Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [HKLM\Software\Classes\funplus.st\shell\open\command] '' = 'D:\FunPlus\Stormshot\Launcher.exe %1'
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\] 'st_global' = 'D:\FunPlus\Stormshot\Launcher.exe'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\st_tmp.dl
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_messages.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_native.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_nativedebugger.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_preview.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_profiler.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_quickprofiler.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_inspector.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_local.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_server.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qpdf.dll
- D:\funplus\stormshot\1.0.0.68\scenegraph\qsgd3d12backend.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qsvg.dll
- D:\funplus\stormshot\1.0.0.68\iconengines\qsvgicon.dll
- D:\funplus\stormshot\1.0.0.68\qt5core.dll
- D:\funplus\stormshot\1.0.0.68\qt5gui.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_tcp.dll
- D:\funplus\stormshot\1.0.0.68\qtqml\qmlplugin.dll
- D:\funplus\stormshot\1.0.0.68\qmltooling\qmldbg_debugger.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qjpeg.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qico.dll
- D:\funplus\stormshot\1.0.0.68\libglesv2.dll
- D:\funplus\stormshot\1.0.0.68\libssl-1_1-x64.dll
- D:\funplus\stormshot\1.0.0.68\libssl-1_1.dll
- D:\funplus\stormshot\1.0.0.68\qtqml\models.2\modelsplugin.dll
- D:\funplus\stormshot\1.0.0.68\msvcp100.dll
- D:\funplus\stormshot\1.0.0.68\msvcp140.dll
- D:\funplus\stormshot\1.0.0.68\msvcp140_1.dll
- D:\funplus\stormshot\1.0.0.68\libegl.dll
- D:\funplus\stormshot\1.0.0.68\msvcp140_2.dll
- D:\funplus\stormshot\1.0.0.68\msvcr100.dll
- D:\funplus\stormshot\1.0.0.68\opengl32sw.dll
- D:\funplus\stormshot\1.0.0.68\postproc-55.dll
- D:\funplus\stormshot\1.0.0.68\qcefview.dll
- D:\funplus\stormshot\1.0.0.68\bearer\qgenericbearer.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qgif.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qicns.dll
- D:\funplus\stormshot\1.0.0.68\msvcp140_codecvt_ids.dll
- D:\funplus\stormshot\1.0.0.68\qt5network.dll
- D:\funplus\stormshot\1.0.0.68\qt5qml.dll
- D:\funplus\stormshot\1.0.0.68\qt5qmlmodels.dll
- D:\funplus\stormshot\1.0.0.68\qt5qmlworkerscript.dll
- D:\funplus\stormshot\1.0.0.68\styles\qwindowsvistastyle.dll
- D:\funplus\stormshot\1.0.0.68\sdl2.dll
- D:\funplus\stormshot\1.0.0.68\swresample-3.dll
- D:\funplus\stormshot\1.0.0.68\swscale-5.dll
- D:\funplus\stormshot\1.0.0.68\vccorlib140.dll
- D:\funplus\stormshot\1.0.0.68\vcruntime140.dll
- D:\funplus\stormshot\1.0.0.68\vcruntime140_1.dll
- D:\funplus\stormshot\1.0.0.68\qtqml\workerscript.2\workerscriptplugin.dll
- D:\funplus\stormshot\installsettings.ini
- %HOMEPATH%\desktop\stormshot.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\funplus\stormshot\stormshot.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\funplus\stormshot\卸载.lnk
- D:\funplus\stormshot\prefs\st_global_setting.ini.lock
- D:\funplus\stormshot\prefs\st_global_setting.ini.ljveeo
- D:\funplus\stormshot\prefs\st_global_setting.ini.qzmpds
- D:\funplus\stormshot\prefs\st_global_setting.ini.jdnccl
- D:\funplus\stormshot\prefs\st_global_setting.ini.ynaomf
- D:\funplus\stormshot\1.0.0.68\platforms\qwindows.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qwbmp.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qwebp.dll
- D:\funplus\stormshot\1.0.0.68\virtualkeyboard\qtvirtualkeyboard_thai.dll
- D:\funplus\stormshot\1.0.0.68\qt5quick.dll
- D:\funplus\stormshot\1.0.0.68\qt5quickwidgets.dll
- D:\funplus\stormshot\1.0.0.68\qt5remoteobjects.dll
- D:\funplus\stormshot\1.0.0.68\qt5svg.dll
- D:\funplus\stormshot\1.0.0.68\qt5websockets.dll
- D:\funplus\stormshot\1.0.0.68\qt5widgets.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qtga.dll
- D:\funplus\stormshot\1.0.0.68\imageformats\qtiff.dll
- D:\funplus\stormshot\1.0.0.68\qtqml\remoteobjects\qtqmlremoteobjects.dll
- D:\funplus\stormshot\1.0.0.68\qtqml\statemachine\qtqmlstatemachine.dll
- D:\funplus\stormshot\1.0.0.68\qtquick.2\qtquick2plugin.dll
- D:\funplus\stormshot\1.0.0.68\qtquick\timeline\qtquicktimelineplugin.dll
- D:\funplus\stormshot\1.0.0.68\platforminputcontexts\qtvirtualkeyboardplugin.dll
- D:\funplus\stormshot\1.0.0.68\virtualkeyboard\qtvirtualkeyboard_hangul.dll
- D:\funplus\stormshot\1.0.0.68\virtualkeyboard\qtvirtualkeyboard_openwnn.dll
- D:\funplus\stormshot\1.0.0.68\virtualkeyboard\qtvirtualkeyboard_pinyin.dll
- D:\funplus\stormshot\1.0.0.68\virtualkeyboard\qtvirtualkeyboard_tcime.dll
- D:\funplus\stormshot\prefs\st_global_setting.ini.zlatze
- D:\funplus\stormshot\1.0.0.68\libcrypto-1_1.dll
- D:\funplus\stormshot\1.0.0.68\libcrypto-1_1-x64.dll
- D:\funplus\stormshot\1.0.0.68\fpxgamemanager32.dll
- D:\funplus\stormshot\1.0.0.68\translations\qt_bg.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_ca.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_cs.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_da.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_de.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_en.qm
- D:\funplus\stormshot\1.0.0.68\fun-cid.log
- D:\funplus\stormshot\1.0.0.68\translations\qt_ar.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_es.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_fr.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_gd.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_he.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_hr.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_hu.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_it.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_fa.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_fi.qm
- D:\funplus\stormshot\plugin\7z.21.07\far\7-ziprus.lng
- D:\funplus\stormshot\plugin\7z.21.07\far\7-zipeng.lng
- D:\funplus\stormshot\plugin\7z.21.07\far\7-ziprus.hlf
- D:\funplus\stormshot\1.0.0.68\qtqml\workerscript.2\qmldir
- D:\funplus\stormshot\1.0.0.68\qtqml\models.2\qmldir
- D:\funplus\stormshot\1.0.0.68\qtqml\remoteobjects\qmldir
- D:\funplus\stormshot\1.0.0.68\qtqml\statemachine\qmldir
- D:\funplus\stormshot\1.0.0.68\qtquick.2\qmldir
- D:\funplus\stormshot\1.0.0.68\qtquick\timeline\qmldir
- D:\funplus\stormshot\1.0.0.68\qtqml\qmldir
- D:\funplus\stormshot\1.0.0.68\fpx_config_pc
- D:\funplus\stormshot\config\icon.png
- D:\funplus\stormshot\plugin\7z.21.07\history.txt
- D:\funplus\stormshot\plugin\7z.21.07\license.txt
- D:\funplus\stormshot\plugin\7z.21.07\readme.txt
- D:\funplus\stormshot\plugin\7z.21.07\far\far7z.reg
- D:\funplus\stormshot\plugin\7z.21.07\far\7ztofar.ini
- D:\funplus\stormshot\config\version.ini
- D:\funplus\stormshot\plugin\7z.21.07\far\7-zipeng.hlf
- D:\funplus\stormshot\plugin\7z.21.07\far\far7z.txt
- D:\funplus\stormshot\1.0.0.68\translations\qt_ja.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_ko.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_lv.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_nl.qm
- D:\funplus\stormshot\1.0.0.68\uninstall.exe
- D:\funplus\stormshot\uninstall.exe
- D:\funplus\stormshot\plugin\7z.21.07\far\7-zipfar.dll
- D:\funplus\stormshot\plugin\7z.21.07\far\7-zipfar64.dll
- D:\funplus\stormshot\plugin\7z.21.07\7za.dll
- D:\funplus\stormshot\plugin\7z.21.07\x64\7za.dll
- D:\funplus\stormshot\plugin\7z.21.07\7zxa.dll
- D:\funplus\stormshot\plugin\7z.21.07\x64\7zxa.dll
- D:\funplus\stormshot\1.0.0.68\avcodec-58.dll
- D:\funplus\stormshot\1.0.0.68\avfilter-7.dll
- D:\funplus\stormshot\1.0.0.68\avformat-58.dll
- D:\funplus\stormshot\1.0.0.68\avutil-56.dll
- D:\funplus\stormshot\1.0.0.68\concrt140.dll
- D:\funplus\stormshot\1.0.0.68\d3dcompiler_47.dll
- D:\funplus\stormshot\1.0.0.68\fpx.dll
- D:\funplus\stormshot\1.0.0.68\fpx32.dll
- D:\funplus\stormshot\1.0.0.68\fpxcore.dll
- D:\funplus\stormshot\uaclauncher.exe
- D:\funplus\stormshot\launcher.exe
- D:\funplus\stormshot\1.0.0.68\pc-launcher.exe
- D:\funplus\stormshot\plugin\7z.21.07\x64\7za.exe
- D:\funplus\stormshot\1.0.0.68\translations\qt_nn.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_pl.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_pt_br.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_ru.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_sk.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_tr.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_uk.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_zh_cn.qm
- D:\funplus\stormshot\1.0.0.68\translations\qt_zh_tw.qm
- D:\funplus\stormshot\1.0.0.68\qtqml\workerscript.2\plugins.qmltypes
- D:\funplus\stormshot\1.0.0.68\qtquick\timeline\plugins.qmltypes
- D:\funplus\stormshot\1.0.0.68\qtqml\remoteobjects\plugins.qmltypes
- D:\funplus\stormshot\1.0.0.68\qtqml\statemachine\plugins.qmltypes
- D:\funplus\stormshot\1.0.0.68\qtqml\plugins.qmltypes
- D:\funplus\stormshot\1.0.0.68\qtqml\models.2\plugins.qmltypes
- D:\funplus\stormshot\1.0.0.68\qtquick.2\plugins.qmltypes
- D:\funplus\stormshot\plugin\7z.21.07\7za.exe
- D:\funplus\stormshot\1.0.0.68\fpxgame.dll
- D:\funplus\stormshot\prefs\st_global_setting.ini.tqxjju
Присваивает атрибут 'скрытый' для следующих файлов
- %TEMP%\st.exe
Удаляет следующие файлы
- D:\funplus\stormshot\prefs\st_global_setting.ini.lock
Перемещает следующие файлы
- %TEMP%\st_tmp.dl в %TEMP%\st.exe
- D:\funplus\stormshot\prefs\st_global_setting.ini.ljveeo в D:\funplus\stormshot\prefs\st_global_setting.ini
- D:\funplus\stormshot\prefs\st_global_setting.ini.qzmpds в D:\funplus\stormshot\prefs\st_global_setting.ini
- D:\funplus\stormshot\prefs\st_global_setting.ini.jdnccl в D:\funplus\stormshot\prefs\st_global_setting.ini
- D:\funplus\stormshot\prefs\st_global_setting.ini.ynaomf в D:\funplus\stormshot\prefs\st_global_setting.ini
- D:\funplus\stormshot\prefs\st_global_setting.ini.zlatze в D:\funplus\stormshot\prefs\st_global_setting.ini
- D:\funplus\stormshot\prefs\st_global_setting.ini.tqxjju в D:\funplus\stormshot\prefs\st_global_setting.ini
Подменяет следующие файлы
- D:\funplus\stormshot\prefs\st_global_setting.ini.lock
Сетевая активность
Подключается к
- 'kg########t-st.kingsgroupgames.com':443
- 'us########rm-download.akamaized.net':443
- 'pc######t-api.funplus.com':443
- 'up#####s3.funplus.com':443
TCP
Другие
- 'kg########t-st.kingsgroupgames.com':443
- 'us########rm-download.akamaized.net':443
- 'pc######t-api.funplus.com':443
- 'up#####s3.funplus.com':443
UDP
- DNS ASK kg########t-st.kingsgroupgames.com
- DNS ASK us########rm-download.akamaized.net
- DNS ASK up#####s3.funplus.com
- DNS ASK pc######t-api.funplus.com
Другое
Создает и запускает на исполнение
- '%TEMP%\st.exe'
- 'D:\funplus\stormshot\launcher.exe'
- 'D:\funplus\stormshot\1.0.0.68\pc-launcher.exe' --currentPath="D:\FunPlus\Stormshot" --configVersion=1.0.0.68 --launchExe="D:\FunPlus\Stormshot\Launcher.exe"
- 'D:\funplus\stormshot\launcher.exe' ' (со скрытым окном)
- 'D:\funplus\stormshot\1.0.0.68\pc-launcher.exe' --currentPath="D:\FunPlus\Stormshot" --configVersion=1.0.0.68 --launchExe="D:\FunPlus\Stormshot\Launcher.exe"' (со скрытым окном)
