0a9e739910578192e2ad3f8f805a863d5cbcacbc38cde6488d7bbef5395dba87

Resubmissions

03-07-2023 18:01

230703-wlzj7sah3w 7

03-07-2023 17:59

230703-wkw3pahe28 7

Analysis

max time kernel
47s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
03-07-2023 18:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

spsetup132.exe
Size

8.6MB
MD5

2e57838af780fba75f9085a67cde99e4
SHA1

8070b4e5c50a4a981f6dcf78ffd424c065182b09
SHA256

0a9e739910578192e2ad3f8f805a863d5cbcacbc38cde6488d7bbef5395dba87
SHA512

84d58581d306c568db4ce572c509f69751932fe9293218f531e4d92951dd7d804756aeca8ede459c0a634e6f140fd9455693955325739657b5699d5d48d0ce63
SSDEEP

196608:FuYr1j0wlfy/tycs/bZ6ctLCyoZcmtZs47ctad+UK7HZDLtHw57I:FuYr5ik/TtLCfXOad+/ZHs7I

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 37 IoCs

description	ioc	Process
File created	C:\Program Files\Speccy\Lang\lang-1052.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-2070.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1034.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1037.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1038.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1043.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1045.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1067.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Speccy.exe	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1026.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1050.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-2052.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-2074.dll	spsetup132.exe
File created	C:\Program Files\Speccy\uninst.exe	spsetup132.exe
File created	C:\Program Files\Speccy\Speccy64.exe	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1051.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1053.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1058.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1060.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1102.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1049.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1071.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-5146.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1036.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1040.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1066.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1079.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1035.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1041.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-9999.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1031.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1046.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1055.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1059.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1062.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-1068.dll	spsetup132.exe
File created	C:\Program Files\Speccy\Lang\lang-3098.dll	spsetup132.exe

Loads dropped DLL 16 IoCs

pid	Process
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe

Modifies registry class 11 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY\shell\ = "open"	spsetup132.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY\DefaultIcon	spsetup132.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY\shell\open\command	spsetup132.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.speccy	spsetup132.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.speccy\ = "Speccy.SPECCY"	spsetup132.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY	spsetup132.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY\shell	spsetup132.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY\ = "Speccy Snapshot"	spsetup132.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY\DefaultIcon\ = "C:\\Program Files\\Speccy\\Speccy64.exe,0"	spsetup132.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY\shell\open	spsetup132.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Speccy.SPECCY\shell\open\command\ = "\"C:\\Program Files\\Speccy\\Speccy64.exe\" \"%1\""	spsetup132.exe

Suspicious behavior: EnumeratesProcesses 43 IoCs

pid	Process
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	1236	taskmgr.exe
Token: SeSystemProfilePrivilege	1236	taskmgr.exe
Token: SeCreateGlobalPrivilege	1236	taskmgr.exe
Token: 33	1236	taskmgr.exe
Token: SeIncBasePriorityPrivilege	1236	taskmgr.exe
Token: SeRestorePrivilege	1416	spsetup132.exe

Suspicious use of FindShellTrayWindow 46 IoCs

pid	Process
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe

Suspicious use of SendNotifyMessage 46 IoCs

pid	Process
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe
1236	taskmgr.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe
1416	spsetup132.exe

C:\Users\Admin\AppData\Local\Temp\spsetup132.exe
"C:\Users\Admin\AppData\Local\Temp\spsetup132.exe"
1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1416
- C:\Program Files\Speccy\Speccy64.exe
  "C:\Program Files\Speccy\Speccy64.exe"
  2⤵
  PID:2228

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1236

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

T1081

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Speccy\Lang\lang-1035.dll

Filesize
83KB

MD5
17aa2f62022349d437c88fa20e4a2614

SHA1
9a42e8eb8fd0cccf90ea090c22221078f85f005f

SHA256
3e85a29e06e9b3249f07f01f5b1d28bc9596d3c5a3e9a1c0f59ab4febede2af0

SHA512
fc2f49fdc448ddad09db040cb549139c971db92f9379fb19fc3b3bc5afeb7aaf236a3ff9e844246515d80bfbf892619129219020bc391fb200d43803242938f0

Download Submit
C:\Program Files\Speccy\Lang\lang-1041.dll

Filesize
55KB

MD5
e4ae139f1191415dfa94906870ab28b5

SHA1
83f7f161eef6c09ca8485b5dcba95b898c973b2d

SHA256
4ab959ee29db99f381aa37e4b05fa33cb87a5c31b76e236ab0c29bd9f1d4538d

SHA512
cd002a81a9a139b71bde764820536693bdf1fd763eb23023982a55a754cdde9461b773d3ab590e339f6fd27ac84e17d633f068586e0f9b7e34a5b5887daec6c8

Download Submit
C:\Program Files\Speccy\Lang\lang-1041.dll

Filesize
55KB

MD5
e4ae139f1191415dfa94906870ab28b5

SHA1
83f7f161eef6c09ca8485b5dcba95b898c973b2d

SHA256
4ab959ee29db99f381aa37e4b05fa33cb87a5c31b76e236ab0c29bd9f1d4538d

SHA512
cd002a81a9a139b71bde764820536693bdf1fd763eb23023982a55a754cdde9461b773d3ab590e339f6fd27ac84e17d633f068586e0f9b7e34a5b5887daec6c8

Download Submit
C:\Program Files\Speccy\Lang\lang-1043.dll

Filesize
82KB

MD5
ffb6e35bc7a5998ff5d5ba24a869f466

SHA1
d5a642bb6aa88fff2459cda34fbda8b4cd816f23

SHA256
4fd71f7dc6932583940f26c87032fd370999ef92ddaa828d6298984850348701

SHA512
30c3282538c6b599d4d469e5ab7558a24f5f781627d40211b00f1ad88df619ba8d199e000c3ab87d5be40760272aac389ee31a48ff2784e22312519770a49b1a

Download Submit
C:\Program Files\Speccy\Lang\lang-1043.dll

Filesize
82KB

MD5
ffb6e35bc7a5998ff5d5ba24a869f466

SHA1
d5a642bb6aa88fff2459cda34fbda8b4cd816f23

SHA256
4fd71f7dc6932583940f26c87032fd370999ef92ddaa828d6298984850348701

SHA512
30c3282538c6b599d4d469e5ab7558a24f5f781627d40211b00f1ad88df619ba8d199e000c3ab87d5be40760272aac389ee31a48ff2784e22312519770a49b1a

Download Submit
C:\Program Files\Speccy\Lang\lang-1045.dll

Filesize
81KB

MD5
0c56b1b96b3be18b7ec58b1c663a524c

SHA1
64159f43ce937b180b71e331693671631df07168

SHA256
c578d97c07dd5422fdd2a73e66c3555fbf302e25c85dd9a15e9c75120930402b

SHA512
031d6d25416e5a0a9a7a911a850d90e98eea174e1e630e3e7292feb5e5831e131b996b0cd7b72048fbebb90db7922fca1e4401b74d76ee5b849e8ca4421e49bc

Download Submit
C:\Program Files\Speccy\Lang\lang-1045.dll

Filesize
81KB

MD5
0c56b1b96b3be18b7ec58b1c663a524c

SHA1
64159f43ce937b180b71e331693671631df07168

SHA256
c578d97c07dd5422fdd2a73e66c3555fbf302e25c85dd9a15e9c75120930402b

SHA512
031d6d25416e5a0a9a7a911a850d90e98eea174e1e630e3e7292feb5e5831e131b996b0cd7b72048fbebb90db7922fca1e4401b74d76ee5b849e8ca4421e49bc

Download Submit
C:\Program Files\Speccy\Lang\lang-1046.dll

Filesize
78KB

MD5
1ff7950eeeeeac8ae4a0eaea33ee7b42

SHA1
918cb4b578f579f0aeb59aea3d64aa918c43f964

SHA256
e4f747fc2c6d19f38aa0b04852e9ab8152bb4b04468d6115bb76cb5d06b46031

SHA512
f6fb85e66e56320bf93e38abcce29bf6a67a8df7f6a5cb1a9abd9aa794394d302f7bbf7a0249f6c8552517ed9eed960e08c21f73fda883fd52a983c841fd2ff6

Download Submit
C:\Program Files\Speccy\Lang\lang-1046.dll

Filesize
78KB

MD5
1ff7950eeeeeac8ae4a0eaea33ee7b42

SHA1
918cb4b578f579f0aeb59aea3d64aa918c43f964

SHA256
e4f747fc2c6d19f38aa0b04852e9ab8152bb4b04468d6115bb76cb5d06b46031

SHA512
f6fb85e66e56320bf93e38abcce29bf6a67a8df7f6a5cb1a9abd9aa794394d302f7bbf7a0249f6c8552517ed9eed960e08c21f73fda883fd52a983c841fd2ff6

Download Submit
C:\Program Files\Speccy\Lang\lang-1049.dll

Filesize
77KB

MD5
6fbe3b991761678df3943a4fdacd53b4

SHA1
23121473e2b0356ea46ee4105813c2bb6d4a1d8e

SHA256
1ace20196a9ba651d8267314fdce3686eddb82c47a8f97593a865daa18c2e7bd

SHA512
5b5632a05b50ac6d7159c7bade950c9c11d04d4d2f6e7520a612680bc6d253492da21c5bd561c2d7301fd39715021915b8d91d92146da8f0557c6d2adf4e4795

Download Submit
C:\Program Files\Speccy\Lang\lang-1049.dll

Filesize
77KB

MD5
6fbe3b991761678df3943a4fdacd53b4

SHA1
23121473e2b0356ea46ee4105813c2bb6d4a1d8e

SHA256
1ace20196a9ba651d8267314fdce3686eddb82c47a8f97593a865daa18c2e7bd

SHA512
5b5632a05b50ac6d7159c7bade950c9c11d04d4d2f6e7520a612680bc6d253492da21c5bd561c2d7301fd39715021915b8d91d92146da8f0557c6d2adf4e4795

Download Submit
C:\Program Files\Speccy\Lang\lang-1050.dll

Filesize
85KB

MD5
9151b422df85c5332162254567c0c9d0

SHA1
8cb5a1b093bdd7338010d44dd954b4ca0f26f67d

SHA256
d9fb740bb46df481c44356684fe644fc945bc57ff269f8b619419a26b11d3d35

SHA512
8660a05b82de92582cbe46e79f1801c9c0516d9465ac2b6ad3417face79e1b1471fb03c9ce07927e87c03a0ee0f26237c11d3a3e333dfa8a1794718bc5344c47

Download Submit
C:\Program Files\Speccy\Lang\lang-1050.dll

Filesize
85KB

MD5
9151b422df85c5332162254567c0c9d0

SHA1
8cb5a1b093bdd7338010d44dd954b4ca0f26f67d

SHA256
d9fb740bb46df481c44356684fe644fc945bc57ff269f8b619419a26b11d3d35

SHA512
8660a05b82de92582cbe46e79f1801c9c0516d9465ac2b6ad3417face79e1b1471fb03c9ce07927e87c03a0ee0f26237c11d3a3e333dfa8a1794718bc5344c47

Download Submit
C:\Program Files\Speccy\Lang\lang-1051.dll

Filesize
73KB

MD5
e9e5e0b4e27a260a0a5ae43bda4a1812

SHA1
c814f9172c24a5ce58374999264af02b99b828f7

SHA256
5858f1ad625b3934cb6bdf1c5a14b4368da94c0cb97d0d1b65b6985d23450b59

SHA512
311093dfa8ec36a98b0f308f8cc752797e0f2e40c6b0fb541510dcd61f33ddc135dcd6a7b0dc3982a813d499d9d685c6e5ef80080547f6f756c2db5f22f8eedd

Download Submit
C:\Program Files\Speccy\Lang\lang-1051.dll

Filesize
73KB

MD5
e9e5e0b4e27a260a0a5ae43bda4a1812

SHA1
c814f9172c24a5ce58374999264af02b99b828f7

SHA256
5858f1ad625b3934cb6bdf1c5a14b4368da94c0cb97d0d1b65b6985d23450b59

SHA512
311093dfa8ec36a98b0f308f8cc752797e0f2e40c6b0fb541510dcd61f33ddc135dcd6a7b0dc3982a813d499d9d685c6e5ef80080547f6f756c2db5f22f8eedd

Download Submit
C:\Program Files\Speccy\Speccy64.exe

Filesize
7.3MB

MD5
d41812a78894d4e47df163db19d354e6

SHA1
580a2d42799843fb213c91d730d850c5db997363

SHA256
5465297f50aa45b3d19c721259f38452b533e4569e85fef7568867303a7bc3ee

SHA512
a5957c9502cf4ba650f204808f37c116aaaec4e26fadff2db3c1e331f73c8cdf76ade248ee8a548196f4083624c2640efd5bdf4f7e85d777973a1bd6fa83f10f

Download Submit
C:\Program Files\Speccy\Speccy64.exe

Filesize
3.8MB

MD5
11c5fc6a4c5c4b8e55a8aecdce61ea5e

SHA1
30cb5f6704edd75542e8d07e3fa19547283f289a

SHA256
8d6a811a775e7441af8566f62db5ca86e3de4f8acd332e79138dd7f5b04c8d1a

SHA512
04f05a92e97ba4766d060549a9ee69c40793dcfb318710c5e1d3d1066be2a1fb75fcd7c5d17126a16702c0f587f83885948038e27f0ddfdb6e80048d8e886a4b

Download Submit
C:\Program Files\Speccy\Speccy64.exe

Filesize
3.8MB

MD5
11c5fc6a4c5c4b8e55a8aecdce61ea5e

SHA1
30cb5f6704edd75542e8d07e3fa19547283f289a

SHA256
8d6a811a775e7441af8566f62db5ca86e3de4f8acd332e79138dd7f5b04c8d1a

SHA512
04f05a92e97ba4766d060549a9ee69c40793dcfb318710c5e1d3d1066be2a1fb75fcd7c5d17126a16702c0f587f83885948038e27f0ddfdb6e80048d8e886a4b

Download Submit
C:\Program Files\Speccy\lang\lang-1036.dll

Filesize
83KB

MD5
b1284354327ef02b49e544ac793f6133

SHA1
19099eac446b960bd15a2585030355bfc1a661e4

SHA256
854c2e3e288ea5197fc84842107c991d081794ea6a72bcb92a0696f1f64b056c

SHA512
f78930cbb75c1ed46ccafef428d664b4e6f248d3e1cf54604e838216795608df58cb250e6e2360d509e1db0ad342a8a234cec3ae19cd140ff055079bd435d97c

Download Submit
C:\Program Files\Speccy\lang\lang-1043.dll

Filesize
82KB

MD5
ffb6e35bc7a5998ff5d5ba24a869f466

SHA1
d5a642bb6aa88fff2459cda34fbda8b4cd816f23

SHA256
4fd71f7dc6932583940f26c87032fd370999ef92ddaa828d6298984850348701

SHA512
30c3282538c6b599d4d469e5ab7558a24f5f781627d40211b00f1ad88df619ba8d199e000c3ab87d5be40760272aac389ee31a48ff2784e22312519770a49b1a

Download Submit
C:\Program Files\Speccy\lang\lang-1045.dll

Filesize
81KB

MD5
0c56b1b96b3be18b7ec58b1c663a524c

SHA1
64159f43ce937b180b71e331693671631df07168

SHA256
c578d97c07dd5422fdd2a73e66c3555fbf302e25c85dd9a15e9c75120930402b

SHA512
031d6d25416e5a0a9a7a911a850d90e98eea174e1e630e3e7292feb5e5831e131b996b0cd7b72048fbebb90db7922fca1e4401b74d76ee5b849e8ca4421e49bc

Download Submit
C:\Program Files\Speccy\lang\lang-1046.dll

Filesize
78KB

MD5
1ff7950eeeeeac8ae4a0eaea33ee7b42

SHA1
918cb4b578f579f0aeb59aea3d64aa918c43f964

SHA256
e4f747fc2c6d19f38aa0b04852e9ab8152bb4b04468d6115bb76cb5d06b46031

SHA512
f6fb85e66e56320bf93e38abcce29bf6a67a8df7f6a5cb1a9abd9aa794394d302f7bbf7a0249f6c8552517ed9eed960e08c21f73fda883fd52a983c841fd2ff6

Download Submit
C:\Program Files\Speccy\lang\lang-1049.dll

Filesize
77KB

MD5
6fbe3b991761678df3943a4fdacd53b4

SHA1
23121473e2b0356ea46ee4105813c2bb6d4a1d8e

SHA256
1ace20196a9ba651d8267314fdce3686eddb82c47a8f97593a865daa18c2e7bd

SHA512
5b5632a05b50ac6d7159c7bade950c9c11d04d4d2f6e7520a612680bc6d253492da21c5bd561c2d7301fd39715021915b8d91d92146da8f0557c6d2adf4e4795

Download Submit
C:\Program Files\Speccy\lang\lang-1050.dll

Filesize
85KB

MD5
9151b422df85c5332162254567c0c9d0

SHA1
8cb5a1b093bdd7338010d44dd954b4ca0f26f67d

SHA256
d9fb740bb46df481c44356684fe644fc945bc57ff269f8b619419a26b11d3d35

SHA512
8660a05b82de92582cbe46e79f1801c9c0516d9465ac2b6ad3417face79e1b1471fb03c9ce07927e87c03a0ee0f26237c11d3a3e333dfa8a1794718bc5344c47

Download Submit
C:\Program Files\Speccy\lang\lang-1051.dll

Filesize
73KB

MD5
e9e5e0b4e27a260a0a5ae43bda4a1812

SHA1
c814f9172c24a5ce58374999264af02b99b828f7

SHA256
5858f1ad625b3934cb6bdf1c5a14b4368da94c0cb97d0d1b65b6985d23450b59

SHA512
311093dfa8ec36a98b0f308f8cc752797e0f2e40c6b0fb541510dcd61f33ddc135dcd6a7b0dc3982a813d499d9d685c6e5ef80080547f6f756c2db5f22f8eedd

Download Submit
C:\Program Files\Speccy\lang\lang-1052.dll

Filesize
79KB

MD5
c4ed5ea4876722b228d9a189386e2654

SHA1
89dfdc5d45913db12a6b3cc2684ae7ab09c74994

SHA256
68f5a8b4cabf62a0c5eefb02478416240992d08dbb3214765ba341dc4cbd3b0d

SHA512
1a2f07592773b1d55ce9b20b7a67f369cfab29e07cb0ce55ec3b43d8e6dd4d784568b35d24260890c5c368daabfd1d2459bb2030d08a4ce4542af6cac5defdf7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\V01.log

Filesize
512KB

MD5
a882b0233de897b0c6a79cbad0051955

SHA1
5bc4a57bdceb3388cc8307ab920089b6c927b1b0

SHA256
217a39be3f37cc9413a97deb7bf815eff8cf44fced59329eb0db397d1ab351cf

SHA512
da4982d09543c67cccb21db0a80a85e4194571fab03b9a9edffae87f1037cebc7268fd0cc801d5e7f426df2b77fb2f7a48488c7f2fd6fe7296187dab796db459

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat

Filesize
14.0MB

MD5
b51554f3e5fe09cb22bf1d49129cd927

SHA1
d701c2ee5c38e1805ce2e37a9837c4eafd28711e

SHA256
cd6d6731306a2c3128b23c625d28112bf573a176dc8a253bc536783982097e0d

SHA512
28aa678630746435f780df74685f18f98997e9d4d9c2742575fe8edd8773bc6dbddd7a15521a503e62ad9c4209d16374ef8b57a2ef4168a7858ed37bacd4d25c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm

Filesize
16KB

MD5
accc127523201318c9c6a9d9841b0132

SHA1
e0600b8ebfe8c0da512b2e456b86a721e056a335

SHA256
2dd2a4eb5d2d57dd08f15ec5cd88a0f63efc1be2922d6fb3c1da9c883ed4cfea

SHA512
064b6218eb7de21f8f3ec16fec4c5d933a64a6b35d351e1b39569172453d1a0423617f013693065d315a121394bd30a13ad9f4cdaf6c404f2dcb96af25da451b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\ButtonEvent.dll

Filesize
5KB

MD5
c24568a3b0d7c8d7761e684eb77252b5

SHA1
66db7f147cbc2309d8d78fdce54660041acbc60d

SHA256
e2da6d8b73b5954d58baa89a949aacece0527dfb940ca130ac6d3fd992d0909d

SHA512
5d43e4c838fd7f4c6a4ab6cc6d63e0f81d765d9ca33d9278d082c4f75f9416907df10b003e10edc1b5ef39535f722d8dbfab114775ac67da7f9390dcc2b4b443

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\System.dll

Filesize
11KB

MD5
41a3c964232edd2d7d5edea53e8245cd

SHA1
76d7e1fbf15cc3da4dd63a063d6ab2f0868a2206

SHA256
8b65fec615c7b371c23f8f7f344b12dc5085e40a556f96db318ed757494d62d5

SHA512
fa16bd9d020602e3065afd5c0638bc37775b40eb18bfa33b4ca5babcc3e6f112ae7d43457a6e9685ddbe6e94b954a1dc43d1da7af9ca7464019a3f110af549c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\System.dll

Filesize
11KB

MD5
41a3c964232edd2d7d5edea53e8245cd

SHA1
76d7e1fbf15cc3da4dd63a063d6ab2f0868a2206

SHA256
8b65fec615c7b371c23f8f7f344b12dc5085e40a556f96db318ed757494d62d5

SHA512
fa16bd9d020602e3065afd5c0638bc37775b40eb18bfa33b4ca5babcc3e6f112ae7d43457a6e9685ddbe6e94b954a1dc43d1da7af9ca7464019a3f110af549c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\System.dll

Filesize
11KB

MD5
41a3c964232edd2d7d5edea53e8245cd

SHA1
76d7e1fbf15cc3da4dd63a063d6ab2f0868a2206

SHA256
8b65fec615c7b371c23f8f7f344b12dc5085e40a556f96db318ed757494d62d5

SHA512
fa16bd9d020602e3065afd5c0638bc37775b40eb18bfa33b4ca5babcc3e6f112ae7d43457a6e9685ddbe6e94b954a1dc43d1da7af9ca7464019a3f110af549c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\UserInfo.dll

Filesize
4KB

MD5
c1f778a6d65178d34bde4206161a98e0

SHA1
29719fffef1ab6fe2df47e5ed258a5e3b3a11cfc

SHA256
9caf7a78f750713180cf64d18967a2b803b5580e636e59279dcaaf18ba0daa87

SHA512
9c3cf25cf43f85a5f9c9ed555f12f3626ef9daeeedd4d366ada58748ead1f6e279fea977c76ae8bae1dc49bfd852e899cb137c4a006c13e9fcebf6e5e2926a4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\UserInfo.dll

Filesize
4KB

MD5
c1f778a6d65178d34bde4206161a98e0

SHA1
29719fffef1ab6fe2df47e5ed258a5e3b3a11cfc

SHA256
9caf7a78f750713180cf64d18967a2b803b5580e636e59279dcaaf18ba0daa87

SHA512
9c3cf25cf43f85a5f9c9ed555f12f3626ef9daeeedd4d366ada58748ead1f6e279fea977c76ae8bae1dc49bfd852e899cb137c4a006c13e9fcebf6e5e2926a4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\UserInfo.dll

Filesize
4KB

MD5
c1f778a6d65178d34bde4206161a98e0

SHA1
29719fffef1ab6fe2df47e5ed258a5e3b3a11cfc

SHA256
9caf7a78f750713180cf64d18967a2b803b5580e636e59279dcaaf18ba0daa87

SHA512
9c3cf25cf43f85a5f9c9ed555f12f3626ef9daeeedd4d366ada58748ead1f6e279fea977c76ae8bae1dc49bfd852e899cb137c4a006c13e9fcebf6e5e2926a4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\g\gcapi_dll.dll

Filesize
348KB

MD5
2973af8515effd0a3bfc7a43b03b3fcc

SHA1
4209cded0caac7c5cb07bcb29f1ee0dc5ac211ee

SHA256
d0e4581210a22135ce5deb47d9df4d636a94b3813e0649aab84822c9f08af2a0

SHA512
b6f9653142ec00b2e0a5045f0f2c7ba5dbbda8ef39edf14c80a24ecab3c41f081eb466994aaf0879ac96b201ba5c02d478275710e4d08b3debc739063d177f7e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\g\gcapi_dll.dll

Filesize
348KB

MD5
2973af8515effd0a3bfc7a43b03b3fcc

SHA1
4209cded0caac7c5cb07bcb29f1ee0dc5ac211ee

SHA256
d0e4581210a22135ce5deb47d9df4d636a94b3813e0649aab84822c9f08af2a0

SHA512
b6f9653142ec00b2e0a5045f0f2c7ba5dbbda8ef39edf14c80a24ecab3c41f081eb466994aaf0879ac96b201ba5c02d478275710e4d08b3debc739063d177f7e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\g\gcapi_dll.dll

Filesize
348KB

MD5
2973af8515effd0a3bfc7a43b03b3fcc

SHA1
4209cded0caac7c5cb07bcb29f1ee0dc5ac211ee

SHA256
d0e4581210a22135ce5deb47d9df4d636a94b3813e0649aab84822c9f08af2a0

SHA512
b6f9653142ec00b2e0a5045f0f2c7ba5dbbda8ef39edf14c80a24ecab3c41f081eb466994aaf0879ac96b201ba5c02d478275710e4d08b3debc739063d177f7e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\inetc.dll

Filesize
23KB

MD5
7760daf1b6a7f13f06b25b5a09137ca1

SHA1
cc5a98ea3aa582de5428c819731e1faeccfcf33a

SHA256
5233110ed8e95a4a1042f57d9b2dc72bc253e8cb5282437637a51e4e9fcb9079

SHA512
d038bea292ffa2f2f44c85305350645d504be5c45a9d1b30db6d9708bfac27e2ff1e41a76c844d9231d465f31d502a5313dfded6309326d6dfbe30e51a76fdb5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\inetc.dll

Filesize
23KB

MD5
7760daf1b6a7f13f06b25b5a09137ca1

SHA1
cc5a98ea3aa582de5428c819731e1faeccfcf33a

SHA256
5233110ed8e95a4a1042f57d9b2dc72bc253e8cb5282437637a51e4e9fcb9079

SHA512
d038bea292ffa2f2f44c85305350645d504be5c45a9d1b30db6d9708bfac27e2ff1e41a76c844d9231d465f31d502a5313dfded6309326d6dfbe30e51a76fdb5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\inetc.dll

Filesize
23KB

MD5
7760daf1b6a7f13f06b25b5a09137ca1

SHA1
cc5a98ea3aa582de5428c819731e1faeccfcf33a

SHA256
5233110ed8e95a4a1042f57d9b2dc72bc253e8cb5282437637a51e4e9fcb9079

SHA512
d038bea292ffa2f2f44c85305350645d504be5c45a9d1b30db6d9708bfac27e2ff1e41a76c844d9231d465f31d502a5313dfded6309326d6dfbe30e51a76fdb5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\nsDialogs.dll

Filesize
9KB

MD5
2aba8f16eca82517460013a3de7cbf67

SHA1
3812192fa7b873f426c4b0d0d822b3c9d51aa164

SHA256
60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

SHA512
4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\nsDialogs.dll

Filesize
9KB

MD5
2aba8f16eca82517460013a3de7cbf67

SHA1
3812192fa7b873f426c4b0d0d822b3c9d51aa164

SHA256
60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

SHA512
4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\nsDialogs.dll

Filesize
9KB

MD5
2aba8f16eca82517460013a3de7cbf67

SHA1
3812192fa7b873f426c4b0d0d822b3c9d51aa164

SHA256
60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

SHA512
4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\nsDialogs.dll

Filesize
9KB

MD5
2aba8f16eca82517460013a3de7cbf67

SHA1
3812192fa7b873f426c4b0d0d822b3c9d51aa164

SHA256
60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

SHA512
4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\nsDialogs.dll

Filesize
9KB

MD5
2aba8f16eca82517460013a3de7cbf67

SHA1
3812192fa7b873f426c4b0d0d822b3c9d51aa164

SHA256
60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

SHA512
4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\nsDialogs.dll

Filesize
9KB

MD5
2aba8f16eca82517460013a3de7cbf67

SHA1
3812192fa7b873f426c4b0d0d822b3c9d51aa164

SHA256
60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

SHA512
4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\nsDialogs.dll

Filesize
9KB

MD5
2aba8f16eca82517460013a3de7cbf67

SHA1
3812192fa7b873f426c4b0d0d822b3c9d51aa164

SHA256
60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

SHA512
4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\ui\pfUI.dll

Filesize
13.6MB

MD5
1bfa036321fcb209564549538345a289

SHA1
8ede722a5cc6135847ad5276f30143022fa7bacf

SHA256
547e48f35a1c38362cfa71a3ffe1b81cc8d61eb204157828e2ec58a80f3e4b2e

SHA512
9729cc5ca18dbd58b516169de053d50e0df9288fc2d91cbbbd887573fe006c5f506789f23a09a73dfcf75fa71b9cff88e0f59da550263d877939be8c4f996d92

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\ui\pfUI.dll

Filesize
13.6MB

MD5
1bfa036321fcb209564549538345a289

SHA1
8ede722a5cc6135847ad5276f30143022fa7bacf

SHA256
547e48f35a1c38362cfa71a3ffe1b81cc8d61eb204157828e2ec58a80f3e4b2e

SHA512
9729cc5ca18dbd58b516169de053d50e0df9288fc2d91cbbbd887573fe006c5f506789f23a09a73dfcf75fa71b9cff88e0f59da550263d877939be8c4f996d92

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\ui\res\Montserrat-Regular.otf

Filesize
44KB

MD5
27e50ffd6a14cbc8221c9dbd3b5208dc

SHA1
713c997ce002a4d8762c2dcc405213061233e4bc

SHA256
40fc1142200a5c1c18f80b6915257083c528c7f7fd2b00a552aeebc42898d428

SHA512
0a602f88cfba906b41719943465edb09917c447d746bfed5c9ce9c75d077f6aed2f8146697acd74557359f1ae267ca2a8e3a2ca40fb1633bde8e6114261abd90

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\ui\res\PF_logo.png

Filesize
3KB

MD5
079cca30760cca3c01863b6b96e87848

SHA1
98c2ca01f248bc61817db7e5faea4a3d8310db50

SHA256
8dd37d3721e25c32c5bf878b6dba9e61d04b7ce8aec45bdf703a41bc41802dfa

SHA512
3e25c10e3a5830584c608b9178ab062e93e0e9009a7d897bb5e3561180b0b0910bd4178063d982eb33806a005c93931ae2ec5be520ec0d0c9a7c452cb78fd6a8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\ui\res\SP_computer.png

Filesize
66KB

MD5
873b7c34ced38adaa2d01752099c09df

SHA1
e659d094f6e3fe6f71a3f1b047b75206bab168a0

SHA256
aced6376065f2c71b4b619823f735bbdcac967a5113cd4e6b978298a58c927c9

SHA512
a8d54d52bb5ec4502cd4bb829eef23c1b2edff9daeeca0f4fb7dbaa0cabdcac763a60aedc8393ba12a393a8263a5c06d3555d7b165cf9927dd9cc18d68b9e510

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslD4B7.tmp\ui\res\Speccy_Logo_72px.png

Filesize
8KB

MD5
1787175d95eab213cf5a8bc25e252676

SHA1
1d4bd97b2bcaabd26f2ef7781b91233575e1ba0f

SHA256
65fa6baa9d140251d04069cf538f3262ebbb0e4e62d58d06cc58ad8b22085a83

SHA512
de1df226bb9bf84305aea43c237ea76937a9df0c56ecd9afeee1920c3f4d600fde0cc0c027ca397fb6067ffb1a7fe8c03496d82ed844bb4f47f32b2b30eda52f

Download Submit
memory/1236-234-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-242-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-235-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-236-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-240-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-241-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-243-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-245-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-244-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1236-246-0x00000212DA7A0000-0x00000212DA7A1000-memory.dmp

Filesize
4KB

Download
memory/1416-282-0x00000000070D0000-0x00000000070D1000-memory.dmp

Filesize
4KB

Download
memory/1416-271-0x0000000007380000-0x0000000007388000-memory.dmp

Filesize
32KB

Download
memory/1416-253-0x0000000006320000-0x0000000006330000-memory.dmp

Filesize
64KB

Download
memory/1416-247-0x0000000006180000-0x0000000006190000-memory.dmp

Filesize
64KB

Download
memory/1416-273-0x0000000007120000-0x0000000007128000-memory.dmp

Filesize
32KB

Download
memory/1416-274-0x0000000007110000-0x0000000007111000-memory.dmp

Filesize
4KB

Download
memory/1416-276-0x0000000007120000-0x0000000007128000-memory.dmp

Filesize
32KB

Download
memory/1416-279-0x0000000007110000-0x0000000007118000-memory.dmp

Filesize
32KB

Download
memory/1416-304-0x00000000070D0000-0x00000000070D1000-memory.dmp

Filesize
4KB

Download
memory/1416-294-0x00000000071C0000-0x00000000071C8000-memory.dmp

Filesize
32KB

Download
memory/1416-296-0x0000000007200000-0x0000000007208000-memory.dmp

Filesize
32KB

Download
memory/1416-297-0x0000000007200000-0x0000000007208000-memory.dmp

Filesize
32KB

Download
memory/1416-300-0x0000000007110000-0x0000000007111000-memory.dmp

Filesize
4KB

Download