Analysis
- user interaction
yes - max time kernel
153s - max time network
161s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/08/2026, 18:42
Static task
static1
Behavioral task
behavioral1
Sample
Stream_Deck_7.5.1.22901.msi
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Stream_Deck_7.5.1.22901.msi
Resource
win11ltsc2024-20260709-en
General
- Target Stream_Deck_7.5.1.22901.msi
- Size 207.8MB
- Sample260810-xcezwaaa49
- SHA256 65c1c2c1709c6b95aa1ea5671d314feebe03803a1ecdb1386165c5e7c0c08556
- MD5 20989fd0bc974e4fcc8c1a095db5bfe5
- SHA1 5f887b1d127b1c8188068e5780b5d74a2771d792
- SHA512 c64c92aa62e6b8c504d182a9d1940be98ba44a2e71c0c8ede1f075018cee4b8659840f73d3d6a05f806523758a48978a18e4321ce2a0dda997b4b81210c2757f
- SSDEEP 3145728:iF5q8P8oeQjxgisq4amzQyfJRmVVnjdlNXQvRgeRVOrckGv+NIagcw/88hKbmXJ7:iLq8/BjFd3sJRynj0gRpIawUMKSzJz
- TLSH T1C9A833AA724545C1F653E33D846AA788E979FC0023E440DE47BEF16E8EBF3906536781
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks computer location settings 2 TTPs 5 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation QtWebEngineProcess.exe Key value queried \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation StreamDeck.exe Key value queried \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation QtWebEngineProcess.exe Key value queried \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation QtWebEngineProcess.exe Key value queried \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation StreamDeck.exe - Executes dropped EXE 10 IoCs
pid Process 452 ElgatoAudioControlServer.exe 3732 StreamDeck.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 3936 ElgatoAudioControlServer.exe 1824 crashpad_handler.exe 4844 QtWebEngineProcess.exe 11144 QtWebEngineProcess.exe 13316 StreamDeck.exe 13700 QtWebEngineProcess.exe - Loads dropped DLL 64 IoCs
pid Process 3760 MsiExec.exe 3760 MsiExec.exe 452 ElgatoAudioControlServer.exe 452 ElgatoAudioControlServer.exe 452 ElgatoAudioControlServer.exe 452 ElgatoAudioControlServer.exe 452 ElgatoAudioControlServer.exe 4444 MsiExec.exe 2076 rundll32.exe 2076 rundll32.exe 2076 rundll32.exe 4444 MsiExec.exe 4484 rundll32.exe 4484 rundll32.exe 4484 rundll32.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 3732 StreamDeck.exe 4444 MsiExec.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Volume Controller SD plugin = "C:\\Program Files\\Elgato\\Volume Controller\\ElgatoAudioControlServerWatcher.exe" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Stream Deck = "\"C:\\Program Files\\Elgato\\StreamDeck\\StreamDeck.exe\" --runinbk" msiexec.exe - Badlisted process makes network request 2 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 4 3816 msiexec.exe 6 3816 msiexec.exe - Enumerates connected drives 3 TTPs 46 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\N: msiexec.exe - Checks system information in the registry 2 TTPs 2 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer StreamDeck.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName StreamDeck.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Elgato\StreamDeck\Qt6Core.dll msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.status.sdIcons\en.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.tools.sdIcons\ko.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.digitaltime.sdPlugin\manifest.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.timer.sdPlugin\es.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\TouchBackgrounds\com.elgato.streamdeck.backgrounds.abstract.sdIcons\SD+XL_backgrounds\abrstract-night.png msiexec.exe File created C:\Program Files\Elgato\StreamDeck\TouchBackgrounds\com.elgato.streamdeck.backgrounds.legacy.sdIcons\SD+_backgrounds\Halloween_Gaveyard.png msiexec.exe File created C:\Program Files\Elgato\StreamDeck\TouchBackgrounds\com.elgato.streamdeck.backgrounds.technology.sdIcons\Gretsch_backgrounds\Technology-3.png msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.device.sdIcons\Images\2IconLaptop.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.logo.sdIcons\Images\70IconLogoAdobeAudition.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.operations.sdIcons\operations.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.tools.sdIcons\Images\1IconAttachment.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Translations\qtwebengine_locales\lt.pak msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.operations.sdIcons\Images\5IconFullscreen.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Translations\qt_uk.qm msiexec.exe File created C:\Program Files\Elgato\StreamDeck\DefaultProfiles\XLRDock_winDefault.streamDeckProfile msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.device.sdIcons\Images\16IconDialRotateCCW.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.website.sdPlugin\zh_CN.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\TouchBackgrounds\com.elgato.streamdeck.backgrounds.legacy.sdIcons\zh_TW.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.arrow.sdIcons\Images\5IconRotate.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.openapp.sdPlugin\fr.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.textformatting.sdIcons\Images\13IconItalic.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\InfobarLayouts\DigitalTime\digital_time_11.sdLayoutEx\fonts\Chivo\Chivo-Italic-VariableFont_wght.ttf msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.layout.sdIcons\Images\3IconMargin.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.logo.sdIcons\Images\79IconLogoAfterEffects.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.keybrightness.sdPlugin\zh_TW.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.sleep.sdPlugin\Images\sleep.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.vsdtoggle.sdPlugin\fr.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.hotkeyswitch.sdPlugin\manifest.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\libusb-1.0.dll msiexec.exe File created C:\Program Files\Elgato\StreamDeck\InfobarLayouts\DigitalTime\digital_time_08.sdLayoutEx\fonts\Alfa_Slab_One\AlfaSlabOne-Regular.ttf msiexec.exe File created C:\Program Files\Elgato\StreamDeck\InfobarLayouts\DigitalTime\digital_time_11.sdLayoutEx\manifest.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.connectivity.sdIcons\Images\1IconShare.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.logo.sdIcons\logos.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.logo.sdIcons\Images\35IconLogoDropbox.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.logo.sdIcons\Images\67IconLogoAdobe.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.device.sdIcons\Images\13IconStreamDeckKey.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.file.sdIcons\Images\11IconPaste.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.number.sdIcons\fr.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.object.sdIcons\es.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.status.sdIcons\Images\11IconPower.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.textformatting.sdIcons\Images\4IconMenu.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.sleep.sdPlugin\manifest.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\TouchBackgrounds\com.elgato.streamdeck.backgrounds.technology.sdIcons\SD+_backgrounds\Kinetic.png msiexec.exe File created C:\Program Files\Elgato\StreamDeck\DefaultProfiles\DiscordDeckMini_winDefault.streamDeckProfile msiexec.exe File created C:\Program Files\Elgato\StreamDeck\InfobarLayouts\DigitalTime\digital_time_21.sdLayoutEx\manifest.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.file.sdIcons\zh_TW.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.logo.sdIcons\Images\60IconLogoSkype.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.dial.sdPlugin\de.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\TouchBackgrounds\com.elgato.streamdeck.backgrounds.legacy.sdIcons\IconFolderOpen.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\InfobarLayouts\Pagination\pagination_03.sdLayoutEx\fonts\SpaceMono\SpaceMono-Bold.ttf msiexec.exe File created C:\Program Files\Elgato\StreamDeck\InfobarLayouts\Pagination\pagination_05.sdLayoutEx\fonts\FamiljenGrotesk\OFL.txt msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.elgato.sdIcons\Images\6IconFacecam.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.elgato.sdIcons\Images\8IconWaveMic.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.dial.sdPlugin\zh_TW.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.page.sdPlugin\Images\btn_nextPage.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.multimedia.sdPlugin\Images\dial_media_contrast.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\TouchBackgrounds\com.elgato.streamdeck.backgrounds.glow.sdIcons\de.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.logo.sdIcons\Images\78IconLogoAdobePremierePro.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.number.sdIcons\Images\8IconNumber7.svg msiexec.exe File created C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.operations.sdIcons\es.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.debug.sdPlugin\hole.json msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Translations\qt_it.qm msiexec.exe File created C:\Program Files\Elgato\StreamDeck\Plugins\com.elgato.streamdeck.system.mouse.sdPlugin\Images\trigger_wheel_white.png msiexec.exe - Drops file in Windows directory 21 IoCs
description ioc Process File opened for modification C:\Windows\Installer\MSI52CC.tmp-\CustomAction.config rundll32.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File opened for modification C:\Windows\Installer\MSI1F37.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSI52CC.tmp-\StreamDeckOBSCustomAction.dll rundll32.exe File opened for modification C:\Windows\Installer\MSI5493.tmp-\StreamDeckOBSCustomAction.dll rundll32.exe File created C:\Windows\Installer\{ED591028-8D85-4D44-AA11-B2D8EC905F91}\AppIcon.ico msiexec.exe File opened for modification C:\Windows\Installer\{ED591028-8D85-4D44-AA11-B2D8EC905F91}\AppIcon.ico msiexec.exe File created C:\Windows\Installer\e590287.msi msiexec.exe File opened for modification C:\Windows\Installer\MSI52CC.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSI584D.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSI5493.tmp msiexec.exe File opened for modification C:\Windows\Installer\ msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File created C:\Windows\Installer\SourceHash{ED591028-8D85-4D44-AA11-B2D8EC905F91} msiexec.exe File opened for modification C:\Windows\Installer\MSI1803.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSI24C6.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSI5493.tmp-\Microsoft.Deployment.WindowsInstaller.dll rundll32.exe File opened for modification C:\Windows\Installer\MSI5493.tmp-\CustomAction.config rundll32.exe File opened for modification C:\Windows\Installer\e590287.msi msiexec.exe File opened for modification C:\Windows\Installer\MSI52CC.tmp-\Microsoft.Deployment.WindowsInstaller.dll rundll32.exe File created C:\Windows\Installer\e590289.msi msiexec.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 3816 msiexec.exe - Checks SCSI registry key(s) 3 TTPs 5 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 vssvc.exe - Modifies data under HKEY_USERS 3 IoCs
description ioc Process Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28 msiexec.exe - Modifies registry class 64 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\streamdeck\URL Protocol msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\streamdeck\ = "URL:Stream Deck Protocol" msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckAction msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckAudio\shell\open msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\PackageCode = "CD270D366C026C7498254284B6556523" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.streamDeckAction\Content Type = "application/streamDeckAction" msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\streamdeck\DefaultIcon msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckPlugin msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\streamdeck msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfilesBackup\ = "Stream Deck Profiles Backup" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfilesBackup\DefaultIcon\ = "\"C:\\Program Files\\Elgato\\StreamDeck\\backups.ico\"" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckIconPack\shell\open msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckPlugin\shell\open msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckPlugin\shell\open msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\Language = "1033" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\SourceList\Media\3 = ";" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\streamdeck\shell\open\command msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAction\ = "Stream Deck Action" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAudio\shell\open msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckIconPack\ = "Stream Deck Icon Pack" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.streamDeckPlugin\ = "StreamDeck.streamDeckPlugin" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfile\shell\open msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAction\DefaultIcon\ = "\"C:\\Program Files\\Elgato\\StreamDeck\\action.ico\"" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\AdvertiseFlags = "388" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.streamDeckAction\ = "StreamDeck.streamDeckAction" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfilesBackup msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\.streamDeckPlugin msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfile msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.streamDeckProfile\Content Type = "application/streamDeckProfile" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\DeploymentFlags = "3" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAction\shell\open\command\ = "\"C:\\Program Files\\Elgato\\StreamDeck\\StreamDeck.exe\" \"%1\"" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAudio\ = "Stream Deck Audio" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\SourceList\Media\4 = ";" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\SourceList\PackageName = "Stream_Deck_7.5.1.22901.msi" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAudio msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckProfilesBackup\shell\open msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\.streamDeckIconPack msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\InstanceType = "0" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAudio\shell\open\ = "Open" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfilesBackup\shell\open\ = "Open" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfile\shell\open\command\ = "\"C:\\Program Files\\Elgato\\StreamDeck\\StreamDeck.exe\" \"%1\"" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfile\DefaultIcon\ = "\"C:\\Program Files\\Elgato\\StreamDeck\\profiles.ico\"" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckIconPack\shell\open\ = "Open" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckIconPack\shell\open\command\ = "\"C:\\Program Files\\Elgato\\StreamDeck\\StreamDeck.exe\" \"%1\"" msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckProfile msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\BFF23410BD9C6F04E82375F55B4178C4 msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckPlugin msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckPlugin\ = "Stream Deck Plugin" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckProfile\ = "Stream Deck Profile" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAction\shell\open msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAudio\shell\open\command\ = "\"C:\\Program Files\\Elgato\\StreamDeck\\StreamDeck.exe\" \"%1\"" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckAudio\DefaultIcon\ = "\"C:\\Program Files\\Elgato\\StreamDeck\\audioAsset.ico\"" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.streamDeckProfilesBackup\Content Type = "application/streamDeckProfilesBackup" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\StreamDeck.streamDeckPlugin\shell msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\.streamDeckProfilesBackup msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckProfile\shell\open\command msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckProfilesBackup msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckProfilesBackup\DefaultIcon msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\streamdeck msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\StreamDeck.streamDeckAudio\shell\open\command msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\BFF23410BD9C6F04E82375F55B4178C4\820195DE58D844D4AA112B8DCE09F519 msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\820195DE58D844D4AA112B8DCE09F519\SourceList\Net msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\streamdeck\shell\open\command msiexec.exe - Modifies system certificate store 2 TTPs 8 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\E7B8B5A6743CE1B2F17B041DE59558A41472D70C StreamDeck.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\E7B8B5A6743CE1B2F17B041DE59558A41472D70C\Blob = 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 StreamDeck.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\06B25927C42A721631C1EFD9431E648FA62E1E39 StreamDeck.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\06B25927C42A721631C1EFD9431E648FA62E1E39\Blob = 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 StreamDeck.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\925A8F8D2C6D04E0665F596AFF22D863E8256F3F StreamDeck.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\925A8F8D2C6D04E0665F596AFF22D863E8256F3F\Blob = 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 StreamDeck.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\925A8F8D2C6D04E0665F596AFF22D863E8256F3F\Blob = 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 StreamDeck.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\925A8F8D2C6D04E0665F596AFF22D863E8256F3F\Blob = 5c00000001000000040000000008000019000000010000001000000014d4b19434670e6dc091d154abb20edc030000000100000014000000925a8f8d2c6d04e0665f596aff22d863e8256f3f7e00000001000000080000000080c82b6886d7017f000000010000000c000000300a06082b060105050703031d000000010000001000000052135310639a10f77f886b229b9f7afc1400000001000000140000009c5f00dfaa01d7302b3888a2b86d4a9cf2119183620000000100000020000000568d6905a2c88708a4b3025190edcfedb1974a606a13c6e5290fcb2ae63edab553000000010000002500000030233021060b6086480186fd6e0107180330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080b000000010000006200000041006d0061007a006f006e00200053006500720076006900630065007300200052006f006f007400200043006500720074006900660069006300610074006500200041007500740068006f00720069007400790020002d002d0020004700320000000f00000001000000200000001504593902ec8a0bab29f03bf35c3058b5fd1807a74dab92cb61ed4a9908afa4040000000100000010000000173574af7b611cebf4f93ce2ee40f9a22000000001000000f3030000308203ef308202d7a003020102020100300d06092a864886f70d01010b0500308198310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c6531253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e313b303906035504031332537461726669656c6420536572766963657320526f6f7420436572746966696361746520417574686f72697479202d204732301e170d3039303930313030303030305a170d3337313233313233353935395a308198310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c6531253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e313b303906035504031332537461726669656c6420536572766963657320526f6f7420436572746966696361746520417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100d50c3ac42af94ee2f5be19975f8e8853b11f3fcbcf9f20136d293ac80f7d3cf76b763863d93660a89b5e5c0080b22f597ff687f9254386e7691b529a90e171e3d82d0d4e6ff6c849d9b6f31a56ae2bb67414ebcffb26e31aba1d962e6a3b5894894756ff25a093705383da847414c3679e04683adf8e405a1d4a4ecf43913be756d60070cb52ee7b7dae3ae7bc31f945f6c260cf1359022b80cc3447dfb9de90656d02cf2c91a6a6e7de8518497c664ea33a6da9b5ee342eba0d03b833df47ebb16b8d25d99bce81d1454632967087de020e494385b66c73bb64ea6141acc9d454df872fc722b226cc9f5954689ffcbe2a2fc4551c75406017850255398b7f050203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e041604149c5f00dfaa01d7302b3888a2b86d4a9cf2119183300d06092a864886f70d01010b050003820101004b36a6847769dd3b199f6723086f0e61c9fd84dc5fd83681cdd81b412d9f60ddc71a68d9d16e86e18823cf13de43cfe234b3049d1f29d5bff85ec8d5c1bdee926f3274f291822fbd82427aad2ab7207d4dbc7a5512c215eabdf76a952e6c749fcf1cb4f2c501a385d0723ead73ab0b9b750c6d45b78e94ac9637b5a0d08f15470ee3e883dd8ffdef410177cc27a9628533f23708ef71cf7706dec8191d8840cf7d461dff1ec7e1ceff23dbc6fa8d554ea902e74711463ef4fdbd7b2926bba961623728b62d2af6108664c970a7d2adb7297079ea3cda63259ffd68b730ec70fb758ab76d6067b21ec8b9e9d8a86f028b670d4d265771da20fcc14a508db128ba StreamDeck.exe - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1492 StreamDeck.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3276 msiexec.exe 3276 msiexec.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 4844 QtWebEngineProcess.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 11144 QtWebEngineProcess.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 792 ElgatoAudioControlServerWatcher.exe 792 ElgatoAudioControlServerWatcher.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1492 StreamDeck.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3816 msiexec.exe Token: SeIncreaseQuotaPrivilege 3816 msiexec.exe Token: SeSecurityPrivilege 3276 msiexec.exe Token: SeCreateTokenPrivilege 3816 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 3816 msiexec.exe Token: SeLockMemoryPrivilege 3816 msiexec.exe Token: SeIncreaseQuotaPrivilege 3816 msiexec.exe Token: SeMachineAccountPrivilege 3816 msiexec.exe Token: SeTcbPrivilege 3816 msiexec.exe Token: SeSecurityPrivilege 3816 msiexec.exe Token: SeTakeOwnershipPrivilege 3816 msiexec.exe Token: SeLoadDriverPrivilege 3816 msiexec.exe Token: SeSystemProfilePrivilege 3816 msiexec.exe Token: SeSystemtimePrivilege 3816 msiexec.exe Token: SeProfSingleProcessPrivilege 3816 msiexec.exe Token: SeIncBasePriorityPrivilege 3816 msiexec.exe Token: SeCreatePagefilePrivilege 3816 msiexec.exe Token: SeCreatePermanentPrivilege 3816 msiexec.exe Token: SeBackupPrivilege 3816 msiexec.exe Token: SeRestorePrivilege 3816 msiexec.exe Token: SeShutdownPrivilege 3816 msiexec.exe Token: SeDebugPrivilege 3816 msiexec.exe Token: SeAuditPrivilege 3816 msiexec.exe Token: SeSystemEnvironmentPrivilege 3816 msiexec.exe Token: SeChangeNotifyPrivilege 3816 msiexec.exe Token: SeRemoteShutdownPrivilege 3816 msiexec.exe Token: SeUndockPrivilege 3816 msiexec.exe Token: SeSyncAgentPrivilege 3816 msiexec.exe Token: SeEnableDelegationPrivilege 3816 msiexec.exe Token: SeManageVolumePrivilege 3816 msiexec.exe Token: SeImpersonatePrivilege 3816 msiexec.exe Token: SeCreateGlobalPrivilege 3816 msiexec.exe Token: SeBackupPrivilege 2024 vssvc.exe Token: SeRestorePrivilege 2024 vssvc.exe Token: SeAuditPrivilege 2024 vssvc.exe Token: SeBackupPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeBackupPrivilege 2972 srtasks.exe Token: SeRestorePrivilege 2972 srtasks.exe Token: SeSecurityPrivilege 2972 srtasks.exe Token: SeTakeOwnershipPrivilege 2972 srtasks.exe Token: SeBackupPrivilege 2972 srtasks.exe Token: SeRestorePrivilege 2972 srtasks.exe Token: SeSecurityPrivilege 2972 srtasks.exe Token: SeTakeOwnershipPrivilege 2972 srtasks.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe Token: SeTakeOwnershipPrivilege 3276 msiexec.exe Token: SeRestorePrivilege 3276 msiexec.exe - Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 3816 msiexec.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 3816 msiexec.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe 1492 StreamDeck.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1492 StreamDeck.exe 1492 StreamDeck.exe - Suspicious use of WriteProcessMemory 20 IoCs
description pid Process procid_target PID 3276 wrote to memory of 2972 3276 msiexec.exe 103 PID 3276 wrote to memory of 3760 3276 msiexec.exe 105 PID 3276 wrote to memory of 452 3276 msiexec.exe 106 PID 3276 wrote to memory of 4444 3276 msiexec.exe 107 PID 4444 wrote to memory of 2076 4444 MsiExec.exe 108 PID 4444 wrote to memory of 4484 4444 MsiExec.exe 109 PID 3276 wrote to memory of 3732 3276 msiexec.exe 110 PID 3276 wrote to memory of 792 3276 msiexec.exe 113 PID 792 wrote to memory of 3936 792 ElgatoAudioControlServerWatcher.exe 117 PID 1492 wrote to memory of 1824 1492 StreamDeck.exe 118 PID 1492 wrote to memory of 4844 1492 StreamDeck.exe 121 PID 1492 wrote to memory of 4844 1492 StreamDeck.exe 121 PID 1492 wrote to memory of 4844 1492 StreamDeck.exe 121 PID 1492 wrote to memory of 11144 1492 StreamDeck.exe 122 PID 1492 wrote to memory of 11144 1492 StreamDeck.exe 122 PID 1492 wrote to memory of 11144 1492 StreamDeck.exe 122 PID 3276 wrote to memory of 13180 3276 msiexec.exe 125 PID 1492 wrote to memory of 13700 1492 StreamDeck.exe 127 PID 1492 wrote to memory of 13700 1492 StreamDeck.exe 127 PID 1492 wrote to memory of 13700 1492 StreamDeck.exe 127 - Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Windows\system32\msiexec.exemsiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Stream_Deck_7.5.1.22901.msi1⤵
- Badlisted process makes network request
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3816
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3276 -
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:22⤵
- Suspicious use of AdjustPrivilegeToken
PID:2972
-
-
C:\Windows\System32\MsiExec.exeC:\Windows\System32\MsiExec.exe -Embedding E2A73C09E20E7B122C87E658E193B8502⤵
- Loads dropped DLL
PID:3760
-
-
C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe"C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe" -configure_firewall2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:452
-
-
C:\Windows\System32\MsiExec.exeC:\Windows\System32\MsiExec.exe -Embedding 98F6F7906D17625DC9CEEC83AD57E140 E Global\MSI00002⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4444 -
C:\Windows\system32\rundll32.exerundll32.exe "C:\Windows\Installer\MSI52CC.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240735062 39 StreamDeckOBSCustomAction!StreamDeckCustomAction.CustomActions.UpdateFirewallForOBS3⤵
- Loads dropped DLL
- Drops file in Windows directory
PID:2076
-
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Windows\Installer\MSI5493.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240735375 48 StreamDeckOBSCustomAction!StreamDeckCustomAction.CustomActions.CleanUpOldInstall3⤵
- Loads dropped DLL
- Drops file in Windows directory
PID:4484
-
-
-
C:\Program Files\Elgato\StreamDeck\StreamDeck.exe"C:\Program Files\Elgato\StreamDeck\StreamDeck.exe" --install2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3732
-
-
C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServerWatcher.exe"C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServerWatcher.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:792 -
C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe"C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe"3⤵
- Executes dropped EXE
PID:3936
-
-
-
C:\Windows\System32\MsiExec.exeC:\Windows\System32\MsiExec.exe -Embedding 6370CD746787A65145A4851254C7695E C2⤵PID:13180
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:2024
-
C:\Program Files\Elgato\StreamDeck\StreamDeck.exe"C:\Program Files\Elgato\StreamDeck\StreamDeck.exe" --runinbk1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Modifies system certificate store
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1492 -
C:\Program Files\Elgato\StreamDeck\crashpad_handler.exe"C:\Program Files\Elgato\StreamDeck\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\Sentry_StreamDeck --metrics-dir=C:\Users\Admin\AppData\Local\Temp\Sentry_StreamDeck --url=https://o324181.ingest.sentry.io:443/api/6638213/minidump/?sentry_client=sentry.native/0.13.1&sentry_key=3d87a745f5bc4ff895cd21c0231313c8 --attachment=C:\Users\Admin\AppData\Local\Temp\Sentry_StreamDeck\dbdf1af0-b2b6-43cc-4fb6-4388e87b7392.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Temp\Sentry_StreamDeck\dbdf1af0-b2b6-43cc-4fb6-4388e87b7392.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Temp\Sentry_StreamDeck\dbdf1af0-b2b6-43cc-4fb6-4388e87b7392.run\__sentry-breadcrumb2 --report-id=5b23300c-4ac8-4a10-d4eb-409a858bda4b --initial-client-data=0x570,0x574,0x578,0x528,0x57c,0x7ff646d77048,0x7ff646d77068,0x7ff646d770802⤵
- Executes dropped EXE
PID:1824
-
-
C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe"C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=sdpi:slL;qrc:sV --webengine-locales-path="C:/Program Files/Elgato/StreamDeck/translations\qtwebengine_locales" --webengine-resources-path="C:/Program Files/Elgato/StreamDeck\resources" --disable-speech-api --touch-events=auto --disable-blink-features=EyeDropperAPI,WebOTP,DocumentPictureInPictureAPI --video-capture-use-gpu-memory-buffer --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --time-ticks-at-unix-epoch=-1786387218053461 --launch-time-ticks=607733167 --field-trial-handle=6060,i,14722823034508703396,12170754675510444262,262144 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,EyeDropper,InstalledApp,WebOTP,WebPayments,WebUSB --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:4844
-
-
C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe"C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=sdpi:slL;qrc:sV --webengine-locales-path="C:/Program Files/Elgato/StreamDeck/translations\qtwebengine_locales" --webengine-resources-path="C:/Program Files/Elgato/StreamDeck\resources" --disable-speech-api --touch-events=auto --disable-blink-features=EyeDropperAPI,WebOTP,DocumentPictureInPictureAPI --video-capture-use-gpu-memory-buffer --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1786387218053461 --launch-time-ticks=614637423 --field-trial-handle=6060,i,14722823034508703396,12170754675510444262,262144 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,EyeDropper,InstalledApp,WebOTP,WebPayments,WebUSB --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:11144
-
-
C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe"C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=sdpi:slL;qrc:sV --webengine-locales-path="C:/Program Files/Elgato/StreamDeck/translations\qtwebengine_locales" --webengine-resources-path="C:/Program Files/Elgato/StreamDeck\resources" --disable-speech-api --touch-events=auto --disable-gpu-compositing --disable-blink-features=EyeDropperAPI,WebOTP,DocumentPictureInPictureAPI --video-capture-use-gpu-memory-buffer --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1786387218053461 --launch-time-ticks=658882708 --field-trial-handle=6060,i,14722823034508703396,12170754675510444262,262144 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,EyeDropper,InstalledApp,WebOTP,WebPayments,WebUSB --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
PID:13700
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x344 0x4e41⤵PID:4792
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:2276
-
C:\Program Files\Elgato\StreamDeck\StreamDeck.exe"C:\Program Files\Elgato\StreamDeck\StreamDeck.exe"1⤵
- Checks computer location settings
- Executes dropped EXE
PID:13316
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Config.Msi\e590288.rbs
- Size 521KB
- SHA256 6234ed5bd7db2c4bd81280ce09346d81b1707bc6a278b2fcaf546241a984d1da
- MD5 a68eb99ef0a9422bb001a667e1a267a6
- SHA1 fa542b9221f2df9230b2805282ce2990e5cbcb3e
- SHA512 e76bbafc0f32266d1cab0f45721138213bb33503a032e4fc8a32cc7a5f2803def45558ed69f064e45d03f6fdb6e0c293dadf73e8059f6a1e870fb2a252004139
- SSDEEP 3072:aZaZCB2rl/Oyg6yNj2DzRG7wWuIr0pE6HsFdyuum/BkDav2HGRnSh4PPM1QxKkTC:a8W8l/Op63alnSieQMoOJsBDAf
- TLSH T1CFB47268C95486D3F28650F12B86E70ED6508CB59F408A6FB3FDD2B69E106F21B3D61C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\PageIcons\com.elgato.streamdeck.pageicons.elgato.sdIcons\ja.json
- Size 26B
- SHA256 62f186b70a63bc4638d96657404b1d6abae5b2daa372421b56e227e57edd7201
- MD5 b696f7b26c0bf953fb6fba5e971e459a
- SHA1 8dae5413eaa80800f16021f963d12033c3ab740e
- SHA512 af9e5e5f31a0adb048bd8b8bba053f0bcf12add8f2f2265160c6414588c297c829d5e553a5d173daa74596acb88fa3633d379e1dc84f07e9c0553ecaf4377619
- MD5 SHA1 SHA512
- Path C:\Program Files\Elgato\StreamDeck\Qt6Core.dll
- Size 10.0MB
- SHA256 fae4778a42e93adc82b831c879c886a05147e9cc26760808d21116be5547259b
- MD5 3b5c8f8981b2cca0c4741dcf09d7a79d
- SHA1 a5179fbfc72c59a5aca26ebdbb08d944ce5b864c
- SHA512 4bed16fef4c00773892fb6da163134cdf7819ccb165987e5bbdcf9153d7b042490be14eae984903e84b48b61fadc6f5735671df16641b3b131c0c0ecdb5260f2
- SSDEEP 98304:meAbhLTfRmoOKFdu9CwJsv6tnYNJMAA1gcV/3cNuWXelc:mhn8KFdu9CwJsv6tnuSA+/3cNuWXB
- TLSH T1A5B6390766FA0102F6FBDA34DAB75116DBB27C466B3096EF025861185D337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6Gui.dll
- Size 9.1MB
- SHA256 8fceee959a670372aaa5763287c2ef7924cd9ecdbe2c29cf4b6c12a63079c503
- MD5 5d0da93b83dc26e65d414ff04cf86e21
- SHA1 b50cf7f75e9003825e1097f7ad095157b3d564fb
- SHA512 cbdf076636b80c412fbdeda23593826e4cbe62b056f08d7357955b3be9719e4684c9b4db88c6b368b6783724eadc3a8826cc2da336f13d9bbfa16b6ba615aaba
- SSDEEP 98304:+frUrVK+HdzDGqLVUkG/9r1hzJbgseVxDVkqtjuQQ2SI:+fABfzDnUfr1hzJb7QxvjBQXI
- TLSH T147A68D57A2A911D8C47BD13C8B9B9517EBB2701503529FDB01A5CA162F33BF12ABF321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6Multimedia.dll
- Size 1.2MB
- SHA256 653ae2dff699ae91dc6d2b412ee3e7b2b02a02d6b0f4ff5c212cba5c1e54f763
- MD5 900802ae394d058232fa4daaab43eb19
- SHA1 afd9552f3a1fecfab87ac270ca621d362dc49bf9
- SHA512 1101bec4a9c7606327a70c43abf2281b33d10dd620326e7ec60ba87d14701b3508e8a81e13e9357f3a58e0d69be3c1b3b189b60c802b3fddf4ad4b1e3188d385
- SSDEEP 12288:oY+1wTDdia1tLrnZicyJ4fJraY+X1Wb678NQxzTSzfdesr0:ohqk4rozJSrMX6NWz+zleD
- TLSH T1FC559D6BF7A441D6C46BD27DCA878A16E7B2B0040342CBCF16529A0A2F37BD16E7D750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6Network.dll
- Size 1.7MB
- SHA256 0232076731e386b6cc353bdf743d5fb17e95a3493c2d02afac984db87ed47b96
- MD5 c1f79b2e138a1658d122eccc3c446a4b
- SHA1 4edee52c0faee2bb72dce08f635c9ff541047980
- SHA512 bc9280b4eb94ea1803b6e1299d62a6427a8a326a091457adfbcb9579dca79d73d0ba6743b4387585e3382a32ab79ed514caeb6548e76596c52598c5efa5948dc
- SSDEEP 24576:yQrj1h2y2YNJ+wPBqmgvR6YFamR2bvaKLhToqYkiaKD7:Prj18o+wsoQjQZLhTYkU
- TLSH T1F5857D57A3A54295C86EC17DCB4B860BFA72700483669BDF42658F152F73BE22B3D360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6Quick.dll
- Size 6.3MB
- SHA256 689daa7b3a81e2a6e2b1494139f242798523f9e3b1948867a8b13365d91b3de4
- MD5 022c68d01e66806f589ea520bdad5b01
- SHA1 cface032ef06d531f42385e468f6cc7ee2a75e66
- SHA512 e112eae5ce9dac9aa4745f885a1950ace1e6ab466ae45517e14e608f2d8df59c71aeaccac5a6010437b0d8103cd6196095d7db617f41924947a22b2ac84c16db
- SSDEEP 49152:mEJYh6INmSUqRSEiPSG65Djz6nS8FBGROkEQXn31cSX4adxuZb7m8XuJFN2xQMj+:czSnS8M+YdTCUAhYKeo7ifCOO4/
- TLSH T1AF667C5763E90086C46AE13DC64B4617E7B2B0906352DBCF12618E592FB37E11FBE7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6Svg.dll
- Size 627KB
- SHA256 a5866fa80cca10dd58e31f277b62f1a1060d3a495fabcea72e2f9ade0f9e45fe
- MD5 d9232ddf1b55fccaf7dc1bd306bd4a82
- SHA1 8ada9c3d81d449d9df597b4956ead145158ba823
- SHA512 5b35bc1a66465d3fe2e0bca81796e871d1f6e5a67f5670f7e70783cead1d94a0e730f16c228c2f47fbf7e258161a1dd50885e18121f39f3135dae26bdcabb3c0
- SSDEEP 12288:MlICqNLT42lBz2N/dZyJNX4nSEQmuR1Hl:KmLTVHz2Vd5nuR
- TLSH T1A3D46D57B3A60386E46AD23DCB5B8426EB73704003A2D7DF41B58A542F23BE12B7D791
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6WebEngineWidgets.dll
- Size 184KB
- SHA256 1ddfa0499d8c8e4fad05fdfb64a6b59f8d79869cf3ddf1fbd27616d6b5cea1e8
- MD5 b72727e876a30892174a175238f845ee
- SHA1 3db2a4eee13faa3e8560ca5cdff206992d3ad5bb
- SHA512 56ec9e747689a66c49a35b7611cced5c330bff2daa3e51df0f7ab1184446ef73d43c2d13e689d8c93ed923c4957685965bd3ab867b5ff08ff2f5f7a92fa12008
- SSDEEP 3072:y2xnulyp3B5KSn2fkJihSBwIdWQBHXuI0hrocGqRWHOVJiySA5hhdPeV1Oe0:y2xlj2fkJiKwIdtBHXuI0hrocGqRWHOV
- TLSH T15F04F6636A5A0182D65DD339C54B0A56F3B2F0A2475383CF812B6A3D3E633D1ADBD6C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6WebSockets.dll
- Size 214KB
- SHA256 f8b4aa00330bba619e1b45b1a907eab86d8de8d4de4f0c83ffaec00950fcfd05
- MD5 2522f65ec415835081d48617c52d1311
- SHA1 6ecf3a12b274f879092c9a5c6c2f63eae6a716ab
- SHA512 9738a15706ec46c4e16fc5864022019ca1bcd948d967d12ec93e3f8d20467cb85be147fb3f91d992877853b1ba4bc573a9c85b3d79fc85aeafe3602b4b502f37
- SSDEEP 3072:sO1cc0bMFjZ6z8ViEKLUGpeku6/EGodRQVb15aGx18nTL1SKCk:s5VeQz7UGnDEGoY15ad1j
- TLSH T11B240713766111C6E976D278CA4B4A13F373B00457629BEF42668A362F237E1FE3D294
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6Widgets.dll
- Size 6.3MB
- SHA256 4d603bff620ae0830d15c25a787f9f10ed3f972d998f1f17c9c4f83937280399
- MD5 fe194f3803df1543fad6f316a50477b8
- SHA1 b9433f51f6bc4c61fa0fdb79619b64861d567b1f
- SHA512 74ec1e7bc22cc3814b1906a647beaeb4d080fd7f40ee786811990f597d0f1537700ab90198776f2e5f5ec6cd9cff568d9be8bf659cf37a265645b7096b6cc5de
- SSDEEP 98304:vM+neySH06w0WYXVxRjYqnzIjWyHTM1R6wtO0MPS:vM+neym06wvYvRjYqnzIiyza6KqPS
- TLSH T15B666A5763EA0185C4ABD13DCB4B8A17EBB2700453629BCF0265CA592F737E22E7E351
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\Qt6Xml.dll
- Size 156KB
- SHA256 23974da7ec6da4e70c7cae7a3cad81662f7a046714bf175073f6f0c3161f44f5
- MD5 40afa2843973884d80585cce1ab7dc92
- SHA1 d4b147799ad2caa63119a2cd2467b13fbadbb765
- SHA512 e70f4c55f0e7d65349f07327add3fb9290c3de3953ceccfbc5e82c66f2486d5cd602e03ce9e5dbdeca74ee316ee1b7e1bbd0699227983fa69d81c779fd2a0bfe
- SSDEEP 1536:ZkbRVc9vFiS5YhYXRJUYlj4W5aEoQjGPEacxOIaskehEeSR/lZ2CbYTQj99VMRff:Z4bQFd1j49HQj/PDxhEpxnRVMRfcpex
- TLSH T143F3398373684286E56AC278CD0B091AFB73749057529BEF82648A352F63FD27D7E350
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\StreamDeck.exe
- Size 26.6MB
- SHA256 9b2e3d0069052f18f372b9c9aea46e925cb463acba443a1075e68ec5648f769d
- MD5 ee02c33fc10058cf7050aef071793280
- SHA1 7b30e70d960aae7995f0b1e45346805d93b7717e
- SHA512 c3d753054708b2e4193974431de9ef9544a183f6d39c4777927430f708229a1574623b0dccafb11884381fdac35d6dce1ce6a151cd000aae1254ebb3c35d1165
- SSDEEP 393216:nHjSmbCznYDtwIdO7+WdcHXsSOSshGx1eVIE3Ofda4:HjoY1Cc6hGfegFa4
- TLSH T11D57BF3AE36801E8E4B9D1BDCA5E4912EB71780A03F297EF159189E71F776E41E3D600
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\VCRUNTIME140_1.dll
- Size 48KB
- SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
- MD5 cd1b08f4930b276ad78853580b76b5c6
- SHA1 a0330279d3d0d47f19ed984726e25260b547a228
- SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
- SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
- TLSH T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\iCUESDK.x64_2019.dll
- Size 498KB
- SHA256 d72fd819b91fd1d3b0c3db2ea17a47dcfe3b38e26269aa967ecfee10d2e93884
- MD5 921513d8d67b1894f2f5ae276421d23a
- SHA1 e5bc86b8f68da5ebe0a014058defa5a186936bb1
- SHA512 dbe177c5ec36d2c0841c8e78c9cd7e3688126091512ccdd5c60da3e595641414ee1bbe211031547be8d4c2f2e5a7d81def2f5d130c81405306078bfde08266b7
- SSDEEP 6144:YqC0tXkJXGBJi03M6MXMJNYIQ1TubeZnHH08D+UwY4dd:Yq/tXkOJi03M6MXMJ+px4z
- TLSH T19DB4185F265C45E9E277A27CC6C78F47E162702947018BCB0AC192AD1E57FDC6EBA230
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\libusb-1.0.dll
- Size 166KB
- SHA256 ea935ef664dfafed208a676cb0ea31f82ce36ec79586b5a6dc37ddcea504e6cf
- MD5 90dd04d8a4a08c136bc218372526c5b3
- SHA1 294f263ce9d7c4179a7aca6f6086258a02ed7b35
- SHA512 4ff55a88800e0e6a20f295a8789b93134ee1c13a56a83653d022d8dcda7afe73362c068b876aca80354ae8a4d86c732a51fb49d9bec84aae7828cd2d8413608a
- SSDEEP 3072:FrRta8qomP3+mA8GOmCGGl/7311eG0xA8c0aj5+td35Hf8+cxQst:Fdta8qomPaAzVFz0e1Cw+y
- TLSH T11FF35BAB26EC41A9E5D3C0348DA68907E7B2F0591391A3EF076081791FA3BD2F67D714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\StreamDeck\msvcp140_atomic_wait.dll
- Size 49KB
- SHA256 640b2aefced484d0368eea5bdd06addd0658a3a70a49256e560d6923b404a479
- MD5 44aec42494531580bca182b0e2fb19c2
- SHA1 a85a6a4de6656e5969fa4ab15f2230dfe2839e75
- SHA512 d8afb5bbb1394fd14c3ec8ecdd4c02e1c6f23031b15173b1448dfd4915c392bb8512cd41eccb449db19969397a09046d27d54db704c8122ff62c12ff5a89c9d6
- SSDEEP 768:ayMsqh8UGchsJr3KbYA5XeDmqw4DYPW9zr0JD0io9z7p1uF:W+UjCKb/5XeCqgazrURgz91G
- TLSH T19C337DDDA7684083E5678634C1A4E517FA7AB7E20710D6EF4352F0890FA37D1AE34B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe
- Size 1.1MB
- SHA256 c6ba20a388082015e251dd94c197a862c2c5dbf139dd8ef2cfb9a264be05702b
- MD5 78caba35513c36aa472206c82d768450
- SHA1 84093ad113e419259b59daa937ab03e7c8f41369
- SHA512 83bbcd56cd5c54e2185a120524c0a74b7079c6186316137ebf0d5af6d4e65657adc741fdf72869e9376bff363dbbfd5bb5b33fe379ebb8b3f8f0a1c42b11d822
- SSDEEP 12288:HwvjzgI9JN2ZcBVW21A6LEHWnDFuMmVzmgL18iEQs45MpnvPn:Qfvgci21auFuMXg58DBQwPn
- TLSH T10E456C67776801DCD1B7C2BD8D574E07E67270490321CACF0790D6A63E6BBD96E3AA20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\Volume Controller\VCRUNTIME140.dll
- Size 117KB
- SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
- MD5 caf9edded91c1f6c0022b278c16679aa
- SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
- SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
- SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
- TLSH T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\Volume Controller\VCRUNTIME140_1.dll
- Size 48KB
- SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
- MD5 2bd576cbc5cb712935eb1b10e4d312f5
- SHA1 dfa7a46012483837f47d8c870973a2dea786d9ff
- SHA512 abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
- SSDEEP 768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
- TLSH T17C235C9457784086D59F95B0C1D6EE537E7CFA964B00928F0BA1E1882F637D0EB3D22B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Elgato\Volume Controller\msvcp140.dll
- Size 561KB
- SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
- MD5 72f3d84384e888bf0d38852eb863026b
- SHA1 8e6a0257591eb913ae7d0e975c56306b3f680b3f
- SHA512 6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6
- SSDEEP 12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB
- TLSH T1B9C41A23B74905A0E195E3B8A1878316D7F1BC4A8312A3C792FBD66D2F673D1673B250
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
- Size 471B
- SHA256 cd5558ccd05ceea3b9ee033e7fae41e102767612a8828e7209560c03a5aaf035
- MD5 29552d942fd9720285df90ad8e5e499f
- SHA1 d36abe01fcf9c006ae74230769a10d1fbb00955d
- SHA512 0c07954a48bfb2cb858f4a8199c6b446684c817feb91150830b084bd24e4693c0b6e75bae71e79cfaced2f17dac4665ab772cb5ffcaea4be918f051f448fc58a
- TLSH T1ABF0D437943A50755D13E81D1AF7966635319C9E01C7907A3C2C05E8974B2D65607424
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_8DBAD5A433D1F9275321E076E8B744D4
- Size 727B
- SHA256 fc41b72e90ce6d513f8e6a1cf1f0fb2083d783f693d5e5abccd3f13c921e9ff9
- MD5 06698bd233cf1fd301b1c948b0072f96
- SHA1 d7e2d302ef3ead666f7fc9929f6260b4dc037e50
- SHA512 6276d5cd020f910c8a75e4da943f95bf698d9aed3ddd72992187e8a3d6bc1be87af47ea6e3338e4d70849d0c14f1e717fd7ac6267fcfa4a75ce737fe94856f97
- TLSH T1DD0144557A103B143C48485A8B6C99306A9F15F272104861A53C39C736DCF90EF32A7F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D9CB7DFFEEA63BAB482BD2705E7E24AB_1821B9E546D8D910389489CFE11B34C5
- Size 727B
- SHA256 16c113f467e9269862d01704607ce41c1c05b0b7df9c6f8c304b57a4ff39e68a
- MD5 cff4b2196ab4e1c7b270c366d2e66740
- SHA1 2202ea76aff3c17a5e95bd0c30d6861ae58f07e1
- SHA512 c8f47a33bb574edd61c2fcacd6360e969f74de992e205c218575b2a69414da9a1c7f70e47d2e351ef62b822b3796c5fa7a0013906e26621b3ecae770fb5c36dc
- TLSH T1E3019402071C0FAB18504D0B055F9D376333E089E8B803DF68585AE8644AAE2391B87B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
- Size 400B
- SHA256 d2713be7544c4088143c7c274d79bb998209b618a8d3b5fde732433c34c62f01
- MD5 fbc10f916ed729ba4800b3a891970536
- SHA1 945bc5cb95fbeef3a9431415a31debbf7fde21b5
- SHA512 f6930b63aff3b5eaebe3c8aae931b2b468fe05a5b08702e86cc0d110acf460bf5b36d751219535abe5a9d7329d9d6512d6249b1abefe043b71f01d3d0c265eff
- TLSH T1CCE0C03027FF005EF164977C03D5D4DA5F25F1022D0552BE0D91041C9909A000D52C34
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_8DBAD5A433D1F9275321E076E8B744D4
- Size 416B
- SHA256 9749935fd4572105006b08a1fb7012696ea4070e33467ef957d571432fd5255f
- MD5 4512373d66ac399189ccac58bae585cb
- SHA1 df7510031fbe55f405a702026dc10972c6911b3e
- SHA512 26fef2db860d3f2e83c3e2ef5ae917501de7109e007064fb048e33840712bbc5554f5277759c272c3399ca7ae61f386aabacd2059d0e4cf5b211fed4ca355341
- TLSH T189E0682826FA5A2EE060DC3487F4B1764964F305240452B406D44708AB0AF40BC22A75
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D9CB7DFFEEA63BAB482BD2705E7E24AB_1821B9E546D8D910389489CFE11B34C5
- Size 408B
- SHA256 0bfab191e9608f262c131ddc660890d0874911de27b7c63fd6a62ef746602e86
- MD5 e492c209e06d3c9693033775f023502a
- SHA1 678c0e613205ba4759abaf64c858af2db6469f44
- SHA512 a2f8ea1ff9437c558934e89308805ac96a2de120cde5309354c01cb0e2583ddad2050ff8f9f2702387b75f35cf86a5599233122c6cfee5cb9e99edfd8d813e40
- TLSH T12EE0262822FA011EF0B2F9F84AD2B770456AF36A18415BB927E4557CBA0A740FD319B1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\rundll32.exe.log
- Size 865B
- SHA256 ec70e7bdb006ae421941ff18c8f8de2685f98cbfc383513d9ba06dd8bf6b1cc6
- MD5 e99f3af724c4adf519332a61e139612c
- SHA1 c38a7cb965653b48fc0dd72f58d7cfa144d8bf3e
- SHA512 1985ef48b9d8dd015c3bee283c75073b7d4f73919dc67497369463bf392db3e2c598cdc426c50fcc457c031f41c44c16fc69c32dca887f24a1d128440204e538
- TLSH T112116B703272B1DCCA123F171C5C268407BF8B25AE54DF0CB669655ED8250171F222E6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\63090ca0-19dc-498f-9880-0e679b11fec0\Profiles\CEFF3128-9054-4283-8455-0DC58F9222B9.sdProfile\manifest.json
- Size 246B
- SHA256 da2f0964b68455674dcfe9e23bdd3a78be4a2a1034b61a5cc2fd6eb332d51241
- MD5 6ac63a89de015a1841b60d8b6b08862e
- SHA1 b1c2231230c2fc365fb4599abf30620499fd5c25
- SHA512 4480c276095414d0b2693c5cbc9279fbf8cd066e7b3308a8d40ba3893836cfb17da7f6061a667c78e91019336ba12292e2a96829e803edf42cc306f387bba56b
- TLSH T1B4D02200F318C439DBECBAA033743C7A339E380A10C4804C9C1EE8F836A322EF2056A5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\manifest.json
- Size 699B
- SHA256 9aaa34c4efdab7095be78cf3847db4d360e8e206b858824057964f30a0b1549c
- MD5 7bd4cf7e142090c11da56772e57bb975
- SHA1 23b6e8401f5130519f2d8863bf8f28fdca0de542
- SHA512 8f41b2842a809de644937e4e758b7150b61bf7841a401250bfd75824f769d0c1564f8ef129f32cfb4288a7b29c0d252412e1920ee274bfb424daa069ce33b363
- TLSH T19801C219C8320DA21658073209D9A692E2A1C3BBBE51BC4D374C945CCF5E9BF657536C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonsblack.sdIconPack\icons\IconGrid-Black.svg
- Size 1KB
- SHA256 2d4f2da106cc27a9658da6ef1ec81961cf53ccc6255e81941a9840bacfe3392c
- MD5 75c591f2ed7cfc4082509d42d2644d8e
- SHA1 b90496728cb221d63ab3b33973a60be6c6b5c5e4
- SHA512 e26a1321bf57e4d1b82515703dbc1f4f8ad1583663f66d8715f355f4e4231cb4d95b333675424cd03cb8236c955c671a103a7cc73a5fe4a09ee271182e7222c0
- TLSH T1CC3168D50AB54A4490966334C3FDA3827C5FF69D3861B416B3B46C4A281DD739FC52A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonsblack.sdIconPack\icons\IconGrid-Filled-Black.svg
- Size 763B
- SHA256 ad5895331ed6db3e2a386b396e0aea100f2f788b45ce7b9ea9f310da4b5869b2
- MD5 13bc167a50b9714d2b50c2c5f2342f6f
- SHA1 6da65b1ed9a2fac1792f7b75586e75f3ef5370fe
- SHA512 13ea0968943bb02413690e40fe887f5d72bcb7afc492385ee05c54474238bfc1830202b2a6cb4315675a9c1dc8d66627fc1b13e0477903180fa78c8f29d9e307
- TLSH T1A50184DA2AFA4F649892A30583CD2102B09FF4AD35656505F0386D86285DDB94FC63E1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonsblack.sdIconPack\icons\IconSquare-Filled-Black.svg
- Size 276B
- SHA256 59d69bd4b0d4d1deec73bd1e18eab5b7b53614fe32bbe304af69e4f5597eea77
- MD5 e23fa98ca50f61a73f8e1b94f05e96c1
- SHA1 f9c67f4c968544d1ffcb01a4fd9db9e4d87a697c
- SHA512 22d8b08174350d8a7531babe19a76fbd8cdf2cb4161616e545947d71d250a1e9f9fb8b35c5d9264ad47b8b14a368bed9693941f50a4a7346b4fa593b418f7b92
- TLSH T1EED02BAA78CD0E5864C2C70283DC3902395DF4B91501A448F0682C5B30CDDD65C833B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonsblack.sdIconPack\icons\IconStop-Black.svg
- Size 458B
- SHA256 628d7d36d80bdd4bbc366a2467c6d990f92284f8681107cca9adc3f577b7091e
- MD5 cf3b5bcea17814b926605746d56970ea
- SHA1 8e39d2e768d287795b7c512b21c1a5d051a8991f
- SHA512 80930d6bd7dd5afdbebc50ebf8d392d6729577111dbef03e2d3e33c5572844926cbaa9f09dbd42723b0239655146e8ab36328e1e5fbfc4b7d31bceeef9b4751b
- TLSH T162F05CD915781D9844C2C230C3DC7742385EF56B24177548B3E41C4E304DCC5AD417B8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonsblack.sdIconPack\icons\IconStreamDeckKeyBottom-Black.svg
- Size 602B
- SHA256 c87c61fed56265efa14d316908f412e23a2365984879106300b3c7b65a90879c
- MD5 c3043c57c7ddad959a659f7d5965f040
- SHA1 1cb7664d80e4562787f474db29b4ebeb644e4d90
- SHA512 0879426102d2569f04a276386ceac8146a12e62aa3785f4d1343ddaefc48a89532c9227e0ff3f3834e3d2ccbb2813c84bc6dad65b18a8d3859e04304344ee6b2
- TLSH T1CAF04CFC33D442695C9A0331973E6265314FE38C904974C4E2F53C166D1967DA60B2DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonsblack.sdIconPack\icons\IconStreamDeckKeyBottom-Filled-Black.svg
- Size 437B
- SHA256 41ebb85989295fe0ddce14c5cff4d66ba163fb9067925e08873c1b387af6bd43
- MD5 a1dbdb4903a184765883613f47889862
- SHA1 86bd937ab5349183393fb62059903973f7d9ee48
- SHA512 c3f67cf95399faa78b2c416567d458aa558ccc7e4e3f8962953bafdf6fd716857ad8e80a1d8d284f12dc7076561bfa029d4ec381f67533d59c6cc0d8926f59e0
- TLSH T1DFE0ABFC03C886926CEA9331C73C6595248FF24D408CB0C4D2F87C2BAC11679B50935D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonswhite.sdIconPack\icon.svg
- Size 638B
- SHA256 ed4d7e45de007a740a697b615f517446b066fedc0800a79c8a2245446b7ab74d
- MD5 3375095e98d78c2a4b07360735574127
- SHA1 95ec6852ba702431f677421ad29408e5afdacc09
- SHA512 7270622c99f33e667a35005e5925bf2acaeb330a9f30266a43ec637cf53c2dca984ee876fe2b57e2f587712c53a1644445641388fc7a32a4dfbfa94a2b90798f
- TLSH T169F07DEFAF1C14DD9897DB94EE2C6E49432FF0723C9649719BFE94692982051DA1380C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonswhite.sdIconPack\icons\IconGrid-Filled-White.svg
- Size 755B
- SHA256 50624d712b221dcef58449b1ffffe242d6df0fdb9964cfe6681d977a5fc31144
- MD5 7ee9cbe33665dbddb912c73b1040541d
- SHA1 3b0ef4a8c103b844076cdf7b4cc16eec3ebbdefe
- SHA512 ff97aba38923c7f00a16f5311140fbfaa478750fccc7af4130fd0305b4109124fdd61988d66ac2263a537a9f9bf63d7e902aa531557b66b7ce3f26aee89c2e22
- TLSH T10B0184DA14FE4F649891A30983CD2102B55FF4997669B505E0282D86245CCB94FC23E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonswhite.sdIconPack\icons\IconGrid-White.svg
- Size 1KB
- SHA256 4cd31c8faa89f0029d7d0a0810fb179f65083a962f79812c538d619689258c91
- MD5 bf342e0b1d9d58ef9380f9f18193632f
- SHA1 5776856a51297984dcc98bbf5263e81a950e89db
- SHA512 f4b12f0e18847c1433bf780060986ac2b4bd30263cb6effa0db8a4d36c55ed5610f48058f2f8ec6207393fefca5d2bdb850b06219535c296be3c7618575c74af
- TLSH T1D7316CD509B54A44909A6338C3FD63C2BC5FF6897965B416B3B02C4B681CC779FC12E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonswhite.sdIconPack\icons\IconStop-Filled-White.svg
- Size 274B
- SHA256 2dd55932200e7dca8de4dc2c30dbd8db467b56eb16b0191459bb71b4e2c2150a
- MD5 7c30ac41c7fe7f194a4909c2da278eaa
- SHA1 38306e0ecbacc5ac52cf3366d83b810a04aebb55
- SHA512 6d3d20af60731a4c791cb94617d5874e68a892b5137977c7424d0034c43a76651cd287b4a5017723f62262954678090a9b96654accbf12d57ef55a6bdc7d5e9a
- TLSH T154D02BAA74CD0E5864C1C71283DC3902391DF4B55601A448F0542C5B30CCCD65C833F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonswhite.sdIconPack\icons\IconStop-White.svg
- Size 456B
- SHA256 83fb3e97028eeab7e6b625e0f5d25e622f9283cc6bead7fcad65758a83de7ee1
- MD5 f22505ca911841553d97b689808bc856
- SHA1 6f33564ef2600994c95008724501439fd8293149
- SHA512 9397509a2ec71569a6626e164d1e62a9b871dc9dc6d5e007ee6117bbe7964312e680cec69acdae1619e28132d6a83f6284a7092cc00858176b907b1d53134ac3
- TLSH T157F020E914B8299848C6C230C3D83742385EEAA669677548B3E42C4E304DCC6AE41BB8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonswhite.sdIconPack\icons\IconStreamDeckKeyBottom-Filled-White.svg
- Size 435B
- SHA256 63b806fdafa5e9771940f3456ee596c6d2c4954b82267b00323c48d7dd51963e
- MD5 a1f7656082ab1ec507f89414c8054e3d
- SHA1 07c0b5247c037c53e0995b364c685bd4a5ee8837
- SHA512 d09e656fa3643f7f11d498958c588b5a1c9fd323295a7e506e3e1ba9132f34a723f881b600f813fa05369d9588eb40c3023a31017b6d35b9e5e5ad7dae275b18
- TLSH T1A2E055B8028886916CE99331C72C1595294FE28D808CB0C0D2F83C2BA810579A50939D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonswhite.sdIconPack\icons\IconStreamDeckKeyBottom-White.svg
- Size 598B
- SHA256 efb45b1e0835a66eb264494d1cc4cd5187dccac76cdc5d8001149fee758b060e
- MD5 de80bb3c901e238d456dafcb1b9018a8
- SHA1 aa099cab4bf5e5d96f6b9635299ef05122c0e026
- SHA512 e37cb3c1e17097987d6036e73390a6e7b7ae7a029d6d1db5c809a47677d66a01cb5e5daaae0a76ff39e5648226cca32559d20966e62b73122fa2cd32c3642d60
- TLSH T157F04CF832D442695C9D1331973E1265350FE3C8D08DB4C4D3E53C17691857DA60B2DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.defaulticonswhite.sdIconPack\license.txt
- Size 124B
- SHA256 50ecf83769221bf71b4b44864864f1dc3a2ad0e65a66c451a53a1fa12b1cfadd
- MD5 53f40a2f09a9d10a2a28ad4f1af265f9
- SHA1 80df942c5f8511708da7ba57dfbff61cc44b104e
- SHA512 452f358c50d6d2e3ab60af11fed108274f69727da6d44c25440d4bcb3a75dbbd9ab9d583d8b9546c0287cf6fb5851f3a65390a0aaaff9779a47efd2cb4e93ecf
- TLSH T155B02B4F0A2A82A30BC01703DC13991AC104630444890021F0CC08142172003D1E632F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.logoiconscolor.sdIconPack\icons\LogoAppleIntelligence-Color.svg
- Size 4KB
- SHA256 bfc715c50a60e78435098548dc45d4fea8a4e1311b9acf39f7720728e13b761a
- MD5 c1e4750009b2614373d3c62dbacfef91
- SHA1 c3202e9ebb8184b747305356bed54acc77944e52
- SHA512 f5e4189d8274ba693921e5b2a41240741554363cfe995b405b65614edcd8e671958081df20e3d28517c8700995aa791f55ddfad06c6545b2d48f5ec94b33458b
- SSDEEP 96:WpIvGMFpLTfq+LlvsI9VP8aB10AlrV0ZIes+AgrG314l:7v7LTyaWC8aQAlrV0ZI0BG30
- TLSH T1DAA1EAD8372993FDF405F8FECA1218A66D0F28E2748286B4C3A41E1A64474D4DE9DCDB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.logoiconscolor.sdIconPack\icons\LogoSnapchat-Color.svg
- Size 5KB
- SHA256 0cc00f02ca0fd82d4911672945200c1c7e90851650216df150ec65bf7480da64
- MD5 32c2a6ba07c811054f776f7dcd5c3365
- SHA1 5fa5b2004acb3409d73148bd68888c89f036c15f
- SHA512 2f79ffa97587a831110a9112e43a17e127345b8c6b748247106ab9ee2ffa2edeaded2715b9c61d1ccb4e2efacd991356b38f2dc06271e316f13d36049bfca3a8
- SSDEEP 96:WXZzmj9UrkxUtbbNbCBENzJ5FKHs9y1jrW6Bnuy/EwuGalWSs0O+r3b5qmlsxDs:Whk0MBEr5GDBuKqG5p08csxw
- TLSH T134C185D46AB483F4F483F6EEE6131550AE8F78E0D8E645B9C32E6C06A40F1A9CE554A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.logoiconswhite.sdIconPack\icons\LogoIntel-White.svg
- Size 4KB
- SHA256 0c2da32636bc2d632a18e2aa02c43a734c2a9113660f83402185f096e7455e68
- MD5 ea96ca6c3290a4e9222ddc05990c7d14
- SHA1 8e73a7b68aac57a4a262ded525f5d62dff76e15f
- SHA512 4370ce59ea95114a80989fbfa46e451c1eb40446ffd5aa3892e8fa3ae734dc302185993278b9442b6d0dbda12c6355231447ce3bff1519d2fa9c6fde23f6f9b8
- SSDEEP 96:oPbN+MsdtkX33cpv228hbe9KCdv+jhgFlDomuHwyzUKMddLT:oZUKOuVAK++j8R65BMddLT
- TLSH T17791219DEFD453F8E995F0FACC2A16DCAD8E64E25AC0A574C3A23D4A201D4FE5B114E0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.logoiconswhite.sdIconPack\icons\LogoMicrosoftSharepoint-White.svg
- Size 5KB
- SHA256 beab1e986d981d4175b2aef97fea18ffac0baae4fe4c49e92947b7a4083483b4
- MD5 2c4ac0dd785e9ff28d9e788c0bcfdffc
- SHA1 be12827468616731c99cd99ed1b9da5d81f72114
- SHA512 a18a294998262f88b5f0c6fa36c44fde1d55cb16f9106f32249d4bc1ba6fe5b93a5fa8d70f54916ba7e2f2ae3684105383fdaa19ffbac02eb500cbb74cf3469f
- SSDEEP 96:vwEynHF9qRixLBAotkGX4YFfXXi8ZwFnU02sgeTtlJ1pXLgK1jkv/ho9kjtKXO8:2lxP5LyQwxUNsgeTtlJ1pXcgjApoKjtc
- TLSH T1BCB173D8373263F8F959F0FAEA3649ACBF8E24D5B2C49839C3702E008857056DE855C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.logoiconswhite.sdIconPack\icons\LogoMicrosoftTeams-White.svg
- Size 4KB
- SHA256 15934f70c4ae110e8ddb67ee6a8445d362423267f1f3a4b16e96de8f7554598f
- MD5 640f99f4ee01eb36132c3dc511d2350d
- SHA1 27f7b476e4d085fb7b72fbe4bb4ce3e085076c70
- SHA512 bd6958433bf8aa2b19ac62a5a5111895c003669fc8da55233e196a2af4b1d751c9f6ce9d9811dcc0f89031be7e23c2705dfb845019864c14f68f3d8c4d915838
- SSDEEP 96:ZcJaNgmB1IHb3KJGLhU59qRukE/XcZuHcrXZUQDhLgPH1n:CJLmzIHjKJGLh5E/XVWqQdS1n
- TLSH T11E9171D43B7AA3EDE552B0F3D95292593E4E10D2B5C286B0C3687D26B40A099CE8A8D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\com.elgato.logoiconswhite.sdIconPack\icons\LogoSkype-White.svg
- Size 4KB
- SHA256 9f310cc52cf984c92b04709dc3a0e10f3915d5a6d865b02c6f3acbbb221471e4
- MD5 3ca5f6dfc3e7db70e723f5e0f5de1df4
- SHA1 c7e903dee7e6fc300829119445894d71db8e69b6
- SHA512 c7b5c04270cbd316c99fe46c6d096877711f372351970f7e8d89cd9329fc0bb99ee05719626fabe85259a62dd1a0ae6a3b3ca935136abdf6db2712d83ea8eaa7
- SSDEEP 96:1M0vZi5rGe+YkWfbzWDNAM8FSsqHtUuG4BbjZ7uVMi9:NErGnrRAMJsa1HZ7uWi9
- TLSH T1C89184CC23BA93F8F512F1F6C82681DAFE5E25E4A580847DC7963E0694070E8AE458C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\b6ca81d1-ffca-4401-83df-69a67a8e4694\extracted\com.elgato.keycreator.sdPlugin\static\icons\favicon.png
- Size 5KB
- SHA256 2c8d4b45b2e626f756a7672f1b146a46e1067d37defd6fce9d97411353056e08
- MD5 ba1e79c167918222f45723acb13ef363
- SHA1 360050d1ab5bae942824b58cd08ab9a0d026467c
- SHA512 b29e0dd1bc774977d4a3b7761fa9bfcd02bbb044a989551e823f40322bcf4dad5c9c1c2ae2b696d9c5938627c97ddefc486852665efb24406fd1797eaa00a3cc
- SSDEEP 96:oqZHvW+FS403qFIXhDinjC7hYmGPbyPZ2+C1jY42ko+LuNbUwWtZIBayU:oqZe+GdAQGPWZ81jYrguNbUwmZs7U
- TLSH T163B19D9DFD82D6DF5FB728D3204F66220E14252F0B5C891BF1479016989DCADE301B30
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\com.elgato.streamdeck\f3a59fea-d165-47f2-bf4c-00df11c0061b\extracted\com.elgato.tutorial.sdPlugin\manifest.json
- Size 2KB
- SHA256 eefb150fb628ad46e5e44512618c22ff6545189f14414f41fffdc1d8985834b7
- MD5 920b08cda5c935fef9a8bfe84aa815e1
- SHA1 bc8207ccf745c509e507de58c5f230e88c934f85
- SHA512 12340d4b6365f841db802439ffffd7ff38177074b9b5b27240e74ebf184acb9918fe85e672ecc6e23a8f7a0d9f2a80ae89a2855947c2834b8d8c800aa173ea5f
- TLSH T199518A15DF1A6CFB2B920B302E832BC3D3A891CA2691CC5C47CF869D85E75912367B5C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.keycreator.sdPlugin\en.json
- Size 1KB
- SHA256 b3130cac68072577c5decbe13cab3d67e6d27b9e96863052490f1cb8a27e8060
- MD5 920dc9666d4bf550b0463c1e6dfe3878
- SHA1 c26461b8cd3585845132f403a4517484d112b4f2
- SHA512 a9ee6d56f0abe977ec1d3575621f164bfaa13e7b05923fc611aefe66734ce8b857516ade1f3404822c164745cd36d3fcadc0c40f3626c451276b4b130ac90d22
- TLSH T1E921330AEB201D7B14EA0BA524973516682901730F00BD29735DA60D4FAF86F13B335D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\accounts.html
- Size 930B
- SHA256 32214ff7e02f0487af6650cf5e616afa260958a0f3138beae05c1531fa3f2291
- MD5 478ef2924bbb4ccd3daa78835979a9ae
- SHA1 da8586e03aa2e37fe24e048ce6947d6124c67540
- SHA512 db4fad16ad0978851091ebff865d32189489e1ae6b9e336f846f5229e1aac7e7dbbc5001d7604b1d248ddd2fba33a8bd72dce64f5ae7dd8fc24bc1e73173eddf
- TLSH T16F115683850F3F2912982244BD25704C488F8E19E2949CD26CD7513BECC9B58C0AA5FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\actions.html
- Size 927B
- SHA256 eee8d2f0342cac11bfd265250c84ec643f759f65af1236ba1338b15e10543aff
- MD5 c37b986e113112fefbb2ef499202957f
- SHA1 5bfd31aba6f8e1a02ad2c20e1a33c11f04fe1bb6
- SHA512 ec309302872f0a6383e6634b1843e1a52d58ce2a8cd254419c218a0ed7d0c35017cfa57a86a78507e2c52ecee9db6b2027c73941b9da5b1a20c67f964ff0d10f
- TLSH T15C116342950A3F2912992244BC65708C489FCE19E2949CD26C97413BEC89B58C0AB1FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\dial-stacks.html
- Size 939B
- SHA256 4438305a4e564db5829af1f3af7e8431a8a4588a3ad6cc97c89c50ddd1e469b6
- MD5 dbf1810669bd37e950314bcabb850149
- SHA1 17e01d4a301b8c72e9889c6870a4bd4dd5bdac40
- SHA512 ee63bca64010ce5f582af0bae1a957ec4b8f43aaa4576cabb6ec82c890486dbddaf1ed225d13000b95861808082e2c6604c6e52d8f37711e55f58f325456847d
- TLSH T1FF116343D50B3F3912982288BD547048484F8E09E2A48CD2AC97413FA889A68C0EA1FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\folders.html
- Size 927B
- SHA256 cb4491260146c314f54581ae9a614054dfd63e7ce2bd58853fd75667b028412a
- MD5 b570a4822e6d5299c76df8b877730d0e
- SHA1 f900e21223518fff077f1bc170f84b937c6fd5ce
- SHA512 189d9e0f471482f8027d8a708266d719db37bda09731c4386af3b6341c66bfd63f4476bf4a548024e128cc172d434affdb77697dbc9cf951cdd27a0f63b12943
- TLSH T1C0112343950F3F2A129821447D157048485FCE19E2949CD26CA7553AA8C9A98C0AA1FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\multi-actions.html
- Size 945B
- SHA256 15457bd4851804d9b861492b1229ea1559f0749be25676f5504def60906e5eea
- MD5 feb6ea973abb2ff4ce8f9ec9c64f2c1a
- SHA1 88fbcfb8c16613deac1a10254efdec8100112426
- SHA512 afea60f5f6f23144279567a97106e163df910fe9761b55594ac11ef967a47cb647e528eaf04fbb5e0cc9a844a34e1a9f40a73db7608b6e5d02d0d4dc5a13b0be
- TLSH T149116742990F3F29125922857C76704C444FCE19F7945CD26C97513E9C89B58C0EB5FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\pages.html
- Size 921B
- SHA256 84a9cf0e2eae6bbbcf0a8347243378c1c17328ab5a31bdbaac617be18d58df8f
- MD5 a7f89e63adad98833f5a1b87fcc7692c
- SHA1 8c31fb6138e3b3d1b41214dc80a4559993ec1ea4
- SHA512 e6ec7d0953a597eadd66c327d28ccdacab5a40e3da255b6efadde1df321a1985779c8e97ee2ee96d59a3b1e7891248dd61a2c8083bb9e1d9d1ea88a34e3af6b8
- TLSH T1F2115643850F3F3D12982184BD157048484F8E19E2949CD26C97913BEC89B68C0FB6FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\plugins.html
- Size 927B
- SHA256 ea09338fe585743f336c9ae258cb52a98b62d73c668466de5f3b636a36e5cdf5
- MD5 432955c47ae68da2b98d9127ce2a8be8
- SHA1 324279436431b9c64625d1ed5c06f279dc3d30e3
- SHA512 99c857109aee796d41f16a5028f1079f15b788f43cb5094fe4240e1060b5547dee9d34c8726d0bcfd61792ded77c1aad372fee049fad0bf7292fd7ddfada982d
- TLSH T155112747950E7F29125821447D15708844CF8F55E2959CD26CAB963ADC85E68C0BB1FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\profiles.html
- Size 930B
- SHA256 eaa0419dea7d859042e05ef370abffdf7fd2170132bcf18c6ec408cc2b511c1b
- MD5 7252932d39c0c13d6e569ba42c47899c
- SHA1 3dea466e9ff73c4671fbee32e138b0b1ba73eccd
- SHA512 bb2735afede9387d7553801aadd72e1f0d0b0d597ffed17897b7197af4e2ebd1ef5d8df75cec10661c925b52a9bd370c1d15e7516effad5ea70b0ba0ccc342d2
- TLSH T126112343850E3F2E12983684BD15714C484F8E59E2959CD26C9B653EB8CAE58C0EA5FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\shared-styles.css
- Size 207B
- SHA256 44b3e700c8e99f32ad2aea693efae4cc024c63f3beeb7904b13e1da2fe65946f
- MD5 c17299cc88aad5ffa12e9a2eb5be519e
- SHA1 133f382af32b4daaeee4e11b75c5a80508ad6950
- SHA512 45d986d9773c1c017f226256c8ece1f3d4b74ba3a80795419b9c74ebbf7ba0e4c13c575152b3f5f48456a3a03a8eeba52c84fd7ab5d8651f888a1904d0a8ea68
- TLSH T154D0228327008C40B217200C3EA2AFF97EBE0962995E0CB862027624C3487F20112688
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\smart-profile.html
- Size 946B
- SHA256 a1cbedcc108a4bbedd9c5456c24d3cd8494e1d0a63dd304085c4a71598d6ef00
- MD5 321b7a063aae37c01933ad12711b1cdb
- SHA1 9ef701dde0f27dae009e1dfb4c769eab5cbb5e65
- SHA512 ef5902891a297e5d4fdaeb843745a86aa997edb1fad705e7da6073c3e5fc691363071bf0785d8cd2b731d683199b24ea9f715c902c79b8f722939b711568a02f
- TLSH T137116343890E3F2A129C32847D257088444F8E19E2858CD36C97913FA8CAB18C0EA1FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\volume-controller.html
- Size 957B
- SHA256 ec13fa052f0417a21653e453474e65a5ff2ed10617f34519f2d8469991fcba7e
- MD5 6f7b871a252e14f342cf63afbfc926c6
- SHA1 7f551005634866d55a7b128ed75218e6ccb0483a
- SHA512 044d2ea53dadc527c30e25b84d82b65559723ef187bd0099962a2008882d00a8059b116d309a4f84157c5b8f9643cd57eda371f651b63fe49dd6c56b96565fd0
- TLSH T164110442850E3F3913D82188FD55B04C444F9E55E2945CE35CAB553BA8C9A55C0AB5FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\actions\wave-link.html
- Size 933B
- SHA256 8f403836648ffea1dd8fb1bf291d7c8cd65a13682b638fae236b668cc5051a08
- MD5 4cdce7aedf4cfd756092024b519bb2b7
- SHA1 2da379d385dd7d7871f6571a08ba64decaf9f855
- SHA512 2d49f2fb45fda30319380fc23e481d3ea0f487fa2c14c8fed18a3f9423b1f9a7a4d2ebd8a243a17bc6384417b566607565b2031b971c2cf0262c36867046d1d2
- TLSH T1A5112743950F3F2912582144BD15B188884F8F15E6949DD35CA7953ED889E68C0EA2FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\app.html
- Size 428B
- SHA256 6c7ca4ffc38369bd167745db01d3f62eb1cb84a177ea6be52fde939ec34a80fd
- MD5 b15e6e06de77b4e9deed6c768d212dbb
- SHA1 ae9a22ce9953dc9de7907819faa81c2da760f21b
- SHA512 935ccdb5d4cad8b57a335000ca6bb174bb4880685f011288ae5ad22631465912c91d4be956440aab87907fa289bd980f1ccb0382903c4ae27cc667e0b3e1ff30
- TLSH T134E0659DFE0EBAAE346C2E9C08F4F08C109FA9D9B050C96950F69056DF563CCCC03998
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\app.js
- Size 1KB
- SHA256 5a4f0a2e5ccbd92151a20128d41c5d3daba4b85252085b2d3e7a3953bad5372d
- MD5 987351401717d2e205cdfe30e15b2259
- SHA1 393bf75faa3d829f2866683f176755eeee703c93
- SHA512 cac5f0cc9a4b1435075358865e71207db75351f8923cdb4a287ba3fe2a24e5f8c9712de28e729d6cb97b5e333f928b07179e94e0b7e527ef66b10c9870bb18e8
- TLSH T1B731D411B534B69304B36D82FFC3929C0A778192B053613A0BEC62EC5FF35A593A369D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\icons\info.svg
- Size 342B
- SHA256 27ad2022a2a50f982fca3e10f1f3de854436cec553477a036df9513f6668785a
- MD5 6dee82824b78ea604943ee4bad050419
- SHA1 a76b91a1f74e9edc8a6bc9c2955c0fa3f1601848
- SHA512 3d56e080bf7a4934a831b47241a959b46923df41c49f84cd8ab717f659cdeb97f2938067b8489e91b8e6e6174ed7c0cdc0793eda2e40545489f752a03329de49
- TLSH T16EE04F76B50CAC2EF5178165AB253674205E22A79F8C8228F0620532D6567CFB52F968
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\icons\todo.svg
- Size 980B
- SHA256 feb8d73cfd98526ffc9dbad9e174b652b50580386711830d8461b9922f2ca210
- MD5 7d79bf1f3d43750e7aca02993806621f
- SHA1 12cd94bb23b3932e43e67fe0702c5905babbef9f
- SHA512 743d9a7b385f9b4e85458dd0b7f0ef033cf6c7af9db4c68078b683a0b9053c939ce1a4f0c0730a675eaa1509d70d5886d9e8927bc89a20130c7db86cf9eb4a1b
- TLSH T1D81154BCD2944D148014832683FAC6995033804303120B8DF6E63656EF674F7692A3CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\icons\tutorials.png
- Size 8KB
- SHA256 e08d1d40f2092a1b2457d9b791f1b38981386d3a6063c6cb8d014af2c9e411de
- MD5 29ce7bf8c39445d70ccd7d4212904ce3
- SHA1 8502034c8585e5fa6f522a410d842bf5adab2620
- SHA512 f9b150619edadbaf6166a222d756bffb78cd7d2fa487bc38ab3f799be0f205db7c4c1907715c8794c0274c7952e271565cb447e8670c20f3a79f45193cef4484
- SSDEEP 192:CryaerwNWFFzfFyZKY70ST0fvpDCs+wotd3foLiFn0ipr:CPerwNWFF7FeKY7zT0XpDv02yn0Mr
- TLSH T1CA029D35EC5429E2F8DEC9A33DE01158B5755D0F8FC1DA8EBCAFD5891522C0242A28CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\icons\[email protected]
- Size 26KB
- SHA256 8644e71ce05936a56a8fb083b5cf9721773e609d7faaf909ab043ef8603a156f
- MD5 4c73eb6cdf88cf6619c002155ea1ee5c
- SHA1 45cdf677ab789b13be85fa474db28a86dbf180b0
- SHA512 f8772e7d84778a1fd6f2061295f486ec64a9bbc6abf4324c6258dcbc9b6e8d292f454800c5b3a4813da11929ed0d9e56d658c7a5434151abeb5cf70ac7a1ad61
- SSDEEP 384:El1rJkiRiJmDe0mIqZkDvSmpufSvvu7SSADO+ebO/W9E5LOriEEwrhg+9S1:El1CiRiYxmIqWqQv4gebMW9EMuEn9W
- TLSH T1CEC2F1D9B4F03A368E30594157B2914AF447BA1C7B39A790A561DAA17742F013C89F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\inspector.html
- Size 960B
- SHA256 1e37ebf2bd36b20a235a6cc303b3355d0225e66f11229b61b026daa77cb7ee0a
- MD5 fc9daca35149b9ca994a8286f880197b
- SHA1 91312ca30e233f09c9eb31eb3d58dbecf1574eae
- SHA512 d63704b1df5b4da90bf0a36671ec2bf31eaca9d2a806453a84d56cc9739b5f0b722160c9fb03fb0448f76facefeb3bd01035d19869d1f4b60e0d416e6d7f4c05
- TLSH T17511540AC5033F0E3159416C6426B00CC94F1DB68B424F12A8E662BDEE85F9885A63FA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\.gitignore
- Size 8B
- SHA256 d047b43a4e3075657b44f9c70ef2a79e905f8883a9f4b183a00161321e1712c0
- MD5 d0e6fdc84ddc0e7cf994f938f7017d58
- SHA1 6e3a09b0d19dfe679aa416609d58581ea6bfa9b2
- SHA512 f81f6f5a17219d6595578ec85659365f36aa522796e1f7d27b440c66bcba651161a54f8f02519a780d6a5c8c3fd2cc981427a16cd32e7c50bcc1f9b170f5acc2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\README.md
- Size 87B
- SHA256 1b327047e03e832ebc25f0f0c4e89ef8363d13b9116ddd26e36efda19d68fbb6
- MD5 4bd4cb92844ecd5244cd2c94ef96f1fc
- SHA1 f9db43e4a45c93cbbe5c4c07c071e228a388bb24
- SHA512 3d43c4ba1dc0fe79d7c6ffd9b34f2547c5c64711e4cfe3625bd4518a718f7cdd94301ef2092b72068fe32e18fc172cc56b0cc92b7018bdc1f8fabbda45a9ea15
- TLSH T175B011302C0AB08AAFF3002300AAA32800CF80A30322AA0A30E0808800023882C3BB80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\assets\caret.svg
- Size 171B
- SHA256 40a4b4cbfd029b639fbf28ff33b49f18130f53cffef4e0eb870e01f2d13b5b04
- MD5 92c2fb0a20000397ab1277e1e71ac514
- SHA1 5776e118c959187f2591597a112bbe6b825c03eb
- SHA512 421c416d05637926881ae37204bf8b3134377ce48afc530ed25fb1cde62193abf7a8657d621c10842166853f09f956164acaecad23efa288ae3c17602f15b4dc
- TLSH T1A9C08075989C9C5DC45740F4556571C5209BD08152440056D28D3EB16007DD2BD131ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\assets\check.png
- Size 234B
- SHA256 b5fb6fbe1417751ca7dd87552398d4585cb002654aa69632fdf6f43dbc65220c
- MD5 cf0d898ab81a706b28da406b4cb04456
- SHA1 98215a45ac5475fcf7e01652de52d396822088b4
- SHA512 60d2d12cac97e422ffce32130c1bd356bdce49d49f78577633cd992aaebd57b98e9bb88f95de31d208ce704881d644ce7c8682faaecafc96fe121756683f3fb3
- TLSH T1EED097D0CBC92DFC970F2332196F0880E9707823A021808CC1804478B03425A4188B17
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\assets\check.svg
- Size 210B
- SHA256 335209a5e56c21e31a9b3a119fa2370facd178283557f2ae6fa9f06e848c368c
- MD5 c696e73902035e125e8bc3fa0f05eba4
- SHA1 dd08a394dc0b7a3bb125696aac8d8d47c52942cb
- SHA512 fab1a444f9c0e50632516d887f29695d658a8e65bc04dc6a3f767f3ccfb1ab88f429b8a4d961942926c98c9080fe0306b7d3c955d877091a78b687393a8f4c4f
- TLSH T1FDD023DCA44C8834C684587448A55F7470DEE85151DC0167F3C8287111335C6D77157C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\assets\elg_calendar.svg
- Size 1KB
- SHA256 f11a7b1eaf040f2513593c81f9695e7aa5ca907d44a45a19f8d6dca67075b66d
- MD5 dba0ca77b62be0faad2efd40eca0f080
- SHA1 522ecd18454ac9dbcf6dc8378d32793d4f5ef167
- SHA512 b37ef90a39535a6cf5654593e04fa548faf623c05c1118b89d2e8654f32558aa51d6b133f1d5e99d3710779f50e6df94380ab6586dbb125f6ffec335dcde7cfa
- TLSH T10521AD91BCA5554CEB101B2E460814DB382FE0D743195041BE5CB67A3BAC6EBEDE127D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\assets\elg_calendar_inv.svg
- Size 764B
- SHA256 2c8f4decb363794fa8dd4369c98f764e313748fa5f89f03b5e3bad8b391eb778
- MD5 1ccf624ea630661250fed98d68a9d91d
- SHA1 533721d69d7a88f989c14f5ef63af6638878d338
- SHA512 6db35e4c3de03bd68cfdbdb26bb8b808bc2f10853ebd8dd9933e38bab23557d3ad01dafeb0609b2095442ba0c8c50b2ae2b79c8eec0d12622d17ac83e1895735
- TLSH T14B016D8D90414B84DE0819300C0E8186367EB062BE93C1A4FCF62245FC1ED6DFA71978
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\assets\rcheck.svg
- Size 131B
- SHA256 44ae62b4098b72ddd73376d87409983c52e5aa65cb70a36063793b98599803a7
- MD5 95e648d53a0e58bcb794237e0334a8c5
- SHA1 8dd0e107f31170a6ff199c44c69c4703e18373b2
- SHA512 aa0fdc9107340d909ee0526f96681feea940ee34224ebd48d8e3fe8e7ffdeed88b2523f3fdad1f7a569dd06d47a8ebd3d70c6fef93da1db15b2a04a01bd75e41
- TLSH T138C09B75D47D9C08C554C555585FB548155A504353C5019DD5B07C3321654933C125FC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\css\sdpi-fixes.css
- Size 283B
- SHA256 2b3623846ab2a6755433280921923ee235ce6d955108360117a229daf04cce7f
- MD5 05cdb64dc7844d6c7b67f623f09e67bd
- SHA1 453c6cc62401425ab086e3c787e58c7ce87e4236
- SHA512 df1a7bcc316e03d80fabb2d01267d9613b0f674dd2a8a9446717d2b43ccc41907e2e7364a334ed7e7ad155c9ddcc808700fbf36d49d77db473ec8880eba0e150
- TLSH T13ED0EB0286811391D00F1CC65F23D108E31D43FA8730825A64CA28A87BC211A80B2EF2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\css\sdpi.css
- Size 43KB
- SHA256 cd8206c6efd9a1b4396e90001cddfaee88557b26f7cf0369ed31560c97ea6967
- MD5 be6e447ea87f2ca3845a91deae0d7a02
- SHA1 f159aa1e140e2e17460a4de423bee75866715836
- SHA512 abfeae7661457e8defbc96ba616c6981d34434a34be20f02bf1b11c0d8ef6c9bcb6a778fa548488c7e7cc6a6ceb2d1060379a64596dab8953a309804b011a345
- SSDEEP 768:gauFDBmIHli7oF4+Ihb8lRp3iq5NqZFtFqAPZ7FFtF5FJhRlKFeVx10:gpJHli7oK+Cbwp3iqfqZLNVXzhRwgVx2
- TLSH T1B813F8D6AA930EDEB41797255BFD9A00332D90A3E10FC9A47BD83668DF057C48472ACD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\ELGEvents.js
- Size 946B
- SHA256 f7edae3a5748454cdbe39f07eb01a9f648e36e538ea411c169a3d2c29bcc90a8
- MD5 390ff177e98ad57227e694d13b1d52b0
- SHA1 5563f910a7c3ffcc4c2900026712e97c63d1a6e1
- SHA512 c2cb046dfca3add4f125b122538c54f441f4005ed8293057b1bb8eba37b1f70fe52c9555bed62c2fdf3291722e1b2e29a77db5f30c735153f3bd2f923f86c041
- TLSH T1A111484C2EB1A73152BB75AC0FCB4518B23C60CB3059CE4437ACCE14AF8667D89726C5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\action.js
- Size 3KB
- SHA256 a04f40f7c7e1db8627230ede16d7bb1b2df28a53f70e32de4f71978ea007ff1e
- MD5 cdff1651643dc3ee5c81db8dd9a997b3
- SHA1 d8b16525dc14f9bfde1fd285981f989c6302c938
- SHA512 38726019e2aa7f0a9c7916a999d3a88db0c14718f44c6724266a1225aa22302424b91424694b2a76df85a346f7362457f317e301540e35b7df86c605a3359f7a
- TLSH T1F88122C6FBC83A7B893A6166694F328A213C80C73D3E54276791AEA83D6103D4717C78
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\constants.js
- Size 3KB
- SHA256 70d28af0ff1be584c2de88b8a3eb68bbc2ef5c339b34dcce7d2512ffcb1c20e3
- MD5 1ea1d01c6943ce3d20ccd65fdda5eb2f
- SHA1 2641b115e4d85a1b6ec195399f7a9750486555a1
- SHA512 075d97b76146453a3f05986c9001ef6e13f1cc1757107f05a1a26e83b933a2907be301bd5c64d59edf2b67b22ec9bd9d9397f2b194730a3957b82a0e1f93f26f
- TLSH T15C6165D1B5002B7B12F711AD9C0EB6D2671140D203344265A6BA4A78BF262FC9BB77C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\dynamic-styles.js
- Size 2KB
- SHA256 c916d0cde8edb8879abb930adfb8f364732f0280b0ff10148c129c1cd84bbc0b
- MD5 b5185be21c1c6ba64fc05549640e38e1
- SHA1 278a626cfeb1e72b4bead19114d6826d220578b2
- SHA512 79005c2a7a33f69eface9250eace0044b72bb743d4510b80b6a63d921110defd40b25939b314cb4bb36650df1913a3e2c1b4d2090d96990fcb7319588f1085e8
- TLSH T11241023EE8510532A223006935EAC4706F3A70F3781ABECE781F25B4DF955CCB47A596
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\event-emitter.js
- Size 1KB
- SHA256 7c564c4bca741935fea3a7089a930b1efaf440734e6ec55588e044254bf0925b
- MD5 1f8d0e0b233cbf41b0feda7381af7899
- SHA1 ab4c49008b70fb9477b8862271bd004d46a13d4d
- SHA512 9c609a1bc5715ea83484c794ddba09f46f4872b2daddcc023c3b9664e63d8ab5774ebb614247340d2cc94e904a5f9eaa4e3d997270d86b4c53a63d94e5d42ef2
- TLSH T1BE31AC986E720A7073F639AC0F97920CB63864CB3148CD483BBC8E505F496BD94B11B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\prototypes.js
- Size 601B
- SHA256 d1a6f137564feda46d44432d270aba66eba32ccce6363b6640a544ca5b9acf6d
- MD5 58c1246f0b93fbc94d86eb918f7e73ff
- SHA1 62f1216ca11ec933a4a5d4c02d8a8c32832dd180
- SHA512 a172b7f21a73a3be11a4304aa17a27e8d5e52772504677ab05676a627af0e45d78000b1640c543274e59cf972453e792330b523dcd60dc789fb35eef4872a925
- TLSH T1CDF0E181F6FE191AF35A30A04C4E988FA25F8C3EAA5CA5F4D448A4DC34918BD4136F5D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\stream-deck.js
- Size 13KB
- SHA256 07921bff20e7f163b163c79b37882137b31762de6c2881ed51fe395725142ada
- MD5 a4ea0eeb2c871fc49ddea25ee225f2f9
- SHA1 e04cfe7e14b08e0b90923678c3c23b835de5e556
- SHA512 825ea35276936f30bf6e4405b33c2c5aa78dc784ec2061a2267d6b4d37de198469228f61cc42682fcad8bc523f8c6e2fd62f3848ed4b3e0d684f6adf6a4ea7e0
- SSDEEP 192:cxY6X9V50yFVI8b+IVqejjdPLDh2Y+L0Ah1yGqilFtwRdmalMQ4rNsTSTKTqTRTm:j6Xeybl7YyNE/L0ADySlFUmNIgq
- TLSH T1665265D6FFDC30664B2E607568893282227CD0A7BE3598FBB5456C941FD51684363F70
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\timers.js
- Size 3KB
- SHA256 80a68621961053fb1334db03533a55568fc273b8c34c7101267122c0abae202f
- MD5 191ff0ff0da32c55bf0f035642dcdf41
- SHA1 5f4dce7e65dab175efda18daa9d51ebbdf4b2624
- SHA512 4bf07d2f3fbc4b5dfe0d0fc7f7cc464a42bbe34122742eb0a51c45e7c4b02299f916a05b71cf4f45e0944103b44abe16c27db34a7e2d4c3de1ab54f7d80af698
- TLSH T14261324E2FBB348226E220D5177E93617E3C231B5046A6B87D1E4391FF62825B781FB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\js\utils.js
- Size 1KB
- SHA256 388e587ac1209972cf7222d6f0c8c4e9764502595d510e273ad9c6f11abccf12
- MD5 0b7c8a403d0a348011cfbd2e8ca82823
- SHA1 5e0a0a07b58ac6d64122c72218ecd182af6bf52f
- SHA512 c2479828f39d771627e7e43ee6d8b94fbbebfed808ef9c332d36519b405eea298968f6381932aad703d0d4ad246a902abb76ada8455bea9e72578f63ec56da7d
- TLSH T1A14131D1FEDF6412426C205628E173CF75BEC13566608DEFACA02D1402E8D5C96ABF58
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\libs\package.json
- Size 430B
- SHA256 992acf817bab5b38ecf384e1509238f32e4c8503b1b03e102de29f3bae6327bc
- MD5 4cb639a740ef356cfee06f375dc3db6b
- SHA1 86e6ec5449c82dd01d20b7688007e871b4dae31b
- SHA512 d3fe6797ad99ae7c2c9614dd76d18525b3f151905b4b201befd04ce35ddf3f5608155aa57ee8c7c97ef8324bda3249d4abc2031818451852e66c078bf1ac7d17
- TLSH T169E06569AC60D4AB6FF4159058799345F3125C9F8E10AC2F7BD3C158E20A3F72DB9A4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\profiles\Tutorial Mini.streamDeckProfile
- Size 55KB
- SHA256 f46811824ce18a475a5e4cfda2baa63a67a4a6db650128670913e0e7d369ac8c
- MD5 24e9e7742ad0dd97919e16342dbcca5e
- SHA1 3a147890f23442e472a60929526473974ebf48c9
- SHA512 c6cfb1c03642b7604398a71c714c5133ebca7b2bcb90bc655011a070b626f64379b221d851a52c433415914b51215f9f2f509583224ce045f3e9e4c059d6a6a0
- SSDEEP 768:GJGfZgwsSjH/ley83U67hNWx9QV9Pxw0j+50byvvfnqqcS3sEloga16V05jwQq/f:GMCSjfleXwu9pH80bycGnlra16V0qdf
- TLSH T16743F21CEEABB165C135A4FDAC5D4250F981B1A38ED3BED467902494D18B8D2C2F7898
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\profiles\Tutorial XL.streamDeckProfile
- Size 56KB
- SHA256 9ff74686891bc5cd9990c1866d61915f89f81275b95b90fd055c47af79cdbd27
- MD5 ecf45634d0f2776ac48cd0c7f032cf50
- SHA1 b167de41cd7f3349ca00badc4e5b5addb30467e0
- SHA512 c27621b0f1cfd06575a6a2fc2e22c071f1622698d7262eaef479f848eae2d1af9ff3c5a4f2313f8f68f60eab71f53055ba8cd386ceed103801ac6396684519e0
- SSDEEP 768:kJGfZgwsSjH/ley83U67hNWx9QV9Pxw0j+50byvvfnqqcS3sEloga16V05jwQq/H:kMCSjfleXwu9pH80bycGnlra16V0qdH
- TLSH T11143E01CFCABF1A5C025397CF95A66D0B941F7E34DB6BDA87391109380460C2D2EB899
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\profiles\Tutorial.streamDeckProfile
- Size 55KB
- SHA256 a258298a3870003fcc2858a2204a6ef60a57c435f49fa9947bf2bd0e9d788f2a
- MD5 e99d0e0c4b06fff93c1aac6a14ba79fa
- SHA1 905958c28e0ef317a64695aad45a4fd3ce34835c
- SHA512 d09f845fd989f017e86fc8d56025a797daa36cb2d9daf7145f03b392f953b20cbd768b0ac65e120eda1f6c41998524df7cd7bbee6eb501c602b8707aa780c7a6
- SSDEEP 768:xJGfZgwsSjH/ley83U67hNWx9QV9Pxw0j+50byvvfnqqcS3sEloga16V05jwQq/w:xMCSjfleXwu9pH80bycGnlra16V0qdw
- TLSH T1CE43F23DE96FB165C02C24B898948F696A41E7A34EB3A6DC07A02862D15F4C3C6D7C89
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\accounts.webm
- Size 3.1MB
- SHA256 7658a6425dc38b985584251529436d221281d5cbf314a7beacc10c63875e921d
- MD5 9384ba61c0c9b44b322170cc1d296732
- SHA1 5579110baee281764317501af74f76780996d11f
- SHA512 2686008173361bb911c4849afcf3ed65f9371691ef9869b967ccd8392af05ce0c601df5b64f3093f91c7c4f270135f10cd7568009d3740bcad5bbbe7aaa6b7c4
- SSDEEP 98304:VO8O30cjXoGJ1yvVMMI0PS5gD+WhouuVfevT7:03j4GJqmMbPSi5meX
- TLSH T152E53398BD061C97F99B6A74CA7F1C2DB920792472A21017BA31157BDCF5BACE1381C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\actions.webm
- Size 2.5MB
- SHA256 82d2d848721aa363767fb85897eac1f05362d4118c6af536019c4c93c4635c91
- MD5 4445cf44f45e2e557c125db6cc0d4c88
- SHA1 83ff23d48071a517e8f582398817d47c6e05bcb9
- SHA512 db87992b2cf3ceacede4386c6312d9a702ac212483778e2950bebe16b838d103b8c6cd5f90917e84670baf4d79916a719d6876f490f640328b40c12161af850e
- SSDEEP 49152:aCPgBxX6II4MH780jYNbE8p99ojhE5nfcipsvjo9s1pVHmMZna:xgzX6ST0ENx9iVAn7psv6a3msna
- TLSH T164C533099D022D46FC4BE2F8DB27AB3EA6356561B51214233F314A6BCCFE35ED029647
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\dial-stacks.webm
- Size 4.1MB
- SHA256 dc34e4f01156f853e3067ca870930ca4f2b000c4ec0e026bde3eafc989f1d6af
- MD5 a4c72c598be7824711b9c2114945128c
- SHA1 4d1cb943a8358fb90243efac604eb10daaad6c2e
- SHA512 4437369b1874fa68f67807245dfb5e7f99bfb1b34fdb5ce20017ddb02014c385c4ee1506030dfe77415f47b67f60e857c517d92a3d7d0432b5ee0cae4eeb3686
- SSDEEP 98304:Kk+4iKNjOcqTXaekHElpkEp8ih1YJbls4GlNJERNdvREzhydWAg:KkdLOvT+ElpWihiTs4GxUiMdWAg
- TLSH T1C7163362FD036CD8F41352B5CD5B19298A22B8B765A344A33E3056B7EDFE32CE81454B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\folders.webm
- Size 2.7MB
- SHA256 41778215a1069dad7e869ce8e73d4c50cba31fd6e86f8d45ea14fe1974dba1f4
- MD5 4c9441b28d8206e0c8c1eacc81898f45
- SHA1 c73edc4b1f91acf41ddb9b33fbfe49194ded82e4
- SHA512 7c9cbf7edcab4e7cbf57191538d854b93671dd449d6726fffa6d0932e7f15afe333b6165d92496367ac2e5f47a83a2e6f13e2c60cfbefd887870f17090ed01df
- SSDEEP 49152:ic2YO89V5i/MNiCC9kg5WChKAy524yojPUL26m/82v8x:XxjVYx29WSUz20x
- TLSH T1C4D523137E06ACA8FA8765B9C52F1A6D96702415329210973B3A1F3FCCF6BACF518153
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\multi-actions.webm
- Size 3.2MB
- SHA256 1c3192ef92f9a64221fc361a50ab7f760b01cc2796a7dcf2223ecbd15f46d36c
- MD5 60eb7a6a54262bfee73db7e72fc548a0
- SHA1 af0753b22241de4a7d0dd4c6bd6a79f8a44b2e25
- SHA512 72f8a33ea57e2988d20308a8ce4dc738828a3dea6d588dfd3f7c21109b27d8690cd55e5935e85b156a733e2570eefd4b5f7a81839244bb2d10e8faa3586d8e8a
- SSDEEP 49152:28nfD19qAws4BxyAVHoZkbOaPcGtAXi0UFKaEVe7CgfNf2fxZIWRGI:NLZk//c2AXaEVGPufvIkGI
- TLSH T1E1F533AA6C07DD98F81366B1C65B2D2CDB706866321B21A37B61176BCCF973CF814607
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\pages.webm
- Size 2.6MB
- SHA256 47295e132c151d2ad4f56d267d50de6497286d3e6682ac00500a713dcf15dd46
- MD5 82523fad3652e4c15637cad02893b512
- SHA1 ea06e03626260cf980c06f3fa65b22b5f8b82a9d
- SHA512 cef09546ced6f1b677e38798a5d6fbdf6386b72fadbf70e51be9c871f1bcc448910ae88cb7e639388df5328e676b8658526da3dcaa49d620fa61353cd96021dd
- SSDEEP 49152:7Mp5tQ4NcfusPtwbFWfbo/WwjeWdSVzMD6tV+LmXqof66gONjw893j38by:7MpLQ4NkRyFWfbJwjZdSVXOWtnw893v
- TLSH T117C53372BD06AAC8F99751B5C84F101DDD112C79362742077BB805ABCDF0BAEF829987
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\plugins.webm
- Size 3.0MB
- SHA256 50bce2404b8b206d6ec096dc05a124d78961a410156c6773474abe8bd6d37e18
- MD5 56e75853a001f0133aa4ae7312d9fc44
- SHA1 5b60cf6efb2efa50a901def3a195bacbed9bf970
- SHA512 01e9328fba50fb040d407bc30ac3d7980860cf5d7dd100bee6f758e370af97a0226b06908e782917cd6bcbdc39c1d7b147a9310dea483de868a17c8f2b7a58f0
- SSDEEP 49152:SuOOC8cU9xCau5Hkn+aZInRcoWUvh4uNryTS84qd3VGDx7ExPXoWPeqDD7df9iI5:fOOC8r9MSnHInRmUv3lt84qd3VY5EGqt
- TLSH T116E533ACFE164859F4978279C97F292D973110B576A22A133A641A73FDF039CE83C187
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\profiles.webm
- Size 2.4MB
- SHA256 0505f1e370ed4608f038abeb61941909516b587a8ce140a1afa8e23dd57ac024
- MD5 fc7fca89b16cb083862521064c8136de
- SHA1 374addb6b6fbe934f1235134963c2f540f8dc98a
- SHA512 af9c62bfb4d9489fc187f75ff74fa6d99a67763d977f4912c6bfa55e9f4d490fa0b3f265d3ddb38afb5df868a8e25c6ae38f3930f83d075494168843cd0c8acc
- SSDEEP 49152:Tk8yfaXxKJ204wYbn8RtORk5GmXlqYI6fZagNlY:ftKJ20BRtOO5ZXlU6fBi
- TLSH T191C523936807EEE5F8DB5275CE876A2DBA21B4317593402335348536CCB9BBCE80A54F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\smart-profile.webm
- Size 3.8MB
- SHA256 7c2c83bded5bb367a6ca18bf0fda00be457fc683140faba08e698843401c004e
- MD5 e77210399b51d3ebd26a315064077fda
- SHA1 6aeaf08eb8479092f9dcf06ce73a73478ad96316
- SHA512 6f92669d1ac44521a2f5a4d234fcc83fd71ed1424458386e60f1320d3fc3c27245fd8a455afceaadc802924fb78814d9e7915f02d4bb10e9205c94614026a7b9
- SSDEEP 98304:u20ZMzn59vZhNND4KH0+XnkW9XcebnqKzmq0S:u2Nz5rND4onkW9XxTqlqn
- TLSH T15706336A6D024EA8FC932536C55B292EEB34A936306710023B361A7FCDF5B7CF518647
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\volume-controller.webm
- Size 4.1MB
- SHA256 7deb8f0934646d4facdcb0fc3d26c457332ffd8f0e1c808d36750d749db2ba6a
- MD5 17c14d4391e332ec4e6cc80e1a6204d5
- SHA1 f09309549c562e8bec4c7673b846b88c30302b01
- SHA512 f7e9a5eec30532ff8e446c346d818c07e73ee0bef3302d00b8e6450209af217533f9780dded801966800b3ed578ca35013d45ab96aae58a9b8cc090fede7cbdc
- SSDEEP 98304:ic7K2JT8OFGF5+91DIxgqXBZ4gNSmcCUBX6vRCOfEnPd417I1LCbZ2:iaK/hFQ91+/Sx+RSPd41YLog
- TLSH T1331633855344AE91FA4B323ADC075D946C31FDE276F7A181787F9CB24AB13B1B02C689
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.tutorial.sdPlugin\videos\wave-link.webm
- Size 4.6MB
- SHA256 65becc149d466ec24ae09bdeadf1159d983335a97adaae020bb857e2ee151804
- MD5 9fe4b78cd40ddbe6558847a8973ebb71
- SHA1 976e362b1c258c34677dfc91828e7eae3ba9c424
- SHA512 cb4523b137b99bfbc2fd4191ae5beff7af379fb4184e3e8536520d1741eb048712a6bf3fbf9903ee373a3eb7f9d4ac0b4c37b16274f322bf13900acca9fb8337
- SSDEEP 98304:0VBjDgvbcRTmHJurWlnNXQwJ4n9TxHpbsI+UGBQmV5Ase17h99:0VtcbMKip7HpblBuQzsyn9
- TLSH T1CD26330253A4A2D1FE4B707ECA575660AC74FE6076F75294715F18A38CF1B78BA2C88C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\ProfilesV3\CEFF3128-9054-4283-8455-0DC58F9222B9.sdProfile\Profiles\C86EEBC2-6E1D-4042-8FB2-D440C3C406AE\manifest.json
- Size 70B
- SHA256 1eff35cbac38357ce7a69fbdeb9f7e940f9e441834f8017a494d4dbc1cdb672d
- MD5 111971cf838b9b1772524d38126fd5ff
- SHA1 78462ae99a8bfbd6f809acf66edc32204178e223
- SHA512 6a0f0eff1e998178cb2deac60b9f71c187a2b8fcadc41898e3ca0a16679662f3d1e379144cddd055102848106957cbc4320d6db73ba10ff0ebe376386dd48b54
- TLSH T1FBA0021824216FA823C90019A7877EDDD0AD949341DD1D32C10E6F49DAE64B94513A08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\ProfilesV3\CEFF3128-9054-4283-8455-0DC58F9222B9.sdProfile\manifest.json.tmp
- Size 246B
- SHA256 421e75c3426bd6d4117d6f01cf8e72b9f933c45fbefff33a44500b27d321e893
- MD5 403bbd676bfd24cc55564aa7424c933f
- SHA1 3a1069463ceb53b0abe93eea04dacfdcce627433
- SHA512 4036044828063db6eaf588cfb7dac883008262b3dbd0d86efd30fa7cce3adece0702e37ea70cd57f09e282918428d55512dc20f2ebd0492ade5d8f8cb906d05f
- TLSH T12BD0A740F7148835D7DCBAA47354197E339A184A5005908C9C2EA9F93A9B21A774A1A5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Elgato\StreamDeck\Resources\manifest.json
- Size 23B
- SHA256 9f26ea6c95b7469ebac5867ab7bc9c2e95e95880933f210db7cab05cca8429f2
- MD5 f034859d38e6997cf6fd7d96734e4b7c
- SHA1 24e024dd53e1a803797f0b64f91fec6095a0eb01
- SHA512 39c6294f8f13203f2b5645e3491c9f77d80bca156cc8f28a9690e412a1236023252b507a22b93a17e843a74d59e2ae11a6a32cab18133e83fba651b8ab14a4c2
- MD5 SHA1 SHA512
- Path C:\Windows\Installer\MSI1F37.tmp
- Size 196KB
- SHA256 548ae7115a58acca73d444311ebcf4fc5ec53ad881f6c9fffbb1261dfa7aca0a
- MD5 c61bb3f2674eba50f3fbd64f2f090cb5
- SHA1 93a5ab58e0739867c99c466308ba09888a90649d
- SHA512 bef880f8faf97613da2f436140f5237aefbe3e8acea79dc5b89b1af2a427ab349ae215959f35855fa47db92303ccf843f01f4e12447e4b455d6f623a1e763545
- SSDEEP 3072:/Dav2HGRnSh4PPM1QxKkTv1EDUVi7oysOrDA9G6u:ralnSieQMoOJsBM
- TLSH T1E6146D1572B404BAEC738674C9934912FA72B805236096EF43A48279DF2F7E4B57FB12
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\MSI52CC.tmp
- Size 269KB
- SHA256 7629585f067b3cedc2251244249b9e9b9f0ed2cccef5c66b4a9ab75cd4b20d3f
- MD5 eca67914d6521f078c2e3feabd566400
- SHA1 4414b7a855b786c8049f77dbf2a1cc64343ff309
- SHA512 cdcb76166140b4b404b0a41a0a3560e808e4eb564d753c3b62f37f8bb156e8b57accd4c0425cc3c86bc3381a806fb1000e5fcea9e5438ddca694727a02477269
- SSDEEP 6144:88XqvLwHL0otXjs5Dq6fQwIm3Q6rlPpKf:awHL0DNGm3rPsf
- TLSH T19D449D1677E90069FC7B8638C9234A56E573B8551B31D72F03A04229DF3F791A93AF22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\MSI52CC.tmp-\StreamDeckOBSCustomAction.dll
- Size 11KB
- SHA256 58c0caf3e658b5be427737eaa6c4885eb4e95bd795e8ca7c753635cf4a947964
- MD5 7e9a23665b1fa25763ad276043ec0c1e
- SHA1 de20638633e70f14700c9b2f15622ec0a55cb53c
- SHA512 15a19ab5bf9ec7f55115a6a908acf044fbb965893d87c0b0dfa236df4a56e517d3440b217ea70e2c022e2d86b6e670b71f7538e819886ed22c4fac4dd2e32fde
- SSDEEP 192:llM8xf4ELY7tDMFBmUGYsWVOz7PxACJk3YffHfJkH7sACxIdCESoq3:l+8RSDUAU+Wi7PxnXfbiddq3
- TLSH T17332C845B3F48509E1FFCF789EB30A240A79FE856962DB9E1C98015E0EB66048E11FB5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\MSI5493.tmp-\CustomAction.config
- Size 1KB
- SHA256 33d947c04a10e3aff3dca3b779393fa56ce5f02251c8cbae5076a125fdea081f
- MD5 01c01d040563a55e0fd31cc8daa5f155
- SHA1 3c1c229703198f9772d7721357f1b90281917842
- SHA512 9c3f0cc17868479575090e1949e31a688b8c1cdfa56ac4a08cbe661466bb40ecfc94ea512dc4b64d5ff14a563f96f1e71c03b6eeacc42992455bd4f1c91f17d5
- TLSH T11031568E0B05B77711312753AEED90C5DB7561A73C95811834DE99293F36978137338E
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\MSI5493.tmp-\Microsoft.Deployment.WindowsInstaller.dll
- Size 179KB
- SHA256 cf06d4ed4a8baf88c82d6c9ae0efc81c469de6da8788ab35f373b350a4b4cdca
- MD5 1a5caea6734fdd07caa514c3f3fb75da
- SHA1 f070ac0d91bd337d7952abd1ddf19a737b94510c
- SHA512 a22dd3b7cf1c2edcf5b540f3daa482268d8038d468b8f00ca623d1c254affbbc1446e5bd42adc3d8e274be3ba776b0034e179faccd9ac8612ccd75186d1e3bf1
- SSDEEP 3072:BGfZS7hUuK3PcbFeRRLxyR69UgoCaf8+aCnfKlRUjW01KymkO:9zMRLkR6joxfRPW
- TLSH T159046B2953FC473ACAFF4778E261425197B1F2E67117DB0EEC8181AA2522780F792397
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
- Size 24.1MB
- SHA256 7708fbc2743241e6473f695183f383a6f0a0a907cfa5d3f9a5ec893442220e91
- MD5 fe483c5cfbd9d65f51a62914d04e970e
- SHA1 4703aaa199e3ba22805be0f066b37fbf7e17c1bf
- SHA512 751251ccfb0a9d22ae6d573e549fd53be28f7b7083582fa2613770a3df9a25e894d4378254d15786416c6e1c59e2f19237d8ff2a30f4f31a21d32535d611b37f
- SSDEEP 24576:su8m+1z4doO/vvTLbWzuGWKHiakzLlzi/FW9R8iF7kaiu0qOIPlqr1YRG:v
- TLSH T17E47D42832F92210E7F79F3C68F0AA2749397D579C19DE8D45411F4E0921BB1E8B2F5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\Volume{73216430-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{386969af-e179-4f95-9c62-af779053f0af}_OnDiskSnapshotProp
- Size 6KB
- SHA256 acbdc9576ef467bce09de3a9be9e30a84d936cb1190aeb3d2e0979841bbdbc61
- MD5 84c15565e54100a51ceb8ed9d3cb37b8
- SHA1 3ea623d345640d30494c858852cad37fa1fd2da5
- SHA512 fcc95a627393f69e55339135e771b5200ae95521fbdfa7a4b07e66c34765d773d684dcaebbbbd1ddc0d44ed16541ae717ea2fda82320c2cb7b94e7869222bf37
- SSDEEP 96:F9HhdLdyvc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpu:jBrIb++ZVm
- TLSH T118D199085AF54711E2B3AB3228F18557A877B911EF33CB8E0298238E2670910F875F5F
- MD5 SHA1 SHA512 SSDEEP TLSH