Trojan.DownLoader47.52554

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-i8b0r.tmp\<File name>.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-oh2uv.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-tmusv.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-6579d.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-11tm5.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-fot15.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-iug16.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-61ser.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-hqnck.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-dvple.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-3acc8.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-mk5c2.tmp
%LOCALAPPDATA%\moviton video editor\is-648pp.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-d85b2.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-bh3dc.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-7dmn9.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-82a2n.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-kej9f.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-0657r.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-v55ap.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-vb1oq.tmp
%LOCALAPPDATA%\moviton video editor\platforms\is-ch6dm.tmp
%LOCALAPPDATA%\moviton video editor\mediaservice\is-3isit.tmp
%LOCALAPPDATA%\moviton video editor\is-fko4p.tmp
%LOCALAPPDATA%\moviton video editor\is-77c6k.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-lde84.tmp
%LOCALAPPDATA%\moviton video editor\is-e9cd1.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-a35ab.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-mgqra.tmp
%LOCALAPPDATA%\moviton video editor\is-2e45h.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-jufnn.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-gn4md.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-d20p0.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-srnkv.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-ghnlq.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-fo387.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-76pfi.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-kijgf.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-tltvt.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-pj9p8.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-d6g4a.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-ujv9f.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-rteg9.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-7sven.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-m2j6r.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-7frcn.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-s5n55.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-sdv1t.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-2g4k3.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-5a7fv.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-luq0q.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-3i101.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-02n6n.tmp
%LOCALAPPDATA%\moviton video editor\translations\is-4i62o.tmp
%LOCALAPPDATA%\moviton video editor\is-i9q7i.tmp
%LOCALAPPDATA%\moviton video editor\is-elmpc.tmp
%LOCALAPPDATA%\moviton video editor\is-jfj3p.tmp
%LOCALAPPDATA%\moviton video editor\is-m4qvn.tmp
%LOCALAPPDATA%\moviton video editor\is-v9o9r.tmp
%LOCALAPPDATA%\moviton video editor\is-jje84.tmp
%LOCALAPPDATA%\moviton video editor\is-lcmq8.tmp
%LOCALAPPDATA%\moviton video editor\is-3h0na.tmp
%LOCALAPPDATA%\moviton video editor\is-rsluc.tmp
%LOCALAPPDATA%\moviton video editor\is-jsv01.tmp
%LOCALAPPDATA%\moviton video editor\is-t040d.tmp
%LOCALAPPDATA%\moviton video editor\is-u1i4b.tmp
%LOCALAPPDATA%\moviton video editor\is-d6d0p.tmp
%LOCALAPPDATA%\moviton video editor\is-tui8i.tmp
%LOCALAPPDATA%\moviton video editor\is-h5qnh.tmp
%LOCALAPPDATA%\moviton video editor\is-h36g3.tmp
%LOCALAPPDATA%\moviton video editor\is-rcjpb.tmp
%LOCALAPPDATA%\moviton video editor\is-m849r.tmp
%LOCALAPPDATA%\moviton video editor\is-lbmrj.tmp
%LOCALAPPDATA%\moviton video editor\is-3tqnp.tmp
%LOCALAPPDATA%\moviton video editor\is-001k9.tmp
%LOCALAPPDATA%\moviton video editor\is-os567.tmp
%LOCALAPPDATA%\moviton video editor\is-slrp2.tmp
%TEMP%\is-0jrcm.tmp\_isetup\_iscrypt.dll
%TEMP%\is-0jrcm.tmp\_isetup\_shfoldr.dll
%TEMP%\is-0jrcm.tmp\_isetup\_setup64.tmp
%LOCALAPPDATA%\moviton video editor\is-c66g4.tmp
%LOCALAPPDATA%\moviton video editor\is-a8suv.tmp
%LOCALAPPDATA%\moviton video editor\is-7r2fa.tmp
%LOCALAPPDATA%\moviton video editor\is-kp58b.tmp
%LOCALAPPDATA%\moviton video editor\is-vtnrn.tmp
%LOCALAPPDATA%\moviton video editor\is-94v8h.tmp
%LOCALAPPDATA%\moviton video editor\is-9lcpb.tmp
%LOCALAPPDATA%\moviton video editor\is-ah6ib.tmp
%LOCALAPPDATA%\moviton video editor\is-77ji6.tmp
%LOCALAPPDATA%\moviton video editor\is-q10c0.tmp
%LOCALAPPDATA%\moviton video editor\is-cdp4d.tmp
%LOCALAPPDATA%\moviton video editor\is-2i26o.tmp
%LOCALAPPDATA%\moviton video editor\is-l0jsf.tmp
%LOCALAPPDATA%\moviton video editor\is-5qrhr.tmp
%LOCALAPPDATA%\moviton video editor\is-6h2mv.tmp
%LOCALAPPDATA%\moviton video editor\is-2qrvr.tmp
%LOCALAPPDATA%\moviton video editor\is-uu9as.tmp
%LOCALAPPDATA%\moviton video editor\is-4op3a.tmp
%LOCALAPPDATA%\moviton video editor\is-9qkle.tmp
%LOCALAPPDATA%\moviton video editor\is-s2rqu.tmp
%LOCALAPPDATA%\moviton video editor\is-3qq9m.tmp
%LOCALAPPDATA%\moviton video editor\is-dcnva.tmp
%LOCALAPPDATA%\moviton video editor\is-7e9vm.tmp
%LOCALAPPDATA%\moviton video editor\is-5d996.tmp
%LOCALAPPDATA%\moviton video editor\is-5i095.tmp
%LOCALAPPDATA%\moviton video editor\is-8f2pd.tmp
%LOCALAPPDATA%\moviton video editor\is-0gj69.tmp
%LOCALAPPDATA%\moviton video editor\is-ptlft.tmp
%LOCALAPPDATA%\moviton video editor\is-859tg.tmp
%LOCALAPPDATA%\moviton video editor\is-tp7e2.tmp
%LOCALAPPDATA%\moviton video editor\unins000.dat
%LOCALAPPDATA%\moviton video editor\movitonvideoeditor.exe

Moves the following files

from %LOCALAPPDATA%\moviton video editor\is-slrp2.tmp to %LOCALAPPDATA%\moviton video editor\unins000.exe
from %LOCALAPPDATA%\moviton video editor\translations\is-6579d.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_hu.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-11tm5.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_hr.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-fot15.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ga.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-iug16.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_fr.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-61ser.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_fil.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-hqnck.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_fi.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-dvple.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_et.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-3acc8.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_es.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-mk5c2.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_en.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-d85b2.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_el.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-oh2uv.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_id.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-tmusv.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_hy.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-7dmn9.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_cs.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-82a2n.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_bs.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-kej9f.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_bg.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-0657r.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_be.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-v55ap.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ar.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-vb1oq.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_af.qm
from %LOCALAPPDATA%\moviton video editor\platforms\is-ch6dm.tmp to %LOCALAPPDATA%\moviton video editor\platforms\qwindows.dll
from %LOCALAPPDATA%\moviton video editor\mediaservice\is-3isit.tmp to %LOCALAPPDATA%\moviton video editor\mediaservice\dsengine.dll
from %LOCALAPPDATA%\moviton video editor\is-fko4p.tmp to %LOCALAPPDATA%\moviton video editor\vcruntime140.dll
from %LOCALAPPDATA%\moviton video editor\is-77c6k.tmp to %LOCALAPPDATA%\moviton video editor\vccorlib140.dll
from %LOCALAPPDATA%\moviton video editor\translations\is-lde84.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_de.qm
from %LOCALAPPDATA%\moviton video editor\is-859tg.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-heap-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\translations\is-a35ab.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_is.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-gn4md.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_th.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-d20p0.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sv.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-srnkv.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sr.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-ghnlq.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sq.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-fo387.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sl.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-76pfi.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_sk.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-kijgf.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_si.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-tltvt.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ru.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-pj9p8.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ro.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-4i62o.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_pt.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-mgqra.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_pl.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-rteg9.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_nl.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-7sven.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_nb_no.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-m2j6r.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_my.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-7frcn.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_mt.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-s5n55.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ms.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-sdv1t.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_mn.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-2g4k3.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_lv.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-5a7fv.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_lt.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-luq0q.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ko.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-3i101.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_kk.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-02n6n.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ka.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-d6g4a.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_ja.qm
from %LOCALAPPDATA%\moviton video editor\is-e9cd1.tmp to %LOCALAPPDATA%\moviton video editor\swscale-6.dll
from %LOCALAPPDATA%\moviton video editor\translations\is-bh3dc.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_da.qm
from %LOCALAPPDATA%\moviton video editor\is-648pp.tmp to %LOCALAPPDATA%\moviton video editor\swresample-4.dll
from %LOCALAPPDATA%\moviton video editor\is-i9q7i.tmp to %LOCALAPPDATA%\moviton video editor\qt5winextras.dll
from %LOCALAPPDATA%\moviton video editor\is-elmpc.tmp to %LOCALAPPDATA%\moviton video editor\qt5svg.dll
from %LOCALAPPDATA%\moviton video editor\is-t040d.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-processthreads-l1-1-1.dll
from %LOCALAPPDATA%\moviton video editor\is-a8suv.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-conio-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-tui8i.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-xstate-l2-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-7r2fa.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-util-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-m4qvn.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-timezone-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-v9o9r.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-sysinfo-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-jje84.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-synch-l1-2-0.dll
from %LOCALAPPDATA%\moviton video editor\is-lcmq8.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-synch-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-3h0na.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-string-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-rsluc.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-rtlsupport-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-jsv01.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-profile-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-u1i4b.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-processthreads-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-9qkle.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-environment-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-d6d0p.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-processenvironment-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-h5qnh.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-namedpipe-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-c66g4.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-memory-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-h36g3.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-localization-l1-2-0.dll
from %LOCALAPPDATA%\moviton video editor\is-rcjpb.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-libraryloader-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-m849r.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-interlocked-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-lbmrj.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-heap-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-3tqnp.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-handle-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-001k9.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-file-l2-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-os567.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-core-file-l1-2-0.dll
from %LOCALAPPDATA%\moviton video editor\translations\is-jufnn.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_tr.qm
from %LOCALAPPDATA%\moviton video editor\translations\is-ujv9f.tmp to %LOCALAPPDATA%\moviton video editor\translations\slideshowmaker_it.qm
from %LOCALAPPDATA%\moviton video editor\is-tp7e2.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-filesystem-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-0gj69.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-math-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-kp58b.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-convert-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-jfj3p.tmp to %LOCALAPPDATA%\moviton video editor\qt5networkauth.dll
from %LOCALAPPDATA%\moviton video editor\is-vtnrn.tmp to %LOCALAPPDATA%\moviton video editor\qt5network.dll
from %LOCALAPPDATA%\moviton video editor\is-9lcpb.tmp to %LOCALAPPDATA%\moviton video editor\qt5multimedia.dll
from %LOCALAPPDATA%\moviton video editor\is-ah6ib.tmp to %LOCALAPPDATA%\moviton video editor\openh264.dll
from %LOCALAPPDATA%\moviton video editor\is-77ji6.tmp to %LOCALAPPDATA%\moviton video editor\msvcr120.dll
from %LOCALAPPDATA%\moviton video editor\is-q10c0.tmp to %LOCALAPPDATA%\moviton video editor\msvcp140_1.dll
from %LOCALAPPDATA%\moviton video editor\is-cdp4d.tmp to %LOCALAPPDATA%\moviton video editor\msvcp140.dll
from %LOCALAPPDATA%\moviton video editor\is-2i26o.tmp to %LOCALAPPDATA%\moviton video editor\libssl-1_1.dll
from %LOCALAPPDATA%\moviton video editor\is-l0jsf.tmp to %LOCALAPPDATA%\moviton video editor\libcurl.dll
from %LOCALAPPDATA%\moviton video editor\is-5qrhr.tmp to %LOCALAPPDATA%\moviton video editor\libcrypto-1_1.dll
from %LOCALAPPDATA%\moviton video editor\is-6h2mv.tmp to %LOCALAPPDATA%\moviton video editor\dbghelp.dll
from %LOCALAPPDATA%\moviton video editor\is-2qrvr.tmp to %LOCALAPPDATA%\moviton video editor\crashrpt1403.dll
from %LOCALAPPDATA%\moviton video editor\is-uu9as.tmp to %LOCALAPPDATA%\moviton video editor\concrt140.dll
from %LOCALAPPDATA%\moviton video editor\is-94v8h.tmp to %LOCALAPPDATA%\moviton video editor\avdevice-59.dll
from %LOCALAPPDATA%\moviton video editor\is-4op3a.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-utility-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-s2rqu.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-time-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-3qq9m.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-string-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-dcnva.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-stdio-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-7e9vm.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-runtime-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-5d996.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-process-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-5i095.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-private-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-8f2pd.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-multibyte-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-ptlft.tmp to %LOCALAPPDATA%\moviton video editor\api-ms-win-crt-locale-l1-1-0.dll
from %LOCALAPPDATA%\moviton video editor\is-2e45h.tmp to %LOCALAPPDATA%\moviton video editor\movitonvideoeditor.exe

Network activity

Connects to

'st###7345724.ru':80

TCP

HTTP POST requests

http://st###7345724.ru/new/net_api

UDP

DNS ASK st###7345724.ru

Miscellaneous

Searches for the following windows

ClassName: 'P%x_MovitonWnd_10291c5f329' WindowName: ''

Creates and executes the following

'%TEMP%\is-i8b0r.tmp\<File name>.tmp' /SL5="$5024A,8625381,54272,<Full path to file>"
'%LOCALAPPDATA%\moviton video editor\movitonvideoeditor.exe' c4d1fa2447c07d213066c3094da24476

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "moviton_video_editor_10291"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней