Technical Information
- [<HKLM>\Software\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{6C9B3550-8DF6-415D-9B8F-4B1E74D08355}\DownloadInformation] 'CODEBASE' = 'file:///C:/Users/user/AppData/Local/indig...
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\tar.exe
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\icon_motion.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\icon_gsensor.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\icon_emergency.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\calendar.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_textinsearch_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_textinsearch_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_setup_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_setup_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_refresh_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_refresh_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_query_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_query_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_prev_e_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_prev_e_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_prev_c_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_prev_c_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_stop_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_stop_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_sf_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_sb_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_sf_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\icon_sensor.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\icon_textin.png
- %WINDIR%\downloaded program files\setc3bd.tmp
- %WINDIR%\downloaded program files\setc301.tmp
- %WINDIR%\downloaded program files\setc264.tmp
- %TEMP%\icd1.tmp\indigoscreen.inf
- %TEMP%\icd1.tmp\wrap_oal.dll
- %TEMP%\icd1.tmp\openal32.dll
- %TEMP%\icd1.tmp\indigoscreen2.dll
- %TEMP%\cabb971\indigoscreen.inf
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\indigoscreen.cab
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\backupplayback.htm
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_begin_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\timebar.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\sub_playback_e.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\sub_playback_c.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\sub_live.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\selected_mark.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\search_panel.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\logo.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\logo_player.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\icon_videoloss.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_sb_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_rw_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_rw_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layout1_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layout16_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layout16_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_goto_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_goto_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_eventsearch_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_eventsearch_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_diskselect_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_diskselect_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_disconnect_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_disconnect_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_calendarsearch_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_calendarsearch_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\bar_unselectable.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\bar_selectable.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\bar_overlapped.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\background.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\data.tar
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layout4_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layout4_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layout1_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layout9_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_rplay_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layout9_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_rplay_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_play_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_play_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_ff_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_ff_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_end_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\webcontrols.js
- %WINDIR%\downloaded program files\setc6ca.tmp
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_begin_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_next_e_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_next_e_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_next_c_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_next_c_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_live_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_live_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layoutfull_n.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_layoutfull_f.png
- %LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\www\images\b_playback_end_f.png
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012021071420210715\index.dat
- %TEMP%\cabb971\indigoscreen.inf
- %TEMP%\icd1.tmp\indigoscreen.inf
- %TEMP%\icd1.tmp\wrap_oal.dll
- %TEMP%\icd1.tmp\openal32.dll
- %TEMP%\icd1.tmp\indigoscreen2.dll
- from %WINDIR%\downloaded program files\setc264.tmp to %WINDIR%\downloaded program files\wrap_oal.dll
- from %WINDIR%\downloaded program files\setc301.tmp to %WINDIR%\downloaded program files\openal32.dll
- from %WINDIR%\downloaded program files\setc3bd.tmp to %WINDIR%\downloaded program files\indigoscreen2.dll
- from %WINDIR%\downloaded program files\setc6ca.tmp to %WINDIR%\downloaded program files\indigoscreen.inf
- 'ce######ates.godaddy.com':80
- 'cr#.#odaddy.com':80
- DNS ASK ce######ates.godaddy.com
- DNS ASK cr#.#odaddy.com
- DNS ASK microsoft.com
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\tar.exe' -xvf data.tar
- '%LOCALAPPDATA%\indigo\{1ce5c88d-13a2-45bf-952d-69fd4f45902c}\tar.exe' -xvf data.tar' (with hidden window)