Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zs069df09f\apbin\config.ini
- %ProgramFiles(x86)%\realtek\realtek card reader\rmbe640.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\confe630.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rscre5e2.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\ricoe546.rra
- <DRIVERS>\rtspe536.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe527.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe333.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\sdrte65f.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe323.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isrd577.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defad577.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrtd567.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\strid558.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\isbed548.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasdd548.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxd548.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe304.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\setee65f.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\dispe66f.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\revce68e.rra
- %WINDIR%\syswow64\sda\sdrt3952.rra
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\set8cf.tmp
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\set505.tmp
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\set283.tmp
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\setfc.tmp
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setuf0ee.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setuf0cf.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issef0a0.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_setf091.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setuf081.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dataf004.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dataeff4.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layoeff4.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgce6ad.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usete69e.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontd548.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rmb.log
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\dotnd529.rra
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setud50a.rra
- %TEMP%\7zs069df09f\usetup.iss
- %TEMP%\7zs069df09f\u3setup.iss
- %TEMP%\7zs069df09f\u2setup.iss
- %TEMP%\7zs069df09f\setup.iss
- %TEMP%\7zs069df09f\setup.isn
- %TEMP%\7zs069df09f\setup.inx
- %TEMP%\7zs069df09f\setup.ini
- %TEMP%\7zs069df09f\utility\display.ico
- %TEMP%\7zs069df09f\pkgconf.ini
- %TEMP%\7zs069df09f\drvbin64\rtsp2stormsi.inf
- %TEMP%\7zs069df09f\drvbin64\rtsp2stor64.cat
- %TEMP%\7zs069df09f\drvbin32\rtsp2stormsi.inf
- %TEMP%\7zs069df09f\drvbin32\rtsp2stor32.cat
- %TEMP%\7zs069df09f\data2.cab
- %TEMP%\7zs069df09f\data1.hdr
- %TEMP%\7zs069df09f\data1.cab
- %TEMP%\7zs069df09f\layout.bin
- %TEMP%\7zs069df09f\apbin\rmb.exe
- %TEMP%\7zs069df09f\apbin\sdrtcprm.dll
- %TEMP%\7zs069df09f\apbin\setehcikey.exe
- %TEMP%\d3f0.rra
- %TEMP%\{1448b396-acfa-4c3a-962a-b8cd59dc5242}\setup.ini
- %TEMP%\{1448b396-acfa-4c3a-962a-b8cd59dc5242}\_setup.dll
- %TEMP%\7zs069df09f\_setup.dll
- %TEMP%\7zs069df09f\utility\revcon64.exe
- %TEMP%\7zs069df09f\utility\revcon32.exe
- %TEMP%\7zs069df09f\setup.exe
- %TEMP%\7zs069df09f\issetup.dll
- %TEMP%\7zs069df09f\drvbin64\rtsp2storicon.dll
- %TEMP%\7zs069df09f\drvbin64\rtsp2stor.sys
- %TEMP%\7zs069df09f\drvbin32\sdrtcprm.dll
- %TEMP%\7zs069df09f\drvbin32\rtsp2storicon.dll
- %TEMP%\7zs069df09f\drvbin32\rtsp2stor.sys
- %TEMP%\7zs069df09f\apbin64\rscrlib.dll
- %TEMP%\7zs069df09f\apbin64\riconman.exe
- %TEMP%\7zs069df09f\apbin32\rscrlib.dll
- %TEMP%\7zs069df09f\apbin32\riconman.exe
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\cored529.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
Присваивает атрибут 'скрытый' для следующих файлов
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
Удаляет следующие файлы
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\rtsp2stor.sys
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\rtsp2stor64.cat
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\rtsp2storicon.dll
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\rtsp2stormsi.inf
Перемещает следующие файлы
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setud50a.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- %ProgramFiles(x86)%\realtek\realtek card reader\revce68e.rra в %ProgramFiles(x86)%\realtek\realtek card reader\revcon32.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\revce68e.rra в %ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usete69e.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgce6ad.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layoeff4.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dataeff4.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
- %ProgramFiles(x86)%\realtek\realtek card reader\setee65f.rra в %ProgramFiles(x86)%\realtek\realtek card reader\setehcikey.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\dispe66f.rra в %ProgramFiles(x86)%\realtek\realtek card reader\display.ico
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dataf004.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issef0a0.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setuf0cf.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setuf0ee.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\setfc.tmp в %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\rtsp2stormsi.inf
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\set283.tmp в %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\rtsp2storicon.dll
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\set505.tmp в %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\rtsp2stor.sys
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setuf081.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_setf091.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_setup.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\sdrte65f.rra в %ProgramFiles(x86)%\realtek\realtek card reader\sdrtcprm.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\rmbe640.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\confe630.rra в %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\dotnd529.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\dotnetinstaller.exe
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontd548.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxd548.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasdd548.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasdata.ini
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\isbed548.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\isbew64.exe
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\strid558.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable-0009-english.ips
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrtd567.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\cored529.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\corecomp.ini
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defad577.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe304.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsp2stor.sys
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe323.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsp2stor64.cat
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe333.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsp2storicon.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe527.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsp2stormsi.inf
- <DRIVERS>\rtspe536.rra в <DRIVERS>\rtsp2stor.sys
- %ProgramFiles(x86)%\realtek\realtek card reader\ricoe546.rra в %ProgramFiles(x86)%\realtek\realtek card reader\riconman.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\rscre5e2.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rscrlib.dll
- %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isrd577.rra в %TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres.dll
- %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\set8cf.tmp в %TEMP%\{057fe062-9f80-4bc9-f898-3614cc829245}\rtsp2stor64.cat
- %WINDIR%\syswow64\sda\sdrt3952.rra в %WINDIR%\syswow64\sda\sdrtcprm.dll
Подменяет следующие файлы
- %ProgramFiles(x86)%\realtek\realtek card reader\revce68e.rra
Другое
Создает и запускает на исполнение
- '%TEMP%\7zs069df09f\setup.exe'
- '%TEMP%\{ba89deab-add4-435d-ae51-c9a60135a8e8}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{EDF28592-A083-4ED5-9F7D-1894B08BC7CB}
- '%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_dp_add RtsP2StorMSI.inf' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsP2StorMSI.inf PCI\VEN_10EC&DEV_5229&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5229&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install' (со скрытым окном)
