Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    154s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240214-en
  • resource tags

    arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    21/02/2024, 13:55

General

  • Target

    NetSpot (1).exe

  • Size

    80.1MB

  • MD5

    8ce5f5b39cd7ab4a9b227068d3f3b12a

  • SHA1

    7559b2c5c2d1bfad6b22107caed801e456a152b4

  • SHA256

    758c7a88d4c1b5332ad90ad057858bf67d9846400913c1c1a2bd52f187482e28

  • SHA512

    369aa40282e0d097fc551b6bfb78a0193f4f54c5622ce24ca39ecade6ff2f18a5836faceb2004d89b84acae03ffd9641766eb88d1b4faf4d5e922d56422d1b0e

  • SSDEEP

    1572864:AZUu4xhJmUsFNPsmItetYNWYbYoOUobwwQTQXpOGAVWAXFAJCYsXp8luS4J9lPZI:CUu8PxKP3lt+WYDwb1HYGAVWAX20+lu6

Score
7/10

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 1 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 30 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NetSpot (1).exe
    "C:\Users\Admin\AppData\Local\Temp\NetSpot (1).exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2044
    • C:\Users\Admin\AppData\Local\Temp\is-U0B8N.tmp\NetSpot (1).tmp
      "C:\Users\Admin\AppData\Local\Temp\is-U0B8N.tmp\NetSpot (1).tmp" /SL5="$60210,82973157,925184,C:\Users\Admin\AppData\Local\Temp\NetSpot (1).exe"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1260
      • C:\Program Files\NetSpot\NetSpot.exe
        "C:\Program Files\NetSpot\NetSpot.exe" -firstrun
        3⤵
        • Checks BIOS information in registry
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of AdjustPrivilegeToken
        PID:984
  • C:\Program Files\NetSpot\NetSpot.exe
    "C:\Program Files\NetSpot\NetSpot.exe"
    1⤵
    • Executes dropped EXE
    PID:4684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\NetSpot\BouncyCastle.Crypto.dll

    Filesize

    704KB

    MD5

    09f67c4a0dfc60f4ff4c84b29b40de23

    SHA1

    2447ba705c8e0daed18317747ab7b71a439a3ea8

    SHA256

    2e117aa416fe2a26966de3fe7953cbf4ec9f5abe57587ca7209f4e0c581e9321

    SHA512

    1fccece1d736cb93057bf412dfedff1f6fadd897b4ed18b8132d104b6ea00cd0530654421b4fcd3217ee1d7bea3dffee2a14f38085862cc10c691618ca132839

  • C:\Program Files\NetSpot\ITextSharp.dll

    Filesize

    1.5MB

    MD5

    6c126a5a105e44c396622d9d4517b8ae

    SHA1

    49e94ee62852b92f2cf2fe78a11788a98d0ce7dc

    SHA256

    c1fb0d723aa2dd0c2cad18174255a9313c339d7d2d710d56f3bca3ea8a0c30db

    SHA512

    3e857f76e1f1667be5344d79ca475c7ec9361fad5c4f8b760b866d6a1853ad80c9d7b2ba51439439bfa2de51074b68a784368fc8cff3f269cd1e15a3223c0ffe

  • C:\Program Files\NetSpot\Microsoft.Web.WebView2.Core.dll

    Filesize

    491KB

    MD5

    771f93f95a675be5e18764ebd03faad3

    SHA1

    efc18c566fa2ecfce34842065aff94e9a2af65c6

    SHA256

    9e4cd6fc41d39b8d8ac3bc9e6c3831f5ce889b02d67d15b6b131c49f9b4931bc

    SHA512

    0d8a936a0ca75a4c20c205192ddf303e4c2282644578a18753554e6b71ba9cd04285138cac0829060d9983d2c727d14d8532e327379cb2148a03b6186e12100d

  • C:\Program Files\NetSpot\Microsoft.Web.WebView2.WinForms.dll

    Filesize

    38KB

    MD5

    d399583f6b460f81f4ac093092f1e689

    SHA1

    1c88a6fab0c6c11f02d4885994002061d2286346

    SHA256

    d7c38aea080a3b75c1e995afee9fcf3281b5a386df5526f712a5691a959db0e4

    SHA512

    ea805fe011c797c8248289a2f22651a1304e414825a4bd14fcb7406a8dbe5c3c3e6e94dd2dbce3a0aeb2accdea19c2ebf80800a9eb0dcf0140808cb2e1617379

  • C:\Program Files\NetSpot\Microsoft.Web.WebView2.Wpf.dll

    Filesize

    45KB

    MD5

    69f06655d5d78aead71408b2e2702550

    SHA1

    fa57f4ff13ced854ee78c358c7a000c35d9fd1f6

    SHA256

    610fc814767f08378861b15fc6685ff6d34261931ba0324d309ea902b48bdf44

    SHA512

    9fd911ec95a44f4830887e9efda7aa808df7349918fe45c20f3246dc40462ce5ce419196dc4a2f5c67e5970bfdd34f55ba36d8bbc53606a15924596c13db0290

  • C:\Program Files\NetSpot\Microsoft.WindowsAPICodePack.Shell.dll

    Filesize

    541KB

    MD5

    5af9ef2d3e04e86e8f05f6c368492f50

    SHA1

    0531597e55fa05a662b6f4f368596ac7d0e51287

    SHA256

    a5107f0aa4908cd1237bd818bcc797543c0ea4beed0429cd160a9920ce13b201

    SHA512

    bbc3453c41e094e840fec6f33b9a523b2983eaa1725268e25654960c07157f95c6d74c90edb31895661db598dd5b41e81abebe980257042c0885b5788482dde4

  • C:\Program Files\NetSpot\Microsoft.WindowsAPICodePack.dll

    Filesize

    114KB

    MD5

    406ae2ec01f5c8d9a497a93ce899b6d1

    SHA1

    ac788c740a3d50323b9c370a8781e7a9418c25c3

    SHA256

    a62f9a9aa01ec1f7fe207ea53a5f065c2925910c54fa084485763c1e46a84711

    SHA512

    6d136eb03d6911f2432d61558b771a56ad32b3b88bfbf08f8408436a8d0a086c8017da22d73a830a66070559142ff8538a02316a006e7e709489ea2440f02c66

  • C:\Program Files\NetSpot\MuPDFCore.NativeAssets.Win-arm64.dll

    Filesize

    16KB

    MD5

    9a6d05620fdccf0faa0035a92d449124

    SHA1

    d6a9f5b1856de5415a5c95a6b5fccb6d65e18c82

    SHA256

    1872d58bc3694a46e64755f63a706aa79aa05f7c3859c091aab2c9d07d5704ec

    SHA512

    8d4c4fe5fedb7b45b5980fac62d919f89a54085fdad15b2fd10cdda4ec840926aed3d207fe08f79135f10ca039ab441709e7d213b78631777a5fbf71fad4c62f

  • C:\Program Files\NetSpot\MuPDFCore.NativeAssets.Win-x64.dll

    Filesize

    16KB

    MD5

    c0127a419ae6eb2eaf245ce3b9e5eaa2

    SHA1

    3bfacfd3a6b135043e7682473f2a9bb2c015873d

    SHA256

    a2f66c3723a053002765b744aa91c2726a9fde00e4ad4a2fa08428601abf9cc6

    SHA512

    403d90e32cdc82b654bb3e1636500387418ca2386fad26845e69df78f38d90186c4557f450a50edfcaa3041605da426862168d69ee6baeb5020a8a736bec17a2

  • C:\Program Files\NetSpot\MuPDFCore.NativeAssets.Win-x86.dll

    Filesize

    16KB

    MD5

    f7287ac5c77ed7682110dc60deff5364

    SHA1

    1d909ecad37f36f8468f273f5befcfe21dbd302d

    SHA256

    319308fd8d5e0464ce199de497dddd1e9666b064319f7fce631c4a13150da787

    SHA512

    fdb64de310e7066fdeea7c47d9b6cb661b7f42722a755d597c6eb5e11622b1b361eff4c0e52c937e417e01c2cd7aeea8785e739bd2f8d0931cced9518764ea1c

  • C:\Program Files\NetSpot\MuPDFCore.dll

    Filesize

    93KB

    MD5

    3963d31541913bc800f0b213b32671fc

    SHA1

    76ddf0a0cbe75c475d000fd86a25900a720cba88

    SHA256

    48a86a9037b19ecc05bc4f1270c9eb5c4b2209d549e0e44b6d132b7262f00022

    SHA512

    37367cb322315083f8d41a2a4f9993da168fe2a4ae8bbcd5ba917914ed5690d0fa41b734eb42003fe14258ff1566a68d454632a8efb5e0f014e003af372a309a

  • C:\Program Files\NetSpot\NetSpot.Base.dll

    Filesize

    5.7MB

    MD5

    bdd29a63f0a9b1b1cbf032be7fdff881

    SHA1

    b742d0ca68790e09e9a959093d7869e087ceb0c6

    SHA256

    4f450ea7b3e48c9172489916cf86bdb450b544c2a37eb03f6af72894264ce36c

    SHA512

    958874de66cc097573ee1c4848f2545c5252cbf75c969fdeaa73b7273b10e4e73a3879d290a78e72d5c28f24d82d62e4e69c944cc5b9ea4f8d310d17e7ee1257

  • C:\Program Files\NetSpot\NetSpot.Core.Base.dll

    Filesize

    208KB

    MD5

    20ae959144c1617ca06522162bd5b2de

    SHA1

    654427c860d59c787fc4a51ee2e2964635b264c9

    SHA256

    1f42a24c33d0cdf2347f0105d35278fe9d713c6e7ac5bfb3ac97c77571d58d62

    SHA512

    5118ed89c8b3d8165fd32b0dd5b6bfc58b678fa978824b5ccfd79676818a7a7184c01816731292f48b02b2b6e8e9c8238081a2f7f4d47cd96df0bfad73567450

  • C:\Program Files\NetSpot\NetSpot.Core.Discover.dll

    Filesize

    49KB

    MD5

    5d4a784b1151f073301874aebfb3d5dd

    SHA1

    1a448375fba97616562954ace158a6c1b7acf57b

    SHA256

    8bd4e11d3141377ca835518c45440380285890195fe2c85d1d73ff4159a204e6

    SHA512

    2a626d769381d5c34e5892093cbcf23df5efa5677458f5090576304039d773d95bb3125f651cd08658081751e2226e8f6e7980cad9067c71117d42405444a3b7

  • C:\Program Files\NetSpot\NetSpot.Core.Predictive.dll

    Filesize

    67KB

    MD5

    cda636e8320d3e9f3b661049f1e66237

    SHA1

    9e842cd6ab967ebaa317c60f0e3fcc21a2ea0614

    SHA256

    86e5d9ecee4105e3408fd8c2ae7fb78ab8c87a68e5ccdd1f19bcf2cd5a783e7e

    SHA512

    570b9adfbfdb7a58482ec5ea2277024f6d3902df4308433d853b43eb3fd4af0ed0dcbb5250ede87e18b81c421e3a86edfebb4a2d1c91bc2cc3be8ec80ba79366

  • C:\Program Files\NetSpot\NetSpot.Core.Survey.dll

    Filesize

    86KB

    MD5

    aa0265ddccdb445ae6205238472f801f

    SHA1

    04cbe89552c8c325465010d11f92924515eb554e

    SHA256

    e19f114a26a7aeba795ba3ff2bcc83744a6716cae70979d9cd88dfd2657faf6e

    SHA512

    ccd45bac3565fa98a45925bf12fab4d61008aaefc79b2912ddc19d1b1e54730c4e83ff4a588f8e24a38ebf29f72de35e38c29246c5f25904ae2e56ca25e31a3f

  • C:\Program Files\NetSpot\NetSpot.Discover.dll

    Filesize

    299KB

    MD5

    5544034252ae9539556a5280668da27c

    SHA1

    741e53ab68b10ec7e648a7952b117a7fbc490c8c

    SHA256

    40b566171ad85a6e057dacfb0c910178d2d4b6277c314768dcfe78c5679710e8

    SHA512

    b057d201fdf4b67c58a69edbebb7bf0774fa34da326cd67e9dc9db2e8a080b167cb4cd2c8f72cb7521eb1fed3d7e8f8cdaef832394b05da618c8e8e4b3b0571a

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.Engine.dll

    Filesize

    25KB

    MD5

    ced278cee35e9a8d28369d9e0b47ccd1

    SHA1

    66d2e501fe4d94cc833da13288f11b86e79ad5b9

    SHA256

    241121d3aef4781a595121a40b2ff40159587821c872c3e8601200c70a8d03a5

    SHA512

    84ee94d96b6a28518f4b5066ad72afc7cc7a58d69514d0b916e89c5f8c6d56a6b026a1dbfbaed3c23b651a2edabe9d7e7c69343fe5531fc68f1e9a67bfff8c17

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.IperfServices.dll

    Filesize

    20KB

    MD5

    406d01a814e845a3b5abc94931a1ca14

    SHA1

    c55c0507a16b0ca7bfd323c05cc8bf64c6ae9d72

    SHA256

    fdfd4a7cbf9811810ba1f8bbe745bcd674275c06528808ab4008c0f2717fe185

    SHA512

    e3f898e86f5496c8334933924aa68050e1827f81139e6fb695bfd9407529ba680d605c3ed7d4822262c44605ad1963c35165406875d8b615771e1ba6d8c8e1d0

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.JsonServices.dll

    Filesize

    281KB

    MD5

    ea838bbb8c7e59abe1f8f484d40a063d

    SHA1

    e024251b0dcfe376daa4712cbbb7d41d025bc450

    SHA256

    a5bc3241d5778c887428405b7840dd05c3dcc8919f57b7de30c2dac3ad1ed253

    SHA512

    8e1b71a3d6322c9923fe4ecf50004da97bb9d5f14cf9fbb404f7383800c0048a58a283fdc359b96c1559c9a53784fb18742bcac41f4bda413a58cd6de6c4630a

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.Polices.dll

    Filesize

    18KB

    MD5

    3806dd6191ddfa52be38a2e24ee1553d

    SHA1

    6a08f301112873e5039630ef618b3ecebf04e1f6

    SHA256

    21b098c0d71d552ba0fc22e0e7e76383b0fa2c9248c296aced744ff09914698d

    SHA512

    5d8d9cd398aa22dbd4cf772d96836d14cca57c0013a4ee01a027f7d2ac3d765f5ea26df539258bd1c703da0cd83d0b055ce42629e9e5943de5107d6e367c6538

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.PredictiveProjectFormat.dll

    Filesize

    93KB

    MD5

    b739ba39557a7e65930f0273c8be97f5

    SHA1

    8e06026bde4c3463d0720b9c2abe3811604fe3d0

    SHA256

    f1f529dbc31344dede7ccaefa1c6b67e18f345178513d2e0564ba48578531c96

    SHA512

    3d252e7eb1fac0c04699169b87448fc0c4b80ee81188455158c41f585291e0710756212393c9ae417de7839116ea115390ba5f9a5e90cdc7ec64fa40f7971550

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.SurveyLegacyProjectFormat.dll

    Filesize

    40KB

    MD5

    4a01c17927d78b386ae3138d974eb4fb

    SHA1

    fc24a8d528ad089e2fdac344598dc71b76f89044

    SHA256

    fa533973b5394afeb264aef26a6a92615b5dbb3d3b8a9c0e61339da7cba5c374

    SHA512

    b8875026365c4701e3217d8112ccd3f27fd4081767d58a636a37dc09a888acbfc2373afe0431c34abbadd480575199153da9b6101c89257ba13d6e652dfa652e

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.SurveyProjectFormat.dll

    Filesize

    125KB

    MD5

    59fd4ad45530fb35fa5fadb129520b0f

    SHA1

    4d2e32db40fa19669a0a329cc8d0b90a598276ff

    SHA256

    1a572ef9990966974785653d753427fce36cf2c55edc240e26c3a97c4bb1b86d

    SHA512

    8c1e588d2cc0e3168cacbd3404d37af76ce83916ec489fc0803f4fc17e69bb25a4963ecc69f5ddb046f447d8fc833139afb1f9eab4a219e5b6e17763bf134894

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.UniversalProjectFormat.dll

    Filesize

    22KB

    MD5

    0ca7445ed82e327d9a1fdba38f1eeffd

    SHA1

    7b56dbf6e4be653f838b39a17108998a768d6249

    SHA256

    e038096e901f3760d4635121b409c13356b2258e7685dda299735d59eb90b118

    SHA512

    7ba00f39bb5e73391fe5f7fefa815928a8aaa81d6cf010bac61f641ec112d0b5d66a3d771131e0d811c28d7ea3ba4febe66daeab5206504941a10f7ffc2856a6

  • C:\Program Files\NetSpot\NetSpot.Infrastructure.WiFi.dll

    Filesize

    56KB

    MD5

    1ae00e38d734fbf27a78735437004011

    SHA1

    02889a3ed357d63bb1e3ced38cc3c724e1f9f9a2

    SHA256

    9e7b00a44f3515f15a5a3f89b43279cffd7d6f744a9c88974e98de70d8f6f81c

    SHA512

    9900972f5a989d7cd5da1e4056bc4ab532fe8607d7e6fc9cd6dde14a25355da748309e552b7994eac601d6ab1b9115b5899efd69cb66b8c54c03d86f9e029743

  • C:\Program Files\NetSpot\NetSpot.Predictive.dll

    Filesize

    268KB

    MD5

    b770b480b1dff5e7f5da6f611b72f2d3

    SHA1

    bf6f4b32389c2871618d8be98fdaba2e118f5f3c

    SHA256

    89f5f09acdf6f3f6656d5709e57fdfcddecfa4bf7c7d84895f385ae37548ac7c

    SHA512

    0b3abfe0e3eb45f3100e3cfafd5f6e9c129eeeb366660944eba62e4de6b3bf81286d66ab3ed65a7e170a6601899be7c87d73a955f79c872a8ed9880dbce8e0db

  • C:\Program Files\NetSpot\NetSpot.Survey.dll

    Filesize

    497KB

    MD5

    dd0cf333fc1b8bfe44f57cd100509424

    SHA1

    a5a83492e76bb0118d7372fafb2d4bbe4f019f26

    SHA256

    6a5e06143e114dd43edeba51cee67ba4817e3fffc7a2d17c9ed4e4af98066c7a

    SHA512

    9e72d253c14290d31ec14d35a9d91116b36f204f937e1336a23bf5cb890685af20dcea12aa00515c2269e8cf67aee6cc81ef583eba32d4ef9bf22131e292dab7

  • C:\Program Files\NetSpot\NetSpot.exe

    Filesize

    452KB

    MD5

    5d11ae8fef71cfff200d1a28caab6bfc

    SHA1

    c9601069312a8fe7af17f21149b9950438bdcb98

    SHA256

    6e53ec39fbf8fca637c1516d787133af0436c9fe0f2c8edbf467b6068c67692e

    SHA512

    7ea16fc73651d22d73ea570007b52185b14df8910426a77a1fcf3ad4dffacf3506fe57156377c744bc23700a009d42d646a4211bdc0d401cb0d28510b58ac21f

  • C:\Program Files\NetSpot\NetSpot.exe.config

    Filesize

    456B

    MD5

    0adb1125319dd1f874237e526d3d74e0

    SHA1

    140e9913c44be829bc5ee36b9f37588570346b2f

    SHA256

    635b58f90ad8d5a07f8899aeb9fa54b16842632f8d2fb2b026f113bb2e921a1e

    SHA512

    bfb79686594109c0824eb7df4cb5a5febd995770b1c2e611eb2952633abcf90fbf46dcbd8265c52ea40c823f2c63f0b12c21b7913dbf75f19425e1cc0e0704f3

  • C:\Program Files\NetSpot\Newtonsoft.Json.dll

    Filesize

    694KB

    MD5

    446856771077f3f59d680f1d598a1094

    SHA1

    98ca5e8351cabc78917a7327849081cd3b226054

    SHA256

    1355da2ca786cc9c3410c04ce2f06e90d3c2c7896849e9133ac3b3122549b0f8

    SHA512

    dbb1461d5c08f29265220724db86ec04134abee31a36e7448e26a911c91246044cb47be291e1487770352708e45468a6c85e1703d3160aaea4e679b32e51874e

  • C:\Program Files\NetSpot\System.Buffers.dll

    Filesize

    22KB

    MD5

    bda4f42c08756fd768adbc64a42d42bf

    SHA1

    8efa0d581dc5f0c414e5f59c99a8b21b9b6d8586

    SHA256

    15a26cfe3b29e95c6ea82180a776855246ba7943cc8eda92027e55b042ba4767

    SHA512

    48b2480fb79852d885d2feb12c00f4141e49deb1771ddb141582100c9a5367c297516de200f2b62c4fda037dcb06b79c892108aeca9c5f2e94511b5510e58d8b

  • C:\Program Files\NetSpot\System.Data.SQLite.dll

    Filesize

    411KB

    MD5

    3b35a94274beeb1b87406ecbd09b1f5a

    SHA1

    e1f0332812b7e5bdef70b8e088b85743071e3b42

    SHA256

    5b2f115110208afc1fada50c90bbeb468691c36fea411bdf5e3b13bbcdf8deaa

    SHA512

    0cd9dfc1b13f59a1c2c25c6694133e67e81d84ad77f9cc5bb9c6cecada3fe124eac7d239d7cfd7a8605a5d1d92d32e95cbc5ec603a6675d3607799eea1f4b8e0

  • C:\Program Files\NetSpot\System.Memory.dll

    Filesize

    140KB

    MD5

    413409fb1cffa5e7db28fda1a9236952

    SHA1

    e7a100e2d0fab05770c8876a8699dc48faf7b128

    SHA256

    d31d1a7799cf078202226314444fe1fd63360b58c58ac415b28b76a4a6b32573

    SHA512

    61e1a1eae5d9c032898a55721654f65f6e6bc7ef2b69d17bee428bc1926ee12fc76ddf258a8b62b597de960d35196426f0a6fa8df510efc266b64ef7f06cb1a6

  • C:\Program Files\NetSpot\System.Numerics.Vectors.dll

    Filesize

    108KB

    MD5

    50fade74a1def2149dc0eb8aa6d4f25e

    SHA1

    af6e1fcac111c8e92d7d1683e2a6d56a633a959b

    SHA256

    e1fa1d677735de90bb5614a06ecf8df49112e7be069e19a1e5519033101edacf

    SHA512

    7f046235e13824be9b82c417f0db546db9875c8e8e7c3a783180e4e6e0b3bdd5df3262bcacc9c53f662e404035148c7feca5af6c2cb54189df8cd605b834dd6e

  • C:\Program Files\NetSpot\System.Runtime.CompilerServices.Unsafe.dll

    Filesize

    18KB

    MD5

    dff0251484f6bdb4a270b1fab1ff84f4

    SHA1

    ed02ce81c6a7331810f26ff79f1871e6540101b6

    SHA256

    7c366d6192b96a8e6690c6cad220efb1baee7ba78c477c82a8b8f470ad259fdb

    SHA512

    9e405953126139de9893e722bb4a2278102f9cf49d94050cbd4e156e5284edfcf43ea9f052f4bbdb2b0b57c8621b0d9daaf214664f185be9d4ba0bb6941e588d

  • C:\Program Files\NetSpot\de\NetSpot.Base.resources.dll

    Filesize

    120KB

    MD5

    65ab0b8ea9bff9934c3b7d6e705ff169

    SHA1

    d50a3ca2b0ab9a0cbd0ff7b57b580d318ae67213

    SHA256

    6a6734d94d73ff9e6c9be7cdb62f3b6e08690973806ad0b3eaf881d7840c2e22

    SHA512

    524111a472f80ecbab1698faf0756ccc6625f0f95b2040ed9bdc319f88395891d35e6c3a4fb4e7338958b6ba039ba92de708bd8a920bcc8fd877469e98a748ca

  • C:\Program Files\NetSpot\en\NetSpot.Base.resources.dll

    Filesize

    114KB

    MD5

    c1a44f4b7036958d269093c12b3d14c1

    SHA1

    c88cbd464722b0198226d2864635f56f1d6511e0

    SHA256

    87c3cbea0aaf7dc534a94e0bcee3f1c8fbae13c5b08843e540e379bcfbfdc44c

    SHA512

    27fe509cae913c29446833a1cd3dbc4228a2b20cb0ca62707679bea00b9a163c856f89c1d3ab56d1b745cf0fd83d34ab7cf510c25e69367a6ff9eb65aed6b33d

  • C:\Program Files\NetSpot\es\NetSpot.Base.resources.dll

    Filesize

    120KB

    MD5

    c8371d18a26f4422a9588c554a9425fa

    SHA1

    79419efefd0b781bade4393b3170b80220132c7b

    SHA256

    574be0bbdd22829122427cef87cae658a738f75428735b81ebe6b30c85fb8912

    SHA512

    74d7b1ed6aaa7f91d97978971571a55881bb593d729fbe2f847d19f55db87652ea187ffaf829d34d9fde403e675084f9caf7413e0eed3473c2ec756fc8e5e1c8

  • C:\Program Files\NetSpot\fr\NetSpot.Base.resources.dll

    Filesize

    123KB

    MD5

    a0c6d392f74cb90d7fac24752953414a

    SHA1

    3d45b3d4533a08e0464e439e5025df983cd27083

    SHA256

    81a0735ec9d0516624b3a5a8fa0c8f4f82d7d3cced0cfe56f204eab4d70009de

    SHA512

    5eb99fba07b5256c863977115a5677998fb88583675868cf23ca9350091bb3f4bd11fb4200ca2eca5a76f9b735d7a3c4a67f8ca518130698e7627cb648510560

  • C:\Program Files\NetSpot\it\NetSpot.Base.resources.dll

    Filesize

    19KB

    MD5

    15c81339494aa64a8516908d0834cfe4

    SHA1

    406f59300648abc4d01837752d85d59f3c8fcbdf

    SHA256

    38e3e17ed2147f2f18c4af0f61e42713ba224d44808ac91d593ff066c0ca692f

    SHA512

    cf584771fcbb64a46484e605a717af2d8cf3f35e1f1275831c2e59f44864bcb5ef0cefbd19e25bf910ff4a0f446e19c4578540125b6e3e5ba8b43eba5be2d3e7

  • C:\Program Files\NetSpot\ja\NetSpot.Base.resources.dll

    Filesize

    129KB

    MD5

    09c887f0ed9b56226ae400af223e8128

    SHA1

    053503d13e24e884b1dfde1aa5a1ba4cf275fb23

    SHA256

    19e897ccc496337de3e3c4b0507293e329d0d6be60793d53a513109b2bd0b291

    SHA512

    1daad34dfa12430cf7a0a1ad2909190db8d138ad4f99c0e8e6ac85a5c4776250bea4414d38a6003dfbc4bdb5c05966d5437cf0a612cbace7164bff24558e8463

  • C:\Program Files\NetSpot\pt\NetSpot.Base.resources.dll

    Filesize

    122KB

    MD5

    901ccd8fb3d9d974fa53b1957fa07d6e

    SHA1

    ffc243ed5dc2e3ed58fa10ba1b70432d6e6dee91

    SHA256

    fdff149028ef2e927dd46b1a250d395de85f43ba9ba5de253679955a25bbcf7a

    SHA512

    63362e18eab228614cd71294d80b6fbe39e168a4f43fb60371163b80e1a37eb82d77f234f65e46045f9839e69c7dfc386f6b847d2f1c1ab82abc4a7859cafcef

  • C:\Program Files\NetSpot\ru\NetSpot.Base.resources.dll

    Filesize

    19KB

    MD5

    ff95c8643a53680f671b29ef6c01efa1

    SHA1

    98bbab0256c24887f93293ca25f2deb6bcb0fb47

    SHA256

    6a2158aacebaab7e636fe1771b39e015014c4e5ab9f51e883328bd156c151ca1

    SHA512

    cd1365ce480b4aee005603e30a1b71fc9b66fc0e4339722ef16dcc11f0c0e7b751f03eaa06271cfbe9455c44b5524586e34b23776a739f4dff1bc01a390b7b83

  • C:\Program Files\NetSpot\runtimes\win-arm64\native\WebView2Loader.dll

    Filesize

    135KB

    MD5

    546137c6c307f25ec4995c42e1b81256

    SHA1

    6c3036bc36bedb2e1c6142d46a4e5bec62c6edf2

    SHA256

    3f6cf33900e9f7718abfd6cbf12eda4e72bf5f8d481d9abf768543bbcb5dfa68

    SHA512

    15a501a1f42ee6e950fd3acfa1024f02cdf2354dbdc6d721e1bf2773d5e7a216ca4fa67334479a851d05f5e84c127b903e6f62aa26e35726449ef5164ea766f9

  • C:\Program Files\NetSpot\runtimes\win-x64\native\WebView2Loader.dll

    Filesize

    159KB

    MD5

    7f1e00877fa248831dd63892718b90b5

    SHA1

    4a61ed35fef63b2836837fb0f09bcf3317c7efbe

    SHA256

    c56cde1561968aea06c0cad4f659e33d3b4be1bbf92d8694b0904bc3d0f6bb77

    SHA512

    4b6b378e2e826c7a28b81a8d58c7c6ba3514a3695cbfbbd8b991556cde0336202b1717bba182b9375724ca441e6d51ceb3e3107996b3ceaa647022946e7b2f00

  • C:\Program Files\NetSpot\runtimes\win-x86\native\WebView2Loader.dll

    Filesize

    115KB

    MD5

    27cd42c5365cdc6fde24835781af9ed0

    SHA1

    9ff49013b5d8b461915f4f6dc898d5e242cfba4a

    SHA256

    c36eff8a620af46b8dfe937c690ea12e06698e348ad86180627b52f1e9901863

    SHA512

    820c52225d103761b335c80a7c657292bb12f0eaebce81bd300213a8cdfc844303a562e8f4c6027ab7f74c14bd328bbd9fee978534c7474d44e665f723f6c1e2

  • C:\Program Files\NetSpot\x64\Act.dll

    Filesize

    2.4MB

    MD5

    9de2117b771fbe3db563298e76bc1a47

    SHA1

    e9c91ac3c1acc5374f83861b8256d9c62a437dbb

    SHA256

    5dde7f942d34ad670c84076d2b7cabf03b0febbc98b46c235d3a722f3a2cd003

    SHA512

    f0b4ca9d38ecf11d9806da4157f96599ba3882b5266efcb0849fc793eb7a429d2075ecc9b1003df2e585c841cd041f6d5cecc32a6c7962fc854dc669f8be41ce

  • C:\Program Files\NetSpot\x64\MuPDFWrapper.dll

    Filesize

    2.1MB

    MD5

    2058db99a7d65a998546cf70b37e18c2

    SHA1

    266b61c80dab56bac3d3f5872e0a4ea9592e3dd2

    SHA256

    7a2c7bdae4ca6dae0470b64272e373b678599d1340fac8d6689a0aa49ebb02fb

    SHA512

    19b379d6d08c2058944175d81369f68ca59431f10e758d7b3a95caf0327af073a960e7b2ae1f86007893b4fd418a77ecdec8602d95b8c01a51d74f6d447b78f2

  • C:\Program Files\NetSpot\x64\Predictive.Interop.dll

    Filesize

    198KB

    MD5

    d8a3c49fec15bdf9fcde7f8b5f61da28

    SHA1

    1539b363f037851d1526381e705213f7a696d250

    SHA256

    989e9e27ed7d9994f79563535c7304fcb9b6cc30ea4099e63e64375d662c209b

    SHA512

    ef61f5ab5409c8234bd2ae58b6a6cd50a9ca61db46344e5d0992a91263dd07bf11bafbefa3267a69f99014ddef0ec8c08eb2789c3953fdfcf231b9021707206e

  • C:\Program Files\NetSpot\x64\SQLite.Interop.dll

    Filesize

    1.7MB

    MD5

    23b6868d1e0bd113ed7e31bcc3f370a4

    SHA1

    ab545d00d670a8c7019d13ad6393faf30266ba49

    SHA256

    fdfd885c1d83312d58dfc0eee34b9b222cc6f163465ef1383611d9a6e02bc363

    SHA512

    3b887470be5ae9e6282118abfd820cc638e2749eadfe5e57016120a5126e28cda960d739ad6e61c359e8f42dfe9c6611363859a784ef692a085093ac89a8e02b

  • C:\Program Files\NetSpot\x64\cygwin1.dll

    Filesize

    1.8MB

    MD5

    6d6c0b04acf537e262f43c41de65e0bf

    SHA1

    f416b19b07e083488cce5e119467e06ef5fcf1a4

    SHA256

    c43a519732a6b2e9d707be35ebb026c9588f76d4f1a76f6f24c4a525d94bb3f4

    SHA512

    4a3a5598f4b1850445eae041034939698e1f84f39d247465c9e327047a82880f073e73b83170cc219bd5019ccc1e685e923afeed25b638dbfc0324b5311eaa0b

  • C:\Program Files\NetSpot\x64\iperf3.exe

    Filesize

    468KB

    MD5

    95139f73164a85f1bc22d86f647314a1

    SHA1

    4245ea0ab7e7281804420656343078f03181b5ff

    SHA256

    a1394aae3c6fc1912753f1b58498fc4640c70a2bcee25c0dbb99adae613ffd77

    SHA512

    8bdf40ed3c63467af8e58a8946ffe90c195bd880c4715b03908cf6e91bf33fd08d8a0e8e70226e2aa89caba8d550dbfdc32f6bf70048bdcd43490c9520d6308a

  • C:\Program Files\NetSpot\x86\Act.dll

    Filesize

    1.4MB

    MD5

    82bf4ebd8f434e8ffba3787487ef3b6b

    SHA1

    9084b21450879ab5d5cf25aac212f1bcffda70fe

    SHA256

    0118d2baf9a593d5df99cd0d1b69c14af2bf80e8df2f99ab3487834379fbd812

    SHA512

    ae8b8b826790468ce87ef9b6271ae91efad70f0d3770898a43e1b05bac18a375b98c033d8572a7e91ca89260aaa47c4a39bfdf012b89707bc2fd3292cc9abbae

  • C:\Program Files\NetSpot\x86\MuPDFWrapper.dll

    Filesize

    1.6MB

    MD5

    db8959501aba3071d2da3fb2f6236a49

    SHA1

    a228d1adfd86b2a86d1fd50db6fb188cae7c5e48

    SHA256

    aa033a0a5500f6440b82ee124cb2d3d60817c585a8958620abb9c1b2f05c15d3

    SHA512

    a903653551709b827d2746cbe5f9da265374d932fc0edf7cc8bf10814af3fba6c3509bb6922d1d3ba6efd82353d823fad378fa610647e6521d6c8082c1407e91

  • C:\Program Files\NetSpot\x86\Predictive.Interop.dll

    Filesize

    159KB

    MD5

    3e5a1886daa8e9c616b26c385b4cccb5

    SHA1

    9f14ad21b484838d39a34572af9b09a06b76165e

    SHA256

    ad78ae7a9ca944bae7b1c69b8c3195de6564f73e5162105fb1fe8b8d552757ac

    SHA512

    f5d55e0c11f22ccc1e304fbf2f78637c02547c4bb254382402fb474398c431ba61fc0b91e40b4b52ee9150fd0347a256170c8b32ae3b796f0a3c71aa5796a698

  • C:\Program Files\NetSpot\x86\SQLite.Interop.dll

    Filesize

    1.4MB

    MD5

    9d5b23129814f7bf75eef40959d8e0b8

    SHA1

    271ba551860020133d2676ac7d74124d9d8084fe

    SHA256

    c7cd79a8c8aa4d88ed55373e76bfb317e0c5948c16ba4ff6b4f89e2c8bf94b13

    SHA512

    09dff134e10f729eb551f578276c58b9eda29b2aa7bc1d4efb30632260cdc0b10b0fec02286e19c65c907e1739a93610117f6277496fccccadfaa570755cd79c

  • C:\Program Files\NetSpot\x86\cyggcc_s-1.dll

    Filesize

    118KB

    MD5

    e730a3c232afb8d3307392822f25f527

    SHA1

    026c60a10f5ef1015f2a0deed36d982bb571d492

    SHA256

    70bff916fa1615b518ba07597fbdb099508e1809b063adab8198b2a1a41f4698

    SHA512

    89513c137369405e4f15533ee4859fb6ed18323774789d004e08cd26db38fd8b0d051f1b9fb0169fa3b7824a467a504531c39fa570619d0431e46ead4ce45dba

  • C:\Program Files\NetSpot\x86\cygwin1.dll

    Filesize

    1.8MB

    MD5

    c33684a582f5ee44e3690a4ea4d05357

    SHA1

    f71b46e37817bd85a46bb51940dbf55ce5200a1a

    SHA256

    99a7aba0b2f6386a36d454a036f17d2414c06998bffcef7deff5c3b73b42f1ee

    SHA512

    0cbc4f6b5fef2f22f71268a6759c1690afd0f39f077d260b5f8cd7750d2910f1f1489f4ac6396061c94e20a6da38c61f3e1bced413c0d23924275306f5518758

  • C:\Program Files\NetSpot\x86\iperf3.exe

    Filesize

    401KB

    MD5

    f9f9b2cc233e1d6c3ee9824a2a65de63

    SHA1

    0ab051390a042b9ba92b9872458639cba126266d

    SHA256

    2339cdfb65f217642ba06fb0ec0b75b851f08c6d55e458565e00b354904555d6

    SHA512

    588be994c1c9d41ebe36e3bf3d884b7894ecbd0f2676251d3c1274861cf38b5a892f29f414f86444cf2dd948aa6be743e9911cbadd7ec2cb05566682c022fd18

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\4pi53xqk.newcfg

    Filesize

    7KB

    MD5

    00ad65a338ddd5cab4be188559e6e7c6

    SHA1

    9829e927f05aa74ce7ba9bb604d43bb817fbc1c4

    SHA256

    d84cd0a193442193b1af332f694da9293265e1bd5164b6058fef1ac223d9e212

    SHA512

    48a62f4bf313ab138d87ecb536d009195f73f1f344abf50302a6158cc2ccbc27d96f417cbd77956693588b450e3d151d6f160906d2eb444a795988c5139fd00e

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\avh44bju.newcfg

    Filesize

    2KB

    MD5

    edd82a71cd4e2cffa16ba4a5765b0031

    SHA1

    c0e0c46fded395e89eb1811407addfb5822c3200

    SHA256

    13827e8069a7428beac96168fb14b97f19502f6f0f02a35517833ef7bcbb037b

    SHA512

    8dd9ab0846e44f5e801e60a8bdbf7626cc64213986724193069ee0a66ef1931676bffcd5e011ea4259aa827d32550268191e615f0aad39d55947c249dacceb73

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\b05ynh21.newcfg

    Filesize

    7KB

    MD5

    9e915be73cdd0db125dc53145a0bdbe3

    SHA1

    de2a269577f6caf18546659fe42dffb231af4b6f

    SHA256

    8541f5ce24f3387c3ef76dfa1812cccb11fc8b89d82bb8bec312a667e4d3cb03

    SHA512

    0f10d8f96b949d8f17fe56386a4c4c45ae3215c0bb7243ac1e5c9b62769e39abe38034ee5fcdd2cf64e47ae5e23b36de5990b2ba62b0dc1a056f5dcb59e08c84

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\j0jkean3.newcfg

    Filesize

    7KB

    MD5

    b0bd95abbeccdbd02f99752e3d0d03da

    SHA1

    2bcf0f2ae6c94c6b333c5c199aa73688d31a0da7

    SHA256

    9fa225409fd955ddcb08828a59800cd32cee997460a55c8a7298653d44f6609b

    SHA512

    5288b4343b94fb1f25e70daab4b89aaed80f4c632af6619f6da128891d0274fbca6eed7b1b964963ebcf4565db39cced728b9e41053a8c379fafec28708e78f4

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\jpyxm1yk.newcfg

    Filesize

    947B

    MD5

    03fd32c05c0c35e19b524bf821208bb3

    SHA1

    812f81dd62aa9f9d8c80e7ac6cbbb12deeb62ff7

    SHA256

    c3041f44464db762686929b976dbaef01c1c729ae7baca0af6b64c41d67d4ba2

    SHA512

    0e7c52989bc32beceb89b1578df08ce58922952c25b8f7bc3d0dad7c191e979fdf566e85a9037351e1ed1d4eff62078a5b1c269febb74a53ff0d50ebf6dec3a9

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\ubwcmb03.newcfg

    Filesize

    1KB

    MD5

    76d3c2147e8dd3666375acb20d038cf3

    SHA1

    5544dcd27ad72a48e7bd93da8e77fb49fb2d7d94

    SHA256

    9413349cef6102222c7c9ee658757f4b9928eebdfbc9646dcb933b2d5ccaa50e

    SHA512

    99110524edf99f7e69cfb00a70f9e6bd5d91b178a0a2ce2cbec255949bfce1b87b850fd08aa0421ef379082a5c48ffb048037172f68bb2d80688d57eacce937c

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\user.config

    Filesize

    816B

    MD5

    bc08f32360fb3833e6e54a3f7ceb8aa4

    SHA1

    57095099dda91bc397373ef76a60c0cbf5eb6b96

    SHA256

    5ca7b6a555a3acc55e56c5f14d7b0e0168f02db532abcdf5d927e17d0df2a026

    SHA512

    410214dbec867d75f938c750b8ce086191e7a3443048c3bb241dcfc3dd01f0ddedb85fe3fb4150f6420c1cf85ee7564c93a9c10163764b59f4e02cd27710d7f2

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\user.config

    Filesize

    2KB

    MD5

    858f8fb99ca38edbac61a5c773eb542e

    SHA1

    3158741bfcb4967a28cac8dc665d313cbab48e2d

    SHA256

    6cd58079d9ef4fbe0b465c6449305c98dc24c65407545c0dd2a3909f2d809d3f

    SHA512

    7d757e59daf2b0cef8a59c148ff4d093696a8e41863fa177892b7592076c51d97da103ffe52f197074fd93b2fff3faec9b798aaec3957614d3b66040d720e96a

  • C:\Users\Admin\AppData\Local\Etwok_Inc\NetSpot.exe_StrongName_0jhw1fpaucqhjjvuryn5slg1mxkclhg0\3.1.0.478\v4g3kq10.newcfg

    Filesize

    1KB

    MD5

    3dc47f6137cd6ae8193266702d37edbc

    SHA1

    f68132fe4ab8a7b65a2dcaa499ea4e6c39bab18a

    SHA256

    6f630866ed68c65ff2d486dbd0d901d467009e75cd1840ce9286f1fd3b8a4a2c

    SHA512

    62bb4363f5f7a676bc1807f332a28ad7f3b4d86adeb8363db65cd050fd2bbf12eccf1303ebad356ebc1605d939823ba9ac200af8a86dd0a314d08a1132a5bb80

  • C:\Users\Admin\AppData\Local\Temp\is-U0B8N.tmp\NetSpot (1).tmp

    Filesize

    3.1MB

    MD5

    2498951c33db1793078fda96e0a95feb

    SHA1

    229b894ba2be8efc3d84438de4ed23d3c9fcfc22

    SHA256

    5fa2ff5eda3e98b26d0c84c4fd11f255fa07e97b5a9bbd046bfef70854b0e3df

    SHA512

    342f778d82dc3143a56897a6cc4b6ab652d328b51f6f387dda7823e521b553c73626f0d82ee8b8f1c2ca512a188d03846652952a4eb97ffd49d759805ee4132e

  • memory/984-171-0x0000025464CF0000-0x0000025464D28000-memory.dmp

    Filesize

    224KB

  • memory/984-344-0x0000025466530000-0x0000025466538000-memory.dmp

    Filesize

    32KB

  • memory/984-181-0x0000025464CD0000-0x0000025464CE2000-memory.dmp

    Filesize

    72KB

  • memory/984-183-0x0000025464C90000-0x0000025464C98000-memory.dmp

    Filesize

    32KB

  • memory/984-187-0x0000025466510000-0x000002546652A000-memory.dmp

    Filesize

    104KB

  • memory/984-185-0x0000025464CB0000-0x0000025464CC0000-memory.dmp

    Filesize

    64KB

  • memory/984-407-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-175-0x000002547FE50000-0x000002547FEEE000-memory.dmp

    Filesize

    632KB

  • memory/984-173-0x0000025466540000-0x000002546658E000-memory.dmp

    Filesize

    312KB

  • memory/984-199-0x00000254664F0000-0x00000254664FA000-memory.dmp

    Filesize

    40KB

  • memory/984-169-0x0000025482690000-0x0000025484ECA000-memory.dmp

    Filesize

    40.2MB

  • memory/984-201-0x000002547FFC0000-0x000002548000A000-memory.dmp

    Filesize

    296KB

  • memory/984-197-0x000002547FB00000-0x000002547FB1A000-memory.dmp

    Filesize

    104KB

  • memory/984-164-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-163-0x00007FFA0EE70000-0x00007FFA0F932000-memory.dmp

    Filesize

    10.8MB

  • memory/984-162-0x0000025464760000-0x00000254647D4000-memory.dmp

    Filesize

    464KB

  • memory/984-369-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-368-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-367-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-366-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-365-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-189-0x0000025464CC0000-0x0000025464CC8000-memory.dmp

    Filesize

    32KB

  • memory/984-193-0x0000025464D30000-0x0000025464D3E000-memory.dmp

    Filesize

    56KB

  • memory/984-195-0x0000025466590000-0x00000254665A4000-memory.dmp

    Filesize

    80KB

  • memory/984-191-0x000002547FB30000-0x000002547FB52000-memory.dmp

    Filesize

    136KB

  • memory/984-204-0x000002547FBC0000-0x000002547FBE0000-memory.dmp

    Filesize

    128KB

  • memory/984-334-0x00000254800D0000-0x0000025480182000-memory.dmp

    Filesize

    712KB

  • memory/984-335-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-364-0x00007FFA0EE70000-0x00007FFA0F932000-memory.dmp

    Filesize

    10.8MB

  • memory/984-203-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-347-0x000002547FBA0000-0x000002547FBA8000-memory.dmp

    Filesize

    32KB

  • memory/984-340-0x0000025480040000-0x0000025480062000-memory.dmp

    Filesize

    136KB

  • memory/984-342-0x0000025466500000-0x0000025466508000-memory.dmp

    Filesize

    32KB

  • memory/984-343-0x000002547FBF0000-0x000002547FC00000-memory.dmp

    Filesize

    64KB

  • memory/984-177-0x000002547FEF0000-0x000002547FFB6000-memory.dmp

    Filesize

    792KB

  • memory/984-345-0x0000025480190000-0x00000254801C8000-memory.dmp

    Filesize

    224KB

  • memory/984-346-0x000002547FB20000-0x000002547FB2E000-memory.dmp

    Filesize

    56KB

  • memory/1260-5-0x0000000002930000-0x0000000002931000-memory.dmp

    Filesize

    4KB

  • memory/1260-8-0x0000000000400000-0x0000000000729000-memory.dmp

    Filesize

    3.2MB

  • memory/1260-101-0x0000000000400000-0x0000000000729000-memory.dmp

    Filesize

    3.2MB

  • memory/1260-161-0x0000000002930000-0x0000000002931000-memory.dmp

    Filesize

    4KB

  • memory/1260-166-0x0000000000400000-0x0000000000729000-memory.dmp

    Filesize

    3.2MB

  • memory/2044-7-0x0000000000400000-0x00000000004EF000-memory.dmp

    Filesize

    956KB

  • memory/2044-167-0x0000000000400000-0x00000000004EF000-memory.dmp

    Filesize

    956KB

  • memory/2044-0-0x0000000000400000-0x00000000004EF000-memory.dmp

    Filesize

    956KB

  • memory/4684-339-0x00007FFA0EE70000-0x00007FFA0F932000-memory.dmp

    Filesize

    10.8MB

  • memory/4684-338-0x0000023671D00000-0x0000023671D10000-memory.dmp

    Filesize

    64KB

  • memory/4684-336-0x00007FFA0EE70000-0x00007FFA0F932000-memory.dmp

    Filesize

    10.8MB