What Gets Installed

This article details the changes made to a system when Truxton gets installed.

Overview

When Truxton is installed on a system, several things get installed, some registry entries are made, etc.

Program Files

Truxton will install the core software into the user's Program Files folder in a sub folder named "Truxton". For example, C:\Program Files\Truxton

Dependent Packages

Truxton depends on other software. All of these are optional, meaning, they can already be on a system and Truxton will work with them.

• PostgreSQL - This is the database that Truxton uses. If Truxton installs PostgreSQL, it will appear in the Windows Services Control Panel app as "Truxton Database"
• Java - Used to run SOLR
• .Net - The version of Microsoft .Net required to run Truxton is installed

Services

Truxton installs two services:

• Les - The Load Status Monitor shepherd media through the exploitation process
• Truxton - For keeping the ETL layer alive

Hashset

Truxton will copy an NSRL hashset to the hashsetdir. This file will be over 2GB in size.

Registry

Truxton creates the following values in the HKEY_LOCAL_MACHINE\SOFTWARE\Truxton registry key:

• DataDirectory - Stores the folder where Truxton should write depots
• InstallDateTime - Records when Truxton was installed
• InstallDirectory - Records the folder where Truxton was installed
• Installed - A boolean value set to non zero when Truxtin is installed

In order for Windows File Explorer to know what to display when a user right-buttons on a folder, Truxton creates:

• HKEY_LOCAL_MACHINE\Software\Classes\Directory\shell\AAALoadDirectoryIntoTruxton - "Load into Truxton"
• HKEY_LOCAL_MACHINE\Software\Classes\Directory\shell\AABLoadDirectoryIntoEasyTruxton - "Easy Button Load into Truxton"
• HKEY_LOCAL_MACHINE\Software\Classes\Directory\shell\AACLoadDirectoryResetEasyButton - "Easy Button Reset"
• HKEY_LOCAL_MACHINE\Software\Classes\Directory\shell\AADLoadDirectorySetEasyButton - "Use This Truxton Database"

In order for Windows File Explorer to know what to display when a user right-buttons on a file, Truxton creates the following keys:

• HKEY_CLASSES_ROOT\*\shell\TruxtonContextMenuAnchor
• HKEY_CLASSES_ROOT\*\TruxtonContextMenus

In order for the Truxton URL Interface to work, the following are created:

• HKEY_CLASSES_ROOT\truxton
• HKEY_CLASSES_ROOT\truxton\DefaultIcon
• HKEY_CLASSES_ROOT\truxton\Shell\Open\Command

In order for the tray application to start:

• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run