Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'APSDaemon' = '"%CommonProgramFiles(x86)%\Apple\Apple Application Support\APSDaemon.exe"'
Modifies file system
Creates the following files
- %TEMP%\is-irh22.tmp\<File name>.tmp
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\javascriptformatter.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\javascriptcontextmanager.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspectorview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspectorsyntaxhighlight.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspectorfrontendhoststub.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspectorfrontendapi.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspectorcommon.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspectorbackendstub.qrc
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspectorbackendstub.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\javascriptoutlinedialog.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\javascriptoutlinedialog.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspector.html
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspector.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\injectedfakeworker.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\imageview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\warningserrors.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\warningorangedot.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\warningmediumicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\warningicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\userinputresulticon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspectorbackend.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinehollowpillblue.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\javascriptsourceframe.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\profilespanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\profilespanel.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\profilelauncherview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\profiledatagridtree.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\popover.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\popover.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\placard.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\partialquicksort.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\panelenablerview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\panelenablerview.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\panel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\objectpropertiessection.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\objectpopoverhelper.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\object.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\networkpanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\networkpanel.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\networkmanager.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\networklogview.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\networklog.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\networkitemview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\metricssidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\userinputpreviousicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\inspector.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\userinputicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\treeuptrianglewhite.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\treeuptriangleblack.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\thumbhoriz.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinebarred.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinebarpurple.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinebarorange.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinebargreen.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinebargray.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinebarblue.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\thumbvert.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\thumbhoververt.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\thumbhoverhoriz.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\thumbactivevert.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinecheckmarks.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\thumbactivehoriz.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\successgreendot.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\statusbarresizervertical.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\statusbarresizerhorizontal.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\statusbarmenubuttonselected.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\statusbarmenubutton.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\statusbarbuttons.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\statusbarbuttonglyphs.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\statusbarbottombackground.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\profileview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\keyboardshortcut.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinedots.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinehollowpillgreen.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinebaryellow.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\treerighttrianglewhite.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\treerighttriangleblack.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\treedowntrianglewhite.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\treedowntriangleblack.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\trackvert.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\trackhoriz.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\toolbaritemselected.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\toolbariconssmall.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\toolbaricons.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinepillyellow.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinepillred.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinepillpurple.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinepillorange.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinepillgreen.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinepillgray.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinepillblue.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinehollowpillyellow.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinehollowpillred.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinehollowpillpurple.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinehollowpillorange.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\timelinehollowpillgray.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\propertiessection.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\propertiessidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\rawsourcecode.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\watchexpressionssidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\view.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\utilities.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\usermetrics.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\uiutils.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\uisourcecode.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\uglifyjs\parse-js.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\treeoutline.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\topdownprofiledatagridtree.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\toolbar.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\timelinepanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\timelinepanel.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\timelineoverviewpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\timelinemanager.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\timelinegrid.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\timelineagent.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\textviewer.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\textviewer.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\textprompt.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\textprompt.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\texteditormodel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\webkit.qrc
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\workermanager.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\statusbarbackground.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\workerssidebarpane.js
- %TEMP%\is-fo9oo.tmp\4a6ca328-7888-3279-b672-d1d9d0a46ee2\install\7\7.html
- %TEMP%\is-fo9oo.tmp\4a6ca328-7888-3279-b672-d1d9d0a46ee2\install\1\1.html
- %TEMP%\is-fo9oo.tmp\4a6ca328-7888-3279-b672-d1d9d0a46ee2\install\0\offer0.html
- %TEMP%\is-fo9oo.tmp\iqpppcmit.7z
- %TEMP%\is-fo9oo.tmp\zlib1.dll
- %TEMP%\is-fo9oo.tmp\webkit.dll
- %TEMP%\is-fo9oo.tmp\ssleay32.dll
- %TEMP%\is-fo9oo.tmp\sqlite3.dll
- %TEMP%\is-fo9oo.tmp\pthreadvc2.dll
- %TEMP%\is-fo9oo.tmp\libxslt.dll
- %TEMP%\is-fo9oo.tmp\libxml2.dll
- %TEMP%\is-fo9oo.tmp\libicuuc.dll
- %TEMP%\is-fo9oo.tmp\libicuin.dll
- %TEMP%\is-fo9oo.tmp\libhunspell.dll
- %TEMP%\is-fo9oo.tmp\libeay32.dll
- %TEMP%\is-fo9oo.tmp\libcurl.dll
- %TEMP%\is-fo9oo.tmp\jsc.exe
- %TEMP%\is-fo9oo.tmp\javascriptcore.dll
- %TEMP%\is-fo9oo.tmp\icudt46.dll
- %TEMP%\is-fo9oo.tmp\cflite.dll
- %TEMP%\is-fo9oo.tmp\cairo.dll
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\texteditorhighlighter.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\scriptssearchscope.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\testcontroller.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\scriptspanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\scriptsnavigator.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\scriptformatterworker.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\scriptformatter.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\script.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\scopechainsidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourceview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourceview.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourceutils.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcetreemodel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcetimingview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcespanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcespanel.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourceresponseview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcepreviewview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcejsonview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcehtmlview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourceheadersview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcecookiesview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resourcecategory.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\resource.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\remoteobject.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\scriptspanel.css
- %TEMP%\is-fo9oo.tmp\4a6ca328-7888-3279-b672-d1d9d0a46ee2\install\8\8.html
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\tabbedpane.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\searchcontroller.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\tabbededitorcontainer.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\stylessidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\statusbarbutton.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\splitview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\splitview.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sourcetokenizer.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sourcejavascripttokenizer.re2js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sourcejavascripttokenizer.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sourcehtmltokenizer.re2js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sourcehtmltokenizer.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sourceframe.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sourcecsstokenizer.re2js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sourcecsstokenizer.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\softcontextmenu.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sidebartreeelement.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\sidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\showmoredatagridnode.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\shortcutsscreen.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\settingsscreen.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\settings.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\section.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\tabbedpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\welcomeview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\splitviewdividerbackground.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\resourcecssicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\cookieparser.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\cookieitemsview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\contextmenu.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\contentproviders.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\consoleview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\consolepanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\consolemodel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\consolemessage.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\compilersourcemappingprovider.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\csscompletions.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\cookiestable.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\checkbox.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\callstacksidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\breakpointssidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\breakpointmanager.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\bottomupprofiledatagridtree.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\binarysearch.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\auditspanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\auditspanel.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\auditrules.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\compilersourcemapping.js
- %WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.4763\ul_msvcp80.dll.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18e
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\csskeywordcompletions.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\emptyview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\elementstreeoutline.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\elementspanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\elementspanel.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\drawer.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\domsyntaxhighlighter.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\domstorageitemsview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\domstorage.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\dompresentationutils.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\dombreakpointssidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\domagent.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\detailedheapshotview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\detailedheapshotgridnodes.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\debuggerpresentationmodel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\debuggermodel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\datagrid.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\datagrid.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\databasetableview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\databasequeryview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\database.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\cssstylemodel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\auditresultview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\color.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\auditlauncherview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\auditformatters.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\auditcategories.js
- %TEMP%\is-fo9oo.tmp\appleapplicationsupport.msi
- %WINDIR%\winsxs\installtemp\20240912085645801.0\msvcm80.dll
- %WINDIR%\winsxs\installtemp\20240912085645801.0\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86.manifest
- %WINDIR%\winsxs\installtemp\20240912085645751.0\8.0.50727.6195.policy
- %WINDIR%\winsxs\installtemp\20240912085645801.0\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86.cat
- %WINDIR%\winsxs\installtemp\20240912085645751.0\8.0.50727.6195.cat
- %CommonProgramFiles(x86)%\apple\apple application support\apsdaemon_main.dll
- %CommonProgramFiles(x86)%\apple\apple application support\apsdaemon.exe
- \device\harddiskvolume1\boot\bcd
- \device\harddiskvolume1\boot\bcd.log
- %TEMP%\is-fo9oo.tmp\7za.dll
- %WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.4763\ul_msvcr80.dll.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18e
- %TEMP%\is-fo9oo.tmp\msvcr80.dll
- %TEMP%\is-fo9oo.tmp\msvcp80.dll
- %TEMP%\is-fo9oo.tmp\msvcm80.dll
- %TEMP%\is-fo9oo.tmp\atl80.dll
- %TEMP%\is-fo9oo.tmp\7zpp.dll
- %TEMP%\is-fo9oo.tmp\webview.dll
- %TEMP%\is-fo9oo.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-fo9oo.tmp\_isetup\_setup64.tmp
- %TEMP%\setup log 2024-09-12 #001.txt
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\eventlistenerssidebarpane.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\cssselectorprofileview.js
- %WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.4763\ul_msvcm80.dll.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18e
- %WINDIR%\installer\{ed75e291-7e02-4065-b551-e87a9f0a0717}\wininstall.ico
- %WINDIR%\winsxs\installtemp\20240912085645801.0\msvcp80.dll
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\applicationcachemodel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\applicationcacheitemsview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\advancedsearchcontroller.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\info.plist
- %TEMP%\is-fo9oo.tmp\webkit.resources\en.lproj\localizedstrings.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\en.lproj\localizable.strings
- %TEMP%\is-fo9oo.tmp\view\main.js
- %TEMP%\is-fo9oo.tmp\view\main.css
- %TEMP%\is-fo9oo.tmp\view\jquery.min.js
- %TEMP%\is-fo9oo.tmp\javascriptcore.resources\info.plist
- %TEMP%\is-fo9oo.tmp\dictionaries\readme_en_us.txt
- %TEMP%\is-fo9oo.tmp\dictionaries\en_us.dic
- %TEMP%\is-fo9oo.tmp\dictionaries\en_us.aff
- %TEMP%\is-fo9oo.tmp\cflite.resources\info.plist
- %TEMP%\is-fo9oo.tmp\cflite.resources\cfunicodedata-l.mapping
- %TEMP%\is-fo9oo.tmp\cflite.resources\cfunicodedata-b.mapping
- %TEMP%\is-fo9oo.tmp\cflite.resources\cfunicharpropertydatabase.data
- %TEMP%\is-fo9oo.tmp\cflite.resources\cfcharactersetbitmaps.bitmap
- %TEMP%\is-fo9oo.tmp\libs.7z
- %TEMP%\msi932c3.log
- %WINDIR%\winsxs\installtemp\20240912085645801.0\msvcr80.dll
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\extensionapi.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\extensionauditcategory.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\extensionpanel.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\programcounterborder.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\profilessilhouette.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\profilesmallicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\profileicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\profilegroupicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\popoverbackground.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\popoverarrows.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\panesettingsbuttons.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\panerefreshbuttons.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\panegrowhandleline.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\panefilterbuttons.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\paneelementstatebuttons.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\panebottomgrowactive.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\panebottomgrow.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\paneaddbuttons.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\localstorage.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\graphlabelcalloutright.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\graphlabelcalloutleft.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\goarrow.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\glossyheaderselectedpressed.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\glossyheaderselected.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\radiodot.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\resourcedocumenticon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\splitviewdimple.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\resourcedocumenticonsmall.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\spinnerinactive.gif
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\spinneractiveselected.gif
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\spinneractive.gif
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\spinner.gif
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\sessionstorage.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\segmentselectedend.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\segmentselected.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\segmenthoverend.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\segmenthover.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\segmentend.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\segment.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\searchsmallwhite.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\searchsmallgray.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\searchsmallbrightblue.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\searchsmallblue.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\scriptssilhouette.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\resourcestimegraphicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\resourcessizegraphicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\resourceplainiconsmall.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\resourceplainicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\resourcejsicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\glossyheaderpressed.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\closebuttons.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\glossyheader.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\checker.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\breakpointconditionalcounterborder.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\breakpointconditionalborder.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\breakpointborder.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\back.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\applicationcache.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\iframeview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\helpscreen.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\helpscreen.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\heapsnapshotworkerdispatcher.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\heapsnapshotworker.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\heapsnapshotproxy.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\heapsnapshot.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\heapprofiler.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\harentry.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\handlerregistry.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\gotolinedialog.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\gotolinedialog.css
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\fontview.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\externs.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\extensionserver.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\extensionregistrystub.js
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\breakpointcounterborder.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\spinnerinactiveselected.gif
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\forward.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\cookie.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\errorreddot.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\errormediumicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\erroricon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\domain.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmallrightwhite.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmallrightdownwhite.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmallrightdownblack.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmallrightdown.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmallrightblack.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmallright.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmalldownwhite.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmalldownblack.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\disclosuretrianglesmalldown.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\deleteicon.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\debuggerstepover.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\debuggerstepout.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\debuggerstepinto.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\debuggerpause.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\debuggercontinue.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\databasetable.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\database.png
- %TEMP%\is-fo9oo.tmp\webkit.resources\inspector\images\frame.png
- %TEMP%\is-fo9oo.tmp\4a6ca328-7888-3279-b672-d1d9d0a46ee2\install\info.xml
Deletes the following files
- %WINDIR%\winsxs\installtemp\20240912085645801.0\msvcm80.dll
- %WINDIR%\winsxs\installtemp\20240912085645801.0\msvcp80.dll
- %WINDIR%\winsxs\installtemp\20240912085645801.0\msvcr80.dll
- %WINDIR%\winsxs\installtemp\20240912085645801.0\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86.cat
- %WINDIR%\winsxs\installtemp\20240912085645801.0\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86.manifest
- %WINDIR%\winsxs\installtemp\20240912085645751.0\8.0.50727.6195.cat
- %WINDIR%\winsxs\installtemp\20240912085645751.0\8.0.50727.6195.policy
- %WINDIR%\installer\{ed75e291-7e02-4065-b551-e87a9f0a0717}\wininstall.ico
- %WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.4763\ul_msvcp80.dll.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18e
- %WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.4763\ul_msvcm80.dll.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18e
- %WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.4763\ul_msvcr80.dll.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18e
- %CommonProgramFiles(x86)%\apple\apple application support\apsdaemon_main.dll
- %CommonProgramFiles(x86)%\apple\apple application support\apsdaemon.exe
- %TEMP%\is-fo9oo.tmp\libs.7z
- %TEMP%\is-fo9oo.tmp\iqpppcmit.7z
Modifies the following files
- %LOCALAPPDATA%\microsoft\windows\usrclass.dat.log1
- %LOCALAPPDATA%\microsoft\windows\usrclass.dat
Network activity
Connects to
- 'ap#.#pify.org':443
TCP
Other
- 'ap#.#pify.org':443
UDP
- DNS ASK ap#.#pify.org
Miscellaneous
Creates and executes the following
- '%TEMP%\is-irh22.tmp\<File name>.tmp' /SL5="$9015A,18814322,1093120,<Full path to file>"
Executes the following
- '%WINDIR%\syswow64\msiexec.exe' /quiet /I "%TEMP%\is-FO9OO.tmp\AppleApplicationSupport.msi"
