Analysis

  • max time kernel
    900s
  • max time network
    569s
  • platform
    windows11-21h2_x64
  • resource
    win11-20251223-en
  • resource tags

    arch:x64arch:x86image:win11-20251223-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    24/12/2025, 11:52

General

  • Target
    UbisoftConnect.exe
  • Size 507KB
  • Sample251224-n17kcsby3c
  • SHA256 00fc8c79dcbc8b40005c5ed26ebb30db18a41c7bf63ea598b3635cf4dfa88312
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Renames multiple (115) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Renames multiple (130) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Deletes itself 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 12 IoCs
  • Drops file in Program Files directory 2 IoCs
  • Drops file in Windows directory 1 IoCs
  • Executes dropped EXE 17 IoCs
  • Loads dropped DLL 39 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 32 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 1 IoCs
  • Modifies registry class 39 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 24 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 29 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\UbisoftConnect.exe
    "C:\Users\Admin\AppData\Local\Temp\UbisoftConnect.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3596
    • C:\Users\Admin\AppData\Local\Temp\upc.exe
      "C:\Users\Admin\AppData\Local\Temp\upc.exe"
      2⤵
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2284
      • C:\Users\Admin\AppData\Local\Temp\UplayService.exe
        "C:\Users\Admin\AppData\Local\Temp\UplayService.exe" -uplayservice_perform_updates
        3⤵
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        PID:4892
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\System32\regsvr32.exe" /u /s npuplaypc.dll
        3⤵
        • System Location Discovery: System Language Discovery
        PID:5512
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\System32\regsvr32.exe" /u /s npuplaypchub.dll
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2912
      • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
        C:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=gpu-process --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=2260 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:6020
      • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
        C:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=2668 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1812
      • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
        C:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=2684 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
        3⤵
        • System Location Discovery: System Language Discovery
        PID:5332
      • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
        C:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=renderer --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2836 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3576
      • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
        C:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=renderer --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2844 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3068
      • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
        C:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=renderer --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=2892 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:760
      • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
        C:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=gpu-process --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=2784 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4648
      • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
        C:/Users/Admin/AppData/Local/Temp/UplayWebCore.exe --type=gpu-process --no-sandbox --locales-dir-path=C:/Users/Admin/AppData/Local/Temp/locales/1 --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --mojo-platform-channel-handle=3164 --field-trial-handle=2352,i,13603431020778025022,2736988707582112030,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3248
      • C:\Users\Admin\AppData\Local\Temp\upc.exe
        "C:\Users\Admin\AppData\Local\Temp\upc.exe"
        3⤵
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: RenamesItself
        • Suspicious use of WriteProcessMemory
        PID:4504
        • C:\Users\Admin\AppData\Local\Temp\UplayService.exe
          "C:\Users\Admin\AppData\Local\Temp\UplayService.exe" -uplayservice_perform_updates
          4⤵
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:5672
        • C:\Users\Admin\AppData\Local\Temp\upc.exe
          "C:\Users\Admin\AppData\Local\Temp\upc.exe"
          4⤵
          • Deletes itself
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Drops file in Windows directory
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:1060
          • C:\Users\Admin\AppData\Local\Temp\UplayService.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayService.exe" -upc_platform_mode 0 -uplayservice_perform_updates -uplayservice_pipe_path XFwuXHBpcGVcdGVybWluYWxfMV91cGxheV9zZXJ2aWNlX2lwY19waXBlXw==
            5⤵
            • Suspicious use of NtSetInformationThreadHideFromDebugger
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Modifies registry class
            • Modifies system certificate store
            • Suspicious behavior: EnumeratesProcesses
            PID:3724
          • C:\Users\Admin\AppData\Local\Temp\UplayService.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayService.exe" -upc_platform_mode 0 -uplayservice_set_app_user_model_id -uplayservice_pipe_path XFwuXHBpcGVcdGVybWluYWxfMV91cGxheV9zZXJ2aWNlX2lwY19waXBlXw==
            5⤵
            • Suspicious use of NtSetInformationThreadHideFromDebugger
            • Drops file in Program Files directory
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:5344
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=gpu-process --no-sandbox --no-pre-read-main-dll --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=1908 --mojo-platform-channel-handle=2328 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:3116
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=2440 --mojo-platform-channel-handle=2436 /prefetch:11
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:6012
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=2540 --mojo-platform-channel-handle=2536 /prefetch:13
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:3220
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=3584 --mojo-platform-channel-handle=3580 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:5192
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=3880 --mojo-platform-channel-handle=3876 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:1332
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=angle --use-angle=swiftshader-webgl --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=1148 --mojo-platform-channel-handle=4388 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2868
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=3852 --mojo-platform-channel-handle=3828 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2640
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=disabled --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=4380 --mojo-platform-channel-handle=4280 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2944
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=4524 --mojo-platform-channel-handle=4332 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:3080
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=5080 --mojo-platform-channel-handle=5076 /prefetch:14
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:3196
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --no-sandbox --disable-notifications --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=3316 --mojo-platform-channel-handle=5764 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:4312
          • C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
            "C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2" --locales-dir-path="C:\Users\Admin\AppData\Local\Temp\locales\1" --log-severity=disable --user-agent-product=ConnectPC --field-trial-handle=2332,i,1083325640697312955,3121613507363112604,262144 --enable-features=AutofillDisableFilling --disable-features=EnableWindowsGamingInputDataFetcher,PasswordLeakDetection,SafeBrowsing --variations-seed-version --enable-logging=handle --log-file=4820 --mojo-platform-channel-handle=5568 /prefetch:14
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2740
  • C:\Users\Admin\AppData\Local\Temp\upc.exe
    C:/Users/Admin/AppData/Local/Temp/upc.exe
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:5976
  • C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe
    "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    PID:4040
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
    1⤵
      PID:3308

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          chrome_100_percent.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\chrome_100_percent.pak
          • Size 676KB
          • SHA256 a7862157dd52aa867aadbd78f6d3fbb1723d3ccb9c5d15f48128da4d861d004a
          • MD5 SHA1 SHA512 SSDEEP

          chrome_200_percent.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\chrome_200_percent.pak
          • Size 1.1MB
          • SHA256 0d008de51c1289a2f0afa48a6c855b5fb6229936c3d747fde06a39e874a9af05
          • MD5 SHA1 SHA512 SSDEEP

          chrome_elf.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\chrome_elf.dll
          • Size 1.1MB
          • SHA256 9ce16ccd4f86916fce6143beccc56b606c73369520dfc34698c76929a5fc9270
          • MD5 SHA1 SHA512 SSDEEP

          de-DE_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\de-DE_loc.txt
          • Size 119KB
          • SHA256 571db5516404bfcb9dfb0958620ade264216b2e4724660cefe4b744f37e09384
          • MD5 SHA1 SHA512 SSDEEP

          en-US_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\en-US_loc.txt
          • Size 107KB
          • SHA256 f0f71965cccab45cca9c575c24100c356f40b85214161b213a492076f8475fa0
          • MD5 SHA1 SHA512 SSDEEP

          en-US_release_notes.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\en-US_release_notes.txt
          • Size 173KB
          • SHA256 fdfd92b3f3ee36654fd5759a05ead91e8c252745612ec6a84d3dde6f1b67cf83
          • MD5 SHA1 SHA512 SSDEEP

          es-ES_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\es-ES_loc.txt
          • Size 116KB
          • SHA256 8c32f0f3c3980bc4b99a93bc960c079f4d1b31f06294e855f3d8aae76843261e
          • MD5 SHA1 SHA512 SSDEEP

          fr-FR_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\fr-FR_loc.txt
          • Size 120KB
          • SHA256 0606ee169d0e6fc2a1da1c426fece5c3698ce62ea2e53173e663c5bd91d59a97
          • MD5 SHA1 SHA512 SSDEEP

          it-IT_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\it-IT_loc.txt
          • Size 113KB
          • SHA256 d53dbd234072ea67652ebc62a855b8d26ac652653ebe53a30329812e91924d75
          • MD5 SHA1 SHA512 SSDEEP

          ja-JP_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\ja-JP_loc.txt
          • Size 131KB
          • SHA256 b432aca0912dce19c9fb902e04432489dc6248dc9ec11233684f056e3f11218c
          • MD5 SHA1 SHA512 SSDEEP

          ko-KO_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\ko-KO_loc.txt
          • Size 116KB
          • SHA256 4e5b5d011195e661f60e7b4e240c3d3e499833be87a4b3f35d32736324e5c8b8
          • MD5 SHA1 SHA512 SSDEEP

          pl-PL_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\pl-PL_loc.txt
          • Size 116KB
          • SHA256 bda030f7211ecb9de5b5b5587fa2ce4ec15109b83f216a21490542c2dd18ef8e
          • MD5 SHA1 SHA512 SSDEEP

          pt-BR_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\pt-BR_loc.txt
          • Size 113KB
          • SHA256 f0ada06958b71933ac4043323c771736c0983fa24109876c9dddeb4e7ed25359
          • MD5 SHA1 SHA512 SSDEEP

          ru-RU_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\ru-RU_loc.txt
          • Size 159KB
          • SHA256 29fb0ba6f8e638a1a5e75bbb53142f1083015ae3ad488e333a4787694cc0eb1a
          • MD5 SHA1 SHA512 SSDEEP

          uk-UA_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\uk-UA_loc.txt
          • Size 159KB
          • SHA256 45fea11a8f1d04e8d922d157578ba26722f74069b07a6ae2ad89d19416518330
          • MD5 SHA1 SHA512 SSDEEP

          zh-CN_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\zh-CN_loc.txt
          • Size 101KB
          • SHA256 0dc9a29265a0c2854632affd40348d816ba16e224e87bb52203cbefd61384610
          • MD5 SHA1 SHA512 SSDEEP

          zh-TW_loc.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\loc\zh-TW_loc.txt
          • Size 101KB
          • SHA256 9294cfd3f46695ff819d33406b37cc84de8c4b1a58e5b1f85c455ae45043ae15
          • MD5 SHA1 SHA512 SSDEEP

          LICENSES.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\data\resources\LICENSES.txt
          • Size 1.1MB
          • SHA256 bc03d83895cd67db732fd5780f3b7e6e61758692adecf3f30e1127e7f9f470c5
          • MD5 SHA1 SHA512 SSDEEP

          discord-rpc.x64.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\discord-rpc.x64.dll
          • Size 754KB
          • SHA256 edfe4bad77e71beacd36b5d5ed7b3dedf8ebe4aeb24f658eb667c729d47d4594
          • MD5 SHA1 SHA512 SSDEEP

          discord-rpc.x86.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\discord-rpc.x86.dll
          • Size 580KB
          • SHA256 ceac03434a52de16103001e67b63b73294e4b2a395d61b874b0c027300b6d782
          • MD5 SHA1 SHA512 SSDEEP

          gear_core_win32DLL.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\gear_core_win32DLL.dll
          • Size 1.0MB
          • SHA256 d7407bdbac41501bb3bdf779a6466e32418bde775263195d65a2b6e6162b8923
          • MD5 SHA1 SHA512 SSDEEP

          gear_detection_win32DLL.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\gear_detection_win32DLL.dll
          • Size 760KB
          • SHA256 818382eead37e80e58e001118d6ce9e098d70d096cc2debe2281cd9bd61818cc
          • MD5 SHA1 SHA512 SSDEEP

          gpudatabase_win32.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\gpudatabase_win32.dll
          • Size 194KB
          • SHA256 09c5d2703bd115f66cc4f3274c9010ed6770f8f7dddbd503f92c7419495e3525
          • MD5 SHA1 SHA512 SSDEEP

          icudtl.dat

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\icudtl.dat
          • Size 10.0MB
          • SHA256 a9f6072e858ea29cb66501847856d403c862f23d03cac2656d1e0fa2865fdc7b
          • MD5 SHA1 SHA512 SSDEEP

          libEGL.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\libEGL.dll
          • Size 397KB
          • SHA256 986c63be5f58e54351333e29b50880ac4cdf0151e197e30b213519d91db727f9
          • MD5 SHA1 SHA512 SSDEEP

          libGLESv2.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\libGLESv2.dll
          • Size 6.6MB
          • SHA256 e567ddce5e15dc2528e4f50e91ddcab914722a5807c48ecb00e2bb87b7b69689
          • MD5 SHA1 SHA512 SSDEEP

          libUbiCustomEvent.dll

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\libUbiCustomEvent.dll
          • Size 57KB
          • SHA256 003058cac6653f4117a34435be500c3766822e6993065b6ad4f9c2abd0318bc3
          • MD5 SHA1 SHA512 SSDEEP

          af.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\af.pak
          • Size 576KB
          • SHA256 e8e66b6eac4861234bee5be641bd2c1c15657953679efa9b186dc41e493c27a2
          • MD5 SHA1 SHA512 SSDEEP

          am.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\am.pak
          • Size 925KB
          • SHA256 748b5f87638e6f38dc1c282871de2ba04712437f3555b2d57f511fa2e32c043d
          • MD5 SHA1 SHA512 SSDEEP

          ar.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\ar.pak
          • Size 1020KB
          • SHA256 d30f503a5bdd753a52732eae5c6835d707bc3f6da8444c56173c1605c547331b
          • MD5 SHA1 SHA512 SSDEEP

          bg.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\bg.pak
          • Size 1.0MB
          • SHA256 f5299989c664ac19e921201fbaa67a95d9197ef4672b322eb1c77e8459ee82be
          • MD5 SHA1 SHA512 SSDEEP

          bn.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\bn.pak
          • Size 1.3MB
          • SHA256 225272dcee986c710338395f752424e5817eb689e389d57d01fdbcc014111d85
          • MD5 SHA1 SHA512 SSDEEP

          ca.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\ca.pak
          • Size 652KB
          • SHA256 f2bcb2629bdd17275bd466200b062c7fd4804dc54dafed2d2be9ddb7d57a6c2e
          • MD5 SHA1 SHA512 SSDEEP

          cs.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\cs.pak
          • Size 664KB
          • SHA256 0d4e0a9b3ac5fafa654395396c850626e8aa2e62c3984fbd7d432a0c6a9a66ff
          • MD5 SHA1 SHA512 SSDEEP

          da.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\da.pak
          • Size 605KB
          • SHA256 3d4d28c64c2b4aee808a4652c68a9b2c68dde735b5c25626b1997fc3ca4ca749
          • MD5 SHA1 SHA512 SSDEEP

          de.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\de.pak
          • Size 652KB
          • SHA256 9331db2eccb7a0f462b75ae7c915ee43fcb0fa8b907507e5f8cce8e021991e41
          • MD5 SHA1 SHA512 SSDEEP

          el.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\el.pak
          • Size 1.1MB
          • SHA256 6affcddbe6258074c727c9b2a02c8d63ce7044451121f33046a307d6f58fc120
          • MD5 SHA1 SHA512 SSDEEP

          en-GB.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\en-GB.pak
          • Size 524KB
          • SHA256 b7c9af12e1d797e7eeec0133a30064c00d8e1f4bab07f860a4fdd26a32ebcef7
          • MD5 SHA1 SHA512 SSDEEP

          en-US.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\en-US.pak
          • Size 529KB
          • SHA256 f13ae4630522eb2947f37646a8919ca84d6ca172001c7dba9dc8c846bf3ae3f4
          • MD5 SHA1 SHA512 SSDEEP

          es-419.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\es-419.pak
          • Size 638KB
          • SHA256 d61050c6344d8a66e77416d47b24e0260a7a5307c703a0e802d7facec1ec44ec
          • MD5 SHA1 SHA512 SSDEEP

          es.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\es.pak
          • Size 635KB
          • SHA256 9a3ce2caf696b198d7a2a50b8ffd0eb70d36998b122d12212d371dbc9657afe5
          • MD5 SHA1 SHA512 SSDEEP

          et.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\et.pak
          • Size 581KB
          • SHA256 e9af530d4b24f76372b17c9d714c5804fe218c824a7b92240993d578e5475692
          • MD5 SHA1 SHA512 SSDEEP

          fa.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\fa.pak
          • Size 943KB
          • SHA256 c9e6f7bee4c703187fe19e61af258a8a2c618e4f4b9a3e508e3960ee2c238477
          • MD5 SHA1 SHA512 SSDEEP

          fi.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\fi.pak
          • Size 590KB
          • SHA256 e6656ea146e05da32ea07046bf27b0188e55a8984501edb054ce993fe78ca51b
          • MD5 SHA1 SHA512 SSDEEP

          fil.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\fil.pak
          • Size 667KB
          • SHA256 5d7a30a371782e4acb9c4b8e147fc07566d41ca087192890670074c125327473
          • MD5 SHA1 SHA512 SSDEEP

          fr.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\fr.pak
          • Size 689KB
          • SHA256 cd2d5773bbfa8041f741023af5ac9cf6e99e7d1340e7043a79fddbba4494cc00
          • MD5 SHA1 SHA512 SSDEEP

          gu.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\gu.pak
          • Size 1.3MB
          • SHA256 885dcbd2f140bea1bd6eaab3a5f146fb518fe3a73306497d5ebce3087984636c
          • MD5 SHA1 SHA512 SSDEEP

          he.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\he.pak
          • Size 833KB
          • SHA256 acac137ffb3666979ab7fe334de037a226b524f52b860cc7fbaffef1f4b135b8
          • MD5 SHA1 SHA512 SSDEEP

          hi.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\hi.pak
          • Size 1.4MB
          • SHA256 fa8810cf67f2d2da04566127d1aded07f9e1e84898f70c1f2f2382f9c1ad5102
          • MD5 SHA1 SHA512 SSDEEP

          hr.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\hr.pak
          • Size 642KB
          • SHA256 1317eef6e400a4e30a312cb0fb9051e8175bb756e630d2fdbc9a1a4ec9fb585a
          • MD5 SHA1 SHA512 SSDEEP

          hu.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\hu.pak
          • Size 691KB
          • SHA256 ae27907dece4fcf72dc6c0fe4ff8144acbcea9d7ffba78694f92b3319a870225
          • MD5 SHA1 SHA512 SSDEEP

          id.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\id.pak
          • Size 572KB
          • SHA256 419ff9e2890e834680be90e1657b112c5239c39d01b02c9497cb9171f1928579
          • MD5 SHA1 SHA512 SSDEEP

          it.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\it.pak
          • Size 633KB
          • SHA256 f7640119ac5308afabcdbc06b209b37b556053f415c5e076ed4f73017c01106e
          • MD5 SHA1 SHA512 SSDEEP

          ja.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\ja.pak
          • Size 765KB
          • SHA256 141d038100b02e006c855573589c1cbd9d27e16cc2fe80b579bb6d779b046698
          • MD5 SHA1 SHA512 SSDEEP

          kn.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\kn.pak
          • Size 1.5MB
          • SHA256 c95a13d7cc3ff0598c7ff46760fd2fd063707b2e963b3f02bde1ac073719eaea
          • MD5 SHA1 SHA512 SSDEEP

          ko.pak

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\12978\locales\1\ko.pak
          • Size 647KB
          • SHA256 e4f4bddf3cf81336c83eda54ba99a20d3efc90bbbb32d169e3095f635e506b3e
          • MD5 SHA1 SHA512 SSDEEP

          patch.txt

          • Path C:\ProgramData\Ubisoft\Ubisoft Game Launcher\patch\patch.txt
          • Size 2KB
          • SHA256 cfd975d27134e5a48d88db39f28c55d8d6227d2d618a84a16aa46e8142a965ec
          • MD5 SHA1 SHA512

          Installed_files.txt

          • Path C:\Users\Admin\AppData\Local\Temp\Installed_files.txt
          • Size 41KB
          • SHA256 5b6ca02bbf469b2bc0e4c4cc04a45fc285022ea042125f1a7fc0dd32ce440015
          • MD5 SHA1 SHA512 SSDEEP

          Installed_files.txt

          • Path C:\Users\Admin\AppData\Local\Temp\Installed_files.txt
          • Size 5KB
          • SHA256 e384e8de200bcef82a831a8c2173f7cd72756164c7777519b2579677f18c76c5
          • MD5 SHA1 SHA512 SSDEEP

          Installed_files.txt

          • Path C:\Users\Admin\AppData\Local\Temp\Installed_files.txt
          • Size 786B
          • SHA256 333203daf49e6d69927cd6f36b84cbb4373a311bf6adbdb472553e4af87d0d12
          • MD5 SHA1 SHA512

          Installed_files.txt

          • Path C:\Users\Admin\AppData\Local\Temp\Installed_files.txt
          • Size 1KB
          • SHA256 68501c1e9f3fc2b387ddc2aab434e572a1e27f8c7b4153821306ee08f4c75d6d
          • MD5 SHA1 SHA512

          UplayWebCore.exe

          • Path C:\Users\Admin\AppData\Local\Temp\UplayWebCore.exe
          • Size 921KB
          • SHA256 7ca2c5fd5ed3a9d156d3a89567c9d85e48bd72bbb8f49652f3de2283f86363a3
          • MD5 SHA1 SHA512 SSDEEP

          data_0

          • Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Cache\Cache_Data\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP

          data_1

          • Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Cache\Cache_Data\data_1
          • Size 264KB
          • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
          • MD5 SHA1 SHA512 SSDEEP

          data_2

          • Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Cache\Cache_Data\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP

          data_3

          • Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Cache\Cache_Data\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP

          CURRENT

          • Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Local Storage\leveldb\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512

          Network Persistent State

          • Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Network\Network Persistent State
          • Size 296B
          • SHA256 e37030afe63b253f5a0d278ca992865327944326718d61bb8f3416ccca568515
          • MD5 SHA1 SHA512

          Network Persistent State~RFe583544.TMP

          • Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Network\Network Persistent State~RFe583544.TMP
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512

          MANIFEST-000001

          • Path C:\Users\Admin\AppData\Local\Temp\cache\http2\Session Storage\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512

          lingeringfiles.txt

          • Path C:\Users\Admin\AppData\Local\Temp\lingeringfiles.txt
          • Size 1KB
          • SHA256 6b6f30591e4f82bbacb7516a7b3966e48acce58f91eb64c5457705bdcee0b36e
          • MD5 SHA1 SHA512

          lingeringfiles.txt

          • Path C:\Users\Admin\AppData\Local\Temp\lingeringfiles.txt
          • Size 4KB
          • SHA256 d1bf340c3876769265f550ad7178c3f1f6116e8230cf4c7e1db2ea3187894d8f
          • MD5 SHA1 SHA512 SSDEEP

          launcher_log.txt

          • Path C:\Users\Admin\AppData\Local\Temp\logs\launcher_log.txt
          • Size 2KB
          • SHA256 44e6a763b97f72468eb73f00972c3c3b858d4810858e360cd0ed608778e6b718
          • MD5 SHA1 SHA512

          launcher_log.txt

          • Path C:\Users\Admin\AppData\Local\Temp\logs\launcher_log.txt
          • Size 1KB
          • SHA256 139ad8133951a1c658d5fa9d7105babf9cd6fdfcc45d18f8d7cd8489e837bc18
          • MD5 SHA1 SHA512

          network_info.txt

          • Path C:\Users\Admin\AppData\Local\Temp\logs\network_info.txt
          • Size 3KB
          • SHA256 3bc037b518c024b66309fc51b06eed890e7b74ad444fd77fed251ddd0fdc089e
          • MD5 SHA1 SHA512

          service_log.txt

          • Path C:\Users\Admin\AppData\Local\Temp\logs\service_log.txt
          • Size 141B
          • SHA256 a3b4fad3e2c84bfcf111625e91875b634347ad989f25aa4bc21a4ac93288bbdc
          • MD5 SHA1 SHA512

          f_000017

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Cache\Cache_Data\f_000017
          • Size 354KB
          • SHA256 0d4241379bac03562da9b75d71ad9a3d9a98e34eec933dac3300f1eb94a62c68
          • MD5 SHA1 SHA512 SSDEEP

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Code Cache\js\index-dir\the-real-index
          • Size 216B
          • SHA256 663e630eb022a14fef496b6a0f2ccb602f49b542ae195f2392d99a6867f1d906
          • MD5 SHA1 SHA512

          the-real-index~RFe590594.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Code Cache\js\index-dir\the-real-index~RFe590594.TMP
          • Size 48B
          • SHA256 ec937a4b507001d9950339dccfa1278df4d7c1a9d1f04e770686e76a2cb085b6
          • MD5 SHA1 SHA512

          000003.log

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\IndexedDB\https_connect.cdn.ubisoft.com_0.indexeddb.leveldb\000003.log
          • Size 19KB
          • SHA256 8ddb82880451f48d8e0f2e6c1d0e640cb6d18d7b4ca03c32ec1e714cfe986abd
          • MD5 SHA1 SHA512 SSDEEP

          LOG

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\IndexedDB\https_connect.cdn.ubisoft.com_0.indexeddb.leveldb\LOG
          • Size 387B
          • SHA256 fd963b34a2cd24151831b1daa5bfce8a1c246fe23c57f7a965efcbe4cd6139ef
          • MD5 SHA1 SHA512

          MANIFEST-000001

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\IndexedDB\https_connect.cdn.ubisoft.com_0.indexeddb.leveldb\MANIFEST-000001
          • Size 23B
          • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
          • MD5 SHA1 SHA512

          89291932-80e0-4f4b-bb02-61ca4798e263.tmp

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Network\89291932-80e0-4f4b-bb02-61ca4798e263.tmp
          • Size 2KB
          • SHA256 99bd611b629970d69ff916572e434b8950e64178805f46ab55ae4fd9b4da2366
          • MD5 SHA1 SHA512

          SCT Auditing Pending Reports

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Network\SCT Auditing Pending Reports
          • Size 2B
          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
          • MD5 SHA1 SHA512

          Preferences

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Preferences
          • Size 8KB
          • SHA256 ed915c46d194951fb9a5125bd0cbc97a3c78bcec9932b939996b17aa3240b01a
          • MD5 SHA1 SHA512 SSDEEP

          Preferences~RFe58c743.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Preferences~RFe58c743.TMP
          • Size 8KB
          • SHA256 d41f6ab6921363aaefc75439418390369fbf0e381ebfc77b6273ceed8f637884
          • MD5 SHA1 SHA512 SSDEEP

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\121604a1-f719-485c-9e7d-c4180b4c9a42\index-dir\the-real-index
          • Size 72B
          • SHA256 58fdf4cf916c90c63f651ff309db8379a761138dc07adddb3d421a73cf93c5fb
          • MD5 SHA1 SHA512

          the-real-index~RFe58f0e3.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\121604a1-f719-485c-9e7d-c4180b4c9a42\index-dir\the-real-index~RFe58f0e3.TMP
          • Size 48B
          • SHA256 fcc49a84570268cf826fbe06c98ee186490ccff96efb7a61575b3f0acaafa0d1
          • MD5 SHA1 SHA512

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\22bfa859-d845-48d0-9bb3-7c3d822f87c0\index-dir\the-real-index
          • Size 192B
          • SHA256 eafd639e4c290eca2b8779786df47355d353a5b469a592eb0ad78ece9cb105fb
          • MD5 SHA1 SHA512

          the-real-index~RFe58f20c.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\22bfa859-d845-48d0-9bb3-7c3d822f87c0\index-dir\the-real-index~RFe58f20c.TMP
          • Size 48B
          • SHA256 6ed9595a5d18f6149161b1e5cf08822613a4def44e533a580000a32a3bc3616f
          • MD5 SHA1 SHA512

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\62c237aa-0be0-435f-8759-2117ea0ab4c1\index-dir\the-real-index
          • Size 168B
          • SHA256 4f1538124844bb36c88da34cdef9474c2f21dd6886f0fb26d537228639bddfeb
          • MD5 SHA1 SHA512

          the-real-index~RFe58f3e1.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\62c237aa-0be0-435f-8759-2117ea0ab4c1\index-dir\the-real-index~RFe58f3e1.TMP
          • Size 48B
          • SHA256 ae47510a5347bdb3963745b21f2f275d1c1a24a536e7d380dedb69e49c7ba65d
          • MD5 SHA1 SHA512

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\6471c61b-0e3a-43c5-9294-8d01b1b87c63\index-dir\the-real-index
          • Size 3KB
          • SHA256 fde78630a771761a8a74e96f89f918a5724218abbb23e8b3b713445939e7232a
          • MD5 SHA1 SHA512

          the-real-index~RFe58ec7e.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\6471c61b-0e3a-43c5-9294-8d01b1b87c63\index-dir\the-real-index~RFe58ec7e.TMP
          • Size 48B
          • SHA256 bf2cc4481cc8f026c3a60d6363860611d3fa7935da9dae4af6a436c59adcecc5
          • MD5 SHA1 SHA512

          index.txt

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt
          • Size 399B
          • SHA256 0d6141bbb8809608883967ad07876c8fe806ae30f9db15ea7f2d5bbed7a15ffc
          • MD5 SHA1 SHA512

          index.txt

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt
          • Size 268B
          • SHA256 000b74e8bf3278678afe4deb87724be196c08971ac18c1c4c2092ddbe675815a
          • MD5 SHA1 SHA512

          index.txt

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt
          • Size 394B
          • SHA256 886044152588e0bc40ba2aa0b78de22f855ae90868016b51fd21d0b28e2391ab
          • MD5 SHA1 SHA512

          index.txt.tmp

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt.tmp
          • Size 337B
          • SHA256 fe8aff22d372823533c3087bbb3f76333ad7e96aec96879727715fa25471ebfd
          • MD5 SHA1 SHA512

          index.txt~RFe589e7d.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\CacheStorage\b38c19bfbb73f63907d476835e2abf4b91abe898\index.txt~RFe589e7d.TMP
          • Size 195B
          • SHA256 3ed5bb33cbe9bf8b12de4f54cc6620c215323ac4c38932a2e9be1de2f3d8b697
          • MD5 SHA1 SHA512

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\ScriptCache\index-dir\the-real-index
          • Size 72B
          • SHA256 3fe70a3ffc5eab934e92f1412656c9d0535add92f001fd7cc88b1633021e4b2e
          • MD5 SHA1 SHA512

          the-real-index~RFe58c5fb.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c5fb.TMP
          • Size 48B
          • SHA256 169ee8adcc75f5436f8364fe1a6b447e7af067296f5d16cc9975ce9971486d43
          • MD5 SHA1 SHA512

          index

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Default\Shared Dictionary\cache\index
          • Size 24B
          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
          • MD5 SHA1 SHA512

          Local State

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Local State
          • Size 3KB
          • SHA256 473e0ad89cc064fbae10a80dd704c5020ff64af9110d677057c047d563536ca1
          • MD5 SHA1 SHA512

          Local State

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Local State
          • Size 6KB
          • SHA256 f48c61587521acdc91810f35000eac7f1f937afbd8537122fb30def8be673bea
          • MD5 SHA1 SHA512 SSDEEP

          Local State

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Local State
          • Size 6KB
          • SHA256 542499fee8e1ea7c21cdaf5eb9ab5c6472a309e010982f1c18576e1b1da4977e
          • MD5 SHA1 SHA512 SSDEEP

          Local State~RFe588c0e.TMP

          • Path C:\Users\Admin\AppData\Local\Ubisoft Game Launcher\cache\http2\Local State~RFe588c0e.TMP
          • Size 1KB
          • SHA256 964edc9007bfc49c9c356a004bcc729866e4532f7adda846103b2f45c0ca4209
          • MD5 SHA1 SHA512

          memory/1060-1621-0x0000000005960000-0x0000000005961000-memory.dmp

          memory/1060-1622-0x0000000000DC0000-0x000000000393C000-memory.dmp

          memory/1060-1620-0x0000000005950000-0x0000000005951000-memory.dmp

          memory/1060-1619-0x0000000005940000-0x0000000005941000-memory.dmp

          memory/1060-1618-0x00000000041F0000-0x00000000041F1000-memory.dmp

          memory/1060-1617-0x0000000003C80000-0x0000000003C81000-memory.dmp

          memory/1060-1616-0x0000000003C70000-0x0000000003C71000-memory.dmp

          memory/1060-1615-0x0000000003C60000-0x0000000003C61000-memory.dmp

          memory/2284-6-0x0000000007F30000-0x0000000007F31000-memory.dmp

          memory/2284-1-0x0000000007EA0000-0x0000000007EA1000-memory.dmp

          memory/2284-0-0x0000000007E90000-0x0000000007E91000-memory.dmp

          memory/2284-7-0x0000000001000000-0x0000000006196000-memory.dmp

          memory/2284-5-0x0000000007F20000-0x0000000007F21000-memory.dmp

          memory/2284-4-0x0000000007F10000-0x0000000007F11000-memory.dmp

          memory/2284-3-0x0000000007F00000-0x0000000007F01000-memory.dmp

          memory/2284-2-0x0000000007EB0000-0x0000000007EB1000-memory.dmp

          memory/3724-1734-0x0000000000C90000-0x0000000001F36000-memory.dmp

          memory/3724-1728-0x0000000000A20000-0x0000000000A21000-memory.dmp

          memory/4504-1042-0x0000000007BD0000-0x0000000007BD1000-memory.dmp

          memory/4504-1045-0x0000000007D20000-0x0000000007D21000-memory.dmp

          memory/4504-1048-0x0000000001000000-0x0000000006196000-memory.dmp

          memory/4504-1611-0x0000000001000000-0x0000000006196000-memory.dmp

          memory/4504-1613-0x000000006BD30000-0x000000006CD30000-memory.dmp

          memory/4504-1612-0x0000000075320000-0x000000007532E000-memory.dmp

          memory/4504-1044-0x0000000007D00000-0x0000000007D01000-memory.dmp

          memory/4504-1046-0x0000000007D60000-0x0000000007D61000-memory.dmp

          memory/4504-1043-0x0000000007CF0000-0x0000000007CF1000-memory.dmp

          memory/4504-1041-0x0000000007BC0000-0x0000000007BC1000-memory.dmp

          memory/4504-1047-0x0000000007D70000-0x0000000007D71000-memory.dmp

          memory/4892-23-0x0000000000F40000-0x00000000022E9000-memory.dmp

          memory/4892-22-0x0000000000E10000-0x0000000000E11000-memory.dmp

          memory/5344-1729-0x0000000000C90000-0x0000000001F36000-memory.dmp

          memory/5344-1715-0x0000000000990000-0x0000000000991000-memory.dmp

          memory/5672-1055-0x0000000000EB0000-0x0000000000EB1000-memory.dmp

          memory/5672-1056-0x0000000000F40000-0x00000000022E9000-memory.dmp

          memory/5976-1942-0x0000000000CB0000-0x0000000000CB1000-memory.dmp

          memory/5976-1958-0x0000000000DC0000-0x000000000393C000-memory.dmp

          memory/5976-1945-0x0000000000D00000-0x0000000000D01000-memory.dmp

          memory/5976-1946-0x0000000000D10000-0x0000000000D11000-memory.dmp

          memory/5976-1941-0x0000000000CA0000-0x0000000000CA1000-memory.dmp

          memory/5976-1944-0x0000000000CF0000-0x0000000000CF1000-memory.dmp

          memory/5976-1940-0x0000000000C90000-0x0000000000C91000-memory.dmp

          memory/5976-1943-0x0000000000CE0000-0x0000000000CE1000-memory.dmp