Technical Information
Modifies file system
Creates the following files
- %TEMP%\is-cj02q.tmp\<File name>.tmp
- %ProgramFiles(x86)%\burning studio\is-aj2tj.tmp
- %ProgramFiles(x86)%\burning studio\is-aehr9.tmp
- %ProgramFiles(x86)%\burning studio\is-31ims.tmp
- %ProgramFiles(x86)%\burning studio\is-35sc8.tmp
- %ProgramFiles(x86)%\burning studio\is-i9f85.tmp
- %ProgramFiles(x86)%\burning studio\is-mnpu0.tmp
- %ProgramFiles(x86)%\burning studio\is-5fk5k.tmp
- %ProgramFiles(x86)%\burning studio\is-mdskj.tmp
- %ProgramFiles(x86)%\burning studio\is-t4f9k.tmp
- %ProgramFiles(x86)%\burning studio\is-cbol9.tmp
- %ProgramFiles(x86)%\burning studio\is-js0es.tmp
- %ProgramFiles(x86)%\burning studio\is-79tok.tmp
- %ProgramFiles(x86)%\burning studio\is-6nhq8.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\burning studio\burning studio .lnk
- %ProgramFiles(x86)%\burning studio\is-aafcd.tmp
- %ProgramFiles(x86)%\burning studio\is-l5v5l.tmp
- %ProgramFiles(x86)%\burning studio\is-3nem8.tmp
- %ProgramFiles(x86)%\burning studio\is-k3e2k.tmp
- %ProgramFiles(x86)%\burning studio\is-vt3tu.tmp
- %ProgramFiles(x86)%\burning studio\is-1bnsr.tmp
- %ProgramFiles(x86)%\burning studio\is-ch8ts.tmp
- %ProgramFiles(x86)%\burning studio\is-rddb4.tmp
- %ProgramFiles(x86)%\burning studio\is-9vpk8.tmp
- %ProgramFiles(x86)%\burning studio\is-gj0jg.tmp
- %TEMP%\is-mqgld.tmp\_isetup\_iscrypt.dll
- %TEMP%\is-mqgld.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-mqgld.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-mqgld.tmp\_isetup\_setup64.tmp
- %ProgramFiles(x86)%\burning studio\is-bnskt.tmp
- %ProgramFiles(x86)%\burning studio\unins000.dat
Moves the following files
- from %ProgramFiles(x86)%\burning studio\is-gj0jg.tmp to %ProgramFiles(x86)%\burning studio\unins000.exe
- from %ProgramFiles(x86)%\burning studio\is-31ims.tmp to %ProgramFiles(x86)%\burning studio\wmfdist.exe
- from %ProgramFiles(x86)%\burning studio\is-35sc8.tmp to %ProgramFiles(x86)%\burning studio\startrescueexplorer.ico
- from %ProgramFiles(x86)%\burning studio\is-i9f85.tmp to %ProgramFiles(x86)%\burning studio\license-curl.txt
- from %ProgramFiles(x86)%\burning studio\is-mnpu0.tmp to %ProgramFiles(x86)%\burning studio\license-fi.txt
- from %ProgramFiles(x86)%\burning studio\is-5fk5k.tmp to %ProgramFiles(x86)%\burning studio\ash_libcurl.dll
- from %ProgramFiles(x86)%\burning studio\is-mdskj.tmp to %ProgramFiles(x86)%\burning studio\gdiplus.dll
- from %ProgramFiles(x86)%\burning studio\is-t4f9k.tmp to %ProgramFiles(x86)%\burning studio\irrlicht.dll
- from %ProgramFiles(x86)%\burning studio\is-cbol9.tmp to %ProgramFiles(x86)%\burning studio\d3dx9_43.dll
- from %ProgramFiles(x86)%\burning studio\is-js0es.tmp to %ProgramFiles(x86)%\burning studio\avfilter_ash-6.dll
- from %ProgramFiles(x86)%\burning studio\is-79tok.tmp to %ProgramFiles(x86)%\burning studio\swresample_ash-2.dll
- from %ProgramFiles(x86)%\burning studio\is-6nhq8.tmp to %ProgramFiles(x86)%\burning studio\swscale_ash-4.dll
- from %ProgramFiles(x86)%\burning studio\is-aafcd.tmp to %ProgramFiles(x86)%\burning studio\avutil_ash-55.dll
- from %ProgramFiles(x86)%\burning studio\is-bnskt.tmp to %ProgramFiles(x86)%\burning studio\ash_amf.dll
- from %ProgramFiles(x86)%\burning studio\is-l5v5l.tmp to %ProgramFiles(x86)%\burning studio\bsnotify.exe
- from %ProgramFiles(x86)%\burning studio\is-3nem8.tmp to %ProgramFiles(x86)%\burning studio\ash_spti.dll
- from %ProgramFiles(x86)%\burning studio\is-k3e2k.tmp to %ProgramFiles(x86)%\burning studio\decmpa.dll
- from %ProgramFiles(x86)%\burning studio\is-vt3tu.tmp to %ProgramFiles(x86)%\burning studio\audiotools.dll
- from %ProgramFiles(x86)%\burning studio\is-1bnsr.tmp to %ProgramFiles(x86)%\burning studio\info.xml
- from %ProgramFiles(x86)%\burning studio\is-ch8ts.tmp to %ProgramFiles(x86)%\burning studio\version.info
- from %ProgramFiles(x86)%\burning studio\is-rddb4.tmp to %ProgramFiles(x86)%\burning studio\product.xml
- from %ProgramFiles(x86)%\burning studio\is-9vpk8.tmp to %ProgramFiles(x86)%\burning studio\license-en.txt
- from %ProgramFiles(x86)%\burning studio\is-aehr9.tmp to %ProgramFiles(x86)%\burning studio\burningstudio.exe
- from %ProgramFiles(x86)%\burning studio\is-aj2tj.tmp to %ProgramFiles(x86)%\burning studio\sqlite3.dll
Network activity
Connects to
- 'op###olad.com':80
TCP
HTTP POST requests
- http://op###olad.com/v2/events
UDP
- DNS ASK op###olad.com
Miscellaneous
Searches for the following windows
- ClassName: '339C1B97-155F-C10C-D4D6-BA03C805EAE4' WindowName: ''
Creates and executes the following
- '%TEMP%\is-cj02q.tmp\<File name>.tmp' /SL5="$130220,11867925,56832,<Full path to file>"
- '%ProgramFiles(x86)%\burning studio\wmfdist.exe' /Q:A /R:N
- '%ProgramFiles(x86)%\burning studio\burningstudio.exe' <File name>.exe
