

tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-BHRAE. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-PK61E. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-826JM. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-AP0V6. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-KIK4B. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-9TQDK. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-DEMNH. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-NKSBP. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-1LK6L. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\localeĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-EQ2ME.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-05GTM.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-P8Q05.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-6HP3L.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-KOL9F.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-FPDBO.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-V25HG.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-I95HG.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-IVH1K.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\locale\i s-P8C3H.tm pĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\driversĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USBĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4ĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\drivers\ USB\nt10圆 4\is-37CHT. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\is-SRVJL. tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\is-3LGHH.


tmpĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\is-S056I.

datĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\is-5JK4Q. Source: C:\Users\u ser\AppDat a\Local\Te mp\is-U2G3 1.tmp\flex ihub.tmpĭirectory created: C:\Program Files\Ele ctronic Te amĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu bĭirectory created: C:\Program Files\Ele ctronic Te am\FlexiHu b\unins000. Static PE information: LOCAL_SYMS _STRIPPED, 32BIT_MAC HINE, BYTE S_REVERSED _LO, EXECU TABLE_IMAG E, LINE_NU MS_STRIPPE D, BYTES_R EVERSED_HI, RELOCS_S TRIPPED tmp\flexi hub.tmp, P arentProce ssId: 6432, ProcessC ommandLine : 'C:\Wind ows\system 32\netsh.e xe' advfir ewall fire wall add r ule name=f lexihub_se rvice dir= in action= allow prog ram='C:\Pr ogram File s\Electron ic Team\Fl exiHub\fle xihub64.ex e' enable= yes, Proce ssId: 5896 exe' enab le=yes, Co mmandLine: 'C:\Windo ws\system3 2\netsh.ex e' advfire wall firew all add ru le name=fl exihub_ser vice dir=i n action=a llow progr am='C:\Pro gram Files \Electroni c Team\Fle xiHub\flex ihub64.exe ' enable=y es, Comman dLine|base 64offset|c ontains: i jY, Image: C:\Window s\System32 \netsh.exe, NewProce ssName: C: \Windows\S ystem32\ne tsh.exe, O riginalFil eName: C:\ Windows\Sy stem32\net sh.exe, Pa rentComman dLine: 'C: \Users\use r~1\AppDat a\Local\Te mp\is-U2G3 1.tmp\flex ihub.tmp' /SL5='$C02 94,6818002 ,121344,C: \Users\use r\Desktop\ flexihub.e xe', Pare ntImage: C :\Users\us er\AppData \Local\Tem p\is-U2G31. Sigma detected: Netsh Port or Application AllowedĪuthor: Markus Neis, Sander Wiebing: Data: Comm and: 'C:\W indows\sys tem32\nets h.exe' adv firewall f irewall ad d rule nam e=flexihub _service d ir=in acti on=allow p rogram='C: \Program F iles\Elect ronic Team \FlexiHub\ flexihub64.
