Windows Analysis Report
RazerSynapseInstaller_V1.19.0.635.exe

Overview

General Information

Sample name: RazerSynapseInstaller_V1.19.0.635.exe
Analysis ID: 1538470
MD5: 6d6850d6a3f9cbc2d390ad748f8b36d5
SHA1: a008fca238cc18c7b6c7e6cc14cc81298117ac9d
SHA256: 2fd29569403b05eaf6973b62a7c391f28006f1e35c6455d016f0047e9b2577e4
Infos:

Detection

Score: 24
Range: 0 - 100
Whitelisted: false
Confidence: 20%

Compliance

Score: 49
Range: 0 - 100

Signatures

.NET source code contains potential unpacker
Drops executables to the windows directory (C:\Windows) and starts them
Allocates memory with a write watch (potentially for evading sandboxes)
Binary contains a suspicious time stamp
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Drops PE files
Drops PE files to the windows directory (C:\Windows)
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
HTTP GET or POST without a user agent
JA3 SSL client fingerprint seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
PE file contains executable resources (Code or Archives)
PE file contains sections with non-standard names
PE file does not import any functions
Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)
Queries the volume information (name, serial number etc) of a device
Sample file is different than original file name gathered from version info
Uses 32bit PE files

Classification

Compliance
barindex
Uses 32bit PE files
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\ProgramData\Razer\Installer\Logs\RazerInstaller.log Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\ProgramData\Razer\Installer\Logs\RazerInstaller-cb19c464-e8c4-429d-93f5-55093fee4228.log Jump to behavior
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: certificate valid
Source: unknown HTTPS traffic detected: 99.86.4.106:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002D45000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002D57000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-crt-locale-l1-1-0.dll
Source: Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002DC9000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002DDC000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-crt-runtime-l1-1-0.dll
Source: Binary string: api-ms-win-core-file-l1-2-0.pdb source: api-ms-win-core-file-l1-2-0.dll
Source: Binary string: api-ms-win-core-memory-l1-1-0.pdb source: api-ms-win-core-memory-l1-1-0.dll
Source: Binary string: D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Services\Kinesis\obj\AWSSDK.Kinesis.Net45\Release\net45\AWSSDK.Kinesis.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Kinesis.dll
Source: Binary string: concrt140.i386.pdbGCTL source: concrt140.dll
Source: Binary string: api-ms-win-core-debug-l1-1-0.pdb source: api-ms-win-core-debug-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\DetectManagerWrapper\bin\Razer.DetectManagerWrapper.pdb source: Razer.DetectManagerWrapper.dll
Source: Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002C72000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002C84000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-core-sysinfo-l1-1-0.dll
Source: Binary string: C:\Users\shikang.neoh\Desktop\cpprestsdk-master\Binaries\Win32\Release\cpprest140_2_10.pdb source: cpprest140_2_10.dll
Source: Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: api-ms-win-crt-filesystem-l1-1-0.dll
Source: Binary string: C:\projects\msgpack-cli-x2p85\src\MsgPack\obj\Release\net46\MsgPack.pdb0w source: RazerInstaller.exe
Source: Binary string: D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Services\Kinesis\obj\AWSSDK.Kinesis.Net45\Release\net45\AWSSDK.Kinesis.pdbSHA256 source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Kinesis.dll
Source: Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: api-ms-win-crt-stdio-l1-1-0.dll
Source: Binary string: c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Core\obj\Release\Microsoft.WindowsAPICodePack.pdb source: RazerInstaller.exe
Source: Binary string: C:\Kat\source_git\synapse3_tools\BLEConnect\Release\BLEConnectWrapper.pdb source: BLEConnectWrapper.dll
Source: Binary string: api-ms-win-core-heap-l1-1-0.pdb source: api-ms-win-core-heap-l1-1-0.dll
Source: Binary string: C:\Kat\source_git\synapse3_tools\BLEConnect\BLEConnect\obj\Release\BLEConnect.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E97000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4633981753.000000000A6C2000.00000002.00000001.01000000.0000001B.sdmp, BLEConnect.dll
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.UnityExtensions\obj\Release\Microsoft.Practices.Prism.UnityExtensions.pdb source: RazerInstaller.exe
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\SafeExtractor\Release\SafeExtractor.pdb source: RazerSynapseInstaller_V1.19.0.635.exe
Source: Binary string: api-ms-win-core-util-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002CB9000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002CA6000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-core-util-l1-1-0.dll
Source: Binary string: api-ms-win-core-synch-l1-1-0.pdb source: api-ms-win-core-synch-l1-1-0.dll
Source: Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: api-ms-win-crt-environment-l1-1-0.dll
Source: Binary string: vcruntime140.i386.pdbGCTL source: RazerInstaller.exe, 00000004.00000002.4679384728.00000000698D1000.00000020.00000001.01000000.00000014.sdmp, vcruntime140.dll.tmp.3.dr
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\InstallerCleaner\obj\Release\RazerInstallerCleaner.pdb source: Razer.RazerInstallerCommon.dll
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.Interactivity\obj\Release\Microsoft.Practices.Prism.Interactivity.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: api-ms-win-core-errorhandling-l1-1-0.dll
Source: Binary string: /_/src/NLog/obj/Release/net46/NLog.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.00000000029CB000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.00000000029B1000.00000004.00000800.00020000.00000000.sdmp, NLog.dll
Source: Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: api-ms-win-core-processthreads-l1-1-0.dll
Source: Binary string: api-ms-win-core-console-l1-1-0.pdb source: api-ms-win-core-console-l1-1-0.dll
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.Interactivity\obj\Release\Microsoft.Practices.Prism.Interactivity.pdbh<~< p<_CorDllMainmscoree.dll source: RazerInstaller.exe
Source: Binary string: e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-crt-private-l1-1-0.pdb source: api-ms-win-crt-private-l1-1-0.dll
Source: Binary string: api-ms-win-core-file-l1-1-0.pdb source: api-ms-win-core-file-l1-1-0.dll
Source: Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: api-ms-win-crt-convert-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\DetectManagerWrapper\bin\Razer.DetectManagerWrapper.pdb$$ source: Razer.DetectManagerWrapper.dll
Source: Binary string: C:\Dev\LightweightInstaller\3rd Party\DotNetZip\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb source: RazerInstaller.exe
Source: Binary string: msvcp140.i386.pdb source: RazerInstaller.exe, 00000004.00000002.4678592386.0000000069861000.00000020.00000001.01000000.00000015.sdmp, msvcp140.dll.tmp.3.dr
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.UnityExtensions\obj\Release\Microsoft.Practices.Prism.UnityExtensions.pdb|[ source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-profile-l1-1-0.pdb source: api-ms-win-core-profile-l1-1-0.dll
Source: Binary string: c:\tfs\EL\V5-SL\UnityTemp\Compile\Unity\Unity.Configuration\Src\obj\Release\Microsoft.Practices.Unity.Configuration.pdb source: RazerInstaller.exe
Source: Binary string: c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Shell\obj\Release\Microsoft.WindowsAPICodePack.Shell.pdbpZ source: RazerInstaller.exe
Source: Binary string: api-ms-win-crt-time-l1-1-0.pdb source: api-ms-win-crt-time-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\RazerInstallerApp\obj\x86\Release\RazerInstaller.pdb source: RazerInstaller.exe
Source: Binary string: C:\Kat\source_git\driver3\RzMiddleWare\Release\rzS3detmgr.pdb__/ source: RazerInstaller.exe, 00000004.00000002.4678258175.000000006926D000.00000002.00000001.01000000.00000017.sdmp, rzS3detmgr.dll.tmp.3.dr
Source: Binary string: api-ms-win-core-handle-l1-1-0.pdb source: api-ms-win-core-handle-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\RazerInstallerCommon\obj\x86\Release\Razer.RazerInstallerCommon.pdb source: Razer.RazerInstallerCommon.dll
Source: Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdbSHA256 source: RazerInstaller.exe
Source: Binary string: C:\projects\msgpack-cli-x2p85\src\MsgPack\obj\Release\net46\MsgPack.pdb source: RazerInstaller.exe
Source: Binary string: c:\Code\Codeplex\Bootstrapper\Core\Bootstrapper\obj\Release\Bootstrapper.pdb source: RazerInstaller.exe
Source: Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb source: RazerInstaller.exe
Source: Binary string: c:\Code\Codeplex\Bootstrapper\Extensions\Bootstrapper.Unity\obj\Release\Bootstrapper.UnityExtension.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-synch-l1-2-0.pdb source: api-ms-win-core-synch-l1-2-0.dll
Source: Binary string: c:\Code\Codeplex\Bootstrapper\Core\Bootstrapper\obj\Release\Bootstrapper.pdbt source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: api-ms-win-core-processenvironment-l1-1-0.dll
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism\obj\Release\Microsoft.Practices.Prism.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: api-ms-win-core-datetime-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\Natasha_Master\Updater\UpdateUtility\obj\x86\Release\UpdateUtility.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002CC1000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002CD3000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-crt-conio-l1-1-0.dll
Source: Binary string: api-ms-win-crt-math-l1-1-0.pdb source: api-ms-win-crt-math-l1-1-0.dll
Source: Binary string: api-ms-win-core-localization-l1-2-0.pdb source: api-ms-win-core-localization-l1-2-0.dll
Source: Binary string: C:\Kat\source_git\driver3\RzMiddleWare\Release\rzS3detgmr_CWrapper.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002A62000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002A75000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Core\obj\Release\Microsoft.WindowsAPICodePack.pdb, source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: api-ms-win-core-processthreads-l1-1-1.dll
Source: Binary string: c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Shell\obj\Release\Microsoft.WindowsAPICodePack.Shell.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: api-ms-win-core-namedpipe-l1-1-0.dll
Source: Binary string: api-ms-win-crt-multibyte-l1-1-0.pdb source: api-ms-win-crt-multibyte-l1-1-0.dll
Source: Binary string: vcruntime140.i386.pdb source: RazerInstaller.exe, 00000004.00000002.4679384728.00000000698D1000.00000020.00000001.01000000.00000014.sdmp, vcruntime140.dll.tmp.3.dr
Source: Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: api-ms-win-crt-utility-l1-1-0.dll
Source: Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: api-ms-win-core-rtlsupport-l1-1-0.dll
Source: Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002C9E000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002C8C000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-core-timezone-l1-1-0.dll
Source: Binary string: api-ms-win-core-string-l1-1-0.pdb source: api-ms-win-core-string-l1-1-0.dll
Source: Binary string: msvcp140.i386.pdbGCTL source: RazerInstaller.exe, 00000004.00000002.4678592386.0000000069861000.00000020.00000001.01000000.00000015.sdmp, msvcp140.dll.tmp.3.dr
Source: Binary string: C:\Kat\source_git\synapse3_tools\BLEConnect\Release\BLEConnectWrapper.pdb%% source: BLEConnectWrapper.dll
Source: Binary string: api-ms-win-core-file-l2-1-0.pdb source: api-ms-win-core-file-l2-1-0.dll
Source: Binary string: api-ms-win-crt-process-l1-1-0.pdb source: api-ms-win-crt-process-l1-1-0.dll
Source: Binary string: C:\Kat\source_git\driver3\RzMiddleWare\Release\rzS3detmgr.pdb source: RazerInstaller.exe, 00000004.00000002.4678258175.000000006926D000.00000002.00000001.01000000.00000017.sdmp, rzS3detmgr.dll.tmp.3.dr
Source: Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: api-ms-win-core-libraryloader-l1-1-0.dll
Source: Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.pdb source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C4FA000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Core\obj\AWSSDK.Core.Net45\Release\net45\AWSSDK.Core.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E4D000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll
Source: Binary string: c:\tfs\EL\V5-SL\UnityTemp\Compile\Unity\Unity\Src\obj\Release\Microsoft.Practices.Unity.pdb source: RazerInstaller.exe
Source: Binary string: c:\Projects\CommonServiceLocator\main\Microsoft.Practices.ServiceLocation.PortableClassLibrary\obj\Release\Microsoft.Practices.ServiceLocation.pdb source: RazerInstaller.exe
Source: Binary string: concrt140.i386.pdb source: concrt140.dll
Source: Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: api-ms-win-core-interlocked-l1-1-0.dll
Source: Binary string: /_/src/NLog/obj/Release/net46/NLog.pdbSHA256OY source: RazerInstaller.exe, 00000003.00000002.4606359057.00000000029CB000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.00000000029B1000.00000004.00000800.00020000.00000000.sdmp, NLog.dll
Source: Binary string: D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Core\obj\AWSSDK.Core.Net45\Release\net45\AWSSDK.Core.pdbSHA256 source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E4D000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll
Source: Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.pdb( source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C4FA000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\RazerInstallerApp\obj\x86\Release\RazerInstaller.pdbT source: RazerInstaller.exe
Source: Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: api-ms-win-crt-heap-l1-1-0.dll
Source: Binary string: api-ms-win-crt-string-l1-1-0.pdb source: api-ms-win-crt-string-l1-1-0.dll
HTTP GET or POST without a user agent
Source: global traffic HTTP traffic detected: POST /sts HTTP/1.1X-Api-Key: ihkodRTss344zqhvkmORG29dNmgEIgJIaCn5DvbYauthorizationToken: RZR_0000000000000000000000000000Content-Type: application/json; charset=utf-8Host: u05srooyhc.execute-api.us-east-1.amazonaws.comContent-Length: 50Expect: 100-continueConnection: Keep-Alive
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002B19000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002BA9000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002B21000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.facebook.com/razer equals www.facebook.com (Facebook)
Source: global traffic DNS traffic detected: DNS query: u05srooyhc.execute-api.us-east-1.amazonaws.com
Source: global traffic DNS traffic detected: DNS query: discovery.razerapi.com
Source: global traffic DNS traffic detected: DNS query: synapse-3-webservice.razerzone.com
Source: global traffic DNS traffic detected: DNS query: manifest.razerapi.com
Source: global traffic DNS traffic detected: DNS query: cdn.razersynapse.com
Source: global traffic DNS traffic detected: DNS query: assets.razerzone.com
Source: global traffic DNS traffic detected: DNS query: assets2.razerzone.com
Source: global traffic DNS traffic detected: DNS query: deals-assets-cdn.razerzone.com
Source: unknown HTTP traffic detected: POST /sts HTTP/1.1X-Api-Key: ihkodRTss344zqhvkmORG29dNmgEIgJIaCn5DvbYauthorizationToken: RZR_0000000000000000000000000000Content-Type: application/json; charset=utf-8Host: u05srooyhc.execute-api.us-east-1.amazonaws.comContent-Length: 50Expect: 100-continueConnection: Keep-Alive
Source: RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll String found in binary or memory: http://169.254.169.254
Source: RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll String found in binary or memory: http://169.254.170.2
Source: RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll String found in binary or memory: http://169.254.170.2aUnable
Source: RazerInstaller.exe, 00000003.00000000.2132113852.0000000000552000.00000002.00000001.01000000.00000005.sdmp, RazerSynapseInstaller_V1.19.0.635.exe, RazerInstaller.exe.0.dr String found in binary or memory: http://DotNetZip.codeplex.com/
Source: RazerInstaller.exe, 00000004.00000002.4652946911.000000000DD7D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://a1958.d.akamai.net
Source: RazerInstaller.exe, 00000004.00000002.4652946911.000000000DD7D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://a1958.d.akamai.netd
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://assets.razerzone.com/eeimages/categories/14594/razer-gaming-softwares-category-comms-usp.png
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://assets.razerzone.com/eeimages/categories/14594/razer-gaming-softwares-category-gamebooster-us
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://assets.razerzone.com/eeimages/products/17531/940x573-01-02.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets.razerzone.com/images/software/lwi/LWI-SophiePro-1.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets.razerzone.com/images/software/lwi/LWI-SophiePro-4.pngH
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets.razerzone.com/images/software/lwi/LWI-SophiePro-5.pngH
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets.razerzone.com/images/software/lwi/LWI-SophiePro-6.png
Source: RazerInstaller.exe, 00000004.00000002.4652946911.000000000DD7D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000069C4000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com/images/razer-synapse/dark_chroma_studio.png
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C708000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com/images/razer-synapse/dark_macros.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com/images/razer-synapse/dark_macros.pnghXM
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com/images/razer-synapse/lifestyle_chroma_studio.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com/images/razer-synapse/lifestyle_macros.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000029E1000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com/images/razer-synapse/lifestyle_macros.png):
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com/images/razer-synapse/light_chroma_studio.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.com/images/razer-synapse/light_macros.png
Source: RazerInstaller.exe, 00000004.00000002.4652946911.000000000DD7D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://assets2.razerzone.comd
Source: RazerInstaller.exe String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: RazerInstaller.exe String found in binary or memory: http://cacerts.digicert.com/DigiCertCSRSA4096RootG5.crt0E
Source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E4D000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Core.dll, AWSSDK.Kinesis.dll String found in binary or memory: http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0K
Source: RazerInstaller.exe String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: RazerInstaller.exe String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: RazerInstaller.exe String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: RazerInstaller.exe String found in binary or memory: http://cacerts.digicert.com/NETFoundationProjectsCodeSigningCA2.crt0
Source: RazerInstaller.exe String found in binary or memory: http://compositewpf.codeplex.com/
Source: RazerInstaller.exe String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: RazerInstaller.exe String found in binary or memory: http://crl3.digicert.com/DigiCertCSRSA4096RootG5.crl0
Source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E4D000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Core.dll, AWSSDK.Kinesis.dll String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: RazerInstaller.exe String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: RazerInstaller.exe String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: RazerInstaller.exe String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: RazerInstaller.exe String found in binary or memory: http://crl3.digicert.com/NETFoundationProjectsCodeSigningCA2.crl0F
Source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002EE6000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002ECC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://crl4.digice
Source: RazerInstaller.exe String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E4D000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Core.dll, AWSSDK.Kinesis.dll String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0=
Source: RazerInstaller.exe String found in binary or memory: http://crl4.digicert.com/NETFoundationProjectsCodeSigningCA2.crl0=
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000033B0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/Razer.RazerInstallerCommon;component/controls/showallmodule.xaml
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000033B0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://defaultcontainer/Razer.RazerInstallerCommon;component/controls/showallmodule.xamld
Source: AWSSDK.Core.dll String found in binary or memory: http://docs.aws.amazon.com/sdk-for-net/v3/developer-guide/net-dg-config-creds.html
Source: RazerInstaller.exe String found in binary or memory: http://james.newtonking.com/projects/json
Source: RazerInstaller.exe String found in binary or memory: http://logging.apache.org/log4net/release/faq.html#trouble-EventLog
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C611000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://microsoft.co
Source: NLog.dll String found in binary or memory: http://nlog-project.org/dummynamespace/
Source: RazerInstaller.exe String found in binary or memory: http://ocsp.digicert.com0
Source: RazerInstaller.exe String found in binary or memory: http://ocsp.digicert.com0A
Source: RazerInstaller.exe String found in binary or memory: http://ocsp.digicert.com0C
Source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E4D000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Core.dll, AWSSDK.Kinesis.dll String found in binary or memory: http://ocsp.digicert.com0I
Source: RazerInstaller.exe String found in binary or memory: http://ocsp.digicert.com0O
Source: RazerInstaller.exe String found in binary or memory: http://ocsp.digicert.com0X
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://razer.com/software
Source: RazerInstaller.exe String found in binary or memory: http://schemas.datacontract.org/2004/07/Razer.ActionService
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E4C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: NLog.dll String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000029E1000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://scripts.sil.org/OFL
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://scripts.sil.org/OFLCopyright
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://scripts.sil.org/OFLRazerF5Light
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://scripts.sil.org/OFLRazerF5LightItalic
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://scripts.sil.org/OFLRazerF5SemiBold
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://scripts.sil.org/OFLRazerF5SemiBoldItalic
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://scripts.sil.org/OFLRazerF5Thin
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://scripts.sil.org/OFLRazerF5ThinItalic
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0Roboto
Source: RazerInstaller.exe String found in binary or memory: http://www.codeplex.com/CompositeWPF
Source: RazerInstaller.exe String found in binary or memory: http://www.codeplex.com/DotNetZip
Source: RazerInstaller.exe String found in binary or memory: http://www.codeplex.com/prism
Source: RazerInstaller.exe String found in binary or memory: http://www.codeplex.com/prism#Microsoft.Practices.Prism.ViewModel
Source: RazerInstaller.exe String found in binary or memory: http://www.codeplex.com/prism:Microsoft.Practices.Prism.Interactivity.InteractionRequest
Source: RazerInstaller.exe String found in binary or memory: http://www.digicert.com/CPS0
Source: cpprest140_2_10.dll String found in binary or memory: http://www.openssl.org/support/faq.html
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.razer.com
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000029E1000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.razer.com/software$V
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://www.razer.com/sw-eula
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://www.razerzone.com
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://www.razerzone.com/comms
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://www.razerzone.com/cortex
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://www.razerzone.com/surround
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: http://www.razerzone.com/synapse
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: https://albedozero-staging.razerapi.com/password
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: https://albedozero.razerapi.com/datapipelineQhttps://albedozero.razerapi.com/passwordihttps://albedo
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000033B0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-SophiePro-0.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000033B0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-SophiePro-2.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-SophiePro-3.pngH
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000033B0000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.00000000029E1000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-SophiePro-4.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000033B0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-SophiePro-5.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4630661650.00000000068C8000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-chroma-connect.png
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000068C8000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-chroma-connect.png/N
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-chroma-connect.pngc
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C708000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/lwi/LWI-icon-hue.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4642066803.000000000C4DF000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/synapse/alexa.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/synapse/alexa.png4
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000069C4000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/synapse/alisha/alisha256.png
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000069C4000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets.razerzone.com/images/software/synapse/audio_visualizer.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000033B0000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.00000000029E1000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets2.razerzone.com
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C708000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets2.razerzone.com/images/razer-synapse/dark_synapse.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets2.razerzone.com/images/razer-synapse/light_synapse.png
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C7A2000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets2.razerzone.com/images/synapse/thxspatial.png
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C7A2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://assets2.razerzone.com/images/synapse/thxspatial.pngt
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://assets2.razerzone.com/images/synapse/virtualringlight.png
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C708000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://assets2.razerzone.com/images/synapse/virtualringlight.pngC
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C708000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://assets2.razerzone.com/images/synapse/virtualringlight.pngQ
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1660119346OLtIZnKORazerSynapseDependenciesSetup_v3.7.0830.1.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1676531804G7ekRXhnRzGMS_Setup_V2.3.160.119.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/169267812630qZkwjhRazerPhilipsHueSetup_v3.8.0831.082206.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1697631427Qv8gmMqvRazerAudioVisualizerSetup_v3.8.1030.101819.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1700202653705F2WD7StreamerCompanionAppSetup-v2.0.1.12.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1706004329lTqnjXKVRazerMacroSetup_v3.9.0131.012317.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1706157786vdp2jgQMRazerAlexaSetup_v3.9.0131.012511.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1713509834mVPLCvYPTHXSpatialAudioSetup-v2.0.1.15.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1713511449gj1UXRTEVirtualRingLight-v2.0.0.24.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1715844274QrwQ95olRazerCentral_v7.16.0.695.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1718863664EiZeyh8ZRazerChromaStudioSetup_v3.9.0630.062001.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1718868442PNDrFGTfRazerCentral_v7.16.0.695.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/171980599876BqtfYWRazerGameManager_3.7.0.482.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1721957254i4DoSkIvRazerSynapseConfigurationDataSetup_v3.9.0806.072600.e
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1721961508TRIMuqXZRazerChromaBroadcasterSetup_v3.9.0806.072610.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/17259615938LCcFYXuRazerCortexSetup_10.15.5.0.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1727968071MLoJOfqRRazerStringTranslationsSetup_v3.9.1008.100321.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1727968071vZepIZvHRazerSynapseSetup_v3.9.1008.100321.exe
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdn.razersynapse.com/1728994405oIYh2UhIRazerAxonSetup_1.7.3.0.exe
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000069C4000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/Cortex10/RazerCortex.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4642066803.000000000C815000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/RAZERAXON/AxonLWI00.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/RAZERAXON/RAZERAXONlogo.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/RAZERAXON/RAZERAXONlogo.pngEK
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000069C4000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/RAZERAXON/RAZERAXONlogo.pngb8
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000069C4000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/RAZERAXON/RAZERAXONlogo.pngf9
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C4FA000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/cortex_test_update/2018_Cortex_Booster_logo.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/cortex_test_update/cortex-white.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_CHS.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_CHT.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_FRN.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_GER.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_JPN.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_KOR.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_POB.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_RUS.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_SPN.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/880_500_US.webp
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/axon/LWI
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_CHS.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_CHT.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_FRN.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_GER.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_JPN.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_KOR.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_POB.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_RUS.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_RUS.pngIa
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_SPN.png
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://deals-assets-cdn.razerzone.com/download/lwi/cortex/880_500_US.png
Source: RazerInstaller.exe String found in binary or memory: https://discovery.razerapi.com:https://manifest.razerapi.com
Source: RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll String found in binary or memory: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#access_policies-json
Source: RazerInstaller.exe String found in binary or memory: https://ec.razer.com
Source: RazerInstaller.exe String found in binary or memory: https://github.com/JamesNK/Newtonsoft.Json
Source: NLog.dll String found in binary or memory: https://github.com/NLog/NLog.git
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: https://insider.razer.com
Source: RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll String found in binary or memory: https://ip-ranges.amazonaws.com/ip-ranges.json
Source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Kinesis.dll String found in binary or memory: https://kinesis.us-gov-east-1.amazonaws.com
Source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Kinesis.dll String found in binary or memory: https://kinesis.us-gov-west-1.amazonaws.com
Source: NLog.dll String found in binary or memory: https://nlog-project.org/
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://rzr.to/chroma-studio
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://rzr.to/chromahue
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://rzr.to/synapse3
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000069C4000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/
Source: RazerInstaller.exe, 00000004.00000002.4630661650.00000000069C4000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/7
Source: rzS3detmgr.log.4.dr String found in binary or memory: https://synapse-3-webservice.razerzone.com/AllSystems.json
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C522000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/AllSystems.json)
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C522000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/AllSystems.jsonY
Source: RazerInstaller.exe, 00000004.00000002.4678258175.000000006926D000.00000002.00000001.01000000.00000017.sdmp, rzS3detmgr.dll.tmp.3.dr String found in binary or memory: https://synapse-3-webservice.razerzone.com/DeleteUrlCacheEntryURLDownloadToFile
Source: rzS3detmgr.log.4.dr String found in binary or memory: https://synapse-3-webservice.razerzone.com/PatchExceptionalEID.json
Source: RazerInstaller.exe, 00000004.00000002.4630661650.000000000685F000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/PatchExceptionalEID.json4Ac
Source: RazerInstaller.exe, 00000004.00000002.4630661650.000000000685F000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/PatchExceptionalEID.jsonPAG
Source: RazerInstaller.exe, 00000004.00000002.4630661650.000000000685F000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/PatchExceptionalEID.jsonjB
Source: RazerInstaller.exe, 00000004.00000002.4630661650.000000000685F000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/PatchExceptionalEID.jsonvC
Source: rzS3detmgr.log.4.dr String found in binary or memory: https://synapse-3-webservice.razerzone.com/dockEID.json
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C737000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/dockEID.json1
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C737000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/dockEID.jsonR
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C737000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/dockEID.jsont
Source: rzS3detmgr.log.4.dr String found in binary or memory: https://synapse-3-webservice.razerzone.com/dongleV2.json
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C7A2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/dongleV2.json$
Source: rzS3detmgr.log.4.dr String found in binary or memory: https://synapse-3-webservice.razerzone.com/dummyProt.json
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C708000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/dummyProt.jsonG
Source: rzS3detmgr.log.4.dr String found in binary or memory: https://synapse-3-webservice.razerzone.com/systems.json
Source: RazerInstaller.exe, 00000004.00000002.4630661650.000000000685F000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/systems.json.E
Source: RazerInstaller.exe, 00000004.00000002.4630661650.000000000685F000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/systems.jsonQEG
Source: RazerInstaller.exe, 00000004.00000002.4630661650.000000000685F000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://synapse-3-webservice.razerzone.com/systems.jsonRD
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: https://twitter.com/intent/follow?screen_name=Razer
Source: Razer.RazerInstallerCommon.dll String found in binary or memory: https://u05srooyhc.execute-api.us-east-1.amazonaws.com/sts
Source: RazerInstaller.exe String found in binary or memory: https://www.newtonsoft.com/json
Source: RazerInstaller.exe String found in binary or memory: https://www.newtonsoft.com/jsonschema
Source: RazerInstaller.exe, 00000003.00000002.4606359057.00000000029CB000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.00000000029B1000.00000004.00000800.00020000.00000000.sdmp, NLog.dll String found in binary or memory: https://www.nuget.org/packages/NLog.Web.AspNetCore
Source: RazerInstaller.exe String found in binary or memory: https://www.nuget.org/packages/Newtonsoft.Json.Bson
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/chroma
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/chroma-workshop/connected-devices
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002E89000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/chroma/alexa
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/cortex-redirect
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/sg-en/thx-spatial-audio
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/software/axon
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/software/razer-virtual-ring-light
Source: RazerInstaller.exe, 00000004.00000002.4607937158.00000000033B0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/synapse
Source: RazerInstaller.exe, 00000004.00000002.4607937158.0000000002ECF000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.razer.com/synapse-redirect
Source: unknown Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown HTTPS traffic detected: 99.86.4.106:443 -> 192.168.2.6:49715 version: TLS 1.2
Creates files inside the system directory
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe File created: C:\Windows\Installer\Razer Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe File created: C:\Windows\Installer\Razer\Installer Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe File created: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AllSystems.json.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-console-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-datetime-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-debug-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-errorhandling-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-2-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l2-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-handle-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-heap-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-interlocked-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-libraryloader-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-localization-l1-2-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-memory-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-namedpipe-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processenvironment-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-1.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-profile-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-rtlsupport-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-string-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-2-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-sysinfo-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-timezone-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-util-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-conio-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-convert-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-environment-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-filesystem-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-heap-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-locale-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-math-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-multibyte-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-private-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-process-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-runtime-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-stdio-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-string-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-time-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-utility-l1-1-0.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Core.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Kinesis.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnect.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnectWrapper.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\concrt140.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\cpprest140_2_10.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\dockEID.json.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\dongle.json.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\dongleV2.json.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\dummyProt.json.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\InstallerConfiguration.xml.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\msvcp140.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\NLog.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\PatchExceptionalEID.json.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.RazerInstallerCommon.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe.config.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detgmr_CWrapper.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detmgr.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\systems.json.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ucrtbase.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vccorlib140.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vcruntime140.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\de-DE Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\de-DE\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\es-ES Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\es-ES\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\fr-FR Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\fr-FR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ja-JP Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ja-JP\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ko-KR Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ko-KR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\pt-BR Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\pt-BR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ru-RU Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ru-RU\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHS Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHS\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHT Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHT\Razer.RazerInstallerCommon.resources.dll.tmp Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Log Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Log\rzS3detmgr.log Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\78498da289014bf19c6ae6e636578e4b_Synapse-Installer@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\afd837b0edb88795d2d19e7f7741d46e_Mouse-1-customize@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\b49e947b3bd8ca45f28ff10684b85569_Mouse-2-customize@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\cd208777e3a41c4806276a90824306ac_Mouse-3-customize@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\7492f287df3f07064c6999c1a0474b96_Mouse-4-customize@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\dc3d489d95fd04ae0278c4c559287c65_Mouse-5-customize@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\1f6bb98571bb6d014a3310426e4bc40d_Mouse-6-customize@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\20deaa463cf012355d39684aeabde199_light_synapse.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\3140d624792d0f04d02efffcc88ea3ab_dark_synapse.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\c47c6f72b0eb574a9ead57257a613d44_LWI-Alisha1.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\847e43fe011694060f49ca148ebe77f3_LWI-Alisha2.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\a6a8ab87779f3b131679289a63f21a91_LWI-Alisha3.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\88cf9acec89f44de523bae98a788864c_LWI-Alisha4.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\17996a81108fcd78445459db3355ae93_alisha256.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\cb7cc25508f123af324b6fc99e28aa71_alexa-2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\90cea53a9e729f143e3f017f087f9559_alexa.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\4e9512ed0ddf959ad181958f4533bca2_audio_visualizer.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\42338f87a17534cce39b8c6b0e69eb61_ChromaConnect-2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\a2d451068c2275431e4f327476861009_LWI-chroma-connect.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\424b96b895c38a661a0707487f06489e_Dark_Hue@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\ef04b9e0ce1d81b72ccc5346252f5c6e_LWI-icon-hue.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\dc3d489d95fd04ae0278c4c559287c65_macro-dark@2x.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\05b34d432336dbcf6ea0764da372603d_light_macros.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\33e43f4e93382bf68e254b86d08362de_dark_macros.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\6aeeee0f40118daff6219b7498284665_RazerCortex.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\f8c32623ccce9d03a00257b2dd7a7312_UniversalLauncher.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\f3a246fec45b5c3e594a917cf91e1be4_BoosterPrime.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\3c10c6457b0958e8d6cc1bfd4255fd31_GameBooster.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\3eb94c6867b24b25995491da2b5b5536_SystemBooster.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\6f8f3193d4fbdf128e65edd124a89bb7_GameDeals.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\10ef167e3fc4673a19329cfe059963d9_Rewards.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\cdb5dabe83b269c79ffa33d151a866c6_2018_Cortex_Booster_logo.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\d5ca164e824fabfbcdb060c913bdef2e_cortex-white.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\5f6ca8f479fe71fd77046e5799edf7a9_LWI-Natalie-0.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\ce49f7233531adb107a6808f83ca9eca_LWI-Natalie-1.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\45c30ef5c308822699a6815023c81281_LWI-Natalie-2.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\cadb6e52441bad05d8d3cb09f850940f_virtualringlight.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\d213d4ba8f28ea5806e21e946e9cd2ec_AxonLWI00.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\d57623940cc13a0bddb2963d052a7c3f_AxonLWI01.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\f1706ee93dc7f7beccf0ac4274789d39_AxonLWI02.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\29da985a8261988461157579b673aa3d_RAZERAXONlogo.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\8e859396a7087d1d842e18f64b7edccd_LWI-SophiePro-0.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\f626abb1339220fca14dd5a9c50f16fc_LWI-SophiePro-2.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\ccb980f0b6e697452cf96f8cb749943c_LWI-SophiePro-4.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\d5192477f6eb19de78369f83dd10a76d_LWI-SophiePro-5.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\d558eb30bf6c4423cd8827c1c39fd4e9_LWI-SophiePro-3.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\233df7636041add6d59c18f6037680e6_LWI-SophiePro-1.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\5963643b12004933f6e785fec303d18c_LWI-SophiePro-6.png Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ImageCache\d164304821b78086c309565b3124f039_thxspatial.png Jump to behavior
PE file contains executable resources (Code or Archives)
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
PE file does not import any functions
Source: api-ms-win-crt-heap-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-convert-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l1-2-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-debug-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-localization-l1-2-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-namedpipe-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-handle-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-heap-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-processthreads-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-stdio-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-libraryloader-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-filesystem-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-rtlsupport-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-datetime-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-errorhandling-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-runtime-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-private-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-string-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-math-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-sysinfo-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l2-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-conio-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-memory-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-timezone-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-time-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-synch-l1-2-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-profile-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-processthreads-l1-1-1.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-multibyte-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-synch-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-console-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-environment-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-utility-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-processenvironment-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-process-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-interlocked-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-locale-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-crt-string-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Source: api-ms-win-core-util-l1-1-0.dll.tmp.3.dr Static PE information: No import functions for PE file found
Sample file is different than original file name gathered from version info
Source: RazerSynapseInstaller_V1.19.0.635.exe Binary or memory string: OriginalFilenameIonic.Zip.dllD vs RazerSynapseInstaller_V1.19.0.635.exe
Source: RazerSynapseInstaller_V1.19.0.635.exe Binary or memory string: OriginalFilenameIonic.Zip-2024Jun14-053505-f095d781-592e-43b0-a915-a9a0a112c1ce.exe@ vs RazerSynapseInstaller_V1.19.0.635.exe
Source: RazerSynapseInstaller_V1.19.0.635.exe Binary or memory string: OriginalFilenameRazer Installer.exe@ vs RazerSynapseInstaller_V1.19.0.635.exe
Uses 32bit PE files
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: classification engine Classification label: sus24.evad.winEXE@6/236@24/1
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\systems[1].json Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Mutant created: NULL
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Mutant created: \Sessions\1\BaseNamedObjects\C__ProgramData_Razer_Installer_Logs_RazerInstaller-cb19c464-e8c4-429d-93f5-55093fee4228.log_rolling
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Mutant created: \Sessions\1\BaseNamedObjects\C__ProgramData_Razer_Installer_Logs_RazerInstaller.log_rolling
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3320:120:WilError_03
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\Users\user\AppData\Local\Temp\aheaoouz.1dc.xml Jump to behavior
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: RazerSynapseInstaller_V1.19.0.635.exe Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 50.01%
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File read: C:\Users\user\Desktop\desktop.ini Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: RazerInstaller.exe String found in binary or memory: /Adding UnityBootstrapperExtension to container.
Source: RazerInstaller.exe String found in binary or memory: M{72FC5BA4-24F9-4011-9F3F-ADD27AFAD818}
Source: RazerInstaller.exe String found in binary or memory: Setting [#] additivity to [/Adding appender named [
Source: unknown Process created: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe "C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe"
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Process created: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe C:\Windows\Installer\Razer\Installer\RazerInstaller.exe
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe "C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe"
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Process created: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe "C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe" Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: version.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: amsi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: edputil.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: windows.staterepositoryps.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: appresolver.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: bcp47langs.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: slc.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: sppc.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Section loaded: onecoreuapcommonproxystub.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: version.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: msvcp140_clr0400.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: amsi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: windowscodecs.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: d3d9.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: d3d10warp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dataexchange.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: resourcepolicyclient.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dxcore.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: msctfui.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: uiautomationcore.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: napinsp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: pnrpnsp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: wshbth.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: nlaapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: winrnr.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: rasapi32.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: rasman.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: rtutils.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: vcruntime140.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: msvcp140.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: sxs.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: explorerframe.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: d3dcompiler_47.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: rzs3detmgr.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: hid.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: cpprest140_2_10.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: bleconnectwrapper.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: httpapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: concrt140.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: windows.applicationmodel.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: atlthunk.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: wbemcomn.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: devobj.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: mscms.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: coloradapterclient.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: windowscodecsext.dll Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Section loaded: icm32.dll Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32 Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll Jump to behavior
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: certificate valid
Source: RazerSynapseInstaller_V1.19.0.635.exe Static file information: File size 8537864 > 1048576
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x7ea200
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002D45000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002D57000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-crt-locale-l1-1-0.dll
Source: Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002DC9000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002DDC000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-crt-runtime-l1-1-0.dll
Source: Binary string: api-ms-win-core-file-l1-2-0.pdb source: api-ms-win-core-file-l1-2-0.dll
Source: Binary string: api-ms-win-core-memory-l1-1-0.pdb source: api-ms-win-core-memory-l1-1-0.dll
Source: Binary string: D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Services\Kinesis\obj\AWSSDK.Kinesis.Net45\Release\net45\AWSSDK.Kinesis.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Kinesis.dll
Source: Binary string: concrt140.i386.pdbGCTL source: concrt140.dll
Source: Binary string: api-ms-win-core-debug-l1-1-0.pdb source: api-ms-win-core-debug-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\DetectManagerWrapper\bin\Razer.DetectManagerWrapper.pdb source: Razer.DetectManagerWrapper.dll
Source: Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002C72000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002C84000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-core-sysinfo-l1-1-0.dll
Source: Binary string: C:\Users\shikang.neoh\Desktop\cpprestsdk-master\Binaries\Win32\Release\cpprest140_2_10.pdb source: cpprest140_2_10.dll
Source: Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: api-ms-win-crt-filesystem-l1-1-0.dll
Source: Binary string: C:\projects\msgpack-cli-x2p85\src\MsgPack\obj\Release\net46\MsgPack.pdb0w source: RazerInstaller.exe
Source: Binary string: D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Services\Kinesis\obj\AWSSDK.Kinesis.Net45\Release\net45\AWSSDK.Kinesis.pdbSHA256 source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, AWSSDK.Kinesis.dll
Source: Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: api-ms-win-crt-stdio-l1-1-0.dll
Source: Binary string: c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Core\obj\Release\Microsoft.WindowsAPICodePack.pdb source: RazerInstaller.exe
Source: Binary string: C:\Kat\source_git\synapse3_tools\BLEConnect\Release\BLEConnectWrapper.pdb source: BLEConnectWrapper.dll
Source: Binary string: api-ms-win-core-heap-l1-1-0.pdb source: api-ms-win-core-heap-l1-1-0.dll
Source: Binary string: C:\Kat\source_git\synapse3_tools\BLEConnect\BLEConnect\obj\Release\BLEConnect.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E97000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4633981753.000000000A6C2000.00000002.00000001.01000000.0000001B.sdmp, BLEConnect.dll
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.UnityExtensions\obj\Release\Microsoft.Practices.Prism.UnityExtensions.pdb source: RazerInstaller.exe
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\SafeExtractor\Release\SafeExtractor.pdb source: RazerSynapseInstaller_V1.19.0.635.exe
Source: Binary string: api-ms-win-core-util-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002CB9000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002CA6000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-core-util-l1-1-0.dll
Source: Binary string: api-ms-win-core-synch-l1-1-0.pdb source: api-ms-win-core-synch-l1-1-0.dll
Source: Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: api-ms-win-crt-environment-l1-1-0.dll
Source: Binary string: vcruntime140.i386.pdbGCTL source: RazerInstaller.exe, 00000004.00000002.4679384728.00000000698D1000.00000020.00000001.01000000.00000014.sdmp, vcruntime140.dll.tmp.3.dr
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\InstallerCleaner\obj\Release\RazerInstallerCleaner.pdb source: Razer.RazerInstallerCommon.dll
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.Interactivity\obj\Release\Microsoft.Practices.Prism.Interactivity.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: api-ms-win-core-errorhandling-l1-1-0.dll
Source: Binary string: /_/src/NLog/obj/Release/net46/NLog.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.00000000029CB000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.00000000029B1000.00000004.00000800.00020000.00000000.sdmp, NLog.dll
Source: Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: api-ms-win-core-processthreads-l1-1-0.dll
Source: Binary string: api-ms-win-core-console-l1-1-0.pdb source: api-ms-win-core-console-l1-1-0.dll
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.Interactivity\obj\Release\Microsoft.Practices.Prism.Interactivity.pdbh<~< p<_CorDllMainmscoree.dll source: RazerInstaller.exe
Source: Binary string: e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-crt-private-l1-1-0.pdb source: api-ms-win-crt-private-l1-1-0.dll
Source: Binary string: api-ms-win-core-file-l1-1-0.pdb source: api-ms-win-core-file-l1-1-0.dll
Source: Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: api-ms-win-crt-convert-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\DetectManagerWrapper\bin\Razer.DetectManagerWrapper.pdb$$ source: Razer.DetectManagerWrapper.dll
Source: Binary string: C:\Dev\LightweightInstaller\3rd Party\DotNetZip\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb source: RazerInstaller.exe
Source: Binary string: msvcp140.i386.pdb source: RazerInstaller.exe, 00000004.00000002.4678592386.0000000069861000.00000020.00000001.01000000.00000015.sdmp, msvcp140.dll.tmp.3.dr
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism.UnityExtensions\obj\Release\Microsoft.Practices.Prism.UnityExtensions.pdb|[ source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-profile-l1-1-0.pdb source: api-ms-win-core-profile-l1-1-0.dll
Source: Binary string: c:\tfs\EL\V5-SL\UnityTemp\Compile\Unity\Unity.Configuration\Src\obj\Release\Microsoft.Practices.Unity.Configuration.pdb source: RazerInstaller.exe
Source: Binary string: c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Shell\obj\Release\Microsoft.WindowsAPICodePack.Shell.pdbpZ source: RazerInstaller.exe
Source: Binary string: api-ms-win-crt-time-l1-1-0.pdb source: api-ms-win-crt-time-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\RazerInstallerApp\obj\x86\Release\RazerInstaller.pdb source: RazerInstaller.exe
Source: Binary string: C:\Kat\source_git\driver3\RzMiddleWare\Release\rzS3detmgr.pdb__/ source: RazerInstaller.exe, 00000004.00000002.4678258175.000000006926D000.00000002.00000001.01000000.00000017.sdmp, rzS3detmgr.dll.tmp.3.dr
Source: Binary string: api-ms-win-core-handle-l1-1-0.pdb source: api-ms-win-core-handle-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\RazerInstallerCommon\obj\x86\Release\Razer.RazerInstallerCommon.pdb source: Razer.RazerInstallerCommon.dll
Source: Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdbSHA256 source: RazerInstaller.exe
Source: Binary string: C:\projects\msgpack-cli-x2p85\src\MsgPack\obj\Release\net46\MsgPack.pdb source: RazerInstaller.exe
Source: Binary string: c:\Code\Codeplex\Bootstrapper\Core\Bootstrapper\obj\Release\Bootstrapper.pdb source: RazerInstaller.exe
Source: Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb source: RazerInstaller.exe
Source: Binary string: c:\Code\Codeplex\Bootstrapper\Extensions\Bootstrapper.Unity\obj\Release\Bootstrapper.UnityExtension.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-synch-l1-2-0.pdb source: api-ms-win-core-synch-l1-2-0.dll
Source: Binary string: c:\Code\Codeplex\Bootstrapper\Core\Bootstrapper\obj\Release\Bootstrapper.pdbt source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: api-ms-win-core-processenvironment-l1-1-0.dll
Source: Binary string: c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism\obj\Release\Microsoft.Practices.Prism.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: api-ms-win-core-datetime-l1-1-0.dll
Source: Binary string: C:\jenkins\workspace\CommonTools\Natasha_Master\Updater\UpdateUtility\obj\x86\Release\UpdateUtility.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002CC1000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002CD3000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-crt-conio-l1-1-0.dll
Source: Binary string: api-ms-win-crt-math-l1-1-0.pdb source: api-ms-win-crt-math-l1-1-0.dll
Source: Binary string: api-ms-win-core-localization-l1-2-0.pdb source: api-ms-win-core-localization-l1-2-0.dll
Source: Binary string: C:\Kat\source_git\driver3\RzMiddleWare\Release\rzS3detgmr_CWrapper.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002A62000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002A75000.00000004.00000800.00020000.00000000.sdmp
Source: Binary string: c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Core\obj\Release\Microsoft.WindowsAPICodePack.pdb, source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: api-ms-win-core-processthreads-l1-1-1.dll
Source: Binary string: c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Shell\obj\Release\Microsoft.WindowsAPICodePack.Shell.pdb source: RazerInstaller.exe
Source: Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: api-ms-win-core-namedpipe-l1-1-0.dll
Source: Binary string: api-ms-win-crt-multibyte-l1-1-0.pdb source: api-ms-win-crt-multibyte-l1-1-0.dll
Source: Binary string: vcruntime140.i386.pdb source: RazerInstaller.exe, 00000004.00000002.4679384728.00000000698D1000.00000020.00000001.01000000.00000014.sdmp, vcruntime140.dll.tmp.3.dr
Source: Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: api-ms-win-crt-utility-l1-1-0.dll
Source: Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: api-ms-win-core-rtlsupport-l1-1-0.dll
Source: Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002C9E000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002C8C000.00000004.00000800.00020000.00000000.sdmp, api-ms-win-core-timezone-l1-1-0.dll
Source: Binary string: api-ms-win-core-string-l1-1-0.pdb source: api-ms-win-core-string-l1-1-0.dll
Source: Binary string: msvcp140.i386.pdbGCTL source: RazerInstaller.exe, 00000004.00000002.4678592386.0000000069861000.00000020.00000001.01000000.00000015.sdmp, msvcp140.dll.tmp.3.dr
Source: Binary string: C:\Kat\source_git\synapse3_tools\BLEConnect\Release\BLEConnectWrapper.pdb%% source: BLEConnectWrapper.dll
Source: Binary string: api-ms-win-core-file-l2-1-0.pdb source: api-ms-win-core-file-l2-1-0.dll
Source: Binary string: api-ms-win-crt-process-l1-1-0.pdb source: api-ms-win-crt-process-l1-1-0.dll
Source: Binary string: C:\Kat\source_git\driver3\RzMiddleWare\Release\rzS3detmgr.pdb source: RazerInstaller.exe, 00000004.00000002.4678258175.000000006926D000.00000002.00000001.01000000.00000017.sdmp, rzS3detmgr.dll.tmp.3.dr
Source: Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: api-ms-win-core-libraryloader-l1-1-0.dll
Source: Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.pdb source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C4FA000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Core\obj\AWSSDK.Core.Net45\Release\net45\AWSSDK.Core.pdb source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E4D000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll
Source: Binary string: c:\tfs\EL\V5-SL\UnityTemp\Compile\Unity\Unity\Src\obj\Release\Microsoft.Practices.Unity.pdb source: RazerInstaller.exe
Source: Binary string: c:\Projects\CommonServiceLocator\main\Microsoft.Practices.ServiceLocation.PortableClassLibrary\obj\Release\Microsoft.Practices.ServiceLocation.pdb source: RazerInstaller.exe
Source: Binary string: concrt140.i386.pdb source: concrt140.dll
Source: Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: api-ms-win-core-interlocked-l1-1-0.dll
Source: Binary string: /_/src/NLog/obj/Release/net46/NLog.pdbSHA256OY source: RazerInstaller.exe, 00000003.00000002.4606359057.00000000029CB000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.00000000029B1000.00000004.00000800.00020000.00000000.sdmp, NLog.dll
Source: Binary string: D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Core\obj\AWSSDK.Core.Net45\Release\net45\AWSSDK.Core.pdbSHA256 source: RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E60000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000003.00000002.4606359057.0000000002E4D000.00000004.00000800.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4637824810.000000000BA32000.00000002.00000001.01000000.00000012.sdmp, AWSSDK.Core.dll
Source: Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.pdb( source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C4FA000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\RazerInstallerApp\obj\x86\Release\RazerInstaller.pdbT source: RazerInstaller.exe
Source: Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: api-ms-win-crt-heap-l1-1-0.dll
Source: Binary string: api-ms-win-crt-string-l1-1-0.pdb source: api-ms-win-crt-string-l1-1-0.dll
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: RazerSynapseInstaller_V1.19.0.635.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation
barindex
.NET source code contains potential unpacker
Source: RazerInstaller.exe.0.dr, CommandLineSelfExtractor.cs .Net Code: Resolver System.Reflection.Assembly.Load(byte[])
Binary contains a suspicious time stamp
Source: AWSSDK.Core.dll.tmp.3.dr Static PE information: 0xCACE5C57 [Wed Oct 27 00:54:47 2077 UTC]
PE file contains sections with non-standard names
Source: msvcp140.dll.tmp.3.dr Static PE information: section name: .didat
Source: RazerInstaller.exe.0.dr Static PE information: section name: .text entropy: 6.810903694263103

Persistence and Installation Behavior
barindex
Drops executables to the windows directory (C:\Windows) and starts them
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Executable created and started: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Jump to behavior
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe Executable created and started: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Jump to behavior
Drops PE files
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\de-DE\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detgmr_CWrapper.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Core.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-console-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\es-ES\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Kinesis.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHT\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-debug-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l2-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-libraryloader-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-datetime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-runtime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Core.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\pt-BR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-datetime-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnect.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-stdio-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vcruntime140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-memory-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detmgr.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-string-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-private-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\concrt140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\cpprest140_2_10.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-rtlsupport-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\es-ES\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ja-JP\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\cpprest140_2_10.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ru-RU\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-handle-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ja-JP\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processenvironment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHS\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnectWrapper.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\fr-FR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-conio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-namedpipe-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\NLog.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\concrt140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ko-KR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ko-KR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnect.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-time-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-namedpipe-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-convert-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detmgr.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-locale-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-errorhandling-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\de-DE\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ucrtbase.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-runtime-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-console-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-multibyte-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-time-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\msvcp140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-stdio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-heap-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-util-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-profile-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-handle-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-libraryloader-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHS\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ru-RU\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-errorhandling-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-sysinfo-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe File created: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-debug-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-sysinfo-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-timezone-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\NLog.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\fr-FR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHT\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-private-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vcruntime140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-heap-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ucrtbase.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processenvironment-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-utility-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detgmr_CWrapper.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-string-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.RazerInstallerCommon.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-convert-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-interlocked-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-util-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-timezone-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l2-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vccorlib140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-localization-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-rtlsupport-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-process-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-memory-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\pt-BR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-localization-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-environment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.RazerInstallerCommon.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-multibyte-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-1.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-utility-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vccorlib140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-profile-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\msvcp140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-conio-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-interlocked-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-math-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-process-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-environment-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnectWrapper.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-1.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-locale-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-filesystem-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-filesystem-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-math-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Kinesis.dll (copy) Jump to dropped file
Drops PE files to the windows directory (C:\Windows)
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\de-DE\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detgmr_CWrapper.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Core.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-console-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\es-ES\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Kinesis.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHT\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-debug-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l2-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-libraryloader-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-datetime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-runtime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Core.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\pt-BR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-datetime-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnect.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-stdio-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vcruntime140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-memory-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detmgr.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-string-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-private-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\concrt140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\cpprest140_2_10.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-rtlsupport-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\es-ES\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ja-JP\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\cpprest140_2_10.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ru-RU\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-handle-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ja-JP\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processenvironment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHS\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnectWrapper.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\fr-FR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-conio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-namedpipe-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\NLog.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\concrt140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ko-KR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ko-KR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnect.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-time-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-namedpipe-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-convert-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detmgr.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-locale-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-errorhandling-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\de-DE\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ucrtbase.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-runtime-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-console-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-multibyte-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-time-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\msvcp140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-stdio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-heap-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-util-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-profile-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-handle-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-libraryloader-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHS\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ru-RU\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-errorhandling-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-sysinfo-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\Desktop\RazerSynapseInstaller_V1.19.0.635.exe File created: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-debug-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-sysinfo-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-timezone-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\NLog.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\fr-FR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\zh-CHT\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-private-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vcruntime140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-heap-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\ucrtbase.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processenvironment-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-utility-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\rzS3detgmr_CWrapper.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-string-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.RazerInstallerCommon.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-convert-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-interlocked-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-util-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-timezone-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l2-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vccorlib140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-localization-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-rtlsupport-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-process-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-memory-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\pt-BR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-localization-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-environment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\Razer.RazerInstallerCommon.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-multibyte-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-1.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-utility-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\vccorlib140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-profile-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\msvcp140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-conio-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-interlocked-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-math-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-process-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-environment-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\BLEConnectWrapper.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-1.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-locale-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-filesystem-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-filesystem-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-math-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe File created: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Kinesis.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\ProgramData\Razer\Installer\Logs\RazerInstaller.log Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File created: C:\ProgramData\Razer\Installer\Logs\RazerInstaller-cb19c464-e8c4-429d-93f5-55093fee4228.log Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Allocates memory with a write watch (potentially for evading sandboxes)
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Memory allocated: D30000 memory reserve | memory write watch Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Memory allocated: 1A930000 memory reserve | memory write watch Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Memory allocated: E10000 memory reserve | memory write watch Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Memory allocated: 29E0000 memory reserve | memory write watch Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Memory allocated: 49E0000 memory reserve | memory write watch Jump to behavior
Contains long sleeps (>= 3 min)
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Window / User API: threadDelayed 3286 Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Window / User API: threadDelayed 6480 Jump to behavior
Found dropped PE file which has not been started or loaded
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\de-DE\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Core.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\rzS3detgmr_CWrapper.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-console-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\es-ES\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Kinesis.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\zh-CHT\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-debug-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l2-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-libraryloader-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-datetime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-runtime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Core.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\pt-BR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-datetime-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\BLEConnect.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-stdio-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-memory-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-string-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-private-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-rtlsupport-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\es-ES\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\ja-JP\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\ru-RU\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-handle-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\ja-JP\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processenvironment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\zh-CHS\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\fr-FR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-conio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-namedpipe-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\NLog.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\ko-KR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\ko-KR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\BLEConnect.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-time-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-namedpipe-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-convert-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-locale-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-errorhandling-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\de-DE\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-runtime-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-console-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-multibyte-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-time-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-stdio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-heap-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-util-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-profile-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-handle-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-libraryloader-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\zh-CHS\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\ru-RU\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-errorhandling-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-sysinfo-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-debug-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-timezone-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-sysinfo-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\NLog.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\fr-FR\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\zh-CHT\Razer.RazerInstallerCommon.resources.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-private-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-heap-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-utility-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processenvironment-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\rzS3detgmr_CWrapper.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-string-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\Razer.RazerInstallerCommon.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-convert-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-interlocked-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-util-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-timezone-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l2-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-localization-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\vccorlib140.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-rtlsupport-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-process-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-synch-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-memory-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\pt-BR\Razer.RazerInstallerCommon.resources.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-localization-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-environment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\Razer.RazerInstallerCommon.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-multibyte-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-1.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-utility-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\vccorlib140.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-profile-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-conio-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-interlocked-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-math-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-process-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-environment-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-processthreads-l1-1-1.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-locale-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-core-file-l1-2-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-filesystem-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-filesystem-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\api-ms-win-crt-math-l1-1-0.dll.tmp Jump to dropped file
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Dropped PE file which has not been started: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Kinesis.dll (copy) Jump to dropped file
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe TID: 5756 Thread sleep time: -922337203685477s >= -30000s Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe TID: 6432 Thread sleep time: -14757395258967632s >= -30000s Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe TID: 6432 Thread sleep time: -100000s >= -30000s Jump to behavior
Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystemProduct
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Thread delayed: delay time: 100000 Jump to behavior
Source: RazerInstaller.exe, 00000003.00000002.4603588893.0000000000BB7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: RazerInstaller.exe, 00000004.00000002.4642066803.000000000C506000.00000004.00000020.00020000.00000000.sdmp, RazerInstaller.exe, 00000004.00000002.4642066803.000000000C4FA000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW
Source: RazerInstaller.exe, 00000004.00000002.4603500780.0000000000B6B000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW@
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process information queried: ProcessInformation Jump to behavior
Enables debug privileges
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process token adjusted: Debug Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Process token adjusted: Debug
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Memory allocated: page read and write | page guard Jump to behavior
Creates a process in suspended mode (likely to inject code)
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Process created: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe "C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe" Jump to behavior
Queries the volume information (name, serial number etc) of a device
Source: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\RazerInstaller.exe VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\Razer.RazerInstallerCommon.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\AWSSDK.Core.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\Razer.DetectManagerWrapper.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemCore\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemCore.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\BLEConnectWrapper.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\BLEConnect.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\System32\WinMetadata\Windows.Devices.winmd VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\System32\WinMetadata\Windows.Foundation.winmd VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\78498da289014bf19c6ae6e636578e4b_Synapse-Installer@2x.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8DBD.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E1F.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E0D.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E1E.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E30.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8DFC.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E20.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E41.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E43.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E42.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E45.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8E44.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF9810.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPFEF37.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\78498da289014bf19c6ae6e636578e4b_Synapse-Installer@2x.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\78498da289014bf19c6ae6e636578e4b_Synapse-Installer@2x.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\78498da289014bf19c6ae6e636578e4b_Synapse-Installer@2x.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\6aeeee0f40118daff6219b7498284665_RazerCortex.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\78498da289014bf19c6ae6e636578e4b_Synapse-Installer@2x.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WPF8EA3.tmp VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\78498da289014bf19c6ae6e636578e4b_Synapse-Installer@2x.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\d213d4ba8f28ea5806e21e946e9cd2ec_AxonLWI00.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\78498da289014bf19c6ae6e636578e4b_Synapse-Installer@2x.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\d213d4ba8f28ea5806e21e946e9cd2ec_AxonLWI00.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Queries volume information: C:\Windows\Installer\Razer\Installer\App\ImageCache\d213d4ba8f28ea5806e21e946e9cd2ec_AxonLWI00.png VolumeInformation Jump to behavior
Source: C:\Windows\Installer\Razer\Installer\App\RazerInstaller.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1538470 Sample: RazerSynapseInstaller_V1.19... Startdate: 21/10/2024 Architecture: WINDOWS Score: 24 31 u05srooyhc.execute-api.us-east-1.amazonaws.com 2->31 33 synapse-3-webservice.razerzone.com 2->33 35 6 other IPs or domains 2->35 39 .NET source code contains potential unpacker 2->39 8 RazerSynapseInstaller_V1.19.0.635.exe 7 2->8         started        signatures3 process4 file5 21 C:\Windows\Installer\...\RazerInstaller.exe, PE32 8->21 dropped 41 Drops executables to the windows directory (C:\Windows) and starts them 8->41 12 RazerInstaller.exe 85 8->12         started        16 conhost.exe 8->16         started        signatures6 process7 file8 23 Razer.RazerInstall...n.resources.dll.tmp, PE32 12->23 dropped 25 Razer.RazerInstall...esources.dll (copy), PE32 12->25 dropped 27 Razer.RazerInstall...n.resources.dll.tmp, PE32 12->27 dropped 29 127 other files (none is malicious) 12->29 dropped 43 Drops executables to the windows directory (C:\Windows) and starts them 12->43 18 RazerInstaller.exe 15 112 12->18         started        signatures9 process10 dnsIp11 37 u05srooyhc.execute-api.us-east-1.amazonaws.com 99.86.4.106, 443, 49715 AMAZON-02US United States 18->37
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
99.86.4.106
 u05srooyhc.execute-api.us-east-1.amazonaws.com United States
16509 AMAZON-02US false

Contacted Domains

Name IP Active
u05srooyhc.execute-api.us-east-1.amazonaws.com 99.86.4.106 true
discovery.razerapi.com unknown unknown
manifest.razerapi.com unknown unknown
assets2.razerzone.com unknown unknown
synapse-3-webservice.razerzone.com unknown unknown
cdn.razersynapse.com unknown unknown
deals-assets-cdn.razerzone.com unknown unknown
assets.razerzone.com unknown unknown