Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\is-fetb7.tmp\<Имя файла>.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-s7nkh.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-tetdi.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-3qreu.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-eavb4.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-euv2a.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-9639i.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-ckse1.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-7um5j.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-job1l.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\powergold\is-3vre0.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\drv\is-2t1nc.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-ti0d5.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-jsb47.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-66qh3.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-crn9k.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-h6ttk.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-qdovr.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-60a23.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-8do1l.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-g114m.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-rv6e6.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-ook30.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-statg.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-a9lkc.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-b01ag.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-hsu7i.tmp
- %TEMP%\is-gcabi.tmp\_isetup\_setup64.tmp
- %TEMP%\is-gcabi.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-gcabi.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-nln7h.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-1b1ij.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-8sf63.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-spsks.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-i1n10.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-hqm8s.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-n438j.tmp
- %TEMP%\is-gcabi.tmp\_isetup\_regdll.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-ui00b.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-v8mm8.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-a54ef.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-v11cq.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-guiun.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-pemrf.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-hoerg.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-8v5cv.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-l7mqf.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-6jpd8.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-ge7ne.tmp
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-dj2lf.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\ip player pro\ip player pro\ip player pro.lnk
- %ProgramFiles(x86)%\ip studio pro\ip player pro\unins000.dat
Перемещает следующие файлы
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-nln7h.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\unins000.exe
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-s7nkh.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\license.txt
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-tetdi.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ppro.chm
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-3qreu.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\readme.txt
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-eavb4.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\whatsnew.txt
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-euv2a.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\deffades.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-9639i.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\exploreset.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-ckse1.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\filedefsetlist.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-7um5j.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\hotdefsetlist.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-job1l.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\jindefsetlist.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-ti0d5.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\musdefsetlist.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-ook30.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\newsdefsetlist.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-statg.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\prgdefsetlist.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-jsb47.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\timeservers.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\is-66qh3.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ini_def\timeserversdefault.ini
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-crn9k.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\www\currentfiles.htm
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-h6ttk.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\www\currentplaylists.htm
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-qdovr.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\www\main.htm
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-60a23.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\www\playedfiles.htm
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-8do1l.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\www\playlists.htm
- %ProgramFiles(x86)%\ip studio pro\ip player pro\drv\is-2t1nc.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\drv\dinstall.exe
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-g114m.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\www\status.htm
- %ProgramFiles(x86)%\ip studio pro\ip player pro\powergold\is-3vre0.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\powergold\automation.aut
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-b01ag.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\rpprorus.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-1b1ij.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\dstest.exe
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-8sf63.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\logview.exe
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-spsks.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\mbase.exe
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-i1n10.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\mexplore.exe
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-hqm8s.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\ppro.exe
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-n438j.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\wmfdist.exe
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-ui00b.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\sqlite3.dll
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-dj2lf.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\unzdll.dll
- %ProgramFiles(x86)%\ip studio pro\ip player pro\is-v8mm8.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\zipdll.dll
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-a54ef.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\logvieweng.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-v11cq.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\logviewrus.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-guiun.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\logviewrus_lat.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-pemrf.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\mbaseeng.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-hoerg.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\mbaserus.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-8v5cv.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\mbaserus_lat.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-l7mqf.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\mexploreeng.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-6jpd8.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\mexplorerus.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-ge7ne.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\mexplorerus_lat.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-hsu7i.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\rpproeng.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\language\is-a9lkc.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\language\rpprorus_lat.lng
- %ProgramFiles(x86)%\ip studio pro\ip player pro\www\is-rv6e6.tmp в %ProgramFiles(x86)%\ip studio pro\ip player pro\www\unplayedfiles.htm
Сетевая активность
Подключается к
- 'op###olad.com':80
TCP
Запросы HTTP POST
- http://op###olad.com/v2/events
UDP
- DNS ASK op###olad.com
Другое
Ищет следующие окна
- ClassName: '1025063D-F16D-434d-82A2-7968BD33E31E' WindowName: ''
Создает и запускает на исполнение
- '%TEMP%\is-fetb7.tmp\<Имя файла>.tmp' /SL5="$12022A,9992371,54272,<Полный путь к файлу>"
- '%ProgramFiles(x86)%\ip studio pro\ip player pro\wmfdist.exe' /Q:A /R:N
- '%ProgramFiles(x86)%\ip studio pro\ip player pro\ppro.exe' <Имя файла>.exe
