Overview
overview
10Static
static
10UbisoftCon...er.exe
windows11-21h2-x64
7$PLUGINSDI...ol.dll
windows11-21h2-x64
5$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ay.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ry.dll
windows11-21h2-x64
3Microsoft....ns.dll
windows11-21h2-x64
1UbisoftConnect.exe
windows11-21h2-x64
9UbisoftExtension.exe
windows11-21h2-x64
5UbisoftGam...er.exe
windows11-21h2-x64
3UbisoftGam...64.exe
windows11-21h2-x64
1Uninstall.exe
windows11-21h2-x64
4UplayCrash...er.exe
windows11-21h2-x64
5UplayService.exe
windows11-21h2-x64
5UplayWebCore.exe
windows11-21h2-x64
3chrome_elf.dll
windows11-21h2-x64
3discord-rpc.x64.dll
windows11-21h2-x64
1discord-rpc.x86.dll
windows11-21h2-x64
3gear_core_...LL.dll
windows11-21h2-x64
3gear_detec...LL.dll
windows11-21h2-x64
3gpudatabase_win32.dll
windows11-21h2-x64
1libEGL.dll
windows11-21h2-x64
3libGLESv2.dll
windows11-21h2-x64
3libUbiCustomEvent.dll
windows11-21h2-x64
3libcef.dll
windows11-21h2-x64
3npuplaypc.dll
windows11-21h2-x64
3npuplaypchub.dll
windows11-21h2-x64
3overlay.dll
windows11-21h2-x64
3overlay64.dll
windows11-21h2-x64
1shareplay/Qt5Core.dll
windows11-21h2-x64
1shareplay/Qt5Gui.dll
windows11-21h2-x64
1Analysis
- max time kernel
900s - max time network
569s - platform
windows11-21h2_x64 - resource
win11-20251223-en - resource tags
arch:x64arch:x86image:win11-20251223-enlocale:en-usos:windows11-21h2-x64system - submitted
24/12/2025, 11:52
Behavioral task
behavioral1
Sample
UbisoftConnectInstaller.exe
Resource
win11-20251223-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11-20251223-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20251223-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20251223-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsArray.dll
Resource
win11-20251223-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20251223-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/registry.dll
Resource
win11-20251223-en
Behavioral task
behavioral8
Sample
Microsoft.Gaming.XboxApp.Extensions.dll
Resource
win11-20251223-en
Behavioral task
behavioral9
Sample
UbisoftConnect.exe
Resource
win11-20251223-en
Behavioral task
behavioral10
Sample
UbisoftExtension.exe
Resource
win11-20251223-en
Behavioral task
behavioral11
Sample
UbisoftGameLauncher.exe
Resource
win11-20251223-en
Behavioral task
behavioral12
Sample
UbisoftGameLauncher64.exe
Resource
win11-20251223-en
Behavioral task
behavioral13
Sample
Uninstall.exe
Resource
win11-20251223-en
Behavioral task
behavioral14
Sample
UplayCrashReporter.exe
Resource
win11-20251223-en
Behavioral task
behavioral15
Sample
UplayService.exe
Resource
win11-20251223-en
Behavioral task
behavioral16
Sample
UplayWebCore.exe
Resource
win11-20251223-en
Behavioral task
behavioral17
Sample
chrome_elf.dll
Resource
win11-20251223-en
Behavioral task
behavioral18
Sample
discord-rpc.x64.dll
Resource
win11-20251223-en
Behavioral task
behavioral19
Sample
discord-rpc.x86.dll
Resource
win11-20251223-en
Behavioral task
behavioral20
Sample
gear_core_win32DLL.dll
Resource
win11-20251223-en
Behavioral task
behavioral21
Sample
gear_detection_win32DLL.dll
Resource
win11-20251223-en
Behavioral task
behavioral22
Sample
gpudatabase_win32.dll
Resource
win11-20251223-en
Behavioral task
behavioral23
Sample
libEGL.dll
Resource
win11-20251223-en
Behavioral task
behavioral24
Sample
libGLESv2.dll
Resource
win11-20251223-en
Behavioral task
behavioral25
Sample
libUbiCustomEvent.dll
Resource
win11-20251223-en
Behavioral task
behavioral26
Sample
libcef.dll
Resource
win11-20251223-en
Behavioral task
behavioral27
Sample
npuplaypc.dll
Resource
win11-20251223-en
Behavioral task
behavioral28
Sample
npuplaypchub.dll
Resource
win11-20251223-en
Behavioral task
behavioral29
Sample
overlay.dll
Resource
win11-20251223-en
Behavioral task
behavioral30
Sample
overlay64.dll
Resource
win11-20251223-en
Behavioral task
behavioral31
Sample
shareplay/Qt5Core.dll
Resource
win11-20251223-en
Behavioral task
behavioral32
Sample
shareplay/Qt5Gui.dll
Resource
win11-20251223-en
General
- Target UbisoftConnect.exe
- Size 507KB
- Sample251224-n17kcsby3c
- SHA256 00fc8c79dcbc8b40005c5ed26ebb30db18a41c7bf63ea598b3635cf4dfa88312
- MD5 46fc34b4b18ba8cfca8e895fe5cd6c9e
- SHA1 68f2420dbc88a3cddc141dcec9fc157e49cada51
- SHA512 77d4dac5429f63a6308937afca9c8c0adbad78b4bffc803d42514610b98b82862e2662e80d56fb4232504535a4bb6a263bac90ea00f0f4219db28dc22a0ffd80
- SSDEEP 6144:ecFpRE1eO52o+QMh3smMHsckDKdtcn8qXmGLT+:ekAeO2B53smMQ+aLi
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Renames multiple (115) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Renames multiple (130) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Deletes itself 1 IoCs
pid Process 1060 upc.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Suspicious use of NtSetInformationThreadHideFromDebugger 12 IoCs
pid Process 2284 upc.exe 4892 UplayService.exe 4504 upc.exe 5672 UplayService.exe 1060 upc.exe 1060 upc.exe 3724 UplayService.exe 5344 UplayService.exe 5344 UplayService.exe 3724 UplayService.exe 5976 upc.exe 5976 upc.exe - Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe UplayService.exe File opened for modification C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe UplayService.exe - Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp upc.exe - Executes dropped EXE 17 IoCs
pid Process 1060 upc.exe 3724 UplayService.exe 5344 UplayService.exe 3116 UplayWebCore.exe 6012 UplayWebCore.exe 3220 UplayWebCore.exe 1332 UplayWebCore.exe 5976 upc.exe 5192 UplayWebCore.exe 2868 UplayWebCore.exe 4040 UpcElevationService.exe 2640 UplayWebCore.exe 2944 UplayWebCore.exe 3080 UplayWebCore.exe 3196 UplayWebCore.exe 4312 UplayWebCore.exe 2740 UplayWebCore.exe - Loads dropped DLL 39 IoCs
pid Process 1060 upc.exe 1060 upc.exe 3724 UplayService.exe 3724 UplayService.exe 5344 UplayService.exe 5344 UplayService.exe 3116 UplayWebCore.exe 3116 UplayWebCore.exe 3116 UplayWebCore.exe 3116 UplayWebCore.exe 3116 UplayWebCore.exe 6012 UplayWebCore.exe 6012 UplayWebCore.exe 3220 UplayWebCore.exe 3220 UplayWebCore.exe 1332 UplayWebCore.exe 1332 UplayWebCore.exe 5976 upc.exe 5976 upc.exe 5192 UplayWebCore.exe 5192 UplayWebCore.exe 2868 UplayWebCore.exe 2868 UplayWebCore.exe 2868 UplayWebCore.exe 2868 UplayWebCore.exe 2868 UplayWebCore.exe 2640 UplayWebCore.exe 2640 UplayWebCore.exe 2944 UplayWebCore.exe 2944 UplayWebCore.exe 2944 UplayWebCore.exe 3080 UplayWebCore.exe 3080 UplayWebCore.exe 3196 UplayWebCore.exe 3196 UplayWebCore.exe 4312 UplayWebCore.exe 4312 UplayWebCore.exe 2740 UplayWebCore.exe 2740 UplayWebCore.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 32 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language upc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language upc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language regsvr32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayService.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UbisoftConnect.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language regsvr32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayService.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language upc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UpcElevationService.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayService.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language upc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayService.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UplayWebCore.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS upc.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer upc.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName upc.exe - Modifies data under HKEY_USERS 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry upc.exe - Modifies registry class 39 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\URL Protocol UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\DefaultIcon UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\Shell\Open\Command UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74} UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\AppId = "{F63B89DB-D3AE-4908-A6CB-435B2B648F74}" UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\UbisoftExtension.exe" UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\DefaultIcon UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\ = "UbisoftExtension" UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\UbisoftConnect.exe" UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\UbisoftConnect.exe\" \"%1\"" UplayService.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\LaunchPermission = 010014807c00000088000000140000003000000002001c0001000000110014000400000001010000000000100010000002004c0002000000000014000b000000010100000000000100000000000030000b000000010800000000000f0200000076c8b566b196b8807bdf0386522d4758fa9855746bd04da4099286d401010000000000050a00000001020000000000052000000021020000 UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\uplay UplayService.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\AppIdFlags = "8" UplayService.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\LaunchPermission = 010014807c00000088000000140000003000000002001c0001000000110014000400000001010000000000100010000002004c0002000000000014000b000000010100000000000100000000000030000b000000010800000000000f0200000076c8b566b196b8807bdf0386522d4758fa9855746bd04da4099286d401010000000000050a00000001020000000000052000000021020000 UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74} UplayService.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\AccessPermission = 010014807c00000088000000140000003000000002001c0001000000110014000400000001010000000000100010000002004c0002000000000014000b000000010100000000000100000000000030000b000000010800000000000f0200000076c8b566b196b8807bdf0386522d4758fa9855746bd04da4099286d401010000000000050a00000001020000000000052000000021020000 UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\AppId = "{F63B89DB-D3AE-4908-A6CB-435B2B648F74}" UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\LocalServer32 UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\uplay UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\Shell\Open UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\RunAs = "Interactive User" UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74} UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\UbisoftExtension.exe" UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\Shell\Open\Command UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\ = "UbisoftExtension" UplayService.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\AppIdFlags = "8" UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\ = "URL:uplay protocol" UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\URL Protocol UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\ = "UbisoftExtension" UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\DefaultIcon\ = "upc.exe" UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\upc.exe\" \"%1\"" UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\LocalServer32 UplayService.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\AccessPermission = 010014807c00000088000000140000003000000002001c0001000000110014000400000001010000000000100010000002004c0002000000000014000b000000010100000000000100000000000030000b000000010800000000000f0200000076c8b566b196b8807bdf0386522d4758fa9855746bd04da4099286d401010000000000050a00000001020000000000052000000021020000 UplayService.exe Key created \REGISTRY\USER\S-1-5-21-3115490839-3013768460-942101185-1000_Classes\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ upc.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\ = "URL:uplay protocol" UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\ = "UbisoftExtension" UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\uplay\Shell UplayService.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74} UplayService.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{F63B89DB-D3AE-4908-A6CB-435B2B648F74}\RunAs = "Interactive User" UplayService.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2 UplayService.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 UplayService.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 040000000100000010000000be954f16012122448ca8bc279602acf5030000000100000014000000f40042e2e5f7e8ef8189fed15519aece42c3bfa21d0000000100000010000000e78921f81cea4d4105d2b5f4afae0c78140000000100000014000000c87ed26a852a1bca1998040727cf50104f68a8a2090000000100000016000000301406082b0601050507030306082b060105050703086200000001000000200000005367f20c7ade0e2bca790915056d086b720c33c1fa2a2661acf787e3292e12700b00000001000000800000004d006900630072006f0073006f006600740020004900640065006e007400690074007900200056006500720069006600690063006100740069006f006e00200052006f006f007400200043006500720074006900660069006300610074006500200041007500740068006f0072006900740079002000320030003200300000000f000000010000003000000041ce925678dfe0ccaa8089263c242b897ca582089d14e5eb685fca967f36dbd334e97e81fd0e64815f851f914ade1a1e2000000001000000d0050000308205cc308203b4a00302010202105498d2d1d45b1995481379c811c08799300d06092a864886f70d01010c05003077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f726974792032303230301e170d3230303431363138333631365a170d3435303431363138343434305a3077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f72697479203230323030820222300d06092a864886f70d01010105000382020f003082020a0282020100b3912a07830667fd9e9de0c7c0b7a4e642047f0fa6db5ffbd55ad745a0fb770bf080f3a66d5a4d7953d8a08684574520c7a254fbc7a2bf8ac76e35f3a215c42f4ee34a8596490dffbe99d814f6bc2707ee429b2bf50b9206e4fd691365a89172f29884eb833d0ee4d771124821cb0dedf64749b79bf9c9c717b6844fffb8ac9ad773674985e386bd3740d02586d4deb5c26d626ad5a978bc2d6f49f9e56c1414fd14c7d3651637decb6ebc5e298dfd629b152cd605e6b9893233a362c7d7d6526708c42ef4562b9e0b87cceca7b4a6aaeb05cd1957a53a0b04271c91679e2d622d2f1ebedac020cb0419ca33fb89be98e272a07235be79e19c836fe46d176f90f33d008675388ed0e0499abbdbd3f830cad55788684d72d3bf6d7f71d8fdbd0dae926448b75b6f7926b5cd9b952184d1ef0f323d7b578cf345074c7ce05e180e35768b6d9ecb3674ab05f8e0735d3256946797250ac6353d9497e7c1448b80fdc1f8f47419e530f606fb21573e061c8b6b158627497b8293ca59e87547e83f38f4c75379a0b6b4e25c51efbd5f38c113e6780c955a2ec5405928cc0f24c0ecba0977239938a6b61cdac7ba20b6d737d87f37af08e33b71db6e731b7d9972b0e486335974b516007b506dc68613dafdc439823d24009a60daba94c005512c34ac50991387bbb30580b24d30025cb826835db46373efae23954f6028be37d55ba50203010001a3543052300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414c87ed26a852a1bca1998040727cf50104f68a8a2301006092b06010401823715010403020100300d06092a864886f70d01010c05000382020100af6adde619e72d9443194ecbe9509564a50391028be236803b15a252c21619b66a5a5d744330f49bff607409b1211e90166dc5248f5c668863f44fcc7df2124c40108b019fdaa9c8aef2951bcf9d05eb493e74a0685be5562c651c827e53da56d94617799245c4103608522917cb2fa6f27ed469248a1e8fb0730dcc1c4aabb2aaeda79163016422a832b87e3228b367732d91b4dc31010bf7470aa6f1d74aed5660c42c08a37b40b0bc74275287d6be88dd378a896e67881df5c95da0feb6ab3a80d71a973c173622411eac4dd583e63c38bd4f30e954a9d3b604c3327661bbb018c52b18b3c080d5b795b05e514d22fcec58aae8d894b4a52eed92dee7187c2157dd5563f7bf6dcd1fd2a6772870c7e25b3a5b08d25b4ec80096b3e18336af860a655c74f6eaec7a6a74a0f04beeef94a3ac50f287edd73a3083c9fb7d57bee5e3f841cae564aeb3a3ec58ec859accefb9eaf35618b95c739aafc577178359db371a187254a541d2b62375a3439ae5777c9679b7418dbfecdc80a09fd17775585f3513e0251a670b7dce25fa070ae46121d8d41ce507c63699f496d0c615fe4ecdd7ae8b9ddb16fd04c692bdd488e6a9a3aabbf764383b5fcc0cd035be741903a6c5aa4ca26136823e1df32bbc975ddb4b783b2df53bef6023e8f5ec0b233695af9866bf53d37bb8694a2a966669c494c6f45f6eac98788880065ca2b2eda2 UplayService.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 1900000001000000100000009f687581f7ef744ecfc12b9cee6238f10f000000010000003000000041ce925678dfe0ccaa8089263c242b897ca582089d14e5eb685fca967f36dbd334e97e81fd0e64815f851f914ade1a1e0b00000001000000800000004d006900630072006f0073006f006600740020004900640065006e007400690074007900200056006500720069006600690063006100740069006f006e00200052006f006f007400200043006500720074006900660069006300610074006500200041007500740068006f0072006900740079002000320030003200300000006200000001000000200000005367f20c7ade0e2bca790915056d086b720c33c1fa2a2661acf787e3292e1270090000000100000016000000301406082b0601050507030306082b06010505070308140000000100000014000000c87ed26a852a1bca1998040727cf50104f68a8a21d0000000100000010000000e78921f81cea4d4105d2b5f4afae0c78030000000100000014000000f40042e2e5f7e8ef8189fed15519aece42c3bfa2040000000100000010000000be954f16012122448ca8bc279602acf52000000001000000d0050000308205cc308203b4a00302010202105498d2d1d45b1995481379c811c08799300d06092a864886f70d01010c05003077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f726974792032303230301e170d3230303431363138333631365a170d3435303431363138343434305a3077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f72697479203230323030820222300d06092a864886f70d01010105000382020f003082020a0282020100b3912a07830667fd9e9de0c7c0b7a4e642047f0fa6db5ffbd55ad745a0fb770bf080f3a66d5a4d7953d8a08684574520c7a254fbc7a2bf8ac76e35f3a215c42f4ee34a8596490dffbe99d814f6bc2707ee429b2bf50b9206e4fd691365a89172f29884eb833d0ee4d771124821cb0dedf64749b79bf9c9c717b6844fffb8ac9ad773674985e386bd3740d02586d4deb5c26d626ad5a978bc2d6f49f9e56c1414fd14c7d3651637decb6ebc5e298dfd629b152cd605e6b9893233a362c7d7d6526708c42ef4562b9e0b87cceca7b4a6aaeb05cd1957a53a0b04271c91679e2d622d2f1ebedac020cb0419ca33fb89be98e272a07235be79e19c836fe46d176f90f33d008675388ed0e0499abbdbd3f830cad55788684d72d3bf6d7f71d8fdbd0dae926448b75b6f7926b5cd9b952184d1ef0f323d7b578cf345074c7ce05e180e35768b6d9ecb3674ab05f8e0735d3256946797250ac6353d9497e7c1448b80fdc1f8f47419e530f606fb21573e061c8b6b158627497b8293ca59e87547e83f38f4c75379a0b6b4e25c51efbd5f38c113e6780c955a2ec5405928cc0f24c0ecba0977239938a6b61cdac7ba20b6d737d87f37af08e33b71db6e731b7d9972b0e486335974b516007b506dc68613dafdc439823d24009a60daba94c005512c34ac50991387bbb30580b24d30025cb826835db46373efae23954f6028be37d55ba50203010001a3543052300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414c87ed26a852a1bca1998040727cf50104f68a8a2301006092b06010401823715010403020100300d06092a864886f70d01010c05000382020100af6adde619e72d9443194ecbe9509564a50391028be236803b15a252c21619b66a5a5d744330f49bff607409b1211e90166dc5248f5c668863f44fcc7df2124c40108b019fdaa9c8aef2951bcf9d05eb493e74a0685be5562c651c827e53da56d94617799245c4103608522917cb2fa6f27ed469248a1e8fb0730dcc1c4aabb2aaeda79163016422a832b87e3228b367732d91b4dc31010bf7470aa6f1d74aed5660c42c08a37b40b0bc74275287d6be88dd378a896e67881df5c95da0feb6ab3a80d71a973c173622411eac4dd583e63c38bd4f30e954a9d3b604c3327661bbb018c52b18b3c080d5b795b05e514d22fcec58aae8d894b4a52eed92dee7187c2157dd5563f7bf6dcd1fd2a6772870c7e25b3a5b08d25b4ec80096b3e18336af860a655c74f6eaec7a6a74a0f04beeef94a3ac50f287edd73a3083c9fb7d57bee5e3f841cae564aeb3a3ec58ec859accefb9eaf35618b95c739aafc577178359db371a187254a541d2b62375a3439ae5777c9679b7418dbfecdc80a09fd17775585f3513e0251a670b7dce25fa070ae46121d8d41ce507c63699f496d0c615fe4ecdd7ae8b9ddb16fd04c692bdd488e6a9a3aabbf764383b5fcc0cd035be741903a6c5aa4ca26136823e1df32bbc975ddb4b783b2df53bef6023e8f5ec0b233695af9866bf53d37bb8694a2a966669c494c6f45f6eac98788880065ca2b2eda2 UplayService.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 UplayService.exe - Suspicious behavior: EnumeratesProcesses 24 IoCs
pid Process 2284 upc.exe 2284 upc.exe 2284 upc.exe 2284 upc.exe 4892 UplayService.exe 4892 UplayService.exe 4504 upc.exe 4504 upc.exe 4504 upc.exe 4504 upc.exe 5672 UplayService.exe 5672 UplayService.exe 1060 upc.exe 1060 upc.exe 1060 upc.exe 1060 upc.exe 5344 UplayService.exe 5344 UplayService.exe 3724 UplayService.exe 3724 UplayService.exe 5976 upc.exe 5976 upc.exe 1060 upc.exe 1060 upc.exe - Suspicious behavior: RenamesItself 1 IoCs
pid Process 4504 upc.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 2284 upc.exe Token: SeCreatePagefilePrivilege 2284 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe Token: SeShutdownPrivilege 1060 upc.exe Token: SeCreatePagefilePrivilege 1060 upc.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1060 upc.exe - Suspicious use of WriteProcessMemory 29 IoCs
description pid Process procid_target PID 3596 wrote to memory of 2284 3596 UbisoftConnect.exe 76 PID 2284 wrote to memory of 4892 2284 upc.exe 77 PID 2284 wrote to memory of 5512 2284 upc.exe 78 PID 2284 wrote to memory of 2912 2284 upc.exe 79 PID 2284 wrote to memory of 6020 2284 upc.exe 80 PID 2284 wrote to memory of 1812 2284 upc.exe 81 PID 2284 wrote to memory of 5332 2284 upc.exe 82 PID 2284 wrote to memory of 3576 2284 upc.exe 83 PID 2284 wrote to memory of 3068 2284 upc.exe 84 PID 2284 wrote to memory of 760 2284 upc.exe 85 PID 2284 wrote to memory of 4648 2284 upc.exe 86 PID 2284 wrote to memory of 3248 2284 upc.exe 87 PID 2284 wrote to memory of 4504 2284 upc.exe 88 PID 4504 wrote to memory of 5672 4504 upc.exe 89 PID 4504 wrote to memory of 1060 4504 upc.exe 90 PID 1060 wrote to memory of 3724 1060 upc.exe 91 PID 1060 wrote to memory of 5344 1060 upc.exe 92 PID 1060 wrote to memory of 3116 1060 upc.exe 93 PID 1060 wrote to memory of 6012 1060 upc.exe 94 PID 1060 wrote to memory of 3220 1060 upc.exe 95 PID 1060 wrote to memory of 5192 1060 upc.exe 96 PID 1060 wrote to memory of 1332 1060 upc.exe 97 PID 1060 wrote to memory of 2868 1060 upc.exe 101 PID 1060 wrote to memory of 2640 1060 upc.exe 104 PID 1060 wrote to memory of 2944 1060 upc.exe 105 PID 1060 wrote to memory of 3080 1060 upc.exe 106 PID 1060 wrote to memory of 3196 1060 upc.exe 107 PID 1060 wrote to memory of 4312 1060 upc.exe 109 PID 1060 wrote to memory of 2740 1060 upc.exe 110
Processes
-
C:\Users\Admin\AppData\Local\Temp\UbisoftConnect.exe"C:\Users\Admin\AppData\Local\Temp\UbisoftConnect.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3596 -
C:\Users\Admin\AppData\Local\Temp\upc.exe"C:\Users\Admin\AppData\Local\Temp\upc.exe"2⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2284 -
C:\Users\Admin\AppData\Local\Temp\UplayService.exe"C:\Users\Admin\AppData\Local\Temp\UplayService.exe" -uplayservice_perform_updates3⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:4892
-
-
C:\Windows\SysWOW64\regsvr32.exe"C:\Windows\System32\regsvr32.exe" /u /s npuplaypc.dll3⤵
- System Location Discovery: System Language Discovery
PID:5512
-
-
C:\Windows\SysWOW64\regsvr32.exe"C:\Windows\System32\regsvr32.exe" /u /s npuplaypchub.dll3⤵
- System Location Discovery: System Language Discovery
PID:2912
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exeC:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=gpu-process --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=2260 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:23⤵
- System Location Discovery: System Language Discovery
PID:6020
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exeC:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=2668 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:83⤵
- System Location Discovery: System Language Discovery
PID:1812
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exeC:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=2684 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:83⤵
- System Location Discovery: System Language Discovery
PID:5332
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exeC:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=renderer --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2836 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:13⤵
- System Location Discovery: System Language Discovery
PID:3576
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exeC:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=renderer --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2844 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:13⤵
- System Location Discovery: System Language Discovery
PID:3068
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exeC:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=renderer --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=2892 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:13⤵
- System Location Discovery: System Language Discovery
PID:760
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exeC:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=gpu-process --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=2784 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:23⤵
- System Location Discovery: System Language Discovery
PID:4648
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exeC:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=gpu-process --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=3164 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:23⤵
- System Location Discovery: System Language Discovery
PID:3248
-
-
C:\Users\Admin\AppData\Local\Temp\upc.exe"C:\Users\Admin\AppData\Local\Temp\upc.exe"3⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
PID:4504 -
C:\Users\Admin\AppData\Local\Temp\UplayService.exe"C:\Users\Admin\AppData\Local\Temp\UplayService.exe" -uplayservice_perform_updates4⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:5672
-
-
C:\Users\Admin\AppData\Local\Temp\upc.exe"C:\Users\Admin\AppData\Local\Temp\upc.exe"4⤵
- Deletes itself
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1060 -
C:\Users\Admin\AppData\Local\Temp\UplayService.exe"C:\Users\Admin\AppData\Local\Temp\UplayService.exe" -upc_platform_mode 0 -uplayservice_perform_updates -uplayservice_pipe_path XFwuXHBpcGVcdGVybWluYWxfMV91cGxheV9zZXJ2aWNlX2lwY19waXBlXw==5⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
PID:3724
-
-
C:\Users\Admin\AppData\Local\Temp\UplayService.exe"C:\Users\Admin\AppData\Local\Temp\UplayService.exe" -upc_platform_mode 0 -uplayservice_set_app_user_model_id -uplayservice_pipe_path XFwuXHBpcGVcdGVybWluYWxfMV91cGxheV9zZXJ2aWNlX2lwY19waXBlXw==5⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Program Files directory
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:5344
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=gpu-process --no-sandbox --no-pre-read-main-dll --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=1908 --mojo-platform-channel-handle=2328 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3116
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=2440 --mojo-platform-channel-handle=2436 /prefetch:115⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:6012
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=2540 --mojo-platform-channel-handle=2536 /prefetch:135⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3220
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=3584 --mojo-platform-channel-handle=3580 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5192
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=3880 --mojo-platform-channel-handle=3876 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1332
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=angle --use-angle=swiftshader-webgl --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=1148 --mojo-platform-channel-handle=4388 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2868
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=3852 --mojo-platform-channel-handle=3828 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2640
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=disabled --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=4380 --mojo-platform-channel-handle=4280 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2944
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=4524 --mojo-platform-channel-handle=4332 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3080
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=5080 --mojo-platform-channel-handle=5076 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3196
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=3316 --mojo-platform-channel-handle=5764 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4312
-
-
C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe"C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=4820 --mojo-platform-channel-handle=5568 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2740
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\upc.exeC:/Users/Admin/AppData/Local/Temp/upc.exe1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:5976
-
C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe"C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe"1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4040
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3308
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\chrome_100_percent.pak
- Size 676KB
- SHA256 a7862157dd52aa867aadbd78f6d3fbb1723d3ccb9c5d15f48128da4d861d004a
- MD5 b4f96b87e4511a02842ec5662c34aff3
- SHA1 b02bba7b26b7a9621935d65f38b03263c7b4ce16
- SHA512 982149570bdc254811fd622add4890f546eb7b62e029f73813e417787a1c2c3f0852a1c66e9b9725eb4c7c119d87716af84764f2801f3a2d61434e9ffe59fb01
- SSDEEP 12288:CI3H1fJRjzgsz5B0GDJQrnKs8SNP+QSsSiluS1Nzm5N+mIAe/uoO0TehErv:F3VBR7zEEmPLSmNzm54mBe/uoO0TOE
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\chrome_200_percent.pak
- Size 1.1MB
- SHA256 0d008de51c1289a2f0afa48a6c855b5fb6229936c3d747fde06a39e874a9af05
- MD5 0c69813ca20eeca3f17558c2b14cabda
- SHA1 08894883b8f45f67b2889e10827ec6342f1aa147
- SHA512 ebbcc5a0ee4724728e33c2d365165d28a4aee02c1354bc88b92352a50c0326e8bb450e2befc1c3a6aefceba269eba890e294f46865ea1e4e2c2e817329e42632
- SSDEEP 24576:m3zB69p1zLmmibkFR8+mZrWhZK//vumegvQt9j4/wvA1ZbaPa6edhOLoh4:m3E13mNbkFRJmEhQfRhQPj4ovA1MajrA
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\chrome_elf.dll
- Size 1.1MB
- SHA256 9ce16ccd4f86916fce6143beccc56b606c73369520dfc34698c76929a5fc9270
- MD5 0e2f4a4d1435532f96c6e42fe16d2dd8
- SHA1 84e19fa4f38b0a26d8c780df82c7293509237bdd
- SHA512 1e547d13bc2ce0e4254719d3222902e9ff26baf9d42cc24dc06e304d3b026ac61f3238d961bcc080770e44627ef6ca6248a923fa80c3358eac28b5efb5569760
- SSDEEP 12288:NOr8ytRuOZO2fuY+0NPfyo8wWjPQ9MG1Vm2EQesC2sgshsZiYhzQHlKvmWnytAb:wr8y3uOg256OCQeslsmqFKvyq
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\de-DE_loc.txt
- Size 119KB
- SHA256 571db5516404bfcb9dfb0958620ade264216b2e4724660cefe4b744f37e09384
- MD5 84d73be1318e7bfe4e7b71fade6f63f6
- SHA1 42cdcc332e7eabd9c74ad7ba810d8a320b37e17c
- SHA512 708849b8f484f226fa34e878e01c9e7bfd392d8137f9d62b0d5982d3be620dc4b96b22bdefbef51a612785d5a0467079d63014a08e4846657f33aed1764f3d2a
- SSDEEP 3072:BPoo0cQwp8eEd4kwkw1XpsLuT4WBMu8KeOmLuU7yX+lNQnus:FscQYkysLuiu8Ke97Qnh
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\en-US_loc.txt
- Size 107KB
- SHA256 f0f71965cccab45cca9c575c24100c356f40b85214161b213a492076f8475fa0
- MD5 a71ba7c36c8e401eeb9cef35ea810581
- SHA1 fc71c781ac658fb91472f10241747ae8305b9141
- SHA512 546e8c94efc4151413b50e5ec46827af05c0f53d880226ba903164f5e933a1be871945d5ad7093acd21948ef62cdd67acd5873a5530c412c9a8df53d29b28d20
- SSDEEP 1536:XSYE0gVGJEhXz7pAmz9JCLtDP/Vhnr6jtrSWon3e17Dc+Xy6:40gVouz7pAmz3CtT/Vit+Wa34Dc+Xy6
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\en-US_release_notes.txt
- Size 173KB
- SHA256 fdfd92b3f3ee36654fd5759a05ead91e8c252745612ec6a84d3dde6f1b67cf83
- MD5 da634e33fe7e97aacf800b014f4daec2
- SHA1 97f1f20b408d8979ea143e56e7f807d72d896141
- SHA512 358e81f4d2a3a832ef7c6a8fb2eaeca2edf705b8a105b0c2535ed8fb8747592caa0ff5a5eed61e0e733ae8fa7dcbefc1dcb77f974eed29ae73dca1efd9900196
- SSDEEP 1536:niGLx3tDTJNInZGxdDpYlHEwV+vP3abBA0fTaf:iEtDclX+H34Avf
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\es-ES_loc.txt
- Size 116KB
- SHA256 8c32f0f3c3980bc4b99a93bc960c079f4d1b31f06294e855f3d8aae76843261e
- MD5 2cbf63638a3ae6b1fdce18149f199bda
- SHA1 ce6a0f4a6d500bb12bafa09bff87570c7fb9ef64
- SHA512 52c6a59231a7ffcc4da85c5690f267b99119022f14b7a28125d9e57a3a9fbc0d8a5e51571ca556e4b707e1c6bcfc7d4532ae2cd4ba59f9fb369d5514db0a4897
- SSDEEP 1536:uL4BR2cUdqxiGetbjQ0nHidQPjrgUS1IGgx+n4SLWmBHW:52cUAiGetbjQSHtPjhhwrW4W
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\fr-FR_loc.txt
- Size 120KB
- SHA256 0606ee169d0e6fc2a1da1c426fece5c3698ce62ea2e53173e663c5bd91d59a97
- MD5 338ecb41aed8c48e4c686c41581bea8d
- SHA1 a157b48fe11e853049291801bbc65aa22a927466
- SHA512 0029227694d83e36361764168304d927aebbb94f1ab9d842e5017927cd2e6b4ea991a1791b10dcfccc349b675afe30e81559de52278f395fcaa589d32d217051
- SSDEEP 3072:dphfbWi2KuT0RVdyoQw7axWAzKEgT6r042l2Ciyhv:rhzWbBw7axWY0EC5v
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\it-IT_loc.txt
- Size 113KB
- SHA256 d53dbd234072ea67652ebc62a855b8d26ac652653ebe53a30329812e91924d75
- MD5 f0e7b2cf98bd92e10461527243a6a138
- SHA1 3b385da6b3a92df48246ea7c0a0dda08aa487676
- SHA512 6d07906a462dca46d4d8bb90df233842da518898634f34d6edf860ab2686e8fb1d7decd26046df3c68f56e3065e43512819ec9a41e0b739d1ccdd8e9aedf04ed
- SSDEEP 3072:gT2/v67OruVFacC07agwMnQe0ZkUyDR9Y+uSu/pVF45DTudw:gT2/v67Or6DwMnQe0ZkUyWSEpU5+dw
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\ja-JP_loc.txt
- Size 131KB
- SHA256 b432aca0912dce19c9fb902e04432489dc6248dc9ec11233684f056e3f11218c
- MD5 292cb202ad94a0eb26b7ebe8330bb8f7
- SHA1 3e703485ded35eb0a7a4d51e4022674a8266724c
- SHA512 d8f68048135595f812dc10ea0add6e54ebedf0bbab71f427a9bed5fb55f784d569c2a3229796870298e85af1b234a268f83cefb8c60349192d3e48430344744d
- SSDEEP 1536:t3dtky9PoPVmGnui4uK4tmlGJClj1euXI6x4Q:yy9PoPVmGuNymlAIn4Q
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\ko-KO_loc.txt
- Size 116KB
- SHA256 4e5b5d011195e661f60e7b4e240c3d3e499833be87a4b3f35d32736324e5c8b8
- MD5 e84ecada98df50626bd898ca8493a70a
- SHA1 2671deceaab195bb99672054db6a25eef7ca91ca
- SHA512 61b534c94ccb1ca8ecd670bd21a1ab7b4a299b84d0ad0a3d2c0f834b827204e1eecbfdd205ca21fc753f65708832e8d45c7ca82654e63ed64755265bb2ac430f
- SSDEEP 3072:6yH9TRHIuJns6gppmF09ffiBcAF3QHAivD3bEeTY2:6KTRHq+C9ffieAF3QgabEeT/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\pl-PL_loc.txt
- Size 116KB
- SHA256 bda030f7211ecb9de5b5b5587fa2ce4ec15109b83f216a21490542c2dd18ef8e
- MD5 f4f385a0e42b9f7d3565b8009c3d6a57
- SHA1 d37e2ad005f78cc22a26fa003347223b4350f6df
- SHA512 6f9088b22d1e438b6b525be832090e7246bc3b08004f9ade9135d32ce0d89b6db94b5fb2a00b5560ae3e73a6d3475c12a52e01ade6bc13823b303a654d348610
- SSDEEP 1536:sNwiSKybG3tP5xrs7qaSyojmeTFzEvEWF2UqNYbzQlBqPvPuwV6H:sVyWtP5xrsGa+q4ovEWBfQLq3PdA
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\pt-BR_loc.txt
- Size 113KB
- SHA256 f0ada06958b71933ac4043323c771736c0983fa24109876c9dddeb4e7ed25359
- MD5 b5188e3d34f6d75a552306d2a4ba9282
- SHA1 07c3dc83069446cb7861609dbf404f38c0507761
- SHA512 27e5aa74977861ed1c33491a9acc00589a3d08d77ca4b25832ed740efa21ea40aa7775160eb058b3be8bb49e3a346172c2c63f4d31a96c22d6dcb964471303d8
- SSDEEP 1536:odM4oz5jOTutQ8Gem6IQDcCgTlf6wuWDtXTyCAMxNr5o36T/CUwX6m9785z:OwjOL8Gem6IQD/gTlf6wu8+cNrS3Q/Ua
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\ru-RU_loc.txt
- Size 159KB
- SHA256 29fb0ba6f8e638a1a5e75bbb53142f1083015ae3ad488e333a4787694cc0eb1a
- MD5 5d1dc51774fa34780cb802d7a783b608
- SHA1 d96e905bf8d980139bb790f14d1df87e2730d745
- SHA512 ed9da48605be9039a073791e2f53e0053ac4208f93769061897920b904c1eeed8e9b32f6be1a0b08028a890feeb38cfd96cc2727716362c6b7c82bb2acdd98cc
- SSDEEP 3072:TcY3fykQg1Dz/CK1PhLYiUfWzMaW6/mVcUnRpFOit7w+8cQliXe7nIleINkxELbi:TcY3fxtLYiUeBKLnRpVt7tQlp7CeICxN
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\uk-UA_loc.txt
- Size 159KB
- SHA256 45fea11a8f1d04e8d922d157578ba26722f74069b07a6ae2ad89d19416518330
- MD5 c7b079c01b56b38c8835841067a1e480
- SHA1 b7fee7a6965f4661523fc02e2bc342c99b82b0fb
- SHA512 6dd83933b73c0a03fe596f98fa823722094f56fbdc7198daabcb10e4e443850519446bea52355343f82bb607fbde23155c801fc09a877f30cb125cf8c13102c9
- SSDEEP 3072:ARQuYCWGbZVSo9+EssjXVX085XVWxGUc65A8RZVgaw:6lWPrsjFXr5FPBobR+
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\zh-CN_loc.txt
- Size 101KB
- SHA256 0dc9a29265a0c2854632affd40348d816ba16e224e87bb52203cbefd61384610
- MD5 445829604837cf63f61c25939f145df9
- SHA1 15288d7ee07b5d07724df060bbabd891550603e9
- SHA512 9dfa59431ef0209dfc6ca7bc8c4a240e762a0e6125d97494a1e1121797563738fe30bb911de77561b9641ac72216cc2aad54a5fbe54cb206bd2a3636bd73d0a3
- SSDEEP 1536:fobKm/uXdMoYjygSzdhC8eTO/wG8tM0XtUxzqArf7fI1tGCJ:fcuYygShM8eTO/wG0pXSsofotN
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\zh-TW_loc.txt
- Size 101KB
- SHA256 9294cfd3f46695ff819d33406b37cc84de8c4b1a58e5b1f85c455ae45043ae15
- MD5 8f67c99d346e5ce1d58baa4b8fbe5437
- SHA1 b57ba54fb5dd00371875d80675b04207669a9e3d
- SHA512 bc4f538380e410f77024148c38cf84c282a8530c1819b1175a76dd7edb37cb8ab6d75f6bc1ae834088f345a067b34174bcd2dc7f16190aae461b454e722fe110
- SSDEEP 1536:MAraBIxMh+ExydUV3PL9b5wOdsBTm4ZBZ//9hnF2BwpG4vjhU7I8yA7SRq+M4vDn:w6+AUehBTm4ZBNRvQhqtl
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\resources\LICENSES.txt
- Size 1.1MB
- SHA256 bc03d83895cd67db732fd5780f3b7e6e61758692adecf3f30e1127e7f9f470c5
- MD5 c5cf342dafc384cbb783cfeff72850c6
- SHA1 a8c1e1d5e950d1e79da17019953ae29e75d174a1
- SHA512 7810321b1bbe3472c6451daea8d18f5dc891089974823c565a0dbc148b3c16c16ae1d0d9aa8d395a1d314d994a1d65469d17db49bd29b172da01c4e24f67dc4e
- SSDEEP 12288:JX0sjci21O8QJfsfPY8d8QN3P6tk3memBmLemgE3HQmHZmrm5tufWmumzm0HfPNg:J9QgU4G1zuju13/u9BYBPuAYESYQQ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\discord-rpc.x64.dll
- Size 754KB
- SHA256 edfe4bad77e71beacd36b5d5ed7b3dedf8ebe4aeb24f658eb667c729d47d4594
- MD5 60a16486e5fe56c786b0789a09fc0ad5
- SHA1 b15cb6b9821d26adc24fa063c0c3e58efa505bec
- SHA512 ba631ad6e5bc4b25ee3255c6bdae1b6309922574c640dad69961d1059734c661d7c32cacc2ff4b74d9dff520118d8f8365be59eb4a01553c48a3952b69748fb4
- SSDEEP 6144:KtBDpfg8SJDbARWWC5B3oe3cfha1sik3MBQdFdnRptXcgILpW0PeDf0i:KtkJJQy5B3oj5a1s33xDdnRcLpde7J
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\discord-rpc.x86.dll
- Size 580KB
- SHA256 ceac03434a52de16103001e67b63b73294e4b2a395d61b874b0c027300b6d782
- MD5 e585a900ac1d9b60f6b1bda71637dc1b
- SHA1 de4687fac4ec6690dbef99b13d9fc01e1d235ad3
- SHA512 b911689c75f5c802df4af6ee7b489d0c977747bbca3b55fa6a14da559634add9df559742c2f3520c524e427d177e11af8175311f33e3816c4b9a31cb54964cd7
- SSDEEP 6144:/WzsNrb2/twRx2ax9L66vBvOz+f8uOU3g86oxaeZnyHuKfILz4ta+x:/uqHKtEkaxcuBvm+fnZcuKfIP+
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\gear_core_win32DLL.dll
- Size 1.0MB
- SHA256 d7407bdbac41501bb3bdf779a6466e32418bde775263195d65a2b6e6162b8923
- MD5 aa95aa4bb8ff2194187d3f3920b87075
- SHA1 3457e919e1093dd4bbb98b7150dd620cd487e1c4
- SHA512 6cd38c14f8cff3c7c1bc7c32f73a045b0032f6dc1d4e5f45d4236d143eb79fc03b8254b2de2553a39bcf1790c5116ee39cfa93515a0306c8e94d2ee7e0af3174
- SSDEEP 12288:TQUQqdd/zzSJaNXfVqpvE8cyIlzCFiJyPCx69fETomMuJKP4ejM:EUQqdd/3S4Xkps8gP69cTomBKpM
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\gear_detection_win32DLL.dll
- Size 760KB
- SHA256 818382eead37e80e58e001118d6ce9e098d70d096cc2debe2281cd9bd61818cc
- MD5 7da319043af779910c210b406c08b8fb
- SHA1 70782dd1219e5a6686166a9ad7b55db2db24d250
- SHA512 579789f9f547a0e480bde82dc61a38a2259702bad39107f4efe8e7e2135cc9b7d46c9b003664afbb946a8c70a0c24c98f5effd41253d314f1f3f450c574051d3
- SSDEEP 12288:OWLI+EqDhY5jovpgbI6Dx/op/SDutyOsLZDJ:9U+EqDhYBovuwyOsdJ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\gpudatabase_win32.dll
- Size 194KB
- SHA256 09c5d2703bd115f66cc4f3274c9010ed6770f8f7dddbd503f92c7419495e3525
- MD5 4acd73147d209ad8038ec339349d233d
- SHA1 4903dd03d8a7e3d2df0a397b889d7037395ae8cb
- SHA512 e156be665d35b6f1292b3ed4c68aa3602d0132b59ddca7960a0db1285a1176b6daf76c5a98fb9805b52741350cbde1374ba838b69c6fd5cea6bd0a808c3983ec
- SSDEEP 768:sge5p/G17l7+6ElNXh/Mb1PUrZB1QwxGzR8W8YExhxcydmUnqBF9mizrRclYd7fY:sg4wkN4wYVmfjQjE7Q9ifI7u
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\icudtl.dat
- Size 10.0MB
- SHA256 a9f6072e858ea29cb66501847856d403c862f23d03cac2656d1e0fa2865fdc7b
- MD5 ba9e45bfca3621e4086e6a1870f8cc41
- SHA1 8d1b2d42707812608907f8000041c16e7755532a
- SHA512 07ac486039098753d77b53ce0638a172c583620d6feae0447da9b8931fe9e0f8b108ca7c8282b6596bdcfb252b3600bdfe7cb01c96b3564605084a932dc7298b
- SSDEEP 196608:fwPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2YEs:fswkpHiXUxY/iJ53IWhlVjEeIHs
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\libEGL.dll
- Size 397KB
- SHA256 986c63be5f58e54351333e29b50880ac4cdf0151e197e30b213519d91db727f9
- MD5 26c2fe4a72a6509ff705c1f00c715ea1
- SHA1 3e2f2b1f10fd8fd695f619bc7a1c68976539d334
- SHA512 337f5b402449f0ebcc74c91e2006f4f26198d037764e91be0efdb397c9e5c8bab465114670f0a69289224f677a29622e2b23d47232b8ae0bf46b399a6fdbad43
- SSDEEP 6144:5ZqR0/nE15aBiWW6J2KA3pP91uHJAj54YyDGdpChfhYAt4x7LNp:7QWW6J2KA3plIkYCef0
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\libGLESv2.dll
- Size 6.6MB
- SHA256 e567ddce5e15dc2528e4f50e91ddcab914722a5807c48ecb00e2bb87b7b69689
- MD5 e1d9c502a2a6fc1762e4924df24ba2c3
- SHA1 da7eea42c030d1381ec651a81ee2a155d03210e4
- SHA512 ba467ec435a37a1b162222f828d75f9d4c183721c5f8d6e7f94f74c6a20da65b2105664bed0ffb9d1d4ad2da2592dbb695e7703648b3f0080cc43ead98b3a6e9
- SSDEEP 98304:szuYx7f5QsigLnmrFz0c1t4SZIYyGYphnXD1iqzIeDXla8LLVnFrG53d:XYx7f5BhmFz0mlJA1XzIeDXla8Xfet
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\libUbiCustomEvent.dll
- Size 57KB
- SHA256 003058cac6653f4117a34435be500c3766822e6993065b6ad4f9c2abd0318bc3
- MD5 17fb323cb8869946038e4bb525f129f1
- SHA1 28e1e749aa4a772be0e36723b556efe1addee9e8
- SHA512 3f15005ea614148665c6827896a5461755adad588c8aed83ba64a2138a5c8fa8f376b476d15322f802227319d8d033b94dc4de2e6ccde23486fb86bd9faa02d1
- SSDEEP 1536:R+ASNEljLmOO90bv6X3oCKFjm0NoXOttmHWuZjQjE7Q9dfI7uJ:R+ASWljLmOUIv6XXcjmlOttmHr++70
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\af.pak
- Size 576KB
- SHA256 e8e66b6eac4861234bee5be641bd2c1c15657953679efa9b186dc41e493c27a2
- MD5 86d499b5bc078bb349069f9447b9c833
- SHA1 3c318e0f2ceb2b32b5a722031cd76c4840bd58fc
- SHA512 53b5127a0045a13b411b18b50d6f2a72a3012627271ba18958f4624da7685cb8ca549975bd7e430ad1aaf237e321dfa0a6f3d01561e087fa171fba9d19ffdb63
- SSDEEP 12288:B3x1mEBPtRGtxkgBRlkNHoFGR/Wwa+H2JyndjRrd5Ivsgo0vh+IDgo2Yv+9PXi2y:B3x1mEVtRGtxkg7lkNHoFsWwa+H2JynK
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\am.pak
- Size 925KB
- SHA256 748b5f87638e6f38dc1c282871de2ba04712437f3555b2d57f511fa2e32c043d
- MD5 6f2bc4d204cb0bf1676815e5e0048ec2
- SHA1 4ab4ec49e063f0cdcee9d847de3d40f15d8ca36f
- SHA512 3dd96886e43df85bfb117c26e9a6bf6dc993c215b66bee6c086bd7c7e59176ca15bd354ebbb92bd257f5473cc7068330e26b9355bd068e76ec22bc5478b0506c
- SSDEEP 24576:gZT/uATs1AThTCNUy2BxpNUujTiY9zrXAd57GkMX/VVq+XG/6rZzPopCCY:u/ux5i
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\ar.pak
- Size 1020KB
- SHA256 d30f503a5bdd753a52732eae5c6835d707bc3f6da8444c56173c1605c547331b
- MD5 b779743f42954b1b636b1871559a786d
- SHA1 084f333a9d4fc0d3d44df854dbca7ddb36575b4d
- SHA512 327c9d5d9af6157442ed472dac1c0e8f9fb0cedbac29deed52c32f2dd2177aca1a65b17450aae91827aec19a72fbcdfdc2630ce8d095c270f0d27099f19f7613
- SSDEEP 12288:gcB1jXDTLN1dwRiIvPU2vU3kTUSf5gxNZdxQS2zXfk:M5WQg
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\bg.pak
- Size 1.0MB
- SHA256 f5299989c664ac19e921201fbaa67a95d9197ef4672b322eb1c77e8459ee82be
- MD5 57ccfd3e8f6acedcd6d1ad62448f6597
- SHA1 b76c333eba515b4ae0ff116ab13abd262f80cf32
- SHA512 972460253e3d1bcad71d2deabe83294eae15a84f82c24012918a7452da61c68f104bfee77ab61ae9085b1198d711a95af7728297fa2f846f364c813f2aa92b29
- SSDEEP 24576:Rii3G0ASOuhuoWTCMLYRzQkECjUDVb6tXoidz373ZJP3ADKvmVDTYK74u2VG7Q/L:T3IquoWTCMLY28UDVb6tXoidz373ZB3Z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\bn.pak
- Size 1.3MB
- SHA256 225272dcee986c710338395f752424e5817eb689e389d57d01fdbcc014111d85
- MD5 e681ae17c370120cb05be9b23fa321ee
- SHA1 5dc65dfff136af26b4c7464fe277299a05d0feeb
- SHA512 1bce90446a70cc04744fcdaaf8355e4a96b6e756461d256b01f23a4bc218935498c564596081611691b136c728702dee8927128bdbdc8631182c6928b784e0ff
- SSDEEP 3072:XTU/S8YQZPXjGnTvxoHFf/vTscnfJuyWSSBwBhmBbfDQf5RnWrqYD:XeTYQZPXjAvxQ6SSBwBhmBb65WqY
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\ca.pak
- Size 652KB
- SHA256 f2bcb2629bdd17275bd466200b062c7fd4804dc54dafed2d2be9ddb7d57a6c2e
- MD5 53ea46e0d8c18828bf9751fb3c7eeeff
- SHA1 192a51d0a2e953f3db0da07a94ac3adcb733c821
- SHA512 599271d72bd52b14265fa697a15ac77c33b7703f55a154eb81146489fdfe9d1067373e5de003ed8f0f55bedb0cf44bab370eade9f88c33650599fdf52e9a8ed4
- SSDEEP 12288:bgN7GyDCie8WDQRU8l5PsFrN3Mw2juwHzejm0t3lt+7T1gXwXLw/fnj9FlxQE8Cx:8nfHfLatqxZMNNrX651niAU
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\cs.pak
- Size 664KB
- SHA256 0d4e0a9b3ac5fafa654395396c850626e8aa2e62c3984fbd7d432a0c6a9a66ff
- MD5 d2877e1b093bcfc55c1f009e3c81fdc0
- SHA1 2dcc489b6e7f04bc19c3912413187be2f71a018d
- SHA512 d164b5cdd26e1a765b946f0778fe84474247a4b300c91cb26661b399a00a49682d15b6ccee0b8835646d95a8485ad864561d639d16e4ff1c8b388b41e9c731e0
- SSDEEP 6144:ITYj7zJhtV2UBgJJ5AUQ3hkAQO05nCFLZZ8OdLJSBZMC8QAs0:OK1hlIJ5A9x05nCFLZZ8OlJSY
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\da.pak
- Size 605KB
- SHA256 3d4d28c64c2b4aee808a4652c68a9b2c68dde735b5c25626b1997fc3ca4ca749
- MD5 30855438ffb57e53125081594e86a155
- SHA1 792c1ebda998220ae1c3a0a1c22776606535e9cb
- SHA512 72d6313b1dbe3417d4699fedacee9bbae11cdfe8b0aece340f06ff34eee6146e27791e1347f001b67d3412a7291357df3420883bef609f341d05f53f65c80723
- SSDEEP 6144:7I05XnYtbxGzVWoJ55+SSwC/eBaEwlA+6JwEqob+1Ia0qn55YI5rdMFKld4FFQw8:805X6SJaPpr55YIddm6
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\de.pak
- Size 652KB
- SHA256 9331db2eccb7a0f462b75ae7c915ee43fcb0fa8b907507e5f8cce8e021991e41
- MD5 4fbaa34efa4746737147272caf5882ca
- SHA1 8556e92ddbac098a00dcfcafe412c0d808e8b088
- SHA512 ececb5b6a335ab07e63b927d6cda8d4131395682b7a30471b8662e697cb5716bc07c9d13aeff123b49271cb7daefe5fcc5144dc0d26a54cf16e7aff483946348
- SSDEEP 12288:HH7OTw71LL83K7UppgraD1vHYM5bqMmU7VCgk:n7O0183K7UppgraDFr5eMnCgk
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\el.pak
- Size 1.1MB
- SHA256 6affcddbe6258074c727c9b2a02c8d63ce7044451121f33046a307d6f58fc120
- MD5 073c0b2b5baf82e47035011be332f6ee
- SHA1 dc5be2872166aaaf4e1cf0d48fbb78d515280021
- SHA512 cff4459d533ac1172a2bf806db8275b915925e0ab245ddaa0be4da174ccfb39188bbf9fd243077156bd8a061178f0c2e2e46913c820ce071d03dcf89a693e846
- SSDEEP 24576:5p5bVHCFbr4DQsYh9Dk2t8ZujIJXDsS6AmSgpn42sBsypxZjvmpgVoyTIWYNQKO7:rHCFbr4DQsYh9Dk2t8ZujIJXDsS6AmpY
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\en-GB.pak
- Size 524KB
- SHA256 b7c9af12e1d797e7eeec0133a30064c00d8e1f4bab07f860a4fdd26a32ebcef7
- MD5 c9690da9c45075a8f00930d4967c1c81
- SHA1 d03fa5586338a2f04b57fc530f214230fff04dde
- SHA512 fcf55eb9b64bb8d3728c61d70fb7aabcfa3236558c6be7f9f1589851567e5ec9a6fa675d61ff7ef8ffae5c4affeed560a7f46e88c76dafa5a94d32c7bf3ed391
- SSDEEP 6144:mGC8jo3eFWiff9E0woVSIF6JGcMP9eFQCKTfaYcFXe3LX55hxqnBcyRlL:/C8joudFEGdcMIQCKe05rxs
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\en-US.pak
- Size 529KB
- SHA256 f13ae4630522eb2947f37646a8919ca84d6ca172001c7dba9dc8c846bf3ae3f4
- MD5 acd663c0331d615fea5422a9a660d4d7
- SHA1 061a66e694f549a51d6c85ebca131c2b27b9b4af
- SHA512 22d508919af5f8b6d311b735fc230cd0fdec9019c51fef8f3012e0e9d112a2ec237d005c291882851e468534c70f84187fa56b80566f2ca78254bdff88d25c51
- SSDEEP 6144:60F/rVqMAuwAXgDMP9eQQqt3faY7Csyjo5nExMJngm8/PGwp:lj2TDMbQqtRN5ExIwp
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\es-419.pak
- Size 638KB
- SHA256 d61050c6344d8a66e77416d47b24e0260a7a5307c703a0e802d7facec1ec44ec
- MD5 955527abbe2474db13e6185e048540ec
- SHA1 795234ec3654f787b3e225a4dca5e1f721ad5ba9
- SHA512 f51903aa2d8fbca55b19988d86cd3337eb6207f871c14dd7e6d54a74deba453160b51bb47c9fe8ce25a2d2b12458cd3c6a8f6bf640eece08a189439d2fa00080
- SSDEEP 6144:JTKG0j2qx6lblMnhnVhYG7joZEKD5leKrQ+Dy54Tml5:JTZpO6HuO5leF+a5
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\es.pak
- Size 635KB
- SHA256 9a3ce2caf696b198d7a2a50b8ffd0eb70d36998b122d12212d371dbc9657afe5
- MD5 ff1767ca65da1d2ef6a39cb6308202a7
- SHA1 3059ffc381d4c56a14cdcd9c9a792fe2966cee1c
- SHA512 9229c4e0c2d736f59e1ecf3c1708ad2ba229a86844b533b3087d0f55b58ca45bf1bdb60a7b9818611602780d4399a1ca49f85c985c547521a1a9c16e055b1c20
- SSDEEP 6144:BlgD7EpzP0Rs2Y+12DkmKguEP+wqw4EZqX8jk5n6u2R2vZ2rk8+6PZOs5:BlVD022VmMHw4zX8jk5X2IvZTE
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\et.pak
- Size 581KB
- SHA256 e9af530d4b24f76372b17c9d714c5804fe218c824a7b92240993d578e5475692
- MD5 2e2ffb9c8fcaec66afec1388c0af935f
- SHA1 be99cc7ce282fae9272dc89585f0af223e08e509
- SHA512 ae3f65863bfaf8c9ea7fb10af7c269997f39305ed72b5a4a8fda1580de8dc2acd0f9182462b2bff9e9a5d918f5a2979476b144dc29eb4da9a3c21a5d5a435983
- SSDEEP 6144:FPvpNMT/7iISnb9aWgF+aD9zy10rmFZ1+MqpJiaOT8rNPFiMQog2cV5PM2eiiCKY:5BNAOFGrD93mFZ4Z7g2cV5PM7S
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\fa.pak
- Size 943KB
- SHA256 c9e6f7bee4c703187fe19e61af258a8a2c618e4f4b9a3e508e3960ee2c238477
- MD5 fe2854c790104740f7ec6ff1efa7c6d9
- SHA1 0efa7c29817d458464d55d2fe1f53dc45418431b
- SHA512 e0951c4cfe52b08b06f6925f7cb4d2251967ce5ff0734055f27c663f68f05d94534c4cd6e42eb0eb1f5a753d6a20a1c9683271b7daa78732e80d42724d99bde7
- SSDEEP 24576:9qPs8u313uyqoT+sJqJRmXXloTUOmdAQifaQ2XxFtJGk62YhHoiiqYMX4OOOUPxD:EPL5Fy
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\fi.pak
- Size 590KB
- SHA256 e6656ea146e05da32ea07046bf27b0188e55a8984501edb054ce993fe78ca51b
- MD5 fd4c28d436210055cc7829b38e4853df
- SHA1 7770ea0793b3c5d8f7e10910ba3eccb68a30e5b0
- SHA512 a63cd6e980a3f8b445961bde2d204b857dc40495782063d8a9806f5f7b1b0dc8d10ff8e4cc8ea52958fdcad18ada4b626e2a0570ecb152046b2ac2e3ca7fcf8b
- SSDEEP 12288:X8E3bwu19p/XQWao5TV0nU3/nrp/WaOr7Yk:sE15TVhnsl
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\fil.pak
- Size 667KB
- SHA256 5d7a30a371782e4acb9c4b8e147fc07566d41ca087192890670074c125327473
- MD5 82deeecd26e4733f49eb1b1381332e8b
- SHA1 1759f692be1d095006d943fc89fa4d79da825d2e
- SHA512 67b5e0875f7532424d642d57d712f2d32569172731d623efcceb3c697f9ac34dcc956f87a5c00aea5748d59043dab3823661ae5890193df7d344c37c32715c43
- SSDEEP 6144:SrTtzgLgwWJvynCScXFydDQUc00ztQ0hLevW50tr7H8zoVoAByuu:Ytk8wWJFV5A7a
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\fr.pak
- Size 689KB
- SHA256 cd2d5773bbfa8041f741023af5ac9cf6e99e7d1340e7043a79fddbba4494cc00
- MD5 185bbb0ad8221eeaf21bceaba585b240
- SHA1 3a73505a7f3b1fd770b186ae523a197e67c5240d
- SHA512 f9a71e9f5816f794a5a1e50b46bc9b4210df05aa1dfe0b743aaa0499afc7649f047ec81c5d76b5d32c6d6b485913bdffb8b267450903a303ca2f29f26f3d9cb7
- SSDEEP 12288:AAoXi1Q5XZLxgHO5CCKZ4h6QuahVUezEQg3PeZFMYnYk2v7r3TBc6/yMDz7pZ8G/:1uAgVQjV5zL
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\gu.pak
- Size 1.3MB
- SHA256 885dcbd2f140bea1bd6eaab3a5f146fb518fe3a73306497d5ebce3087984636c
- MD5 9167cbb146697c500ef42c7467f43a79
- SHA1 460871dea3c6e764a28ff28d7e3d7b49c79304da
- SHA512 c24d32ae00f41963a5e14fce0757d4ca709be24341af4790673e57b0bcf1e15472ee0fcb0c77f77292884747897a790f2f428d8ab51b8af42629d9399b61972e
- SSDEEP 6144:UvscsH5/ki+IcIatsOpq5W7nhP1bsg5UCi:esH5CI0sAq5Wzhpsg5ri
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\he.pak
- Size 833KB
- SHA256 acac137ffb3666979ab7fe334de037a226b524f52b860cc7fbaffef1f4b135b8
- MD5 a293a2e9bafe0cef868f5f2a460eaeb3
- SHA1 f33107212d1df34de124e1c60f54db71c820892c
- SHA512 51f5f5874ca644c8cbda98c95b007affcd235df2e400890cd496824a673bc6f37085683e7755b100648e8d3adfce81d74292cfb9166309858b8e54c83bc5d251
- SSDEEP 12288:bMLT3bihflVRhxTzHxrHNoxjAlUWq+/g/AkACA7IXkkeQCajw5Igp2+/nxnk5IOc:gLPw5i+p
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\hi.pak
- Size 1.4MB
- SHA256 fa8810cf67f2d2da04566127d1aded07f9e1e84898f70c1f2f2382f9c1ad5102
- MD5 db75cb429f8ee0924e98279f731b6498
- SHA1 bf4577c8784c9455a9c286c3afffd1c47bb27221
- SHA512 520956797576ab0c7b54effb930da808bd4d0899857a6234a37d0d37c080bc66ddb25500e5e86b2dc40e9a8d30a42c47b7912602f1d55dbbc5492a739fe05290
- SSDEEP 3072:q5A5HvzW/jShyxj03NSe1jiiTuWR1pk+fQ8jV/B90ZV1d1duGlYvrf+3yMJEOTBT:q5SPzKjnx0NSe1JuWi+Vm1S5/hK9hJh
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\hr.pak
- Size 642KB
- SHA256 1317eef6e400a4e30a312cb0fb9051e8175bb756e630d2fdbc9a1a4ec9fb585a
- MD5 369ebba1afa49d8861272d380854815e
- SHA1 87eb854d5d6d60eaf17ef4252c71b8ad8bd6e1e0
- SHA512 9f51b0fd53dd03947a534f02d5b2a5cd5f8fca9da7dcc85b64ab0b15ea817958ebceeee4df3f914dbd8436d75a91fbd8195587e6776865340b0bca0e9dd8bda9
- SSDEEP 6144:R7R8gpea9JnlMu1nwfaKVezzx5hnGIYAcSzKTVOu:T8O3lMWnwfNU5PYJEKgu
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\hu.pak
- Size 691KB
- SHA256 ae27907dece4fcf72dc6c0fe4ff8144acbcea9d7ffba78694f92b3319a870225
- MD5 5340bbdd60b040cce15cb1d9c87f93bc
- SHA1 7d225fbe19c408742caee104fcfdb0ccecc8bb41
- SHA512 0f0781ce8d7d777437e5e24255f692132d4688dfee212a7fe6268844a0e886032ab00eadd2c6a74111152481a9ee4adb19f89d57ba879a4c37cde34f86de72f1
- SSDEEP 6144:JpYojzj1K6NGxD9IBOLAHw7QgffA4jtSuyU5Sc8zZ9pZ9DJYhr0pwtEei2hnjDSh:Jp9zZXSOmAtU5Sc8hayh59AdUd
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\id.pak
- Size 572KB
- SHA256 419ff9e2890e834680be90e1657b112c5239c39d01b02c9497cb9171f1928579
- MD5 42847c5b24e4389e32d911add792b74c
- SHA1 e63e7361cc647f0c04b645070797be68d5568125
- SHA512 78f90df7f351db943e94d92a8e3450fd3b146ce8f18e3b1608385d55fd0db6c1fab5bb60ccfa45db23276cb7fbe15a8337a031fe8afcc7bf4b03892dcd2f6d81
- SSDEEP 6144:i2X3DqDZy3P0kQAziNGlRyZ8XKaif+MTFjlFgTmBwZqEp/55/p6kTOB/kmBiT8k0:iq3OZy/nVry6PgTFjlFEmCZZ5/p6Mo
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\it.pak
- Size 633KB
- SHA256 f7640119ac5308afabcdbc06b209b37b556053f415c5e076ed4f73017c01106e
- MD5 92446210e754e6468f611bb611b513e2
- SHA1 862c06dbee71e5bff17d66102e7ea520bdd98667
- SHA512 eb3e30a625e0c9c719e1d7b28a9dc313914e7f41d5a953d969a493a259aff51d501fafdf200c9247b111b696861c1609f0c136bd2f7a6d6c0902feaee1c0451b
- SSDEEP 6144:/QHkdgJ17n6RDIVoIJx99r5wd82NK0XSIqRRRs61wtUIe/RT9Tb+Akr2mDxrcdqv:Y5JNn6RDI28ZZpa8XacfpUmc5EGIfO
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\ja.pak
- Size 765KB
- SHA256 141d038100b02e006c855573589c1cbd9d27e16cc2fe80b579bb6d779b046698
- MD5 0bcf0b9b990abb3991f286ea7112ab95
- SHA1 bfee611716b8716dc1e4bfe55b9d96756445b505
- SHA512 aadd408e3c4be96abf0aeb8937b89a124a006cb274d86ec137388dc908e721f3d08cd379e7a6480ead8f49da53c11f6432fda715621f63fbca5b7afd23e800f4
- SSDEEP 6144:J/2u6ObRTcXXa21UPJgHZ/Q2zIroebo5xYOVFHSXanV1:V2ull8RFHZ/Q2zI095x7FHSXw
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\kn.pak
- Size 1.5MB
- SHA256 c95a13d7cc3ff0598c7ff46760fd2fd063707b2e963b3f02bde1ac073719eaea
- MD5 cf8a671b3d26b871d754a24a98676e24
- SHA1 03ffca9eeeec7090b9cdeadcd8342e24841cdd42
- SHA512 30a8a91efb5c25ef9278fc3f8572644ab9af9b02ab5ec03177a9db5fbd1b201d21826e8f343f27fb745147cfd2ed77c8b19d86596b88b2e1b6d4d5b33ec9d368
- SSDEEP 12288:ukMBgtz5tyu/0QOcHNjl637E5AEW143ZNCUGuSp:ukDJ57Wx
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\ko.pak
- Size 647KB
- SHA256 e4f4bddf3cf81336c83eda54ba99a20d3efc90bbbb32d169e3095f635e506b3e
- MD5 3b86ca184cf38f5daeac6093c6e9cca9
- SHA1 84abd203f17784864a2dbad89af725d13b9d4c55
- SHA512 b9a98bd14fbb185f498bfdff48a32ee041c3a27aa2c30e9376411e49c1f3aec93891705e4074a819e5d6340405ceb88aec637e9728820d976c66d5a9313636e8
- SSDEEP 12288:RVx+6gN/ifYj4ZGRyS11p76LHuRh6S8I+zx2S/G0G1zLhwT4vLt8SnIhrJ3vNYGe:RVxwI5IKqUq3
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\patch.txt
- Size 2KB
- SHA256 cfd975d27134e5a48d88db39f28c55d8d6227d2d618a84a16aa46e8142a965ec
- MD5 471e0b6dff76288582b9d64772357ce0
- SHA1 8d0f3a6c3e0ef1807e66d80e5cdd5d61c03b17d8
- SHA512 e47fe122fd13de3edb1d720767cb3dabe5419a50e1089640c8ae4383f61a6ec09e82b7fcf340ea226c3d4d2c50d16acd1183fac907fe8e0f165603ee233fa25a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\Installed_files.txt
- Size 41KB
- SHA256 5b6ca02bbf469b2bc0e4c4cc04a45fc285022ea042125f1a7fc0dd32ce440015
- MD5 345e6b975a3fb2b8e31efd413aa19960
- SHA1 53a1b38948bfbe1fa6c6005903541ddf6d17ac32
- SHA512 91461695b1ce702caae6686f7972e6db38b341194a939b0b5bf188041f93b95a8c87e67bd4c9f10ddd447b28bb0f1cbc873fb6242c5b350db11564dfdf6ca466
- SSDEEP 192:1L+z98BjrtAQLj5+N4T0/sclHvpE0PP5Khk/U8:1L+zY5+60D5Ku/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\Installed_files.txt
- Size 5KB
- SHA256 e384e8de200bcef82a831a8c2173f7cd72756164c7777519b2579677f18c76c5
- MD5 33c8ecc604cc41df756a15c5dd9336b7
- SHA1 f3a9c4b592673ac14c4e78bc8a1ce50a40a6280e
- SHA512 df8a1f52ec05eaccca7a6c87c5f351da49e3dc45f2323b51be4d27be0d12366daccff3f154567937fe4efb65e180207e0faf9d46e6b5b558d96eebf5c3eac74f
- SSDEEP 48:Zd9T91BTcKTShsUCcGnp0V+VpXIWICIFkFEkFMky7kyKgkF5kmknkukOkdgk2kVF:1Vh+iR3ohmE8
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\Installed_files.txt
- Size 786B
- SHA256 333203daf49e6d69927cd6f36b84cbb4373a311bf6adbdb472553e4af87d0d12
- MD5 95b55a63e7f75c48baaffb49e5369317
- SHA1 d1cf32c7ac0223ec2708de4af5d5e64967d4b229
- SHA512 cad86c3e593e0d8d7dff3b316cac5c816f4d6ef956da22027c123215b39814319f96667b564bd3a01d46701e22d7bc905eeb16fcc3af6de237df453832ff4e53
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\Installed_files.txt
- Size 1KB
- SHA256 68501c1e9f3fc2b387ddc2aab434e572a1e27f8c7b4153821306ee08f4c75d6d
- MD5 e07aadb7a0eb894ca236f99c68b0e308
- SHA1 c9cc122cc5841a7c1d7163ac366e54cbd9e547a9
- SHA512 13f3fdb51a077884de79e18e56bcd39c1c18061f505e8e8d1b1f993f52aae3069540c711cd24ba4c6092dab1e878a3a81bd91a1ea03b667376c497ab93b4a5a1
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
- Size 921KB
- SHA256 7ca2c5fd5ed3a9d156d3a89567c9d85e48bd72bbb8f49652f3de2283f86363a3
- MD5 49c1e478ed3042abfada3ab4c0e8d50c
- SHA1 c12da8476305b6596a495826122c44b9efdecc79
- SHA512 533083e3feaaaa2bc400d02a58846eb6a48b72004153860b4d1fc163ef3830b2cd2c67c91f6566da5e58f0e0d8f7689a2dd094384db9d571e8f9ab0b305edb00
- SSDEEP 24576:JcH9tjSXE9HwKJpRfo7WeY7upyZ0G0mOjO+Lr7Uyxh0lhSMXlTu:IMEJ+LrAl
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Cache\Cache_Data\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Cache\Cache_Data\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Cache\Cache_Data\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Cache\Cache_Data\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Local Storage\leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Network\Network Persistent State
- Size 296B
- SHA256 e37030afe63b253f5a0d278ca992865327944326718d61bb8f3416ccca568515
- MD5 954c0138fcc94e82a69a47f815de9a0e
- SHA1 610d690842eb183dc0f363b1c94380e24386bfda
- SHA512 0e8326f5d87f64fb8ad7f0cc7970d94ad8dd66cf5750e2dbd1a04c2833478aefbd6d616c83d1d610f5d93530355173efa9585016cc477ed3753ee6fb42e363af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Network\Network Persistent State~RFe583544.TMP
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Session Storage\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\lingeringfiles.txt
- Size 1KB
- SHA256 6b6f30591e4f82bbacb7516a7b3966e48acce58f91eb64c5457705bdcee0b36e
- MD5 9c3bab8d9eba69941373472c18392061
- SHA1 df0b811da0cf23f39c83123226489b16691b6c48
- SHA512 90215925957c2b421c38251f739fbe81888aca9334e517ac0b4b247dae35a8af4a71d700848d982cc4c5a55516604585d3e28c798ccff226e0c5caf9de272931
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\lingeringfiles.txt
- Size 4KB
- SHA256 d1bf340c3876769265f550ad7178c3f1f6116e8230cf4c7e1db2ea3187894d8f
- MD5 5fd8e18c337f22d4884ba7fc39f3255d
- SHA1 04bddbf664b7da8c85e38b7336b382c2860efde8
- SHA512 5b2d69982ca44d9f6912af76020d3e98d80a7602ac79f930b90d4bfb42593f02e6f0c6b82d76c03946f14ce9d811c3f34e71c901f1a4b3a1d670f06a8eb0dcdf
- SSDEEP 96:oH2NZAeh0AAWxUE42+jf55wdJwd1QIv0I7kfgIgELeP3ogElTH5bOzsxxJzwoDvt:oWqadqdOF6MSm
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\logs\launcher_log.txt
- Size 2KB
- SHA256 44e6a763b97f72468eb73f00972c3c3b858d4810858e360cd0ed608778e6b718
- MD5 0cd1d0681887a0c748c0d404a42e7cf6
- SHA1 e683c8d74dff7320e0c9a06e4c0a7f139d29cea2
- SHA512 d8b2c6b93c844590546adde10e0a58409d68b854cf34951139d722bb064f87972c00855afde12eeb1d683a972c382673569930030d9de72039af6d03183ada8a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\logs\launcher_log.txt
- Size 1KB
- SHA256 139ad8133951a1c658d5fa9d7105babf9cd6fdfcc45d18f8d7cd8489e837bc18
- MD5 4e83d6dcd4663b8878ad6e19668774a8
- SHA1 635b486a441efa92c2414ec492fae626d6c8415a
- SHA512 61c92bb8d73fb92729bb650f15f89c00cf82fdcd5cd94c708b26c5455f419b4595ce3ee08b18a2b0baf93b37bc768fa7bca437201f76502fbec2f32c281801fe
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\logs\network_info.txt
- Size 3KB
- SHA256 3bc037b518c024b66309fc51b06eed890e7b74ad444fd77fed251ddd0fdc089e
- MD5 6c6b18e5b1ce484acb39257dfb20c44b
- SHA1 0764864d8da8d580a7cda780e96b8d96f330aea3
- SHA512 88c66ee7a33309dfde2772721d6888919df9be88d3166fae9b3ba0693f77c5714954972a8579895a42ae40ffce4405ae62c948b7fe4ce508176ccb533ba71e77
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\logs\service_log.txt
- Size 141B
- SHA256 a3b4fad3e2c84bfcf111625e91875b634347ad989f25aa4bc21a4ac93288bbdc
- MD5 b2f355a38f0a7a705b27e79d06318d85
- SHA1 5b28f218c7592cc2052768166736ce05184f6efe
- SHA512 968ded44cab56979303c7fa07cba4a104b55e735f7e7108bb44e46365c6a322b7a8a256fc13db01258768b2181d5e54a1479263629eae2416726d9b5efb831e3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Cache\Cache_Data\f_000017
- Size 354KB
- SHA256 0d4241379bac03562da9b75d71ad9a3d9a98e34eec933dac3300f1eb94a62c68
- MD5 d5a88a50acf2965794ea68f1fa3e1f64
- SHA1 9ccc97ac9d84a4943dd9bd3ebc9395a34b5ca2b1
- SHA512 332526b8e9743fa8980b56d13da14b0d3a7f785b801793cbc877561c3c59317fb7ca32a8b35fe317fb6138c45ed363e163606be7e0a23c528663a86d9e380d0e
- SSDEEP 6144:5FWTF/XtLNhwJjt7ACKS8UJTgEIMy9VT683jojgSyWoMctyO4hrKrrLaAo2DiGB:5FWTlGjpAGHyrTD8gBvMcBgeTorGB
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Code Cache\js\index-dir\the-real-index
- Size 216B
- SHA256 663e630eb022a14fef496b6a0f2ccb602f49b542ae195f2392d99a6867f1d906
- MD5 9f2b385d3ed38359ba663e11a9bb1941
- SHA1 e1ab039cdcc2c3e1d653032e197584aebb717e38
- SHA512 1cc0f41c0a52b66d485e15c6f11df3833c6bc54eb3436251e45dccb62ac13ee91d504705c131071eca39dd8c02a8ae17b2a6511b8d0c7b29fd78abfbd7b5a768
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Code Cache\js\index-dir\the-real-index~RFe590594.TMP
- Size 48B
- SHA256 ec937a4b507001d9950339dccfa1278df4d7c1a9d1f04e770686e76a2cb085b6
- MD5 d6adfd436ebceb23cf5d57464d3ff382
- SHA1 f9d576cc8ef27dd355e85b8b1d9f6b40238669ac
- SHA512 c610917e95fa236312c4f6dbba48edc97c31c88c13131416ac35d771e32f00ada013bc19c215421ef86b280ea8535fe90c77d73885e1e8ea461d187e0d057f79
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\IndexedDB\https_connect.cdn.ubisoft.com_0.indexeddb.leveldb\000003.log
- Size 19KB
- SHA256 8ddb82880451f48d8e0f2e6c1d0e640cb6d18d7b4ca03c32ec1e714cfe986abd
- MD5 fb09b24d4788e31608c1160cd472c04d
- SHA1 98341810ee7d0fd95ab6fc1c3d53ea3e7a285c58
- SHA512 981edbb5c74a719db6bf39bff9bf1874da778aeebd9bab249863f8bdf6e1ec7d74255a5fe3f929e5540edb73d214e6bf9d185b767507bf8f0fc156907a1bc5d9
- SSDEEP 192:tuVMpFREIqqhSYdxhtkbzStaSmTufhIp1GVbXKFZtbja+EQ/aucinSvineFLfepY:tuCFOqQeRZ2Qqha+PSu5S+eFLfepS3Bf
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\IndexedDB\https_connect.cdn.ubisoft.com_0.indexeddb.leveldb\LOG
- Size 387B
- SHA256 fd963b34a2cd24151831b1daa5bfce8a1c246fe23c57f7a965efcbe4cd6139ef
- MD5 edbb6e52d48790cadcdb19697b596ccd
- SHA1 d595729e108ed185059e6f69f7f7e0e04e520111
- SHA512 936716b8cbffc2a7ee6ff056e813c056bc6c3ce0caf04341ce9cb1f168dfd0d7288e8218e898eb2fae86ad3dc75f0f18d7f54d4ab8d3aeaf49f97e158bd63b97
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\IndexedDB\https_connect.cdn.ubisoft.com_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Network\89291932-80e0-4f4b-bb02-61ca4798e263.tmp
- Size 2KB
- SHA256 99bd611b629970d69ff916572e434b8950e64178805f46ab55ae4fd9b4da2366
- MD5 1ba262d3eb9ee2a6752c543ae6abed61
- SHA1 0f1785618275caad1eac4daff0ee450004e0951c
- SHA512 ed16178597706ff4cb43fc45b8d80546f989911cef7c56e6a89bb929a56aa5cc41d8a5348334f022a5e47613613700aaab199abab1b801969791144938599926
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Preferences
- Size 8KB
- SHA256 ed915c46d194951fb9a5125bd0cbc97a3c78bcec9932b939996b17aa3240b01a
- MD5 47f076202ba15ee46bf571b9244334c0
- SHA1 cbd72bda1d26ad7344fea2f2a16914a55b1c8daf
- SHA512 5c0f7c621385a3ccacb3cbb91e95694c0818457a76dc22a42d222d46329593b99d91adf47c1ea2cc019a7298e876a6b967950d97fb817cc88c6c88dc5a22b215
- SSDEEP 192:zYNkrXS8PRps9mHS+WNwtU1+13LyLILkbbp0yIsnA/gd:zYNkRXswc3+F6oWFd
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Preferences~RFe58c743.TMP
- Size 8KB
- SHA256 d41f6ab6921363aaefc75439418390369fbf0e381ebfc77b6273ceed8f637884
- MD5 1365a8f11000772925a9730f3ed573f8
- SHA1 5490cc90b5145027badd07a642ea33a0526d6e41
- SHA512 9699b46ad3ec5de5db064160e80429ecb96cba35c4a9bf2f4a0980cfb4225b51fcffd3cc2bfe942925347d73baa394929ca9053b8096644e07d7a96ddcc1a203
- SSDEEP 192:zYNkrAS8PRps9mHS+WNwtU1+13LyLILkbbp0yIsnA/gd:zYNkQXswc3+F6oWFd
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\121604a1-f719-485c-9e7d-c4180b4c9a42\index-dir\the-real-index
- Size 72B
- SHA256 58fdf4cf916c90c63f651ff309db8379a761138dc07adddb3d421a73cf93c5fb
- MD5 8b2d4fc720185aacf108dc8a0a13bee2
- SHA1 49bc49881d412b4aaa9e5b39950efcf4518dd6e3
- SHA512 cc4254291adb36969d7c54b05f0e7be2afc7c9e8e171576a0888846a064d89762db3ed0f4eca8f70addd5a2fc8d49047713a906907649f4b50e718ee6820b90f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\121604a1-f719-485c-9e7d-c4180b4c9a42\index-dir\the-real-index~RFe58f0e3.TMP
- Size 48B
- SHA256 fcc49a84570268cf826fbe06c98ee186490ccff96efb7a61575b3f0acaafa0d1
- MD5 e128e2f0c49680960c6f5e63938f4f87
- SHA1 d28fa6c899653421b686344cd6483a47f17bea39
- SHA512 5ef35b45b850751b5bc21f78da784f7150e2dd97b4fa9254f63659a8c6431a5b2097d527bcfb938a57afcd8429d0387e4a3dcceb9b6a2c07055e5a4f57a35371
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\22bfa859-d845-48d0-9bb3-7c3d822f87c0\index-dir\the-real-index
- Size 192B
- SHA256 eafd639e4c290eca2b8779786df47355d353a5b469a592eb0ad78ece9cb105fb
- MD5 8fbd01d1683111cece1b5ad807e10703
- SHA1 295dc2754ae5c039bdeb4d2748deb10a29b89b95
- SHA512 8588d5b8b9039c54c556a684e0142e6ae51a212708d6d2aa007b3a90a6d2cef0d206ad5bc88a5f082ebdfc078f1ba487d007ae426f0b0101a4e5fe36e3cb49a5
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\22bfa859-d845-48d0-9bb3-7c3d822f87c0\index-dir\the-real-index~RFe58f20c.TMP
- Size 48B
- SHA256 6ed9595a5d18f6149161b1e5cf08822613a4def44e533a580000a32a3bc3616f
- MD5 5ae76c739dd78f3326a4ab52ee41e71b
- SHA1 41ad60db3508f1493133c626dd010fe841822ec8
- SHA512 6a75ee89e9974f6613e8f08b74993c163a1372e06c6572b6fbb0930711ab57bf5e80ed91289129bae4f8d951ac8d1740b55d9a27db63ee325ab3c00cd2037b07
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\62c237aa-0be0-435f-8759-2117ea0ab4c1\index-dir\the-real-index
- Size 168B
- SHA256 4f1538124844bb36c88da34cdef9474c2f21dd6886f0fb26d537228639bddfeb
- MD5 86501f91219f4132137b9fa5a52bf970
- SHA1 58820b64f3e5849f52c3826bbe803254c88afcdb
- SHA512 5d7e4433d7c717b743b36eaeea25adeef7d7af5bf922021d40da2e0962bbd5439919a80898691e566bc4f972894850126ca5315e5804020d92eb0ff53e8220e6
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\62c237aa-0be0-435f-8759-2117ea0ab4c1\index-dir\the-real-index~RFe58f3e1.TMP
- Size 48B
- SHA256 ae47510a5347bdb3963745b21f2f275d1c1a24a536e7d380dedb69e49c7ba65d
- MD5 a4357e078f3b06c07e916633a095487b
- SHA1 bf8f23e5095bbedd7a79d876c5bcc412eff031f1
- SHA512 b5ed02f83a954eb2c15cc800796b7aa03400dacb29534ed037d8a6fc3b2991069ea306497f44988b3833704c46f7561691157177354398c4ca955a5351cd33b6
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\6471c61b-0e3a-43c5-9294-8d01b1b87c63\index-dir\the-real-index
- Size 3KB
- SHA256 fde78630a771761a8a74e96f89f918a5724218abbb23e8b3b713445939e7232a
- MD5 75363692085037e35c9dad772fcc7144
- SHA1 90bc8ab97ed4b57dcd9e418933c50af63f8e78f8
- SHA512 32788e046da95af548bb2f2be595dcd73d4539179ef12cedf951fc8a84042014c613bdcf913377a134aaacee188d7d0c406dfe8dd68618e9acf90cf21258a885
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\6471c61b-0e3a-43c5-9294-8d01b1b87c63\index-dir\the-real-index~RFe58ec7e.TMP
- Size 48B
- SHA256 bf2cc4481cc8f026c3a60d6363860611d3fa7935da9dae4af6a436c59adcecc5
- MD5 73e2de4aa8f2276966abd17f2d3b2a09
- SHA1 e7de993b3bdf76ae82c6112fda7d55465bb88c39
- SHA512 032f87361b08380336ccc2259349845397c3f1a40bb9490026b84e0c5b18c510a2b02ca6d815b34eafeaddbfe0a28f60c3e7c8471c2c04034487513e827c8f4a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt
- Size 399B
- SHA256 0d6141bbb8809608883967ad07876c8fe806ae30f9db15ea7f2d5bbed7a15ffc
- MD5 2a255abaf2c2d4b074358e9606443651
- SHA1 cf1ba5110c5b010fa8c023ee15f07719d72a181e
- SHA512 d2b42539fe3e66bc1a85a79faa83ed090900a48ab82a258969078f99513ca0387d5fa2942371caa43b365b3f5952dcfa0786b81b2e677e9acd999f4a6309a5a5
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt
- Size 268B
- SHA256 000b74e8bf3278678afe4deb87724be196c08971ac18c1c4c2092ddbe675815a
- MD5 fe569fbf9ade932248f00f6f3b42178b
- SHA1 385c044eb8f68b1d0abc4aa1dc71f9b8467385de
- SHA512 6f73f1e3dee3c33b468046fd813d53a61792ac7c793da94718b8e99f9ea2fc7ad40558635d3303cb0fe8d65c89f62fe923dc52f12047c21f5bc6bc07e39253b8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt
- Size 394B
- SHA256 886044152588e0bc40ba2aa0b78de22f855ae90868016b51fd21d0b28e2391ab
- MD5 1dac5ece7e0255f4c97acca0cacdf23a
- SHA1 8ac3100f5df07be6fca208d5c4c9123e659e0a07
- SHA512 91f3aae9cae5416bcda7f051ca9475b240f5dfcf8f62af9a51f4c5b53fc0cc453cc8ffd38f2750c90a5dea198d07d7dd43b51b73335356b94c77886e7760f592
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt.tmp
- Size 337B
- SHA256 fe8aff22d372823533c3087bbb3f76333ad7e96aec96879727715fa25471ebfd
- MD5 4d1675ebcdd5fc739e951e92e345a35f
- SHA1 d421026fbbf043c88c35270ab64e974c4e20f3ff
- SHA512 095f93eea8c4b442c9ab4594dd68dd2930e46b07d3df4bd3afc29ba37ecaf4349c9b8cf0f72845ddf0a0b9d7c7e4266d918195b5b38dadf461d71e074b9d9cea
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt~RFe589e7d.TMP
- Size 195B
- SHA256 3ed5bb33cbe9bf8b12de4f54cc6620c215323ac4c38932a2e9be1de2f3d8b697
- MD5 6100dea54cf15370be4db4dff83b2691
- SHA1 cdecd648bfb8841d7b768a9594905b3ba698d28a
- SHA512 22db688392f067bd4402681433a5c86dd65a374790d4318d2fb499a59f2595e2ef5d62f75455ce332e2cf6495778eb9f06ada4769c6cffa75a5e4a8cc1e140f2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 3fe70a3ffc5eab934e92f1412656c9d0535add92f001fd7cc88b1633021e4b2e
- MD5 f1ab95af69ef2c6dcc51f64912272199
- SHA1 ef974d1142a868914473f4ce21fb0876d9d51482
- SHA512 d33072aef53b48d260c422401738507e2618266558976854dad4ed3b4f3aedd00024932f0001e541e9f7af7746427c3a5805717cc484f1fd8c56d9bf7a7a540e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c5fb.TMP
- Size 48B
- SHA256 169ee8adcc75f5436f8364fe1a6b447e7af067296f5d16cc9975ce9971486d43
- MD5 1adf5cc619487e5c861f4fb83c218554
- SHA1 fd453744ddf8c1fd2de28943b2561be5dec5ae83
- SHA512 2fb88d81bc60163b43768242868a4e0daca8a416a8ea6412df0ec74c6993ff290e00845b5bc15753ea38da2759337cf224e332f2f97ab554f4f3f797b42aea0d
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Shared Dictionary\cache\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Local State
- Size 3KB
- SHA256 473e0ad89cc064fbae10a80dd704c5020ff64af9110d677057c047d563536ca1
- MD5 ffd1843eab801751555516702e0ea609
- SHA1 a1b9c4d462ad44cc5f62c4a2c7aaa12161ee79e4
- SHA512 1a971301e359964105a8732be2e475862f4f7d004f01dc9a6204bc56661238bb99a522420eed44bf6769a21eed129ccc805891e06a635ae080574828a8d9961b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Local State
- Size 6KB
- SHA256 f48c61587521acdc91810f35000eac7f1f937afbd8537122fb30def8be673bea
- MD5 92aec0a3f3de8fae586e2db6ccd1c61b
- SHA1 2265e3de231b0945e82af5998170ef2aeec1fcdb
- SHA512 7814129327f521d70f3fd0d7406f5a255e32956f4087fb17879f852a224be696af866c35ee7d74e338d89f11e877a722c2b38cc544f4c3214a9f4ca3f002b694
- SSDEEP 192:zq/tZGM2UlXVaD/NTxQs5jjNKtqUNJsbPAs1iRNGd:zwt4MrqHd
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Local State
- Size 6KB
- SHA256 542499fee8e1ea7c21cdaf5eb9ab5c6472a309e010982f1c18576e1b1da4977e
- MD5 85ebd2e4fd22678a2cce47d011bf6c12
- SHA1 aac9db341ef7779637a37f00e4ae69ece74b8c69
- SHA512 3dcf07c2ae84c7ec74c63ae2e0e38813bd5102659c8864404d811da17e617344dce3d495e1f961d8ce0b01d34d84a72011cf13928fc3b7e539d660382db809b9
- SSDEEP 192:zq/tbGM2UlXVaD/NTxQs5jjNKtqUNJsbPAs1iRNGd:zwtCMrqHd
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Local State~RFe588c0e.TMP
- Size 1KB
- SHA256 964edc9007bfc49c9c356a004bcc729866e4532f7adda846103b2f45c0ca4209
- MD5 b5656a8de54ca372dac0e4724c66ea47
- SHA1 e10a42bb82edfc203fc36121ac1e7b3ca7f56dad
- SHA512 66e534861db22a86d30dc3e95b17b0a596cf2071afdf8301c1d793bc1759f85fcb2a67451f5b76308670501b7776f27270a53b261e3b6ef51ac0b05c2f6f6b5b
- MD5 SHA1 SHA512