Technical Information
To ensure autorun and distribution
Sets the following service settings
- [HKLM\System\CurrentControlSet\Services\ED Video Splitter 11.5.45] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\ED Video Splitter 11.5.45] 'ImagePath' = '%ALLUSERSPROFILE%\ED Video Splitter 11.5.45\ED Video Splitter 11.5.45.exe'
Creates the following services
- 'ED Video Splitter 11.5.45' %ALLUSERSPROFILE%\ED Video Splitter 11.5.45\ED Video Splitter 11.5.45.exe
Modifies file system
Creates the following files
- %TEMP%\is-bep84.tmp\<File name>.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-3q7pn.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-9mbn0.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-5m6bk.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-nvmu0.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-tmai7.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-aaogf.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-j3163.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-327e3.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\hdvideoconverterfox32.exe
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-o64au.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-hq5lb.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-h38cj.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-skah4.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\drivers\summa\is-ak3p3.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-a0in3.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\unins000.dat
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-ohv9n.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-jt39c.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-l5cc5.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-ok9rp.tmp
- %TEMP%\is-0aj5f.tmp\_isetup\_setup64.tmp
- %TEMP%\is-0aj5f.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-0aj5f.tmp\_isetup\_iscrypt.dll
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-lhfc9.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-0muqk.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-glvvh.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-u8hac.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-ttlr2.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-gdu4r.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-t5g0n.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-cqib9.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-e037b.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-inpns.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-f6svr.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-haihv.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\is-i80vn.tmp
- %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-0h0vm.tmp
- %ALLUSERSPROFILE%\ed video splitter 11.5.45\ed video splitter 11.5.45.exe
Moves the following files
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-lhfc9.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\unins000.exe
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-skah4.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\winter.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-h38cj.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\weather.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-hq5lb.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\usa.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-o64au.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\talk bubbles.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-327e3.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\tags, signs & banners.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-jt39c.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\symbols.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-j3163.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\swirls.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-aaogf.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\summer.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-tmai7.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\spring.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-nvmu0.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\newborn.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-5m6bk.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\music.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-9mbn0.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\michellemybelle creations.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-3q7pn.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\game.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-ohv9n.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\fall.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-l5cc5.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\createinspain designs.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-0h0vm.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\basic shapes.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\library\is-gdu4r.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\library\arrows.scal
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-i80vn.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\winsparkle.dll
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-haihv.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\ch375dll.dll
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-f6svr.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\cairogfx.dll
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-inpns.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\msvcr71.dll
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-e037b.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\msvcp71.dll
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-cqib9.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\easy cut studio help.pdf
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-t5g0n.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\unicows.dll
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-ttlr2.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\stlport_vc7146.dll
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-ok9rp.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\installer.xml
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-u8hac.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\doc.ico
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-glvvh.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\readme.txt
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-0muqk.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\license.txt
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\drivers\summa\is-ak3p3.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\drivers\summa\summausb.dll
- from %LOCALAPPDATA%\hd video converter fox 1.2.4\is-a0in3.tmp to %LOCALAPPDATA%\hd video converter fox 1.2.4\hdvideoconverterfox32.exe
Miscellaneous
Searches for the following windows
- ClassName: 'rf5011_hdvcFox_1162_rf5011' WindowName: ''
Creates and executes the following
- '%TEMP%\is-bep84.tmp\<File name>.tmp' /SL5="$5024C,5984934,56832,<Full path to file>"
- '%LOCALAPPDATA%\hd video converter fox 1.2.4\hdvideoconverterfox32.exe' -i
Executes the following
- '%WINDIR%\syswow64\net.exe' pause hd_video_converter_fox_124
- '%WINDIR%\syswow64\net1.exe' pause hd_video_converter_fox_124
