Technical Information
Modifies file system
Creates the following files
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\suitesetup.ini
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\_is7d7d.exe
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\setup.xml
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\libffi-7.dll
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\python3.dll
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\python38.dll
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\sqlite3.dll
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\vcruntime140.dll
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\setup_ui.dll
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\application.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\custom.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\folder.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\remove.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\repair.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\typical.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\islogobig.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\islogosmall.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_min_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_min_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_close_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_close_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_producticon_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_producticon_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_icon_remove.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_icon_repair.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_icon_update.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_rightarrow.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_click_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_click_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_error_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_error_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_success_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\is_minimal_success_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\application.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\custom.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\folder.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\remove.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\repair.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\typical.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\islogobig.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\islogosmall.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_min_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_min_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_close_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_close_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_producticon_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_producticon_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_icon_remove.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_icon_repair.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_icon_update.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_rightarrow.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_click_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_click_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_error_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_error_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_success_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-150\is_minimal_success_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\application.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\custom.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\folder.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\remove.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\repair.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\typical.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\islogobig.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\islogosmall.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_min_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_min_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_close_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_close_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_producticon_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_producticon_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_icon_remove.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_icon_repair.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_icon_update.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_rightarrow.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_click_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_click_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_error_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_error_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_success_dark.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\scale-200\is_minimal_success_light.png
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\licenseagreement.rtf
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\_asyncio.pyd
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\_ctypes.pyd
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\_hashlib.pyd
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\_msi.pyd
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\_multiprocessing.pyd
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\_overlapped.pyd
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\_queue.pyd
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\python.exe
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\python38._pth
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\python38.zip
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\pythonw.exe
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\select.pyd
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\wvmmqistcb9xtv
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\setup_ui.xml
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\_is8108
Deletes following files that it created itself
- %TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\suitesetup.ini
Network activity
Connects to
- '91.##2.166.19':443
- '45.##.170.114':443
- '87.##1.87.137':443
- '19#.#8.225.230':443
- '14#.#5.197.92':443
TCP
Other
- '19#.#8.225.230':443
- '14#.#5.197.92':443
Miscellaneous
Creates and executes the following
- '%TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\_is7d7d.exe' -IS_temp ORIGINALSETUPEXEDIR="<Current directory>" ORIGINALSETUPEXENAME="<File name>.exe" /passive
- '%TEMP%\{8de168ce-de6a-46fa-ba96-5fbd5f0b5e16}\{736db01b}\eay77t3mq7n9qg\pythonw.exe' %TEMP%\{8DE168CE-DE6A-46FA-BA96-5FBD5F0B5E16}\{736DB01B}\\EaY77T3MQ7N9QG\WVmMQiStcb9xTV
