Analysis

  • max time kernel
    148s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2023, 23:49

General

  • Target
    UbisoftConnectInstaller.exe
  • Size 226.8MB
  • Sample230106-3t4bpafg21
  • SHA256 bd99898652f6684b669431641395082ee80d6119e9a263eea9cdb3f2d96adf62
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Path
  • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\en-CA_loc.txt

Ransom Note
  •  Account.Details Account Details Account.Management Account Management AccountInformation.DisplayEmail Click to display e-mail AccountInformation.Email E-mail AccountInformation.Header Account Information AccountInformation.OtherDetails Other account details: AccountInformation.ShowKey Show key AccountInformation.TrustedDevices Trusted devices: AccountInformation.Username Username: AccountInformation.UsernameTip Your username must be at least 3 characters long, and no longer than 15 characters AccountInformation.Website Ubisoft account management website AccountSecurity.NotSecure Your account may be at risk. Take action to secure it! AccountSecurity.NotSecureShort Improve your account security. AccountSecurity.Secure Your account is secure. AccountSecurity.SecureShort Your account is secure. AccountSecurity.SemiSecure Your account isn't as secure as it could be. Improve your security now! AccountSecurity.SemiSecureShort Make your account more secure. Achievements.Earned Unlocked Achievements.EarnedNotification Achievement Unlocked Actions.BadgeLocked Badge locked Actions.BadgeUnlocked Badge unlocked Actions.Completed Completed Actions.EnableReward Enable __REWARD_NAME__ Reward Actions.RewardEnabled __REWARD_NAME__ Reward enabled ActivateProduct.ActivateHere Activate it here ActivateProduct.HaveAKeyPrompt Have a key for this product? ActivateProduct.KeyExamples1 AAAA-BBBB-CCCC-DDDD ActivateProduct.KeyExamples2 AAA-BBBB-CCCC-DDDD-EEEE ActivateProduct.KeyExamplesIntro Activation codes may look like this: Addon.Install Install Addon.Play Play Autorun.AcceptAndContinue Accept and continue Autorun.Cancel Cancel Autorun.Change Change Autorun.Close Close Autorun.DiskSpaceError Not enough disk space. Please free up some space or try a different install location. Autorun.Install Install Autorun.Language.csCZ Čeština Autorun.Language.daDK Dansk Autorun.Language.deDE Deutsch Autorun.Language.enCA English (Canadian) Autorun.Language.enGB English (UK) Autorun.Language.enUS English Autorun.Language.esES Español Autorun.Language.esMX Español (México) Autorun.Language.fiFI Suomi Autorun.Language.frCA Français (Canadien) Autorun.Language.frFR Français Autorun.Language.huHU Magyar Autorun.Language.itIT Italiano Autorun.Language.jaJP 日本語 Autorun.Language.koKO 한국어 Autorun.Language.nbNO Norsk Autorun.Language.nlNL Nederlands Autorun.Language.plPL Polski Autorun.Language.ptBR Português brasileiro Autorun.Language.ptPT Português Autorun.Language.roRO Română Autorun.Language.ruRU Pyccкий Autorun.Language.svSE Svenska Autorun.Language.thTH ไทย Autorun.Language.trTR Türkçe Autorun.Language.ukUA yкpaїHcbкa Autorun.Language.zhCN 简体中文 Autorun.Language.zhTW 繁體中文 Autorun.LicenseAgreement License Agreement Autorun.Manual Manual Autorun.Play Play Autorun.Quit Quit Autorun.Readme Readme Autorun.Uninstall Uninstall Autorun.Uplay.Install Install Ubisoft Connect Autorun.Uplay.InstallLocation Ubisoft Connect install location: Autorun.Uplay.Installation Installing Ubisoft Connect… Autorun.Uplay.Intro Ubisoft Connect is a hub for all your Ubisoft titles. Ubisoft Connect enhances your gaming experience with additional content, social features and great rewards, while making sure your games are always accessible and up to date. Autorun.Uplay.Language Language: Autorun.UplayInstallFailed Ubisoft Connect installation failed. Please try again. If the problem persists, please contact Ubisoft support. Beta.AdditionalLink More info Beta.AlreadyRegistered Thanks, but you're already registered! We'll reach out to you through your e-mail address with any news, announcements, or live event invitations. Stay tuned! Beta.ConfirmEmailVerified I have verified my e-mail Beta.EmailVerifiedDesc We’ve sent you an e-mail with instructions for verifying your e-mail address. Please follow the instructions and revisit this page to finalize your registration. Beta.GetStatusFailed There is a problem connecting to the registration service. Please try again later. Beta.GetStatusFailedHeader Something went wrong Beta.RegisterDesc Registering will ensure you get all the latest news and gives you a chance to be the first to play. Beta.ResendEmailDesc The verification e-mail has been resent to: Beta.SignUp Register for PC Beta.SignUpAlreadyCompleted Thanks, but you've actually already registered! We'll be in touch on your e-mail address (__EMAIL__) with any news, announcements, or live event invitations. Stay tuned! Beta.SignUpCompleted Thank you for registering Beta.SignUpCompleted.Header Thank you for registering for __NAME_OF_GAME__ Beta.SignUpCompletedBody You will be contacted at the following e-mail address with any news, announcements, and live event invitations. Beta.SignUpCompletedEmail You’ve registered with the following e-mail address: Beta.SignUpCurrentEmail You will be registering using the Ubisoft account that is linked to this e-mail address: Beta.SignUpEmailValidation Before registering, please ensure the above e-mail address is valid and working, as it will be used to communicate any live events, announcements or updates to you. Beta.SignUpFailed We were unable to register your request due to server issues. Please try again later. Beta.SignUpFailedHeader Something went wrong Beta.VerifyEmailDesc Your e-mail has not been verified. In order to register, you must verify your e-mail address. Broadcast.CapturePresetCustom Custom Broadcast.CapturePresetHigh High Broadcast.CapturePresetLow Low Broadcast.CapturePresetMedium Medium Broadcast.DefaultIngestServer Default: __REPLACE_URL__ Broadcast.HideAdvancedSettings Hide advanced settings Broadcast.ShowAdvancedSettings Show advanced settings Challenge.LeftFromPreviousWeek __COLLECT__ reward left from previous weeks Challenges.Completed Completed (__COMPLETED__/__TOTAL__) Challenges.Congrats Congratulations! Challenges.Core.Completed You’ve completed all __NUMBER__ Challenges. Challenges.Core.NothingCompleted Complete Challenges to earn XP Challenges.LeftFromPreviousWeek __COLLECT__ rewards left from previous weeks Challenges.OnboardingAddAllHeaderTitle Manage your challenges with a single click Challenges.OnboardingAddAllInformationText You can now add all challenges and claim all rewards with just one click Challenges.Prize Reward Challenges.SelectChallenge Select a challenge Challenges.TimeLimited.Completed You’ve completed all available Challenges this week and claimed: ChangeGameInstallationPath.AreYouSure Are you sure you want to continue? ChangeGameInstallationPath.Description Any games installed in the current location (__REPLACE_WITH_GAME_INSTALL_PATH__) will not be moved to the new location. ChangeGameInstallationPath.Header Change game installation location ChangeInstallerCachePath.Description Any installers in the current directory (__REPLACE_WITH_DOWNLOADS_FOLDER__) will not be moved to the new location. ChangeInstallerCachePath.Header Change installer cache location ChangeUsername.Warning Your username can only be changed once every 30 days. ChangeUsernameConfirm.Message Are you sure you want to change your current username? ChangeUsernameConfirm.Title Change username Chat.New.Chat New chat ChatPanel.Accept Accept ChatPanel.ConnectionStatus.Connecting Connecting... ChatPanel.Decline Decline ChatPanel.DisabledChatPlaceholder Chat is disabled for non-friends. ChatPanel.FailedToDeliverMessage We were unable to deliver that message. ChatPanel.GameInviteText __USER_NAME__ would like you to start __GAME_NAME__ and join the game ChatPanel.GameInviteTextPopup wants you to join a game ChatPanel.InputFieldPlaceholder Type to chat ChatPanel.InviteFriendToGameDisabled This friend cannot be invited to your game ChatPanel.InviteToGameDisabled You need to be in a multiplayer game session to send a game invite ChatPanel.InviteToToGameDisabledNoOtherGroupMembers There are no users in this group that can be invited to your game ChatPanel.NewMessages New messages ChatPanel.OfflineMessageReceived This message was sent when you were offline, or from a user on ubisoftconnect.com or Ubisoft Connect Mobile. ChatPanel.PartyInviteText __USER_NAME__ would like you to launch __GAME_NAME__ and join a party ChatPanel.PartyInviteTextPopup wants you to join a party ChatPanel.RetrieveHistory Retrieving history ChatPanel.RetrieveHistoryFailed Unable to retrieve history ChatPanel.TryAgain Try again ClientBrandedInstaller.FinishMessage The installation of $(brandingProductName) will now continue in ${PRODUCTNAME} ClientBrandedInstaller.WelcomeMessage Install ${PRODUCTNAME} to play $(brandingProductName) ClientInstaller.CheckingPreviousInstallation Checking previous installations… ClientInstaller.DeleteGamesLabel Uninstall Ubisoft Connect games (you can access them later by reinstalling Ubisoft Connect) ClientInstaller.DeleteSavesLabel Delete local save game files ClientInstaller.LicensePageAcceptButton I Accept ClientInstaller.LicensePageBottomText By clicking I Accept to continue you acknowledge you have read and understood the contents of the License Agreement. ClientInstaller.LicensePageHeaderSubtext Please read the License Agreement carefully to continue your installation of Ubisoft Connect. ClientInstaller.MoreRecentVersionFound A more recent version of Ubisoft Connect is already installed. ClientInstaller.UninstallDescription The Ubisoft Connect application will be uninstalled from your computer. Click Uninstall to start the uninstallation process. ClientInstaller.UplayIsRunningInstall Ubisoft Connect is running. Please close it and try again. ClientInstaller.UplayIsRunningUninstall Ubisoft Connect is running and cannot be uninstalled. Please close it and try again. ClientInstaller.WindowsVersionOutOfDate The version of Windows you are using is not supported by this application. Club.AllRewardsTaken You have claimed all of the Rewards for this game Club.Challenges.Add Add Club.Challenges.AddAll Add all Club.Challenges.ChallengeAvailable Available Challenge Club.Challenges.ChallengeInProgress Challenge in progress Club.Challenges.ChallengeProgression Score: Club.Challenges.ChallengesAvailable Available Challenges Club.Challenges.ChallengesInProgress Challenges in progress Club.Challenges.ClassicChallengesCurrentlyNotAvailable Core Challenges are currently unavailable. Club.Challenges.ClassicChallengesNotAvailable Core Challenges are currently unavailable. Please check back later. Club.Challenges.Collect Claim Club.Challenges.CollectAll Claim all Club.Challenges.CollectYourPrize Claim your reward Club.Challenges.Collected Claimed Club.Challenges.CommunityChallenge Community Challenge Club.Challenges.CommunityChallengesCurrentlyNotAvailable Community Challenges are currently not available. Please come back later. Club.Challenges.CommunityProgression Community score: Club.Challenges.EventChallenge Special Event Challenge Club.Challenges.Expired Expired Club.Challenges.NextChallengesAvailableSoon Next challenges available soon! Club.Challenges.PlayerParticipationRequired Participate to collect exclusive rewards Club.Challenges.PlayerProgression Your contribution: Club.Challenges.PrizeToCollect Reward to claim Club.Challenges.PrizesToCollect Rewards to claim Club.Challenges.ThresholdCollect Claim __COMPLETED__/__TOTAL__ Club.Challenges.WeeklyChallengesCurrentlyNotAvailable Time-Limited Challenges are currently unavailable. Please check back later. Club.Challenges.WeeklyChallengesNotAvailableForGame Time-Limited Challenges are not available for this game. Club.Classic Core Club.ClassicChallenges Core Challenges Club.Level Level __LEVEL__ Club.Weekly Time-Limited Club.WeeklyChallenges Time-Limited Challenges Club.XP XP Club.XPToNextLevel __XP_TO_NEXT_LEVEL__ to next level Common.About About Common.Accept Accept Common.AcceptAndContinue Accept and continue Common.Achievements Achievements Common.Actions Actions Common.ActivateAnotherProduct Activate another key Common.AllGames All games Common.Apply Apply Common.Back Back Common.Beta Beta Common.Browser Browser Common.Buy Buy Common.BytesPerSecond B/s Common.Cancel Cancel Common.Categories Categories Common.ChangeLater You can change this later in the settings. Common.Chat Chat Common.ClearAll Clear Common.Close Close Common.ComingSoon Coming soon Common.Community Community Common.Compact Compact Common.Completed Completed Common.Continue Continue Common.ControllerConnected Controller connected Common.ControllerDisconnected Controller disconnected Common.Conversation Conversation Common.Copy Copy Common.CrashMsg1 Ubisoft Connect has detected an unrecoverable error and must shut down. Common.CrashMsg2 Crash dump created at "__CRASH_DUMP_PATH__". Common.Custom Custom Common.Decline Decline Common.Discard Discard Common.Done Done Common.Edit Edit Common.EmailLabel E-mail: Common.Expanded Expanded Common.Filter Filter Common.Forum Forum Common.Friends Friends Common.GameInvites Game invites Common.Genre Genre: Common.GigaBytes GB Common.GoToTop Go to top Common.Goal Goal: Common.Groups Groups Common.Highlights Highlights Common.InProgress In progress Common.Invite Invite Common.KiloBytes kB Common.KiloBytesPerSecond kB/s Common.LatestNews Latest news Common.LaunchGame Launch game Common.Legacy Standard Common.LoadMore Load more Common.LoadPrevious Load previous Common.Loading Loading… Common.Manage Manage Common.MegaBytes MB Common.MegaBytesPerSecond MB/s Common.MoreInformation More information Common.No No Common.Notifications Notifications Common.OK OK Common.Off Off Common.On On Common.Oops Oops, something unexpected happened. Please try again later. Common.OpenFolder Open folder Common.Other Other Common.Party Party Common.PasswordLabel Password: Common.Paste Paste Common.PleaseContactUbisoftSupport If the problem persists, please contact __UBISOFT_SUPPORT__. Common.PleaseTryAgain Please try again Common.Preload Pre-load Common.Preloaded Pre-loaded Common.Preloading Pre-loading Common.Quit Quit Common.RecentlyPlayed Recently played Common.ReleaseDate Release date: Common.Reminder Reminder: Common.ResendEmail Resend e-mail Common.ResendEmailDesc The e-mail has been re-sent to: Common.Reset Reset Common.RestartNow Restart now Common.RestartUplay Restart Ubisoft Connect Common.Retry Try again Common.Rewards Rewards Common.Save Save Common.Search Search Common.SelectAll Select all Common.SelectNone Select none Common.Settings Settings Common.Shop Store Common.ShoppingCart Shopping cart Common.ShowAll Show all Common.Skip Skip Common.SortBy Sort by Common.SortByAZ A-Z Common.SortStatus Status Common.StartVoiceChat Start voice chat Common.Status Status: Common.Status.Off Off Common.Status.On On Common.SupportArticle support article Common.SwitchToBeta This button lets you switch between the current version of Ubisoft Connect PC and its Beta version. Common.SwitchToStandard Switch to Standard Common.TimeLeft __TIME__ left Common.TimespanHours __HOURS__ h Common.TimespanHoursMinutes __HOURS__ h __MINUTES__ m Common.TimespanMinutes __MINUTES__ m Common.Total Total Common.TryAgain Try again Common.TryAgainOrCustomerSupport Please try again in a moment, or contact Customer Support. Common.UbisoftSupport Ubisoft Support Common.Units Units Common.Unlink Unlink Common.UpdateEmail Update my e-mail Common.Uplay Ubisoft Connect Common.UplayInstaller Ubisoft Connect installer Common.View View Common.VisitShop Visit Store Common.WeGame WeGame Common.Yes Yes CommunicationPreferences.Header Communication preferences CommunityStats.Title Community stats ConnectBeta.EnableBetaMessage This will close the current Ubisoft Connect app and pause any ongoing downloads. It will then launch the Beta version of the app. ConnectBeta.EnableBetaModalHeading Are you sure you want to switch to the Beta? CrashReporter.DontAskAgainLabel Don’t ask me to send crash reports any more CrashReporter.Error Something went wrong. Your crash report could not be sent. CrashReporter.Info __GAME_NAME__ crashed. Help us out by sending a crash report so we can figure out what went wrong. CrashReporter.SendBtn Send crash repo
URLs
  • http://account.ubisoft.com

Extracted

Path
  • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\en-US_loc.txt

Ransom Note
  •  Account.Details Account Details Account.Management Account Management AccountInformation.DisplayEmail Click to display e-mail AccountInformation.Email E-mail AccountInformation.Header Account Information AccountInformation.OtherDetails Other account details: AccountInformation.ShowKey Show key AccountInformation.TrustedDevices Trusted devices: AccountInformation.Username Username: AccountInformation.UsernameTip Your username must be at least 3 characters long, and no longer than 15 characters AccountInformation.Website Ubisoft account management website AccountSecurity.NotSecure Your account may be at risk. Take action to secure it! AccountSecurity.NotSecureShort Improve your account security. AccountSecurity.Secure Your account is secure. AccountSecurity.SecureShort Your account is secure. AccountSecurity.SemiSecure Your account isn't as secure as it could be. Improve your security now! AccountSecurity.SemiSecureShort Make your account more secure. Achievements.Earned Unlocked Achievements.EarnedNotification Achievement Unlocked Actions.BadgeLocked Badge locked Actions.BadgeUnlocked Badge unlocked Actions.Completed Completed Actions.EnableReward Enable __REWARD_NAME__ Reward Actions.RewardEnabled __REWARD_NAME__ Reward enabled ActivateProduct.ActivateHere Activate it here ActivateProduct.HaveAKeyPrompt Have a key for this product? ActivateProduct.KeyExamples1 AAAA-BBBB-CCCC-DDDD ActivateProduct.KeyExamples2 AAA-BBBB-CCCC-DDDD-EEEE ActivateProduct.KeyExamplesIntro Activation codes may look like this: Addon.Install Install Addon.Play Play Autorun.AcceptAndContinue Accept and continue Autorun.Cancel Cancel Autorun.Change Change Autorun.Close Close Autorun.DiskSpaceError Not enough disk space. Please free up some space or try a different install location. Autorun.Install Install Autorun.Language.csCZ Čeština Autorun.Language.daDK Dansk Autorun.Language.deDE Deutsch Autorun.Language.enCA English (Canadian) Autorun.Language.enGB English (UK) Autorun.Language.enUS English Autorun.Language.esES Español Autorun.Language.esMX Español (México) Autorun.Language.fiFI Suomi Autorun.Language.frCA Français (Canadien) Autorun.Language.frFR Français Autorun.Language.huHU Magyar Autorun.Language.itIT Italiano Autorun.Language.jaJP 日本語 Autorun.Language.koKO 한국어 Autorun.Language.nbNO Norsk Autorun.Language.nlNL Nederlands Autorun.Language.plPL Polski Autorun.Language.ptBR Português brasileiro Autorun.Language.ptPT Português Autorun.Language.roRO Română Autorun.Language.ruRU Pyccкий Autorun.Language.svSE Svenska Autorun.Language.thTH ไทย Autorun.Language.trTR Türkçe Autorun.Language.ukUA yкpaїHcbкa Autorun.Language.zhCN 简体中文 Autorun.Language.zhTW 繁體中文 Autorun.LicenseAgreement License Agreement Autorun.Manual Manual Autorun.Play Play Autorun.Quit Quit Autorun.Readme Readme Autorun.Uninstall Uninstall Autorun.Uplay.Install Install Ubisoft Connect Autorun.Uplay.InstallLocation Ubisoft Connect install location: Autorun.Uplay.Installation Installing Ubisoft Connect… Autorun.Uplay.Intro Ubisoft Connect is a hub for all your Ubisoft titles. Ubisoft Connect enhances your gaming experience with additional content, social features and great rewards, while making sure your games are always accessible and up to date. Autorun.Uplay.Language Language: Autorun.UplayInstallFailed Ubisoft Connect installation failed. Please try again. If the problem persists, please contact Ubisoft support. Beta.AdditionalLink More info Beta.AlreadyRegistered Thanks, but you're already registered! We'll reach out to you through your e-mail address with any news, announcements, or live event invitations. Stay tuned! Beta.ConfirmEmailVerified I have verified my e-mail Beta.EmailVerifiedDesc We’ve sent you an e-mail with instructions for verifying your e-mail address. Please follow the instructions and revisit this page to finalize your registration. Beta.GetStatusFailed There is a problem connecting to the registration service. Please try again later. Beta.GetStatusFailedHeader Something went wrong Beta.RegisterDesc Registering will ensure you get all the latest news and gives you a chance to be the first to play. Beta.ResendEmailDesc The verification e-mail has been resent to: Beta.SignUp Register for PC Beta.SignUpAlreadyCompleted Thanks, but you've actually already registered! We'll be in touch on your e-mail address (__EMAIL__) with any news, announcements, or live event invitations. Stay tuned! Beta.SignUpCompleted Thank you for registering Beta.SignUpCompleted.Header Thank you for registering for __NAME_OF_GAME__ Beta.SignUpCompletedBody You will be contacted at the following e-mail address with any news, announcements, and live event invitations. Beta.SignUpCompletedEmail You’ve registered with the following e-mail address: Beta.SignUpCurrentEmail You will be registering using the Ubisoft account that is linked to this e-mail address: Beta.SignUpEmailValidation Before registering, please ensure the above e-mail address is valid and working, as it will be used to communicate any live events, announcements or updates to you. Beta.SignUpFailed We were unable to register your request due to server issues. Please try again later. Beta.SignUpFailedHeader Something went wrong Beta.VerifyEmailDesc Your e-mail has not been verified. In order to register, you must verify your e-mail address. Broadcast.CapturePresetCustom Custom Broadcast.CapturePresetHigh High Broadcast.CapturePresetLow Low Broadcast.CapturePresetMedium Medium Broadcast.DefaultIngestServer Default: __REPLACE_URL__ Broadcast.HideAdvancedSettings Hide advanced settings Broadcast.ShowAdvancedSettings Show advanced settings Challenge.LeftFromPreviousWeek __COLLECT__ reward left from previous weeks Challenges.Completed Completed (__COMPLETED__/__TOTAL__) Challenges.Congrats Congratulations! Challenges.Core.Completed You’ve completed all __NUMBER__ Challenges. Challenges.Core.NothingCompleted Complete Challenges to earn XP Challenges.LeftFromPreviousWeek __COLLECT__ rewards left from previous weeks Challenges.OnboardingAddAllHeaderTitle Manage your challenges with a single click Challenges.OnboardingAddAllInformationText You can now add all challenges and claim all rewards with just one click Challenges.Prize Reward Challenges.SelectChallenge Select a challenge Challenges.TimeLimited.Completed You’ve completed all available Challenges this week and claimed: ChangeGameInstallationPath.AreYouSure Are you sure you want to continue? ChangeGameInstallationPath.Description Any games installed in the current location (__REPLACE_WITH_GAME_INSTALL_PATH__) will not be moved to the new location. ChangeGameInstallationPath.Header Change game installation location ChangeInstallerCachePath.Description Any installers in the current directory (__REPLACE_WITH_DOWNLOADS_FOLDER__) will not be moved to the new location. ChangeInstallerCachePath.Header Change installer cache location ChangeUsername.Warning Your username can only be changed once every 30 days. ChangeUsernameConfirm.Message Are you sure you want to change your current username? ChangeUsernameConfirm.Title Change username Chat.GameInvite.BuyFromWeGame Chat.New.Chat New chat Chat.NoGameInvites.Message ChatPanel.Accept Accept ChatPanel.ConnectionStatus.Connecting Connecting... ChatPanel.Decline Decline ChatPanel.DisabledChatPlaceholder Chat is disabled for non-friends. ChatPanel.FailedToDeliverMessage We were unable to deliver that message. ChatPanel.GameInviteText __USER_NAME__ would like you to start __GAME_NAME__ and join the game ChatPanel.GameInviteTextPopup wants you to join a game ChatPanel.InputFieldPlaceholder Type to chat ChatPanel.InviteFriendToGameDisabled This friend cannot be invited to your game ChatPanel.InviteToGameDisabled You need to be in a multiplayer game session to send a game invite ChatPanel.InviteToToGameDisabledNoOtherGroupMembers There are no users in this group that can be invited to your game ChatPanel.NewMessages New messages ChatPanel.OfflineMessageReceived This message was sent when you were offline, or from a user on ubisoftconnect.com or Ubisoft Connect Mobile. ChatPanel.PartyInviteText __USER_NAME__ would like you to launch __GAME_NAME__ and join a party ChatPanel.PartyInviteTextPopup wants you to join a party ChatPanel.RetrieveHistory Retrieving history ChatPanel.RetrieveHistoryFailed Unable to retrieve history ChatPanel.TryAgain Try again ClientBrandedInstaller.FinishMessage The installation of $(brandingProductName) will now continue in ${PRODUCTNAME} ClientBrandedInstaller.WelcomeMessage Install ${PRODUCTNAME} to play $(brandingProductName) ClientInstaller.CheckingPreviousInstallation Checking previous installations… ClientInstaller.DeleteGamesLabel Uninstall Ubisoft Connect games (you can access them later by reinstalling Ubisoft Connect) ClientInstaller.DeleteSavesLabel Delete local save game files ClientInstaller.LicensePageAcceptButton I Accept ClientInstaller.LicensePageBottomText By clicking I Accept to continue you acknowledge you have read and understood the contents of the License Agreement. ClientInstaller.LicensePageHeaderSubtext Please read the License Agreement carefully to continue your installation of Ubisoft Connect. ClientInstaller.MoreRecentVersionFound A more recent version of Ubisoft Connect is already installed. ClientInstaller.UninstallDescription The Ubisoft Connect application will be uninstalled from your computer. Click Uninstall to start the uninstallation process. ClientInstaller.UplayIsRunningInstall Ubisoft Connect is running. Please close it and try again. ClientInstaller.UplayIsRunningUninstall Ubisoft Connect is running and cannot be uninstalled. Please close it and try again. ClientInstaller.WindowsVersionOutOfDate The version of Windows you are using is not supported by this application. Club.AllRewardsTaken You have claimed all of the Rewards for this game Club.Challenges.Add Add Club.Challenges.AddAll Add all Club.Challenges.ChallengeAvailable Available Challenge Club.Challenges.ChallengeInProgress Challenge in progress Club.Challenges.ChallengeProgression Score: Club.Challenges.ChallengesAvailable Available Challenges Club.Challenges.ChallengesInProgress Challenges in progress Club.Challenges.ClassicChallengesCurrentlyNotAvailable Core Challenges are currently unavailable. Club.Challenges.ClassicChallengesNotAvailable Core Challenges are currently unavailable. Please check back later. Club.Challenges.Collect Claim Club.Challenges.CollectAll Claim all Club.Challenges.CollectYourPrize Claim your reward Club.Challenges.Collected Claimed Club.Challenges.CommunityChallenge Community Challenge Club.Challenges.CommunityChallengesCurrentlyNotAvailable Community Challenges are currently not available. Please come back later. Club.Challenges.CommunityProgression Community score: Club.Challenges.EventChallenge Special Event Challenge Club.Challenges.Expired Expired Club.Challenges.NextChallengesAvailableSoon Next challenges available soon! Club.Challenges.PlayerParticipationRequired Participate to collect exclusive rewards Club.Challenges.PlayerProgression Your contribution: Club.Challenges.PrizeToCollect Reward to claim Club.Challenges.PrizesToCollect Rewards to claim Club.Challenges.ThresholdCollect Claim __COMPLETED__/__TOTAL__ Club.Challenges.WeeklyChallengesCurrentlyNotAvailable Time-Limited Challenges are currently unavailable. Please check back later. Club.Challenges.WeeklyChallengesNotAvailableForGame Time-Limited Challenges are not available for this game. Club.Classic Core Club.ClassicChallenges Core Challenges Club.Level Level __LEVEL__ Club.Weekly Time-Limited Club.WeeklyChallenges Time-Limited Challenges Club.XP XP Club.XPToNextLevel __XP_TO_NEXT_LEVEL__ to next level Common.About About Common.Accept Accept Common.AcceptAndContinue Accept and continue Common.Achievements Achievements Common.Actions Actions Common.ActivateAnotherProduct Activate another key Common.AllGames All games Common.Apply Apply Common.Back Back Common.Beta Beta Common.Browser Browser Common.Buy Buy Common.BytesPerSecond B/s Common.Cancel Cancel Common.Categories Categories Common.ChangeLater You can change this later in the settings. Common.Chat Chat Common.ClearAll Clear Common.Close Close Common.ComingSoon Coming soon Common.Community Community Common.Compact Compact Common.Completed Completed Common.Continue Continue Common.ControllerConnected Controller connected Common.ControllerDisconnected Controller disconnected Common.Conversation Conversation Common.Copy Copy Common.CrashMsg1 Ubisoft Connect has detected an unrecoverable error and must shut down. Common.CrashMsg2 Crash dump created at "__CRASH_DUMP_PATH__". Common.Custom Custom Common.Decline Decline Common.Discard Discard Common.Done Done Common.Edit Edit Common.EmailLabel E-mail: Common.Expanded Expanded Common.Filter Filter Common.Forum Forum Common.Friends Friends Common.GameInvites Game invites Common.Genre Genre: Common.GigaBytes GB Common.GoToTop Go to top Common.Goal Goal: Common.Groups Groups Common.Highlights Highlights Common.InProgress In progress Common.Invite Invite Common.KiloBytes kB Common.KiloBytesPerSecond kB/s Common.LatestNews Latest news Common.LaunchGame Launch game Common.Legacy Standard Common.LoadMore Load more Common.LoadPrevious Load previous Common.Loading Loading… Common.Manage Manage Common.MegaBytes MB Common.MegaBytesPerSecond MB/s Common.MoreInformation More information Common.No No Common.Notifications Notifications Common.OK OK Common.Off Off Common.On On Common.Oops Oops, something unexpected happened. Please try again later. Common.OpenFolder Open folder Common.Other Other Common.Party Party Common.PasswordLabel Password: Common.Paste Paste Common.PleaseContactUbisoftSupport If the problem persists, please contact __UBISOFT_SUPPORT__. Common.PleaseTryAgain Please try again Common.Preload Pre-load Common.Preloaded Pre-loaded Common.Preloading Pre-loading Common.Quit Quit Common.RecentlyPlayed Recently played Common.ReleaseDate Release date: Common.Reminder Reminder: Common.ResendEmail Resend e-mail Common.ResendEmailDesc The e-mail has been re-sent to: Common.Reset Reset Common.RestartNow Restart now Common.RestartUplay Restart Ubisoft Connect Common.Retry Try again Common.Rewards Rewards Common.Save Save Common.Search Search Common.SelectAll Select all Common.SelectNone Select none Common.Settings Settings Common.Shop Store Common.ShoppingCart Shopping cart Common.ShowAll Show all Common.Skip Skip Common.SortBy Sort by Common.SortByAZ A-Z Common.SortStatus Status Common.StartVoiceChat Start voice chat Common.Status Status: Common.Status.Off Off Common.Status.On On Common.SupportArticle support article Common.SwitchToBeta This button lets you switch between the current version of Ubisoft Connect PC and its Beta version. Common.SwitchToStandard Switch to Standard Common.TimeLeft __TIME__ left Common.TimespanHours __HOURS__ h Common.TimespanHoursMinutes __HOURS__ h __MINUTES__ m Common.TimespanMinutes __MINUTES__ m Common.Total Total Common.TryAgain Try again Common.TryAgainOrCustomerSupport Please try again in a moment, or contact customer support. Common.UbisoftSupport Ubisoft Support Common.Units Units Common.Unlink Unlink Common.UpdateEmail Update my e-mail Common.Uplay Ubisoft Connect Common.UplayInstaller Ubisoft Connect installer Common.View View Common.VisitShop Visit Store Common.WeGame WeGame Common.Yes Yes CommunicationPreferences.Header Communication preferences CommunityStats.Title Community stats ConnectBeta.EnableBetaMessage This will close the current Ubisoft Connect app and pause any ongoing downloads. It will then launch the Beta version of the app. ConnectBeta.EnableBetaModalHeading Are you sure you want to switch to the Beta? CrashReporter.DontAskAgainLabel Don’t ask me to send crash reports any more CrashReporter.Error Something went wrong. Your crash report could not be sent. CrashReporter.Info __GAME_NAME__ crashed. Help us out by sending a crash report so we can fig
URLs
  • http://account.ubisoft.com

Extracted

Path
  • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\resources\LICENSES.txt

Ransom Note
  • External libraries used in the Ubisoft Game Launcher and their Licenses: ################################################################################ Boost http://www.boost.org/ Boost Software License - Version 1.0 - August 17th, 2003 Permission is hereby granted, free of charge, to any person or organization obtaining a copy of the software and accompanying documentation covered by this license (the "Software") to use, reproduce, display, distribute, execute, and transmit the Software, and to prepare derivative works of the Software, and to permit third-parties to whom the Software is furnished to do so, all subject to the following: The copyright notices in the Software and this entire statement, including the above license grant, this restriction and the following disclaimer, must be included in all copies of the Software, in whole or in part, and all derivative works of the Software, unless such copies or derivative works are solely in the form of machine-executable object code generated by a source language processor. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ################################################################################ Google Protocol Buffers http://code.google.com/p/protobuf/ BSD License Copyright 2008, Google Inc. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of Google Inc. nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Code generated by the Protocol Buffer compiler is owned by the owner of the input file used when generating it. This code is not standalone and requires a support library to be linked with it. This support library is itself covered by the above license. ################################################################################ yaml https://bitbucket.org/xi/libyaml/src Copyright (c) 2006 Kirill Simonov Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ################################################################################ yaml-cpp http://code.google.com/p/yaml-cpp/ Copyright (c) 2008 Jesse Beder. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ################################################################################ QT http://qt.nokia.com/products/ QT LPG 2.1 with the Nokia Qt LGPL Exception version 1.1 (http://qt.nokia.com/) GNU LESSER GENERAL PUBLIC LICENSE Version 2.1, February 1999 Copyright (C) 1991, 1999 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. [This is the first released version of the Lesser GPL. It also counts as the successor of the GNU Library Public License, version 2, hence the version number 2.1.] Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public Licenses are intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This license, the Lesser General Public License, applies to some specially designated software packages--typically libraries--of the Free Software Foundation and other authors who decide to use it. You can use it too, but we suggest you first think carefully about whether this license or the ordinary General Public License is the better strategy to use in any particular case, based on the explanations below. When we speak of free software, we are referring to freedom of use, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish); that you receive source code or can get it if you want it; that you can change the software and use pieces of it in new free programs; and that you are informed that you can do these things. To protect your rights, we need to make restrictions that forbid distributors to deny you these rights or to ask you to surrender these rights. These restrictions translate to certain responsibilities for you if you distribute copies of the library or if you modify it. For example, if you distribute copies of the library, whether gratis or for a fee, you must give the recipients all the rights that we gave you. You must make sure that they, too, receive or can get the source code. If you link other code with the library, you must provide complete object files to the recipients, so that they can relink them with the library after making changes to the library and recompiling it. And you must show them these terms so they know their rights. We protect your rights with a two-step method: (1) we copyright the library, and (2) we offer you this license, which gives you legal permission to copy, distribute and/or modify the library. To protect each distributor, we want to make it very clear that there is no warranty for the free library. Also, if the library is modified by someone else and passed on, the recipients should know that what they have is not the original version, so that the original author's reputation will not be affected by problems that might be introduced by others. Finally, software patents pose a constant threat to the existence of any free program. We wish to make sure that a company cannot effectively restrict the users of a free program by obtaining a restrictive license from a patent holder. Therefore, we insist that any patent license obtained for a version of the library must be consistent with the full freedom of use specified in this license. Most GNU software, including some libraries, is covered by the ordinary GNU General Public License. This license, the GNU Lesser General Public License, applies to certain designated libraries, and is quite different from the ordinary General Public License. We use this license for certain libraries in order to permit linking those libraries into non-free programs. When a program is linked with a library, whether statically or using a shared library, the combination of the two is legally speaking a combined work, a derivative of the original library. The ordinary General Public License therefore permits such linking only if the entire combination fits its criteria of freedom. The Lesser General Public License permits more lax criteria for linking other code with the library. We call this license the "Lesser" General Public License because it does Less to protect the user's freedom than the ordinary General Public License. It also provides other free software developers Less of an advantage over competing non-free programs. These disadvantages are the reason we use the ordinary General Public License for many libraries. However, the Lesser license provides advantages in certain special circumstances. For example, on rare occasions, there may be a special need to encourage the widest possible use of a certain library, so that it becomes a de-facto standard. To achieve this, non-free programs must be allowed to use the library. A more frequent case is that a free library does the same job as widely used non-free libraries. In this case, there is little to gain by limiting the free library to free software only, so we use the Lesser General Public License. In other cases, permission to use a particular library in non-free programs enables a greater number of people to use a large body of free software. For example, permission to use the GNU C Library in non-free programs enables many more people to use the whole GNU operating system, as well as its variant, the GNU/Linux operating system. Although the Lesser General Public License is Less protective of the users' freedom, it does ensure that the user of a program that is linked with the Library has the freedom and the wherewithal to run that program using a modified version of the Library. The precise terms and conditions for copying, distribution and modification follow. Pay close attention to the difference between a "work based on the library" and a "work that uses the library". The former contains code derived from the library, whereas the latter must be combined with the library in order to run. GNU LESSER GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License Agreement applies to any software library or other program which contains a notice placed by the copyright holder or other authorized party saying it may be distributed under the terms of this Lesser General Public License (also called "this License"). Each licensee is addressed as "you". A "library" means a collection of software functions and/or data prepared so as to be conveniently linked with application programs (which use some of those functions and data) to form executables. The "Library", below, refers to any such software library or work which has been distributed under these terms. A "work based on the Library" means either the Library or any derivative work under copyright law: that is to say, a work containing the Library or a portion of it, either verbatim or with modifications and/or translated straightforwardly into another language. (Hereinafter, translation is included without limitation in the term "modification".) "Source code" for a work means the preferred form of the work for making modifications to it. For a library, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the library. Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running a program using the Library is not restricted, and output from such a program is covered only if its contents constitute a work based on the Library (independent of the use of the Library in a tool for writing it). Whether that is true depends on what the Library does and what the program that uses the Library does. 1. You may copy and distribute verbatim copies of the Library's complete source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and distribute a copy of this License along with the Library. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Library or any portion of it, thus forming a work based on the Library, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) The modified work must itself be a software library. b) You must cause the files modified to carry prominent notices stating that you changed the files and the date of any change. c) You must cause the whole of the work to be licensed at no charge to all third parties under the terms of this License. d) If a facility in the modified Library refers to a function or a table of data to be supplied by an application program that uses the facility, other than as an argument passed when the facility is invoked, then you must make a good faith effort to ensure that, in the event an application does not supply such function or table, the facility still operates, and performs whatever part of its purpose remains meaningful. (For example, a function in a library to compute square roots has a purpose that is entirely well-defined independent of the application. Therefore, Subsection 2d requires that any application-supplied function or table used by this function must be optional: if the application does not supply it, the square root function must still compute square roots.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Library, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you d
URLs
  • http://www.boost.org/

  • http://code.google.com/p/protobuf/

  • https://bitbucket.org/xi/libyaml/src

  • http://code.google.com/p/yaml-cpp/

  • http://qt.nokia.com/products/

  • http://qt.nokia.com/

  • http://www.libpng.org

  • http://zlib.net/

  • http://www.openssl.org/

  • http://www.openssl.org/)"

  • http://curl.haxx.se/libcurl/

  • http://jquery.com/

  • https://github.com/allmarkedup/jQuery-URL-Parser

  • http://unlicense.org/

  • http://code.google.com/p/chromiumembedded

  • http://chromium.org

  • http://www.netlib.org/fp/

  • http://code.google.com/p/data-race-test/wiki/DynamicAnnotations

  • http://www.mozilla.org/projects/nspr/

  • http://www.mozilla.org/MPL/

Extracted

Path
  • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\shareplay\LICENSES.txt

Ransom Note
  • External libraries used in the Ubisoft Streaming Client and their Licenses: ################################################################################ HIDAPI: https://github.com/signal11/hidapi Copyright 2009, Alan Ott, Signal 11 Software. All Rights Reserved. This software may be used by anyone for any reason so long as the copyright notice in the source files remains intact. Nlohmann JSON: https://github.com/nlohmann/json MIT License Copyright (c) 2013-2020 Niels Lohmann Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files(the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions : The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. usrsctp: https://github.com/sctplab/usrsctp BSD-3-Clause License Copyright (c) 2015, Randall Stewart and Michael Tuexen All rights reserved.Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: - Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. - Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. - Neither the name of usrsctp nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. libmatoya: https://github.com/matoya/libmatoya MIT License Copyright (c) Christopher D. Dickson <[email protected]> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files(the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions : The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. miniupnpc https://github.com/miniupnp/miniupnp BSD-3-Clause License Copyright (c) 2005-2020, Thomas BERNARD All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: - Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. - Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. - Neither the name of usrsctp nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. libsamplerate https://github.com/libsndfile/libsamplerate BSD-2-Clause License Copyright (c) 2012-2016, Erik de Castro Lopo <[email protected]> All rights reserved.Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: - Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. - Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. openh264 https://github.com/cisco/openh264 BSD-2-Clause License Copyright (c) 2013, Cisco Systems All rights reserved.Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: - Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. - Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. libmfx (Intel Media SDK loader) https://github.com/Intel-Media-SDK/MediaSDK/tree/master/api/mfx_dispatch MIT License Copyright (c) 2017 Intel Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files(the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions : The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Additionally, this application may use the following components if installed: - OpenGL https://github.com/KhronosGroup/OpenGL-Registry - Intel Media SDK https://github.com/Intel-Media-SDK/MediaSDK - NVidia Video Codec SDK https://developer.nvidia.com/nvidia-video-codec-sdk - AMD AMF https://github.com/GPUOpen-LibrariesAndSDKs/AMF Qt WebEngine https://github.com/qt/qtwebengine See licensing information at https://doc.qt.io/qt-5/qtwebengine-licensing.html Third party licenses included in the sources are below. ANGLE array bounds clamper from WebKit http://webkit.org Copyright (C) 2012 Apple Inc. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY APPLE, INC. ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE, INC. OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ARCore SDK https://github.com/google-ar/arcore-android-sdk Copyright (c) 2017, Google Inc. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those p
Emails
URLs
  • https://github.com/signal11/hidapi

  • https://github.com/nlohmann/json

  • https://github.com/sctplab/usrsctp

  • https://github.com/matoya/libmatoya

  • https://github.com/miniupnp/miniupnp

  • https://github.com/libsndfile/libsamplerate

  • https://github.com/cisco/openh264

  • https://github.com/Intel-Media-SDK/MediaSDK/tree/master/api/mfx_dispatch

  • https://github.com/KhronosGroup/OpenGL-Registry

  • https://github.com/Intel-Media-SDK/MediaSDK

  • https://developer.nvidia.com/nvidia-video-codec-sdk

  • https://github.com/GPUOpen-LibrariesAndSDKs/AMF

  • https://github.com/qt/qtwebengine

  • https://doc.qt.io/qt-5/qtwebengine-licensing.html

  • http://webkit.org

  • https://github.com/google-ar/arcore-android-sdk

  • http://www.apache.org/licenses/

  • https://developers.google.com/ar/develop/java/enable-arcore#dependencies

  • http://www.apache.org/licenses/LICENSE-2.0

  • https://github.com/dequelabs/axe-core/

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Executes dropped EXE 12 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 42 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies registry class 16 IoCs
  • Suspicious behavior: EnumeratesProcesses 11 IoCs
  • Suspicious use of WriteProcessMemory 62 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\UbisoftConnectInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\UbisoftConnectInstaller.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe
      "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe" "uplay://open/"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:1100
      • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
        "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe" uplay://open/
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Suspicious behavior: EnumeratesProcesses
        PID:1652
    • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe
      "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe" "uplay://open/"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:784
      • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
        "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe" uplay://open/
        3⤵
        • Executes dropped EXE
        • Checks computer location settings
        • Loads dropped DLL
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Drops file in Program Files directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:1812
        • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayService.exe
          "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayService.exe" -uplayservice_perform_updates
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Drops file in Program Files directory
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          PID:432
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\System32\regsvr32.exe" /u /s npuplaypc.dll
          4⤵
          • Loads dropped DLL
          PID:1460
        • C:\Windows\SysWOW64\regsvr32.exe
          "C:\Windows\System32\regsvr32.exe" /u /s npuplaypchub.dll
          4⤵
          • Loads dropped DLL
          PID:1584
        • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
          "C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/UplayWebCore.exe" --type=gpu-process --field-trial-handle=1532,6716793713311001325,7367552206027047357,131072 --disable-features=CalculateNativeWinOcclusion --no-sandbox --locales-dir-path="C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/locales/1" --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --log-severity=disable --lang=en-US --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --mojo-platform-channel-handle=1552 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:656
        • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
          "C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/UplayWebCore.exe" --type=renderer --no-sandbox --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --field-trial-handle=1532,6716793713311001325,7367552206027047357,131072 --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/locales/1" --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --log-severity=disable --disable-spell-checking --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1908 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Checks computer location settings
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1992
        • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
          "C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/UplayWebCore.exe" --type=renderer --no-sandbox --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --field-trial-handle=1532,6716793713311001325,7367552206027047357,131072 --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/locales/1" --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --log-severity=disable --disable-spell-checking --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1960 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Checks computer location settings
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1656
        • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
          "C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/UplayWebCore.exe" --type=renderer --no-sandbox --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --field-trial-handle=1532,6716793713311001325,7367552206027047357,131072 --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --locales-dir-path="C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/locales/1" --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --log-severity=disable --disable-spell-checking --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1932 /prefetch:1
          4⤵
          • Executes dropped EXE
          PID:1520
        • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
          "C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/UplayWebCore.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,6716793713311001325,7367552206027047357,131072 --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=none --no-sandbox --locales-dir-path="C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/locales/1" --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --log-severity=disable --lang=en-US --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --mojo-platform-channel-handle=2088 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops file in Program Files directory
          • Suspicious behavior: EnumeratesProcesses
          PID:1800
        • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
          "C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/UplayWebCore.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1532,6716793713311001325,7367552206027047357,131072 --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=utility --no-sandbox --locales-dir-path="C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/locales/1" --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --log-severity=disable --lang=en-US --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --mojo-platform-channel-handle=2064 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1084
        • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
          "C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/UplayWebCore.exe" --type=gpu-process --field-trial-handle=1532,6716793713311001325,7367552206027047357,131072 --disable-features=CalculateNativeWinOcclusion --no-sandbox --locales-dir-path="C:/Program Files (x86)/Ubisoft/Ubisoft Game Launcher/locales/1" --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --log-severity=disable --lang=en-US --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --log-file="C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\debug.log" --mojo-platform-channel-handle=1552 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1664

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Installed_files.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Installed_files.txt
        • Size 34KB
        • SHA256 66ec374700a28eeee98f6cd97b1abadf5b8936d0314c5a21457961b488b61135
        • MD5 SHA1 SHA512 SSDEEP

        Installed_files.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Installed_files.txt
        • Size 34KB
        • SHA256 66ec374700a28eeee98f6cd97b1abadf5b8936d0314c5a21457961b488b61135
        • MD5 SHA1 SHA512 SSDEEP

        UbisoftConnect.exe

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe
        • Size 507KB
        • SHA256 6cf21664c95bb7ff85550878ae1cd236f012f87ec3e54760ffb31d6595974bd8
        • MD5 SHA1 SHA512 SSDEEP

        UbisoftConnect.exe

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe
        • Size 507KB
        • SHA256 6cf21664c95bb7ff85550878ae1cd236f012f87ec3e54760ffb31d6595974bd8
        • MD5 SHA1 SHA512 SSDEEP

        UplayService.exe

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayService.exe
        • Size 5.9MB
        • SHA256 52490247d5155f154295518541e78c8b3944553b9eb035bf9160db588fc635ca
        • MD5 SHA1 SHA512 SSDEEP

        UplayService.exe

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayService.exe
        • Size 5.9MB
        • SHA256 52490247d5155f154295518541e78c8b3944553b9eb035bf9160db588fc635ca
        • MD5 SHA1 SHA512 SSDEEP

        chrome_elf.dll

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\chrome_elf.dll
        • Size 930KB
        • SHA256 963c0198265b8ecc295852a6f4423768d228bc2c039e8aaca032ee47faa54b88
        • MD5 SHA1 SHA512 SSDEEP

        cs-CZ_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\cs-CZ_loc.txt
        • Size 105KB
        • SHA256 c4e237e6d5c4130fbc76fff70dfca0191383b67f9ba79824be172180d0ccf193
        • MD5 SHA1 SHA512 SSDEEP

        da-DK_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\da-DK_loc.txt
        • Size 100KB
        • SHA256 82f25b22109f46090839b8e7902acc203454fe4005856a9392deb21ff269dbd1
        • MD5 SHA1 SHA512 SSDEEP

        de-DE_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\de-DE_loc.txt
        • Size 109KB
        • SHA256 e6699387c06e79b5b2c1a477097a3cfb36196baad43410268c9cb62add068eec
        • MD5 SHA1 SHA512 SSDEEP

        en-CA_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\en-CA_loc.txt
        • Size 98KB
        • SHA256 d9d0fa43f2c850b2f01ac907259adf13847ea79f372128a8f26e4f101f45b3e6
        • MD5 SHA1 SHA512 SSDEEP

        en-US_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\en-US_loc.txt
        • Size 98KB
        • SHA256 1d9ebb1aa6b44ace45b13fe3b27e5514a61b5015371daca2683530de36498c60
        • MD5 SHA1 SHA512 SSDEEP

        en-US_release_notes.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\en-US_release_notes.txt
        • Size 169KB
        • SHA256 3e94fc4cae41d3d9521ad63198cb5df1c040933331af90d50abeec0a3bb3a60e
        • MD5 SHA1 SHA512 SSDEEP

        es-ES_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\es-ES_loc.txt
        • Size 106KB
        • SHA256 60b247e8ffb6ee6669d65fdcba902ad03b4cb6b89c9a91d1c8941813d9c368fe
        • MD5 SHA1 SHA512 SSDEEP

        es-MX_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\es-MX_loc.txt
        • Size 105KB
        • SHA256 db378b95207f3bab2d4c37bc00b1b15bf852f76362d43d5906da85f1a3f5aeb4
        • MD5 SHA1 SHA512 SSDEEP

        fi-FI_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\fi-FI_loc.txt
        • Size 101KB
        • SHA256 3cad54b113a30bb76cd2ff8be51b5f9944bbdcfc97f64268d6321523e5ecf76d
        • MD5 SHA1 SHA512 SSDEEP

        fr-FR_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\fr-FR_loc.txt
        • Size 110KB
        • SHA256 4bc222c8748d4ffbe298b31c2d11182b443df9529e8f123178a09fa4fb28c082
        • MD5 SHA1 SHA512 SSDEEP

        hu-HU_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\hu-HU_loc.txt
        • Size 108KB
        • SHA256 06ea14f40e5933c12e6e7ba5489d59cf5ac40af604f162d8784437e83ee08ba9
        • MD5 SHA1 SHA512 SSDEEP

        it-IT_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\it-IT_loc.txt
        • Size 103KB
        • SHA256 43d5e499a7b77124169470c66a5b082acf766122e42137784c86090ab4caa986
        • MD5 SHA1 SHA512 SSDEEP

        ja-JP_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\ja-JP_loc.txt
        • Size 119KB
        • SHA256 b7cf65c7adbe9a8ba66a67ce2ceb0a6ba2ed2f37761840902244351aed398d68
        • MD5 SHA1 SHA512 SSDEEP

        ko-KO_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\ko-KO_loc.txt
        • Size 106KB
        • SHA256 5ef5d93c2c9d4b0d5f6d12aed9bbc69d113296a8e18e8b4d30415031c6782897
        • MD5 SHA1 SHA512 SSDEEP

        nb-NO_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\nb-NO_loc.txt
        • Size 100KB
        • SHA256 ab5662a687b91a602cabb3682286dd61a148442e4f249fe4eb7b4bb2eb1e2726
        • MD5 SHA1 SHA512 SSDEEP

        nl-NL_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\nl-NL_loc.txt
        • Size 102KB
        • SHA256 aa44927f273cda79d0daedb794b4d115eef95a7db895e50b598280aad0bd05ed
        • MD5 SHA1 SHA512 SSDEEP

        pl-PL_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\pl-PL_loc.txt
        • Size 106KB
        • SHA256 b4a0008d87d0e98717329af216a132bda627c69b5fbd6b4129975d18e29e1af8
        • MD5 SHA1 SHA512 SSDEEP

        pt-BR_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\pt-BR_loc.txt
        • Size 103KB
        • SHA256 3e443e97653e07e171445bef14864020a70bffab7a39f044226f32194314a653
        • MD5 SHA1 SHA512 SSDEEP

        pt-PT_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\pt-PT_loc.txt
        • Size 105KB
        • SHA256 021f3d832dfe09533186d056a7cd4e63352adfbd849fb106bd1fd17ea90822cf
        • MD5 SHA1 SHA512 SSDEEP

        ru-RU_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\ru-RU_loc.txt
        • Size 144KB
        • SHA256 de358c54dcc48cf6aa034f711f20033bee3b3654d2fd742ebd9d362a4e2b0b02
        • MD5 SHA1 SHA512 SSDEEP

        sv-SE_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\sv-SE_loc.txt
        • Size 99KB
        • SHA256 62f296a266d67f6196c75139bcc47b831fbd9b0a0619499d150c885cf45289d5
        • MD5 SHA1 SHA512 SSDEEP

        th-TH_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\th-TH_loc.txt
        • Size 177KB
        • SHA256 3e8da69b4b7f00d309942b35569b9c6c20f57b178f76312f3e247e6421eaa9ee
        • MD5 SHA1 SHA512 SSDEEP

        tr-TR_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\tr-TR_loc.txt
        • Size 104KB
        • SHA256 343092621cd2d63bcb716ba487b87c869b2bb407fc9c6dbb0b6c7867a7da0e53
        • MD5 SHA1 SHA512 SSDEEP

        uk-UA_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\uk-UA_loc.txt
        • Size 144KB
        • SHA256 03f65adeadeb09a76f6edf9d0ccde9839b67c6b66670eb3e94137967c1557b39
        • MD5 SHA1 SHA512 SSDEEP

        zh-CN_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\zh-CN_loc.txt
        • Size 93KB
        • SHA256 18969ba46a56a7568e0cbe46a9b3f03e01c590ed32b8a55f88ff0d9189605efd
        • MD5 SHA1 SHA512 SSDEEP

        zh-TW_loc.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\loc\zh-TW_loc.txt
        • Size 93KB
        • SHA256 8fbcbb81686326c7ac7bb8485d2d70fe424c81fad24318db9a32795ba35b3012
        • MD5 SHA1 SHA512 SSDEEP

        default_avatar.png

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\data\resources\default_avatar.png
        • Size 1KB
        • SHA256 769d191e1e60deda2aab490dda21e8b93aa97d68817bb88994fe5369be62d67a
        • MD5 SHA1 SHA512

        gear_core_win32DLL.dll

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\gear_core_win32DLL.dll
        • Size 1.0MB
        • SHA256 21fbe2fdf4ae9674beb77171ba91fb989335a00ab86dc4d5912852ca748e18e4
        • MD5 SHA1 SHA512 SSDEEP

        gear_detection_win32DLL.dll

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\gear_detection_win32DLL.dll
        • Size 745KB
        • SHA256 abb3378327a8f8dd4f4fc010cb7dd9441b751bfcbe8ca22932fd80a1959add99
        • MD5 SHA1 SHA512 SSDEEP

        libUbiCustomEvent.dll

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\libUbiCustomEvent.dll
        • Size 42KB
        • SHA256 cda475f8cbbed22ca43a8e52c957ff7c14170fde34e7931896ed26bab166f3dc
        • MD5 SHA1 SHA512 SSDEEP

        libcef.dll

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\libcef.dll
        • Size 125.1MB
        • SHA256 07291d57103967bcce2e856e28a63166f4d6fdcdfb2bfca353f5f73b54b1c8c4
        • MD5 SHA1 SHA512 SSDEEP

        upc.exe

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
        • Size 16.4MB
        • SHA256 d5405f4ecbb2dcef5ac1d593b091ac923f04c4f9d02849494a5e769d38e0ff98
        • MD5 SHA1 SHA512 SSDEEP

        upc.exe

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
        • Size 16.4MB
        • SHA256 d5405f4ecbb2dcef5ac1d593b091ac923f04c4f9d02849494a5e769d38e0ff98
        • MD5 SHA1 SHA512 SSDEEP

        upc.exe

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
        • Size 16.4MB
        • SHA256 d5405f4ecbb2dcef5ac1d593b091ac923f04c4f9d02849494a5e769d38e0ff98
        • MD5 SHA1 SHA512 SSDEEP

        version.txt

        • Path C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\version.txt
        • Size 5B
        • SHA256 535c1c2c5131806c49e150d99d5be7d81aeac18a155b862a2c753534931978d8
        • MD5 SHA1 SHA512

        UbisoftConnect.exe

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe
        • Size 507KB
        • SHA256 6cf21664c95bb7ff85550878ae1cd236f012f87ec3e54760ffb31d6595974bd8
        • MD5 SHA1 SHA512 SSDEEP

        UbisoftConnect.exe

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe
        • Size 507KB
        • SHA256 6cf21664c95bb7ff85550878ae1cd236f012f87ec3e54760ffb31d6595974bd8
        • MD5 SHA1 SHA512 SSDEEP

        UbisoftConnect.exe

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe
        • Size 507KB
        • SHA256 6cf21664c95bb7ff85550878ae1cd236f012f87ec3e54760ffb31d6595974bd8
        • MD5 SHA1 SHA512 SSDEEP

        UbisoftConnect.exe

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe
        • Size 507KB
        • SHA256 6cf21664c95bb7ff85550878ae1cd236f012f87ec3e54760ffb31d6595974bd8
        • MD5 SHA1 SHA512 SSDEEP

        Uninstall.exe

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uninstall.exe
        • Size 285KB
        • SHA256 3993a87611a27cfa6f7f9bd84f058812286f0fe45ae63a8ffadd89f9a7d78eea
        • MD5 SHA1 SHA512 SSDEEP

        UplayService.exe

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayService.exe
        • Size 5.9MB
        • SHA256 52490247d5155f154295518541e78c8b3944553b9eb035bf9160db588fc635ca
        • MD5 SHA1 SHA512 SSDEEP

        chrome_elf.dll

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\chrome_elf.dll
        • Size 930KB
        • SHA256 963c0198265b8ecc295852a6f4423768d228bc2c039e8aaca032ee47faa54b88
        • MD5 SHA1 SHA512 SSDEEP

        chrome_elf.dll

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\chrome_elf.dll
        • Size 930KB
        • SHA256 963c0198265b8ecc295852a6f4423768d228bc2c039e8aaca032ee47faa54b88
        • MD5 SHA1 SHA512 SSDEEP

        gear_core_win32DLL.dll

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\gear_core_win32DLL.dll
        • Size 1.0MB
        • SHA256 21fbe2fdf4ae9674beb77171ba91fb989335a00ab86dc4d5912852ca748e18e4
        • MD5 SHA1 SHA512 SSDEEP

        gear_detection_win32DLL.dll

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\gear_detection_win32DLL.dll
        • Size 745KB
        • SHA256 abb3378327a8f8dd4f4fc010cb7dd9441b751bfcbe8ca22932fd80a1959add99
        • MD5 SHA1 SHA512 SSDEEP

        libUbiCustomEvent.dll

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\libUbiCustomEvent.dll
        • Size 42KB
        • SHA256 cda475f8cbbed22ca43a8e52c957ff7c14170fde34e7931896ed26bab166f3dc
        • MD5 SHA1 SHA512 SSDEEP

        libUbiCustomEvent.dll

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\libUbiCustomEvent.dll
        • Size 42KB
        • SHA256 cda475f8cbbed22ca43a8e52c957ff7c14170fde34e7931896ed26bab166f3dc
        • MD5 SHA1 SHA512 SSDEEP

        libcef.dll

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\libcef.dll
        • Size 125.1MB
        • SHA256 07291d57103967bcce2e856e28a63166f4d6fdcdfb2bfca353f5f73b54b1c8c4
        • MD5 SHA1 SHA512 SSDEEP

        libcef.dll

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\libcef.dll
        • Size 125.1MB
        • SHA256 07291d57103967bcce2e856e28a63166f4d6fdcdfb2bfca353f5f73b54b1c8c4
        • MD5 SHA1 SHA512 SSDEEP

        upc.exe

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
        • Size 16.4MB
        • SHA256 d5405f4ecbb2dcef5ac1d593b091ac923f04c4f9d02849494a5e769d38e0ff98
        • MD5 SHA1 SHA512 SSDEEP

        upc.exe

        • Path \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
        • Size 16.4MB
        • SHA256 d5405f4ecbb2dcef5ac1d593b091ac923f04c4f9d02849494a5e769d38e0ff98
        • MD5 SHA1 SHA512 SSDEEP

        AccessControl.dll

        • Path \Users\Admin\AppData\Local\Temp\nsd36EA.tmp\AccessControl.dll
        • Size 8KB
        • SHA256 ccc6aaf1071d9077475b574d9bf1fc23de40a06547fc90cf4255a44d3bf631ac
        • MD5 SHA1 SHA512 SSDEEP

        LangDLL.dll

        • Path \Users\Admin\AppData\Local\Temp\nsd36EA.tmp\LangDLL.dll
        • Size 5KB
        • SHA256 20e642707ef82852bcf153254cb94b629b93ee89a8e8a03f838eef6cbb493319
        • MD5 SHA1 SHA512 SSDEEP

        System.dll

        • Path \Users\Admin\AppData\Local\Temp\nsd36EA.tmp\System.dll
        • Size 12KB
        • SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
        • MD5 SHA1 SHA512 SSDEEP

        nsArray.dll

        • Path \Users\Admin\AppData\Local\Temp\nsd36EA.tmp\nsArray.dll
        • Size 12KB
        • SHA256 216d68d3f0b37bb2203b3a438a84a089e8c388608f46377ad7e7d6a2709cf9b0
        • MD5 SHA1 SHA512 SSDEEP

        nsDialogs.dll

        • Path \Users\Admin\AppData\Local\Temp\nsd36EA.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 c5ba017732597a82f695b084d1aa7fe3b356168cc66105b9392a9c5b06be5188
        • MD5 SHA1 SHA512 SSDEEP

        registry.dll

        • Path \Users\Admin\AppData\Local\Temp\nsd36EA.tmp\registry.dll
        • Size 24KB
        • SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
        • MD5 SHA1 SHA512 SSDEEP

        memory/432-112-0x00000000003C0000-0x00000000010AC000-memory.dmp

        memory/432-143-0x00000000003C0000-0x00000000010AC000-memory.dmp

        memory/1652-151-0x0000000000240000-0x00000000044A2000-memory.dmp

        memory/1652-99-0x0000000000240000-0x00000000044A2000-memory.dmp

        memory/1720-54-0x00000000753F1000-0x00000000753F3000-memory.dmp

        memory/1720-63-0x00000000741B0000-0x00000000741BB000-memory.dmp

        memory/1812-148-0x0000000000240000-0x00000000044A2000-memory.dmp

        memory/1812-102-0x00000000001F0000-0x00000000001FA000-memory.dmp

        memory/1812-152-0x0000000006CD0000-0x0000000006CE6000-memory.dmp

        memory/1812-93-0x0000000000240000-0x00000000044A2000-memory.dmp

        memory/1812-91-0x0000000000240000-0x00000000044A2000-memory.dmp

        memory/1812-162-0x00000000001F0000-0x00000000001FA000-memory.dmp