Is this Guy using Logitech Scirpt Macro?

[Redox]

SHAS2 mode started at 2021-02-04 18:31:24 for Rainbow Six on x64
ping:28ms
update 6
DirectX version is 12.0( )
OS is 10.0 64 bit
Real OS Microsoft Windows 10 Pro
memory: 16326 MB
version: MOSS 5,5,3,0
Physical: ASUSTeK COMPUTER INC.System Product NameSTRIX H270F GAMING180322443300171
Sign ID1: 531516145 ID2: 1272455052
User: Admin@TS-eac1455
Drive: SanDisk SDSSDH3 1T00 serial: 202986801997
Drive: Samsung SSD 970 EVO 500GB serial: 0025_3859_91B3_9FCC.
Drive: serial:
Net: 00FF665CB619 /0.0.0.0 Public: 95.91.223.xxx
Video: NVIDIA GeForce GTX 1070 driver : 27.21.14.6140

Monitor: (Standardmonitortypen) HP ZR22w serial: CN41110SDT
Monitor: (Standardmonitortypen) Acer XB240H serial: T1YEE011420284904D00

processor BIOS details 3601 MHz by 36.01*100. Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz
Directx11
SHAS2: 7fe327ae2dd924e2318796508b6cff5fd6b70a3deb30a2b7c7403abdbd805462 process: C:\Windows\System32\lsass.exe
SHAS2: 1a1fe677953a31886243f5410fa08fbd12f6022cc952f6712542bed02259779c process: C:\Windows\System32\winlogon.exe
Monitor Started at 2021-02-04 18:31:29
Windows Defender: enabled
SHAS2: 4f5d509ed0813495684a0a5ced614f234e3f595b7a83b25c0aa2940c76d327aa process: C:\Windows\System32\fontdrvhost.exe
Windows Defender: enabled
SteamId: 353497365
SHAS2: 4f5d509ed0813495684a0a5ced614f234e3f595b7a83b25c0aa2940c76d327aa process: C:\Windows\System32\fontdrvhost.exe
SHAS2: e6f5de8bc3fc572d9a2866024c5af3a83a4d70f4d38810b9e7679a2e9f89775c process: C:\Windows\System32\WUDFHost.exe
SHAS2: 0ac827c9e35cdaa492ddd435079415805dcc276352112b040bcd34ef122cf565 process: C:\Windows\System32\dwm.exe

ping:31ms
SHAS2: 2bc924f5a432d191e50eb4f701e9400bfe96900177785b6e44c0fff05ab54ebe process: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d67c20d727d4578c\Display.NvContainer\NVDisplay.Container.exe
SHAS2: 2bc924f5a432d191e50eb4f701e9400bfe96900177785b6e44c0fff05ab54ebe process: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d67c20d727d4578c\Display.NvContainer\NVDisplay.Container.exe
SHAS2: 8ee21a0ba8849d31c265b4090a9e2ebe8ba66f58a8f71d4e96509e8a78f7db00 process: C:\Windows\System32\sihost.exe
SHAS2: 59c34f131dcedcc34252d2ab18754481843efb2a64a92996391330c321154943 process: C:\Windows\System32\taskhostw.exe
SHAS2: 484fed5f039f429ed933931ba607b7efda7d1a343d79cfab60910e1843147012 process: C:\Windows\System32\ctfmon.exe
SHAS2: 1570d72249437e024b7ee2dcd35f0d10d8ecb13c8152306c439e062dbb8e9ff0 process: C:\Windows\System32\audiodg.exe
SHAS2: 2198a7b58bccb758036b969ddae6cc2ece07565e2659a7c541a313a0492231a3 process: C:\Windows\System32\wbem\WmiPrvSE.exe
SHAS2: 654f1b82d7c54ed268362abc23844b1cde64bc6918fad6347f3a719788c6e284 process: C:\Windows\System32\spoolsv.exe
SHAS2: 2198a7b58bccb758036b969ddae6cc2ece07565e2659a7c541a313a0492231a3 process: C:\Windows\System32\wbem\WmiPrvSE.exe
SHAS2: 88fd7e7e15d4c8b22c355ed56edd45734f05a55a5bdc18ec1917583194ecd981 process: C:\Windows\System32\dasHost.exe
SHAS2: d3c821860f7634a4367094009ec5040e15eb5b6e950f76994f1f32ea7b4bf76e process: C:\Program Files\NordVPN\nordvpn-service.exe
SHAS2: ff9380618bfb006d14e17319436ad5b9ace54d3541b1c754b9ef7a6434659c13 process: C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe
SHAS2: 1c3c8e6f79b993b5fa8ecd4f39f671b74d1d1838fd216480dd45a4a4b4abb82f process: C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
SHAS2: f5a6f0e41b7101e8d05fa71782b60e4faeb4f3936afef7b9ccc6a24d948be729 process: C:\Windows\System32\CorsairGamingAudioCfgService64.exe
SHAS2: 64fae007652f3f416e3f700bd4c80bfca19b5076abb231a549167a2c7d9a5a1a process: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
SHAS2: 9d5c8009bc3f6f76438fc82c3daaa3e9cc87f74cde841a0add9ef00e98db6890 process: C:\Windows\SysWOW64\PnkBstrA.exe
SHAS2: a5d2420b62f2478a97cfc72be0f17996ccabdc9eb77adaf57c66e7d29f5cc0c9 process: C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
SHAS2: fd314ace4e04be598099379963af2da6f9fb0f92835abad1fa345728b00ef02a process: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SHAS2: f6ab9b4b84af21da0fd39d25da2ad1552e5a98532567dc4dd77e026c8e8bcc46 process: C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CueLLAccessService.exe
SHAS2: 0def5a70ec0e5871a10b0b356627e506ed5b5500b928e0bd4d66a4412e547d31 process: C:\Program Files\LGHUB\lghub_updater.exe
SHAS2: 7547bbc248c894a1a235f6740d041cdd68d77f4830ca064661799c9de0d876da process: C:\Windows\System32\snmp.exe
SHAS2: b28eca3b53b6d3e55725bd2cf76d8a9e67fa0f85f2bc575aa39815de4ca25183 process: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
SHAS2: f25acad9d39a492b5d2a369e224531c32e7126f6d8781054f84c1383ddfd27da process: C:\Program Files (x86)\SanDisk\SSD Dashboard\SanDiskSSDDashboardService.exe
SHAS2: c7852c0668221ac8dbb205ac3711dc921cb1cb7e475c912453b2aa8c83681bc7 process: C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_48973fc6c96c696a\RstMwService.exe
SHAS2: 75dce4e5fa08cceaf4d3d30fe8e26903fcdd14cc852e820f63b40f374c706dbd process: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
SHAS2: fcc3962dd9c52586d108942dc2b3b5fba1ed3e667114ecb4640e6d0b6ea97376 process: C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
SHAS2: 31c40262695497117cba5693a0ef1c4fcd84b27563592271b60f28f4af6888c2 process: C:\Windows\System32\mqsvc.exe
SHAS2: 75dce4e5fa08cceaf4d3d30fe8e26903fcdd14cc852e820f63b40f374c706dbd process: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
SHAS2: b53f3c0cd32d7f20849850768da6431e5f876b7bfa61db0aa0700b02873393fa process: C:\Windows\System32\rundll32.exe
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\0bd12f45-3201-44a3-957c-d8886c578fe8\GameSettings.ini file: GameSettings.ini.001- Zip CRC: f1f061714d468e926475ab1691c357f9f127be39ea14a28d1b2b582f0ff953a9
SHAS2: 35ef26f4e71a40d0fd09939e29d39704e6fac8c0289d15108219228b4d3afe5d process: C:\Windows\explorer.exe
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\498c148e-ba60-4cfe-bdf7-ff8c34a641c1\GameSettings.ini file: GameSettings.ini.002- Zip CRC: 2865af024d931a0661a06fc90daa1f445ffa54f88e316ddbd1d150f1c806799b
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\61b61a69-cca2-400c-8d37-d24da1cbea99\GameSettings.ini file: GameSettings.ini.003- Zip CRC: 02d4110164982b33456c0c48bfbe933144dc9815fbfd61057f940b601bd6c284
SHAS2: b28eca3b53b6d3e55725bd2cf76d8a9e67fa0f85f2bc575aa39815de4ca25183 process: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\6fe5ae74-d7a6-46da-b894-876d96cf3b0b\GameSettings.ini file: GameSettings.ini.004- Zip CRC: 3acf6167905ca3da965101e451cfc8ad2c0db8eca982ed5e3ca972015a955fbd
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\8894c4fd-d40b-48d1-aca0-038cf754fc01\GameSettings.ini file: GameSettings.ini.005- Zip CRC: 7cc81e135df029d71a11c5740729b42b39a48779a63fd4af72a115cdb90fdf2e
SHAS2: b28eca3b53b6d3e55725bd2cf76d8a9e67fa0f85f2bc575aa39815de4ca25183 process: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\967eb32e-c573-41cd-ba96-51fab717b09f\GameSettings.ini file: GameSettings.ini.006- Zip CRC: ec62f4f9d80a1eb1b03f04e7d13269691e8ce759184caab51f8cb555d6d81c3d
SHAS2: 1c6afc38773c5e71404ebe4d26689958ac7c29616c343eeada21e19d31b477ec process: C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.CpuIdRemote64.exe
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\cf614ae7-3292-4fea-947b-693861481939\GameSettings.ini file: GameSettings.ini.007- Zip CRC: f0f761db71034301f8920cc203bb5703fc3a5a69aee92a24e4572cd04ff560c2
SHAS2: 16c7a815a4a313d2c79816b3839376cc4d732dc0b136ee246ac77ffed543a3c4 process: C:\Windows\System32\conhost.exe
*SHAS2: 03f57900a9324df23da95a46f58245649b0357f065b7f4128e387507ce9582e6 process: C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
SHAS2: c5dfef42091047847007428f2ba6eac3b610124fed90c8e10dbc513d1d29ffff process: C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.DisplayAdapter.exe
SHAS2: 16c7a815a4a313d2c79816b3839376cc4d732dc0b136ee246ac77ffed543a3c4 process: C:\Windows\System32\conhost.exe
SHAS2: f9b0d5d8f80b1c77c52f137df4a24e17295f3b061934bc6aeceb7c6ac57d4c4a process: C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
SHAS2: e86870769ee6c797e09457bd99c58d9bf2303cf0193a24ef9b1222c2c3daf628 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: be1c4326648531600d4edaff0383ac6d1022844557b5ab4d89bab71760113c41 process: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
SHAS2: e86870769ee6c797e09457bd99c58d9bf2303cf0193a24ef9b1222c2c3daf628 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 16c7a815a4a313d2c79816b3839376cc4d732dc0b136ee246ac77ffed543a3c4 process: C:\Windows\System32\conhost.exe
SHAS2: 321656887526b439967b377c20c3ae04f48b11a77eea11f7febe47d30b3f7bc7 process: C:\Windows\System32\SettingSyncHost.exe
SHAS2: dcaa04cb25620bb9ef93a72a97867000b97ec6f98e792c5c7c780f2c644fed95 process: C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21011.127.0_x64__8wekyb3d8bbwe\YourPhone.exe
SHAS2: d4001de20554935514046db1a8d432935ffffd6a5f874adbbd8f03e603a1e155 process: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
SHAS2: e86870769ee6c797e09457bd99c58d9bf2303cf0193a24ef9b1222c2c3daf628 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: e86870769ee6c797e09457bd99c58d9bf2303cf0193a24ef9b1222c2c3daf628 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: a46b51a6efed0098f7cefd37c241aa5904cb0826e6ffa6adbe8c7af321b6b84a process: C:\Windows\System32\SearchIndexer.exe
SHAS2: 9c54b6121f55263d209e9c445008eb70578db31f91b3e33d54bfd649169436f9 process: C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
SHAS2: 28269de5fc0198b7e1a734146840bf4a11ab54a146b88d42fbc4fd66f41e8def process: C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
SHAS2: 28269de5fc0198b7e1a734146840bf4a11ab54a146b88d42fbc4fd66f41e8def process: C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
SHAS2: 1fc01c71a356375dbd1f632a101620d90e65f02c1047fd6f0ea8cf62b8695cbc process: C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
SHAS2: 16c7a815a4a313d2c79816b3839376cc4d732dc0b136ee246ac77ffed543a3c4 process: C:\Windows\System32\conhost.exe
SHAS2: 399dfaa74cf9c50426a780137c6a06ba78d85e5d12cc9c8d89ff2352a0be46d4 process: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
SHAS2: ac727ab21c1e201d20f889d3a8efa5e63c272cde622826895f1b56b174e8a4ff process: C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
SHAS2: 28269de5fc0198b7e1a734146840bf4a11ab54a146b88d42fbc4fd66f41e8def process: C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
SHAS2: e86870769ee6c797e09457bd99c58d9bf2303cf0193a24ef9b1222c2c3daf628 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 570b37a7a3ffdafcceccc33cbc1968feb857b73ca3cb4dffedc2e67e9abd0878 process: C:\Windows\System32\SecurityHealthSystray.exe
(Mon 1) DX11(580) : Each 120 at 2021-02-04 18:31:32 file: 001.JPG- Zip CRC: fa7c94e80fea7e5ac8eb1f0d665e85686d429a0f1d7f93f46efa102069a370eb
SHAS2: 39d7dbbdf5934fa139a177ecb12b418dffac43b4bfd9734947876ca8e613516c process: C:\Program Files\Logitech Gaming Software\LCore.exe
ping:33ms
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Simon\AppData\Local\Discord\app-0.0.309\Discord.exe
(Mon 2) DX11(629) : Each 120 at 2021-02-04 18:31:34 file: 002.JPG- Zip CRC: c17e0a0cdace3f73e6a9f0e57d0d3a8d91179314818ca2f3388bf5280d52e26f
ping:33ms
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Simon\AppData\Local\Discord\app-0.0.309\Discord.exe
F
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Simon\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Simon\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: ecc9382de6869688a689698321ccda588f61de936ae76a99ba68887287a0bc99 process: C:\Program Files\LGHUB\lghub.exe
SHAS2: b05f5c1c1f463ff450c1804cd2c2e8fd1f62a9f004898005468db19a51368b4d process: C:\Program Files (x86)\Overwolf\Overwolf.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Simon\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 342c9c240b1b43477ba46ef3f6c11ce95ac25c9c419747fa73859355ab6090d6 process: C:\Program Files\LGHUB\lghub_agent.exe
SHAS2: ecc9382de6869688a689698321ccda588f61de936ae76a99ba68887287a0bc99 process: C:\Program Files\LGHUB\lghub.exe
SHAS2: ecc9382de6869688a689698321ccda588f61de936ae76a99ba68887287a0bc99 process: C:\Program Files\LGHUB\lghub.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: 5cd0dd3b1454b437362c87c651ee2068ac27cdb725aa1c705cf62ff325a759cc process: C:\Windows\System32\wbem\unsecapp.exe
SHAS2: 7e3c91f16e45da661a9e1b11cc398bb2792750f133eb8390f35afee6fc18c05f process: C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE.exe
SHAS2: 250173049a54473e149fd6f58d45665469b497f6c181925d5fc4ed15f019de55 process: C:\Windows\System32\vds.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Simon\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 6cc44fbee63233a379e08b2fdf451890f6fce8615878c44bc1a680a6f13c9cbd process: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
SHAS2: e86870769ee6c797e09457bd99c58d9bf2303cf0193a24ef9b1222c2c3daf628 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 45c9b10cc7be2111da9306f31136739c290544d9789d7f5b6eff6953a5156b37 process: C:\Program Files\LGHUB\logi_analytics_client.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: 7685ead1c23a7616955268421f97f95c48fd8c95f35820e3901f0d1eb53b2f15 process: C:\Program Files (x86)\Common Files\Overwolf\0.162.0.13\OverwolfHelper.exe
SHAS2: 5621e11c89f626bc5861e15e4962cec01285bf97b317cb41b793a523a94586c7 process: C:\Program Files (x86)\Common Files\Overwolf\0.162.0.13\OverwolfHelper64.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: 68f8938e0c3e514cc35e25aad756a7d9ef38ce68fb9ed3d64023748a90b2c62b process: C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.66.0_x64__xns73kv1ymhp2\AudibleRT.WindowsPhone.exe
SHAS2: e86870769ee6c797e09457bd99c58d9bf2303cf0193a24ef9b1222c2c3daf628 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 1958767981f8be7741807d53959f898fc2be2c52cc2aa630ecc855c5b73de772 process: C:\Windows\System32\MoUsoCoreWorker.exe
SHAS2: ad938c303f12ea8d164433cc7ba46fc7b9ae00f6f899e308d4317dab46e25642 process: C:\Windows\System32\oobe\UserOOBEBroker.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 34d5f40785a62bb26b49976212cce6673bf0cca04f50038626c704236f497e13 process: C:\Windows\System32\CompPkgSrv.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: e7fc40b41aa8b83841a0b96d169eaf0800aa784733e636935374d56536253f10 process: C:\Windows\System32\dllhost.exe
SHAS2: ecc9382de6869688a689698321ccda588f61de936ae76a99ba68887287a0bc99 process: C:\Program Files\LGHUB\lghub.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: a1dfbac053d9f93dc80792388d210a13b2f9fb69c15dacbf59e9043ea4e8afaf process: C:\Windows\System32\notepad.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 2b99cc63f0aa547ec11fbe8ca3f162dbac399865dc2d690d509e55f1a088cb90 process: C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
SHAS2: a1dfbac053d9f93dc80792388d210a13b2f9fb69c15dacbf59e9043ea4e8afaf process: C:\Windows\System32\notepad.exe
SHAS2: 4bf1c77e22114bf7b675623f4c5d5220dab5199395ca1ed6e730e3e117bbfb38 process: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: a1dfbac053d9f93dc80792388d210a13b2f9fb69c15dacbf59e9043ea4e8afaf process: C:\Windows\System32\notepad.exe
SHAS2: aa79bd0c7d95d271d5bb668d9c3fdbeadd912f20e3f11e1c489fffe108c1fa28 process: C:\Users\Simon\AppData\Local\FACEITApp\app-1.26.0\FACEIT.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 69a3dc695bd29cd658f91c66dbbcc4652394db9f4250c8b4bb71154203604a24 process: C:\Windows\System32\smartscreen.exe
SHAS2: e92947bed6357cc84e21f498b6be8bf371db5f71e2d14ebcf81cfbd072bbb307 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
SHAS2: 3b45100a52fabe524a2fbce0af2b7171b3a20a6d5c1a0048bf3ad0fedd39c589 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: a1dfbac053d9f93dc80792388d210a13b2f9fb69c15dacbf59e9043ea4e8afaf process: C:\Windows\System32\notepad.exe
SHAS2: 66add601df49516881ab167768452026d9c6601cf758d2eab8f82c766dec280d process: C:\Windows\System32\SearchFilterHost.exe
SHAS2: 3b45100a52fabe524a2fbce0af2b7171b3a20a6d5c1a0048bf3ad0fedd39c589 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 3b45100a52fabe524a2fbce0af2b7171b3a20a6d5c1a0048bf3ad0fedd39c589 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 531fb052f71b93bff21796a02fc9d8669bd94f5958993033640a578da95ca846 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
SHAS2: aefd0894435d9a9f9e4987028800112601b24e62693bdb683a5127e813a04f24 process: F:\Ubisoft\Tom Clancy’s Rainbow Six Siege\rainbowsix_be.exe
SHAS2: 39262c34b4a81ed427dc3f981e5b2f98263f1f7678237ea20ec0ef57366893a7 process: F:\Ubisoft\Tom Clancy’s Rainbow Six Siege\RainbowSix_Vulkan.exe
Windows Defender: enabled
SHAS2: 08d0ad2ffadedcd9167d77f200ea14458cda0b98bd67420087b0b4f7fc944e52 process: C:\Windows\System32\SearchProtocolHost.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 3b45100a52fabe524a2fbce0af2b7171b3a20a6d5c1a0048bf3ad0fedd39c589 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 3b45100a52fabe524a2fbce0af2b7171b3a20a6d5c1a0048bf3ad0fedd39c589 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 3181e921e6bea62426b9095ae66a3c9fc13446fe7fbc701dd820b62a193489bb process: C:\Users\Simon\Downloads\Moss.exe
SHAS2: e7fc40b41aa8b83841a0b96d169eaf0800aa784733e636935374d56536253f10 process: C:\Windows\System32\dllhost.exe
SteamId: 353497365

FileCheck start for F:\UBISOFT\TOM CLANCY’S RAINBOW SIX SIEGE at 2021-02-04 18:31:31:
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\0bd12f45-3201-44a3-957c-d8886c578fe8\GameSettings.ini file: GameSettings.ini.008- Zip CRC: f1f061714d468e926475ab1691c357f9f127be39ea14a28d1b2b582f0ff953a9
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\498c148e-ba60-4cfe-bdf7-ff8c34a641c1\GameSettings.ini file: GameSettings.ini.009- Zip CRC: 2865af024d931a0661a06fc90daa1f445ffa54f88e316ddbd1d150f1c806799b
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\61b61a69-cca2-400c-8d37-d24da1cbea99\GameSettings.ini file: GameSettings.ini.010- Zip CRC: 02d4110164982b33456c0c48bfbe933144dc9815fbfd61057f940b601bd6c284
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\6fe5ae74-d7a6-46da-b894-876d96cf3b0b\GameSettings.ini file: GameSettings.ini.011- Zip CRC: 3acf6167905ca3da965101e451cfc8ad2c0db8eca982ed5e3ca972015a955fbd
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\8894c4fd-d40b-48d1-aca0-038cf754fc01\GameSettings.ini file: GameSettings.ini.012- Zip CRC: 7cc81e135df029d71a11c5740729b42b39a48779a63fd4af72a115cdb90fdf2e
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\967eb32e-c573-41cd-ba96-51fab717b09f\GameSettings.ini file: GameSettings.ini.013- Zip CRC: ec62f4f9d80a1eb1b03f04e7d13269691e8ce759184caab51f8cb555d6d81c3d
captured: C:\Users\Admin\Documents\my games\Rainbow Six – Siege\cf614ae7-3292-4fea-947b-693861481939\GameSettings.ini file: GameSettings.ini.014- Zip CRC: f0f761db71034301f8920cc203bb5703fc3a5a69aee92a24e4572cd04ff560c2
*-
SHAS2: e7fc40b41aa8b83841a0b96d169eaf0800aa784733e636935374d56536253f10 process: C:\Windows\System32\dllhost.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
(Mon 1) DX11(544) : Each 120 at 2021-02-04 18:32:06 file: 003.JPG- Zip CRC: 6850c464d8d96c05a116986b44e335fb5e2f441ef166718d16eb10e56cea7766
ping:24ms
(Mon 2) DX11(581) : Each 120 at 2021-02-04 18:32:07 file: 004.JPG- Zip CRC: b402fd71ba497f90a8a67e08dd3bd320112936c2819b83b8ed5d7da32a75ba84
ping:23ms
F
–
(Mon 1) DX11(538) : Each 120 at 2021-02-04 18:32:11 file: 005.JPG- Zip CRC: 6850c464d8d96c05a116986b44e335fb5e2f441ef166718d16eb10e56cea7766
ping:34ms
(Mon 2) DX11(578) : Each 120 at 2021-02-04 18:32:13 file: 006.JPG- Zip CRC: bf4afbbc432e41f1ce75db21210be1f53b35d982da0e984401845f0a27a0cdc4
ping:22ms
F
SHAS2: 08d0ad2ffadedcd9167d77f200ea14458cda0b98bd67420087b0b4f7fc944e52 process: C:\Windows\System32\SearchProtocolHost.exe
SHAS2: 66add601df49516881ab167768452026d9c6601cf758d2eab8f82c766dec280d process: C:\Windows\System32\SearchFilterHost.exe
SHAS2: 66add601df49516881ab167768452026d9c6601cf758d2eab8f82c766dec280d process: C:\Windows\System32\SearchFilterHost.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
SHAS2: 0746793e2c8e2ad76045e9b56c3bad1db56eb5c57745900f3b0b832a62d77a23 process: C:\Program Files (x86)\Overwolf\0.162.0.13\OverwolfBrowser.exe
–
(Mon 1) DX11(545) : Each 120 at 2021-02-04 18:35:16 file: 007.JPG- Zip CRC: 971c33931d3ca04f1e790fd221a02b4b931e5d0a57df471fd735022ae4a78d4d
ping:24ms
(Mon 2) DX11(693) : Each 120 at 2021-02-04 18:35:17 file: 008.JPG- Zip CRC: 1636fe78a703adc81735cd673d01d502853f36061e9613287f65c25920296897
ping:25ms
SHAS2: f417f52b06f41b96e135758380e28d74c150828e046a47b9e94098f1b55ef88b process: C:\Windows\System32\vdsldr.exe
SHAS2: f417f52b06f41b96e135758380e28d74c150828e046a47b9e94098f1b55ef88b process: C:\Windows\System32\vdsldr.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SHAS2: 60d032364ec081fad043cfd2f7fbaddb2cc370cec0560f9d4f96a1aced7e48d6 process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
–
(Mon 1) DX11(528) : Each 120 at 2021-02-04 18:38:21 file: 009.JPG- Zip CRC: b8624d599fd9d9713f2e16eaa0613dd08012f6ad7412bf1b94bc842a4143dc5b
ping:27ms
(Mon 2) DX11(552) : Each 120 at 2021-02-04 18:38:22 file: 010.JPG- Zip CRC: 45dbccd48c804ea7670780438052ca15d1c826b957ec5d52655e797806bca37e
ping:34ms
F
–
(Mon 1) DX11(565) : Each 120 at 2021-02-04 18:41:21 file: 011.JPG- Zip CRC: c2b5c96cb10fd17ed14aa6ccf4bfb74e6a117aabbbd21707ee9a6ffd294f6d1b
ping:25ms
(Mon 2) DX11(1042) : Each 120 at 2021-02-04 18:41:23 file: 012.JPG- Zip CRC: c3ade1b3365ac2de9d9371dfe4888aac5932a836457d9152cdd217354edd9d49
ping:24ms
F
SHAS2: 20330d3ca71d58f4aeb432676cb6a3d5b97005954e45132fb083e90782efdd50 process: C:\Windows\System32\backgroundTaskHost.exe
–
(Mon 1) DX11(575) : Each 120 at 2021-02-04 18:42:41 file: 013.JPG- Zip CRC: ee68d7db4dc23bd9b2168a34966aa5c4b38e2490bcd7ead648d37d49544ccfdb
ping:33ms
(Mon 2) DX11(16136) : Each 120 at 2021-02-04 18:42:58 file: 014.JPG- Zip CRC: 1255ae536fe814d8f8a36e9af4129053c73204d599da659672ab403bdcbec0e5
ping:26ms
F
(Mon 1) DX11(522) : Each 120 at 2021-02-04 18:43:10 file: 015.JPG- Zip CRC: 026f240703afafe92609575e6563a188db80ec1a136d808e8dc3cc37d7bc5085
ping:23ms
(Mon 2) DX11(567) : Each 120 at 2021-02-04 18:43:11 file: 016.JPG- Zip CRC: a6a71d7d33d4541ede542ec0d2e63abc890d8d19917ae41fbd9753d1ac6ed20b
ping:29ms

Monitor stoppped at 2021-02-04 18:43:08
ping:25ms

Processes statistics ping:25
PID Running Time Kernel Time User Time Name
844 00:07:18:58 00:00:13 00:00:17 lsass.exe
936 00:07:18:57 00:00:00 00:00:00 winlogon.exe
580 00:07:18:57 00:00:00 00:00:00 fontdrvhost.exe
576 00:07:18:57 00:00:00 00:00:00 fontdrvhost.exe
832 00:07:18:57 00:00:00 00:00:00 WUDFHost.exe
1236 00:07:18:57 00:08:35 00:20:28 dwm.exe
2132 00:07:18:57 00:00:00 00:00:00 NVDisplay.Container.exe
2696 00:07:18:56 00:00:02 00:00:08 NVDisplay.Container.exe
2804 00:07:18:56 00:00:01 00:00:00 sihost.exe
3004 00:07:18:56 00:00:00 00:00:00 taskhostw.exe
3224 00:07:18:56 00:00:13 00:00:07 ctfmon.exe
3816 00:07:18:56 00:08:05 00:04:16 AUDIODG.EXE
4072 00:07:18:55 00:02:19 00:00:54 wmiprvse.exe
4208 00:07:18:55 00:00:00 00:00:00 spoolsv.exe
4252 00:07:18:55 00:00:00 00:00:00 wmiprvse.exe
4312 00:07:18:55 00:00:00 00:00:00 dashost.exe
4336 00:07:18:55 00:00:01 00:00:10 nordvpn-service.exe
4792 00:07:18:55 00:00:58 00:03:53 Corsair.Service.exe
4804 00:07:18:55 00:00:16 00:00:28 DSAService.exe
4828 00:07:18:55 00:00:00 00:00:00 CorsairGamingAudioCfgService64.exe
4836 00:07:18:55 00:00:00 00:00:00 aspnet_state.exe
4884 00:07:18:55 00:00:00 00:00:00 PnkBstrA.exe
4900 00:07:18:55 00:00:00 00:00:00 LogiRegistryService.exe
4912 00:07:18:55 00:00:00 00:00:00 armsvc.exe
4920 00:07:18:55 00:00:00 00:00:00 CueLLAccessService.exe
4968 00:07:18:55 00:00:00 00:00:01 lghub_updater.exe
5012 00:07:18:55 00:00:02 00:00:00 snmp.exe
5036 00:07:18:55 00:00:01 00:00:03 nvcontainer.exe
5044 00:07:18:55 00:00:00 00:00:00 SanDiskSSDDashboardService.exe
5052 00:07:18:55 00:00:00 00:00:00 RstMwService.exe
5064 00:07:18:55 00:00:00 00:00:00 SMSvcHost.exe
5716 00:07:18:55 00:00:00 00:00:00 jhi_service.exe
5888 00:07:18:55 00:00:00 00:00:00 mqsvc.exe
6340 00:07:18:54 00:00:00 00:00:00 SMSvcHost.exe
6844 00:07:18:54 00:00:00 00:00:00 rundll32.exe
7292 00:07:18:53 00:02:31 00:02:02 Explorer.EXE
8764 00:07:18:52 00:07:25 00:11:19 nvcontainer.exe
8788 00:07:18:52 00:00:04 00:00:54 nvcontainer.exe
8600 00:07:18:52 00:04:46 00:02:13 Corsair.Service.CpuIdRemote64.exe
2732 00:07:18:52 00:00:00 00:00:00 conhost.exe
9220 00:07:18:51 00:00:01 00:00:02 StartMenuExperienceHost.exe
9328 00:07:18:51 00:00:02 00:00:04 Corsair.Service.DisplayAdapter.exe
9400 00:07:18:51 00:00:00 00:00:00 conhost.exe
9560 00:07:18:51 00:00:00 00:00:00 DSAUpdateService.exe
9700 00:07:18:51 00:00:00 00:00:00 RuntimeBroker.exe
2496 00:07:18:50 00:00:01 00:00:03 SearchApp.exe
10268 00:07:18:48 00:00:00 00:00:00 RuntimeBroker.exe
10292 00:07:18:48 00:00:00 00:00:00 conhost.exe
10312 00:07:18:48 00:00:01 00:00:01 SettingSyncHost.exe
10664 00:07:18:47 00:00:00 00:00:00 YourPhone.exe
11184 00:07:18:47 00:00:00 00:00:00 LockApp.exe
2740 00:07:18:47 00:00:00 00:00:00 RuntimeBroker.exe
12016 00:07:18:45 00:00:01 00:00:01 RuntimeBroker.exe
11820 00:07:18:44 00:00:05 00:00:08 SearchIndexer.exe
11076 00:07:18:43 00:00:01 00:00:00 nvsphelper64.exe
10612 00:07:18:43 00:00:12 00:00:11 NVIDIA Share.exe
11312 00:07:18:42 00:00:00 00:00:00 NVIDIA Share.exe
11408 00:07:18:42 00:00:01 00:00:05 NVIDIA Web Helper.exe
11396 00:07:18:42 00:00:00 00:00:00 conhost.exe
11880 00:07:18:42 00:00:02 00:00:03 TextInputHost.exe
11260 00:07:18:41 00:00:18 00:00:39 DSATray.exe
12708 00:07:18:38 00:00:01 00:00:11 NVIDIA Share.exe
12928 00:07:18:37 00:00:00 00:00:00 RuntimeBroker.exe
13056 00:07:18:37 00:00:00 00:00:00 SecurityHealthSystray.exe
13276 00:07:18:36 00:00:01 00:00:03 LCore.exe
13260 00:07:18:33 00:00:51 00:01:40 Discord.exe
13156 00:07:18:33 00:00:00 00:00:00 Discord.exe
13416 00:07:18:33 00:00:18 00:01:13 Discord.exe
13492 00:07:18:32 00:00:03 00:00:08 Discord.exe
14196 00:07:18:32 00:00:01 00:00:01 lghub.exe
14320 00:07:18:31 00:07:37 00:04:56 Overwolf.exe
13456 00:07:18:31 00:08:51 01:24:00 Discord.exe
13896 00:07:18:31 00:00:24 00:00:58 lghub_agent.exe
14220 00:07:18:31 00:00:00 00:00:03 lghub.exe
14604 00:07:18:30 00:00:00 00:00:00 lghub.exe
14868 00:07:18:30 00:01:10 00:02:53 FACEIT.exe
15084 00:07:18:29 00:00:00 00:00:00 unsecapp.exe
15184 00:07:18:29 00:07:43 00:13:15 iCUE.exe
14160 00:07:18:28 00:00:00 00:00:00 vds.exe
15044 00:07:18:27 00:00:00 00:00:00 Discord.exe
13244 00:07:18:26 00:00:01 00:00:01 ShellExperienceHost.exe
14496 00:07:18:25 00:00:00 00:00:00 RuntimeBroker.exe
14444 00:07:18:25 00:00:00 00:00:01 logi_analytics_client.exe
2348 00:07:18:25 00:00:00 00:00:00 OverwolfBrowser.exe
15516 00:07:18:24 00:00:21 00:02:37 OverwolfBrowser.exe
16100 00:07:18:23 00:00:33 00:01:18 OverwolfBrowser.exe
15644 00:07:18:22 00:00:03 00:00:07 FACEIT.exe
17128 00:07:18:20 00:01:41 00:00:05 OverwolfHelper.exe
17332 00:07:18:20 00:01:18 00:00:04 OverwolfHelper64.exe
16808 00:07:18:16 00:00:48 00:27:32 FACEIT.exe
17156 00:07:18:13 00:00:00 00:00:00 FACEIT.exe
16468 00:07:18:13 00:00:00 00:00:00 FACEIT.exe
9980 00:07:18:13 00:00:00 00:00:00 FACEIT.exe
17052 00:07:18:13 00:00:00 00:00:00 FACEIT.exe
11416 00:07:18:13 00:00:00 00:00:00 FACEIT.exe
2292 00:07:17:17 00:00:00 00:00:00 AudibleRT.WindowsPhone.exe
14812 00:07:17:17 00:00:00 00:00:00 RuntimeBroker.exe
8748 00:07:16:52 00:00:00 00:00:00 mousocoreworker.exe
10764 00:07:08:47 00:00:00 00:00:00 UserOOBEBroker.exe
6940 00:06:53:10 00:11:33 00:16:10 firefox.exe
16664 00:06:53:09 00:04:57 00:15:34 firefox.exe
10608 00:06:53:09 00:00:02 00:00:11 firefox.exe
11708 00:06:53:08 00:00:10 00:00:40 firefox.exe
3148 00:06:52:53 00:00:17 00:02:20 firefox.exe
15600 00:06:52:52 00:01:01 00:19:12 firefox.exe
3364 00:06:52:52 00:00:00 00:00:00 CompPkgSrv.exe
8576 00:06:49:22 00:00:15 00:05:12 OverwolfBrowser.exe
8980 00:06:49:07 00:00:00 00:00:00 OverwolfBrowser.exe
13824 00:06:47:28 00:00:00 00:00:00 DllHost.exe
17460 00:06:47:27 00:00:01 00:00:20 lghub.exe
17480 00:06:37:45 00:00:11 00:01:09 firefox.exe
18252 00:02:56:10 00:00:00 00:00:00 NOTEPAD.EXE
1336 00:02:54:01 00:00:23 00:02:06 firefox.exe
18204 00:02:46:58 00:00:02 00:00:08 thunderbird.exe
9132 00:02:40:10 00:00:00 00:00:00 NOTEPAD.EXE
19716 00:02:26:37 00:00:35 00:02:11 plugin-container.exe
1420 00:01:58:16 00:00:00 00:00:00 NOTEPAD.EXE
416 00:01:56:19 00:00:00 00:00:00 FACEIT.exe
18052 00:00:31:51 00:00:10 00:01:23 firefox.exe
15656 00:00:16:07 00:00:21 00:00:28 upc.exe
17900 00:00:15:51 00:00:00 00:00:01 UplayWebCore.exe
15156 00:00:15:01 00:00:00 00:00:00 NOTEPAD.EXE
19560 00:00:14:45 00:00:00 00:00:05 UplayWebCore.exe
21492 00:00:14:45 00:00:00 00:00:01 UplayWebCore.exe
17844 00:00:14:29 00:00:00 00:00:00 UbisoftGameLauncher.exe
19364 00:00:14:10 00:00:00 00:00:00 RainbowSix_BE.exe
3812 00:00:13:46 00:00:00 00:00:00 OverwolfBrowser.exe
19484 00:00:13:45 00:00:02 00:00:30 OverwolfBrowser.exe
20160 00:00:13:45 00:00:00 00:00:01 OverwolfBrowser.exe
18524 00:00:13:44 00:00:01 00:00:13 OverwolfBrowser.exe
15128 00:00:13:24 00:00:00 00:00:01 UplayWebCore.exe
20560 00:00:13:24 00:00:00 00:00:01 UplayWebCore.exe
20268 00:00:11:52 00:00:24 00:00:30 Moss.exe
10524 00:00:11:52 00:00:00 00:00:00 DllHost.exe
20644 00:00:11:31 00:00:00 00:00:04 OverwolfBrowser.exe
17820 00:00:08:11 00:00:00 00:00:01 OverwolfBrowser.exe
10112 00:00:05:01 00:00:00 00:00:00 firefox.exe
17496 00:00:00:43 00:00:00 00:00:00 backgroundTaskHost.exe
816 keystroke, 79 Patterns found

Mouse down moves
^ events 1
10 |
9 |
8 |
7 |
6 |
5 |
4 |
3 |
2 |
1 |
———————————————————————————————————————————————————-> 150 px moves
0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111
0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999999999000000000011111111112222222222333333333344444444445
0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890

Mouse fast moves
^ events: 81 over : 0
40 | X
36 | X
32 | X
28 | X
24 | X
20 | XX
16 | XX
12 | XX
8 | XXX
4 | XXX X
———————————————————————————————————————————————————-> px/s moves
0000000000000000000011111111111111111111222222222222222222223333333333333333333344444444444444444444555555555555555555556666666666666666666677777777777
0011223344556677889900112233445566778899001122334455667788990011223344556677889900112233445566778899001122334455667788990011223344556677889900112233445
0505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050
0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

Global log CRC: af7c441ed602c71795310f4f4bef3b445df3bdb9be4f549352b1904dd5416d7f

[ADM_nohope]

he runs lghub but didnt use it to macro

[Author]

Posts