Technical Information
Modifies file system
Creates the following files
- %TEMP%\is-p75f0.tmp\<File name>.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-aruki.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-i5ien.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-84upo.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-2uiq5.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-sveaf.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-ctl39.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-q5h3i.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-id7q9.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-dimm5.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\powergold\is-81esa.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\drv\is-2267v.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-aqrkl.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-f3q5b.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-k9a7l.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-masfd.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-bl93e.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-0b79q.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-vd1ku.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-jdu4t.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-89gdt.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-l86p9.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-9v1dh.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-n57b4.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-0l667.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-793al.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-bvvl0.tmp
- %TEMP%\is-jfjtt.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-jfjtt.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-jfjtt.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-s9eg5.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-6aqun.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-te77n.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-rlim3.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-bjq47.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-foea2.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-cq63f.tmp
- %TEMP%\is-jfjtt.tmp\_isetup\_setup64.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-qs3fp.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-ijlpn.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-p144r.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-9bkll.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-25r7t.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-ob7qf.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-0h9bj.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-3366f.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-uc871.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-v9jd2.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-mnorg.tmp
- %ProgramFiles(x86)%\iy studio pro\iy player pro\is-ooufi.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\iy player pro\iy player pro\iy player pro.lnk
- %ProgramFiles(x86)%\iy studio pro\iy player pro\unins000.dat
Moves the following files
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-s9eg5.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\unins000.exe
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-aruki.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\license.txt
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-i5ien.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ppro.chm
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-84upo.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\readme.txt
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-2uiq5.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\whatsnew.txt
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-sveaf.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\deffades.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-ctl39.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\exploreset.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-q5h3i.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\filedefsetlist.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-id7q9.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\hotdefsetlist.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-dimm5.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\jindefsetlist.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-aqrkl.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\musdefsetlist.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-9v1dh.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\newsdefsetlist.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-n57b4.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\prgdefsetlist.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-f3q5b.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\timeservers.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\is-k9a7l.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ini_def\timeserversdefault.ini
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-masfd.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\www\currentfiles.htm
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-bl93e.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\www\currentplaylists.htm
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-0b79q.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\www\main.htm
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-vd1ku.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\www\playedfiles.htm
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-jdu4t.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\www\playlists.htm
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\drv\is-2267v.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\drv\dinstall.exe
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-89gdt.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\www\status.htm
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\powergold\is-81esa.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\powergold\automation.aut
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-793al.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\rpprorus.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-6aqun.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\dstest.exe
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-te77n.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\logview.exe
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-rlim3.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\mbase.exe
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-bjq47.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\mexplore.exe
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-foea2.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\ppro.exe
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-cq63f.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\wmfdist.exe
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-qs3fp.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\sqlite3.dll
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-ooufi.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\unzdll.dll
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\is-ijlpn.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\zipdll.dll
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-p144r.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\logvieweng.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-9bkll.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\logviewrus.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-25r7t.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\logviewrus_lat.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-ob7qf.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\mbaseeng.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-0h9bj.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\mbaserus.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-3366f.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\mbaserus_lat.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-uc871.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\mexploreeng.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-v9jd2.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\mexplorerus.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-mnorg.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\mexplorerus_lat.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-bvvl0.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\rpproeng.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\language\is-0l667.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\language\rpprorus_lat.lng
- from %ProgramFiles(x86)%\iy studio pro\iy player pro\www\is-l86p9.tmp to %ProgramFiles(x86)%\iy studio pro\iy player pro\www\unplayedfiles.htm
Network activity
Connects to
- 'op###olad.com':80
TCP
HTTP POST requests
- http://op###olad.com/v2/events
UDP
- DNS ASK op###olad.com
Miscellaneous
Searches for the following windows
- ClassName: '3D506021-F16D-434d-82A2-9DB33E68731E' WindowName: ''
Creates and executes the following
- '%TEMP%\is-p75f0.tmp\<File name>.tmp' /SL5="$E0214,11146550,54272,<Full path to file>"
- '%ProgramFiles(x86)%\iy studio pro\iy player pro\wmfdist.exe' /Q:A /R:N
- '%ProgramFiles(x86)%\iy studio pro\iy player pro\ppro.exe' <File name>.exe
