Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\is-ebli3.tmp\<Имя файла>.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-u19do.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-4u36v.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-k3g3r.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-5r9m3.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-v5qoc.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-foeag.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-ms4gc.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-67i3v.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-cbqbj.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-e2h91.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-je5v2.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-3kj4n.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-hv963.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-0trcr.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-n7957.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-dfg5o.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-4sjq3.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-6iloa.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-ei8o7.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-kqjqv.tmp
- %ProgramFiles(x86)%\videomontage\is-bg2bh.tmp
- %ProgramFiles(x86)%\videomontage\themes\is-b2192.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main1\is-b91rq.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main1\is-ddsmk.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-jju4e.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-mc152.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-cjl61.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-58aqs.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-ds6rg.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-9lr3s.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-3a5k0.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-s9f32.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-vp7su.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-sasko.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-32drv.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-i3q0f.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-f3fp0.tmp
- %ProgramFiles(x86)%\videomontage\transitions\main\is-m9i3n.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\videomontage\videomontage.lnk
- %ProgramFiles(x86)%\videomontage\transitions\is-5um45.tmp
- %ProgramFiles(x86)%\videomontage\transitions\is-fdsmu.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-funvt.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-ilp21.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-jgdmt.tmp
- %ProgramFiles(x86)%\videomontage\is-20685.tmp
- %ProgramFiles(x86)%\videomontage\is-hj5ur.tmp
- %ProgramFiles(x86)%\videomontage\is-cnp0r.tmp
- %ProgramFiles(x86)%\videomontage\is-vdsg3.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-q0pkg.tmp
- %ProgramFiles(x86)%\videomontage\is-u3enc.tmp
- %ProgramFiles(x86)%\videomontage\is-jgfqa.tmp
- %ProgramFiles(x86)%\videomontage\is-r05bc.tmp
- %ProgramFiles(x86)%\videomontage\is-3ijte.tmp
- %TEMP%\is-3iafg.tmp\_isetup\_iscrypt.dll
- %TEMP%\is-3iafg.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-3iafg.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-3iafg.tmp\_isetup\_setup64.tmp
- %ProgramFiles(x86)%\videomontage\is-ficj9.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-sscnl.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-91akn.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-qm088.tmp
- %ProgramFiles(x86)%\videomontage\bass\is-ib2e5.tmp
- %ProgramFiles(x86)%\videomontage\bass\is-kfn18.tmp
- %ProgramFiles(x86)%\videomontage\bass\is-aubgt.tmp
- %ProgramFiles(x86)%\videomontage\bass\is-6al4g.tmp
- %ProgramFiles(x86)%\videomontage\bass\is-lu4kl.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-pmhqb.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-rcm4u.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-i58um.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-gjjqg.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-o9a9n.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-2eddd.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-ilspp.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-i3lmt.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-o56dj.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-r943j.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-lace1.tmp
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-1jkl5.tmp
- %ProgramFiles(x86)%\videomontage\transitions\is-leec3.tmp
- %ProgramFiles(x86)%\videomontage\unins000.dat
Перемещает следующие файлы
- %ProgramFiles(x86)%\videomontage\is-3ijte.tmp в %ProgramFiles(x86)%\videomontage\unins000.exe
- %ProgramFiles(x86)%\videomontage\transitions\main\is-u19do.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\32.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-4u36v.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\31.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-k3g3r.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\30.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-5r9m3.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\29.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-v5qoc.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\28.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-foeag.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\26.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-6iloa.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\34.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-67i3v.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\33.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-4sjq3.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\23.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-e2h91.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\22.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-je5v2.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\21.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-3kj4n.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\2.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-hv963.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\14.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-0trcr.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\13.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-ms4gc.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\25.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-r943j.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\002_cover.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-ei8o7.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\35.png
- %ProgramFiles(x86)%\videomontage\transitions\main1\is-b91rq.tmp в %ProgramFiles(x86)%\videomontage\transitions\main1\2.png
- %ProgramFiles(x86)%\videomontage\transitions\main1\is-ddsmk.tmp в %ProgramFiles(x86)%\videomontage\transitions\main1\1.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-jju4e.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\9.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-mc152.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\8.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-cjl61.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\7.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-58aqs.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\5.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-ds6rg.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\45.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-9lr3s.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\44.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-3a5k0.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\43.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-s9f32.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\42.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-vp7su.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\41.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-sasko.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\40.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-32drv.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\39.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-i3q0f.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\38.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-f3fp0.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\37.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-n7957.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\12.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-cbqbj.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\24.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-dfg5o.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\11.png
- %ProgramFiles(x86)%\videomontage\transitions\main\is-m9i3n.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\1.png
- %ProgramFiles(x86)%\videomontage\transitions\is-5um45.tmp в %ProgramFiles(x86)%\videomontage\transitions\b.jpg
- %ProgramFiles(x86)%\videomontage\is-20685.tmp в %ProgramFiles(x86)%\videomontage\msvcr120.dll
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-91akn.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\times.dat
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-sscnl.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\tempo.dat
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-q0pkg.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\ratings.dat
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-funvt.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\moods.dat
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-ilp21.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\genres.dat
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-jgdmt.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\categories.dat
- %ProgramFiles(x86)%\videomontage\is-hj5ur.tmp в %ProgramFiles(x86)%\videomontage\ssleay32.dll
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-1jkl5.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\vocal.dat
- %ProgramFiles(x86)%\videomontage\is-cnp0r.tmp в %ProgramFiles(x86)%\videomontage\libeay32.dll
- %ProgramFiles(x86)%\videomontage\is-vdsg3.tmp в %ProgramFiles(x86)%\videomontage\instutils.exe
- %ProgramFiles(x86)%\videomontage\is-u3enc.tmp в %ProgramFiles(x86)%\videomontage\fge.dll
- %ProgramFiles(x86)%\videomontage\is-ficj9.tmp в %ProgramFiles(x86)%\videomontage\sqlite3.dll
- %ProgramFiles(x86)%\videomontage\is-jgfqa.tmp в %ProgramFiles(x86)%\videomontage\wmfdist.exe
- %ProgramFiles(x86)%\videomontage\is-r05bc.tmp в %ProgramFiles(x86)%\videomontage\videoeditor.exe
- %ProgramFiles(x86)%\videomontage\themes\is-b2192.tmp в %ProgramFiles(x86)%\videomontage\themes\version.dat
- %ProgramFiles(x86)%\videomontage\transitions\main\is-kqjqv.tmp в %ProgramFiles(x86)%\videomontage\transitions\main\36.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-lace1.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\001_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-i3lmt.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\004_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\is-qm088.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\tracks.dat
- %ProgramFiles(x86)%\videomontage\transitions\is-leec3.tmp в %ProgramFiles(x86)%\videomontage\transitions\a.jpg
- %ProgramFiles(x86)%\videomontage\transitions\is-fdsmu.tmp в %ProgramFiles(x86)%\videomontage\transitions\46.png
- %ProgramFiles(x86)%\videomontage\bass\is-ib2e5.tmp в %ProgramFiles(x86)%\videomontage\bass\bass_alac.dll
- %ProgramFiles(x86)%\videomontage\bass\is-kfn18.tmp в %ProgramFiles(x86)%\videomontage\bass\bass_aac.dll
- %ProgramFiles(x86)%\videomontage\bass\is-aubgt.tmp в %ProgramFiles(x86)%\videomontage\bass\basswma.dll
- %ProgramFiles(x86)%\videomontage\bass\is-6al4g.tmp в %ProgramFiles(x86)%\videomontage\bass\bassflac.dll
- %ProgramFiles(x86)%\videomontage\bass\is-lu4kl.tmp в %ProgramFiles(x86)%\videomontage\bass\bass.dll
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-pmhqb.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\089_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-rcm4u.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\012_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-i58um.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\011_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-gjjqg.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\009_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-o9a9n.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\008_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-2eddd.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\007_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-ilspp.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\006_cover.png
- %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\is-o56dj.tmp в %ProgramFiles(x86)%\videomontage\audio\musiclibrary\cover\003_cover.png
- %ProgramFiles(x86)%\videomontage\is-bg2bh.tmp в %ProgramFiles(x86)%\videomontage\license.txt
Сетевая активность
Подключается к
- 'op###olad.com':80
TCP
Запросы HTTP POST
- http://op###olad.com/v2/events
UDP
- DNS ASK op###olad.com
Другое
Ищет следующие окна
- ClassName: '90398B09-CD61-4FF0-9914-50D76835FDA9' WindowName: ''
Создает и запускает на исполнение
- '%TEMP%\is-ebli3.tmp\<Имя файла>.tmp' /SL5="$13021A,10149824,373248,<Полный путь к файлу>"
- '%ProgramFiles(x86)%\videomontage\wmfdist.exe' /Q:A /R:N
- '%ProgramFiles(x86)%\videomontage\videoeditor.exe' <Имя файла>.exe
