Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [<HKLM>\Software\Classes\Blockman\shell\open\command] '' = 'C:\blockmango-client\launcher\BlockmanLauncher.exe %1'
Modifies file system
Creates the following files
- C:\blockmango-client\launcher\api-ms-win-core-console-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-stdio-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-string-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-time-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-utility-l1-1-0.dll
- C:\blockmango-client\launcher\icon.ico
- C:\blockmango-client\launcher\libcurl.dll
- C:\blockmango-client\launcher\mfc140.dll
- C:\blockmango-client\launcher\mfc140u.dll
- C:\blockmango-client\launcher\msvcp140.dll
- C:\blockmango-client\launcher\ucrtbase.dll
- C:\blockmango-client\launcher\vcruntime140.dll
- C:\blockmango-client\launcher\api-ms-win-crt-multibyte-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-runtime-l1-1-0.dll
- C:\blockmango-client\launcher\gameanalytics.dll
- %HOMEPATH%\desktop\blockmango.lnk
- %APPDATA%\microsoft\windows\start menu\programs\blockmango.lnk
- C:\blockmango-client\launcher\launcher.log
- %LOCALAPPDATA%\gameanalytics\ga_log.txt
- C:\blockmango-client\download\30003\launcher.zip-4-0
- C:\blockmango-client\download\30003\launcher.zip-4-1
- C:\blockmango-client\download\30003\launcher.zip-4-2
- C:\blockmango-client\download\30003\launcher.zip-4-3
- C:\blockmango-client\download\30003\launcher.zip-tmp
- C:\blockmango-client\download\10002\client.zip-4-0
- C:\blockmango-client\download\10002\client.zip-4-1
- C:\blockmango-client\launcher\blockmanlauncher.exe
- C:\blockmango-client\launcher\version.json
- C:\blockmango-client\launcher\api-ms-win-crt-math-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-locale-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-heap-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-debug-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-errorhandling-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-file-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-file-l1-2-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-file-l2-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-handle-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-heap-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-interlocked-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-libraryloader-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-localization-l1-2-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-memory-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-namedpipe-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-datetime-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-processenvironment-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-processthreads-l1-1-1.dll
- C:\blockmango-client\launcher\api-ms-win-core-profile-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-rtlsupport-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-string-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-synch-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-synch-l1-2-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-sysinfo-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-timezone-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-util-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-convert-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-environment-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-filesystem-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-processthreads-l1-1-0.dll
- C:\blockmango-client\download\10002\client.zip-4-3
- C:\blockmango-client\download\10002\client.zip-4-2
Deletes the following files
- C:\blockmango-client\download\30003\launcher.zip-4-0
- C:\blockmango-client\download\30003\launcher.zip-4-1
- C:\blockmango-client\download\30003\launcher.zip-4-2
- C:\blockmango-client\download\30003\launcher.zip-4-3
Moves the following files
- from C:\blockmango-client\download\30003\launcher.zip-tmp to C:\blockmango-client\download\30003\launcher.zip
- from C:\blockmango-client\launcher\api-ms-win-crt-environment-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-environment-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-convert-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-convert-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-core-timezone-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-core-timezone-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-core-synch-l1-2-0.dll to C:\blockmango-client\launcher\api-ms-win-core-synch-l1-2-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-core-processthreads-l1-1-1.dll to C:\blockmango-client\launcher\api-ms-win-core-processthreads-l1-1-1.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-core-localization-l1-2-0.dll to C:\blockmango-client\launcher\api-ms-win-core-localization-l1-2-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-core-file-l2-1-0.dll to C:\blockmango-client\launcher\api-ms-win-core-file-l2-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-core-file-l1-2-0.dll to C:\blockmango-client\launcher\api-ms-win-core-file-l1-2-0.dll.tmp
- from C:\blockmango-client\launcher\vcruntime140.dll to C:\blockmango-client\launcher\vcruntime140.dll.tmp
- from C:\blockmango-client\launcher\ucrtbase.dll to C:\blockmango-client\launcher\ucrtbase.dll.tmp
- from C:\blockmango-client\launcher\msvcp140.dll to C:\blockmango-client\launcher\msvcp140.dll.tmp
- from C:\blockmango-client\launcher\mfc140.dll to C:\blockmango-client\launcher\mfc140.dll.tmp
- from C:\blockmango-client\launcher\libcurl.dll to C:\blockmango-client\launcher\libcurl.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-utility-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-utility-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-time-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-time-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-string-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-string-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-stdio-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-stdio-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-runtime-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-runtime-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-multibyte-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-multibyte-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-math-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-math-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-locale-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-locale-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-heap-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-heap-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\api-ms-win-crt-filesystem-l1-1-0.dll to C:\blockmango-client\launcher\api-ms-win-crt-filesystem-l1-1-0.dll.tmp
- from C:\blockmango-client\launcher\gameanalytics.dll to C:\blockmango-client\launcher\gameanalytics.dll.tmp
- from C:\blockmango-client\launcher\blockmanlauncher.exe to C:\blockmango-client\launcher\blockmanlauncher.exe.tmp
Substitutes the following files
- C:\blockmango-client\launcher\api-ms-win-crt-filesystem-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-environment-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-convert-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-timezone-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-synch-l1-2-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-processthreads-l1-1-1.dll
- C:\blockmango-client\launcher\api-ms-win-core-localization-l1-2-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-file-l2-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-core-file-l1-2-0.dll
- C:\blockmango-client\launcher\vcruntime140.dll
- C:\blockmango-client\launcher\ucrtbase.dll
- C:\blockmango-client\launcher\gameanalytics.dll
- C:\blockmango-client\launcher\msvcp140.dll
- C:\blockmango-client\launcher\libcurl.dll
- C:\blockmango-client\launcher\api-ms-win-crt-utility-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-time-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-string-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-stdio-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-runtime-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-multibyte-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-math-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-locale-l1-1-0.dll
- C:\blockmango-client\launcher\api-ms-win-crt-heap-l1-1-0.dll
- C:\blockmango-client\launcher\mfc140.dll
- C:\blockmango-client\launcher\blockmanlauncher.exe
Network activity
Connects to
- 'de#######9td2.cloudfront.net':80
TCP
HTTP GET requests
- http://de#######9td2.cloudfront.net/client/test/30003/launcher.zip
- http://de#######9td2.cloudfront.net/client/test/10002/client.zip
UDP
- DNS ASK de#######9td2.cloudfront.net
Miscellaneous
Searches for the following windows
- ClassName: 'EDIT' WindowName: ''
Creates and executes the following
- 'C:\blockmango-client\launcher\blockmanlauncher.exe'
