Техническая информация
Изменения в файловой системе
Создает следующие файлы
- C:\kinghaze\setup\byclickdownloader.exe.config
- %ProgramFiles(x86)%\by click downloader\microsoft.windowsapicodepack.dll
- %ProgramFiles(x86)%\by click downloader\microsoft.windowsapicodepack.shell.dll
- %ProgramFiles(x86)%\by click downloader\naudio.dll
- %ProgramFiles(x86)%\by click downloader\newtonsoft.json.dll
- %ProgramFiles(x86)%\by click downloader\parser.dll
- %ProgramFiles(x86)%\by click downloader\taglib-sharp.dll
- %ProgramFiles(x86)%\by click downloader\wpfanimatedgif.dll
- %ProgramFiles(x86)%\by click downloader\authenticationmanager.dll
- %ProgramFiles(x86)%\by click downloader\autodetect.dll
- %ProgramFiles(x86)%\by click downloader\configuration.dll
- %ProgramFiles(x86)%\by click downloader\ffmpeg.exe
- %ALLUSERSPROFILE%\microsoft\windows\start menu\by click downloader.lnk
- %ProgramFiles(x86)%\by click downloader\gui.dll
- %ProgramFiles(x86)%\by click downloader\history.dll
- %ProgramFiles(x86)%\by click downloader\interop.ituneslib.dll
- %ProgramFiles(x86)%\by click downloader\ionic.zip.dll
- %ProgramFiles(x86)%\by click downloader\bouncycastle.crypto.dll
- %ProgramFiles(x86)%\by click downloader\system.data.sqlite.dll
- %ProgramFiles(x86)%\by click downloader\sqlite.interop.dll
- %ProgramFiles(x86)%\by click downloader\byclickdownloader.exe
- %ProgramFiles(x86)%\by click downloader\byclickdownloader.exe.config
- %WINDIR%\installer\{c74a82d6-cb6d-4c8f-a759-464eb8580662}\icon_1.exe
- %BOOT_VOL%\boot\bcd
- %ProgramFiles(x86)%\by click downloader\core.dll
- %BOOT_VOL%\boot\bcd.log
- C:\kinghaze\setup\history.dll
- C:\kinghaze\setup\setup.msi
- C:\kinghaze\kur.exe
- C:\kinghaze\setup\authenticationmanager.dll
- C:\kinghaze\setup\autodetect.dll
- C:\kinghaze\setup\bouncycastle.crypto.dll
- C:\kinghaze\setup\byclickdownloader.exe
- C:\kinghaze\setup\configuration.dll
- C:\kinghaze\setup\core.dll
- C:\kinghaze\setup\ffmpeg.exe
- C:\kinghaze\setup\gui.dll
- C:\kinghaze\setup\interop.ituneslib.dll
- C:\kinghaze\setup\updaterv2.exe
- C:\kinghaze\setup\ionic.zip.dll
- C:\kinghaze\setup\microsoft.windowsapicodepack.dll
- C:\kinghaze\setup\microsoft.windowsapicodepack.shell.dll
- C:\kinghaze\setup\naudio.dll
- C:\kinghaze\setup\newtonsoft.json.dll
- C:\kinghaze\setup\parser.dll
- C:\kinghaze\setup\rtmpdump.exe
- C:\kinghaze\setup\sqlite.interop.dll
- C:\kinghaze\setup\system.data.sqlite.dll
- C:\kinghaze\setup\taglib-sharp.dll
- C:\kinghaze\setup\wpfanimatedgif.dll
- C:\users\public\desktop\by click downloader.lnk
Удаляет следующие файлы
- C:\kinghaze\kur.exe
- C:\kinghaze\setup\taglib-sharp.dll
- C:\kinghaze\setup\system.data.sqlite.dll
- C:\kinghaze\setup\sqlite.interop.dll
- C:\kinghaze\setup\setup.msi
- C:\kinghaze\setup\rtmpdump.exe
- C:\kinghaze\setup\parser.dll
- C:\kinghaze\setup\newtonsoft.json.dll
- C:\kinghaze\setup\naudio.dll
- C:\kinghaze\setup\microsoft.windowsapicodepack.shell.dll
- C:\kinghaze\setup\microsoft.windowsapicodepack.dll
- C:\kinghaze\setup\updaterv2.exe
- C:\kinghaze\setup\ionic.zip.dll
- C:\kinghaze\setup\history.dll
- C:\kinghaze\setup\gui.dll
- C:\kinghaze\setup\ffmpeg.exe
- C:\kinghaze\setup\core.dll
- C:\kinghaze\setup\configuration.dll
- C:\kinghaze\setup\byclickdownloader.exe.config
- C:\kinghaze\setup\byclickdownloader.exe
- C:\kinghaze\setup\bouncycastle.crypto.dll
- C:\kinghaze\setup\autodetect.dll
- C:\kinghaze\setup\authenticationmanager.dll
- C:\kinghaze\setup\interop.ituneslib.dll
- C:\kinghaze\setup\wpfanimatedgif.dll
Изменяет следующие файлы
- %LOCALAPPDATA%\microsoft\windows\usrclass.dat.log1
- %LOCALAPPDATA%\microsoft\windows\usrclass.dat
Сетевая активность
Подключается к
- 'microsoft.com':80
UDP
- DNS ASK microsoft.com
Другое
Создает и запускает на исполнение
- 'C:\kinghaze\kur.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\msiexec.exe' /i "C:\Kinghaze\setup\setup.msi" /quiet /norestart
