ThreatExpert Report

Visit ThreatExpert web site

Close Report

Submission Summary:

Submission details:

Submission received: 11 February 2011, 14:29:58
Processing time: 7 min 27 sec
Submitted sample:

File MD5: 0x5CCDF2F90BB970AEBC8F2D17E1A3ED2A
File SHA-1: 0xE0BB11FF1B628AEC94DF52D070ED7F469F393876
Filesize: 965,120 bytes

Technical Details:

File System Modifications

The following files were created in the system:

#	Filename(s)	File Size	File Hash	Alias
1	%AppData%\Move Networks\ie_bin\MovePlayerUpgrade.exe	99,704 bytes	MD5: 0x6D823F59F868469A3F41725C1C89FD15 SHA-1: 0x90F68C5D78777C54074BDD27410C9BA8E9A2ED19	(not available)
2	%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll	928,632 bytes	MD5: 0x0C4726B9A3C20DB5909040DDC320AAD5 SHA-1: 0xCF29076011EFDE76E10AF4A83CCE69B0BA727585	packed with PE_Patch.PECompact [Kaspersky Lab]
3	%AppData%\Move Networks\ie_bin\Uninst.exe	34,064 bytes	MD5: 0x6A469EE4FB345CA54417F9950735BF4C SHA-1: 0x71250873BD24928FF252C505653063EB0E747300	(not available)
4	%Temp%\nsv2.tmp\MNProgress.dll	49,152 bytes	MD5: 0x45CBF58C88DDC70A5B6E2447840F5EDB SHA-1: 0xCB7313B63AAC8FFDC791F521C4AC4CC6BAAAB206	(not available)
5	[file and pathname of the sample #1]	965,120 bytes	MD5: 0x5CCDF2F90BB970AEBC8F2D17E1A3ED2A SHA-1: 0xE0BB11FF1B628AEC94DF52D070ED7F469F393876	(not available)

Notes:

%AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

The following directories were created:

%AppData%\Move Networks
%AppData%\Move Networks\ie_bin
%Temp%\nsv2.tmp

Memory Modifications

There was a new process created in the system:

Process Name	Process Filename	Main Module Size
[filename of the sample #1]	[file and pathname of the sample #1]	237,568 bytes

Registry Modifications

The following Registry Keys were created:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E422264-6D8A-4ca0-97C7-A2CF868471EA}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Move Networks Player - IE
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Control
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Implemented Categories
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\InstalledVersion
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\InstalledVersionComparable
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\MiscStatus
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\MiscStatus\1
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\ProgID
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Programmable
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\TypeLib
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Version
HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\VersionIndependentProgID
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Control
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Implemented Categories
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\InstalledVersion
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\InstalledVersionComparable
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\MiscStatus
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\MiscStatus\1
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\ProgID
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Programmable
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\TypeLib
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Version
HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\VersionIndependentProgID
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Control
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Implemented Categories
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\InstalledVersion
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\InstalledVersionComparable
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\MiscStatus
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\MiscStatus\1
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\ProgID
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Programmable
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\TypeLib
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Version
HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\VersionIndependentProgID
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Control
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Implemented Categories
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\InstalledVersion
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\InstalledVersionComparable
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\MiscStatus
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\MiscStatus\1
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\ProgID
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Programmable
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\TypeLib
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Version
HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\VersionIndependentProgID
HKEY_CURRENT_USER\Software\Classes\Interface\{969eb9de-7bda-46f9-94ce-bcf4e6558079}
HKEY_CURRENT_USER\Software\Classes\Interface\{969eb9de-7bda-46f9-94ce-bcf4e6558079}\ProxyStubClsid
HKEY_CURRENT_USER\Software\Classes\Interface\{969eb9de-7bda-46f9-94ce-bcf4e6558079}\ProxyStubClsid32
HKEY_CURRENT_USER\Software\Classes\Interface\{969eb9de-7bda-46f9-94ce-bcf4e6558079}\TypeLib
HKEY_CURRENT_USER\Software\Classes\Interface\{e2fa5b10-540a-4a0b-afd1-55aee24a49cb}
HKEY_CURRENT_USER\Software\Classes\Interface\{e2fa5b10-540a-4a0b-afd1-55aee24a49cb}\ProxyStubClsid
HKEY_CURRENT_USER\Software\Classes\Interface\{e2fa5b10-540a-4a0b-afd1-55aee24a49cb}\ProxyStubClsid32
HKEY_CURRENT_USER\Software\Classes\Interface\{e2fa5b10-540a-4a0b-afd1-55aee24a49cb}\TypeLib
HKEY_CURRENT_USER\Software\Classes\TypeLib\{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}
HKEY_CURRENT_USER\Software\Classes\TypeLib\{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}\1.0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}\1.0\0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}\1.0\0\win32
HKEY_CURRENT_USER\Software\Classes\TypeLib\{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}\1.0\FLAGS
HKEY_CURRENT_USER\Software\Classes\AppID
HKEY_CURRENT_USER\Software\Classes\AppID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}
HKEY_CURRENT_USER\Software\Classes\AppID\{e473a65c-8087-49a3-affd-c5bc4a10669b}
HKEY_CURRENT_USER\Software\Classes\AppID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}
HKEY_CURRENT_USER\Software\Classes\AppID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}
HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE
HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE\CLSID
HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE\CurVer
HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE.1
HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE.1\CLSID
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer\CLSID
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer\CurVer
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer.1
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer.1\CLSID
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep\CLSID
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep\CurVer
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep.1
HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep.1\CLSID
HKEY_CURRENT_USER\Software\Classes\QSP2IE_Dep.QSP2IE_Dep
HKEY_CURRENT_USER\Software\Classes\QSP2IE_Dep.QSP2IE_Dep\CLSID
HKEY_CURRENT_USER\Software\Classes\QSP2IE_Dep.QSP2IE_Dep\CurVer
HKEY_CURRENT_USER\Software\Classes\QSP2IE_Dep.QSP2IE_Dep.1
HKEY_CURRENT_USER\Software\Classes\QSP2IE_Dep.QSP2IE_Dep.1\CLSID

The newly created Registry Values are:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E422264-6D8A-4ca0-97C7-A2CF868471EA}]

(Default) = ""
AppPath = "%AppData%\Move Networks\ie_bin"
AppName = "MovePlayerUpgrade.exe"
Policy = 0x00000003

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Move Networks Player - IE]

DisplayName = "Move Networks Media Player for Internet Explorer"
UninstallString = "%AppData%\Move Networks\ie_bin\Uninst.exe"
DisplayIcon = "%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\MiscStatus\1]

(Default) = "131473"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\VersionIndependentProgID]

(Default) = "QSP2IE_Dep.QSP2IE_Dep"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Version]

(Default) = "1"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\TypeLib]

(Default) = "{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Programmable]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\ProgID]

(Default) = "QSP2IE_Dep.QSP2IE_Dep.1"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\MiscStatus]

(Default) = "0"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\InstalledVersionComparable]

(Default) = "07103010"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\InstalledVersion]

(Default) = "7,10,3,10"
path = "%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\InprocServer32]

(Default) = ""%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll""
ThreadingModel = "Apartment"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\Control]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\MiscStatus\1]

(Default) = "131473"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\VersionIndependentProgID]

(Default) = "QSP2IEVer_Dep.QSP2IEVer_Dep"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Version]

(Default) = "1"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\TypeLib]

(Default) = "{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Programmable]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\ProgID]

(Default) = "QSP2IEVer_Dep.QSP2IEVer_Dep.1"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\MiscStatus]

(Default) = "0"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\InstalledVersionComparable]

(Default) = "07103010"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\InstalledVersion]

(Default) = "7,10,3,10"
path = "%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\InprocServer32]

(Default) = ""%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll""
ThreadingModel = "Apartment"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\Control]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\MiscStatus\1]

(Default) = "131473"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\VersionIndependentProgID]

(Default) = "QSP2IE.QSP2IE"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Version]

(Default) = "1"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\TypeLib]

(Default) = "{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Programmable]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\ProgID]

(Default) = "QSP2IE.QSP2IE.1"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\MiscStatus]

(Default) = "0"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\InstalledVersionComparable]

(Default) = "07103010"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\InstalledVersion]

(Default) = "7,10,3,10"
path = "%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\InprocServer32]

(Default) = ""%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll""
ThreadingModel = "Apartment"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\Control]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\MiscStatus\1]

(Default) = "131473"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\VersionIndependentProgID]

(Default) = "QSP2IEVer.QSP2IEVer"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Version]

(Default) = "1"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\TypeLib]

(Default) = "{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Programmable]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\ProgID]

(Default) = "QSP2IEVer.QSP2IEVer.1"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\MiscStatus]

(Default) = "0"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\InstalledVersionComparable]

(Default) = "07103010"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\InstalledVersion]

(Default) = "7,10,3,10"
path = "%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\InprocServer32]

(Default) = ""%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll""
ThreadingModel = "Apartment"

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\Control]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}]

(Default) = ""

[HKEY_CURRENT_USER\Software\Classes\Interface\{969eb9de-7bda-46f9-94ce-bcf4e6558079}\TypeLib]

(Default) = "{1BF6EFF2-F87D-4F1A-9F11-3ED2CABE7F3C}"
Version = "1.0"

[HKEY_CURRENT_USER\Software\Classes\Interface\{969eb9de-7bda-46f9-94ce-bcf4e6558079}\ProxyStubClsid32]

(Default) = "{00020424-0000-0000-C000-000000000046}"

[HKEY_CURRENT_USER\Software\Classes\Interface\{969eb9de-7bda-46f9-94ce-bcf4e6558079}\ProxyStubClsid]

(Default) = "{00020424-0000-0000-C000-000000000046}"

[HKEY_CURRENT_USER\Software\Classes\Interface\{969eb9de-7bda-46f9-94ce-bcf4e6558079}]

(Default) = "IQSP2IECtl"

[HKEY_CURRENT_USER\Software\Classes\Interface\{e2fa5b10-540a-4a0b-afd1-55aee24a49cb}\TypeLib]

(Default) = "{1BF6EFF2-F87D-4F1A-9F11-3ED2CABE7F3C}"
Version = "1.0"

[HKEY_CURRENT_USER\Software\Classes\Interface\{e2fa5b10-540a-4a0b-afd1-55aee24a49cb}\ProxyStubClsid32]

(Default) = "{00020420-0000-0000-C000-000000000046}"

[HKEY_CURRENT_USER\Software\Classes\Interface\{e2fa5b10-540a-4a0b-afd1-55aee24a49cb}\ProxyStubClsid]

(Default) = "{00020420-0000-0000-C000-000000000046}"

[HKEY_CURRENT_USER\Software\Classes\Interface\{e2fa5b10-540a-4a0b-afd1-55aee24a49cb}]

(Default) = "IQSP2IECtlEvents"

[HKEY_CURRENT_USER\Software\Classes\TypeLib\{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}\1.0\0\win32]

(Default) = "%AppData%\Move Networks\ie_bin\qsp2ie07103010.dll"

[HKEY_CURRENT_USER\Software\Classes\TypeLib\{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}\1.0\FLAGS]

(Default) = "0"

[HKEY_CURRENT_USER\Software\Classes\TypeLib\{1bf6eff2-f87d-4f1a-9f11-3ed2cabe7f3c}\1.0]

(Default) = "QSP2IECtl 1.0 Type Library"

[HKEY_CURRENT_USER\Software\Classes\AppID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}]

(Default) = "QSP2IEVer.QSP2IEVer"

[HKEY_CURRENT_USER\Software\Classes\AppID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}]

(Default) = "QSP2IE.QSP2IE"

[HKEY_CURRENT_USER\Software\Classes\AppID\{e473a65c-8087-49a3-affd-c5bc4a10669b}]

(Default) = "QSP2IEVer_Dep.QSP2IEVer_Dep"

[HKEY_CURRENT_USER\Software\Classes\AppID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}]

(Default) = "QSP2IE_Dep.QSP2IE_Dep"

[HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE\CurVer]

(Default) = "QSP2IE.QSP2IE.1"

[HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE\CLSID]

(Default) = "{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}"

[HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE]

(Default) = "Quantum Streaming IE Class"

[HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE.1\CLSID]

(Default) = "{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}"

[HKEY_CURRENT_USER\Software\Classes\QSP2IE.QSP2IE.1]

(Default) = "Quantum Streaming IE Class"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer\CurVer]

(Default) = "QSP2IEVer.QSP2IEVer.1"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer\CLSID]

(Default) = "{fd6484ed-ebe3-4c3d-938a-8238003b41b7}"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer]

(Default) = "Quantum Streaming IE VersionManager Class"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer.1\CLSID]

(Default) = "{fd6484ed-ebe3-4c3d-938a-8238003b41b7}"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer.QSP2IEVer.1]

(Default) = "Quantum Streaming IE VersionManager Class"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep\CurVer]

(Default) = "QSP2IEVer_Dep.QSP2IEVer_Dep.1"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep\CLSID]

(Default) = "{e473a65c-8087-49a3-affd-c5bc4a10669b}"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep]

(Default) = "Quantum Streaming IE VersionManager Class - Depricated"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep.1\CLSID]

(Default) = "{e473a65c-8087-49a3-affd-c5bc4a10669b}"

[HKEY_CURRENT_USER\Software\Classes\QSP2IEVer_Dep.QSP2IEVer_Dep.1]

(Default) = "Quantum Streaming IE VersionManager Class - Depricated"

[HKEY_CURRENT_USER\Software\Classes\QSP2IE_Dep.QSP2IE_Dep\CurVer]

(Default) = "QSP2IE_Dep.QSP2IE_Dep.1"

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.