Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

28/04/2024, 19:25

240428-x48q9sfa95 8

28/04/2024, 18:48

240428-xfrsvaec46 7

Analysis

  • max time kernel
    357s
  • max time network
    359s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 18:48

General

  • Target

    lws110_x64.exe

  • Size

    51.1MB

  • MD5

    8756b799be8b2f7b73f8f7231cb0a33a

  • SHA1

    8e9b0cf258b79590a8cbbb0df44d0775b0e742ad

  • SHA256

    14849d81f2800f56090e0db57937fb1bc77744a69a30df91e212186fb873f23e

  • SHA512

    ec2f8d06b245d14f170b2204d24c6da8007920fec070f48936d034ab01b0c49ca935f1697fa7b278d3a32becfbeeb20b088d7c324bc302804c1b26db53639959

  • SSDEEP

    1572864:aOSabL9nvPr2rNVUvcGsk7oNXAHDkf+EEgbGCX0CeqHMXoG5:jRL972rNRaklHf+ebGCXSuMF

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 11 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 11 IoCs
  • Suspicious use of WriteProcessMemory 42 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\lws110_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\lws110_x64.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2068
    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\setup.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1292
      • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup64.exe
        "C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup64.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2620
        • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\UnstLgcy.exe
          "C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\UnstLgcy.exe"
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:976
        • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\SetupCloser.exe
          "C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\SetupCloser.exe"
          4⤵
          • Executes dropped EXE
          PID:2980
        • C:\Windows\system32\cmd.exe
          "C:\Windows\system32\cmd.exe" /c del %TEMP%\a1_lws*.exe
          4⤵
            PID:1584
          • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\Setup.exe
            "C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\Setup.exe" -lang=enu
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of WriteProcessMemory
            PID:2904
            • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\MSetup.exe
              "C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\MSetup.exe" -lang=enu
              5⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates connected drives
              • Checks processor information in registry
              • Modifies Internet Explorer settings
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of SetWindowsHookEx
              PID:2996
    • C:\Windows\system32\msiexec.exe
      C:\Windows\system32\msiexec.exe /V
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1392

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\Bootstrap2_log.txt

      Filesize

      1KB

      MD5

      46149367c610af41ee82de6bcbab1c08

      SHA1

      4b4e87ea35754187b575dfa1d25a8c31e9646030

      SHA256

      84c8147ab1b52034592376eff2ebae5bd7168cc1de45d72482ceea316c815d4f

      SHA512

      27304ed7ae5a5021a68bf639e6e2f036e8f06e1b293ea1d5801473360781bb66ef67d77caf7db129bf04f88c601291982d6c61079cdcbd9d3fe80143ea282dde

    • C:\Users\Admin\AppData\Local\Temp\Bootstrap2_log.txt

      Filesize

      4KB

      MD5

      aa98a80a76f2fc07f3d46fb6b5710589

      SHA1

      35d37d32f68430156f56febb3122fd96db4e5fd4

      SHA256

      064c5c87acef203dc80a847ace762e11766c625764e721e939dc36ac54484600

      SHA512

      203840d6f2d79647f762a24915710bb9dd831e1e70d4ac00a309c43bea04ce9f1da9ff241980f2af0633db6f37fc6e31b6bef92379d2a5930469fcfdabf1abc5

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Drivers\x64\ELCH64\lELCH64v.inf

      Filesize

      57KB

      MD5

      da0a7355f77b7958b925b975c23b2406

      SHA1

      820478c96e0a61d99b2fb9900bf74e4abe60863c

      SHA256

      33c122c39f896bfac63c1628cd750b069cab360af0cb75c7e8b24fc9a98a53c3

      SHA512

      974f47f7326cc9472f9684fe857db1791c62b716929f704f8cc9b988e0ae8050652c9a73c074c342489b44ad0232d4ec95629196cd4c730878cb4a21999ba7e8

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Drivers\x64\IM264\lPEPI264s.inf

      Filesize

      33KB

      MD5

      04fc0aba72ee11d27b55639fc7f57d15

      SHA1

      a81e4cbbba3395aa419bee3a72bdcca76488607a

      SHA256

      552010fe7220624078c803d5cda39992d880f71e5e36c38c9259ab68d415cbaa

      SHA512

      df6126b59ff1635c13754b2db0c0e56faf2e4c0eba49c663d37141b874af3ba82d6ee2a816dc5854928efe0efee55d896592b4dbde6027c6212a97f523f715c9

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Drivers\x64\IM264\lPEPI264v.inf

      Filesize

      105KB

      MD5

      1b9f12e0e0326c43bc73b655d541fdce

      SHA1

      3e88a911800e3d2e7ddcbf5d28c729f86c1c30f7

      SHA256

      bf22e4be086bbfe480f4127e267d9de894b8a95869d61db424b8c9557bc41cdb

      SHA512

      6f82b40d7209b08152bebfe92737041694d01d56486c3595670c7e3769ba3dd06a24173824c0422da437d6786ca19768a5f2af1e71c868f457b75f9e161ec361

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Drivers\x64\PRO564\lPRO564s.inf

      Filesize

      115KB

      MD5

      e93e93a208543cb7de9bf078bc243243

      SHA1

      01b7862c4ccb37eaf2b2c0b74acd0f91c94bce48

      SHA256

      c1af18e5e6ecd2295f83da8272ab8b09afe89626ee86e7f5b63c16671ed1bc73

      SHA512

      bee708cbb016712f8b3834fc880ba15d0367db1b06c44e7c0af694a8921da25695c893681ddc5e7974375b7c326976ea8fbac3c1ce391e7628b9c8e841710ed8

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Drivers\x64\PRO564\lPRO564v.inf

      Filesize

      270KB

      MD5

      71a3645a1037e8db8522b901ddda6071

      SHA1

      adca3e0b86da509e0eca014908f7f8008332d91d

      SHA256

      e00f6a0fb6527537f770dde07f1209c5cf00783150ee56a35ae1a0cbbd03cf90

      SHA512

      6f34876bf056ee3e38153b5d95207bd36fe91732dcfd18cbf930c1e842eac05ef3a39cca5e8ec9644de8ca1377c43a6784ca6100cf06d6e66a02b89a55dc5fed

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Drivers\x64\PRO564\lvcoin64.ini

      Filesize

      80KB

      MD5

      3cd1705d96bed331d53a845dc31078de

      SHA1

      147a07768acda9c57e269e7cc9c70fee6e9575ae

      SHA256

      12e7f6554ab7ae6eedabb612c21acef4cae8a3eb3da819cbadeb3dfafda9658a

      SHA512

      7ceadb0a064621d7d0abf9e33ac2b225d1bbb461803a0c17bc82b7ecc3e14ef82958b2aec157620417e863a628844ff1044ec66a6d028ba60643b9719cfe2224

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\LWS\LWS64.msi

      Filesize

      15.2MB

      MD5

      6b9b5a76e913a9feec624c35a67524e5

      SHA1

      7455b81c2e04cf292a1bbdad1fd7c0afda2a6297

      SHA256

      b4380be540ff37f13db4799465a8c24828916b6b3d1aa9b1179aeeffee840255

      SHA512

      d33c651a6f10bf607dc4b24a921d1c479a23e57d6280118440e265393bc3c107b9bbcfffa5f35f561ea1d18899f58d374bae32109c5e9a38686e917a8d43b741

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup.ini

      Filesize

      60KB

      MD5

      131e44210e82c222f15b930604945bf3

      SHA1

      0cde3bb27d2160e599151bcceb217bb0ea85a1cb

      SHA256

      bc2f8d07861f85aa49afe39ca37ce0f3712e34b0e73f7c5db4324d9ce7e21210

      SHA512

      ba9a903f2eab5334503f6789df252ef0ec37ad1600c553648d51fc74fc91f9182b41d9626283054816897b6b284940246156c204fc9379b2a50f8af193c0f2f9

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup64.exe

      Filesize

      482KB

      MD5

      e5f8869c484b07a370346ee91f9a514a

      SHA1

      708a5a54e5c5bef7edfa7f70f37d7580c39759b0

      SHA256

      ad180af2ae0a4bc964404e2af1a4dbea04f0eb7258b7507559e91b33407ec9b0

      SHA512

      6c888acc1b846a1da368064d7c69a3fd1152ed7acc465cb46649bfeb3279cc1d9706b6220589b4b29340b7a51c98d143ca533a36fd1f3efc3dca1aef44a46608

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\SetupCloser.exe

      Filesize

      181KB

      MD5

      ced7fed95eab2c2b7dcb73e04f9f01e2

      SHA1

      3818d7876e59b43dd673e49efaf0d60dee010213

      SHA256

      2e85ec4350efb7d10d21860af6759f2a03eb949a4a273c4f96cd6b88c07dc4cc

      SHA512

      62c654fc6656c8e17957c52bfc5e6e0d9d5369278f3dee1d842efd2fc7c9ce255ceba4c6741b560b26915bd227d1a2619b7dda332ef07ba979a7cec3d02be9c7

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\MSetup.exe

      Filesize

      865KB

      MD5

      85e1f18011b8f880c721a03f9e716c21

      SHA1

      7c1eb376e3e2691ff8968bfc2c32965912bfa976

      SHA256

      98bcee7ed570b3c77a727c054311459585b001b1fd7d083d62f6c8795beb8bdb

      SHA512

      452c74976f7d7089436b6b11ab3bea3a46d59361c619835ac0feee8a034c2aa1ae1f6cf085c2a9185359a2c10d15752b53e274d3ad7e50bff2d40647a66825ce

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\Setup.exe

      Filesize

      121KB

      MD5

      c386e3a4472aa5b5533ca8f38168062e

      SHA1

      c709a6b2900b7e599d006750a1b68ed3a2dd1950

      SHA256

      99369ac798aba3b0e51c8cc5e1cbeb52aa95c7aae5f3290b732ebea8a103257f

      SHA512

      7da78ccced3ee80805fb158c278c3dacac4df4c0f22ce4ed08b28699d9d18643d78ffb4cdf4521877984c94e8fa997b826d3e4ccc46e341bca3a175976a6990e

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\SetupDll.dll

      Filesize

      61KB

      MD5

      19dd9d58074097f7217223756a77a2c7

      SHA1

      a1b9b2334ab2cf4977538acdd0c204348410243d

      SHA256

      685aa3ad17112bb2d57009751f5f0fc1105b52f232406cf77e65208e218264dc

      SHA512

      8fef4562ec9bfbaf129669c1173e574d58b13956a0aa3148a050e4d5a6e6cc846c8423382c836365f720fa5f0443fbd88d14868c714911c60e190a896efb17b1

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\ell\00_Welcome.html

      Filesize

      8KB

      MD5

      6e969256a65648b96671a829a1c8716f

      SHA1

      f53812ac4e2353350c2919bed8a847b04419d373

      SHA256

      93bcd6e5202e538288a6e48772dde3c1ff25c6dc9e2e69520a4f7afcac21b3be

      SHA512

      cfb847eef37c891dabdcba370e8d4418d2a736a2e05cdb8807ddd30e767702ec85f3065d89f23f0d1863625b78c5d5b153d482cfbb215fbec6f7c4c7f3fb32f9

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\ell\CustomLayout.xml

      Filesize

      11KB

      MD5

      76b91319ccc2614968959f3e3a720a8a

      SHA1

      84a3bba50b86178cdd5ea29698991f53f5c33a4e

      SHA256

      b32d4797b8c867ae4cc92b4609f789e61c85e880e0fcab75b53ef59c984b9675

      SHA512

      80229b396784763248c6c2ae8cb69509be75b9f9945fb61dfba2f27a4e69873c836549f53b13139d0208012dd2105e0a088d151745ae8ecc572fa4edffff7860

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\ell\code.js

      Filesize

      767B

      MD5

      8436c6f035edac8069d6a576ceb73d4c

      SHA1

      a800be6ad6461dcd0325183672745b3394143fa2

      SHA256

      b32e54f67ec9f2a1532451a4b68b5d8732a8c21e57c5b9397f383dd407643698

      SHA512

      973daf627c934af226880b3ac3c3c49309f3d5e7ee6d87f8b6f8a5062f6382be86e74ba1c80ed9fae270aea7479346d18cad081a1a84c9c50586360117f0ab6a

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\ell\header.css

      Filesize

      1KB

      MD5

      9ef7d806b56b735a44f11b618ece2a80

      SHA1

      42e40e961d0840d959cfde70a4da8a0914f5d596

      SHA256

      d625a11a14e5a3cdfcf5d3a269fa7205a75fe79ae040d66e15e3646636aea8c7

      SHA512

      a5ce33d91972e7d88a731ef2bdbca8af1b4b5f5c52aee44da47f7af4a332a612f0b5008ed0bc130eaafaecfa6b363881d96ddc1c877c801ee087fec1ba5e6fec

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\ell\steps.css

      Filesize

      383B

      MD5

      a40791d1e4cc41881bf125ed2bd718b2

      SHA1

      8a0b44d76ed8e32e44767370a577dd7872b0cf4e

      SHA256

      50be5697f1e8270cea34efe517d757cd0b9776a83e7767466d39ca9d52156ffe

      SHA512

      c9af583de93036b513f25356651a80da4bcb1bfdc414187f783987db7e406d2eca2b2f5faeb1088aa538c373e1dd8d9748c5e8b2dd80c60c012ca0af752f74a4

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\ell\wizpage.css

      Filesize

      9KB

      MD5

      0d49d984f40c77160e9e1300e40fff8e

      SHA1

      ef422e371217ece36a833d661eeaa2ffcf5472bc

      SHA256

      2e371522b5abb21df5f6a0d3d46ff85da950f8f90e030c66cbfc141e511ae369

      SHA512

      e66d21341af7f2905e9d4fd43d11f570534650923bbe14390fe60da636b9bf93c5e4258a62e9461e5502993c3131b3a27f999807730e0611854e266dfaf5b567

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\enu\00_Welcome.html

      Filesize

      7KB

      MD5

      65afe9f0d35461bf414c52437b35e01c

      SHA1

      9a115ed7f794e43aa44b0c6d1deb6135aabfac30

      SHA256

      ce4cb2d49718d34474d0385aec01e2148dcfd806fbfbc95a82a774115e98e909

      SHA512

      8b5a3e5c7944ee988e6be3710b9dd90280dfe83d153b1131bb2def09e301c85bbd4150ed9e2db55406e68abfef897bb8202d67799cf6a8ba7bf347a3f59e0e35

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\enu\License.txt

      Filesize

      49KB

      MD5

      e67242fa082fba9fc609d9a4bd50c06d

      SHA1

      458081adc8c694ac9ed64f20bc59ea5ef0524914

      SHA256

      915979c3b92be856a0708d3d9f10c35728704ec0c0dbe63bff18e0af98407a95

      SHA512

      04f0a36e22b062bbf304bca3bb93932d624fa1d218843fab8be7b25bbb032b570fecab10431a70589f3ee6c74e2ebeebcc7e74eb8353d9d5c260a352705d4b75

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\enu\buttons.js

      Filesize

      1KB

      MD5

      960a100624fbcf3ef32de4009fe0baf1

      SHA1

      f793395db15589b5e64237001b8ee69b978f9bd4

      SHA256

      f6ed3a87ad7eee2cd7fae51721e6070ffb7ab52ab2c2d08437c65fea037bc185

      SHA512

      06fc9de01cc352bdb5207cf7608d68645ef052eb764ac8f5c160d662780df61f27c6b88a39848c47ff67211d8fdefc063565ed16e871fc4fc25383b8fdf57f4b

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\enu\buttons_install.html

      Filesize

      2KB

      MD5

      30c9a0de3beab132758fc76adb1f649e

      SHA1

      8777318cd03893b1c47a18f268fe47b26abfe3e6

      SHA256

      d2be05a50bd5e1727581aad4f6d254286ca5d6a0458dca54956b7df5493e8f63

      SHA512

      a8f72823aa030cdb737d2d800cc20adea882801787a967cb8a827a8d2aa3069d20c0f71a8c271092667930c3158a396a333e4f63d64e509caabf9a9bb26a2b2b

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\images\logos\logi_new_75.png

      Filesize

      5KB

      MD5

      589e593392460fd82f26ddf0a0ee49d9

      SHA1

      f693e751fc4998904e71c872d34a9ba875ddcf1f

      SHA256

      faa46359bb6ae11a5d16303bb9b3b73c4c411a404d40b7da297e63ffce402b5d

      SHA512

      5a20a4c474900608c152ef1c5eb34324de4d49f5ae3113cb929b3cf10131f85d3cd5f5037b07c5110e989424fe56e8862ccd8f572151ac0aaadca2127949c54d

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\images\optional\InstallerButton_upL.gif

      Filesize

      407B

      MD5

      f95a6ddb2695fcf51562d9f2597c13bd

      SHA1

      dbc2226b56907053374224be7ea766fe6de4c422

      SHA256

      52c74745b7bf538a71597b8eecde626bbb28bb5c44674778d32da6242c851573

      SHA512

      2ac61044278224b4a213a1f9d557c72794957701da20460c2a60901ed8b71c48a0fa81f7b3e9a15af1121441a9eb49c303d809110f70682a4eb8f1dac0d2203a

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\images\optional\InstallerButton_upM.gif

      Filesize

      832B

      MD5

      e7e3cb489bcc178986d7fcad4f67221c

      SHA1

      0862d4cce3c0a4d6a719f74956965ef517f5f1e7

      SHA256

      69e573ea1c1d052ce11dfc2e9e3f4f04268f86ee03b439e69cf362e6873e2254

      SHA512

      7a70779d4f153f86d086257d095734ed481e87d5dbd99780c14d871e3331f7ced4b1e54561ef5e9a8940ca9dfd396116620156638e3d7e2ba0a7a9932ce7d4ab

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\images\optional\InstallerButton_upR.gif

      Filesize

      407B

      MD5

      0dcba5e22bb6d789a934548ea7ef5c86

      SHA1

      2797188385044d2b26fad50d3126225d6596afc3

      SHA256

      5027cb23fbc705c2dc4ce314350b572a91855e5d476e40b2cc0e56dbd562a944

      SHA512

      b18619dbaf036f945c21a6776ce1f34d4b92fb7fb9f0c0d26f515a561358b87b538619431d601baa8f14513ab3148270e48cde9828b5e341915919b4b9861328

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\images\optional\btnLlg.gif

      Filesize

      196B

      MD5

      562eef17a2da9155d0b637421a0e813d

      SHA1

      0e4a933345504af38929c226666ff7e0fbed4bf8

      SHA256

      89e2f22917b3f241432c0edbaf5a93a24d7101fb951813b874baae52afb23385

      SHA512

      7f19a33b6991c262155adef75bf6d4061f199b3ee00b4749abc19073fab7c25b5778f754668e7203c7a528660464c1291ddbfb1bb24e4dcc4cce73698120aa9b

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\images\optional\btnMlg.gif

      Filesize

      67B

      MD5

      766df06eedba6230132a9fc366edab20

      SHA1

      45c3adc24b754f9d0eb96047e040870869c42e0e

      SHA256

      f054b6b63412a02a087004b64d0a8dc5f6aa85bc10af25eba821b95042194e15

      SHA512

      6e82ba410b057804288d61c65db395ae6be9852a56a77769a3e1afbd56a0b60fa0b3db40db84e1829e511e1c982ccf66e1af2d8de66d87f6d4ecd478a28b9c65

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\UI\images\optional\btnRlg.gif

      Filesize

      196B

      MD5

      7a597fffed9ad15fb467494593168712

      SHA1

      51e438fca99970c3ed7c42a90a4fecff30117401

      SHA256

      810c6259198d1e80884d68d9280b09bfce1a906dee03eecbd86ecf1be5c09010

      SHA512

      6ddea1224596947de6dbff88e92ce734b56192180aeb2d429ade03324f06fb13bd0f6b958e63c57f154ff7491d1f5a11b1a1f8461a3252acf72f1d167c7afd1e

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\plug-ins\MsiExprDll.dll

      Filesize

      221KB

      MD5

      05d2c5c59dd38e652c25775571b20665

      SHA1

      158933ea0a4e7dd7d25e6a7370af1e52a37519bf

      SHA256

      87b06cdbcdb3bdacdffdd51ab5344082725dd01625a9c29c6972da74bfb99764

      SHA512

      47fc42be80e40c6340526c46ac887570e24b36db270d623d5e64e6c133630f5006ac8350891581baaa10f377c13fd6760c26fca604d590ac257b6b32dd8d41ff

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\plug-ins\hwsetup.dll

      Filesize

      605KB

      MD5

      cf2d1bb5ade968fb0ecf849a55c8397e

      SHA1

      9f8de9700f9a2c53f217aa692cbb9a9d946c9b3c

      SHA256

      8718b7001411ee8e5bd2b510135623a2c99549302cb75820be4fc5dd39d88219

      SHA512

      71fe4c62728f6629b747495d3ad70e3dbb3fc8816bda1796ca9cd78f40f4aa5400bd890cee007f4f6b001728e67d78c2065c212301bd08a699df4efb2afe3779

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\setup.ini

      Filesize

      10KB

      MD5

      d809acd63c97fdaa05f88f65a9c9aa1a

      SHA1

      0f6481dc6cf067e997eea97a62d667c072da5d66

      SHA256

      af2d2ecfdd0986c1d3065ceff90d267aef32eacce0cceb439830566fa5804968

      SHA512

      b9f698f9e672ccf6a4e67e21ced7b9fec60d156cd6bb91491916d0bf68de3e05d760f50754c0924113950323d10f48b1b87f5633097ca535e932faa5632732c4

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\ui\ENU\CustomStrings.xml

      Filesize

      2KB

      MD5

      9268852eee95d5cafb05f66e43ea22b2

      SHA1

      3b87087f0d4b7a1c39ef33e9f1cc4f9e252c3001

      SHA256

      e0f8d8e6fb5b2e85429067fb5acdfb86e3b6e95a585fa9ca13dbc8d91b124e51

      SHA512

      77b16f73e2a51ff1ff64b4b6b8273cbef7a3d7976ea18cc28a7dbe1caaeba22abe1fb5ef7519535c845eaebd22714c19aa237ff78b9071d88e29ff906b5cc5ec

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\ui\ENU\StockStringsBase.xml

      Filesize

      16KB

      MD5

      0b4a89c6b42b3afdfa0d84ce14119ca6

      SHA1

      3195e67dd33bea24a4689a1441ed24158f6c9cfa

      SHA256

      49ac4600e3bdc5052aa413a8477e995c037996b628dcb9b03c75645c048b5bac

      SHA512

      fe329e16af601d155ede1b323642dc7621b11cb78c72a8fabe15c63fef6a54100b088b6d7188ea912dd50a8f4dd85e86894a3a03826a9c2e5a347796d1cf1a50

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\ui\ENU\StockStringsBranded.xml

      Filesize

      1KB

      MD5

      3a0d3c3532821e3d2e3d3d8cd991026b

      SHA1

      fcc594886002248a01f03646e65d55f372fc3f9a

      SHA256

      0578b84baae059f5a5fb3d6dd67fbd4f9aba0b8c76388afab70e2593ecaef489

      SHA512

      5a363cc01db12129c3bd06a3995406f39547417c6557d648c1a1c3b466eb5a6e0bd54c36164a3bdcaa8b7d404f2f486f2c8849e33a08ac4e998c270ad8b6bf4a

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\ui\StockLayout.xml

      Filesize

      4KB

      MD5

      eb625460be4da41f19de51e177ef729e

      SHA1

      516cbc016e3e3b94709533e61e8eeada64ce3346

      SHA256

      812192d39aea341eafc3bb228012fdbb7b680e8baf305717a8ef836a667ad425

      SHA512

      036c522844d42027e046460efa387c5036959e081dc847ae664f7988c5b1a1d899e8a6a64c993b0eb9b51cfd5de06ff2bfbfc4b4a398ff423b3567da07831b8f

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup\ui\resource_ids.txt

      Filesize

      12KB

      MD5

      8eefc4fb7b7d9fe00c86a1adee7472a0

      SHA1

      2338013c440dba96411a8d569cb639ad4eaf9710

      SHA256

      1cb34abbc70648e87019911fbc58758dce99c00c425d93e36ef13c2b870b6764

      SHA512

      101746b8fc383b60620edd9852a1e2d7571e9ac5418bc83fb9cbf392a965253796f915d26e75b0652c5015cf6e6309d4d7771b710c1934e5caa3756f654da5bc

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\UnstLgcy.exe

      Filesize

      61KB

      MD5

      b8049eeb3fe0dec5532bb1681b861359

      SHA1

      953ccf9e161b61d96207d1c5be1ca68ee3c0602a

      SHA256

      e2329aba6f16a675000a693d2b376214a94d950c114652ea7a85a092210f6420

      SHA512

      10fe8f2bf8ae51530384ae9d7da8416da8e82b1c9e8d4405d0cbfeb5bd81d87952838dcc78a0e9d367e3abe6f22e39c73818a110a3f84e2fc334cb334c4d85ff

    • C:\Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Vid\Vid.msi

      Filesize

      14.8MB

      MD5

      e5465c974d92cf28e7cb4b76d290293c

      SHA1

      083720423bc197d4f1a9dd3ec17fc2d054f536dc

      SHA256

      7e6dc8da99b0bcfdb2195bdbb577e73c452ff8be814f54b707b7a25491368b39

      SHA512

      4263f5f6ec9f9146eecbcd84c469e56f36822f2d8772af2cece44223c0f9606825ba2d1d990f999f3661b6f7b42507a9a6154c30c1c80fd07e7d13268dba590b

    • \Users\Admin\AppData\Local\Temp\Logitech_Webcam_1.10.1113.0\Setup.exe

      Filesize

      325KB

      MD5

      8ea0c0d5d191f2e73a346dcc6e33a1d6

      SHA1

      6dac36758639f658be01acea46d1271de3c952eb

      SHA256

      1d067ab808c0df40474c712b5c800414254a93df102569795f195f31cef96911

      SHA512

      a2728b1c70257275a2f84f3d857f4cdb48bc178d5285e6eed88eb3692e1331f309ad5e2d8f451d7fd127ce7b7565c3d3de7409f3fea45ba88cec9c6bb9b35b28

    • memory/2996-1162-0x0000000002A80000-0x0000000002B1C000-memory.dmp

      Filesize

      624KB

    • memory/2996-1150-0x00000000003C0000-0x00000000003FA000-memory.dmp

      Filesize

      232KB