Analysis

  • max time kernel
    78s
  • max time network
    165s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/06/2024, 02:58

General

  • Target
    lghub_installer.exe
  • Size 34.8MB
  • Sample240613-df7phswalk
  • SHA256 44f6653090c37dd9655f14eb6f45d72b7ab1edb2966ab2c440b1c3e46b37e908
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 8 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 22 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 7 IoCs
  • Suspicious use of WriteProcessMemory 28 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\lghub_installer.exe
    "C:\Users\Admin\AppData\Local\Temp\lghub_installer.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • Enumerates connected drives
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2980
    • C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe
      "C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe" /install /quiet /norestart
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4208
      • C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe
        "C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe" /install /quiet /norestart -burn.unelevated BurnPipe.{D83B05D2-0DA7-402D-A672-8CA139418F39} {BF474316-1915-4CF1-8CC0-14A3BF6D4799} 4208
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5028
    • C:\Users\Admin\AppData\Local\Temp\vc_redist.x86.exe
      "C:\Users\Admin\AppData\Local\Temp\vc_redist.x86.exe" /install /quiet /norestart
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:3260
      • C:\Users\Admin\AppData\Local\Temp\vc_redist.x86.exe
        "C:\Users\Admin\AppData\Local\Temp\vc_redist.x86.exe" /install /quiet /norestart -burn.unelevated BurnPipe.{AD544238-D617-49B7-A6AE-E3B2E74CF708} {F75095D3-2E1B-4ABB-A77F-10F2B2BB9BB7} 3260
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1696
    • C:\ProgramData\LGHUB\depots\35818\core\lghub_update_tool.exe
      "C:\ProgramData\LGHUB\depots\35818\core/lghub_update_tool.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:2320
      • C:\ProgramData\LGHUB\depots\35818\core\vc_redist.x64.exe
        C:\ProgramData\LGHUB\depots\35818\core\vc_redist.x64.exe /install /quiet /norestart /log "C:\Users\Admin\AppData\Local\Temp\install_log_vc_x64.txt"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2332
        • C:\Windows\Temp\{B5751CC9-C5A4-442C-89FE-401F3C843331}\.cr\vc_redist.x64.exe
          "C:\Windows\Temp\{B5751CC9-C5A4-442C-89FE-401F3C843331}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\ProgramData\LGHUB\depots\35818\core\vc_redist.x64.exe" -burn.filehandle.attached=532 -burn.filehandle.self=540 /install /quiet /norestart /log "C:\Users\Admin\AppData\Local\Temp\install_log_vc_x64.txt"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3284
      • C:\ProgramData\LGHUB\depots\35818\core\vc_redist.x86.exe
        C:\ProgramData\LGHUB\depots\35818\core\vc_redist.x86.exe /install /quiet /norestart /log "C:\Users\Admin\AppData\Local\Temp\install_log_vc_x86.txt"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:3428
        • C:\Windows\Temp\{FB869857-0AA3-47FF-8E95-5235390C7997}\.cr\vc_redist.x86.exe
          "C:\Windows\Temp\{FB869857-0AA3-47FF-8E95-5235390C7997}\.cr\vc_redist.x86.exe" -burn.clean.room="C:\ProgramData\LGHUB\depots\35818\core\vc_redist.x86.exe" -burn.filehandle.attached=540 -burn.filehandle.self=648 /install /quiet /norestart /log "C:\Users\Admin\AppData\Local\Temp\install_log_vc_x86.txt"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3520
      • C:\ProgramData\LGHUB\depots\35818\core\lghub_updater.exe
        C:\ProgramData\LGHUB\depots\35818\core\lghub_updater.exe --install
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Suspicious use of AdjustPrivilegeToken
        PID:3232
        • C:\Windows\system32\regsvr32.exe
          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\hidpp_forcefeedback_x86.dll"
          4⤵
            PID:1576
            • C:\Windows\SysWOW64\regsvr32.exe
              /s "C:\Program Files\LGHUB\hidpp_forcefeedback_x86.dll"
              5⤵
                PID:2996
            • C:\Windows\system32\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\hidpp_forcefeedback_x64.dll"
              4⤵
                PID:564
              • C:\Windows\system32\regsvr32.exe
                "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\legacy_forcefeedback_x86.dll"
                4⤵
                  PID:1560
                  • C:\Windows\SysWOW64\regsvr32.exe
                    /s "C:\Program Files\LGHUB\legacy_forcefeedback_x86.dll"
                    5⤵
                      PID:4056
                  • C:\Windows\system32\regsvr32.exe
                    "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\legacy_forcefeedback_x64.dll"
                    4⤵
                      PID:2292
                    • C:\Windows\system32\regsvr32.exe
                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\sdk_legacy_led_x86.dll"
                      4⤵
                        PID:3080
                        • C:\Windows\SysWOW64\regsvr32.exe
                          /s "C:\Program Files\LGHUB\sdk_legacy_led_x86.dll"
                          5⤵
                            PID:500
                        • C:\Windows\system32\regsvr32.exe
                          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\sdk_legacy_led_x64.dll"
                          4⤵
                            PID:2452
                          • C:\Windows\system32\regsvr32.exe
                            "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\sdk_legacy_steering_wheel_x64.dll"
                            4⤵
                              PID:1972
                            • C:\Windows\system32\regsvr32.exe
                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\sdk_legacy_steering_wheel_x86.dll"
                              4⤵
                                PID:4448
                                • C:\Windows\SysWOW64\regsvr32.exe
                                  /s "C:\Program Files\LGHUB\sdk_legacy_steering_wheel_x86.dll"
                                  5⤵
                                    PID:4592
                                • C:\Windows\system32\regsvr32.exe
                                  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\legacy_arx_control_sdk_x86.dll"
                                  4⤵
                                    PID:3688
                                    • C:\Windows\SysWOW64\regsvr32.exe
                                      /s "C:\Program Files\LGHUB\legacy_arx_control_sdk_x86.dll"
                                      5⤵
                                        PID:1016
                                    • C:\Windows\system32\regsvr32.exe
                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\LGHUB\legacy_arx_control_sdk_x64.dll"
                                      4⤵
                                        PID:2484
                                      • C:\Program Files\LGHUB\lghub.exe
                                        "C:\Program Files\LGHUB/lghub.exe"
                                        4⤵
                                          PID:3928
                                          • C:\Program Files\LGHUB\lghub.exe
                                            "C:\Program Files\LGHUB\lghub.exe" --type=gpu-process --enable-features=FixAltGraph --no-sandbox --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=5D9F9275FC3653DF928CB6BB7D27B733 --mojo-platform-channel-handle=1180 /prefetch:2
                                            5⤵
                                              PID:4448
                                          • C:\Program Files\LGHUB\lghub_updater.exe
                                            "C:\Program Files\LGHUB/lghub_updater.exe" --run-as-service
                                            4⤵
                                              PID:4424
                                            • C:\Program Files\LGHUB\lghub.exe
                                              "C:\Program Files\LGHUB/lghub.exe" --background
                                              4⤵
                                                PID:4560
                                                • C:\Program Files\LGHUB\lghub_agent.exe
                                                  "C:\Program Files/LGHUB/lghub_agent.exe"
                                                  5⤵
                                                    PID:2408
                                                  • C:\Program Files\LGHUB\lghub.exe
                                                    "C:\Program Files\LGHUB\lghub.exe" --type=gpu-process --enable-features=FixAltGraph --no-sandbox --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=BD449E39961778FDD686323A50D872E8 --mojo-platform-channel-handle=1592 /prefetch:2
                                                    5⤵
                                                      PID:1928
                                                    • C:\Program Files\LGHUB\lghub.exe
                                                      "C:\Program Files\LGHUB\lghub.exe" --type=renderer --force-color-profile=srgb --no-sandbox --enable-features=FixAltGraph --service-pipe-token=0A4A882B3FB832FC31105D2BC7271665 --lang=en-US --app-user-model-id="{6D809377-6AF0-444B-8957-A3773F02200E}\LGHUB\lghub.exe" --app-path="C:\Program Files\LGHUB\resources\app.asar" --node-integration=true --webview-tag=true --no-sandbox --background-color=#000 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=0A4A882B3FB832FC31105D2BC7271665 --renderer-client-id=4 --mojo-platform-channel-handle=2232 /prefetch:1
                                                      5⤵
                                                        PID:1972
                                                      • C:\Program Files\LGHUB\lghub_agent.exe
                                                        "C:\Program Files/LGHUB/lghub_agent.exe"
                                                        5⤵
                                                          PID:2940
                                                        • C:\Program Files\LGHUB\lghub.exe
                                                          "C:\Program Files\LGHUB\lghub.exe" --type=gpu-process --enable-features=FixAltGraph --no-sandbox --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --use-gl=swiftshader-webgl --service-request-channel-token=167379031EB7CED6B6E63724B7C7EA65 --mojo-platform-channel-handle=2504 /prefetch:2
                                                          5⤵
                                                            PID:5268
                                                  • C:\Windows\System32\rundll32.exe
                                                    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                    1⤵
                                                      PID:5080
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3756 --field-trial-handle=2248,i,10247514684337323751,15511974759131734137,262144 --variations-seed-version /prefetch:8
                                                      1⤵
                                                        PID:440
                                                      • C:\Windows\system32\svchost.exe
                                                        C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                                                        1⤵
                                                        • Checks SCSI registry key(s)
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        PID:4596
                                                        • C:\Windows\system32\DrvInst.exe
                                                          DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{7fbc7373-8ec2-844c-87ba-0daf04cd222f}\logi_joy_bus_enum.inf" "9" "4b2476c4b" "0000000000000160" "WinSta0\Default" "0000000000000170" "208" "C:\ProgramData\LGHUB\depots\35818\driver_hid_virtual"
                                                          2⤵
                                                            PID:4980
                                                          • C:\Windows\system32\DrvInst.exe
                                                            DrvInst.exe "2" "211" "ROOT\SYSTEM\0001" "C:\Windows\INF\oem3.inf" "oem3.inf:741f41b5bfe56c0f:LogiVirtualBus_Device:2018.3.55.0:root\lghubvirtualbus," "4440041a7" "0000000000000160"
                                                            2⤵
                                                              PID:552
                                                            • C:\Windows\system32\DrvInst.exe
                                                              DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{fea2acc3-535f-1942-8c6b-48a6d368e7e3}\logi_joy_vir_hid.inf" "9" "418f81b53" "0000000000000174" "WinSta0\Default" "0000000000000100" "208" "C:\ProgramData\LGHUB\depots\35818\driver_hid_virtual"
                                                              2⤵
                                                                PID:3964
                                                              • C:\Windows\system32\DrvInst.exe
                                                                DrvInst.exe "1" "0" "LGHUBDevice\VID_046D&PID_C232\1&79f5d87&0&01" "" "" "409067b8f" "0000000000000000"
                                                                2⤵
                                                                  PID:6024
                                                                • C:\Windows\system32\DrvInst.exe
                                                                  DrvInst.exe "1" "0" "LGHUBDevice\VID_046D&PID_C231\1&79f5d87&0&02" "" "" "41dc813d3" "0000000000000000"
                                                                  2⤵
                                                                    PID:6040
                                                                • C:\Program Files\LGHUB\lghub_updater.exe
                                                                  "C:\Program Files\LGHUB/lghub_updater.exe" --run-as-service
                                                                  1⤵
                                                                    PID:3612
                                                                  • C:\Windows\system32\wbem\unsecapp.exe
                                                                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                    1⤵
                                                                      PID:5208
                                                                    • C:\Windows\system32\AUDIODG.EXE
                                                                      C:\Windows\system32\AUDIODG.EXE 0x30c 0x2f4
                                                                      1⤵
                                                                        PID:6140

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v15

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            logi_joy_bus_enum.cat

                                                                            • Path C:\PROGRA~3\LGHUB\depots\35818\DRIVER~2\logi_joy_bus_enum.cat
                                                                            • Size 10KB
                                                                            • SHA256 0a7940694584b02f894318b4fcc260cb0eb3cbe11552c241d89ccce080c3a929
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            logi_joy_bus_enum.sys

                                                                            • Path C:\PROGRA~3\LGHUB\depots\35818\DRIVER~2\logi_joy_bus_enum.sys
                                                                            • Size 37KB
                                                                            • SHA256 3bb3ab2d4d7792d9ae6404fc57f03b466c1b97d5ea10bdc868bb5b7b7cbb55a4
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            logi_joy_vir_hid.cat

                                                                            • Path C:\PROGRA~3\LGHUB\depots\35818\DRIVER~2\logi_joy_vir_hid.cat
                                                                            • Size 9KB
                                                                            • SHA256 b8dc3f23ce018769aba39c0741ba0a92083698031c31ee1fbd2b60ac4ce1f133
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            logi_joy_vir_hid.sys

                                                                            • Path C:\PROGRA~3\LGHUB\depots\35818\DRIVER~2\logi_joy_vir_hid.sys
                                                                            • Size 20KB
                                                                            • SHA256 2e270f2118917b7bf176419035e83fd1c388f8c588072b311f39a5ff8fd62783
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            logi_joy_xlcore.sys

                                                                            • Path C:\PROGRA~3\LGHUB\depots\35818\DRIVER~2\logi_joy_xlcore.sys
                                                                            • Size 65KB
                                                                            • SHA256 a97bc1a66807e5e803278f39d6466e69adfaf7efc7dd3dcd60db83d4ca6df854
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            current.json

                                                                            • Path C:\ProgramData\LGHUB\current.json
                                                                            • Size 142KB
                                                                            • SHA256 a340688b03de3ae338cd8a5abadd7210f92bd0b66ab502af6391a014e806a9e7
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            current.json

                                                                            • Path C:\ProgramData\LGHUB\current.json
                                                                            • Size 143KB
                                                                            • SHA256 fb39eec978c5e008b6fba43141fd6b64f7c21599dd251ab9f22319b0a75bbd32
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            jquery.mobile-1.4.2-onlyEvents.js

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\applet_assetto_corsa\applet_files\jquery.mobile-1.4.2-onlyEvents.js
                                                                            • Size 83KB
                                                                            • SHA256 3302178bd603c8ad14b1b9af3b5873ae69d66af34624f9a1f069052ebaefe441
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            config.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\applet_discord\config.json
                                                                            • Size 2KB
                                                                            • SHA256 96a5aedfb4d77078032225e84937cd8b544fea2d2c3ea7a837126181e7d2effd
                                                                            • MD5 SHA1 SHA512

                                                                            manifest.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\applet_discord\manifest.json
                                                                            • Size 251B
                                                                            • SHA256 8a70839c93870e361bc79970b17a2106a294f41da3128ca53f3ad5237c1dce9f
                                                                            • MD5 SHA1 SHA512

                                                                            manifest.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\applet_obs\manifest.json
                                                                            • Size 1KB
                                                                            • SHA256 c9e3b667eac209cd6223172ecd6520ba1668993105fa1e67b6b7adbccb006103
                                                                            • MD5 SHA1 SHA512

                                                                            MSVCP140.dll

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\MSVCP140.dll
                                                                            • Size 618KB
                                                                            • SHA256 dd868905502a1835c63aa5d6ee56153d01d717587af77890d5d8843b39a87229
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            applications.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\data\applications.json
                                                                            • Size 744KB
                                                                            • SHA256 cec1df6a6cc9885fa5d9c6fbfbae005915a41d8063b047aca157973d0c25de3c
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            blue_voice_presets.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\data\blue_voice_presets.json
                                                                            • Size 54KB
                                                                            • SHA256 76ebe4c11b0080f33ade11bbc6ceafd722be472ba68ee41b5ee147aa01060365
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            camera_presets.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\data\camera_presets.json
                                                                            • Size 1KB
                                                                            • SHA256 3ee7e8378b079661f7b787af5f615b776fc35d9839dbcb0a52e11bcd2434f779
                                                                            • MD5 SHA1 SHA512

                                                                            card_presets.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\data\card_presets.json
                                                                            • Size 13KB
                                                                            • SHA256 968737b116730cb6812ece45ddd9026cd02b7d3d2b61471297d2326a712581fc
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            lghub_agent.exe

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\lghub_agent.exe
                                                                            • Size 25.0MB
                                                                            • SHA256 82032528df9efbe15b16cf2c230acbc067379f1ba428db2fa978ac5968d2dc3b
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            lghub_update_tool.exe

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\lghub_update_tool.exe
                                                                            • Size 878KB
                                                                            • SHA256 3d20f8423dbb26a233e59f8ec79817b09076d1d367e819b83dae2f526042fab4
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            lghub_updater.exe

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\lghub_updater.exe
                                                                            • Size 9.4MB
                                                                            • SHA256 18ac77a5e8f7790310e3d2f8b07aed6a930c97bd04b12a3b21fd34150caaffc3
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            logi_analytics_client.exe

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\logi_analytics_client.exe
                                                                            • Size 3.4MB
                                                                            • SHA256 18f6e76c241a6f615648e814a6d5cae8f0bdf8f8cdebfeb93fbbc1740c34230d
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            manifest.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\manifest.json
                                                                            • Size 11KB
                                                                            • SHA256 d4be4cb8b2d0c3f732ddb167b3bb7716513c973c9748e6adb20326b4f5fba1a6
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            vc_redist.x64.exe

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\vc_redist.x64.exe
                                                                            • Size 14.4MB
                                                                            • SHA256 81775fc3f253c978e7009317a2cdaaebc1631e3cfbaebbf7f14f5659aa16a05a
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            vc_redist.x86.exe

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\vc_redist.x86.exe
                                                                            • Size 13.7MB
                                                                            • SHA256 af4c298a868c2e5aae9e875960ceee6ddf40a7bbef87b4662a8d5d51799446bf
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            vcruntime140.dll

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\core\vcruntime140.dll
                                                                            • Size 77KB
                                                                            • SHA256 092f798ce8e95332170d5552946155503c45e75ef8f5c2c1248c32fa7fb9a64e
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            manifest.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\driver_cpu_temperature\manifest.json
                                                                            • Size 295B
                                                                            • SHA256 50ce83699e49d5edba8d63ffe47194759adcd1220b81fbefef65f2540b3cfc52
                                                                            • MD5 SHA1 SHA512

                                                                            logi_joy_bus_enum.inf

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\driver_hid_virtual\logi_joy_bus_enum.inf
                                                                            • Size 2KB
                                                                            • SHA256 253f9b330dfabffa904de94c15ecd71fefdabf9b7a7bbbb349a3278484723982
                                                                            • MD5 SHA1 SHA512

                                                                            logi_joy_vir_hid.inf

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\driver_hid_virtual\logi_joy_vir_hid.inf
                                                                            • Size 2KB
                                                                            • SHA256 359cfdeed38a9d869f3f27fc1df35264a795a2e6b8b464af1e75566a179d0cce
                                                                            • MD5 SHA1 SHA512

                                                                            manifest.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\driver_hid_virtual\manifest.json
                                                                            • Size 498B
                                                                            • SHA256 b9bc760ce9c6a280ad50cc64ea3dee0bad65228000a84653c978c39b51bfc317
                                                                            • MD5 SHA1 SHA512

                                                                            manifest.json

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\release_notes\manifest.json
                                                                            • Size 67B
                                                                            • SHA256 b1e6f976d1a6cb4c0a60accded168e2f0180681231a09d3d043332c630e4b5e8
                                                                            • MD5 SHA1 SHA512

                                                                            index-es.html

                                                                            • Path C:\ProgramData\LGHUB\depots\35818\release_notes\notes\index-es.html
                                                                            • Size 384B
                                                                            • SHA256 e002e9b45ea1f62a8d06e667f4b8effc3c3960136d55d21ccea4697e1f618374
                                                                            • MD5 SHA1 SHA512

                                                                            installation.json

                                                                            • Path C:\ProgramData\LGHUB\installation.json
                                                                            • Size 37KB
                                                                            • SHA256 2cca296e63769aa863abee653e9e63425d2f7734137525bd1915085667ca18c4
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            next.json

                                                                            • Path C:\ProgramData\LGHUB\next.json
                                                                            • Size 64KB
                                                                            • SHA256 d76019db76bd19098ccc5a83068e3d1afcecc56064add08598030d7386fc5802
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            next.json

                                                                            • Path C:\ProgramData\LGHUB\next.json
                                                                            • Size 111KB
                                                                            • SHA256 0297f80aa0ffd0799f2b7721e07438f19da63d87425b775639eed5d85da3169a
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            next.json

                                                                            • Path C:\ProgramData\LGHUB\next.json
                                                                            • Size 142KB
                                                                            • SHA256 c9a35112fac874784f1a7009eddb622353e0a983d86b1468edb009116c7562f2
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            AssettoCorsaArxApplet.exe

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\AssettoCorsaArxApplet.exe
                                                                            • Size 3.2MB
                                                                            • SHA256 26de612cd51dacb93fedbdc444f84b1eb71ee94764fd14c11f05874b0519b3f4
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            acBackground.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\acBackground.png
                                                                            • Size 1KB
                                                                            • SHA256 815c076c753611ba44d7c9ce410acdc844383b492aa4ff5cd337675bd6f834cd
                                                                            • MD5 SHA1 SHA512

                                                                            acLogo.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\acLogo.png
                                                                            • Size 27KB
                                                                            • SHA256 02b9e72eddc73e7b863f6f84b821213407307a3e1a71df7cdae465285b122997
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            acLogoOpaque.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\acLogoOpaque.png
                                                                            • Size 101KB
                                                                            • SHA256 9a6eadfd048283262eccd195dbb8af9550c377c734f54242d8d6ceccb060f90d
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            index.html

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\index.html
                                                                            • Size 76KB
                                                                            • SHA256 28d0c1c0b7d8d2caddc39f4da66dbeb920d813e21db343e842c491aa4d6cffd2
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            jquery-1.11.1.min.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\jquery-1.11.1.min.js
                                                                            • Size 93KB
                                                                            • SHA256 91222f96f34735ebc88df208017e54d4329b9202e3e52367fb8b149698a1a5ef
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            jquery.svg.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\jquery.svg.js
                                                                            • Size 56KB
                                                                            • SHA256 c7889043ef83dfcf71defd0a0697e866c6c278db8dd3ccc93cc542071f30ed0b
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            jquery.svganim.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\jquery.svganim.js
                                                                            • Size 17KB
                                                                            • SHA256 29fb7fecbe03dcfe8d634fd35f11781fa85516faff7d015c3e0ebb0d28a856bd
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            script.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\script.js
                                                                            • Size 10KB
                                                                            • SHA256 af5487b572fbb64274fd711726db3cf69f983b85b849710fdc6ca365044790c4
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            styleSheet.css

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\styleSheet.css
                                                                            • Size 5KB
                                                                            • SHA256 eb4aedf6ee113e27f012cb91330ca34e121c173feafab8daf9d867e5d85515c6
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            styleSheetPhone.css

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\styleSheetPhone.css
                                                                            • Size 5KB
                                                                            • SHA256 67390aefae7182087b457f2523c173742af14e57da0ff59753c9a275665dc632
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            svgController.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\applet_files\svgController.js
                                                                            • Size 9KB
                                                                            • SHA256 1ef49273f0309c2105c9d37e10a288b11a8e58cd77f3f2cb95cbc699c8416d49
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            config.json

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_assetto_corsa\config.json
                                                                            • Size 341KB
                                                                            • SHA256 35a0d0fed39477e0b645dd554ba67912e243bdac0a814c354af77f2e615904f8
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            background.jpeg

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\background.jpeg
                                                                            • Size 107KB
                                                                            • SHA256 5c549a142d2a4d6310f007e8b7dc10cbc099a4941e160772b07044b760638a29
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            counter.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\counter.png
                                                                            • Size 26KB
                                                                            • SHA256 304d1d294f3f9ea4270a6dc77cf7f835bf1a3f4a3803b0d3f648119ee9c326be
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            gamestate_integration_logitech.cfg

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\gamestate_integration_logitech.cfg
                                                                            • Size 405B
                                                                            • SHA256 a2b904036ab6fe53ba8e42de3fa36d2d8f081aa2bc0c6767e249057df8aebdcf
                                                                            • MD5 SHA1 SHA512

                                                                            healthLogo.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\healthLogo.png
                                                                            • Size 11KB
                                                                            • SHA256 78ae02373e43d98912a9502079a97856d098862877a09af1807338778ec676c9
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            index.html

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\index.html
                                                                            • Size 2KB
                                                                            • SHA256 5efb343c8e7abaf136027b98c04cd2436946fbe8ab829ee6e5765904e9fcf363
                                                                            • MD5 SHA1 SHA512

                                                                            jquery-1.10.1.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\jquery-1.10.1.js
                                                                            • Size 277KB
                                                                            • SHA256 ff30a1dd8b05bbc1e11cf9677e1f102d9ef7b50ee8496c4a29fd16fed64cf0fb
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            script.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\script.js
                                                                            • Size 1KB
                                                                            • SHA256 5b29acee73426da5985475b44233ad0ba8bda155962c421858ff18c7a26ccd2e
                                                                            • MD5 SHA1 SHA512

                                                                            shieldLogo.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\shieldLogo.png
                                                                            • Size 36KB
                                                                            • SHA256 84c4807e2fe66a3a5b4899f4ef590c8e7b3b9117a2e9d7635253386b4e79cc4f
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            style.css

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\style.css
                                                                            • Size 2KB
                                                                            • SHA256 4c866158d8eaca2b2c5dd865d1bf0ffed1f3de8318e30398067a54ed36c2648d
                                                                            • MD5 SHA1 SHA512

                                                                            terrorist.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\Applet_files\terrorist.png
                                                                            • Size 20KB
                                                                            • SHA256 6858183295d645cb93a1eac62af75ae4111a15107e3b8d440dea12f039eed172
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            CS_GO_Arx_Applet.exe

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\CS_GO_Arx_Applet.exe
                                                                            • Size 542KB
                                                                            • SHA256 59daa882bc90f86a367a666386511739f0728dd7fdd40d1b5e799ecbde48dce6
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            config.json

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_csgo\config.json
                                                                            • Size 345KB
                                                                            • SHA256 1ea670919c709d52e74cd78d4b1caa878682aacc94a21fe1e3f9c22c571a2a7a
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            background.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\background.png
                                                                            • Size 293KB
                                                                            • SHA256 418f60dc46bd2ccd417eb2eb9a8e5f560ac1d8979162a7f11b858679e9cf75a4
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            dotaBadge.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\dotaBadge.png
                                                                            • Size 1.1MB
                                                                            • SHA256 14cdb5b9e2cde211b9289197aae8f0fc7b381ffc5a6aee9773bc22a5ce78c0df
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            empty_item.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\empty_item.png
                                                                            • Size 2KB
                                                                            • SHA256 c01eb28cb2a14027573982c7b071829408f81414009aec3db99e5868457038f8
                                                                            • MD5 SHA1 SHA512

                                                                            gamestate_integration_logitech.cfg

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\gamestate_integration_logitech.cfg
                                                                            • Size 351B
                                                                            • SHA256 4e39af721910e0165676a92d9f89b88df9448cf6c960af2b878dd9d0a023fc0f
                                                                            • MD5 SHA1 SHA512

                                                                            gold.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\gold.png
                                                                            • Size 1KB
                                                                            • SHA256 b883e30a9c314f2248d37d81103cd17c3ac5ed21578c94d319b5ad40a648c9c4
                                                                            • MD5 SHA1 SHA512

                                                                            goldIcon.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\goldIcon.png
                                                                            • Size 18KB
                                                                            • SHA256 c0c03a2e67d5b18b36780b41491517439847bff7a6aa199a0f985ea4b2e36ffe
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            health.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\health.png
                                                                            • Size 215B
                                                                            • SHA256 ca6c7d93aca212f0d5cfa95e6f6e4d3b77f1cf40086af4c501e94ffb34af3b4e
                                                                            • MD5 SHA1 SHA512

                                                                            index.html

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\index.html
                                                                            • Size 5KB
                                                                            • SHA256 210b03033087ad8774537c7d097a9bbeac4b5e77742c55b0417f39e39d727ed8
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            jquery-ui-1.11.4.min.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\jquery-ui-1.11.4.min.js
                                                                            • Size 234KB
                                                                            • SHA256 fea24b936201e256b41bfc7a4293b7485a5d7ec0a716eac929b13eb480cb1d1a
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            mana.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\mana.png
                                                                            • Size 187B
                                                                            • SHA256 a8f392460b7c73b1bb5e131154b57c4eca5a5c34aeee7772db14f3c0c9201094
                                                                            • MD5 SHA1 SHA512

                                                                            orb.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\orb.png
                                                                            • Size 2KB
                                                                            • SHA256 530c721656e1e6179f8ebfdfc202b3a6d770c9e811fdf1e259c862e56b9e0319
                                                                            • MD5 SHA1 SHA512

                                                                            pro.html

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\pro.html
                                                                            • Size 618B
                                                                            • SHA256 12fc002db6c4b79cd512da437541c5f51866e83d83d7102a056f97c051c8d821
                                                                            • MD5 SHA1 SHA512

                                                                            script.js

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\script.js
                                                                            • Size 8KB
                                                                            • SHA256 b28a70efc79752fcac3215399081d942c7b8ed582792dcbce0c0d1751adc5496
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            style.css

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\style.css
                                                                            • Size 10KB
                                                                            • SHA256 6a2d76b2f1bc3b4022185c5c5d1d89ff5109bf4dbbefa4126ca48807c09a7b59
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            tempHero.png

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Applet_Files\tempHero.png
                                                                            • Size 189KB
                                                                            • SHA256 0112d18afa1b26b89254cfbcd47e9846cae38c672b18fd2d4f2bfbd82b4a358a
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            Dota2ArxApplet.exe

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\Dota2ArxApplet.exe
                                                                            • Size 887KB
                                                                            • SHA256 d069ceafc554e76a1975f0a79d956091cfef23a4371feba3c761ba2ec3969b6d
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            config.json

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_dota2\config.json
                                                                            • Size 347KB
                                                                            • SHA256 b42df14b2f8eb6c36291ed52961d29649a96890c08a187f89227bb73d70812b5
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            config.json

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_obs\config.json
                                                                            • Size 20KB
                                                                            • SHA256 5fca6c61f4ef3f5aa4bfba68915ead1dfa3e959320017c72b2fa42586ccc5332
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            config.json

                                                                            • Path C:\Users\Admin\AppData\Local\LGHUB\integrations\applet_overwolf\config.json
                                                                            • Size 3KB
                                                                            • SHA256 78ab5527b0c7ba37c324e74886506f6c03f5415d609e4470c7ad8cd7237bed5a
                                                                            • MD5 SHA1 SHA512

                                                                            CurrentDatabase_400.wmdb

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                            • Size 640KB
                                                                            • SHA256 ab04c0aa9cce3326ac6a6a7f0aeb1659e6f63642bfd35ff06ae85646ed84bfaf
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            WMSDKNS.XML

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML
                                                                            • Size 9KB
                                                                            • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            logi_installer_shared.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\logi_installer_shared.dll
                                                                            • Size 5.2MB
                                                                            • SHA256 7b54a248294b00e342cca4aee736bfe68e1419e8bb555f34195ff6db8398ed35
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            vc_redist.x64.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe
                                                                            • Size 14.6MB
                                                                            • SHA256 d7257265dbc0635c96dd67ddf938a09abe0866cb2d4fa05f8b758c8644e724e4
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            vc_redist.x86.exe

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\vc_redist.x86.exe
                                                                            • Size 13.8MB
                                                                            • SHA256 dafb8b5f4b46bfaf7faa1d0ad05211f5c9855f0005cd603f8b5037b6a708d6b6
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            logo.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}\.ba1\logo.png
                                                                            • Size 1KB
                                                                            • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                                            • MD5 SHA1 SHA512

                                                                            wixstdba.dll

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}\.ba1\wixstdba.dll
                                                                            • Size 118KB
                                                                            • SHA256 a9295ad4e909f979e2b6cb2b2495c3d35c8517e689cd64a918c690e17b49078b
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            dberr.txt

                                                                            • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                            • Size 19KB
                                                                            • SHA256 474623a03947383195771a3977a785af9d9aced90167d90add9736cb5b815790
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            dberr.txt

                                                                            • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                            • Size 19KB
                                                                            • SHA256 3955a156b4afc31a322ef613587b1425bcb616628e67b2bda72aecb8fe8adacb
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            dberr.txt

                                                                            • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                            • Size 19KB
                                                                            • SHA256 a1db6f06cd8bad234d7dbe790bef339e5ca9a3b1d6fda2db6917f060173b0aa1
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            thm.wxl

                                                                            • Path C:\Windows\Temp\{A7170E96-6E83-4DEF-B927-F735CC760D88}\.ba\thm.wxl
                                                                            • Size 2KB
                                                                            • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
                                                                            • MD5 SHA1 SHA512

                                                                            wixstdba.dll

                                                                            • Path C:\Windows\Temp\{A7170E96-6E83-4DEF-B927-F735CC760D88}\.ba\wixstdba.dll
                                                                            • Size 191KB
                                                                            • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            vc_redist.x64.exe

                                                                            • Path C:\Windows\Temp\{B5751CC9-C5A4-442C-89FE-401F3C843331}\.cr\vc_redist.x64.exe
                                                                            • Size 632KB
                                                                            • SHA256 de1acbb1df68a39a5b966303ac1b609dde2688b28ebf3eba8d2adeeb3d90bf5e
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            vc_redist.x86.exe

                                                                            • Path C:\Windows\Temp\{FB869857-0AA3-47FF-8E95-5235390C7997}\.cr\vc_redist.x86.exe
                                                                            • Size 632KB
                                                                            • SHA256 4b1bf90a0e4e3a628613c2fe42ddba589ee6303e37ccc70cf99ddc92dde03b0b
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            memory/1928-1905-0x00007FF6CEB30000-0x00007FF6D2FCE000-memory.dmp

                                                                            memory/1972-1912-0x00007FF6CEB30000-0x00007FF6D2FCE000-memory.dmp

                                                                            memory/2408-1903-0x0000000056330000-0x000000005686D000-memory.dmp

                                                                            memory/2940-1913-0x0000000056330000-0x000000005686D000-memory.dmp

                                                                            memory/2980-1026-0x00007FF9D5CB0000-0x00007FF9D6771000-memory.dmp

                                                                            memory/2980-200-0x00007FF9D5CB3000-0x00007FF9D5CB5000-memory.dmp

                                                                            memory/2980-199-0x00000000211A0000-0x00000000211AE000-memory.dmp

                                                                            memory/2980-198-0x00000000211D0000-0x0000000021208000-memory.dmp

                                                                            memory/2980-197-0x0000000020EB0000-0x0000000020EB8000-memory.dmp

                                                                            memory/2980-201-0x00007FF9D5CB0000-0x00007FF9D6771000-memory.dmp

                                                                            memory/2980-0-0x00007FF9D5CB3000-0x00007FF9D5CB5000-memory.dmp

                                                                            memory/2980-2-0x00007FF9D5CB0000-0x00007FF9D6771000-memory.dmp

                                                                            memory/2980-1-0x0000000000790000-0x0000000002A64000-memory.dmp

                                                                            memory/3928-1900-0x00007FF6CEB30000-0x00007FF6D2FCE000-memory.dmp

                                                                            memory/4560-1901-0x00007FF6CEB30000-0x00007FF6D2FCE000-memory.dmp

                                                                            memory/5268-1922-0x00007FF6CEB30000-0x00007FF6D2FCE000-memory.dmp