb02c0b9df4d08dad5ea95700a6a812ea067bd637a91101a9f6

                                SHA512

                                7d4155c00d65c3554e90575178a80d20dc7c80d543c4b5c4c3f508f0811482515638fe513e291b82f958b4d7a63c9876be4e368557b07ff062961197ed4286fb

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-time-l1-1-0.dll

                                Filesize

                                13KB

                                MD5

                                1d48a3189a55b632798f0e859628b0fb

                                SHA1

                                61569a8e4f37adc353986d83efc90dc043cdc673

                                SHA256

                                b56bc94e8539603dd2f0fea2f25efd17966315067442507db4bffafcbc2955b0

                                SHA512

                                47f329102b703bfbb1ebaeb5203d1c8404a0c912019193c93d150a95bb0c5ba8dc101ac56d3283285f9f91239fc64a66a5357afe428a919b0be7194bada1f64f

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\api-ms-win-crt-utility-l1-1-0.dll

                                Filesize

                                11KB

                                MD5

                                dbc27d384679916ba76316fb5e972ea6

                                SHA1

                                fb9f021f2220c852f6ff4ea94e8577368f0616a4

                                SHA256

                                dd14133adf5c534539298422f6c4b52739f80aca8c5a85ca8c966dea9964ceb1

                                SHA512

                                cc0d8c56749ccb9d007b6d3f5c4a8f1d4e368bb81446ebcd7cc7b40399bbd56d0acaba588ca172ecb7472a8cbddbd4c366ffa38094a832f6d7e343b813ba565e

                              • \Users\Admin\AppData\Local\Temp\Movavi-installer-47aa04ea-7f4e-4a5d-b440-ad030c088eec\installer.exe

                                Filesize

                                5.1MB

                                MD5

                                b020a1fef0573f7434782d58680ab088

                                SHA1

                                07b7eb35845ceaae6af1739389dd5d44e2932c8e

                                SHA256

                                e715ed9878c89fb7673e6ca905633ada19f7de7969958ede88ef38c723f00b13

                                SHA512

                                b79fcbb0ff1bb152976f5e4be56721c2e61feffe91b1f850e583c1b64c90d4997fe9b00e42242dd9b9654768aaaca12a5d758d0c02bbee9491871a24d1efb8ac