Technical Information
Modifies file system
Creates the following files
- %TEMP%\is-tsevt.tmp\<File name>.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-37jm7.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-53agv.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-d5170.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-7ph6f.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-cl1pv.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-u60ao.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-2mqau.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-gpii0.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\mplayer\mplayer.lnk
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-o0rps.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-c9a9g.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-ens0s.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-j7b41.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-bcer2.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\tools\ffmpeg\is-0c2ie.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\tools\ffmpeg\is-vkisk.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-2lnua.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-bbb92.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-loihv.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-92952.tmp
- %TEMP%\is-4onpn.tmp\_isetup\_setup64.tmp
- %TEMP%\is-4onpn.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-hhcjo.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-lunb7.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-ep2ar.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-s5bs3.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-f90in.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-3d171.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-9dl4v.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-tf3g3.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-cu8pj.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-m6cmc.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-qhn8g.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-s27ec.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\is-ov943.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-15d9r.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-4d33o.tmp
- %ProgramFiles(x86)%\mplayer\7.7.9.2\unins000.dat
Moves the following files
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-hhcjo.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\unins000.exe
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-37jm7.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\basswasapi.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-53agv.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\basswma.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-d5170.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\basswv.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-7ph6f.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_aac.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-cl1pv.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_ac3.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-u60ao.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_alac.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-bbb92.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_mpc.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-cu8pj.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\gpl.txt
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-gpii0.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_ofr.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-o0rps.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_spx.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-c9a9g.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_tak2.4.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-ens0s.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_tta.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-j7b41.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\optimfrog.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-bcer2.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\tak_deco_lib.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-2lnua.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bassopus.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-loihv.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bassmix.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-4d33o.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bassflac.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-9dl4v.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bassenc.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-15d9r.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-ov943.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\ttagger.exe
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-s27ec.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\tartworkextractor.exe
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-qhn8g.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\renametool.exe
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-m6cmc.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\optimfrog.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\is-2mqau.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\basslib\bass_ape.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-tf3g3.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\done.wav
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-3d171.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\custompath.txt
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-92952.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\components.txt
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-f90in.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\changelog.txt
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-s5bs3.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\cdrip122.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-ep2ar.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\cd.png
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\is-lunb7.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\mplayer.exe
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\tools\ffmpeg\is-0c2ie.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\tools\ffmpeg\avdevice-55.dll
- from %ProgramFiles(x86)%\mplayer\7.7.9.2\tools\ffmpeg\is-vkisk.tmp to %ProgramFiles(x86)%\mplayer\7.7.9.2\tools\ffmpeg\avdevice-56.dll
Network activity
Connects to
- 'op###olad.com':80
TCP
HTTP POST requests
- http://op###olad.com/v2/events
UDP
- DNS ASK op###olad.com
Miscellaneous
Creates and executes the following
- '%TEMP%\is-tsevt.tmp\<File name>.tmp' /SL5="$B01F2,6144793,344064,<Full path to file>"
- '%ProgramFiles(x86)%\mplayer\7.7.9.2\mplayer.exe' <File name>.exe
