Technical Information
Modifies file system
Creates the following files
- %TEMP%\7zsc27ca632\apbin\config.ini
- %ProgramFiles(x86)%\realtek\realtek card reader\sdrt50c8.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rmb5099.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\conf5089.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rscr506a.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rico4f41.rra
- <DRIVERS>\rtsp4f22.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp4c15.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\disp50f7.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\sete50d7.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp4bd6.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isr4195.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa4185.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt4176.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stri4166.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\isbe4118.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasd4108.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp4bf5.rra
- %TEMP%\7zsc27ca632\apbin\setehcikey.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\revc5125.rra
- %WINDIR%\syswow64\sda\sdrt2f8f.rra
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
- %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\set8141.tmp
- %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\set7eb0.tmp
- %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\set7c8c.tmp
- %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\set79bc.tmp
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu575f.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu5740.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isse5711.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_set56f2.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu56b3.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data557b.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data556b.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layo555c.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgc51b2.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\uset5174.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difx4108.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp4be6.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\font40f9.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\dotn40f9.rra
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\core40e9.rra
- %TEMP%\7zsc27ca632\pkgconf.ini
- %TEMP%\7zsc27ca632\usetup.iss
- %TEMP%\7zsc27ca632\u3setup.iss
- %TEMP%\7zsc27ca632\u2setup.iss
- %TEMP%\7zsc27ca632\setup.iss
- %TEMP%\7zsc27ca632\setup.isn
- %TEMP%\7zsc27ca632\setup.inx
- %TEMP%\7zsc27ca632\setup.ini
- %TEMP%\7zsc27ca632\layout.bin
- %TEMP%\7zsc27ca632\apbin\rmb.exe
- %TEMP%\7zsc27ca632\drvbin64\rtsper64.cat
- %TEMP%\7zsc27ca632\drvbin64\rtsper.inf
- %TEMP%\7zsc27ca632\drvbin32\rtsper32.cat
- %TEMP%\7zsc27ca632\drvbin32\rtsper.inf
- %TEMP%\7zsc27ca632\data2.cab
- %TEMP%\7zsc27ca632\data1.hdr
- %TEMP%\7zsc27ca632\data1.cab
- %ProgramFiles(x86)%\realtek\realtek card reader\rmb.log
- %ProgramFiles(x86)%\realtek\realtek card reader\revc5145.rra
- %TEMP%\7zsc27ca632\apbin\sdrtcprm.dll
- %TEMP%\7zsc27ca632\apbin32\rscrlib.dll
- %TEMP%\7zsc27ca632\utility\display.ico
- %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu40da.rra
- %TEMP%\3f91.rra
- %TEMP%\{eca4a2a0-4854-41ee-8881-bf480be80402}\setup.ini
- %TEMP%\{eca4a2a0-4854-41ee-8881-bf480be80402}\_setup.dll
- %TEMP%\7zsc27ca632\_setup.dll
- %TEMP%\7zsc27ca632\utility\revcon64.exe
- %TEMP%\7zsc27ca632\utility\revcon32.exe
- %TEMP%\7zsc27ca632\setup.exe
- %TEMP%\7zsc27ca632\issetup.dll
- %TEMP%\7zsc27ca632\drvbin64\rtspericon.dll
- %TEMP%\7zsc27ca632\drvbin64\rtsper.sys
- %TEMP%\7zsc27ca632\drvbin32\sdrtcprm.dll
- %TEMP%\7zsc27ca632\drvbin32\rtspericon.dll
- %TEMP%\7zsc27ca632\drvbin32\rtsper.sys
- %TEMP%\7zsc27ca632\apbin64\rscrlib.dll
- %TEMP%\7zsc27ca632\apbin64\riconman.exe
- %TEMP%\7zsc27ca632\apbin32\riconman.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
Sets the 'hidden' attribute to the following files
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
Deletes the following files
- %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\rtsper.inf
- %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\rtsper.sys
- %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\rtsper64.cat
- %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\rtspericon.dll
Moves the following files
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu40da.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- from %ProgramFiles(x86)%\realtek\realtek card reader\revc5125.rra to %ProgramFiles(x86)%\realtek\realtek card reader\revcon32.exe
- from %ProgramFiles(x86)%\realtek\realtek card reader\revc5145.rra to %ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\uset5174.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgc51b2.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layo555c.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data556b.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
- from %ProgramFiles(x86)%\realtek\realtek card reader\sete50d7.rra to %ProgramFiles(x86)%\realtek\realtek card reader\setehcikey.exe
- from %ProgramFiles(x86)%\realtek\realtek card reader\disp50f7.rra to %ProgramFiles(x86)%\realtek\realtek card reader\display.ico
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data557b.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isse5711.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu5740.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu575f.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- from %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\set79bc.tmp to %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\rtsper.inf
- from %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\set7c8c.tmp to %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\rtsper.sys
- from %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\set7eb0.tmp to %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\rtsper64.cat
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu56b3.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
- from %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_set56f2.rra to %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_setup.dll
- from %ProgramFiles(x86)%\realtek\realtek card reader\sdrt50c8.rra to %ProgramFiles(x86)%\realtek\realtek card reader\sdrtcprm.dll
- from %ProgramFiles(x86)%\realtek\realtek card reader\rmb5099.rra to %ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe
- from %ProgramFiles(x86)%\realtek\realtek card reader\conf5089.rra to %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\dotn40f9.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\dotnetinstaller.exe
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\font40f9.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difx4108.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasd4108.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasdata.ini
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\isbe4118.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\isbew64.exe
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stri4166.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable-0009-english.ips
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt4176.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\core40e9.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\corecomp.ini
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa4185.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
- from %ProgramFiles(x86)%\realtek\realtek card reader\rtsp4bd6.rra to %ProgramFiles(x86)%\realtek\realtek card reader\rtsper.inf
- from %ProgramFiles(x86)%\realtek\realtek card reader\rtsp4be6.rra to %ProgramFiles(x86)%\realtek\realtek card reader\rtsper.sys
- from %ProgramFiles(x86)%\realtek\realtek card reader\rtsp4bf5.rra to %ProgramFiles(x86)%\realtek\realtek card reader\rtsper64.cat
- from %ProgramFiles(x86)%\realtek\realtek card reader\rtsp4c15.rra to %ProgramFiles(x86)%\realtek\realtek card reader\rtspericon.dll
- from <DRIVERS>\rtsp4f22.rra to <DRIVERS>\rtsper.sys
- from %ProgramFiles(x86)%\realtek\realtek card reader\rico4f41.rra to %ProgramFiles(x86)%\realtek\realtek card reader\riconman.exe
- from %ProgramFiles(x86)%\realtek\realtek card reader\rscr506a.rra to %ProgramFiles(x86)%\realtek\realtek card reader\rscrlib.dll
- from %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isr4195.rra to %TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres.dll
- from %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\set8141.tmp to %TEMP%\{5c34d281-d105-4fd9-f1ac-e36c52d58726}\rtspericon.dll
- from %WINDIR%\syswow64\sda\sdrt2f8f.rra to %WINDIR%\syswow64\sda\sdrtcprm.dll
Miscellaneous
Creates and executes the following
- '%TEMP%\7zsc27ca632\setup.exe'
- '%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5287&CC_FF00
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5249&CC_FF00
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_dp_add RtsPer.inf
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5287&CC_FF00
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5249&CC_FF00
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5227&CC_FF00
- '%TEMP%\{e4e53543-ea64-489c-a8da-b4958a59c336}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{EFE9349C-9D87-4BA9-994C-921515308CBA}
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5227&CC_FF00
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5287&CC_FF00' (with hidden window)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5227&CC_FF00' (with hidden window)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5227&CC_FF00' (with hidden window)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5249&CC_FF00' (with hidden window)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_dp_add RtsPer.inf' (with hidden window)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5249&CC_FF00' (with hidden window)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5287&CC_FF00' (with hidden window)
- '%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install' (with hidden window)
