Technical Information
- %TEMP%\is-k0n98.tmp\<File name>.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\platforms\is-onoe0.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-m3dui.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-ahdnh.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-a7hip.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-aek32.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-67s9p.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-8bjkp.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\printsupport\is-bl3oc.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-o92nk.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-pkvhi.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-tetkh.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-cid05.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-jrf25.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-9ut16.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-2a4p2.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-u8jpm.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-77qn1.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-f3mui.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-9i3om.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-noc3i.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-ca3le.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-3rkr6.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-0ko1d.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-7rgk9.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-ci6qa.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-tlfli.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-5maaf.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-f6vqn.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-5iend.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-a1ahj.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-le43s.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-u9bkc.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-9g31u.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-jtojg.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-ov7ks.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-kocfj.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-4v736.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-ost0l.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\unins000.dat
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-tr8nt.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-5gi5c.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-m632n.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-ngv35.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-krq7t.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-t3a23.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-qg25v.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-16ouq.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-sv761.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-t7pkr.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-hfbkn.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-jg57f.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-016gb.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-fqmcv.tmp
- %TEMP%\is-qkfiv.tmp\_isetup\_iscrypt.dll
- %TEMP%\is-qkfiv.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-qkfiv.tmp\_isetup\_setup64.tmp
- %TEMP%\is-qkfiv.tmp\_isetup\_regdll.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\is-phdqa.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-04vkn.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-rbfe9.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-ikvha.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-2hrip.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-3ov8t.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-uifdd.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-lv4oh.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-v2esq.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-isvrh.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-21rln.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-lmjsd.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-sia70.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-ok6av.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-93qjq.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-r0te7.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-eihti.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-1a56f.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-be7tt.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-3muv8.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-bstgo.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-vuo8j.tmp
- %LOCALAPPDATA%\viewlabel 1.0.21\viewstable32_64.exe
- %LOCALAPPDATA%\viewlabel 1.0.21\history_en.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-fqmcv.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\unins000.exe
- from %LOCALAPPDATA%\viewlabel 1.0.21\platforms\is-onoe0.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\platforms\qwindows.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-m3dui.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\qwbmp.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-ahdnh.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\qtiff.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-a7hip.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\qtga.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-aek32.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\qsvg.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-67s9p.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\qmng.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-u8jpm.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\save.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-8bjkp.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\qjpeg.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-77qn1.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\qgif.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-pkvhi.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\zoomout.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-tetkh.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\zoomin.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-cid05.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\zoomimage.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-jrf25.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\trash.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-9ut16.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\sort.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\is-o92nk.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\imageformats\qico.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-2a4p2.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\selectall.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\printsupport\is-bl3oc.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\printsupport\windowsprintersupport.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-le43s.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\readme_it.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-0ko1d.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\translations\photoprint_ru.qm
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-7rgk9.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\history_ru.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-ci6qa.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\license_ru.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-tlfli.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\readme_ru.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-5maaf.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\translations\qtbase_it.qm
- from %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-f6vqn.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\translations\photoprint_it.qm
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-9i3om.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\license_en.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-f3mui.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\readme_en.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-u9bkc.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\translations\qtbase_pl.qm
- from %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-9g31u.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\translations\photoprint_pl.qm
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-ov7ks.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\license_pl.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-kocfj.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\readme_pl.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-4v736.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\translations\photoprint_en.qm
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-noc3i.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\history_en.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-a1ahj.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\license_it.txt
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-ost0l.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\rotback.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-tr8nt.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\rotate.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-vuo8j.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\removepage.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-04vkn.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\bestfit.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-t7pkr.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\available.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-m632n.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\arrange.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-ngv35.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\addpage.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-krq7t.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\actual.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-ikvha.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\clear.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-t3a23.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\qt5printsupport.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-16ouq.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\msvcr100.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-sv761.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\msvcp100.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-hfbkn.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\libglesv2.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-phdqa.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\libegl.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-jg57f.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\icuuc51.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-016gb.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\icuin51.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-qg25v.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\qt5concurrent.dll
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-bstgo.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\crop.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-rbfe9.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\choose.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-3muv8.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\datestamp.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-5gi5c.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\print.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-21rln.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\logo.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-2hrip.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\other_type.jpg
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-3ov8t.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\other_print.jpg
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-uifdd.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\other_pet.jpg
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-lv4oh.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\open.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-v2esq.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\new.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-isvrh.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\maket.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-lmjsd.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\help_other_pr_rus_img_7.jpg
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-be7tt.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\delete.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-sia70.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\help_other_pr_rus_img_5.jpg
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-ok6av.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\help_other_pr_rus_img_2.jpg
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-93qjq.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\help_other_pr_retouch.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-r0te7.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\help_other_pr_exif.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-eihti.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\help_other_pr_convert.jpg
- from %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\is-1a56f.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\helpimg\edit.png
- from %LOCALAPPDATA%\viewlabel 1.0.21\translations\is-3rkr6.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\translations\qtbase_ru.qm
- from %LOCALAPPDATA%\viewlabel 1.0.21\is-ca3le.tmp to %LOCALAPPDATA%\viewlabel 1.0.21\viewstable32_64.exe
- %LOCALAPPDATA%\viewlabel 1.0.21\history_en.txt
- 'st###7345724.ru':80
- http://st###7345724.ru/new/net_api
- '34.##9.100.209':443
- DNS ASK st###7345724.ru
- ClassName: 'H%x_vsWnd_1133c1e3a1' WindowName: ''
- '%TEMP%\is-k0n98.tmp\<File name>.tmp' /SL5="$5024E,5755134,54272,<Full path to file>"
- '%LOCALAPPDATA%\viewlabel 1.0.21\viewstable32_64.exe' c988a6c7ae45c3e141d3cb31909ddf14
- '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "view_stable_1133"