Trojan.DownLoader47.52554

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-i8b0r.tmp\<Имя файла>.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-oh2uv.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-tmusv.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-6579d.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-11tm5.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-fot15.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-iug16.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-61ser.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-hqnck.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-dvple.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-3acc8.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-mk5c2.tmp
%LOCALAPPDATA%\moviton video editor\is-648pp.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-d85b2.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-bh3dc.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-7dmn9.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-82a2n.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-kej9f.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-0657r.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-v55ap.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-vb1oq.tmp
%LOCALAPPDATA%\moviton video editor\platforms\is-ch6dm.tmp
%LOCALAPPDATA%\moviton video editor\mediaservice\is-3isit.tmp
%LOCALAPPDATA%\moviton video editor\is-fko4p.tmp
%LOCALAPPDATA%\moviton video editor\is-77c6k.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-lde84.tmp
%LOCALAPPDATA%\moviton video editor\is-e9cd1.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-a35ab.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-mgqra.tmp
%LOCALAPPDATA%\moviton video editor\is-2e45h.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-jufnn.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-gn4md.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-d20p0.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-srnkv.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-ghnlq.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-fo387.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-76pfi.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-kijgf.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-tltvt.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-pj9p8.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-d6g4a.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-ujv9f.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-rteg9.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-7sven.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-m2j6r.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-7frcn.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-s5n55.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-sdv1t.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-2g4k3.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-5a7fv.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-luq0q.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-3i101.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-02n6n.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-4i62o.tmp
%LOCALAPPDATA%\moviton video editor\is-i9q7i.tmp
%LOCALAPPDATA%\moviton video editor\is-elmpc.tmp
%LOCALAPPDATA%\moviton video editor\is-jfj3p.tmp
%LOCALAPPDATA%\moviton video editor\is-m4qvn.tmp
%LOCALAPPDATA%\moviton video editor\is-v9o9r.tmp
%LOCALAPPDATA%\moviton video editor\is-jje84.tmp
%LOCALAPPDATA%\moviton video editor\is-lcmq8.tmp
%LOCALAPPDATA%\moviton video editor\is-3h0na.tmp
%LOCALAPPDATA%\moviton video editor\is-rsluc.tmp
%LOCALAPPDATA%\moviton video editor\is-jsv01.tmp
%LOCALAPPDATA%\moviton video editor\is-t040d.tmp
%LOCALAPPDATA%\moviton video editor\is-u1i4b.tmp
%LOCALAPPDATA%\moviton video editor\is-d6d0p.tmp
%LOCALAPPDATA%\moviton video editor\is-tui8i.tmp
%LOCALAPPDATA%\moviton video editor\is-h5qnh.tmp
%LOCALAPPDATA%\moviton video editor\is-h36g3.tmp
%LOCALAPPDATA%\moviton video editor\is-rcjpb.tmp
%LOCALAPPDATA%\moviton video editor\is-m849r.tmp
%LOCALAPPDATA%\moviton video editor\is-lbmrj.tmp
%LOCALAPPDATA%\moviton video editor\is-3tqnp.tmp
%LOCALAPPDATA%\moviton video editor\is-001k9.tmp
%LOCALAPPDATA%\moviton video editor\is-os567.tmp
%LOCALAPPDATA%\moviton video editor\is-slrp2.tmp
%TEMP%\is-0jrcm.tmp\_isetup\_iscrypt.dll
%TEMP%\is-0jrcm.tmp\_isetup\_shfoldr.dll
%TEMP%\is-0jrcm.tmp\_isetup\_setup64.tmp
%LOCALAPPDATA%\moviton video editor\is-c66g4.tmp
%LOCALAPPDATA%\moviton video editor\is-a8suv.tmp
%LOCALAPPDATA%\moviton video editor\is-7r2fa.tmp
%LOCALAPPDATA%\moviton video editor\is-kp58b.tmp
%LOCALAPPDATA%\moviton video editor\is-vtnrn.tmp
%LOCALAPPDATA%\moviton video editor\is-94v8h.tmp
%LOCALAPPDATA%\moviton video editor\is-9lcpb.tmp
%LOCALAPPDATA%\moviton video editor\is-ah6ib.tmp
%LOCALAPPDATA%\moviton video editor\is-77ji6.tmp
%LOCALAPPDATA%\moviton video editor\is-q10c0.tmp
%LOCALAPPDATA%\moviton video editor\is-cdp4d.tmp
%LOCALAPPDATA%\moviton video editor\is-2i26o.tmp
%LOCALAPPDATA%\moviton video editor\is-l0jsf.tmp
%LOCALAPPDATA%\moviton video editor\is-5qrhr.tmp
%LOCALAPPDATA%\moviton video editor\is-6h2mv.tmp
%LOCALAPPDATA%\moviton video editor\is-2qrvr.tmp
%LOCALAPPDATA%\moviton video editor\is-uu9as.tmp
%LOCALAPPDATA%\moviton video editor\is-4op3a.tmp
%LOCALAPPDATA%\moviton video editor\is-9qkle.tmp
%LOCALAPPDATA%\moviton video editor\is-s2rqu.tmp
%LOCALAPPDATA%\moviton video editor\is-3qq9m.tmp
%LOCALAPPDATA%\moviton video editor\is-dcnva.tmp
%LOCALAPPDATA%\moviton video editor\is-7e9vm.tmp
%LOCALAPPDATA%\moviton video editor\is-5d996.tmp
%LOCALAPPDATA%\moviton video editor\is-5i095.tmp
%LOCALAPPDATA%\moviton video editor\is-8f2pd.tmp
%LOCALAPPDATA%\moviton video editor\is-0gj69.tmp
%LOCALAPPDATA%\moviton video editor\is-ptlft.tmp
%LOCALAPPDATA%\moviton video editor\is-859tg.tmp
%LOCALAPPDATA%\moviton video editor\is-tp7e2.tmp
%LOCALAPPDATA%\moviton video editor\unins000.dat
%LOCALAPPDATA%\moviton video editor\movitonvideoeditor.exe

Перемещает следующие файлы

%LOCALAPPDATA%\moviton video editor\is-slrp2.tmp в %LOCALAPPDATA%\moviton video editor\unins000.exe
%LOCALAPPDATA%\moviton video editor\translations\is-6579d.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_hu.qm
%LOCALAPPDATA%\moviton video editor\translations\is-11tm5.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_hr.qm
%LOCALAPPDATA%\moviton video editor\translations\is-fot15.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ga.qm
%LOCALAPPDATA%\moviton video editor\translations\is-iug16.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_fr.qm
%LOCALAPPDATA%\moviton video editor\translations\is-61ser.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_fil.qm
%LOCALAPPDATA%\moviton video editor\translations\is-hqnck.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_fi.qm
%LOCALAPPDATA%\moviton video editor\translations\is-dvple.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_et.qm
%LOCALAPPDATA%\moviton video editor\translations\is-3acc8.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_es.qm
%LOCALAPPDATA%\moviton video editor\translations\is-mk5c2.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_en.qm
%LOCALAPPDATA%\moviton video editor\translations\is-d85b2.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_el.qm
%LOCALAPPDATA%\moviton video editor\translations\is-oh2uv.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_id.qm
%LOCALAPPDATA%\moviton video editor\translations\is-tmusv.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_hy.qm
%LOCALAPPDATA%\moviton video editor\translations\is-7dmn9.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_cs.qm
%LOCALAPPDATA%\moviton video editor\translations\is-82a2n.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_bs.qm
%LOCALAPPDATA%\moviton video editor\translations\is-kej9f.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_bg.qm
%LOCALAPPDATA%\moviton video editor\translations\is-0657r.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_be.qm
%LOCALAPPDATA%\moviton video editor\translations\is-v55ap.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ar.qm
%LOCALAPPDATA%\moviton video editor\translations\is-vb1oq.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_af.qm
%LOCALAPPDATA%\moviton video editor\platforms\is-ch6dm.tmp в %LOCALAPPDATA%\moviton video editor\platforms\qwindows.dll
%LOCALAPPDATA%\moviton video editor\mediaservice\is-3isit.tmp в %LOCALAPPDATA%\moviton video editor\mediaservice\dsengine.dll
%LOCALAPPDATA%\moviton video editor\is-fko4p.tmp в %LOCALAPPDATA%\moviton video editor\vcruntime140.dll
%LOCALAPPDATA%\moviton video editor\is-77c6k.tmp в %LOCALAPPDATA%\moviton video editor\vccorlib140.dll
%LOCALAPPDATA%\moviton video editor\translations\is-lde84.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_de.qm
%LOCALAPPDATA%\moviton video editor\is-859tg.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-heap-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\translations\is-a35ab.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_is.qm
%LOCALAPPDATA%\moviton video editor\translations\is-gn4md.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_th.qm
%LOCALAPPDATA%\moviton video editor\translations\is-d20p0.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sv.qm
%LOCALAPPDATA%\moviton video editor\translations\is-srnkv.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sr.qm
%LOCALAPPDATA%\moviton video editor\translations\is-ghnlq.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sq.qm
%LOCALAPPDATA%\moviton video editor\translations\is-fo387.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sl.qm
%LOCALAPPDATA%\moviton video editor\translations\is-76pfi.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sk.qm
%LOCALAPPDATA%\moviton video editor\translations\is-kijgf.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_si.qm
%LOCALAPPDATA%\moviton video editor\translations\is-tltvt.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ru.qm
%LOCALAPPDATA%\moviton video editor\translations\is-pj9p8.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ro.qm
%LOCALAPPDATA%\moviton video editor\translations\is-4i62o.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_pt.qm
%LOCALAPPDATA%\moviton video editor\translations\is-mgqra.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_pl.qm
%LOCALAPPDATA%\moviton video editor\translations\is-rteg9.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_nl.qm
%LOCALAPPDATA%\moviton video editor\translations\is-7sven.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_nb_no.qm
%LOCALAPPDATA%\moviton video editor\translations\is-m2j6r.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_my.qm
%LOCALAPPDATA%\moviton video editor\translations\is-7frcn.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_mt.qm
%LOCALAPPDATA%\moviton video editor\translations\is-s5n55.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ms.qm
%LOCALAPPDATA%\moviton video editor\translations\is-sdv1t.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_mn.qm
%LOCALAPPDATA%\moviton video editor\translations\is-2g4k3.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_lv.qm
%LOCALAPPDATA%\moviton video editor\translations\is-5a7fv.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_lt.qm
%LOCALAPPDATA%\moviton video editor\translations\is-luq0q.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ko.qm
%LOCALAPPDATA%\moviton video editor\translations\is-3i101.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_kk.qm
%LOCALAPPDATA%\moviton video editor\translations\is-02n6n.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ka.qm
%LOCALAPPDATA%\moviton video editor\translations\is-d6g4a.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ja.qm
%LOCALAPPDATA%\moviton video editor\is-e9cd1.tmp в %LOCALAPPDATA%\moviton video editor\swscale-6.dll
%LOCALAPPDATA%\moviton video editor\translations\is-bh3dc.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_da.qm
%LOCALAPPDATA%\moviton video editor\is-648pp.tmp в %LOCALAPPDATA%\moviton video editor\swresample-4.dll
%LOCALAPPDATA%\moviton video editor\is-i9q7i.tmp в %LOCALAPPDATA%\moviton video editor\qt5winextras.dll
%LOCALAPPDATA%\moviton video editor\is-elmpc.tmp в %LOCALAPPDATA%\moviton video editor\qt5svg.dll
%LOCALAPPDATA%\moviton video editor\is-t040d.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-processthreads-l1-1-1.dll
%LOCALAPPDATA%\moviton video editor\is-a8suv.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-conio-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-tui8i.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-xstate-l2-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-7r2fa.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-util-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-m4qvn.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-timezone-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-v9o9r.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-sysinfo-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-jje84.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-synch-l1-2-0.dll
%LOCALAPPDATA%\moviton video editor\is-lcmq8.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-synch-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-3h0na.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-string-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-rsluc.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-rtlsupport-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-jsv01.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-profile-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-u1i4b.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-processthreads-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-9qkle.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-environment-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-d6d0p.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-processenvironment-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-h5qnh.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-namedpipe-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-c66g4.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-memory-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-h36g3.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-localization-l1-2-0.dll
%LOCALAPPDATA%\moviton video editor\is-rcjpb.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-libraryloader-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-m849r.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-interlocked-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-lbmrj.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-heap-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-3tqnp.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-handle-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-001k9.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-file-l2-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-os567.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-core-file-l1-2-0.dll
%LOCALAPPDATA%\moviton video editor\translations\is-jufnn.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_tr.qm
%LOCALAPPDATA%\moviton video editor\translations\is-ujv9f.tmp в %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_it.qm
%LOCALAPPDATA%\moviton video editor\is-tp7e2.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-filesystem-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-0gj69.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-math-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-kp58b.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-convert-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-jfj3p.tmp в %LOCALAPPDATA%\moviton video editor\qt5networkauth.dll
%LOCALAPPDATA%\moviton video editor\is-vtnrn.tmp в %LOCALAPPDATA%\moviton video editor\qt5network.dll
%LOCALAPPDATA%\moviton video editor\is-9lcpb.tmp в %LOCALAPPDATA%\moviton video editor\qt5multimedia.dll
%LOCALAPPDATA%\moviton video editor\is-ah6ib.tmp в %LOCALAPPDATA%\moviton video editor\openh264.dll
%LOCALAPPDATA%\moviton video editor\is-77ji6.tmp в %LOCALAPPDATA%\moviton video editor\msvcr120.dll
%LOCALAPPDATA%\moviton video editor\is-q10c0.tmp в %LOCALAPPDATA%\moviton video editor\msvcp140_1.dll
%LOCALAPPDATA%\moviton video editor\is-cdp4d.tmp в %LOCALAPPDATA%\moviton video editor\msvcp140.dll
%LOCALAPPDATA%\moviton video editor\is-2i26o.tmp в %LOCALAPPDATA%\moviton video editor\libssl-1_1.dll
%LOCALAPPDATA%\moviton video editor\is-l0jsf.tmp в %LOCALAPPDATA%\moviton video editor\libcurl.dll
%LOCALAPPDATA%\moviton video editor\is-5qrhr.tmp в %LOCALAPPDATA%\moviton video editor\libcrypto-1_1.dll
%LOCALAPPDATA%\moviton video editor\is-6h2mv.tmp в %LOCALAPPDATA%\moviton video editor\dbghelp.dll
%LOCALAPPDATA%\moviton video editor\is-2qrvr.tmp в %LOCALAPPDATA%\moviton video editor\crashrpt1403.dll
%LOCALAPPDATA%\moviton video editor\is-uu9as.tmp в %LOCALAPPDATA%\moviton video editor\concrt140.dll
%LOCALAPPDATA%\moviton video editor\is-94v8h.tmp в %LOCALAPPDATA%\moviton video editor\avdevice-59.dll
%LOCALAPPDATA%\moviton video editor\is-4op3a.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-utility-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-s2rqu.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-time-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-3qq9m.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-string-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-dcnva.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-stdio-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-7e9vm.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-runtime-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-5d996.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-process-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-5i095.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-private-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-8f2pd.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-multibyte-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-ptlft.tmp в %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-locale-l1-1-0.dll
%LOCALAPPDATA%\moviton video editor\is-2e45h.tmp в %LOCALAPPDATA%\moviton video editor\movitonvideoeditor.exe

Сетевая активность

Подключается к

'st###7345724.ru':80

TCP

Запросы HTTP POST

http://st###7345724.ru/new/net_api

UDP

DNS ASK st###7345724.ru

Другое

Ищет следующие окна

ClassName: 'P%x_MovitonWnd_10291c5f329' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-i8b0r.tmp\<Имя файла>.tmp' /SL5="$5024A,8625381,54272,<Полный путь к файлу>"
'%LOCALAPPDATA%\moviton video editor\movitonvideoeditor.exe' c4d1fa2447c07d213066c3094da24476

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "moviton_video_editor_10291"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней