Analysis

  • max time kernel
    127s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2024 18:35

General

  • Target

    Driver_Updater_setup.exe

  • Size

    6.5MB

  • MD5

    60eadf6552fb282c9dd437890c0b5e24

  • SHA1

    11d401803530793093a7e01e54ad627d72b3065c

  • SHA256

    0e056015ea77714ef6307709779bc9b7ade3a0e3e730d6cee39e298056d9811b

  • SHA512

    b4cc19f0ac5f333c73b1cb592276243f64ba44ba8b81e61bbf3d475c822b2faa18dad48a9795e6589c97ae12d4ff6c2de3a4d207ac3aae7ad4684d66d72916ed

  • SSDEEP

    196608:Lw0d6YbAcnuLtG8ltisbd2WTXwLw/fDXGhQ/vPn:KOAlhlIslUMDXGhQ3Pn

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 8 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks system information in the registry 2 TTPs 2 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 6 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Modifies registry class 26 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 40 IoCs
  • Suspicious use of FindShellTrayWindow 30 IoCs
  • Suspicious use of SendNotifyMessage 27 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Driver_Updater_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Driver_Updater_setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Users\Admin\AppData\Local\Temp\is-3C6UF.tmp\Driver_Updater_setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-3C6UF.tmp\Driver_Updater_setup.tmp" /SL5="$7024A,5854474,811008,C:\Users\Admin\AppData\Local\Temp\Driver_Updater_setup.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5044
      • C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe
        "C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe" /INSTALL
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:456
        • C:\Windows\SysWOW64\schtasks.exe
          "C:\Windows\System32\schtasks.exe" /Delete /TN "PC HelpSoft Driver Updater Schedule" /F
          4⤵
          • System Location Discovery: System Language Discovery
          PID:4476
        • C:\Windows\SysWOW64\schtasks.exe
          "C:\Windows\System32\schtasks.exe" /Delete /TN "PC HelpSoft Driver Updater Monitoring" /F
          4⤵
          • System Location Discovery: System Language Discovery
          PID:2372
      • C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe
        "C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe" /START /INSTALLED
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks system information in the registry
        • Drops file in System32 directory
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        • Checks SCSI registry key(s)
        • Enumerates system info in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2720
        • C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe
          "C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe" /TRAY
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:884
        • C:\Users\Admin\AppData\Local\Temp\tmp295D.tmp_collect\PCHelpSoftDriverUpdater.exe
          "C:\Users\Admin\AppData\Local\Temp\tmp295D.tmp_collect\PCHelpSoftDriverUpdater.exe" /COLLECT
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:1424
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://store.pchelpsoft.com/clickgate/join.aspx?ref=pchelpsoft.com&ujid=n4l4AdUDqyE%3D&uid=1020464&cmp=ADWORDS&mkey1=PH_DU_ESC_WORLD_PP_GO_CO&key1=_&key2=__DRIVER_GEN&gclid=EAIaIQobChMI3866g_H6iAMVHouDBx2eYi5aEAEYASAAEgJP7PD_BwE&msclkid=&src=&wID=&affcookiename=&mkey5=offers.pchelpsoft.com/driver_updater/&HostBrowser=ED&software=offers-driverupdater&mkey4=21867b89-5211-f2c4-f9f9-2d06afd134e8&visitorid=21867b89-5211-f2c4-f9f9-2d06afd134e8&mkey3=win_scan-reg&mkey6=0&mkey7=NO_TRIAL&mkey8=4
          4⤵
          • Enumerates system info in registry
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:4804
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc866246f8,0x7ffc86624708,0x7ffc86624718
            5⤵
              PID:232
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
              5⤵
                PID:1548
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3
                5⤵
                  PID:5088
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8
                  5⤵
                    PID:3096
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
                    5⤵
                      PID:4960
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
                      5⤵
                        PID:400
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5492 /prefetch:8
                        5⤵
                          PID:2412
                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5492 /prefetch:8
                          5⤵
                            PID:3744
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
                            5⤵
                              PID:3352
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
                              5⤵
                                PID:4140
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
                                5⤵
                                  PID:1028
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3744 /prefetch:1
                                  5⤵
                                    PID:3408
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
                                    5⤵
                                      PID:4712
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,2055553129453055866,14269824129402060066,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
                                      5⤵
                                        PID:4788
                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\DriverPro.exe
                                    "C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\DriverPro.exe"
                                    3⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Drops file in Program Files directory
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:5092
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:3864
                                • C:\Windows\System32\CompPkgSrv.exe
                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                  1⤵
                                    PID:4140

                                  Network

                                  MITRE ATT&CK Enterprise v15

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\7z.dll

                                    Filesize

                                    999KB

                                    MD5

                                    6de20d75ed981894ff5b8b89ccbc7499

                                    SHA1

                                    066bfefdb6a22fcc69d8cd7b22b9b9657c4f8e73

                                    SHA256

                                    23cc17c0e8c24f8084cd8a396e9aa33cb3e766d8b93cae54fc3857af825e7f36

                                    SHA512

                                    1e9766a3102da84673779e6fe597a2e301d0c770754bfa943897fa5449b21403f7e0e05c110ba0b8f84b73d791ce37e5f01c3c58f8304b86bfc0fc492e604aff

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\English.ini

                                    Filesize

                                    50KB

                                    MD5

                                    f5b8c34947247058f621bdf996c3cc53

                                    SHA1

                                    6d306b9744feb2678a14061cb66f1e7f51a4c14a

                                    SHA256

                                    d65a51902e7dc17956fd538e021fa7895fbcf542764948a8030e96a9ab1d6442

                                    SHA512

                                    f4445293dfe5227f2dec56cffcae26eab5935ed9be98f71fe19ebccefcda641202245f959f25c5a9e331bbf76f382f7f5c59d52d468af732bc9acd0f6dd2d9f6

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Brazilian.ini

                                    Filesize

                                    17KB

                                    MD5

                                    59fdee32d3f9b78f5584b0f41b0fd6f7

                                    SHA1

                                    cd29d4fd4868027203e05aaac7540e3b56b76ae3

                                    SHA256

                                    030e0280563f4e6cc76dc47fa8143fe2cae26684bf657e836fa250d6a44f8710

                                    SHA512

                                    f94e38fe71227f055830124baa9b2aa5707ff4680f527bd10a71a73f43e5888056ec83ce77bc3097ed945d89861efdf44d2450fb905388bc09c4fb00c341e2ea

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Danish.ini

                                    Filesize

                                    16KB

                                    MD5

                                    e105e39bd46b29fc3d9c8a45cc93b1a8

                                    SHA1

                                    e8d29b02e57e223feea62b0bae930df9af064dd1

                                    SHA256

                                    338afdb73932bfbd15c2627df805c5838efc1a0e624e84e7311389bdfb1fd54e

                                    SHA512

                                    873f1cb99e02885a9f85b8ced3c0dd404f652b974f421bef77e223fe590488cf1202a55f48f784793cb34f68565a31e06d52496ba3aad8b52ff1287816c1ee09

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\DriverPro.exe

                                    Filesize

                                    5.2MB

                                    MD5

                                    98ff049770433852a64f027caa567e71

                                    SHA1

                                    1c2589dfb5bea24fb439c333f1fe7bfb9719bd20

                                    SHA256

                                    012da8993f671af5ff41ea38577a25822268763b766b17fa88398ec23e34aee5

                                    SHA512

                                    c569301533bf64b5072d49bcd7a82f2c57dc877158345c2c8056842b98288935aa088a96edaf5f2d955a984d8087013760307e4a18b52a5c7892269c6b3e09d2

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Dutch.ini

                                    Filesize

                                    17KB

                                    MD5

                                    094069998ccb29d5a56a4e605394a639

                                    SHA1

                                    440b4ecbff42c32d1ea1f299001f38675ac0190e

                                    SHA256

                                    c2b9ef60261365303b536258831c93fc1804e09e1bb01a02b010fa7878cbd22e

                                    SHA512

                                    6e6f443e6b744e2b62989cb92e8bb7561e5ef8aaef46dea35529107bdbce028894d0e8a150fd66f7ff1b287dce086fcf3b9f8defe3b985e73ae74bfb2431d21f

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\English.ini

                                    Filesize

                                    15KB

                                    MD5

                                    1b2ffa92f211d9d0b7cdb536e99ce4b3

                                    SHA1

                                    ec5b4885556194540bdb4a0166adbd081b591fae

                                    SHA256

                                    10d7845b4f5ce17da1115eb60b054adaa32f424e349b21d8a46682eecc1b835e

                                    SHA512

                                    86ac865a88a438bb4035b0b5473354b8aecd9963a79c67f5725813a585a0b94eb1ed049903fc5e8d8495d274fd23b88bdc7ac7c263e4c18e1c2492066873fa79

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Finnish.ini

                                    Filesize

                                    17KB

                                    MD5

                                    07ace8db776a5db0a639fa6be292a277

                                    SHA1

                                    11b8003a8a5382b8e3dcd3b002b9de254f4c83d4

                                    SHA256

                                    e6524a50756ca57f607acba31184b493d04030b31455ecd7d9ecdd9f875a6805

                                    SHA512

                                    345071223110b19bb0b06e261929be7fd9c9249e7960296ad471bd86c28c605c5f9b9c3d3bd0123e4fb6d59badf80f077882b06cd78f0d6a4a47ecc035d2a348

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\French.ini

                                    Filesize

                                    18KB

                                    MD5

                                    d0d011e52fb74218b602003c376d94b3

                                    SHA1

                                    3024e6bd626d6dc3a684295e733eac740d2c53fe

                                    SHA256

                                    0895c6e68dd04cdc888e93a82b60d59d807eb24b8002c2bdc8998bacc6246bee

                                    SHA512

                                    8ebd6f8e6dc9b987c161d44b505e29b1840442cc2b46e67239a3aa33e1fa2257b9726c36a9527e0e9f17001ca02272f7ddf5676b36ec27472936a5c8f30c8eb1

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\German.ini

                                    Filesize

                                    18KB

                                    MD5

                                    9f25fbf2d9d6db03a387895b9ad147b4

                                    SHA1

                                    42ffa865b058e4dbe41059c5c03b09ebe41cb7a6

                                    SHA256

                                    67d2a2452dd77fa8deda9e1d5cf5710eeadc5ef29a85b7aac690420db2cbb62d

                                    SHA512

                                    3b935261a4180e58464886355123193edf446512ecb61b941e3cffc2062ea51399802a4873760e35696e35afedfb9e647a904927f2cf4171e64b040bc29230a5

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Italian.ini

                                    Filesize

                                    17KB

                                    MD5

                                    123b66fc5bdda63a8bba1b580511f6ac

                                    SHA1

                                    abba14dfa8c91c0c98a2659a9e6751cb98383921

                                    SHA256

                                    f809d4ea37d7c1d42c5d8ffe55b1bdeaa9065b2313b53810400297f70efecd44

                                    SHA512

                                    2a942d9cbf31b3e6a30f66c6445ffe1c18582826c0a9f1d35268e99193b590762adc9f6aa14498b39285da873ea3b6ec87a3c48a79eafe7c4c2bfdc8634910f3

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Japanese.ini

                                    Filesize

                                    21KB

                                    MD5

                                    daba71201d5e8859ff518008a23bf1fe

                                    SHA1

                                    f583f65604c1793d90c5b4ba72145f45af0894d7

                                    SHA256

                                    cb73b7514d23b9958735a8bfdecbd5d77571be9cc23da9bb9724b01b9116e602

                                    SHA512

                                    d187f38e7ab632656bb5fc3baae5bbbcf521a9f612e09dd03c536bd0c03482eb7a42116380aec1bfbf2b462f88c86cd7c29cc02e4f0030f2153edabf1e031dd4

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Korean.ini

                                    Filesize

                                    18KB

                                    MD5

                                    a1aaaf95ea726ad6d5bb5e3ec030be59

                                    SHA1

                                    f1b2341983c7d2a0a81b7f5786865219aeb22ca4

                                    SHA256

                                    52bac3272f720b51fad93ac34cb9f244522752e82c833c7eb6edebb960d32369

                                    SHA512

                                    c3db2fb4378733d7cca8d7dee651cb096fc6cf01dca8203643aa8cd9a6db0f411b222321ea51aac8361e2bd732c546a6cf7eb5f7cfca5f1e34692fd1e5dfd48e

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Norwegian.ini

                                    Filesize

                                    16KB

                                    MD5

                                    1f35efcde6db4dec93c94bba45be4542

                                    SHA1

                                    359a683c1c959c0ad5cf7f7ead2a463fe4747842

                                    SHA256

                                    1902747d9c60329c5752b869c1adf85c701b533471cf3c6c980f736d7551c4c4

                                    SHA512

                                    d243d4ecaee6ad2ef06a73291db82ca9763b1d8f7a93c0f07b2b0f7b71a85b5773cfd99962aed6b2c600d86a228a5dfdbf17aee12106e5dd6dc9fedf6505a4c3

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Polish.ini

                                    Filesize

                                    17KB

                                    MD5

                                    85a03f193e27125d605b19804b43e0bb

                                    SHA1

                                    70d28931c8f5f19b59b1e719f1183a79f69efa62

                                    SHA256

                                    4805389183887f3636646cb5897371bccf7d683b4e7cbd50e35d2675e1d7fac2

                                    SHA512

                                    591c555a75ef380048583a4cda16888b2005dd103edfa2b4aea0b8aed459102f3a6781d34e4a2f533b25faaabefa980aafb546bdf743a55febf03c72c6000fb0

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Portuguese.ini

                                    Filesize

                                    17KB

                                    MD5

                                    b95d52afe2aa053c0096a2567bd3e381

                                    SHA1

                                    9fd928fb9af44e30fc8bddcba4f42a319b567666

                                    SHA256

                                    0e1c55e1acffc117656b552e9dc9fcab1bb5d4c8d15fdfaadedafe21222c0aea

                                    SHA512

                                    5d6fefdab72dc5edae981a52a809eb840bdfb6f834f7881a7ac95d99fb4692e8ee1b66709696020564cd3f3c4bf13b1b2d01228f924272c8097dee7e02a3add1

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Russian.ini

                                    Filesize

                                    25KB

                                    MD5

                                    f1e275534fe7d59ad3bebfda230d7370

                                    SHA1

                                    cc11725efe67239f62e0d3ae063a27576ef67db3

                                    SHA256

                                    c9e0b64103422fdc3f6a31ec2300b58e9540cc21346a0620c9f0901d16bdc405

                                    SHA512

                                    b6045f90ee2e16d15a321c149beab0d91f6e4603a9582d1efabcccdaff53bb0aca8a7ca34219b19511f9a649b11fe35cc41ecb41989c29702470d1decf5496c1

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Settings.ini

                                    Filesize

                                    126B

                                    MD5

                                    77d8771a751ba0d495200f339872ef85

                                    SHA1

                                    533acd0f129881feaa756fb79dde5d023f6bcede

                                    SHA256

                                    0166b6cd9fa3a3b030681c23b3d2399148a9ae0fa945ea5c39ff0b87f18098a9

                                    SHA512

                                    9bdd6655e27b36954fd6127a75bfee92d49ae7d1d553c44f6f67592ebfd147a4c0791b2bdabaa2657916c4621212b20bbb913499fbe3653584de099fd5cd01d7

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Spanish.ini

                                    Filesize

                                    17KB

                                    MD5

                                    839235142fedcf6eaacda727ab05dcb5

                                    SHA1

                                    99d860c34452d31d3c69f37bdb826bb9b45ab478

                                    SHA256

                                    802b866f10646fef8facf3b5b45b714f800aa03a582c76c06d4b9cfe7e164c82

                                    SHA512

                                    c145a8386e41aa9427d7a896aba5c6024daa3d9c2f2041325dc72b5c991aa43c24db0cb29138f0c91833c00528912ec787a5295fb832a8764c1e5f11b71a2dae

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\Extra\Swedish.ini

                                    Filesize

                                    16KB

                                    MD5

                                    1aab81548ef8bfb11b1e81bebee4f19f

                                    SHA1

                                    073a5e57c51153da9454f3097f35f4213fc15d18

                                    SHA256

                                    0b5578d884c760c2d1e4c2d4fb16459f15bc3871a55320e58e1d9d3bfe5a4bbd

                                    SHA512

                                    f84cca8cc024a2c4427f9479aa719a1d0534053aa2dca7d4abd9fe759b32dea3cb91cbdad44d7e0b45f6c04515e3025d4a198704d826071d174e0fec92b71865

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\PCHelpSoftDriverUpdater.exe

                                    Filesize

                                    8.2MB

                                    MD5

                                    21a4dadd5686773fe0ef880c22f07d38

                                    SHA1

                                    6236e9ec7eee10d95b3055a5e473fd2656898469

                                    SHA256

                                    76ec2ea23b6d6cfd69699822a95e9032b9ef8100df19be91357c4e71a1f33b37

                                    SHA512

                                    e8dc6bec5347f6d83cdab1df7683abc0d563603ea08dcd5acccbdb6ac3a6efdbaa88dbdff5c257251eaa1c5311947a581d4a2bd506cbf3fbddba1e46471683c9

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\PlayaSDK.dll

                                    Filesize

                                    960KB

                                    MD5

                                    11a813c0972b740937d3a7e2daf9ffcb

                                    SHA1

                                    4245b5a3c97f725c56a29d745767edebb5e3f15d

                                    SHA256

                                    3f933bced2d9f65d48f7c48715bf286fd431341a74e1ce15d39b7c4c96603cf9

                                    SHA512

                                    9a590dcab0cf7051d04743736ea7a6b74fa0f87539580cc41a58ad33a76574201e7b6d54d5100cbcd262266bc55b053243edd4860a2d43deeb1c164395e4a941

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\sqlite3.dll

                                    Filesize

                                    640KB

                                    MD5

                                    842e8edbfbeffb9ef234a2da6d5980fe

                                    SHA1

                                    f76e944e5ac3c489d987a11a313b41dee3e813f3

                                    SHA256

                                    ec30f1214fa645b8e436142acab6cc9a07f5c4e3414b5e539a832df9237a7bb3

                                    SHA512

                                    1ca9449dffa72b274b842b3a1f2008d3f13c6f423e7ac466e2efb97fe2103e1aea052a5e8a9839083061154fb61ec870fbe8e35164b386a3aa0aaaf8064a0ed4

                                  • C:\Program Files (x86)\PC HelpSoft Driver Updater\stub64.exe

                                    Filesize

                                    398KB

                                    MD5

                                    3892af3a2540cf8567d89f5e52837d6c

                                    SHA1

                                    9f52ec519d454d32a8b446b54b547cbff81cf4bf

                                    SHA256

                                    db6383d6291c8842131ab741217ee4a22685ed87934aa470a22d0c755aa52e37

                                    SHA512

                                    d97ddf70c1f7609def62ba66a0721f0a815ad014c071bf514ab048ea4d7495ad23b8f5e149f0aae17144be3fa8612e1e253acc0a11889673fbc19d6c60e4473d

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                    Filesize

                                    152B

                                    MD5

                                    ba6ef346187b40694d493da98d5da979

                                    SHA1

                                    643c15bec043f8673943885199bb06cd1652ee37

                                    SHA256

                                    d86eec91f295dfda8ed1c5fa99de426f2fe359282c7ebf67e3a40be739475d73

                                    SHA512

                                    2e6cc97330be8868d4b9c53be7e12c558f6eb1ac2c4080a611ba6c43561d0c5bb4791b8a11a8c2371599f0ba73ed1d9a7a2ea6dee2ae6a080f1912e0cb1f656c

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                    Filesize

                                    152B

                                    MD5

                                    b8880802fc2bb880a7a869faa01315b0

                                    SHA1

                                    51d1a3fa2c272f094515675d82150bfce08ee8d3

                                    SHA256

                                    467b8cd4aacac66557712f9843023dcedefcc26efc746f3e44157bc8dac73812

                                    SHA512

                                    e1c6dba2579357ba70de58968b167d2c529534d24bff70568144270c48ac18a48ee2af2d58d78ae741e5a36958fa78a57955bd2456f1df00b781fc1002e123d2

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                    Filesize

                                    528B

                                    MD5

                                    a2d1577f007f5ed212d4adf1f7b13e3e

                                    SHA1

                                    600b50587e15ca2de0d8d6cebf92e89de8cea95e

                                    SHA256

                                    8b9f877748c7d9943a92387728816492486bf1bd9800ff6730170a807c15bc16

                                    SHA512

                                    e06ef7ed428edca9bfed5c9eac759ee995d95860f7ff8bc5a2b40ee6739a7672c956bd43e1ff72bce7e8b43017361eb2d6a811c3d10f760a6e3c8dcf92c2edc0

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                    Filesize

                                    2KB

                                    MD5

                                    6107991084b7701bcc1fe1b63939eb86

                                    SHA1

                                    5146ce3009c0cafa7e18d1566d8fda06672ff3d2

                                    SHA256

                                    176714169e9d3cbcca2d3df58901d0d2b91d6c98c0237729e27cc3ca4fc4cf22

                                    SHA512

                                    83a1640cf177d5bfeadcfb7b610b1e69669db67ac95465da3db1e55866aaa90985ebb81ad3de76f9fc9256ee064ea8ac379ff07d2e5b19a29df3cef58dff8a60

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                    Filesize

                                    6KB

                                    MD5

                                    5c2c300b40b74e86b5168eb3b7816ddd

                                    SHA1

                                    92a82ac6eee99711b7bdf2b84d5fe10b8266da66

                                    SHA256

                                    e5b5e0a2b388885ec144b18580b3b5fe6f45d15966befca14a70805263a731aa

                                    SHA512

                                    35638a2933dd7202a034568bf20216e5b342c06aa3404f0727a74b9be18855bfc1edc759c890d8db9c40276d739a7ceae070a29b4350c9a6ba9eaea608183028

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                    Filesize

                                    8KB

                                    MD5

                                    f935aa6857a62a6185d87c6f02c7d066

                                    SHA1

                                    901973e4b7b34d58a79136fd3bf3cfb4d64e0863

                                    SHA256

                                    01d9c7cf6a63a1f7dc9c3dde9cb01ab25c841bbabc174a4f0e02b53eeaedc311

                                    SHA512

                                    7b657c6398637c1dd123d11b4aaca19b7be35855a12386d8cc33f6a63cafdb00de57e37580830c8ce101dbc08ed7d17b205a5feb01f19313f8ab3dd6b68610ed

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                    Filesize

                                    8KB

                                    MD5

                                    b11e76ffb6a8e330fe5ac4f6475f1ff1

                                    SHA1

                                    0498821f638f9c252ac959361fd7d84440421564

                                    SHA256

                                    196224fc8afaed36945d36d252132e80d87627e28c3bb077fda1f88b711545a7

                                    SHA512

                                    cf729bf5411bc4a184dfe99e8fc58a4f7638e3e43226d634fb4f70f1a41b84ba34c0676d8dffb1f50a77eacd722351c7fea84d009032ed96bf1e283bdbfcef9a

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                    Filesize

                                    16B

                                    MD5

                                    46295cac801e5d4857d09837238a6394

                                    SHA1

                                    44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                    SHA256

                                    0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                    SHA512

                                    8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                    Filesize

                                    16B

                                    MD5

                                    206702161f94c5cd39fadd03f4014d98

                                    SHA1

                                    bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                    SHA256

                                    1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                    SHA512

                                    0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                    Filesize

                                    10KB

                                    MD5

                                    9b8f0b1a26038b8cf85c7907f8fee350

                                    SHA1

                                    d7ca1bdd8dcc21ad511f7b8ee8cf5b01f379b773

                                    SHA256

                                    77550ce04b7a74c18a8086761a3ce4efd2c4683faadcd460b3427f6f19125956

                                    SHA512

                                    394cade04150ce2d14008a37043370e87d9ad249137800c6b3c84e78ee7df7d45b7358de93d0cf892176918f687b89e5458542674b488295e6a9c6929acc348b

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                    Filesize

                                    10KB

                                    MD5

                                    0ed9dadd0bcf06dcaf371e8f8ed3fa0b

                                    SHA1

                                    54698d4f203b9db34469a557e8cca00a68f4d46b

                                    SHA256

                                    c506cb584e78b69a801828523186b48aafb63998ac196ac0e1b033f6f960de35

                                    SHA512

                                    7066987d7c310de8e974ce9216c4577adba256b098ee0fc20706b187831b2c113150c49e05b0bbfb065cddd457d5ba325b6abfcee283411c8a8b7d458b4c23aa

                                  • C:\Users\Admin\AppData\Local\Temp\is-3C6UF.tmp\Driver_Updater_setup.tmp

                                    Filesize

                                    3.0MB

                                    MD5

                                    dfd93de42e9578134afa014f60acbe36

                                    SHA1

                                    9a0e08fd5122a5f7688b05868aa51e4e2c69a647

                                    SHA256

                                    9d2d3263a5b32dbb2dd9532aa571c1e07da9a2df228e5389872df126126bdabc

                                    SHA512

                                    4b6858c06a93e107e9854d4e5892da171d28c069fe7cea465c66e9e5dbb98285d165bf50281d8d00390263b99323222bc7c87017bb24c90c6529a3406faa0100

                                  • C:\Users\Admin\AppData\Roaming\PC HelpSoft Driver Updater\26E484A9F1BFB5EC9DF0894433ED102B521E889E.7z.status

                                    Filesize

                                    38B

                                    MD5

                                    cf25c42f45a3fc92adb23a4fe24daecf

                                    SHA1

                                    2d52571ca1837e970538cabcc3c8fe78ae32ca88

                                    SHA256

                                    d25a2b6fd3c55e9a3932ac6290dd1729f02c90bdffd7cad20661ba20505a06a0

                                    SHA512

                                    a2ba4d33b442053030e8233af7bd64dc230343c8720f62228bb687bbaae5fea805b479e0b7eea7d8bc0ab0c84122b0733859f024ea77d4b4df59dfd0796ac00d

                                  • C:\Users\Admin\AppData\Roaming\PC HelpSoft Driver Updater\Devices.ini

                                    Filesize

                                    97KB

                                    MD5

                                    15a67f3f21661f5f9d878eb1fb869fa4

                                    SHA1

                                    44c2beb2fc08b16015eb637b8aee3325f5666d83

                                    SHA256

                                    d86ed53c4fb8cc92d93aa69edbae8d37c586f3eb29da81f92d4f3aaa6db485df

                                    SHA512

                                    eccf48211a080df27969d4d870ad952f8db82fc596fd777feb16119ba0bcb0b430a9bbf9ed6e9694079f44f226d63cf7f29912e2f7ef7624ccb233b7f43136cb

                                  • C:\Users\Admin\AppData\Roaming\PC HelpSoft Driver Updater\program.log

                                    Filesize

                                    4KB

                                    MD5

                                    6b5f0f89ffb5e296043586039f30a50c

                                    SHA1

                                    ff1e73461eba24446414986a06fd849fd00edf6e

                                    SHA256

                                    e445d58cdfc12a0294da2cc01f3157363db51f62fef303eec31b3a6562dd19ae

                                    SHA512

                                    b103a1d31fbd0128c9eec384c9fd0dadb0b3eee9a885fa0b770559aa2c24f7e296baf57087a37c1457841bbe2a98a33026fc8918623ee30de75f61a53aac3e10

                                  • C:\Users\Admin\AppData\Roaming\PC HelpSoft Driver Updater\program_error.log

                                    Filesize

                                    229B

                                    MD5

                                    fc42b22e1fb58c330c4c696244e49853

                                    SHA1

                                    c8e23fe50e97eb8f95d93acd11f4a45355171253

                                    SHA256

                                    cfbeca7f1d3f677f2d7aaa065f8f6a994008840752f051057a3a1fe97582b04b

                                    SHA512

                                    b589f5ae82952e4fc9dba24f7af0b94240e7140ecf85e48d889978eda9ef121f0b0caf9ff3a57c7a299a75e9296ac489d0f7b91abb66472e801324e7d197d6aa

                                  • memory/456-123-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/456-129-0x0000000060900000-0x0000000060993000-memory.dmp

                                    Filesize

                                    588KB

                                  • memory/456-128-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-195-0x0000000060900000-0x0000000060993000-memory.dmp

                                    Filesize

                                    588KB

                                  • memory/884-305-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-252-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-433-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-297-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-289-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-407-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-271-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-194-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-275-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-293-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/884-301-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/1424-267-0x0000000060900000-0x0000000060993000-memory.dmp

                                    Filesize

                                    588KB

                                  • memory/1424-266-0x0000000000EA0000-0x00000000016DF000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-200-0x0000000008310000-0x0000000008412000-memory.dmp

                                    Filesize

                                    1.0MB

                                  • memory/2720-387-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-291-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-299-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-287-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-303-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-250-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-273-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-251-0x0000000060900000-0x0000000060993000-memory.dmp

                                    Filesize

                                    588KB

                                  • memory/2720-188-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-189-0x0000000060900000-0x0000000060993000-memory.dmp

                                    Filesize

                                    588KB

                                  • memory/2720-295-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-431-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2720-268-0x0000000000260000-0x0000000000A9F000-memory.dmp

                                    Filesize

                                    8.2MB

                                  • memory/2896-185-0x0000000000400000-0x00000000004D3000-memory.dmp

                                    Filesize

                                    844KB

                                  • memory/2896-2-0x0000000000401000-0x00000000004B7000-memory.dmp

                                    Filesize

                                    728KB

                                  • memory/2896-124-0x0000000000400000-0x00000000004D3000-memory.dmp

                                    Filesize

                                    844KB

                                  • memory/2896-0-0x0000000000400000-0x00000000004D3000-memory.dmp

                                    Filesize

                                    844KB

                                  • memory/5044-182-0x0000000000400000-0x000000000070F000-memory.dmp

                                    Filesize

                                    3.1MB

                                  • memory/5044-126-0x0000000000400000-0x000000000070F000-memory.dmp

                                    Filesize

                                    3.1MB

                                  • memory/5044-6-0x0000000000400000-0x000000000070F000-memory.dmp

                                    Filesize

                                    3.1MB

                                  • memory/5092-176-0x0000000000400000-0x000000000093A000-memory.dmp

                                    Filesize

                                    5.2MB

                                  • memory/5092-177-0x0000000060900000-0x0000000060993000-memory.dmp

                                    Filesize

                                    588KB