Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Siggen35.51408

Added to the Dr.Web virus database: 2026-10-12

Virus description added:

Technical Information

To ensure autorun and distribution
Sets the following service settings
  • [HKLM\SYSTEM\CurrentControlSet\Services\VBoxUSBMon] 'ImagePath' = '%ProgramFiles%\usbipd-win\Drivers\VBoxUSBMon.sys'
  • [HKLM\SYSTEM\CurrentControlSet\Services\usbipd] 'Start' = '00000002'
  • [HKLM\SYSTEM\CurrentControlSet\Services\usbipd] 'ImagePath' = '"%ProgramFiles%\usbipd-win\usbipd.exe" server'
Creates the following services
  • 'VBoxUSBMon' %ProgramFiles%\usbipd-win\Drivers\VBoxUSBMon.sys
  • 'usbipd' C:\Program Files�sbipd-win�sbipd.exe" serve
Modifies file system
Creates the following files
  • %LOCALAPPDATA%\dinhlapmobile\bootstrap.log
  • %LOCALAPPDATA%\dinhlapmobile\launcher\launcher-d18-4052.tmp
  • %LOCALAPPDATA%\dinhlapmobile\launcher-errors.log
  • %HOMEPATH%\desktop\.dinhlap-eaa8d3ef96574490b9c383bd1fe207c5.tmp
  • %LOCALAPPDATA%\dinhlapmobile\tools\.download-5f6484a9fcc641a191b772964b3f0b50.tmp
  • %LOCALAPPDATA%\dinhlapmobile\tools\tool-cu\.download-d62fb37d8adb4866a55c16455eb5993d.tmp
  • %LOCALAPPDATA%\dinhlapmobile\bao-cao-b\nen-tang-b.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\app.exe
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\clretwrc.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\clrgc.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\clrgcexp.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\clrjit.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\copying.md
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\coreclr.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\createdump.exe
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\drivers\readme.md
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\drivers\vboxusb.cat
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\drivers\vboxusb.inf
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\drivers\vboxusb.sys
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\drivers\vboxusbmon.sys
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\hostfxr.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\hostpolicy.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.csharp.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.diasymreader.native.amd64.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.configuration.abstractions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.configuration.binder.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.configuration.commandline.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.configuration.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.configuration.environmentvariables.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.configuration.fileextensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.configuration.json.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.configuration.usersecrets.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.dependencyinjection.abstractions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.dependencyinjection.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.diagnostics.abstractions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.diagnostics.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.fileproviders.abstractions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.fileproviders.physical.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.filesystemglobbing.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.hosting.abstractions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.hosting.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.hosting.windowsservices.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.logging.abstractions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.logging.configuration.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.logging.console.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.logging.debug.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.logging.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.logging.eventlog.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.logging.eventsource.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.options.configurationextensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.options.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.extensions.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.visualbasic.core.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.visualbasic.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.win32.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.win32.registry.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\microsoft.windows.sdk.net.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\mscordaccore.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\mscordaccore_amd64_amd64_9.0.925.41916.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\mscordbi.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\mscorlib.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\mscorrc.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\msquic.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\netstandard.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.appcontext.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.buffers.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.collections.concurrent.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.collections.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.collections.immutable.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.collections.nongeneric.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.collections.specialized.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.commandline.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.componentmodel.annotations.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.componentmodel.dataannotations.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.componentmodel.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.componentmodel.eventbasedasync.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.componentmodel.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.componentmodel.typeconverter.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.configuration.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.console.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.core.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.data.common.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.data.datasetextensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.data.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.contracts.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.debug.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.diagnosticsource.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.eventlog.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.eventlog.messages.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.fileversioninfo.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.process.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.stacktrace.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.textwritertracelistener.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.tools.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.tracesource.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.diagnostics.tracing.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.drawing.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.drawing.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.dynamic.runtime.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.formats.asn1.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.formats.tar.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.globalization.calendars.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.globalization.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.globalization.extensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.compression.brotli.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.compression.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.compression.filesystem.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.compression.native.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.compression.zipfile.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.filesystem.accesscontrol.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.filesystem.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.filesystem.driveinfo.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.filesystem.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.filesystem.watcher.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.isolatedstorage.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.memorymappedfiles.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.pipelines.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.pipes.accesscontrol.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.pipes.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.io.unmanagedmemorystream.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.linq.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.linq.expressions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.linq.parallel.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.linq.queryable.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.memory.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.http.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.http.json.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.httplistener.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.mail.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.nameresolution.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.networkinformation.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.ping.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.quic.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.requests.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.security.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.servicepoint.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.sockets.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.webclient.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.webheadercollection.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.webproxy.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.websockets.client.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.net.websockets.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.numerics.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.numerics.vectors.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.objectmodel.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.private.corelib.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.private.datacontractserialization.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.private.uri.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.private.xml.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.private.xml.linq.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.dispatchproxy.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.emit.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.emit.ilgeneration.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.emit.lightweight.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.extensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.metadata.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.reflection.typeextensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.resources.reader.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.resources.resourcemanager.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.resources.writer.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.compilerservices.unsafe.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.compilerservices.visualc.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.extensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.handles.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.interopservices.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.interopservices.javascript.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.interopservices.runtimeinformation.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.intrinsics.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.loader.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.numerics.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.serialization.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.serialization.formatters.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.serialization.json.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.serialization.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.runtime.serialization.xml.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.accesscontrol.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.claims.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.cryptography.algorithms.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.cryptography.cng.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.cryptography.csp.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.cryptography.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.cryptography.encoding.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.cryptography.openssl.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.cryptography.primitives.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.cryptography.x509certificates.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.principal.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.principal.windows.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.security.securestring.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.servicemodel.web.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.serviceprocess.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.serviceprocess.servicecontroller.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.text.encoding.codepages.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.text.encoding.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.text.encoding.extensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.text.encodings.web.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.text.json.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.text.regularexpressions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.channels.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.overlapped.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.tasks.dataflow.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.tasks.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.tasks.extensions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.tasks.parallel.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.thread.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.threadpool.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.threading.timer.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.transactions.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.transactions.local.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.valuetuple.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.web.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.web.httputility.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.windows.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.linq.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.readerwriter.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.serialization.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.xdocument.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.xmldocument.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.xmlserializer.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.xpath.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\system.xml.xpath.xdocument.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\usb.ids
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\usbipd.deps.json
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\usbipd.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\usbipd.exe
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\usbipd.runtimeconfig.json
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\windowsbase.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\winrt.runtime.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\wsl\readme.md
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\wsl\usbip
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend\wsl\usbip-auto-attach
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\backend-source.zip
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\collect-usbdiagnostics.ps1
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\dependencies.json
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\doc-truoc.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\install-bservice.ps1
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\mini-usbip-win2-license.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\mini-usbip-win2-source.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\mini-usbipd-source.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\mini-usbipd-win-gpl-3.0.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\pyinstaller-copying.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\python-license.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\usbip-win2-license.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\usbip-win2-source.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\usbipd-source.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\usbipd-win-gpl-3.0.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\winfsp-license.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\licenses\winfsp-source.txt
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\network-priority.ps1
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_bz2.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_ctypes.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_decimal.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_hashlib.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_lzma.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_queue.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_socket.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_ssl.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_uuid.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\_wmi.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-console-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-datetime-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-debug-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-errorhandling-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-fibers-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-fibers-l1-1-1.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-file-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-file-l1-2-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-file-l2-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-handle-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-heap-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-interlocked-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-libraryloader-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-localization-l1-2-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-memory-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-namedpipe-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-processenvironment-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-processthreads-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-processthreads-l1-1-1.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-profile-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-string-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-synch-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-synch-l1-2-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-sysinfo-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-sysinfo-l1-2-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-timezone-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-core-util-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-conio-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-convert-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-environment-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-filesystem-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-heap-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-locale-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-math-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-process-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-runtime-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-stdio-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-string-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-time-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\api-ms-win-crt-utility-l1-1-0.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\base_library.zip
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\libcrypto-3-x64.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\libffi-8.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\libssl-3-x64.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\python312.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\select.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\ucrtbase.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\unicodedata.pyd
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\vcruntime140.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\_internal\vcruntime140_1.dll
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\runtime\usbremotev1.exe
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\setup.ps1
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\usbipd-win_5.3.0_x64.msi
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\bao cao b.exe
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\pairing.json
  • %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\tool b 1.39.3.45.exe.log
  • %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\launcher-d18.exe.log
  • %ALLUSERSPROFILE%\usbremoteb\data\b\activity.log
  • %ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\driver-install.log
  • %WINDIR%\temp\~df0f2a0a3ab96c2485.tmp
  • %WINDIR%\installer\sourcehash{ea1d5623-e6a7-4e4a-9259-e39722050300}
  • %WINDIR%\temp\~dfbbf536f4aca0565f.tmp
  • %WINDIR%\temp\~df5ae7b2b10f2ef36b.tmp
  • %WINDIR%\temp\~df4fa55cdbd4790b51.tmp
  • %ProgramFiles%\usbipd-win\copying.md
  • %ProgramFiles%\usbipd-win\usbipd.powershell.dll
  • %ProgramFiles%\usbipd-win\usb.ids
  • %ProgramFiles%\usbipd-win\usbipd.exe
  • %ProgramFiles%\usbipd-win\drivers\readme.md
  • %ProgramFiles%\usbipd-win\drivers\vboxusb.cat
  • %ProgramFiles%\usbipd-win\drivers\vboxusb.inf
  • %ProgramFiles%\usbipd-win\drivers\vboxusb.sys
  • %ProgramFiles%\usbipd-win\drivers\vboxusbmon.sys
  • %ProgramFiles%\usbipd-win\swidtag\usbipd-win.swidtag
  • %ProgramFiles%\usbipd-win\wsl\readme.md
  • %ProgramFiles%\usbipd-win\wsl\usbip
  • %ProgramFiles%\usbipd-win\wsl\usbip-auto-attach
  • <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
  • %WINDIR%\temp\~dfa96e33d74e799053.tmp
  • %WINDIR%\temp\~dfcedd0757d2625e6c.tmp
  • %WINDIR%\temp\~df3567a6761335bea7.tmp
  • %WINDIR%\temp\~df8bd3ca56d93fd21c.tmp
  • %WINDIR%\temp\~df4e41bdc4118a3331.tmp
  • %WINDIR%\temp\~dffd78a78ceb60e115.tmp
  • %WINDIR%\temp\~df49357540dd7dfc55.tmp
  • %WINDIR%\temp\~df105f47a06f432c72.tmp
Sets the 'hidden' attribute to the following files
  • <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
Moves the following files
  • from %LOCALAPPDATA%\dinhlapmobile\launcher\launcher-d18-4052.tmp to %LOCALAPPDATA%\dinhlapmobile\launcher\launcher-d18.exe
  • from %HOMEPATH%\desktop\.dinhlap-eaa8d3ef96574490b9c383bd1fe207c5.tmp to %HOMEPATH%\desktop\dinh lap mobile.exe
  • from %LOCALAPPDATA%\dinhlapmobile\tools\.download-5f6484a9fcc641a191b772964b3f0b50.tmp to %LOCALAPPDATA%\dinhlapmobile\tools\tool b 1.39.3.45.exe
  • from %LOCALAPPDATA%\dinhlapmobile\tools\tool-cu\.download-d62fb37d8adb4866a55c16455eb5993d.tmp to %LOCALAPPDATA%\dinhlapmobile\tools\tool-cu\tool-cu.exe
  • from <SYSTEM32>\catroot2\edbtmp.log to <SYSTEM32>\catroot2\edb.log
Network activity
Connects to
  • 'go###eapis.com':443
  • 'di##lap.net':443
  • 'x1.#.lencr.org':80
TCP
HTTP GET requests
  • http://x1.#.lencr.org/
Other
  • 'go###eapis.com':443
  • 'di##lap.net':443
UDP
  • DNS ASK di##lap.net
  • DNS ASK go###eapis.com
  • DNS ASK x1.#.lencr.org
Miscellaneous
Creates and executes the following
  • '%LOCALAPPDATA%\dinhlapmobile\launcher\launcher-d18.exe'
  • '%LOCALAPPDATA%\dinhlapmobile\tools\tool b 1.39.3.45.exe'
  • '%ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\bao cao b.exe' --auto
  • '%ALLUSERSPROFILE%\usbremoteb\packages\b-780d2dca5643-1.39.3.45-candidate\app.exe' --output-root QzpcVXNlcnNcdXNlclxBcHBEYXRhXExvY2FsXERpbmhMYXBNb2JpbGVcVG9vbHM=
  • '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "-NoProfile" "-ExecutionPolicy" "RemoteSigned" "-File" "%ALLUSERSPROFILE%\USBRemoteB\Packages\B-780d2dca5643-1.##.3.45-Candidate\setup.ps1" "-Role" "B" "-AppPath" "%ALLUSERSPROFILE%\USBRemoteB\...
  • '%ProgramFiles%\usbipd-win\usbipd.exe' installer uninstall_stubs
  • '%ProgramFiles%\usbipd-win\usbipd.exe' installer install_driver
  • '%ProgramFiles%\usbipd-win\usbipd.exe' installer install_monitor
  • '%ProgramFiles%\usbipd-win\usbipd.exe' server
  • '%ProgramFiles%\usbipd-win\usbipd.exe' installer update_drivers
  • '%ProgramFiles%\usbipd-win\usbipd.exe' installer uninstall_old_drivers
  • '%ProgramFiles%\usbipd-win\usbipd.exe' installer enable_forced
  • '%ProgramFiles%\usbipd-win\usbipd.exe' --version
Executes the following
  • '<SYSTEM32>\msiexec.exe' /i "%ALLUSERSPROFILE%\USBRemoteB\Packages\B-780d2dca5643-1.##.3.45-Candidate\usbipd-win_5.3.0_x64.msi" /qn /norestart REBOOT=ReallySuppress /L*v "%ALLUSERSPROFILE%\USBRemoteB\Packages\B-780d2dc...
  • '<SYSTEM32>\icacls.exe' "%ProgramFiles%\usbipd-win\WSL\README.md" /deny "*S-1-1-0:(X)"
  • '<SYSTEM32>\svchost.exe' -k DcomLaunch -p -s DeviceInstall
  • '<SYSTEM32>\sc.exe' start usbipd
  • '<SYSTEM32>\msiexec.exe' /i "%ALLUSERSPROFILE%\USBRemoteB\Packages\B-780d2dca5643-1.##.3.45-Candidate\usbipd-win_5.3.0_x64.msi" /qn /norestart REBOOT=ReallySuppress /L*v "%ALLUSERSPROFILE%\USBRemoteB\Packages\B-780d2dc...' (with hidden window)

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android