Analysis

  • max time kernel
    31s
  • max time network
    116s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-08-2023 17:15

General

  • Target

    spsetup132.exe

  • Size

    8.6MB

  • MD5

    2e57838af780fba75f9085a67cde99e4

  • SHA1

    8070b4e5c50a4a981f6dcf78ffd424c065182b09

  • SHA256

    0a9e739910578192e2ad3f8f805a863d5cbcacbc38cde6488d7bbef5395dba87

  • SHA512

    84d58581d306c568db4ce572c509f69751932fe9293218f531e4d92951dd7d804756aeca8ede459c0a634e6f140fd9455693955325739657b5699d5d48d0ce63

  • SSDEEP

    196608:FuYr1j0wlfy/tycs/bZ6ctLCyoZcmtZs47ctad+UK7HZDLtHw57I:FuYr5ik/TtLCfXOad+/ZHs7I

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 3 IoCs
  • Drops file in Program Files directory 37 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\spsetup132.exe
    "C:\Users\Admin\AppData\Local\Temp\spsetup132.exe"
    1⤵
    • Drops file in Program Files directory
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:460
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.ccleaner.com/go/app_releasenotes?p=4&v=1.32.803&l=1033&b=1&a=0
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:3664
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd456e46f8,0x7ffd456e4708,0x7ffd456e4718
        3⤵
          PID:3548
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2220,8931917341342457853,8922031516140004346,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8
          3⤵
            PID:2308
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2220,8931917341342457853,8922031516140004346,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3
            3⤵
              PID:4780
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,8931917341342457853,8922031516140004346,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2232 /prefetch:2
              3⤵
                PID:868
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,8931917341342457853,8922031516140004346,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
                3⤵
                  PID:3316
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,8931917341342457853,8922031516140004346,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
                  3⤵
                    PID:4232
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,8931917341342457853,8922031516140004346,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1
                    3⤵
                      PID:4072
                  • C:\Program Files\Speccy\Speccy64.exe
                    "C:\Program Files\Speccy\Speccy64.exe"
                    2⤵
                    • Drops file in System32 directory
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    • Suspicious use of SetWindowsHookEx
                    PID:2256
                    • C:\Program Files\Java\jre1.8.0_66\bin\java.exe
                      "C:\Program Files\Java\jre1.8.0_66\bin\java" -version
                      3⤵
                        PID:2284
                      • C:\Program Files\Java\jdk1.8.0_66\bin\java.exe
                        "C:\Program Files\Java\jdk1.8.0_66\bin\java" -version
                        3⤵
                          PID:3400
                        • C:\Windows\system32\secedit.exe
                          /export /cfg "C:\Users\Admin\AppData\Local\Temp\spc_se.txt" /quiet /areas SECURITYPOLICY
                          3⤵
                            PID:3412
                      • C:\Windows\SysWOW64\werfault.exe
                        werfault.exe /h /shared Global\61a1c9f9c06149bbb996103156719569 /t 956 /p 460
                        1⤵
                          PID:4840
                        • C:\Windows\System32\CompPkgSrv.exe
                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                          1⤵
                            PID:4236
                          • C:\Windows\System32\CompPkgSrv.exe
                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                            1⤵
                              PID:4768
                            • C:\Windows\system32\wbem\WmiApSrv.exe
                              C:\Windows\system32\wbem\WmiApSrv.exe
                              1⤵
                                PID:32

                              Network

                              MITRE ATT&CK Enterprise v15

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • C:\Program Files\Speccy\Lang\lang-1026.dll

                                Filesize

                                78KB

                                MD5

                                4679b87ceb52b6a2c4f58fbc4f81b903

                                SHA1

                                7c655ecd763cf44ff7217f17c700186e6bf53e1b

                                SHA256

                                0eaaf207d8bf0ce106bc357c2e388384cd49d8eb3deda1d471274d141ffc63fd

                                SHA512

                                fa4d40a7ac5d41c8f495b263b2f241c55815337b41760383d9e2b3fe317a385d3a3da9b2436c55c3541e8f235450348c3bc101e0ddae4961081d74c1ed647299

                              • C:\Program Files\Speccy\Lang\lang-1026.dll

                                Filesize

                                78KB

                                MD5

                                4679b87ceb52b6a2c4f58fbc4f81b903

                                SHA1

                                7c655ecd763cf44ff7217f17c700186e6bf53e1b

                                SHA256

                                0eaaf207d8bf0ce106bc357c2e388384cd49d8eb3deda1d471274d141ffc63fd

                                SHA512

                                fa4d40a7ac5d41c8f495b263b2f241c55815337b41760383d9e2b3fe317a385d3a3da9b2436c55c3541e8f235450348c3bc101e0ddae4961081d74c1ed647299

                              • C:\Program Files\Speccy\Lang\lang-1031.dll

                                Filesize

                                78KB

                                MD5

                                fbe8a53b36d7ba86bfc7d0c3a1d7659f

                                SHA1

                                1ced3b3d2af5250289080f524c41de2ef484eaac

                                SHA256

                                2c8095af8905d8b72204bd896e7865b91f6f77c375a5a1c9cffa0e3887ba8577

                                SHA512

                                f8de0d37e3ef3972504e6a05c58ce3d3a3ce13e8f55fac7795fde468add2648305f055aa7b6de47fab23e5446a22748da989dbaf1bf189a006fbc70efe0f475d

                              • C:\Program Files\Speccy\Lang\lang-1031.dll

                                Filesize

                                78KB

                                MD5

                                fbe8a53b36d7ba86bfc7d0c3a1d7659f

                                SHA1

                                1ced3b3d2af5250289080f524c41de2ef484eaac

                                SHA256

                                2c8095af8905d8b72204bd896e7865b91f6f77c375a5a1c9cffa0e3887ba8577

                                SHA512

                                f8de0d37e3ef3972504e6a05c58ce3d3a3ce13e8f55fac7795fde468add2648305f055aa7b6de47fab23e5446a22748da989dbaf1bf189a006fbc70efe0f475d

                              • C:\Program Files\Speccy\Lang\lang-1034.dll

                                Filesize

                                86KB

                                MD5

                                52e6a2417cb6855d34b2c29e8c46a7cf

                                SHA1

                                9fe0c63039728334f023b8b08f3d45c3c3b739a2

                                SHA256

                                a84dbfab73568b73ee5f94bce0b43cc2487638962d3e500d1fdb1d666ec1e024

                                SHA512

                                d1161a7cb8b1e7cda982ca96758c0ef3e2ad039fe1f5b913c704c189bf960a9e02cdeae310512227881d559fa3cee226e5c4616b3279198c38a983102750ad35

                              • C:\Program Files\Speccy\Lang\lang-1034.dll

                                Filesize

                                86KB

                                MD5

                                52e6a2417cb6855d34b2c29e8c46a7cf

                                SHA1

                                9fe0c63039728334f023b8b08f3d45c3c3b739a2

                                SHA256

                                a84dbfab73568b73ee5f94bce0b43cc2487638962d3e500d1fdb1d666ec1e024

                                SHA512

                                d1161a7cb8b1e7cda982ca96758c0ef3e2ad039fe1f5b913c704c189bf960a9e02cdeae310512227881d559fa3cee226e5c4616b3279198c38a983102750ad35

                              • C:\Program Files\Speccy\Lang\lang-1035.dll

                                Filesize

                                83KB

                                MD5

                                17aa2f62022349d437c88fa20e4a2614

                                SHA1

                                9a42e8eb8fd0cccf90ea090c22221078f85f005f

                                SHA256

                                3e85a29e06e9b3249f07f01f5b1d28bc9596d3c5a3e9a1c0f59ab4febede2af0

                                SHA512

                                fc2f49fdc448ddad09db040cb549139c971db92f9379fb19fc3b3bc5afeb7aaf236a3ff9e844246515d80bfbf892619129219020bc391fb200d43803242938f0

                              • C:\Program Files\Speccy\Lang\lang-1035.dll

                                Filesize

                                83KB

                                MD5

                                17aa2f62022349d437c88fa20e4a2614

                                SHA1

                                9a42e8eb8fd0cccf90ea090c22221078f85f005f

                                SHA256

                                3e85a29e06e9b3249f07f01f5b1d28bc9596d3c5a3e9a1c0f59ab4febede2af0

                                SHA512

                                fc2f49fdc448ddad09db040cb549139c971db92f9379fb19fc3b3bc5afeb7aaf236a3ff9e844246515d80bfbf892619129219020bc391fb200d43803242938f0

                              • C:\Program Files\Speccy\Lang\lang-1036.dll

                                Filesize

                                83KB

                                MD5

                                b1284354327ef02b49e544ac793f6133

                                SHA1

                                19099eac446b960bd15a2585030355bfc1a661e4

                                SHA256

                                854c2e3e288ea5197fc84842107c991d081794ea6a72bcb92a0696f1f64b056c

                                SHA512

                                f78930cbb75c1ed46ccafef428d664b4e6f248d3e1cf54604e838216795608df58cb250e6e2360d509e1db0ad342a8a234cec3ae19cd140ff055079bd435d97c

                              • C:\Program Files\Speccy\Lang\lang-1036.dll

                                Filesize

                                83KB

                                MD5

                                b1284354327ef02b49e544ac793f6133

                                SHA1

                                19099eac446b960bd15a2585030355bfc1a661e4

                                SHA256

                                854c2e3e288ea5197fc84842107c991d081794ea6a72bcb92a0696f1f64b056c

                                SHA512

                                f78930cbb75c1ed46ccafef428d664b4e6f248d3e1cf54604e838216795608df58cb250e6e2360d509e1db0ad342a8a234cec3ae19cd140ff055079bd435d97c

                              • C:\Program Files\Speccy\Lang\lang-1037.dll

                                Filesize

                                66KB

                                MD5

                                ebefa147111fde9b5201b44022c6dfaa

                                SHA1

                                c7c0a4010fcd09ac9cceb122e468f7e672c946b5

                                SHA256

                                01d24790c1aa19b18a58ad491de497e5d97551e4e69f72c4981d551d8ac28fd2

                                SHA512

                                549019de74a55553eb39c5cf68b0de87f382abf7fb857c721a20bd7797e35d424838c4fd11328950b6311a8db0a84b9280c28b539c5c93283cbd526fe2584ef9

                              • C:\Program Files\Speccy\Lang\lang-1037.dll

                                Filesize

                                66KB

                                MD5

                                ebefa147111fde9b5201b44022c6dfaa

                                SHA1

                                c7c0a4010fcd09ac9cceb122e468f7e672c946b5

                                SHA256

                                01d24790c1aa19b18a58ad491de497e5d97551e4e69f72c4981d551d8ac28fd2

                                SHA512

                                549019de74a55553eb39c5cf68b0de87f382abf7fb857c721a20bd7797e35d424838c4fd11328950b6311a8db0a84b9280c28b539c5c93283cbd526fe2584ef9

                              • C:\Program Files\Speccy\Lang\lang-1038.dll

                                Filesize

                                81KB

                                MD5

                                16e8b36b7d32c9ba1244acc916f61875

                                SHA1

                                3e87cedec5899f7d35121b07faa1bb1b00a5bcd4

                                SHA256

                                007d6edd16d867fd90ef10ba1e0dbdbc3a1d00f675df8c58a654dd1c3633689d

                                SHA512

                                5db00a5ddae227cf7c4b99dbe8ccb3a7a4bff55ed902bd349c343a33668a3b19ec63f322ad9eb7b3a5a62944bfb39f7ac8225b6410b1d1e202f1f7246b9a2e68

                              • C:\Program Files\Speccy\Lang\lang-1038.dll

                                Filesize

                                81KB

                                MD5

                                16e8b36b7d32c9ba1244acc916f61875

                                SHA1

                                3e87cedec5899f7d35121b07faa1bb1b00a5bcd4

                                SHA256

                                007d6edd16d867fd90ef10ba1e0dbdbc3a1d00f675df8c58a654dd1c3633689d

                                SHA512

                                5db00a5ddae227cf7c4b99dbe8ccb3a7a4bff55ed902bd349c343a33668a3b19ec63f322ad9eb7b3a5a62944bfb39f7ac8225b6410b1d1e202f1f7246b9a2e68

                              • C:\Program Files\Speccy\Lang\lang-1040.dll

                                Filesize

                                81KB

                                MD5

                                0bbd0dd2123f0134289e1899beeadcfa

                                SHA1

                                c1b0d49f4d5c24b5f0605b3a514fe8b3cb5de02c

                                SHA256

                                e3b75bd3ffaa7a165adaf2101bbd0190afc7515194069856edc3397959f3a0a4

                                SHA512

                                4c85aedc57025c89d9f7719f96fc7cda02fb4bc57e506ade8cbb03cd77c5bab3ba358b3925cf2fccc9bdc4f8f1b9ae0be5840f91e351ae1b3d62b44a27bfbe87

                              • C:\Program Files\Speccy\Lang\lang-1040.dll

                                Filesize

                                81KB

                                MD5

                                0bbd0dd2123f0134289e1899beeadcfa

                                SHA1

                                c1b0d49f4d5c24b5f0605b3a514fe8b3cb5de02c

                                SHA256

                                e3b75bd3ffaa7a165adaf2101bbd0190afc7515194069856edc3397959f3a0a4

                                SHA512

                                4c85aedc57025c89d9f7719f96fc7cda02fb4bc57e506ade8cbb03cd77c5bab3ba358b3925cf2fccc9bdc4f8f1b9ae0be5840f91e351ae1b3d62b44a27bfbe87

                              • C:\Program Files\Speccy\Lang\lang-1041.dll

                                Filesize

                                55KB

                                MD5

                                e4ae139f1191415dfa94906870ab28b5

                                SHA1

                                83f7f161eef6c09ca8485b5dcba95b898c973b2d

                                SHA256

                                4ab959ee29db99f381aa37e4b05fa33cb87a5c31b76e236ab0c29bd9f1d4538d

                                SHA512

                                cd002a81a9a139b71bde764820536693bdf1fd763eb23023982a55a754cdde9461b773d3ab590e339f6fd27ac84e17d633f068586e0f9b7e34a5b5887daec6c8

                              • C:\Program Files\Speccy\Lang\lang-1041.dll

                                Filesize

                                55KB

                                MD5

                                e4ae139f1191415dfa94906870ab28b5

                                SHA1

                                83f7f161eef6c09ca8485b5dcba95b898c973b2d

                                SHA256

                                4ab959ee29db99f381aa37e4b05fa33cb87a5c31b76e236ab0c29bd9f1d4538d

                                SHA512

                                cd002a81a9a139b71bde764820536693bdf1fd763eb23023982a55a754cdde9461b773d3ab590e339f6fd27ac84e17d633f068586e0f9b7e34a5b5887daec6c8

                              • C:\Program Files\Speccy\Lang\lang-1043.dll

                                Filesize

                                82KB

                                MD5

                                ffb6e35bc7a5998ff5d5ba24a869f466

                                SHA1

                                d5a642bb6aa88fff2459cda34fbda8b4cd816f23

                                SHA256

                                4fd71f7dc6932583940f26c87032fd370999ef92ddaa828d6298984850348701

                                SHA512

                                30c3282538c6b599d4d469e5ab7558a24f5f781627d40211b00f1ad88df619ba8d199e000c3ab87d5be40760272aac389ee31a48ff2784e22312519770a49b1a

                              • C:\Program Files\Speccy\Lang\lang-1043.dll

                                Filesize

                                82KB

                                MD5

                                ffb6e35bc7a5998ff5d5ba24a869f466

                                SHA1

                                d5a642bb6aa88fff2459cda34fbda8b4cd816f23

                                SHA256

                                4fd71f7dc6932583940f26c87032fd370999ef92ddaa828d6298984850348701

                                SHA512

                                30c3282538c6b599d4d469e5ab7558a24f5f781627d40211b00f1ad88df619ba8d199e000c3ab87d5be40760272aac389ee31a48ff2784e22312519770a49b1a

                              • C:\Program Files\Speccy\Lang\lang-1045.dll

                                Filesize

                                81KB

                                MD5

                                0c56b1b96b3be18b7ec58b1c663a524c

                                SHA1

                                64159f43ce937b180b71e331693671631df07168

                                SHA256

                                c578d97c07dd5422fdd2a73e66c3555fbf302e25c85dd9a15e9c75120930402b

                                SHA512

                                031d6d25416e5a0a9a7a911a850d90e98eea174e1e630e3e7292feb5e5831e131b996b0cd7b72048fbebb90db7922fca1e4401b74d76ee5b849e8ca4421e49bc

                              • C:\Program Files\Speccy\Lang\lang-1045.dll

                                Filesize

                                81KB

                                MD5

                                0c56b1b96b3be18b7ec58b1c663a524c

                                SHA1

                                64159f43ce937b180b71e331693671631df07168

                                SHA256

                                c578d97c07dd5422fdd2a73e66c3555fbf302e25c85dd9a15e9c75120930402b

                                SHA512

                                031d6d25416e5a0a9a7a911a850d90e98eea174e1e630e3e7292feb5e5831e131b996b0cd7b72048fbebb90db7922fca1e4401b74d76ee5b849e8ca4421e49bc

                              • C:\Program Files\Speccy\Lang\lang-1046.dll

                                Filesize

                                78KB

                                MD5

                                1ff7950eeeeeac8ae4a0eaea33ee7b42

                                SHA1

                                918cb4b578f579f0aeb59aea3d64aa918c43f964

                                SHA256

                                e4f747fc2c6d19f38aa0b04852e9ab8152bb4b04468d6115bb76cb5d06b46031

                                SHA512

                                f6fb85e66e56320bf93e38abcce29bf6a67a8df7f6a5cb1a9abd9aa794394d302f7bbf7a0249f6c8552517ed9eed960e08c21f73fda883fd52a983c841fd2ff6

                              • C:\Program Files\Speccy\Lang\lang-1046.dll

                                Filesize

                                78KB

                                MD5

                                1ff7950eeeeeac8ae4a0eaea33ee7b42

                                SHA1

                                918cb4b578f579f0aeb59aea3d64aa918c43f964

                                SHA256

                                e4f747fc2c6d19f38aa0b04852e9ab8152bb4b04468d6115bb76cb5d06b46031

                                SHA512

                                f6fb85e66e56320bf93e38abcce29bf6a67a8df7f6a5cb1a9abd9aa794394d302f7bbf7a0249f6c8552517ed9eed960e08c21f73fda883fd52a983c841fd2ff6

                              • C:\Program Files\Speccy\Lang\lang-1049.dll

                                Filesize

                                77KB

                                MD5

                                6fbe3b991761678df3943a4fdacd53b4

                                SHA1

                                23121473e2b0356ea46ee4105813c2bb6d4a1d8e

                                SHA256

                                1ace20196a9ba651d8267314fdce3686eddb82c47a8f97593a865daa18c2e7bd

                                SHA512

                                5b5632a05b50ac6d7159c7bade950c9c11d04d4d2f6e7520a612680bc6d253492da21c5bd561c2d7301fd39715021915b8d91d92146da8f0557c6d2adf4e4795

                              • C:\Program Files\Speccy\Lang\lang-1049.dll

                                Filesize

                                77KB

                                MD5

                                6fbe3b991761678df3943a4fdacd53b4

                                SHA1

                                23121473e2b0356ea46ee4105813c2bb6d4a1d8e

                                SHA256

                                1ace20196a9ba651d8267314fdce3686eddb82c47a8f97593a865daa18c2e7bd

                                SHA512

                                5b5632a05b50ac6d7159c7bade950c9c11d04d4d2f6e7520a612680bc6d253492da21c5bd561c2d7301fd39715021915b8d91d92146da8f0557c6d2adf4e4795

                              • C:\Program Files\Speccy\Lang\lang-1050.dll

                                Filesize

                                85KB

                                MD5

                                9151b422df85c5332162254567c0c9d0

                                SHA1

                                8cb5a1b093bdd7338010d44dd954b4ca0f26f67d

                                SHA256

                                d9fb740bb46df481c44356684fe644fc945bc57ff269f8b619419a26b11d3d35

                                SHA512

                                8660a05b82de92582cbe46e79f1801c9c0516d9465ac2b6ad3417face79e1b1471fb03c9ce07927e87c03a0ee0f26237c11d3a3e333dfa8a1794718bc5344c47

                              • C:\Program Files\Speccy\Lang\lang-1050.dll

                                Filesize

                                85KB

                                MD5

                                9151b422df85c5332162254567c0c9d0

                                SHA1

                                8cb5a1b093bdd7338010d44dd954b4ca0f26f67d

                                SHA256

                                d9fb740bb46df481c44356684fe644fc945bc57ff269f8b619419a26b11d3d35

                                SHA512

                                8660a05b82de92582cbe46e79f1801c9c0516d9465ac2b6ad3417face79e1b1471fb03c9ce07927e87c03a0ee0f26237c11d3a3e333dfa8a1794718bc5344c47

                              • C:\Program Files\Speccy\Lang\lang-1051.dll

                                Filesize

                                73KB

                                MD5

                                e9e5e0b4e27a260a0a5ae43bda4a1812

                                SHA1

                                c814f9172c24a5ce58374999264af02b99b828f7

                                SHA256

                                5858f1ad625b3934cb6bdf1c5a14b4368da94c0cb97d0d1b65b6985d23450b59

                                SHA512

                                311093dfa8ec36a98b0f308f8cc752797e0f2e40c6b0fb541510dcd61f33ddc135dcd6a7b0dc3982a813d499d9d685c6e5ef80080547f6f756c2db5f22f8eedd

                              • C:\Program Files\Speccy\Lang\lang-1051.dll

                                Filesize

                                73KB

                                MD5

                                e9e5e0b4e27a260a0a5ae43bda4a1812

                                SHA1

                                c814f9172c24a5ce58374999264af02b99b828f7

                                SHA256

                                5858f1ad625b3934cb6bdf1c5a14b4368da94c0cb97d0d1b65b6985d23450b59

                                SHA512

                                311093dfa8ec36a98b0f308f8cc752797e0f2e40c6b0fb541510dcd61f33ddc135dcd6a7b0dc3982a813d499d9d685c6e5ef80080547f6f756c2db5f22f8eedd

                              • C:\Program Files\Speccy\Speccy64.exe

                                Filesize

                                7.3MB

                                MD5

                                d41812a78894d4e47df163db19d354e6

                                SHA1

                                580a2d42799843fb213c91d730d850c5db997363

                                SHA256

                                5465297f50aa45b3d19c721259f38452b533e4569e85fef7568867303a7bc3ee

                                SHA512

                                a5957c9502cf4ba650f204808f37c116aaaec4e26fadff2db3c1e331f73c8cdf76ade248ee8a548196f4083624c2640efd5bdf4f7e85d777973a1bd6fa83f10f

                              • C:\Program Files\Speccy\Speccy64.exe

                                Filesize

                                7.3MB

                                MD5

                                d41812a78894d4e47df163db19d354e6

                                SHA1

                                580a2d42799843fb213c91d730d850c5db997363

                                SHA256

                                5465297f50aa45b3d19c721259f38452b533e4569e85fef7568867303a7bc3ee

                                SHA512

                                a5957c9502cf4ba650f204808f37c116aaaec4e26fadff2db3c1e331f73c8cdf76ade248ee8a548196f4083624c2640efd5bdf4f7e85d777973a1bd6fa83f10f

                              • C:\Program Files\Speccy\Speccy64.exe

                                Filesize

                                7.3MB

                                MD5

                                d41812a78894d4e47df163db19d354e6

                                SHA1

                                580a2d42799843fb213c91d730d850c5db997363

                                SHA256

                                5465297f50aa45b3d19c721259f38452b533e4569e85fef7568867303a7bc3ee

                                SHA512

                                a5957c9502cf4ba650f204808f37c116aaaec4e26fadff2db3c1e331f73c8cdf76ade248ee8a548196f4083624c2640efd5bdf4f7e85d777973a1bd6fa83f10f

                              • C:\Program Files\Speccy\lang\lang-1026.dll

                                Filesize

                                78KB

                                MD5

                                4679b87ceb52b6a2c4f58fbc4f81b903

                                SHA1

                                7c655ecd763cf44ff7217f17c700186e6bf53e1b

                                SHA256

                                0eaaf207d8bf0ce106bc357c2e388384cd49d8eb3deda1d471274d141ffc63fd

                                SHA512

                                fa4d40a7ac5d41c8f495b263b2f241c55815337b41760383d9e2b3fe317a385d3a3da9b2436c55c3541e8f235450348c3bc101e0ddae4961081d74c1ed647299

                              • C:\Program Files\Speccy\lang\lang-1031.dll

                                Filesize

                                78KB

                                MD5

                                fbe8a53b36d7ba86bfc7d0c3a1d7659f

                                SHA1

                                1ced3b3d2af5250289080f524c41de2ef484eaac

                                SHA256

                                2c8095af8905d8b72204bd896e7865b91f6f77c375a5a1c9cffa0e3887ba8577

                                SHA512

                                f8de0d37e3ef3972504e6a05c58ce3d3a3ce13e8f55fac7795fde468add2648305f055aa7b6de47fab23e5446a22748da989dbaf1bf189a006fbc70efe0f475d

                              • C:\Program Files\Speccy\lang\lang-1034.dll

                                Filesize

                                86KB

                                MD5

                                52e6a2417cb6855d34b2c29e8c46a7cf

                                SHA1

                                9fe0c63039728334f023b8b08f3d45c3c3b739a2

                                SHA256

                                a84dbfab73568b73ee5f94bce0b43cc2487638962d3e500d1fdb1d666ec1e024

                                SHA512

                                d1161a7cb8b1e7cda982ca96758c0ef3e2ad039fe1f5b913c704c189bf960a9e02cdeae310512227881d559fa3cee226e5c4616b3279198c38a983102750ad35

                              • C:\Program Files\Speccy\lang\lang-1035.dll

                                Filesize

                                83KB

                                MD5

                                17aa2f62022349d437c88fa20e4a2614

                                SHA1

                                9a42e8eb8fd0cccf90ea090c22221078f85f005f

                                SHA256

                                3e85a29e06e9b3249f07f01f5b1d28bc9596d3c5a3e9a1c0f59ab4febede2af0

                                SHA512

                                fc2f49fdc448ddad09db040cb549139c971db92f9379fb19fc3b3bc5afeb7aaf236a3ff9e844246515d80bfbf892619129219020bc391fb200d43803242938f0

                              • C:\Program Files\Speccy\lang\lang-1036.dll

                                Filesize

                                83KB

                                MD5

                                b1284354327ef02b49e544ac793f6133

                                SHA1

                                19099eac446b960bd15a2585030355bfc1a661e4

                                SHA256

                                854c2e3e288ea5197fc84842107c991d081794ea6a72bcb92a0696f1f64b056c

                                SHA512

                                f78930cbb75c1ed46ccafef428d664b4e6f248d3e1cf54604e838216795608df58cb250e6e2360d509e1db0ad342a8a234cec3ae19cd140ff055079bd435d97c

                              • C:\Program Files\Speccy\lang\lang-1037.dll

                                Filesize

                                66KB

                                MD5

                                ebefa147111fde9b5201b44022c6dfaa

                                SHA1

                                c7c0a4010fcd09ac9cceb122e468f7e672c946b5

                                SHA256

                                01d24790c1aa19b18a58ad491de497e5d97551e4e69f72c4981d551d8ac28fd2

                                SHA512

                                549019de74a55553eb39c5cf68b0de87f382abf7fb857c721a20bd7797e35d424838c4fd11328950b6311a8db0a84b9280c28b539c5c93283cbd526fe2584ef9

                              • C:\Program Files\Speccy\lang\lang-1038.dll

                                Filesize

                                81KB

                                MD5

                                16e8b36b7d32c9ba1244acc916f61875

                                SHA1

                                3e87cedec5899f7d35121b07faa1bb1b00a5bcd4

                                SHA256

                                007d6edd16d867fd90ef10ba1e0dbdbc3a1d00f675df8c58a654dd1c3633689d

                                SHA512

                                5db00a5ddae227cf7c4b99dbe8ccb3a7a4bff55ed902bd349c343a33668a3b19ec63f322ad9eb7b3a5a62944bfb39f7ac8225b6410b1d1e202f1f7246b9a2e68

                              • C:\Program Files\Speccy\lang\lang-1040.dll

                                Filesize

                                81KB

                                MD5

                                0bbd0dd2123f0134289e1899beeadcfa

                                SHA1

                                c1b0d49f4d5c24b5f0605b3a514fe8b3cb5de02c

                                SHA256

                                e3b75bd3ffaa7a165adaf2101bbd0190afc7515194069856edc3397959f3a0a4

                                SHA512

                                4c85aedc57025c89d9f7719f96fc7cda02fb4bc57e506ade8cbb03cd77c5bab3ba358b3925cf2fccc9bdc4f8f1b9ae0be5840f91e351ae1b3d62b44a27bfbe87

                              • C:\Program Files\Speccy\lang\lang-1041.dll

                                Filesize

                                55KB

                                MD5

                                e4ae139f1191415dfa94906870ab28b5

                                SHA1

                                83f7f161eef6c09ca8485b5dcba95b898c973b2d

                                SHA256

                                4ab959ee29db99f381aa37e4b05fa33cb87a5c31b76e236ab0c29bd9f1d4538d

                                SHA512

                                cd002a81a9a139b71bde764820536693bdf1fd763eb23023982a55a754cdde9461b773d3ab590e339f6fd27ac84e17d633f068586e0f9b7e34a5b5887daec6c8

                              • C:\Program Files\Speccy\lang\lang-1043.dll

                                Filesize

                                82KB

                                MD5

                                ffb6e35bc7a5998ff5d5ba24a869f466

                                SHA1

                                d5a642bb6aa88fff2459cda34fbda8b4cd816f23

                                SHA256

                                4fd71f7dc6932583940f26c87032fd370999ef92ddaa828d6298984850348701

                                SHA512

                                30c3282538c6b599d4d469e5ab7558a24f5f781627d40211b00f1ad88df619ba8d199e000c3ab87d5be40760272aac389ee31a48ff2784e22312519770a49b1a

                              • C:\Program Files\Speccy\lang\lang-1045.dll

                                Filesize

                                81KB

                                MD5

                                0c56b1b96b3be18b7ec58b1c663a524c

                                SHA1

                                64159f43ce937b180b71e331693671631df07168

                                SHA256

                                c578d97c07dd5422fdd2a73e66c3555fbf302e25c85dd9a15e9c75120930402b

                                SHA512

                                031d6d25416e5a0a9a7a911a850d90e98eea174e1e630e3e7292feb5e5831e131b996b0cd7b72048fbebb90db7922fca1e4401b74d76ee5b849e8ca4421e49bc

                              • C:\Program Files\Speccy\lang\lang-1046.dll

                                Filesize

                                78KB

                                MD5

                                1ff7950eeeeeac8ae4a0eaea33ee7b42

                                SHA1

                                918cb4b578f579f0aeb59aea3d64aa918c43f964

                                SHA256

                                e4f747fc2c6d19f38aa0b04852e9ab8152bb4b04468d6115bb76cb5d06b46031

                                SHA512

                                f6fb85e66e56320bf93e38abcce29bf6a67a8df7f6a5cb1a9abd9aa794394d302f7bbf7a0249f6c8552517ed9eed960e08c21f73fda883fd52a983c841fd2ff6

                              • C:\Program Files\Speccy\lang\lang-1049.dll

                                Filesize

                                77KB

                                MD5

                                6fbe3b991761678df3943a4fdacd53b4

                                SHA1

                                23121473e2b0356ea46ee4105813c2bb6d4a1d8e

                                SHA256

                                1ace20196a9ba651d8267314fdce3686eddb82c47a8f97593a865daa18c2e7bd

                                SHA512

                                5b5632a05b50ac6d7159c7bade950c9c11d04d4d2f6e7520a612680bc6d253492da21c5bd561c2d7301fd39715021915b8d91d92146da8f0557c6d2adf4e4795

                              • C:\Program Files\Speccy\lang\lang-1050.dll

                                Filesize

                                85KB

                                MD5

                                9151b422df85c5332162254567c0c9d0

                                SHA1

                                8cb5a1b093bdd7338010d44dd954b4ca0f26f67d

                                SHA256

                                d9fb740bb46df481c44356684fe644fc945bc57ff269f8b619419a26b11d3d35

                                SHA512

                                8660a05b82de92582cbe46e79f1801c9c0516d9465ac2b6ad3417face79e1b1471fb03c9ce07927e87c03a0ee0f26237c11d3a3e333dfa8a1794718bc5344c47

                              • C:\Program Files\Speccy\lang\lang-1051.dll

                                Filesize

                                73KB

                                MD5

                                e9e5e0b4e27a260a0a5ae43bda4a1812

                                SHA1

                                c814f9172c24a5ce58374999264af02b99b828f7

                                SHA256

                                5858f1ad625b3934cb6bdf1c5a14b4368da94c0cb97d0d1b65b6985d23450b59

                                SHA512

                                311093dfa8ec36a98b0f308f8cc752797e0f2e40c6b0fb541510dcd61f33ddc135dcd6a7b0dc3982a813d499d9d685c6e5ef80080547f6f756c2db5f22f8eedd

                              • C:\Program Files\Speccy\lang\lang-1052.dll

                                Filesize

                                79KB

                                MD5

                                c4ed5ea4876722b228d9a189386e2654

                                SHA1

                                89dfdc5d45913db12a6b3cc2684ae7ab09c74994

                                SHA256

                                68f5a8b4cabf62a0c5eefb02478416240992d08dbb3214765ba341dc4cbd3b0d

                                SHA512

                                1a2f07592773b1d55ce9b20b7a67f369cfab29e07cb0ce55ec3b43d8e6dd4d784568b35d24260890c5c368daabfd1d2459bb2030d08a4ce4542af6cac5defdf7

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                Filesize

                                152B

                                MD5

                                a7ad9bb1054aa03e39b3554833d0c3ec

                                SHA1

                                cbd5b99ca100bc2f1292df23bf8e2a5a6f9640d9

                                SHA256

                                0c3eae39386b4117ad26187afc4933e254468cd12d813271f4b7420cee73c189

                                SHA512

                                d1d0b77e0bc412b4ee687e849531a7c9b70200d45d0bdbf38357b6fc59af835522e749b2fd8c2d4cde73518970568c38d73416c97381a11cc6029c14b1678276

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                Filesize

                                111B

                                MD5

                                285252a2f6327d41eab203dc2f402c67

                                SHA1

                                acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                SHA256

                                5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                SHA512

                                11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                6KB

                                MD5

                                735019f2ad21433211002634ecad9702

                                SHA1

                                6b190e39f4ef419648b99db428f0afed7eca8411

                                SHA256

                                d6dbc09e499fc71778ff27d5412ecefade002a752fa27b8a0dd0f18ecc758674

                                SHA512

                                aa65d56d0e46763bda5ef08f17df9e9b6426b9718fd28eb7beec974889805bbd1f2efc16dc39679dbb9fc6107c35e064f8ab1ba5ecb47c62399f3a1359e969c7

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                6KB

                                MD5

                                a262b50e1dda6088abd46fc609aa4d8b

                                SHA1

                                caf136fde73b5744bd9eb6020a82c2531cd4de30

                                SHA256

                                b9f27799ac41736e07299649fbc271e98b8f19beb1d045d622f9ada0e43f9ac8

                                SHA512

                                d69f0717ca0486a44033d00d27002718bb4f1496e5caca5723355dbd82aedd8eded03e49eafeb43eff12b2ccb0ef772da285830b4953da9880ea603e0a3252cd

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                5KB

                                MD5

                                693b39b734aec94521f815fa41828607

                                SHA1

                                79b156fe6379680c0e1dac317b4296b43f9e3849

                                SHA256

                                c2c0b19e68524cab33d28452a28ac10902488a01c123ccfa65d2070844ba9e08

                                SHA512

                                0d4df2817b5a16e603ecc0bbdf09ec5b099bb2715fce1d15d574d8adf59ca0ec6b8651023d509e387d9f2fc8a6ed67fb4780e73d478af4ad93836f0bcc9c617c

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                Filesize

                                24KB

                                MD5

                                e62cc4051e1f8eaa0abda5d730a2496b

                                SHA1

                                d15346e40b196bc313cbfe5ac96b3c90b83345be

                                SHA256

                                ffb5b740b8777d010f0d32a120092084c3cd32eaceb937188d698ddc22df2fcb

                                SHA512

                                3e8f6d89c7c153177b2149d86cd8602ceafedf66f5335a86b19dfa46fc38c47f6ff9a272c3b71b4464a5921ebdf2461fba25692ca916b9715bac520bf1e81a22

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                1KB

                                MD5

                                b6d5d7bf517f9058ab7aa2991f3972bc

                                SHA1

                                8a99f41b7e19652dee7b9b52e71b5d943bc817bd

                                SHA256

                                5a2f903b901801ed1553a1a234e3ea2a0538b7efa586033d97c08af606863471

                                SHA512

                                96d2aa7f27c9b7907f8244cd60c8c49a3421d08add0f85c49cd361927502dc5d49371b3b5c51dd39f70e4cea83cb63532fb464b022d2f85862805ddc03d06e5b

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58553f.TMP

                                Filesize

                                873B

                                MD5

                                853a563de9dafa47604003919ea214ce

                                SHA1

                                96aa0bc5d53c7115ff64ea7c625ba0845aeed0c6

                                SHA256

                                c37eb3576ff78f3bec23db87014fc7d9f3a1fd7717cfcf1ec3b5818385a71556

                                SHA512

                                6037acf8a412ae11be36072a1eba5a9bf91e2c4936a9862f4dd79fd849fca0d97938b8112839d7349c715a12577824360c5c1c89148175b5234ab56debae140d

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                Filesize

                                12KB

                                MD5

                                a6ac5056f8cd82184e7db6a582459e28

                                SHA1

                                caac5622491714702752178b2827d08eea2f5ecf

                                SHA256

                                fe205f4853b7e98d8504178fb9b8521f1905260e024e432d52ede3e8bb6d8afb

                                SHA512

                                f61f8ac322c0fbfa071c9510edb66523f91094695bc8c771fdaabda99d3e7586b27b2a2b6e7221d6b9e472dbf7cb39f812464b2a6b7ca0a2199663e96cc93711

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                Filesize

                                12KB

                                MD5

                                0ee520d18e08286be76743d5d07b6e44

                                SHA1

                                cba9e6ba5da8e24cd4d6303ea3b76cd5d2442053

                                SHA256

                                1f5056f9a88a20d96b139078fe0e04addec3b8b1f2b59a779c3e630726cf783e

                                SHA512

                                8f655b9b85fa9b68244ee462bc988e0182e7accd20db49fc8a3dfe08a1f0b1a1c651a3f03da6cf12f8c069dbdf7bdbfac8ac8e43b4fe829033ee28c6437daa97

                              • C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\V01.log

                                Filesize

                                512KB

                                MD5

                                28ae9c4a003e2cd55476f805280c126d

                                SHA1

                                a4896bf08241201b470e7895d0bfe27b823c52a0

                                SHA256

                                7c217b839cf03d82f43bdff5f3017c2f229be936c8d3f0b3d76de97b8e863fde

                                SHA512

                                1639e44810a4455e849809944920377d38c67126ec49ce241b77954e52f6e00d5ea18cf26eb895b025b33788b3c6fee489a94c6c252717df42e15eba413d1cf0

                              • C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat

                                Filesize

                                14.0MB

                                MD5

                                cb377c897008fdf415032c5072504e70

                                SHA1

                                7e8faa4090a06d4c3fd0b8afb2e6ada924232a37

                                SHA256

                                e805f4afb78148a79df15ab3c03656465f06291c333a90d232c251fef98f354b

                                SHA512

                                baf776a1e66de5f79debce1a0da4f92575623266eb8cca720bc7731f44881b8a9e54b098972d7e93cc73c113678c8c511038506e3df1b147fe72824a24799ac8

                              • C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm

                                Filesize

                                16KB

                                MD5

                                31fa53f460e047a0c7dc14d4e30e8eef

                                SHA1

                                c46c1144058ddf33ee4fa6ca4b619da6aacc86c8

                                SHA256

                                1fdf8844ee1b9c959f0033ef9571755488e56f40afbbecee0b6501b488ea9ac4

                                SHA512

                                3d4157f20fdde1190736b5a05fa505af90979fb953c163b6ec2153b5add402547a66ce799b33986a264e864ccfe7715fd05fc17b0d2f24934193045018816028

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\ButtonEvent.dll

                                Filesize

                                5KB

                                MD5

                                c24568a3b0d7c8d7761e684eb77252b5

                                SHA1

                                66db7f147cbc2309d8d78fdce54660041acbc60d

                                SHA256

                                e2da6d8b73b5954d58baa89a949aacece0527dfb940ca130ac6d3fd992d0909d

                                SHA512

                                5d43e4c838fd7f4c6a4ab6cc6d63e0f81d765d9ca33d9278d082c4f75f9416907df10b003e10edc1b5ef39535f722d8dbfab114775ac67da7f9390dcc2b4b443

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\ButtonEvent.dll

                                Filesize

                                5KB

                                MD5

                                c24568a3b0d7c8d7761e684eb77252b5

                                SHA1

                                66db7f147cbc2309d8d78fdce54660041acbc60d

                                SHA256

                                e2da6d8b73b5954d58baa89a949aacece0527dfb940ca130ac6d3fd992d0909d

                                SHA512

                                5d43e4c838fd7f4c6a4ab6cc6d63e0f81d765d9ca33d9278d082c4f75f9416907df10b003e10edc1b5ef39535f722d8dbfab114775ac67da7f9390dcc2b4b443

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\System.dll

                                Filesize

                                11KB

                                MD5

                                41a3c964232edd2d7d5edea53e8245cd

                                SHA1

                                76d7e1fbf15cc3da4dd63a063d6ab2f0868a2206

                                SHA256

                                8b65fec615c7b371c23f8f7f344b12dc5085e40a556f96db318ed757494d62d5

                                SHA512

                                fa16bd9d020602e3065afd5c0638bc37775b40eb18bfa33b4ca5babcc3e6f112ae7d43457a6e9685ddbe6e94b954a1dc43d1da7af9ca7464019a3f110af549c1

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\System.dll

                                Filesize

                                11KB

                                MD5

                                41a3c964232edd2d7d5edea53e8245cd

                                SHA1

                                76d7e1fbf15cc3da4dd63a063d6ab2f0868a2206

                                SHA256

                                8b65fec615c7b371c23f8f7f344b12dc5085e40a556f96db318ed757494d62d5

                                SHA512

                                fa16bd9d020602e3065afd5c0638bc37775b40eb18bfa33b4ca5babcc3e6f112ae7d43457a6e9685ddbe6e94b954a1dc43d1da7af9ca7464019a3f110af549c1

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\System.dll

                                Filesize

                                11KB

                                MD5

                                41a3c964232edd2d7d5edea53e8245cd

                                SHA1

                                76d7e1fbf15cc3da4dd63a063d6ab2f0868a2206

                                SHA256

                                8b65fec615c7b371c23f8f7f344b12dc5085e40a556f96db318ed757494d62d5

                                SHA512

                                fa16bd9d020602e3065afd5c0638bc37775b40eb18bfa33b4ca5babcc3e6f112ae7d43457a6e9685ddbe6e94b954a1dc43d1da7af9ca7464019a3f110af549c1

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\UserInfo.dll

                                Filesize

                                4KB

                                MD5

                                c1f778a6d65178d34bde4206161a98e0

                                SHA1

                                29719fffef1ab6fe2df47e5ed258a5e3b3a11cfc

                                SHA256

                                9caf7a78f750713180cf64d18967a2b803b5580e636e59279dcaaf18ba0daa87

                                SHA512

                                9c3cf25cf43f85a5f9c9ed555f12f3626ef9daeeedd4d366ada58748ead1f6e279fea977c76ae8bae1dc49bfd852e899cb137c4a006c13e9fcebf6e5e2926a4d

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\UserInfo.dll

                                Filesize

                                4KB

                                MD5

                                c1f778a6d65178d34bde4206161a98e0

                                SHA1

                                29719fffef1ab6fe2df47e5ed258a5e3b3a11cfc

                                SHA256

                                9caf7a78f750713180cf64d18967a2b803b5580e636e59279dcaaf18ba0daa87

                                SHA512

                                9c3cf25cf43f85a5f9c9ed555f12f3626ef9daeeedd4d366ada58748ead1f6e279fea977c76ae8bae1dc49bfd852e899cb137c4a006c13e9fcebf6e5e2926a4d

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\UserInfo.dll

                                Filesize

                                4KB

                                MD5

                                c1f778a6d65178d34bde4206161a98e0

                                SHA1

                                29719fffef1ab6fe2df47e5ed258a5e3b3a11cfc

                                SHA256

                                9caf7a78f750713180cf64d18967a2b803b5580e636e59279dcaaf18ba0daa87

                                SHA512

                                9c3cf25cf43f85a5f9c9ed555f12f3626ef9daeeedd4d366ada58748ead1f6e279fea977c76ae8bae1dc49bfd852e899cb137c4a006c13e9fcebf6e5e2926a4d

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\g\gcapi_dll.dll

                                Filesize

                                348KB

                                MD5

                                2973af8515effd0a3bfc7a43b03b3fcc

                                SHA1

                                4209cded0caac7c5cb07bcb29f1ee0dc5ac211ee

                                SHA256

                                d0e4581210a22135ce5deb47d9df4d636a94b3813e0649aab84822c9f08af2a0

                                SHA512

                                b6f9653142ec00b2e0a5045f0f2c7ba5dbbda8ef39edf14c80a24ecab3c41f081eb466994aaf0879ac96b201ba5c02d478275710e4d08b3debc739063d177f7e

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\g\gcapi_dll.dll

                                Filesize

                                348KB

                                MD5

                                2973af8515effd0a3bfc7a43b03b3fcc

                                SHA1

                                4209cded0caac7c5cb07bcb29f1ee0dc5ac211ee

                                SHA256

                                d0e4581210a22135ce5deb47d9df4d636a94b3813e0649aab84822c9f08af2a0

                                SHA512

                                b6f9653142ec00b2e0a5045f0f2c7ba5dbbda8ef39edf14c80a24ecab3c41f081eb466994aaf0879ac96b201ba5c02d478275710e4d08b3debc739063d177f7e

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\g\gcapi_dll.dll

                                Filesize

                                348KB

                                MD5

                                2973af8515effd0a3bfc7a43b03b3fcc

                                SHA1

                                4209cded0caac7c5cb07bcb29f1ee0dc5ac211ee

                                SHA256

                                d0e4581210a22135ce5deb47d9df4d636a94b3813e0649aab84822c9f08af2a0

                                SHA512

                                b6f9653142ec00b2e0a5045f0f2c7ba5dbbda8ef39edf14c80a24ecab3c41f081eb466994aaf0879ac96b201ba5c02d478275710e4d08b3debc739063d177f7e

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\inetc.dll

                                Filesize

                                23KB

                                MD5

                                7760daf1b6a7f13f06b25b5a09137ca1

                                SHA1

                                cc5a98ea3aa582de5428c819731e1faeccfcf33a

                                SHA256

                                5233110ed8e95a4a1042f57d9b2dc72bc253e8cb5282437637a51e4e9fcb9079

                                SHA512

                                d038bea292ffa2f2f44c85305350645d504be5c45a9d1b30db6d9708bfac27e2ff1e41a76c844d9231d465f31d502a5313dfded6309326d6dfbe30e51a76fdb5

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\inetc.dll

                                Filesize

                                23KB

                                MD5

                                7760daf1b6a7f13f06b25b5a09137ca1

                                SHA1

                                cc5a98ea3aa582de5428c819731e1faeccfcf33a

                                SHA256

                                5233110ed8e95a4a1042f57d9b2dc72bc253e8cb5282437637a51e4e9fcb9079

                                SHA512

                                d038bea292ffa2f2f44c85305350645d504be5c45a9d1b30db6d9708bfac27e2ff1e41a76c844d9231d465f31d502a5313dfded6309326d6dfbe30e51a76fdb5

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\inetc.dll

                                Filesize

                                23KB

                                MD5

                                7760daf1b6a7f13f06b25b5a09137ca1

                                SHA1

                                cc5a98ea3aa582de5428c819731e1faeccfcf33a

                                SHA256

                                5233110ed8e95a4a1042f57d9b2dc72bc253e8cb5282437637a51e4e9fcb9079

                                SHA512

                                d038bea292ffa2f2f44c85305350645d504be5c45a9d1b30db6d9708bfac27e2ff1e41a76c844d9231d465f31d502a5313dfded6309326d6dfbe30e51a76fdb5

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                2aba8f16eca82517460013a3de7cbf67

                                SHA1

                                3812192fa7b873f426c4b0d0d822b3c9d51aa164

                                SHA256

                                60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

                                SHA512

                                4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                2aba8f16eca82517460013a3de7cbf67

                                SHA1

                                3812192fa7b873f426c4b0d0d822b3c9d51aa164

                                SHA256

                                60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

                                SHA512

                                4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                2aba8f16eca82517460013a3de7cbf67

                                SHA1

                                3812192fa7b873f426c4b0d0d822b3c9d51aa164

                                SHA256

                                60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

                                SHA512

                                4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                2aba8f16eca82517460013a3de7cbf67

                                SHA1

                                3812192fa7b873f426c4b0d0d822b3c9d51aa164

                                SHA256

                                60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

                                SHA512

                                4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                2aba8f16eca82517460013a3de7cbf67

                                SHA1

                                3812192fa7b873f426c4b0d0d822b3c9d51aa164

                                SHA256

                                60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

                                SHA512

                                4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                2aba8f16eca82517460013a3de7cbf67

                                SHA1

                                3812192fa7b873f426c4b0d0d822b3c9d51aa164

                                SHA256

                                60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

                                SHA512

                                4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                2aba8f16eca82517460013a3de7cbf67

                                SHA1

                                3812192fa7b873f426c4b0d0d822b3c9d51aa164

                                SHA256

                                60b85fad2477b8c0138067be3697290b280b9334cf408cb57894e3baae615d0d

                                SHA512

                                4e059f70ef420c22d69199557ff3eab9e51fcefc75d220b057f1508f9566cd6251f9e06a8fe3695bf7d913ebabd2519ce52f485f2de9a5e4ab3ebc553b877fb0

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\ui\pfUI.dll

                                Filesize

                                13.6MB

                                MD5

                                1bfa036321fcb209564549538345a289

                                SHA1

                                8ede722a5cc6135847ad5276f30143022fa7bacf

                                SHA256

                                547e48f35a1c38362cfa71a3ffe1b81cc8d61eb204157828e2ec58a80f3e4b2e

                                SHA512

                                9729cc5ca18dbd58b516169de053d50e0df9288fc2d91cbbbd887573fe006c5f506789f23a09a73dfcf75fa71b9cff88e0f59da550263d877939be8c4f996d92

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\ui\pfUI.dll

                                Filesize

                                13.6MB

                                MD5

                                1bfa036321fcb209564549538345a289

                                SHA1

                                8ede722a5cc6135847ad5276f30143022fa7bacf

                                SHA256

                                547e48f35a1c38362cfa71a3ffe1b81cc8d61eb204157828e2ec58a80f3e4b2e

                                SHA512

                                9729cc5ca18dbd58b516169de053d50e0df9288fc2d91cbbbd887573fe006c5f506789f23a09a73dfcf75fa71b9cff88e0f59da550263d877939be8c4f996d92

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\ui\res\Montserrat-Regular.otf

                                Filesize

                                44KB

                                MD5

                                27e50ffd6a14cbc8221c9dbd3b5208dc

                                SHA1

                                713c997ce002a4d8762c2dcc405213061233e4bc

                                SHA256

                                40fc1142200a5c1c18f80b6915257083c528c7f7fd2b00a552aeebc42898d428

                                SHA512

                                0a602f88cfba906b41719943465edb09917c447d746bfed5c9ce9c75d077f6aed2f8146697acd74557359f1ae267ca2a8e3a2ca40fb1633bde8e6114261abd90

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\ui\res\PF_logo.png

                                Filesize

                                3KB

                                MD5

                                079cca30760cca3c01863b6b96e87848

                                SHA1

                                98c2ca01f248bc61817db7e5faea4a3d8310db50

                                SHA256

                                8dd37d3721e25c32c5bf878b6dba9e61d04b7ce8aec45bdf703a41bc41802dfa

                                SHA512

                                3e25c10e3a5830584c608b9178ab062e93e0e9009a7d897bb5e3561180b0b0910bd4178063d982eb33806a005c93931ae2ec5be520ec0d0c9a7c452cb78fd6a8

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\ui\res\SP_computer.png

                                Filesize

                                66KB

                                MD5

                                873b7c34ced38adaa2d01752099c09df

                                SHA1

                                e659d094f6e3fe6f71a3f1b047b75206bab168a0

                                SHA256

                                aced6376065f2c71b4b619823f735bbdcac967a5113cd4e6b978298a58c927c9

                                SHA512

                                a8d54d52bb5ec4502cd4bb829eef23c1b2edff9daeeca0f4fb7dbaa0cabdcac763a60aedc8393ba12a393a8263a5c06d3555d7b165cf9927dd9cc18d68b9e510

                              • C:\Users\Admin\AppData\Local\Temp\nsk6DFE.tmp\ui\res\Speccy_Logo_72px.png

                                Filesize

                                8KB

                                MD5

                                1787175d95eab213cf5a8bc25e252676

                                SHA1

                                1d4bd97b2bcaabd26f2ef7781b91233575e1ba0f

                                SHA256

                                65fa6baa9d140251d04069cf538f3262ebbb0e4e62d58d06cc58ad8b22085a83

                                SHA512

                                de1df226bb9bf84305aea43c237ea76937a9df0c56ecd9afeee1920c3f4d600fde0cc0c027ca397fb6067ffb1a7fe8c03496d82ed844bb4f47f32b2b30eda52f

                              • C:\Users\Admin\AppData\Local\Temp\sce37415.tmp

                                Filesize

                                12KB

                                MD5

                                009819c0abc869038a9d184bd7a9b6c7

                                SHA1

                                3ce497bc1ce7cb35209fd2a8556dabae7ee3adfe

                                SHA256

                                2fd69eb9a60ae80b0168ff8f4656e5981701f1558bf5707997b1ee9ba35c3185

                                SHA512

                                3fe0065e16ade01bda35f0c850b6a67cfbd0e3377e7470c67680f2502b76444261f6abc4dbd6ea2822d1a76f3d386c6f7af7aa5bd8f32659d15912428ec7b23d

                              • memory/460-285-0x00000000075D0000-0x00000000075D8000-memory.dmp

                                Filesize

                                32KB

                              • memory/460-262-0x00000000074E0000-0x00000000074E1000-memory.dmp

                                Filesize

                                4KB

                              • memory/460-240-0x00000000066D0000-0x00000000066E0000-memory.dmp

                                Filesize

                                64KB

                              • memory/460-258-0x0000000007750000-0x0000000007758000-memory.dmp

                                Filesize

                                32KB

                              • memory/460-260-0x00000000077B0000-0x00000000077B8000-memory.dmp

                                Filesize

                                32KB

                              • memory/460-292-0x00000000074A0000-0x00000000074A1000-memory.dmp

                                Filesize

                                4KB

                              • memory/460-261-0x00000000074F0000-0x00000000074F8000-memory.dmp

                                Filesize

                                32KB

                              • memory/460-234-0x0000000006530000-0x0000000006540000-memory.dmp

                                Filesize

                                64KB

                              • memory/460-264-0x00000000074F0000-0x00000000074F8000-memory.dmp

                                Filesize

                                32KB

                              • memory/460-288-0x00000000074E0000-0x00000000074E1000-memory.dmp

                                Filesize

                                4KB

                              • memory/460-267-0x00000000074E0000-0x00000000074E8000-memory.dmp

                                Filesize

                                32KB

                              • memory/460-270-0x00000000074A0000-0x00000000074A1000-memory.dmp

                                Filesize

                                4KB

                              • memory/460-282-0x0000000007590000-0x0000000007598000-memory.dmp

                                Filesize

                                32KB

                              • memory/460-284-0x00000000075D0000-0x00000000075D8000-memory.dmp

                                Filesize

                                32KB

                              • memory/2284-703-0x0000000002520000-0x0000000003520000-memory.dmp

                                Filesize

                                16.0MB

                              • memory/3400-766-0x00000000026F0000-0x00000000036F0000-memory.dmp

                                Filesize

                                16.0MB