Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\] 'NeteaseGacc' = '"<Full path to file>"'
Modifies file system
Creates the following files
- %APPDATA%\netease\uu\uu.log
- %APPDATA%\netease\uu\theme\default\select_game_header.png
- %APPDATA%\netease\uu\theme\default\select_game_form.png
- %APPDATA%\netease\uu\theme\default\select_game_detail.png
- %APPDATA%\netease\uu\theme\default\select_game_close.png
- %APPDATA%\netease\uu\theme\default\select_game_client.png
- %APPDATA%\netease\uu\theme\default\select_game_button.png
- %APPDATA%\netease\uu\theme\default\select_game_accing.png
- %APPDATA%\netease\uu\theme\default\search_game.png
- %APPDATA%\netease\uu\theme\default\score_tips.png
- %APPDATA%\netease\uu\theme\default\score.png
- %APPDATA%\netease\uu\theme\default\rtt_detail.png
- %APPDATA%\netease\uu\theme\default\restore_network.png
- %APPDATA%\netease\uu\theme\default\repair_lbs.png
- %APPDATA%\netease\uu\theme\default\recommend_node.png
- %APPDATA%\netease\uu\theme\default\radiobox.png
- %APPDATA%\netease\uu\theme\default\quit.png
- %APPDATA%\netease\uu\theme\default\qufu.png
- %APPDATA%\netease\uu\theme\default\qiannv_logo.png
- %APPDATA%\netease\uu\theme\default\progress.png
- %APPDATA%\netease\uu\theme\default\notice_bar_bk.png
- %APPDATA%\netease\uu\theme\default\node_tips.png
- %APPDATA%\netease\uu\theme\default\net_quality.png
- %APPDATA%\netease\uu\theme\default\netbar_silver.png
- %APPDATA%\netease\uu\theme\default\netbar_gold.png
- %APPDATA%\netease\uu\theme\default\netbar_bronze.png
- %APPDATA%\netease\uu\theme\default\min_button.png
- %APPDATA%\netease\uu\theme\default\netbar.png
- %APPDATA%\netease\uu\theme\default\select_game_tab_highlight.png
- %APPDATA%\netease\uu\theme\default\select_game_tab_normal.png
- %APPDATA%\netease\uu\theme\default\auth.png
- %APPDATA%\netease\uu\update\temp_20210318014452165\<File name>.exe.bak
- %APPDATA%\netease\uu\update\temp_20210318014452165\gacc.exe
- %APPDATA%\netease\uu\update\gacc_update.tmp
- %APPDATA%\netease\uu\update\uu_update.log
- %APPDATA%\netease\uu\update\gacc_updater_info_1313.html
- %APPDATA%\netease\uu\update\gacc_updater_1313.exe
- %HOMEPATH%\desktop\启动 网易uu.lnk
- %APPDATA%\netease\uu\userdata.db
- %APPDATA%\netease\uu\userdata.db-journal
- %APPDATA%\netease\uu\theme\default\welcome_qiannv.png
- %APPDATA%\netease\uu\theme\default\welcome_button.png
- %APPDATA%\netease\uu\theme\default\warning_icon.png
- %APPDATA%\netease\uu\theme\default\caption.png
- %APPDATA%\netease\uu\theme\default\uninstall_vcard.png
- %APPDATA%\netease\uu\theme\default\type_tips.png
- %APPDATA%\netease\uu\theme\default\success.png
- %APPDATA%\netease\uu\theme\default\start_game.png
- %APPDATA%\netease\uu\theme\default\start_acc.png
- %APPDATA%\netease\uu\theme\default\split_line.png
- %APPDATA%\netease\uu\theme\default\smiling_face.png
- %APPDATA%\netease\uu\theme\default\skin.xml
- %APPDATA%\netease\uu\theme\default\shit_face.png
- %APPDATA%\netease\uu\theme\default\setting_split_line.png
- %APPDATA%\netease\uu\theme\default\setting_form_icon.png
- %APPDATA%\netease\uu\theme\default\setting_button.png
- %APPDATA%\netease\uu\theme\default\menu_image.png
- %APPDATA%\netease\uu\theme\default\main_form.png
- %APPDATA%\netease\uu\theme\default\mail_domain_comb.png
- %APPDATA%\netease\uu\theme\default\acc_ball_message_stopacc_number.png
- %APPDATA%\netease\uu\theme\default\acc_ball_message_close.png
- %APPDATA%\netease\uu\theme\default\acc_ball_message_accing_number.png
- %APPDATA%\netease\uu\theme\default\acc_ball_menu_stop.png
- %APPDATA%\netease\uu\theme\default\acc_ball_menu_setting.png
- %APPDATA%\netease\uu\theme\default\acc_ball_menu_score_shop.png
- %APPDATA%\netease\uu\theme\default\acc_ball_menu_hide.png
- %APPDATA%\netease\uu\theme\default\acc_ball_menu_close.png
- %APPDATA%\netease\uu\theme\default\acc_ball_menu_bg.png
- %APPDATA%\netease\uu\theme\default\acc_ball_menu_autoacc_true.png
- %APPDATA%\netease\uu\theme\default\acc_ball_menu_autoacc_false.png
- %APPDATA%\netease\uu\theme\default\acc_ball_hide.png
- %APPDATA%\netease\uu\theme\default\acc_ball_detailed.png
- %APPDATA%\netease\uu\theme\default\acc_ball_curves_red.png
- %APPDATA%\netease\uu\theme\default\acc_ball_curves_notice.png
- %APPDATA%\netease\uu\theme\default\acc_ball_curves_green.png
- %APPDATA%\netease\uu\theme\default\acc_ball_accingpercent_bg.png
- %APPDATA%\netease\uu\theme\default\acc_ball.png
- %APPDATA%\netease\uu\theme\default\accballmessagebk.png
- %APPDATA%\netease\uu\theme\default\about_form_logo.png
- %APPDATA%\netease\uu\theme\default\aboutbg.png
- %APPDATA%\netease\uu\theme\skins.xml
- %APPDATA%\netease\uu\theme\build.xml
- %APPDATA%\netease\uu\theme.cab
- %APPDATA%\netease\uu\theme\default\acc_ball_return.png
- %APPDATA%\netease\uu\theme\default\acc_ball_score_five.png
- %APPDATA%\netease\uu\theme\default\acc_ball_number.png
- %APPDATA%\netease\uu\theme\default\acc_ball_score_four.png
- %APPDATA%\netease\uu\theme\default\logo.png
- %APPDATA%\netease\uu\theme\default\acc_ball_score_one.png
- %APPDATA%\netease\uu\theme\default\loading.gif
- %APPDATA%\netease\uu\theme\default\info.png
- %APPDATA%\netease\uu\theme\default\game_list.png
- %APPDATA%\netease\uu\theme\default\gacc.ico
- %APPDATA%\netease\uu\theme\default\free_logo.png
- %APPDATA%\netease\uu\theme\default\forbidden_tips.png
- %APPDATA%\netease\uu\theme\default\feedback_form_icon.png
- %APPDATA%\netease\uu\theme\default\edit.png
- %APPDATA%\netease\uu\theme\default\close_button.png
- %APPDATA%\netease\uu\theme\default\chenggong.png
- %APPDATA%\netease\uu\theme\default\checkbox.png
- %APPDATA%\netease\uu\theme\default\welcome.png
- %APPDATA%\netease\uu\theme\default\score_close.png
- %APPDATA%\netease\uu\theme\default\button.png
- %APPDATA%\netease\uu\theme\default\banner.png
- %APPDATA%\netease\uu\theme\default\auth_warning.png
- %APPDATA%\netease\uu\theme\default\auth_failed.png
- %APPDATA%\netease\uu\theme\default\auth_button.png
- %APPDATA%\netease\uu\theme\default\add_my_game_button.png
- %APPDATA%\netease\uu\theme\default\add_game.png
- %APPDATA%\netease\uu\theme\default\acc_success.png
- %APPDATA%\netease\uu\theme\default\acc_ball_stopacc_bg.png
- %APPDATA%\netease\uu\theme\default\acc_ball_soreshop.png
- %APPDATA%\netease\uu\theme\default\acc_ball_score_two.png
- %APPDATA%\netease\uu\theme\default\acc_ball_score_three.png
- %APPDATA%\netease\uu\theme\default\change_node_split_line.png
- %APPDATA%\netease\uu\theme\default\score_tips_splite.png
Deletes the following files
- %APPDATA%\netease\uu\theme.cab
- %APPDATA%\netease\uu\userdata.db-journal
- %APPDATA%\netease\uu\update\gacc_updater_info_1313.html
- %APPDATA%\netease\uu\update\gacc_update.tmp
- %APPDATA%\netease\uu\update\temp_20210318014452165\gacc.exe
- %APPDATA%\netease\uu\update\temp_20210318014452165\<File name>.exe.bak
- %APPDATA%\netease\uu\update\gacc_updater_1313.exe
Substitutes the following files
- %APPDATA%\netease\uu\userdata.db-journal
- %APPDATA%\netease\uu\theme.cab
Network activity
Connects to
- 'up####.uu.163.com':80
- 'uu.###.netease.com':443
- 'uu.####te.netease.com':443
- 'uu.#63.com':80
- 'uu.#63.com':443
TCP
- 'uu.###.netease.com':443
- 'uu.#63.com':443
UDP
- DNS ASK up####.uu.163.com
- DNS ASK uu.###.netease.com
- DNS ASK uu.####te.netease.com
- DNS ASK uu.#63.com
Miscellaneous
Creates and executes the following
- '%APPDATA%\netease\uu\update\gacc_updater_1313.exe' /gacc "<Full path to file>" /info "%APPDATA%\Netease\UU\update\gacc_updater_info_1313.html"
