Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\is-57k9e.tmp\<Имя файла>.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-jksc2.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-1ckpo.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-01usc.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\powergold\is-db90q.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\drv\is-miqba.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-thi52.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-mln00.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-g0s9t.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-tk0bn.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-9kc63.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-aj504.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-vrthi.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-s9el1.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-b9s3i.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-40uuh.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-pnj0i.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-trsiv.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-q1eo8.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-but0u.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-1721i.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\iz player pro\iz player pro\iz player pro.lnk
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-khqnh.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-9mva6.tmp
- %TEMP%\is-5959j.tmp\_isetup\_setup64.tmp
- %TEMP%\is-5959j.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-5959j.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-5959j.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-cj7id.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-idrgp.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-kmi3r.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-rn9bd.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-rl4qf.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-fuqk2.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-rbdr9.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-j6l3k.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-k852g.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-vbn74.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-4s5hi.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-12n5u.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-vh9d6.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-u8enm.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-ci4bd.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-mpohc.tmp
- %ProgramFiles(x86)%\iz studio pro\iz player pro\unins000.dat
Перемещает следующие файлы
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-cj7id.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\unins000.exe
- %ProgramFiles(x86)%\iz studio pro\iz player pro\powergold\is-db90q.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\powergold\automation.aut
- %ProgramFiles(x86)%\iz studio pro\iz player pro\drv\is-miqba.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\drv\dinstall.exe
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-thi52.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\license.txt
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-mln00.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ppro.chm
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-g0s9t.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\readme.txt
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-tk0bn.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\whatsnew.txt
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-vbn74.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\zipdll.dll
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-9kc63.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\deffades.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-vrthi.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\filedefsetlist.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-s9el1.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\hotdefsetlist.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-b9s3i.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\jindefsetlist.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-40uuh.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\musdefsetlist.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-pnj0i.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\newsdefsetlist.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-trsiv.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\prgdefsetlist.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-1ckpo.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\rpprorus.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-01usc.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\rpprorus_lat.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-jksc2.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\rpproeng.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-1721i.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\mexplorerus_lat.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-khqnh.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\mexplorerus.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-kmi3r.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\logview.exe
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-rn9bd.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\mbase.exe
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-rl4qf.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\mexplore.exe
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-fuqk2.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\layer.exe
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-rbdr9.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\wmfdist.exe
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-j6l3k.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\sqlite3.dll
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-q1eo8.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\timeservers.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-aj504.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\exploreset.ini
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-k852g.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\unzdll.dll
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-12n5u.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\logviewrus.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-vh9d6.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\logviewrus_lat.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-u8enm.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\mbaseeng.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-ci4bd.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\mbaserus.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-9mva6.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\mbaserus_lat.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-mpohc.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\mexploreeng.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\is-idrgp.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\dstest.exe
- %ProgramFiles(x86)%\iz studio pro\iz player pro\language\is-4s5hi.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\language\logvieweng.lng
- %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\is-but0u.tmp в %ProgramFiles(x86)%\iz studio pro\iz player pro\ini_def\timeserversdefault.ini
Сетевая активность
Подключается к
- 'op###olad.com':80
TCP
Запросы HTTP POST
- http://op###olad.com/v2/events
UDP
- DNS ASK op###olad.com
Другое
Ищет следующие окна
- ClassName: 'D5063021-F16D-434d-82A2-E68739DB331E' WindowName: ''
Создает и запускает на исполнение
- '%TEMP%\is-57k9e.tmp\<Имя файла>.tmp' /SL5="$A0206,11167730,54272,<Полный путь к файлу>"
- '%ProgramFiles(x86)%\iz studio pro\iz player pro\wmfdist.exe' /Q:A /R:N
- '%ProgramFiles(x86)%\iz studio pro\iz player pro\layer.exe' <Имя файла>.exe
